#2074 remove docker install

* detect release Candidate

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,17 @@
+---
+name: Bug report
+about: Create a bug report to help us improve
+title: ''
+labels: 'bug - unconfirmed'
+assignees: ''
+---
+
+**Describe the bug**
+A clear and concise description about the issue you encounter.
+
+**To Reproduce**
+Steps to reproduce the behavior.
+
+**Debug file**
+
+If possible, please add a debug report. To do that, drag a text file with the debug report in here.

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,4 @@
+contact_links:
+  - name: Have an idea for a new app in the RaspiBlitz? Make a suggestion in the app ideas section
+    url: https://github.com/raspiblitz/raspiblitz/discussions/categories/feature-app-ideas
+    about: Feature and app ideas

.github/ISSUE_TEMPLATE/documentation_improvement.md

@@ -0,0 +1,7 @@
+---
+name: Documentation Improvement
+about: Improvement suggestions for the documentation
+title: ''
+labels: 'documentation'
+assignees: ''
+---

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,7 @@
+---
+name: Feature Request
+about: Enhancement suggestions for the RaspiBlitz
+title: ''
+labels: 'enhancement'
+assignees: ''
+---

.github/workflows/amd64-fatpack-image.yml

@@ -0,0 +1,105 @@
+name: amd64-fatpack-image-build
+
+concurrency:
+  group: amd64-fatpack-image-build-${{ github.head_ref }}
+  cancel-in-progress: true
+
+on:
+  workflow_dispatch:
+  #push:
+  #  branches: ["dev", "v1.10"]
+  #  paths:
+  #    - 'build_sdcard.sh'
+  #    - 'home.admin/bitcoin.install.sh'
+  #    - 'home.admin/lnd.install.sh'
+  #    - 'home.admin/cl.install.sh'
+  #    - 'home.admin/cl-plugin.cln-grpc.sh'
+  #    - 'home.admin/tor.install.sh'
+  #    - 'home.admin/blitz.i2pd.sh'
+  #    - 'home.admin/blitz.web.sh'
+  #    - 'home.admin/bonus.nodejs.sh'
+  #    - 'home.admin/bonus.rtl.sh'
+  #    - 'home.admin/bonus.btcpayserver.sh'
+  #    - 'home.admin/bonus.thunderhub.sh'
+  #    - 'home.admin/bonus.jam.sh install'
+  #    - 'home.admin/bonus.mempool.sh'
+  #    - 'home.admin/blitz.web.api.sh'
+  #    - 'home.admin/blitz.web.ui.sh'
+  #    - 'home.admin/blitz.display.sh'
+  #    - 'ci/amd64/**'
+  #pull_request:
+  #  branches: ["dev", "v1.10"]
+  #  paths:
+  #    - 'build_sdcard.sh'
+  #    - 'home.admin/bitcoin.install.sh'
+  #    - 'home.admin/lnd.install.sh'
+  #    - 'home.admin/cl.install.sh'
+  #    - 'home.admin/cl-plugin.cln-grpc.sh'
+  #    - 'home.admin/tor.install.sh'
+  #    - 'home.admin/blitz.i2pd.sh'
+  #    - 'home.admin/blitz.web.sh'
+  #    - 'home.admin/bonus.nodejs.sh'
+  #    - 'home.admin/bonus.rtl.sh'
+  #    - 'home.admin/bonus.btcpayserver.sh'
+  #    - 'home.admin/bonus.thunderhub.sh'
+  #    - 'home.admin/bonus.jam.sh install'
+  #    - 'home.admin/bonus.mempool.sh'
+  #    - 'home.admin/blitz.web.api.sh'
+  #    - 'home.admin/blitz.web.ui.sh'
+  #    - 'home.admin/blitz.display.sh'
+  #    - 'ci/amd64/**'
+
+jobs:
+  amd64-image-build:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set values
+        id: set_values
+        run: |
+          echo "BUILD_DATE=$(date +"%Y-%m-%d")" >> $GITHUB_ENV
+          echo "BUILD_VERSION=$(git describe --always --tags)" >> $GITHUB_ENV
+          if [ -z "$GITHUB_HEAD_REF" ]; then
+            echo "BRANCH_NAME=$(echo ${GITHUB_REF#refs/heads/})" >> $GITHUB_ENV
+          else
+            echo "BRANCH_NAME=${GITHUB_HEAD_REF}" >> $GITHUB_ENV
+          fi
+          if [[ "${{github.event_name}}" == "pull_request" ]]; then
+            echo "GITHUB_USER=${{github.event.pull_request.head.repo.owner.login}}" >> $GITHUB_OUTPUT
+          else
+            echo "GITHUB_USER=$(echo ${{github.repository}} | cut -d'/' -f1)" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Display the build name
+        run: echo "Building the raspiblitz-amd64-debian-image-${{env.BUILD_DATE}}-${{env.BUILD_VERSION}}"
+
+      - name: Run the build script
+        run: |
+          echo "Using the variables: --pack fatpack --github_user ${{steps.set_values.outputs.GITHUB_USER}} --branch ${{env.BRANCH_NAME}} --preseed_file preseed.cfg --boot uefi --desktop none"
+          cd ci/amd64
+          bash packer.build.amd64-debian.sh --pack fatpack --github_user ${{steps.set_values.outputs.GITHUB_USER}} --branch ${{env.BRANCH_NAME}} --preseed_file preseed.cfg --boot uefi --desktop none
+
+      - name: Compute checksum of the raw image
+        run: |
+          cd ci/amd64/builds/raspiblitz-amd64-debian-fatpack-qemu/
+          sha256sum raspiblitz-amd64-debian-fatpack.qcow2 > raspiblitz-amd64-debian-fatpack.qcow2.sha256
+
+      - name: Compress image
+        run: |
+          cd ci/amd64/builds/raspiblitz-amd64-debian-fatpack-qemu/
+          gzip -v9 raspiblitz-amd64-debian-fatpack.qcow2
+
+      - name: Compute checksum of the compressed image
+        run: |
+          cd ci/amd64/builds/raspiblitz-amd64-debian-fatpack-qemu/
+          sha256sum raspiblitz-amd64-debian-fatpack.qcow2.gz > raspiblitz-amd64-debian-fatpack.qcow2.gz.sha256
+
+      - name: Upload the image and checksums
+        uses: actions/upload-artifact@v4
+        with:
+          name: raspiblitz-amd64-image-${{env.BUILD_DATE}}-${{env.BUILD_VERSION}}
+          path: |
+            ${{github.workspace}}/ci/amd64/builds/raspiblitz-amd64-debian-fatpack-qemu/raspiblitz-amd64-debian-fatpack.qcow2.sha256
+            ${{github.workspace}}/ci/amd64/builds/raspiblitz-amd64-debian-fatpack-qemu/raspiblitz-amd64-debian-fatpack.qcow2.gz
+            ${{github.workspace}}/ci/amd64/builds/raspiblitz-amd64-debian-fatpack-qemu/raspiblitz-amd64-debian-fatpack.qcow2.gz.sha256

.github/workflows/amd64-lean-image.yml

@@ -0,0 +1,89 @@
+name: amd64-lean-image-build
+
+concurrency:
+  group: amd64-lean-image-build-${{ github.head_ref }}
+  cancel-in-progress: true
+
+on:
+  workflow_dispatch:
+  push:
+    branches: ['dev', 'v1.10']
+    paths:
+      - 'build_sdcard.sh'
+      - 'home.admin/bitcoin.install.sh'
+      - 'home.admin/tor.install.sh'
+      - 'home.admin/blitz.i2pd.sh'
+      - 'home.admin/blitz.web.sh'
+      - 'home.admin/blitz.display.sh'
+      - 'ci/amd64/**'
+  pull_request:
+    branches: ['dev', 'v1.10']
+    paths:
+      - 'build_sdcard.sh'
+      - 'home.admin/bitcoin.install.sh'
+      - 'home.admin/tor.install.sh'
+      - 'home.admin/blitz.i2pd.sh'
+      - 'home.admin/blitz.web.sh'
+      - 'home.admin/blitz.display.sh'
+      - 'ci/amd64/**'
+
+jobs:
+  amd64-image-build:
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Maximize build space
+        uses: easimon/maximize-build-space@master
+        with:
+          root-reserve-mb: 12288
+          temp-reserve-mb: 12288
+
+      - uses: actions/checkout@v4
+
+      - name: Set values
+        id: set_values
+        run: |
+          echo "BUILD_DATE=$(date +"%Y-%m-%d")" >> $GITHUB_ENV
+          echo "BUILD_VERSION=$(git describe --always --tags)" >> $GITHUB_ENV
+          if [ -z "$GITHUB_HEAD_REF" ]; then
+            echo "BRANCH_NAME=$(echo ${GITHUB_REF#refs/heads/})" >> $GITHUB_ENV
+          else
+            echo "BRANCH_NAME=${GITHUB_HEAD_REF}" >> $GITHUB_ENV
+          fi
+          if [[ "${{github.event_name}}" == "pull_request" ]]; then
+            echo "GITHUB_USER=${{github.event.pull_request.head.repo.owner.login}}" >> $GITHUB_OUTPUT
+          else
+            echo "GITHUB_USER=$(echo ${{github.repository}} | cut -d'/' -f1)" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Display the build name
+        run: echo "Building the raspiblitz-amd64-debian-image-${{env.BUILD_DATE}}-${{env.BUILD_VERSION}}"
+
+      - name: Run the build script
+        run: |
+          echo "Using the variables: --pack lean --github_user ${{steps.set_values.outputs.GITHUB_USER}} --branch ${{env.BRANCH_NAME}} --preseed_file preseed.cfg --boot uefi --desktop gnome"
+          cd ci/amd64
+          bash packer.build.amd64-debian.sh	--pack lean --github_user ${{steps.set_values.outputs.GITHUB_USER}} --branch ${{env.BRANCH_NAME}} --preseed_file preseed.cfg --boot uefi --desktop gnome
+
+      - name: Compute checksum of the raw image
+        run: |
+          cd ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu
+          sha256sum raspiblitz-amd64-debian-lean.qcow2 > raspiblitz-amd64-debian-lean.qcow2.sha256
+
+      - name: Compress image
+        run: |
+          cd ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu
+          gzip -v9 raspiblitz-amd64-debian-lean.qcow2
+
+      - name: Compute checksum of the compressed image
+        run: |
+          cd ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu
+          sha256sum raspiblitz-amd64-debian-lean.qcow2.gz > raspiblitz-amd64-debian-lean.qcow2.gz.sha256
+
+      - name: Upload the image and checksums
+        uses: actions/upload-artifact@v4
+        with:
+          name: raspiblitz-amd64-image-${{env.BUILD_DATE}}-${{env.BUILD_VERSION}}
+          path: |
+            ${{github.workspace}}/ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu/raspiblitz-amd64-debian-lean.qcow2.sha256
+            ${{github.workspace}}/ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu/raspiblitz-amd64-debian-lean.qcow2.gz
+            ${{github.workspace}}/ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu/raspiblitz-amd64-debian-lean.qcow2.gz.sha256

.github/workflows/amd64-lean-legacyboot-image.yml

@@ -0,0 +1,83 @@
+name: amd64-lean-legacyboot-image-build
+
+concurrency:
+  group: amd64-lean-legacyboot-image-build-${{ github.head_ref }}
+  cancel-in-progress: true
+
+on:
+  workflow_dispatch:
+  push:
+    branches: ['dev', 'v1.10']
+    paths:
+      - 'build_sdcard.sh'
+      - 'home.admin/bitcoin.install.sh'
+      - 'home.admin/tor.install.sh'
+      - 'home.admin/blitz.i2pd.sh'
+      - 'home.admin/blitz.web.sh'
+      - 'home.admin/blitz.display.sh'
+      - 'ci/amd64/**'
+  pull_request:
+    branches: ['dev', 'v1.10']
+    paths:
+      - 'build_sdcard.sh'
+      - 'home.admin/bitcoin.install.sh'
+      - 'home.admin/tor.install.sh'
+      - 'home.admin/blitz.i2pd.sh'
+      - 'home.admin/blitz.web.sh'
+      - 'home.admin/blitz.display.sh'
+      - 'ci/amd64/**'
+
+jobs:
+  amd64-image-build:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set values
+        id: set_values
+        run: |
+          echo "BUILD_DATE=$(date +"%Y-%m-%d")" >> $GITHUB_ENV
+          echo "BUILD_VERSION=$(git describe --always --tags)" >> $GITHUB_ENV
+          if [ -z "$GITHUB_HEAD_REF" ]; then
+            echo "BRANCH_NAME=$(echo ${GITHUB_REF#refs/heads/})" >> $GITHUB_ENV
+          else
+            echo "BRANCH_NAME=${GITHUB_HEAD_REF}" >> $GITHUB_ENV
+          fi
+          if [[ "${{github.event_name}}" == "pull_request" ]]; then
+            echo "GITHUB_USER=${{github.event.pull_request.head.repo.owner.login}}" >> $GITHUB_OUTPUT
+          else
+            echo "GITHUB_USER=$(echo ${{github.repository}} | cut -d'/' -f1)" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Display the build name
+        run: echo "Building the raspiblitz-amd64-debian-image-${{env.BUILD_DATE}}-${{env.BUILD_VERSION}}"
+
+      - name: Run the build script
+        run: |
+          echo "Using the variables: --pack lean --github_user ${{steps.set_values.outputs.GITHUB_USER}} --branch ${{env.BRANCH_NAME}} --preseed_file preseed.cfg --boot bios --desktop none"
+          cd ci/amd64
+          bash packer.build.amd64-debian.sh	--pack lean --github_user ${{steps.set_values.outputs.GITHUB_USER}} --branch ${{env.BRANCH_NAME}} --preseed_file preseed.cfg --boot bios --desktop none
+
+      - name: Compute checksum of the raw image
+        run: |
+          cd ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu
+          sha256sum raspiblitz-amd64-debian-lean.qcow2 > raspiblitz-amd64-debian-lean.qcow2.sha256
+
+      - name: Compress image
+        run: |
+          cd ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu
+          gzip -v9 raspiblitz-amd64-debian-lean.qcow2
+
+      - name: Compute checksum of the compressed image
+        run: |
+          cd ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu
+          sha256sum raspiblitz-amd64-debian-lean.qcow2.gz > raspiblitz-amd64-debian-lean.qcow2.gz.sha256
+
+      - name: Upload the image and checksums
+        uses: actions/upload-artifact@v4
+        with:
+          name: raspiblitz-amd64-image-${{env.BUILD_DATE}}-${{env.BUILD_VERSION}}
+          path: |
+            ${{github.workspace}}/ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu/raspiblitz-amd64-debian-lean.qcow2.sha256
+            ${{github.workspace}}/ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu/raspiblitz-amd64-debian-lean.qcow2.gz
+            ${{github.workspace}}/ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu/raspiblitz-amd64-debian-lean.qcow2.gz.sha256

.github/workflows/arm64-rpi-base-image.yml

@@ -0,0 +1,93 @@
+name: arm64-rpi-base-image-build
+
+concurrency:
+  group: arm64-rpi-base-image-build-${{ github.head_ref }}
+  cancel-in-progress: true
+
+on:
+  workflow_dispatch:
+  push:
+    branches: ['dev', 'v1.10', 'v1.11']
+    paths:
+      - 'build_sdcard.sh'
+      - 'home.admin/config.scripts/bitcoin.install.sh'
+      - 'home.admin/config.scripts/tor.install.sh'
+      - 'home.admin/config.scripts/blitz.i2pd.sh'
+      - 'home.admin/config.scripts/blitz.web.sh'
+      - 'home.admin/config.scripts/blitz.display.sh'
+      - 'ci/arm64-rpi/**'
+      - 'home.admin/config.scripts/bonus.btc-rpc-explorer.sh'
+      - 'home.admin/config.scripts/bonus.btcpayserver.sh'
+      - 'home.admin/config.scripts/bonus.jam.sh'
+      - 'home.admin/config.scripts/bonus.joinmarket.sh'
+      - 'home.admin/config.scripts/bonus.lnbits.sh'
+      - 'home.admin/config.scripts/bonus.mempool.sh'
+      - 'home.admin/config.scripts/bonus.nodejs.sh'
+      - 'home.admin/config.scripts/bonus.rtl.sh'
+      - 'home.admin/config.scripts/bonus.thunderhub.sh'
+      - 'home.admin/config.scripts/blitz.web.api.sh'
+      - 'home.admin/config.scripts/blitz.web.ui'
+  pull_request:
+    branches: ['dev', 'v1.10', 'v1.11']
+    paths:
+      - 'build_sdcard.sh'
+      - 'home.admin/config.scripts/bitcoin.install.sh'
+      - 'home.admin/config.scripts/tor.install.sh'
+      - 'home.admin/config.scripts/blitz.i2pd.sh'
+      - 'home.admin/config.scripts/blitz.web.sh'
+      - 'home.admin/config.scripts/blitz.display.sh'
+      - 'ci/arm64-rpi/**'
+      - 'home.admin/config.scripts/bonus.btc-rpc-explorer.sh'
+      - 'home.admin/config.scripts/bonus.btcpayserver.sh'
+      - 'home.admin/config.scripts/bonus.jam.sh'
+      - 'home.admin/config.scripts/bonus.joinmarket.sh'
+      - 'home.admin/config.scripts/bonus.lnbits.sh'
+      - 'home.admin/config.scripts/bonus.mempool.sh'
+      - 'home.admin/config.scripts/bonus.nodejs.sh'
+      - 'home.admin/config.scripts/bonus.rtl.sh'
+      - 'home.admin/config.scripts/bonus.thunderhub.sh'
+      - 'home.admin/config.scripts/blitz.web.api.sh'
+      - 'home.admin/config.scripts/blitz.web.ui'
+
+jobs:
+  arm64-rpi-base-image-build:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set values
+        id: set_values
+        run: |
+          echo "BUILD_VERSION=$(git describe --always --tags)" >> $GITHUB_ENV
+          if [ -z "$GITHUB_HEAD_REF" ]; then
+            echo "BRANCH_NAME=$(echo ${GITHUB_REF#refs/heads/})" >> $GITHUB_ENV
+          else
+            echo "BRANCH_NAME=${GITHUB_HEAD_REF}" >> $GITHUB_ENV
+          fi
+          if [[ "${{github.event_name}}" == "pull_request" ]]; then
+            echo "GITHUB_USER=${{github.event.pull_request.head.repo.owner.login}}" >> $GITHUB_OUTPUT
+          else
+            echo "GITHUB_USER=$(echo ${{github.repository}} | cut -d'/' -f1)" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Display the build name
+        run: echo "Building the raspiblitz-arm64-rpi-base-image"
+
+      - name: Run the build script
+        run: |
+          echo "Using the variables: --pack base --github_user ${{steps.set_values.outputs.GITHUB_USER}} --branch ${{env.BRANCH_NAME}} --image_size 18G"
+          cd ci/arm64-rpi
+          bash packer.build.arm64-rpi.sh --pack base --github_user ${{steps.set_values.outputs.GITHUB_USER}} --branch ${{env.BRANCH_NAME}} --image_size 18G
+
+      - name: Calculate the checksum of the raw image
+        run: |
+          cd ci/arm64-rpi
+          sha256sum raspiblitz-arm64-rpi-base.img > raspiblitz-arm64-rpi-base.img.sha256
+
+      - name: Upload the base image and checksum
+        uses: actions/upload-artifact@v4
+        with:
+          name: raspiblitz-arm64-rpi-base-image-${{ env.BUILD_VERSION }}
+          path: |
+            ${{ github.workspace }}/ci/arm64-rpi/raspiblitz-arm64-rpi-base.img.sha256
+            ${{ github.workspace }}/ci/arm64-rpi/raspiblitz-arm64-rpi-base.img

.github/workflows/arm64-rpi-lean-image.yml

@@ -0,0 +1,83 @@
+name: arm64-rpi-lean-image-build
+
+concurrency:
+  group: arm64-rpi-lean-image-build-${{ github.head_ref }}
+  cancel-in-progress: true
+
+on:
+  workflow_dispatch:
+  push:
+    branches: ['dev', 'v1.10']
+    paths:
+      - 'build_sdcard.sh'
+      - 'home.admin/bitcoin.install.sh'
+      - 'home.admin/tor.install.sh'
+      - 'home.admin/blitz.i2pd.sh'
+      - 'home.admin/blitz.web.sh'
+      - 'home.admin/blitz.display.sh'
+      - 'ci/arm64-rpi/**'
+  pull_request:
+    branches: ['dev', 'v1.10']
+    paths:
+      - 'build_sdcard.sh'
+      - 'home.admin/bitcoin.install.sh'
+      - 'home.admin/tor.install.sh'
+      - 'home.admin/blitz.i2pd.sh'
+      - 'home.admin/blitz.web.sh'
+      - 'home.admin/blitz.display.sh'
+      - 'ci/arm64-rpi/**'
+
+jobs:
+  arm64-rpi-image-build:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set values
+        id: set_values
+        run: |
+          echo "BUILD_DATE=$(date +"%Y-%m-%d")" >> $GITHUB_ENV
+          echo "BUILD_VERSION=$(git describe --always --tags)" >> $GITHUB_ENV
+          if [ -z "$GITHUB_HEAD_REF" ]; then
+            echo "BRANCH_NAME=$(echo ${GITHUB_REF#refs/heads/})" >> $GITHUB_ENV
+          else
+            echo "BRANCH_NAME=${GITHUB_HEAD_REF}" >> $GITHUB_ENV
+          fi
+          if [[ "${{github.event_name}}" == "pull_request" ]]; then
+            echo "GITHUB_USER=${{github.event.pull_request.head.repo.owner.login}}" >> $GITHUB_OUTPUT
+          else
+            echo "GITHUB_USER=$(echo ${{github.repository}} | cut -d'/' -f1)" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Display the build name
+        run: echo "Building the raspiblitz-arm64-rpi-lean-image-${{ env.BUILD_DATE }}-${{ env.BUILD_VERSION }}"
+
+      - name: Run the build script
+        run: |
+          echo "Using the variables: --pack lean --github_user ${{steps.set_values.outputs.GITHUB_USER}} --branch ${{env.BRANCH_NAME}}"
+          cd ci/arm64-rpi
+          bash packer.build.arm64-rpi.sh --pack lean --github_user ${{steps.set_values.outputs.GITHUB_USER}} --branch ${{env.BRANCH_NAME}}
+
+      - name: Compute checksum of the raw image
+        run: |
+          cd ci/arm64-rpi
+          sha256sum raspiblitz-arm64-rpi-lean.img > raspiblitz-arm64-rpi-lean.img.sha256
+
+      - name: Compress image
+        run: |
+          cd ci/arm64-rpi
+          gzip -v9 raspiblitz-arm64-rpi-lean.img
+
+      - name: Compute checksum of the compressed image
+        run: |
+          cd ci/arm64-rpi
+          sha256sum raspiblitz-arm64-rpi-lean.img.gz > raspiblitz-arm64-rpi-lean.img.gz.sha256
+
+      - name: Upload the image and checksums
+        uses: actions/upload-artifact@v4
+        with:
+          name: raspiblitz-arm64-rpi-image-${{ env.BUILD_DATE }}-${{ env.BUILD_VERSION }}
+          path: |
+            ${{ github.workspace }}/ci/arm64-rpi/raspiblitz-arm64-rpi-lean.img.sha256
+            ${{ github.workspace }}/ci/arm64-rpi/raspiblitz-arm64-rpi-lean.img.gz
+            ${{ github.workspace }}/ci/arm64-rpi/raspiblitz-arm64-rpi-lean.img.gz.sha256

.github/workflows/spelling.yml

@@ -0,0 +1,20 @@
+name: Spelling
+
+on:
+  workflow_dispatch:
+  push:
+    branches: ['dev', 'v1.10', 'v1.11']
+  pull_request:
+    branches: ['dev', 'v1.10', 'v1.11']
+
+jobs:
+  spelling:
+    name: Spell Check with Typos
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Actions Repository
+        uses: actions/checkout@v4
+      - name: Spell Check Repo
+        uses: crate-ci/typos@master
+        with:
+          config: typos.toml

.github/workflows/test-bats.yml

@@ -0,0 +1,38 @@
+name: Test bats
+
+concurrency:
+  group: test-bats-${{ github.head_ref }}
+  cancel-in-progress: true
+
+on:
+  workflow_dispatch:
+  push:
+    branches: ["dev"]
+    paths:
+      - "home.admin/config.scripts/bonus.postgresql.sh"
+  pull_request:
+    branches: ["dev"]
+    paths:
+      - "home.admin/config.scripts/bonus.postgresql.sh"
+
+jobs:
+  run-bats-tests:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install bats
+        run: |
+          sudo apt update &>/dev/null
+          sudo apt install -y bats
+
+      - name: Run the bats tests with postgresql 15
+        run: |
+          cd test
+          sudo bats ./bonus.postgresql-15.bats
+
+      - name: Run the bats tests with postgresql 13
+        run: |
+          cd test
+          sudo bats ./bonus.postgresql-13.bats

.gitignore

@@ -3,6 +3,10 @@ home.admin/.DS_Store
 *.log
 *.pyc
 __pycache__
-rpc_pb2.pyc
-rpc_pb2_grpc.pyc
+lightning_pb2.pyc
+lightning_pb2_grpc.pyc
 /.vagrant/
+ci/amd64/builds
+ci/arm64-rpi/raspiblitz-arm64-rpi*
+ci/arm64-rpi/.packer*
+ci/arm64-rpi/packer-builder-arm

.shellcheckrc

@@ -0,0 +1,2 @@
+shell=bash
+source=/dev/null

CHANGES.md

@@ -1,17 +1,222 @@
-# CHANGES between Releases
+## What's new in Version 1.11.1 of RaspiBlitz?
+
+- New: Set Timezone SSHMENU > SYSTEM > TIME [details](https://github.com/raspiblitz/raspiblitz/issues/1712)
+- New: Labelbase 2.2.1 [details](https://x.com/labelbase_space)
+- New: Redesign WebUI Setup & Recovery
+- Update: amd64 base image: debian-12.6.0-amd64-netinst.iso
+- Update: LNbits 0.12.8 [details](https://github.com/lnbits/lnbits/releases/tag/0.12.8)
+- Update: Specter Desktop 2.0.4 with reactivated UPDATE option [details](https://github.com/cryptoadvance/specter-desktop/releases/tag/v2.0.4)
+- Update: BTCPayServer 1.13.0 [details](https://github.com/btcpayserver/btcpayserver/releases/tag/v1.13.0)
+- Update: acme.sh 3.0.7 (repair duckdns.org dyndns)
+- Update: show progress of electrs building index on LCD
+- Update: lndmanage 0.16.0 [details](https://github.com/bitromortac/lndmanage)
+- Update: Lightning Terminal v0.12.5-alpha [details](https://github.com/lightninglabs/lightning-terminal/releases/tag/v0.12.5-alpha)
+- Update: PyBlock 2.7.2 [details](https://github.com/curly60e/pyblock/blob/master/README.md)
+- Update: Bitcoin Core 27.1 (as tested update) [details](https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-27.1.md)
+- Experimental: charge-lnd install script [details](https://github.com/raspiblitz/raspiblitz/discussions/3955)
+- Experimental: config.scripts/lnd.signaddress.sh to easy sign messages on addresses on LND [details](https://github.com/raspiblitz/raspiblitz/issues/4540)
+- Experimental: config.scripts/bonus.elements.sh install elements blockchain platform [details](https://github.com/ElementsProject/elements)
+- Deprecated: Sphinx-Relay [details](https://github.com/raspiblitz/raspiblitz/issues/2558)
+- Remove: AutoPilot & Keysend from SSH menus [details](https://github.com/raspiblitz/raspiblitz/issues/1953#issuecomment-1811553602)
+- Remove: Tallycoin-Connect [see service shutdown](https://x.com/djbooth007/status/1784409117563720082)
+- Remove: IP2Tor Shoplist [details](https://github.com/raspiblitz/raspiblitz/issues/4589)
+- Remove: CopyStation Script [details](https://github.com/raspiblitz/raspiblitz/issues/4538)
+
+## What's new in Version 1.11.0 of RaspiBlitz?
+
+- New: RaspberryPi5 tested & enabling NVMe PCIe Hats
+- New: BTCPay Server PostgreSQL database backup and restore options [details](https://github.com/raspiblitz/raspiblitz/pull/4409)
+- New: Reset option for the self-signed TLS certificate [details](https://github.com/raspiblitz/raspiblitz/pull/4412)
+- New on WebUI: Electrum Connect Screen
+- Update: RaspberryOS arm64 base image 2024-03-15 (Debian 12 Bookworm) [details](https://downloads.raspberrypi.com/raspios_full_arm64/release_notes.txt)
+- Update: amd64 base image: debian-12.5.0-amd64-netinst.iso
+- Update: Bitcoin Core v26.0 [details](https://bitcoincore.org/en/releases/26.0/)
+- Update: LND v0.17.3-beta [details](https://github.com/lightningnetwork/lnd/releases/tag/v0.17.3-beta)
+- Update: Core Lightning v24.02.1 [details](https://github.com/ElementsProject/lightning/releases/tag/v24.02.1)
+- Update: C-lightningREST v0.10.7 [details](https://github.com/Ride-The-Lightning/c-lightning-REST/releases/tag/v0.10.7)
+- Update: Electrum Server in Rust (electrs) v0.10.4 [details](https://github.com/romanz/electrs/blob/master/RELEASE-NOTES.md#0104-mar-15-2024)
+- Update: Fulcrum Electrum server v1.10.0 (CLI install script) [details](https://github.com/cculianu/Fulcrum/releases/tag/v1.10.0)
+- Update: BTC-RPC-Explorer v3.4.0 [details](https://github.com/janoside/btc-rpc-explorer/blob/master/CHANGELOG.md#v340)
+- Update: JoinMarket v0.9.11 [details](https://github.com/JoinMarket-Org/joinmarket-clientserver/releases/tag/v0.9.11)
+- Update: Jam (JoinMarket Web UI) v0.2.0 [details](https://github.com/joinmarket-webui/jam/releases/tag/v0.2.0)
+- Update: JoininBox v0.8.3 [details](https://github.com/openoms/joininbox/releases/tag/v0.8.3)
+- Update: RTL v0.14.1 [details](https://github.com/Ride-The-Lightning/RTL/releases/tag/v0.14.1)
+- Update: Thunderhub v0.13.30 [details](https://github.com/apotdevin/thunderhub/releases/tag/v0.13.30)
+- Update: CLBOSS 0.13+ (latest master 0673c50) [details](https://github.com/ZmnSCPxj/clboss/releases/tag/v0.13)
+- Update: BTCPayServer v1.12.5 [details](https://github.com/btcpayserver/btcpayserver/releases/tag/v1.12.5)
+- Update: Channel Tools (chantools) v0.12.0 [details](https://github.com/lightninglabs/chantools/releases/tag/v0.12.0)
+- Update: LNbits 0.11.3 [details](https://github.com/lnbits/lnbits/releases/tag/0.11.3)
+- Update: Circuitbreaker v0.5.1 [details](https://github.com/lightningequipment/circuitbreaker/blob/master/README.md)
+- Update: LNDg v1.8.0 [details](https://github.com/cryptosharks131/lndg/releases/tag/v1.8.0)
+- Update: Balance of Satoshis v17.9.1 [details](https://www.npmjs.com/package/balanceofsatoshis/v/17.9.1)
+- Experimental: LNDK (runs on top of LND to help forward onion messages (BOLT 12)) [details](https://github.com/lndk-org/lndk)
+- Fix: PyBlock 2.2.3 [details](https://github.com/curly60e/pyblock/blob/master/README.md)
+- Refactor: Wifi config with file on sd card
+- Deactivated for Repair: lnproxy [details](https://github.com/raspiblitz/raspiblitz/issues/4122)
+- Deprecated: Homer Dashboard (remove from SSH menus, config script will stay with possible future removal)
+- Deprecated: Bitcoinminds (remove from SSH menus, config script will stay with possible future removal)
+- Remove: ItchySats (unmaintained project / in consent with dev)
+
+## What's new in Version 1.10.0 of RaspiBlitz?
+
+- Update: RaspiOS base image from 2023-05-03
+- Update: Bitcoin Core v25.0.0 [details](https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-25.0.md)
+- Update: LND v0.16.4-beta [details](https://github.com/lightningnetwork/lnd/releases/tag/v0.16.4-beta)
+- Update: Core Lightning v23.08.1 [details](https://github.com/ElementsProject/lightning/releases/tag/v23.08.1)
+- Update: Suez - Channel Visualization for LND & CLN [details](https://github.com/prusnak/suez)
+- Update: Electrum Server in Rust (electrs) v0.10.0 [details](https://github.com/romanz/electrs/blob/master/RELEASE-NOTES.md#0100-jul-22-2023)
+- Update: C-lightningREST v0.10.5 [details](https://github.com/Ride-The-Lightning/c-lightning-REST/releases/tag/v0.10.5)
+- Update: RTL v0.14.0 [details](https://github.com/Ride-The-Lightning/RTL/releases/tag/v0.14.0)
+- Update: Lightning Terminal v0.10.1-alpha [details](https://github.com/lightninglabs/lightning-terminal/releases/tag/v0.10.1-alpha)
+- Update: Channel Tools (chantools) v0.11.3 [details](https://github.com/guggero/chantools/releases/tag/v0.11.3)
+- Update: LNDg v1.7.0 [details](https://github.com/cryptosharks131/lndg)
+- Update: Thunderhub v0.13.19 [details](https://github.com/apotdevin/thunderhub/releases/tag/v0.13.19)
+- Update: LNbits 0.10.10 [details](https://github.com/lnbits/lnbits/releases/tag/0.10.10)
+- Update: BTCPayServer 1.10.3 (postgres by default with sqlite migration) [details](https://github.com/btcpayserver/btcpayserver/releases/tag/v1.10.3)
+- Update: Specter Desktop 1.13.1 [details](https://github.com/cryptoadvance/specter-desktop/releases/tag/v1.13.1)
+- Update: Kindle-Display 0.5.1 [details](https://github.com/dennisreimann/kindle-display/)
+- Update: JoinMarket v0.9.10 [details](https://github.com/JoinMarket-Org/joinmarket-clientserver/releases/tag/v0.9.10)
+- Update: JoininBox v0.8.1 [details](https://github.com/openoms/joininbox/releases/tag/v0.8.1)
+- Update: Balance of Satoshis 15.11.0 (bos) [details](https://github.com/alexbosworth/balanceofsatoshis/blob/master/CHANGELOG.md#15110)
+- Fix: Homebanking Interface FinTS/HBCI (experimental) [details](https://github.com/rootzoll/raspiblitz/issues/1186)
+- Remove: Spark Wallet and Sparko CLN plugin (not maintained anymore)
+- Remove: Faraday, Loop, Pool single installs - used in the LiT package instead
+- Remove: deactivate LNproxy in the menu and in provision
+- Info: the users not intended to be logged in will not be available to change into (manage them from admin with sudo)
+
+## What's new in Version 1.9.0 of RaspiBlitz?
+
+- New: Automated disk image build for amd64 (VM, laptop, desktop, server) and arm64-rpi (Raspberry Pi) [details](https://github.com/rootzoll/raspiblitz/tree/dev/ci/README.md)
+- New: Fatpack & Minimal sd card builds [details](SECURITY.md#minimal-sd-card-build)
+- New: I2P support for Bitcoin Core (i2pacceptincoming=1) [details](https://github.com/rootzoll/raspiblitz/issues/2413)
+- New: CLN Watchtower (The Eye of Satoshi) [details](https://github.com/talaia-labs/rust-teos/tree/master/watchtower-plugin)
+- New: LNDg v1.6.0 [details](https://github.com/cryptosharks131/lndg)
+- New: Support of X708 UPS HAT [details](https://github.com/rootzoll/raspiblitz/pull/3087)
+- New: BOS Telegram Bot Support (see OPTIONS on LND Balance of Satoshis menu entry)
+- New: LightningTipBot v0.5 [details](https://github.com/LightningTipBot/LightningTipBot)
+- New: ↬lnproxy cli shortcut and server [details](https://github.com/lnproxy)
+- New: Homebanking Interface FinTS/HBCI (experimental) [details](https://github.com/rootzoll/raspiblitz/issues/1186)
+- New on WebUI: Jam (JoinMarket Web UI) v0.1.5 [details](https://github.com/joinmarket-webui/joinmarket-webui/releases/tag/v0.1.5)
+- New on WebUI: Generate/Download Debug Report from Settings
+- Update: Bitcoin Core v24.0.1 [details](https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-24.0.1.md)
+- Update: LND v0.16.2-beta [details](https://github.com/lightningnetwork/lnd/releases/tag/v0.16.2-beta)
+- Update: Core Lightning v23.02.2 [details](https://github.com/ElementsProject/lightning/releases/tag/v23.02.2)
+- Update: C-lightningREST v0.10.2 [details](https://github.com/Ride-The-Lightning/c-lightning-REST/releases/tag/v0.10.2)
+- Update: Electrum Server in Rust (electrs) v0.9.11 [details](https://github.com/romanz/electrs/blob/master/RELEASE-NOTES.md#0911-jan-5-2023)
+- Update: Lightning Terminal v0.8.6-alpha [details](https://github.com/lightninglabs/lightning-terminal/releases/tag/v0.8.6-alpha)
+- Update: RTL v0.13.6 with update option [details](https://github.com/Ride-The-Lightning/RTL/releases/tag/v0.13.6)
+- Update: Thunderhub v0.13.16 with balance sharing disabled [details](https://github.com/apotdevin/thunderhub/releases/tag/v0.13.16)
+- Update: LNbits 0.10.6 [details](https://github.com/lnbits/lnbits/releases/tag/0.10.6)
+- Update: BTCPayServer 1.9.3 (postgres by default with sqlite migration) [details](https://github.com/btcpayserver/btcpayserver/releases/tag/v1.9.3)
+- Update: ItchySats 0.7.0 [details](https://github.com/itchysats/itchysats/releases/tag/0.7.0)
+- Update: Channel Tools (chantools) v0.10.5 [details](https://github.com/guggero/chantools/releases/tag/v0.10.5)
+- Update: JoinMarket v0.9.9 [details](https://github.com/JoinMarket-Org/joinmarket-clientserver/releases/tag/v0.9.9)
+- Update: JoininBox v0.7.7 [details](https://github.com/openoms/joininbox/releases/tag/v0.7.7)
+- Update: Balance of Satoshis 13.15.0 (bos) [details](https://github.com/alexbosworth/balanceofsatoshis/blob/master/CHANGELOG.md#13150)
+- Update: lndmanage 0.15.0 [details](https://github.com/bitromortac/lndmanage)
+- Update: Circuitbreaker with webUI [details](https://github.com/lightningequipment/circuitbreaker/blob/master/README.md)
+- Update: Suez - Channel Visualization for LND & CL [details](https://github.com/prusnak/suez)
+- Update: Tallycoin Connect v1.8.0 [details](https://github.com/djbooth007/tallycoin_connect/releases/tag/v1.8.0)
+- Update: Fulcrum install script (CLI only) v1.9.1 [details](https://github.com/cculianu/Fulcrum/releases/tag/v1.9.1)
+- Fixed: SCB/Emergency-Backup to USB drive (now also with CLN emergency.recover file)
+- Info: Run RaspiBlitz on Proxmox [details](https://github.com/rootzoll/raspiblitz/tree/dev/alternative.platforms/Proxmox)
+- Info: IP2Tor fix fulmo shop & added new ip2tor.com shop
+- Info: 32GB sdcard is now enforced (after being recommended since v1.5)
+- Info: 'Reindex Blockchain' is now part of 'repair' menu
+
+## What's new in Version 1.8.0c of RaspiBlitz?
+
+- Update: LND v0.15.4 (emergency hotfix release) [details](https://github.com/lightningnetwork/lnd/releases/tag/v0.15.4-beta)
+- Update: Electrum Server in Rust (electrs) v0.9.9 [details](https://github.com/romanz/electrs/blob/master/RELEASE-NOTES.md#099-jul-12-2022)
+
+## What's new in Version 1.8.0b of RaspiBlitz?
+
+- Update: LND v0.15.2 (emergency hotfix release) [details](https://github.com/lightningnetwork/lnd/releases/tag/v0.15.2-beta)
+
+## What's new in Version 1.8.0 of RaspiBlitz?
+
+- New: Multilanguage WebUI [details](https://github.com/cstenglein/raspiblitz-web)
+- New: BackendAPI [details](https://github.com/fusion44/blitz_api)
+- New: ZRAM - compressed swap in memory [details](https://github.com/rootzoll/raspiblitz/issues/2905)
+- New: Core Lightning GRPC plugin [details](https://github.com/rootzoll/raspiblitz/pull/3109)
+- New: Core Lightning connection to BTCPayServer (CONNECT menu) [details](https://github.com/rootzoll/raspiblitz/issues/3155)
+- New: Alby (Connection Menu) [details](https://getalby.com/)
+- New: Homer Dashboard 22.06.1 [details](https://github.com/bastienwirtz/homer#readme)
+- New: ItchySats 0.5.0 [details](https://github.com/itchysats/itchysats/)
+- New: ckbunker CLI install script (experimental) [details](https://github.com/rootzoll/raspiblitz/issues/1062)
+- Update: Bitcoin Core v23.0 [details](https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-23.0.md)
+- Update: Core Lightning (CLN - formerly C-lightning) v0.11.2 [details](https://github.com/ElementsProject/lightning/releases/tag/v0.11.2)
+- Update: LND v0.15.0 [details](https://github.com/lightningnetwork/lnd/releases/tag/v0.15.0-beta)
+- Update: RTL v0.12.3 [details](https://github.com/Ride-The-Lightning/RTL/releases/tag/v0.12.3)
+- Update: LNbits 0.9.1 [details](https://github.com/lnbits/lnbits-legend/releases/tag/0.9.1)
+- Update: C-lightningREST v0.7.2 [details](https://github.com/Ride-The-Lightning/c-lightning-REST/releases/tag/v0.7.2)
+- Update: CLBOSS 0.13A [details](https://github.com/ZmnSCPxj/clboss/releases/tag/0.13A)
+- Update: Channel Tools (chantools) v0.10.4 [details](https://github.com/guggero/chantools/blob/master/README.md)
+- Update: Lightning Terminal v0.9.2-alpha with Lightning Node Connect over Tor [details](https://github.com/lightninglabs/lightning-terminal/releases/tag/v0.9.2-alpha)
+- Update: JoinMarket v0.9.6 [details](https://github.com/JoinMarket-Org/joinmarket-clientserver/releases/tag/v0.9.6)
+- Update: JoininBox v0.6.8 [details](https://github.com/openoms/joininbox/releases/tag/v0.6.8)
+- Update: JoinMarket Web UI (Jam) v0.0.9 (CLI install script) [details](https://github.com/joinmarket-webui/joinmarket-webui/releases/tag/v0.0.9)
+- Update: Electrum Server in Rust (electrs) v0.9.7 [details](https://github.com/romanz/electrs/blob/master/RELEASE-NOTES.md#097-apr-30-2022)
+- Update: Fulcrum Electrum server v1.7.0 (CLI install script) [issue](https://github.com/rootzoll/raspiblitz/issues/2924)
+- Update: BTCPayServer 1.6.1 [details](https://github.com/btcpayserver/btcpayserver/releases/tag/v1.6.1)
+- Update: Mempool 2.4.0 [details](hhttps://github.com/mempool/mempool/releases/tag/v2.4.0)
+- Update: Helipad (Podcasting 2.0 Boostagram reader) v0.1.10 [details](https://github.com/Podcastindex-org/helipad/releases/tag/v0.1.10)
+- Update: Adapted Umbrel Migration for new 0.5.0 version with Core Lightning
+- Info: Run RaspiBlitz on amd64 bare metal and virtual machines [details](https://github.com/rootzoll/raspiblitz/tree/dev/alternative.platforms)
+
+## What's new in Version 1.7.2 of RaspiBlitz?
+
+- Refactor: Cache & Backgroundscan of Systeminfo
+- New: Compact the LND channel.db monthly on restart, on-demand from menu and before backups [issue](https://github.com/rootzoll/raspiblitz/issues/2752)
+- New: Run C-lightning backup-compact regularly [issue](https://github.com/rootzoll/raspiblitz/issues/2869)
+- New: Switch LNbits between lnd & c-lightning [issue](https://github.com/rootzoll/raspiblitz/issues/2556)
+- New: Tallycoin Connect [details](https://github.com/djbooth007/tallycoin_connect#readme)
+- New: Helipad (Podcasting 2.0 Boostagram reader) [details](https://github.com/Podcastindex-org/helipad)
+- New: Migration from Citadel to RaspiBlitz [details](https://github.com/rootzoll/raspiblitz/issues/2642)
+- New: Bitcoinminds.org local on RaspiBlitz [details](https://github.com/raulcano/bitcoinminds)
+- New: JoinMarket Web UI v0.0.3 (CLI install of the first public alpha release) [details](https://github.com/joinmarket-webui/joinmarket-webui/releases/tag/v0.0.3)
+- New: Fulcrum Electrum server v1.6.0 (CLI install script) [issue](https://github.com/rootzoll/raspiblitz/issues/2924)
+- Update: LND v0.14.2-beta [details](https://github.com/lightningnetwork/lnd/releases/tag/v0.14.2-beta)
+- Update: C-lightning v0.10.2 [details](https://github.com/ElementsProject/lightning/releases/tag/v0.10.2)
+- Update: LNbits 0.7.0 [details](https://github.com/lnbits/lnbits-legend/releases/tag/0.7.0)
+- Update: RTL v0.12.1 [details](https://github.com/Ride-The-Lightning/RTL/releases/tag/v0.12.1)
+- Update: C-lightningREST v0.6.1 [details](https://github.com/Ride-The-Lightning/c-lightning-REST/releases/tag/v0.6.1)
+- Update: CL Spark Wallet v0.3.1 [details](https://github.com/shesek/spark-wallet/releases/tag/v0.3.1)
+- Update: CL Sparko plugin v0.2.8 [details](https://github.com/fiatjaf/sparko/releases/tag/v2.8)
+- Update: Lightning Terminal v0.6.3-alpha with Lightning Node Connect over Tor [details](https://github.com/lightninglabs/lightning-terminal/releases/tag/v0.6.3-alpha)
+- Update: Channel Tools (chantools) v0.10.1 [details](https://github.com/guggero/chantools/releases/tag/v0.10.1)
+- Update: BTCPayServer v1.4.4 with UPDATE option [details](https://github.com/btcpayserver/btcpayserver/releases/tag/v1.4.4)
+- Update: Electrum Server in Rust (electrs) v0.9.5 [details](https://github.com/romanz/electrs/blob/master/RELEASE-NOTES.md#095-feb-4-2022)
+- Update: JoinMarket v0.9.5 [details](https://github.com/JoinMarket-Org/joinmarket-clientserver/releases/tag/v0.9.5)
+- Update: JoininBox v0.6.7 [details](https://github.com/openoms/joininbox/releases/tag/v0.6.7)
+- Update: Thunderhub v0.13.6 [details](https://github.com/apotdevin/thunderhub/releases/tag/v0.13.6)
+- Update: BTC-RPC-Explorer v3.3.0 [details](https://github.com/janoside/btc-rpc-explorer/blob/master/CHANGELOG.md#v330)
+- Update: Specter Desktop 1.8.1 [details](https://github.com/cryptoadvance/specter-desktop/releases/tag/v1.8.1)
+- Update: Mempool 2.3.1 [details](https://github.com/mempool/mempool/releases/tag/v2.3.1)
+- Update: PyBlock to 1.1.8.5 (adapt to new install mechanism)
+- Update: Balance of Satoshis 11.50.0 (BOS) [details](https://github.com/alexbosworth/balanceofsatoshis/blob/master/CHANGELOG.md#11500)
+- Update: Re-Add connecting node with Zap mobile wallet iOS & Android
+- Update: additional redaction of private data in debug logs
+- Security: Verify git commits and tags everywhere possible [issue](https://github.com/rootzoll/raspiblitz/issues/2686)
+- Fixed: LND repair options, SEED+SCB and rescue-file restore, RESET options [issue](https://github.com/rootzoll/raspiblitz/issues/2832)
+- Info: All existing IP2Tor subscriptions need to be canceled & renewed to be functional again.
+- Info: 32GB sd card is now required (was already long time recommended on shopping list)
+- Info: The touchscreen graphical mode is back to experimental for now and missing some UI fixes. This might take until v1.8.1 where the touchscreen will get a refactor/rewrite.
 
 ## What's new in Version 1.7.1 of RaspiBlitz?
 
+There was a small patch-update with raspiblitz-v1.7.1-2021-10-28.img.gz to fix a restart-loop after blockchain was self-synced.
+
 - New: C-lightning v0.10.1 [details](https://github.com/ElementsProject/lightning/releases/tag/v0.10.1)
 - New: C-lightningREST v0.5.1 [details](https://github.com/Ride-The-Lightning/c-lightning-REST/releases/tag/v0.5.1)
 - New: CL Spark Wallet v0.3.0rc with BOLT12 offers [details](https://github.com/shesek/spark-wallet/releases)
 - New: CL plugin: Sparko [details](https://github.com/fiatjaf/sparko)
-- New: CL plugin: CLBOSS The C-Lightning Node Manager [details](https://github.com/ZmnSCPxj/clboss#clboss-the-c-lightning-node-manager)
+- New: CL plugin: CLBOSS The Core Lightning Node Manager [details](https://github.com/ZmnSCPxj/clboss#clboss-the-c-lightning-node-manager)
 - New: Refactored Setup-Process [details](https://github.com/rootzoll/raspiblitz/issues/1126#issuecomment-829757665)
 - New: Suez - channel visualization for LND and CL [info](https://github.com/rootzoll/raspiblitz/issues/2366#issuecomment-939521302)[details](https://github.com/prusnak/suez)
 - New: LND Static Channel Backup to Nextcloud
 - New: Allow SphinxApp to connect over Tor
-- New: Parallel TESTNET & SIGNET services 
+- New: Parallel TESTNET & SIGNET services
 - Update: Bitcoin Core v22.0 [details](https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-22.0.md)
 - Update: LND v0.13.3 [details](https://github.com/lightningnetwork/lnd/releases/tag/v0.13.3-beta)
 - Update: Specter Desktop 1.6.0 [details](https://github.com/cryptoadvance/specter-desktop/blob/master/README.md)
@@ -89,7 +294,7 @@
 - Update: BTCPay Server 1.0.5.9 [details](https://github.com/btcpayserver/btcpayserver/releases/tag/v1.0.5.9)
 - Update: Loop 0.11.1
 - Update: stacking-sats-kraken 0.3.0
-- Update: Experimental BTRFS support 
+- Update: Experimental BTRFS support
 - Fix: DropBox API
 
 ## What's new in Version 1.6.1 of RaspiBlitz?
@@ -110,7 +315,7 @@
 - New: Circuit Breaker (config-script) [details](https://github.com/rootzoll/raspiblitz/issues/1581)
 - New: PyBlock (Python Util & Fun Scripts) [details](https://github.com/curly60e/pyblock/blob/master/README.md)
 - New: Mempool Explorer [details](https://github.com/mempool/mempool)
-- New: dynu.com as alternative option for LetsEncrpyt FreeDNS provider 
+- New: dynu.com as alternative option for LetsEncrypt FreeDNS provider
 - New: Experimental running RaspiBlitz as VM (vagrant & docker)
 
 For ALL small bug fixes & improvements see: https://github.com/rootzoll/raspiblitz/milestone/11
@@ -128,7 +333,7 @@ For ALL small bug fixes & improvements see: https://github.com/rootzoll/raspibli
 - Update: ElectRS 0.8.5 [details](https://github.com/romanz/electrs/blob/master/RELEASE-NOTES.md#085-1-july-2020)
 - Update: JoinMarket v0.6.3.1 [details](https://github.com/JoinMarket-Org/joinmarket-clientserver/releases/tag/v0.6.3.1)
 - New: Nginx Web Server
-- New: Subscriptions Management 
+- New: Subscriptions Management
 - New: IP2Tor Bridge (optional subscription service)
 - New: Balance of Satoshis v5.41.0 (with update option) [details](https://github.com/alexbosworth/balanceofsatoshis)
 - New: Faraday [details](https://github.com/lightninglabs/faraday)
@@ -142,12 +347,12 @@ For ALL small bug fixes & improvements see: https://github.com/rootzoll/raspibli
 - Fix: DropBox StaticChannelBackup
 - Removed: Shango from the list of Mobile Wallets
 - Removed: Torrent Download of Blockchain (Copy over LAN now default for RP3)
-- Shoppinglist: 4GB RaspberryPi 4 is now default for Standard Package (will still run with less) 
+- Shoppinglist: 4GB RaspberryPi 4 is now default for Standard Package (will still run with less)
 
 ## What's new in Version 1.5.1 of RaspiBlitz?
 
 - Bugfix: DropBox Backup of Static-Channel-Backup
-- Bugfix: Torrentfiles with active tracker 
+- Bugfix: Torrentfiles with active tracker
 
 ## What.s new in Version 1.5 of RaspiBlitz?
 
@@ -173,7 +378,7 @@ Beside many small improvements and changes, these are most important changes:
 - New: Make it easier to Copy The Blockchain over Network from running Blitz
 - New: Forwarding Fee Report on Main Menu
 - New: Easy Setup of Auto-Backup of SCB to Dropbox
-- New: LND Interims Updates (verified & reckless) [details](https://github.com/rootzoll/raspiblitz/issues/1116#issuecomment-619467148) 
+- New: LND Interims Updates (verified & reckless) [details](https://github.com/rootzoll/raspiblitz/issues/1116#issuecomment-619467148)
 - New: Sync RaspiBlitz with your forked GitHub repo thru menu [details](FAQ.md#how-can-i-sync-a-branch-of-my-forked-github-with-my-local-raspiblitz)
 - Removed: Clone Blockchain from second HDD (use CopyStation script)
 
@@ -280,4 +485,3 @@ Version 1.1 packs some first fixes and enhancements to make the RaspiBlitz more
 - Removed: FTP download option for blockchain
 
 For full details see issue list of [Release 1.1 Milestone](https://github.com/rootzoll/raspiblitz/milestone/3?closed=1).
-

CODEOWNERS

@@ -0,0 +1,6 @@
+# For info see https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+
+# These owners will be the default owners for everything in the repo.
+# Unless a later match takes precedence, these users will be requested for review when someone opens a pull request.
+
+* @rootzoll @openoms

CONTRIBUTING.md

@@ -1,35 +1,42 @@
 # Community development
+
 Everybody is welcome to join, improve, and extend the RaspiBlitz - it's a work in progress. Check the issues if you wanna help out or add new ideas. You can find the scripts used for RaspiBlitz interactions on the device at /home/admin or in this Git repo's subfolder home.admin.
 
 ## Understanding Blitz project
-RaspiBlitz is insipired by the [RaspiBolt guide](https://stadicus.github.io/RaspiBolt/). Tutorial on how to build a lightning node on the RaspberryPi. So much thx to Stadicus :)
+
+RaspiBlitz is inspired by the [RaspiBolt guide](https://raspibolt.github.io/raspibolt/). Tutorial on how to build a lightning node on the RaspberryPi. So much thx to Stadicus :)
 To start your Deep Dive into the RaspiBlitz project, watch [this video](https://www.youtube.com/watch?v=QXUGg45CWLo).
 
 ### Blitz philosophy
 
-* DIY community development, if you are unhappy with the code, fork and pull request, this will make you you DYOR instead of depending on the developers.
+* DIY community development, if you are unhappy with the code, fork and pull request, this will make you DYOR instead of depending on the developers.
 * If you ask when the next release will be available, we don't know, but if you contribute, it might be faster.
 * Be sure to contribute back, every little help is wanted.
 
 ## Getting started
+
 Get all details on "How to contribute to RaspiBlitz Development" on [this video](https://www.youtube.com/watch?v=ZVtZepV3OfM).
 
 ### Levels
+
 All levels are important. Even advanced users help on basic levels for other Blitzers. Every help is welcome.
 Not all enhancements needs to go through all levels, these are levels of difficulty, scalability depends on your skills.
 
 #### Basic
+
 1. **Reporting user side** --> Open an issue to indicate a problem or make a feature request.
 1. **Community support** --> Solve other people issues.
 1. **Good first issue** --> The purpose of the good first issue label is to highlight which issues are suitable for a new contributor without a deep understanding of the codebase.
 
 #### Medium
+
 1. **Sovereignty** --> Fork the repo to have the changes controlled by you.
 1. **Experiment** --> Try things out on your RaspiBlitz.
 1. **Executable** --> Turn your experiment into a basic shell script.
 
 #### Advanced
-1. **Config script** --> Integrate your executable into the RaspiBlitz enviroment.
+
+1. **Config script** --> Integrate your executable into the RaspiBlitz environment.
 1. **SSH-GUI** --> Make it easier for others to use your config script.
 1. **WEB-GUI** --> Turn your feature into customer ready
 
@@ -49,7 +56,7 @@ and is also an effective way to request assistance if and when you need it.
 1. Make sure it is compatible with Blitz philosophy.
 1. Fork the repo
 1. Commit changes on the new branch
-1. Open a pull request (PR are made to the `dev` branch unless indicated otherwise by a collaborator.
+1. Open a pull request (PRs are made to the `dev` branch unless indicated otherwise by a collaborator.
 
 #### Review
 
@@ -70,7 +77,7 @@ NACKs without accompanying reasoning may be disregarded.
 After conceptual agreement on the change, code review can be provided. A review begins with the urgent necessity of the changes.
 Start from urgent to less important:
 1. Security risk.
-1. Code that breaks the enviroment.
+1. Code that breaks the environment.
 1. Enhancing current services functionality.
 1. Solving a common issue.
 1. Adding new applications.
@@ -82,5 +89,5 @@ Reviewers that have demonstrated a deeper commitment and understanding of the pr
 The project leader is the release manager for each RaspiBlitz release.
 
 ## Copyright
-By contributing to this repository, you agree to license your work under the [MIT license](https://github.com/rootzoll/raspiblitz/blob/master/LICENSE).
+By contributing to this repository, you agree to license your work under the [MIT license](https://github.com/raspiblitz/raspiblitz/blob/master/LICENSE).
 Any work contributed where you are not the original author must contain its license header with the original author(s) and source.

FAQ.cl.md

@@ -1,757 +0,0 @@
-<!-- omit in toc -->
-# C-lightning on the RaspiBlitz FAQ
-
-- [Common questions about the different Lightning Network implementations](#common-questions-about-the-different-lightning-network-implementations)
-  - [Can LND and C-lightning nodes open channels to each other and route payments?](#can-lnd-and-c-lightning-nodes-open-channels-to-each-other-and-route-payments)
-  - [Can I run LND and C-lightning connected to the same node?](#can-i-run-lnd-and-c-lightning-connected-to-the-same-node)
-  - [Can I convert an LND node to C-lightning (or the opposite)?](#can-i-convert-an-lnd-node-to-c-lightning-or-the-opposite)
-  - [Is there a table to quickly compare LND and C-Lightning?](#is-there-a-table-to-quickly-compare-lnd-and-c-lightning)
-- [C-lightning official documentation](#c-lightning-official-documentation)
-- [Commands and aliases](#commands-and-aliases)
-- [Directories](#directories)
-- [Config file](#config-file)
-  - [Default values](#default-values)
-  - [All possible config settings](#all-possible-config-settings)
-- [Plug-ins](#plug-ins)
-  - [General info](#general-info)
-  - [Directories](#directories-1)
-  - [Implemented plugins](#implemented-plugins)
-  - [Add a custom plugin](#add-a-custom-plugin)
-  - [CLBOSS](#clboss)
-  - [Feeadjuster](#feeadjuster)
-  - [Dual funded channels](#dual-funded-channels)
-    - [Reading](#reading)
-    - [Setting up](#setting-up)
-    - [Open a dual funded channel](#open-a-dual-funded-channel)
-    - [Fundchannel syntax](#fundchannel-syntax)
-  - [Offers](#offers)
-  - [About the feature bits](#about-the-feature-bits)
-- [Testnets](#testnets)
-- [Backups](#backups)
-  - [Seed](#seed)
-  - [How to display the hsm_secret in a human-readable format?](#how-to-display-the-hsm_secret-in-a-human-readable-format)
-  - [Channel database](#channel-database)
-  - [Recovery](#recovery)
-    - [Recover from a cl-rescue file](#recover-from-a-cl-rescue-file)
-    - [Recover from a seed](#recover-from-a-seed)
-    - [Rescan the chain after restoring a used c-lightning wallet](#rescan-the-chain-after-restoring-a-used-c-lightning-wallet)
-- [Script file help list](#script-file-help-list)
-
----
-## Common questions about the different Lightning Network implementations
-
-### Can LND and C-lightning nodes open channels to each other and route payments?
-* Yes, all [BOLT specification](https://github.com/lightningnetwork/lightning-rfc) compliant implementations can open channels to each other and route payments.
-
-### Can I run LND and C-lightning connected to the same node?
-* Yes, both can run parallel on a RaspiBlitz and even have channels witch each other.
-
-### Can I convert an LND node to C-lightning (or the opposite)?
-* No, currently there are no tools available to convert between the databases storing the channel states.  
-The channels would need to be closed to use the same funds in an other node.
-
-### Is there a table to quickly compare LND and C-Lightning?
-* see [github.com/openoms/lightning-node-management/blob/master/node-types/comparison.md](https://github.com/openoms/lightning-node-management/blob/master/node-types/comparison.md)
-
----
-
-## C-lightning official documentation
-* https://lightning.readthedocs.io/
-
-## Commands and aliases
-
-* Check if the C-lightning daemon is running:
-    ```
-    sudo systemctl status lightningd
-    ```
-* Follow it's system output for debugging:
-    ```
-    sudo journalctl -fu lightningd
-    ```
-* The logs can be accessed in the menu `SYSTEM` - `CLLOG`
-or with the alias: `cllog`
-* The frequently used commands are shortened with alisases. Check them with the command `alias`:
-    ```
-    alias cl='sudo -u bitcoin /usr/local/bin/lightning-cli --conf=/home/bitcoin/.lightning/config'
-    alias clconf='sudo nano /home/bitcoin/.lightning/config'
-    alias cllog='sudo tail -n 30 -f /home/bitcoin/.lightning/bitcoin/cl.log'
-    ```
-## Directories
-* All data is stored on the disk in:  
-`/mnt/hdd/app-data/.lightningd`  
-* and symlinked to:  
-`/home/bitcoin/.lightningd`
-
-## Config file
-* Edit in the menu `SYSTEM` - `CLNCONF` or use the alias `clconf`
-
-### Default values
-* on the RaspiBlitz for mainnet
-    ```
-    network=bitcoin
-    announce-addr=127.0.0.1:9736
-    log-file=cl.log
-    log-level=info
-    plugin-dir=/home/bitcoin/cln-plugins-enabled
-    # Tor settings
-    proxy=127.0.0.1:9050
-    bind-addr=127.0.0.1:9736
-    addr=statictor:127.0.0.1:9051/torport=9736
-    always-use-proxy=true
-    ```
-### All possible config settings
-  *  can be shown by running:   
-  `lightningd --help`  
-  * Place the settings in the config file  without the `--` and restart lightningd
-    ```
-    Usage: lightningd 
-    A bitcoin lightning daemon (default values shown for network: bitcoin).
-    --conf=<file>                                     Specify configuration file
-    --lightning-dir=<dir>                             Set base directory: network-specific subdirectory is
-                                                    under here (default: "/home/admin/.lightning")
-    --network <arg>                                   Select the network parameters (bitcoin, testnet,
-                                                    signet, regtest, litecoin or litecoin-testnet)
-                                                    (default: bitcoin)
-    --mainnet                                         Alias for --network=bitcoin
-    --testnet                                         Alias for --network=testnet
-    --signet                                          Alias for --network=signet
-    --allow-deprecated-apis <arg>                     Enable deprecated options, JSONRPC commands, fields,
-                                                    etc. (default: true)
-    --rpc-file <arg>                                  Set JSON-RPC socket (or /dev/tty)
-                                                    (default: "lightning-rpc")
-    --plugin <arg>                                    Add a plugin to be run (can be used multiple times)
-    --plugin-dir <arg>                                Add a directory to load plugins from (can be used
-                                                    multiple times)
-    --clear-plugins                                   Remove all plugins added before this option
-    --disable-plugin <arg>                            Disable a particular plugin by filename/name
-    --important-plugin <arg>                          Add an important plugin to be run (can be used multiple
-                                                    times). Die if the plugin dies.
-    --always-use-proxy <arg>                          Use the proxy always (default: false)
-    --daemon                                          Run in the background, suppress stdout/stderr
-    --wallet <arg>                                    Location of the wallet database.
-    --large-channels|--wumbo                          Allow channels larger than 0.16777215 BTC
-    --experimental-dual-fund                          experimental: Advertise dual-funding and allow peers to
-                                                    establish channels via v2 channel open protocol.
-    --experimental-onion-messages                     EXPERIMENTAL: enable send, receive and relay of onion
-                                                    messages
-    --experimental-offers                             EXPERIMENTAL: enable send and receive of offers (also
-                                                    sets experimental-onion-messages)
-    --experimental-shutdown-wrong-funding             EXPERIMENTAL: allow shutdown with alternate txids
-    --help|-h                                         Print this message.
-    --rgb <arg>                                       RRGGBB hex color for node
-    --alias <arg>                                     Up to 32-byte alias for node
-    --pid-file=<file>                                 Specify pid file
-                                                    (default: "/home/admin/.lightning/lightningd-bitcoin.pid")
-    --ignore-fee-limits <arg>                         (DANGEROUS) allow peer to set any feerate
-                                                    (default: false)
-    --watchtime-blocks <arg>                          Blocks before peer can unilaterally spend funds
-                                                    (default: 144)
-    --max-locktime-blocks <arg>                       Maximum blocks funds may be locked for (default: 2016)
-    --funding-confirms <arg>                          Confirmations required for funding transaction
-                                                    (default: 3)
-    --cltv-delta <arg>                                Number of blocks for cltv_expiry_delta (default: 34)
-    --cltv-final <arg>                                Number of blocks for final cltv_expiry (default: 18)
-    --commit-time=<millseconds>                       Time after changes before sending out COMMIT
-                                                    (default: 10)
-    --fee-base <arg>                                  Millisatoshi minimum to charge for HTLC (default: 1000)
-    --rescan <arg>                                    Number of blocks to rescan from the current head, or
-                                                    absolute blockheight if negative (default: 15)
-    --fee-per-satoshi <arg>                           Microsatoshi fee for every satoshi in HTLC
-                                                    (default: 10)
-    --max-concurrent-htlcs <arg>                      Number of HTLCs one channel can handle concurrently.
-                                                    Should be between 1 and 483 (default: 30)
-    --min-capacity-sat <arg>                          Minimum capacity in satoshis for accepting channels
-                                                    (default: 10000)
-    --addr <arg>                                      Set an IP address (v4 or v6) to listen on and announce
-                                                    to the network for incoming connections
-    --bind-addr <arg>                                 Set an IP address (v4 or v6) to listen on, but not
-                                                    announce
-    --announce-addr <arg>                             Set an IP address (v4 or v6) or .onion v3 to announce,
-                                                    but not listen on
-    --offline                                         Start in offline-mode (do not automatically reconnect
-                                                    and do not accept incoming connections)
-    --autolisten <arg>                                If true, listen on default port and announce if it
-                                                    seems to be a public interface (default: true)
-    --proxy <arg>                                     Set a socks v5 proxy IP address and port
-    --tor-service-password <arg>                      Set a Tor hidden service password
-    --experimental-accept-extra-tlv-types <arg>       Comma separated list of extra TLV types to accept.
-    --disable-dns                                     Disable DNS lookups of peers
-    --encrypted-hsm                                   Set the password to encrypt hsm_secret with. If no
-                                                    password is passed through command line, you will be
-                                                    prompted to enter it.
-    --rpc-file-mode <arg>                             Set the file mode (permissions) for the JSON-RPC socket
-                                                    (default: "0600")
-    --force-feerates <arg>                            Set testnet/regtest feerates in sats perkw,
-                                                    opening/mutual_close/unlateral_close/delayed_to_us/htlc_resolution/penalty:
-                                                    if fewer specified, last number applies to remainder
-    --subdaemon <arg>                                 Arg specified as SUBDAEMON:PATH. Specifies an alternate
-                                                    subdaemon binary. If the supplied path is relative the
-                                                    subdaemon binary is found in the working directory.
-                                                    This option may be specified multiple times. For
-                                                    example, --subdaemon=hsmd:remote_signer would use a
-                                                    hypothetical remote signing subdaemon.
-    --log-level <arg>                                 log level (io, debug, info, unusual, broken) [:prefix]
-                                                    (default: info)
-    --log-timestamps <arg>                            prefix log messages with timestamp (default: true)
-    --log-prefix <arg>                                log prefix (default: lightningd)
-    --log-file=<file>                                 log to file instead of stdout
-    --version|-V                                      Print version and exit
-    --autocleaninvoice-cycle <arg>                    Perform cleanup of expired invoices every given
-                                                    seconds, or do not autoclean if 0
-    --autocleaninvoice-expired-by <arg>               If expired invoice autoclean enabled, invoices that
-                                                    have expired for at least this given seconds are
-                                                    cleaned
-    --fetchinvoice-noconnect                          Don't try to connect directly to fetch an invoice.
-    --bitcoin-datadir <arg>                           -datadir arg for bitcoin-cli
-    --bitcoin-cli <arg>                               bitcoin-cli pathname
-    --bitcoin-rpcuser <arg>                           bitcoind RPC username
-    --bitcoin-rpcpassword <arg>                       bitcoind RPC password
-    --bitcoin-rpcconnect <arg>                        bitcoind RPC host to connect to
-    --bitcoin-rpcport <arg>                           bitcoind RPC host's port
-    --bitcoin-retry-timeout <arg>                     how long to keep retrying to contact bitcoind before
-                                                    fatally exiting
-    --commit-fee <arg>                                Percentage of fee to request for their commitment
-    --funder-policy <arg>                             Policy to use for dual-funding requests. [match,
-                                                    available, fixed]
-    --funder-policy-mod <arg>                         Percent to apply policy at (match/available); or amount
-                                                    to fund (fixed)
-    --funder-min-their-funding <arg>                  Minimum funding peer must open with to activate our
-                                                    policy
-    --funder-max-their-funding <arg>                  Maximum funding peer may open with to activate our
-                                                    policy
-    --funder-per-channel-min <arg>                    Minimum funding we'll add to a channel. If we can't
-                                                    meet this, we don't fund
-    --funder-per-channel-max <arg>                    Maximum funding we'll add to a channel. We cap all
-                                                    contributions to this
-    --funder-reserve-tank <arg>                       Amount of funds we'll always leave available.
-    --funder-fuzz-percent <arg>                       Percent to fuzz the policy contribution by. Defaults to
-                                                    5%. Max is 100%
-    --funder-fund-probability <arg>                   Percent of requests to consider. Defaults to 100%.
-                                                    Setting to 0% will disable dual-funding
-    --funder-lease-requests-only <arg>                Only fund lease requests. Defaults to true if channel
-                                                    lease rates are being advertised
-    --lease-fee-base-msat <arg>                       Channel lease rates, base fee for leased funds, in
-                                                    satoshi.
-    --lease-fee-basis <arg>                           Channel lease rates, basis charged for leased funds
-                                                    (per 10,000 satoshi.)
-    --lease-funding-weight <arg>                      Channel lease rates, weight we'll ask opening peer to
-                                                    pay for in funding transaction
-    --channel-fee-max-base-msat <arg>                 Channel lease rates, maximum channel fee base we'll
-                                                    charge for funds routed through a leased channel.
-    --channel-fee-max-proportional-thousandths <arg>  Channel lease rates, maximum proportional fee (in
-                                                    thousandths, or ppt) we'll charge for funds routed
-                                                    through a leased channel. Note: 1ppt = 1,000ppm
-    --disable-mpp                                     Disable multi-part payments.
-    ```
-
-## Plug-ins
-
-### General info
-* https://lightning.readthedocs.io/PLUGINS.html#a-day-in-the-life-of-a-plugin
-* https://github.com/lightningd/plugins/
-
-### Directories
-* The plugins are installed to:  
-`/home/bitcoin/cl-plugins-available`
-* and symlinked to:  
-`/home/bitcoin/cl-plugins-enabled`
-* All plugins in the `/home/bitcoin/cl-plugins-enabled` directory are loaded automatically as set in the config file: `/home/bitcoin/.lightningd/config`
-
-### Implemented plugins
-* summary
-* sparko
-* clboss
-
-### Add a custom plugin
-* Place the plugin in the `/home/bitcoin/cl-plugins-enabled` directory 
-* Make sure it is owned by the `bitcoin` user and is executable:
-    ```
-    sudo chown bitcoin:bitcoin /home/bitcoin/cl-plugins-enabled/PLUGIN_NAME
-    sudo chmod +x /home/bitcoin/cl-plugins-enabled/PLUGIN_NAME
-    ```
-* start with
-    ```
-    lightnign-cli plugin start /home/bitcoin/cl-plugins-enabled/PLUGIN_NAME
-    ```
-* or to load it automatically on restart:
-    ```
-    sudo systemctl restart lightningd
-    ```
-    From the directory `/home/bitcoin/cl-plugins-enabled` it will load auomatically after restarts.
-* To just load it run it once store in (and start from):  
-    `/home/bitcoin/cl-plugins-available/`
-
-### CLBOSS
-A plugin for automatic LN node management.  
-CLBOSS only requires to have funds deposited  to the onchain wallet of C-lightning.
-The recommended amount to start is ~ 10 million satoshis (0.1 BTC).
-
-It does automatically:
-
-* generate outbound capacity - opens channels
-* generate inbound capacity - submarine swaps through the boltz.exchange API
-* aware of onchain fees and mempool through c-lightning and makes transactions when fees are low
-* manages rebalancing - performs probing
-* closes bad channels (inactive or low traffic) - this function needs to activated manually
-
-Overall it is a tool which makes users able to send and receive lightning payments with minimal interaction, basically setting up a routing node by itself.
-
-The transactions made by CLBOSS does cost money and running it requires a fair amount of trust in the (fully open-source - MIT) code.
-Neither the CLBOSS nor the RaspiBlitz developers can take resposibility for lost sats, use at your own discretion!
-
-* Activate it in the menu - `SETTINGS` - `-CL CLBOSS`
-* Discussion: https://github.com/rootzoll/raspiblitz/issues/2490
-* Advanced usage
-https://github.com/ZmnSCPxj/clboss#clboss-status  
-* Stopping CLBOSS will leave the node in the last state. No channels will be closed or funds removed when CLBOSS is uninstalled.
-
-### Feeadjuster
-
-* Install:
-
-* to set the default fees in the config add:
-    ```
-    fee-base=BASEFEE_IN_MILLISATS
-    fee-per-satoshi=PPM_FEE_IN_SATS
-    ```
-* more options for the feeadjuster to be set in the c-lightning config can be seen in the [code](https://github.com/lightningd/plugins/blob/c16c564c2c5549b8f7236815490260c49e9e9bf4/feeadjuster/feeadjuster.py#L318): 
-    ```
-    plugin.add_option(
-        "feeadjuster-deactivate-fuzz",
-        False,
-        "Deactivate update threshold randomization and hysterisis.",
-        "flag"
-    )
-    plugin.add_option(
-        "feeadjuster-deactivate-fee-update",
-        False,
-        "Deactivate automatic fee updates for forward events.",
-        "flag"
-    )
-    plugin.add_option(
-        "feeadjuster-threshold",
-        "0.05",
-        "Relative channel balance delta at which to trigger an update. Default 0.05 means 5%. "
-        "Note: it's also fuzzed by 1.5%",
-        "string"
-    )
-    plugin.add_option(
-        "feeadjuster-threshold-abs",
-        "0.001btc",
-        "Absolute channel balance delta at which to always trigger an update. "
-        "Note: it's also fuzzed by 1.5%",
-        "string"
-    )
-    plugin.add_option(
-        "feeadjuster-enough-liquidity",
-        "0msat",
-        "Beyond this liquidity do not adjust fees. "
-        "This also modifies the fee curve to achieve having this amount of liquidity. "
-        "Default: '0msat' (turned off).",
-        "string"
-    )
-    plugin.add_option(
-        "feeadjuster-adjustment-method",
-        "default",
-        "Adjustment method to calculate channel fee"
-        "Can be 'default', 'soft' for less difference or 'hard' for higher difference"
-        "string"
-    )
-    plugin.add_option(
-        "feeadjuster-imbalance",
-        "0.5",
-        "Ratio at which channel imbalance the feeadjuster should start acting. "
-        "Default: 0.5 (always). Set higher or lower values to limit feeadjuster's "
-        "activity to more imbalanced channels. "
-        "E.g. 0.3 for '70/30'% or 0.6 for '40/60'%.",
-        "string"
-    )
-    plugin.add_option(
-        "feeadjuster-feestrategy",
-        "global",
-        "Sets the per channel fee selection strategy. "
-        "Can be 'global' to use global config or default values, "
-        "or 'median' to use the median fees from peers of peer "
-        "Default: 'global'.",
-        "string"
-    ```
-
-* start the feeadjuster
-    ```
-    cl plugin start /home/bitcoin/cl-plugins-available/plugins/feeadjuster/feeadjuster.py
-    ```
-* stop (best to run only periodically)
-    ```
-    cl plugin stop /home/bitcoin/cl-plugins-available/plugins/feeadjuster/feeadjuster.py
-    ```
-* Can use menu - `CL` - `SUEZ` to visualize the channel balances and fee settings
-* check the list of base fees
-    ```
-    cl listpeers | grep fee_base_msat
-    ```
-* check the list of proportional fees
-    ```
-    cl listpeers | grep fee_proportional_millionths
-    ```
-* set the fees to the defaults
-    ```
-    cl setchannelfee all
-    ```
-
-### Dual funded channels
-#### Reading
-* https://medium.com/blockstream/c-lightning-opens-first-dual-funded-mainnet-lightning-channel-ada6b32a527c  
-* https://medium.com/blockstream/setting-up-liquidity-ads-in-c-lightning-54e4c59c091d  
-* https://twitter.com/niftynei/status/1389328732377255938  
-* lightning-rfc PR: https://github.com/lightningnetwork/lightning-rfc/pull/851/files
-* represented by the feature bits 28/29
-
-#### Setting up
-* activate the feature on your node:  
-Type: `clconf` or use the menu `SYSTEM` - `CLCONF`.  
-Add the line:
-    ```
-    experimental-dual-fund    
-    ```
-    Save and restart C-lightning.
-
-* set up a liquidity ad:
-    ```
-    lightning-cli funderupdate -k policy=match policy_mod=100
-    ```
-    or set in the config for example - see the meaning of each line in https://medium.com/blockstream/setting-up-liquidity-ads-in-c-lightning-54e4c59c091d :
-
-    ```
-    experimental-dual-fund
-    funder-policy=match
-    funder-policy-mod=100
-    lease-fee-base-msat=500sat
-    lease-fee-basis=50
-    channel-fee-max-base-msat=100sat
-    channel-fee-max-proportional-thousandths=2
-    ```
-* check the settings used currently on your node:
-    ```
-    lightning-cli funderupdate
-    ```
-* check your advertised settings (needs some minutes to appear):
-    ```
-    lightning-cli listnodes $(lightning-cli getinfo | jq .id)
-    ```
-
-#### Open a dual funded channel
-* check if a node has onchain liquidity on offer:
-    ```
-    lightning-cli listnodes nodeid
-    ```
-
-    Example:
-    ``` 
-    lightning-cli listnodes 02cca6c5c966fcf61d121e3a70e03a1cd9eeeea024b26ea666ce974d43b242e636
-    ```
-* list all nodes known in the graph with active offers:
-    ```
-    lightning-cli listnodes | grep option_will_fund -B20 -A7
-    ```
-* note the node `id` and `compact_lease`
-
-* connect to the node
-    ```
-    lightning-cli connect nodeID@IP_or.onion
-    ```
-#### Fundchannel syntax
-*  the amount is the own funds in the wallet contributed  
-use equal amounts to have a balanced channel from start  
-the amounts can be specified in `sat` or `btc`
-    ```
-    lightning-cli fundchannel -k id=NODE_ID amount=OWN_AMOUNTsat request_amt=PEER_CONTRIBUTION_AMOUNTsat compact_lease=COMPACT_LEASE
-    ```  
-    It can fail if the offer changed or there are not enough funds available on either side.
-
-* open a dual funded channel with a chosen utxo and miner feerate  
-list the utxo-s with `lightning-cli listfunds`, can list multiple  
-the feerate is in `perkb` by default, e.g. use 1000 for 1 sat/byte
-    ```
-    lightning-cli fundchannel feerate=PERKB_FEERATE utxos='["TRANSACTION_ID:INDDEX_NUMBER"]' -kid=NODE_ID amount=OWN_AMOUNTsat request_amt=PEER_CONTRIBUTION_AMOUNTsat compact_lease=COMPACT_LEASE
-    ```
-
-### Offers
-* Details at bolt12.org
-* Create an offer to receive payments:  
-https://lightning.readthedocs.io/lightning-offer.7.html
-    ```
-    lightning-cli offer amount description [vendor] [label] [quantity_min] [quantity_max] [absolute_expiry] [recurrence] [recurrence_base] [recurrence_paywindow] [recurrence_limit] [single_use]
-    ```
-* Example:  
-Create a reusable offer which can be paid with any amount for LN tips using a fixed string.
-    ```
-    lightning-cli offer any tip
-    ```
-
-* Create an offer to send payments:  
-https://lightning.readthedocs.io/lightning-offerout.7.html  
-    ```
-    lightning-cli offerout amount description [vendor] [label] [absolute_expiry] [refund_for]
-    ```
-* Fetch an invoice to pay an offer:  
-https://lightning.readthedocs.io/lightning-fetchinvoice.7.html  
-Will need at least one peer which supports onion the messages. For example:
-    ```
-    lightning-cli connect 024b9a1fa8e006f1e3937f65f66c408e6da8e1ca728ea43222a7381df1cc449605@128.199.202.168:9735
-    ```
-* Then use the command to fetch the BOLT12 invoice:  
-    ```
-    lightning-cli fetchinvoice offer [msatoshi] [quantity] [recurrence_counter] [recurrence_start] [recurrence_label] [timeout] [payer_note]
-    ```
-* decode a BOLT12 invoice:  
-    ```
-    lightning-cli decode bolt12_invoice
-    ```
-* pay a a BOLT12 invoice:
-Will need to pay through a peer which supports the onion messages which means you need at least one channel with such a node.
-    ```
-    lightning-cli pay bolt12_invoice
-    ```
-* see if there is a new invoice is paid with:
-    ```
-    lightning-cli listinvoices
-    ```
-    The `pay_index` will increase as the offer gets reused.
-
-### About the feature bits
-* https://bitcoin.stackexchange.com/questions/107484/how-can-i-decode-the-feature-string-of-a-lightning-node-with-bolt-9
-* Convert the hex number from `lightning-cli listpeers` to binary: https://www.binaryhexconverter.com/hex-to-binary-converter and count the position of the bits from the right.
-
-
-## Testnets
-* for testnet and signet there are prefixes `t` and `s` used for the aliases, daemons and their own plugin directory names.
-* Testnet
-    ```
-    # alias: 
-    tcl | tclconf | tcllog
-
-    # daemon service name: 
-    tlightningd
-    
-    # config file:
-    /home/bitcoin/.lightningd/testnet/config
-    
-    # plugin directory:
-    /home/bitcoin/tcl-plugins-enabled
-    ```
-* Signet
-    ```
-    # aliases:
-    scl | sclconf | scllog
-
-    # daemon service name: 
-    slightningd
-
-    # config file:
-    /home/bitcoin/.lightningd/signet/config
-
-    # plugin directory:
-    /home/bitcoin/scl-plugins-enabled
-    ```
-
-## Backups
-* https://lightning.readthedocs.io/FAQ.html#how-to-backup-my-wallet
-* General details: https://lightning.readthedocs.io/BACKUP.html
-### Seed
-* by default a BIP39 wordlist compatible, 24 words seed is used to generate the `hsm_secret`
-* if the wallet was generated or restored from seed on the RaspiBlitz the seed is stored in the disk with the option to encrypt 
-### How to display the hsm_secret in a human-readable format?
-* If there is no seed available it isbest is to save the hsm_secret as a file with `scp`. To display as text:
-    ```
-    sudo cat /home/bitcoin/.lightning/bitcoin/hsm_secret | xxd
-    ```
-### Channel database
-* Stored on the disk and synchronised to the SDcard with the help of the bakcup plugin.
-
-### Recovery
-* https://lightning.readthedocs.io/FAQ.html#database-corruption-channel-state-lost
-* https://lightning.readthedocs.io/FAQ.html#loss
-#### Recover from a cl-rescue file
-* use the `REPAIR-CL` - `FILERESTORE` option in the menu for instructions to upload
-#### Recover from a seed
-* use the `REPAIR-CL` - `SEEDRESTORE` option in the menu for instructions to paste the seedwords to restore
-#### Rescan the chain after restoring a used c-lightning wallet
-* https://lightning.readthedocs.io/FAQ.html#rescanning-the-block-chain-for-lost-utxos
-* Stop `lightningd`:
-    ```
-    sudo systemctl stop lightningd
-    ```
-* Rescan from the block 700000
-    ```
-    sudo -u bitcoin lightningd --rescan=700000
-    ```
-
-## Script file help list
-
-
-* generate a list of the help texts on a RaspiBlitz:
-    ```
-    cd /home/admin/config.scripts/
-    ls cl*.sh > clScriptList.txt
-    sed -i 's#^#./#g' clScriptList.txt
-    sed -i 's#.sh#.sh -h#g' clScriptList.txt
-    bash -x clScriptList.txt
-    rm clScriptList.txt
-    ```
-
-```
-+ ./cl.backup.sh -h
-
----------------------------------------------------
-CL RESCUE FILE (tar.gz of complete cl directory)
----------------------------------------------------
-cl.backup.sh cl-export
-cl.backup.sh cl-export-gui
-cl.backup.sh cl-import [file]
-cl.backup.sh cl-import-gui [setup|production] [?resultfile]
----------------------------------------------------
-SEED WORDS
----------------------------------------------------
-cl.backup.sh seed-export-gui [lndseeddata]
-cl.backup.sh seed-import-gui [resultfile]
-
-+ ./cl.check.sh -h
-
-# script to check CL states
-# cl.check.sh basic-setup
-# cl.check.sh prestart [mainnet|testnet|signet]
-
-+ ./cl.hsmtool.sh -h
-
-Create new wallet or import seed
-Unlock/lock, encrypt, decrypt, set autounlock or change password for the hsm_secret
-
-Usage:
-Create new wallet:
-cl.hsmtool.sh [new] [mainnet|testnet|signet] [?seedPassword]
-cl.hsmtool.sh [new-force] [mainnet|testnet|signet] [?seedPassword]
-There will be no seedPassword(passphrase) used by default
-new-force will delete any old wallet and will work without dialog
-
-cl.hsmtool.sh [seed] [mainnet|testnet|signet] ["space-separated-seed-words"] [?seedPassword]
-cl.hsmtool.sh [seed-force] [mainnet|testnet|signet] ["space-separated-seed-words"] [?seedPassword]
-The new hsm_secret will be not encrypted if no NewPassword is given
-seed-force will delete any old wallet and will work without dialog
-
-cl.hsmtool.sh [unlock|lock] <mainnet|testnet|signet>
-cl.hsmtool.sh [encrypt|decrypt] <mainnet|testnet|signet>
-cl.hsmtool.sh [autounlock-on|autounlock-off] <mainnet|testnet|signet>
-
-cl.hsmtool.sh [change-password] <mainnet|testnet|signet> <NewPassword>
-
-+ ./cl.install-service.sh -h
-
-Script to set up or update the C-lightning systemd service
-Usage:
-/home/admin/config.scripts/cl.install-service.sh <mainnet|testnet|signet>
-
-+ ./cl.install.sh -h
-
-C-lightning install script
-The default version is: v0.10.1
-Setting up on mainnet unless otherwise specified
-mainnet / testnet / signet instances can run parallel
-
-Usage:
-cl.install.sh on <mainnet|testnet|signet>
-cl.install.sh off <mainnet|testnet|signet> <purge>
-cl.install.sh [update <version>|testPR <PRnumber>]
-cl.install.sh display-seed <mainnet|testnet|signet>
-
-+ ./cl-plugin.backup.sh -h
-
-Install the backup plugin for C-lightning
-Replicates the lightningd.sqlite3 database on the SDcard
-
-Usage:
-cl-plugin.backup.sh [on|off] [testnet|mainnet|signet]
-cl-plugin.backup.sh [restore] [testnet|mainnet|signet] [force]
-cl-plugin.backup.sh [backup-compact] [testnet|mainnet|signet]
-
-https://github.com/lightningd/plugins/tree/master/backup
-
-+ ./cl-plugin.clboss.sh -h
-
-Install or remove the CLBOSS C-lightning plugin
-version: v0.10
-Usage:
-cl-plugin.clboss.sh [on|off] [testnet|mainnet|signet]
-
-+ ./cl-plugin.feeadjuster.sh -h
-
-Install the feeadjuster plugin for C-lightning
-Usage:
-cl-plugin.feeadjuster.sh [on|off] <testnet|mainnet|signet>
-
-+ ./cl-plugin.http.sh -h
-
-Install, remove, connect the c-lightning-http-plugin
-version: 1dbb6537e0ec5fb9b8edde10db6b4cc613ccdb19
-Implemented for mainnet only.
-Usage:
-cl-plugin.http.sh [on|off|connect] <norestart>
-
-+ ./cl-plugin.sparko.sh -h
-
-Install, remove, connect or get info about the Sparko plugin for C-lightning
-version: v2.7
-Usage:
-cl-plugin.sparko.sh [on|off|menu|connect] [testnet|mainnet|signet] [norestart]
-
-+ ./cl-plugin.standard-python.sh -h
-
-Install and show the output of the chosen plugin for C-lightning
-Usage:
-cl-plugin.standard-python.sh on [plugin-name] <testnet|mainnet|signet> <persist|runonce>
-
-tested plugins:
-summary | helpme | feeadjuster | paytest
-
-find more at:
-https://github.com/lightningd/plugins
-
-+ ./cl-plugin.summary.sh -h
-
-Install and show the output if the summary plugin for C-lightning
-Usage:
-cl-plugin.summary.sh [testnet|mainnet|signet] [runonce]
-
-+ ./cl.rest.sh -h
-
-C-lightning-REST install script
-The default version is: v0.5.1
-mainnet | testnet | signet instances can run parallel
-The same macaroon and certs will be used for the parallel networks
-
-Usage:
-cl.rest.sh [on|off|connect] <mainnet|testnet|signet>
-
-+ ./cl.setname.sh -h
-
-Config script to set the alias of the C-lightning node
-cl.setname.sh [mainnet|testnet|signet] [?newName]
-
-+ ./cl.spark.sh -h
-
-Install, remove or get info about the Spark Wallet for C-lightning
-version: v0.3.0rc
-Usage:
-cl.spark.sh [on|off|menu] <testnet|mainnet|signet> 
-
-+ ./cl.update.sh -h
-
-Interim optional C-lightning updates between RaspiBlitz releases.
-cl.update.sh [info|verified|reckless]
-info -> get actual state and possible actions
-verified -> only do recommended updates by RaspiBlitz team
-  binary will be checked by signature and checksum
-reckless -> if you just want to update to the latest release
-  published on C-lightning GitHub releases (RC or final) without any
-  testing or security checks.
-
-```

FAQ.md

@@ -1,964 +0,0 @@
-<!-- omit in toc -->
-# FAQ - Frequently Asked Questions
-
-- [What changed on the single RaspiBlitz updates?](#what-changed-on-the-single-raspiblitz-updates)
-- [How do I update my RaspiBlitz (since 1.2)?](#how-do-i-update-my-raspiblitz-since-12)
-- [How do I update my RaspiBlitz from older versions like v1.0 or v1.1?](#how-do-i-update-my-raspiblitz-from-older-versions-like-v10-or-v11)
-- [How to verify the SD card image after download?](#how-to-verify-the-sd-card-image-after-download)
-- [How to update an old RaspiBlitz BEFORE v1.0? (LEGACY)](#how-to-update-an-old-raspiblitz-before-v10-legacy)
-- [Why do I need to re-burn my SD card for an update?](#why-do-i-need-to-re-burn-my-sd-card-for-an-update)
-- [I have the full blockchain on another storage. How do I copy it to the RaspiBlitz?](#i-have-the-full-blockchain-on-another-storage-how-do-i-copy-it-to-the-raspiblitz)
-- [How do I generate a Debug Report?](#how-do-i-generate-a-debug-report)
-- [Can I run my RaspiBlitz on Solar Energy?](#can-i-run-my-raspiblitz-on-solar-energy)
-- [Why is my "final sync" taking so long?](#why-is-my-final-sync-taking-so-long)
-- [How do I backup my Lightning Node?](#how-do-i-backup-my-lightning-node)
-  - [1) Securing your On-Chain- and Channel-Funds during Operation](#1-securing-your-on-chain--and-channel-funds-during-operation)
-  - [2) Making a complete LND data backup](#2-making-a-complete-lnd-data-backup)
-- [How can I recover my coins from a failing RaspiBlitz?](#how-can-i-recover-my-coins-from-a-failing-raspiblitz)
-  - [1) Recover LND data](#1-recover-lnd-data)
-  - [2) Recover from Wallet Seed](#2-recover-from-wallet-seed)
-- [What is this mnemonic seed word list?](#what-is-this-mnemonic-seed-word-list)
-- [How do I move funds & channels from RaspiBlitz to LND Lightning Desktop App?](#how-do-i-move-funds--channels-from-raspiblitz-to-lnd-lightning-desktop-app)
-- [How do I change the Name/Alias of my lightning node](#how-do-i-change-the-namealias-of-my-lightning-node)
-- [What to do when on SSH I see "WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!"](#what-to-do-when-on-ssh-i-see-warning-remote-host-identification-has-changed)
-- [When using Auto-Unlock, how much security do I lose?](#when-using-auto-unlock-how-much-security-do-i-lose)
-- [I connected my HDD but it still says 'Connect HDD' on the display?](#i-connected-my-hdd-but-it-still-says-connect-hdd-on-the-display)
-- [How do I shrink the QR code for connecting my Shango/Zap/Zeus mobile phone?](#how-do-i-shrink-the-qr-code-for-connecting-my-shangozapzeus-mobile-phone)
-- [Why is my bitcoin IP on the display red?](#why-is-my-bitcoin-ip-on-the-display-red)
-- [Why is my node address on the display red?](#why-is-my-node-address-on-the-display-red)
-- [Why is my node address on the display yellow (not green)?](#why-is-my-node-address-on-the-display-yellow-not-green)
-- [Can I run the RaspiBlitz as Backend for BTCPayServer?](#can-i-run-the-raspiblitz-as-backend-for-btcpayserver)
-- [I don't have a LAN port on my Laptop - how do I connect to my RaspiBlitz?](#i-dont-have-a-lan-port-on-my-laptop---how-do-i-connect-to-my-raspiblitz)
-- [Is it possible to connect the Blitz over Wifi instead of using a LAN cable?](#is-it-possible-to-connect-the-blitz-over-wifi-instead-of-using-a-lan-cable)
-- [Can I directly connect the RaspiBlitz to my laptop?](#can-i-directly-connect-the-raspiblitz-to-my-laptop)
-- [How do I unplug/shutdown safely without SSH](#how-do-i-unplugshutdown-safely-without-ssh)
-- [How can I build an SD card from another branch?](#how-can-i-build-an-sd-card-from-another-branch)
-- [How can I build an SD card from my forked GitHub Repo?](#how-can-i-build-an-sd-card-from-my-forked-github-repo)
-- [How can I checkout a new branch from the RaspiBlitz repo to my forked repo?](#how-can-i-checkout-a-new-branch-from-the-raspiblitz-repo-to-my-forked-repo)
-- [How can I sync a branch of my forked GitHub with my local RaspiBlitz?](#how-can-i-sync-a-branch-of-my-forked-github-with-my-local-raspiblitz)
-- [How contribute a feature/change from my forked branch back to the RaspiBlitz repo?](#how-contribute-a-featurechange-from-my-forked-branch-back-to-the-raspiblitz-repo)
-- [How can I help testing a Pull Request?](#how-can-i-help-testing-a-pull-request)
-- [How to attach the RaspberryPi to the HDD?](#how-to-attach-the-raspberrypi-to-the-hdd)
-- [What other case options do I have?](#what-other-case-options-do-i-have)
-- [Are those "Under-Voltage detected" warnings a problem?](#are-those-under-voltage-detected-warnings-a-problem)
-- [Is using the prepared SD card image secure?](#is-using-the-prepared-sd-card-image-secure)
-- [What is the process of creating a new SD card image release?](#what-is-the-process-of-creating-a-new-sd-card-image-release)
-- [How do I return to the menu after exiting to the command line](#how-do-i-return-to-the-menu-after-exiting-to-the-command-line)
-- [Can I run RaspiBlitz on other computers than RaspberryPi?](#can-i-run-raspiblitz-on-other-computers-than-raspberrypi)
-- [Can I flip the screen?](#can-i-flip-the-screen)
-- [How do I setup fresh/clean/reset and without going into recovery mode?](#how-do-i-setup-freshcleanreset-and-without-going-into-recovery-mode)
-- [My blockchain data is corrupted - what can I do?](#my-blockchain-data-is-corrupted---what-can-i-do)
-- [Can I run the RaspiBlitz without a display/LCD?](#can-i-run-the-raspiblitz-without-a-displaylcd)
-- [How do I set up VNC?](#how-do-i-set-up-vnc)
-- [I have two RaspiBlitz in my network - can they both be public?](#i-have-two-raspiblitz-in-my-network---can-they-both-be-public)
-- [How do I change the public port LND/Lightning node is running on?](#how-do-i-change-the-public-port-lndlightning-node-is-running-on)
-- [How do I solve a "signature mismatch after caveat verification" error?](#how-do-i-solve-a-signature-mismatch-after-caveat-verification-error)
-- [Why is my node not routing?](#why-is-my-node-not-routing)
-- [How can I update LND or bitcoind even before the next RaspiBlitz update?](#how-can-i-update-lnd-or-bitcoind-even-before-the-next-raspiblitz-update)
-- [I cannot connect via SSH to my RaspiBlitz. What do I do?](#i-cannot-connect-via-ssh-to-my-raspiblitz-what-do-i-do)
-- [How to SSH over Tor?](#how-to-ssh-over-tor)
-- [How to setup port-forwarding with a SSH tunnel?](#how-to-setup-port-forwarding-with-a-ssh-tunnel)
-- [How do I setup just a port-forwarding user on my public server?](#how-do-i-setup-just-a-port-forwarding-user-on-my-public-server)
-- [How do I connect a UPS to the RaspiBlitz?](#how-do-i-connect-a-ups-to-the-raspiblitz)
-- [Why use BTRFS on RaspiBlitz?](#why-use-btrfs-on-raspiblitz)
-  - [Storing your important Data in RAID1 with a USB Thumb Drive](#storing-your-important-data-in-raid1-with-a-usb-thumb-drive)
-  - [Snapshotting the Blockchain](#snapshotting-the-blockchain)
-- [How do I use BTRFS on RaspiBlitz?](#how-do-i-use-btrfs-on-raspiblitz)
-- [How to recover a BTRFS partition?](#how-to-recover-a-btrfs-partition)
-- [How do I fix a displayed Error in my Config?](#how-do-i-fix-a-displayed-error-in-my-config)
-- [How to fix my upside down LCD after update?](#how-to-fix-my-upside-down-lcd-after-update)
-- [How can I repair my SSH login?](#how-can-i-repair-my-ssh-login)
-- [How to use the Let's Encrypt client](#how-to-use-the-lets-encrypt-client)
-  - [Let's Encrypt - HTTP-01](#lets-encrypt---http-01)
-  - [Let's Encrypt - DNS-01](#lets-encrypt---dns-01)
-  - [Let's Encrypt - eMail Address](#lets-encrypt---email-address)
-  - [Let's Encrypt - Installation details](#lets-encrypt---installation-details)
-  - [How can I customize my RaspiBlitz or add other software?](#how-can-i-customize-my-raspiblitz-or-add-other-software)
-- [Versioning](#versioning)
-- [GitHub Workflow](#github-workflow)
-- [How do I find the IP address when running without a display?](#how-do-i-find-the-ip-address-when-running-without-a-display)
-
----
-
-## What changed on the single RaspiBlitz updates?
-
-See the [CHANGES.md](CHANGES.md) file for details.
-
-## How do I update my RaspiBlitz (since 1.2)?
-
-The update should be quite simple - you don't need to close any channels:
-
-- It would be best to get a second 16GB or 32GB SD card - but you can also reuse your old one
-- In the SSH main menu of you RaspiBlitz choose `UPDATE` & follow the dialogs until shutdown
-- Download the new RaspiBlitz image file from the [GitHub README](https://github.com/rootzoll/raspiblitz/blob/dev/README.md#installing-the-software)
-- Write the new image to the (new) SD card with a tool like [balena etcher](https://www.balena.io/etcher/)
-- RaspiBlitz with new SD card image - it now goes through a recover/update phase - this may take some time.
-- Once that's done, login once via SSH and use the password raspiblitz and set a new password A (can be your old one or a new one).
-
-After the final reboot your RaspiBlitz should be ready, running the new RaspiBlitz version.
-
-## How do I update my RaspiBlitz from older versions like v1.0 or v1.1?
-
-To update you DON'T NEED to close any channels, remove funding, or download the blockchain again.
-
-Here is a YouTube video tutorial on how to update: https://www.youtube.com/watch?v=Xvn0WQfHUdI
-
-Simply [Download the new RaspiBlitz SD card image](https://github.com/rootzoll/raspiblitz#installing-the-software) to your laptop and have an SD card writer ready. Then login into your RaspiBlitz with SSH and:
-
-- main menu > OFF
-- remove power
-- remove SD card
-
-Write the new image to your SD card .. yes, you simply overwrite the old one. It's OK, all your personal data is on the HDD. If you want to be extra safe you can make an image backup of your old SD card first - but that is optional. If you made manual changes to your RaspiBlitz with scripts on the SD card you might want to check on this FAQ question first: [Why do I need to re-burn my SD card for an update?](FAQ.md#why-do-i-need-to-re-burn-my-sd-card-for-an-update).
-
-- insert new SD card image
-- power on the RaspiBlitz again
-
-You should see that it switched into recover/backup mode. It's now provisioning the fresh OS on the sd card with your old settings and data. This process can take some time, especially if you had the RTL Web UI activated. Follow the instructions on the display ... if it takes longer than an hour .. [get support](https://github.com/rootzoll/raspiblitz#support).
-
-When the update/recover process is ready you will see a `FINAL RECOVER LOGIN NEEDED` message on the display. Login via SSH by using the password `raspiblitz` and set your Password A again. It can be the same as the old one, but consider using the occasion to make a password change for security reasons. If you had auto-unlock activated you might also be asked to enter your old Password C again. Then it wil make a final reboot.
-
-After your RaspiBlitz is done catching up with the latest blockchain data you should see your status screen displaying your funds and channels. Your backup is complete.
-
-## How to verify the SD card image after download?
-
-You can do a quick check to verify that the sha256 hash of the file you downloaded is the same as the sha256 hash mentioned below the download link, or use the torrent download which will also check the file for a checksum after download. But this does not prove to you that the SD card image was actually built by the lead developer of the RaspiBlitz project.
-
-To verify that the download was actually signed by [rootzoll](https://keybase.io/rootzoll) you need to use GPG and import the following public key:
-
-```
-curl https://keybase.io/rootzoll/pgp_keys.asc | gpg --import
-```
-
-Next, download the "signature file" for the SD card image. It's the same download link as for the image file - just added a `.sig` at the end. You should also always find the download link for the signature file in the README right below the image download link following the `SIGNATURE` link.
-
-If you know have all the three elements needed - the imported public key, the image signature and the image file itself - you can verify the download with:
-
-```
-gpg --verify [SIGNATURE-FILE] [IMAGE-FILE]
-```
-
-As a result you should see a "correct signature" message with a main fingerprint the same as you can find on the [keybase.io/rootzoll](https://keybase.io/rootzoll) that is ending on `1C73 060C 7C17 6461`. If that fingerprint is correct, the SD card image you downloaded is a original release RaspiBlitz.
-
-## How to update an old RaspiBlitz BEFORE v1.0? (LEGACY)
-
-If your old RaspiBlitz is version 0.98 or higher, just follow the update instructions in the README.
-
-If you run a version earlier then 0.98 you basically need to setup a new RaspiBlitz to update - but you can keep the blockchain data on the HDD, so you don't need have that long waiting time again:
-
-1. Close all open lightning channels you have (`lncli closeallchannels --force`) or use the menu option 'CLOSE ALL' if available. Wait until all closing transactions are done.
-
-2. Move all on-chain funds to a wallet outside raspiblitz (`lncli sendcoins --conf_target 3 <ADDRESS> <AMT>`) or use the menu option 'CASHOUT' if available
-
-3. Prepare the HDD for the new setup by running the script `/home/admin/XXcleanHDD.sh` (Blockchain will stay on HDD)
-
-4. Then shutdown RaspiBlitz (`sudo shutdown now`), flash the SD card with new image, redo a fresh setup of RaspiBlitz, move your funds back in, and re-open your channels
-
-## Why do I need to re-burn my SD card for an update?
-
-I know it would be nicer to run just an update script and be ready to go. But then the scripts would need to be written in a much more complex way to be able to work with any versions of LND and Bitcoind (they are already complex enough with all the edge cases) and testing would become even more time consuming than it is now. That's not something that a single developer can deliver.
-
-For some, it might be a pain point to make an update by re-burning a new SD card - especially if you added your own scripts or made changes to the system - but that's by design. It's a way to enforce a "clean state" with every update - the same state that I tested and developed the scripts with. The reason for that pain: I simply cannot write and support scripts that run on every modified system forever - that's simply too much work.
-
-With the SD card update mechanism I reduce complexity, I deliver a "clean state" OS, LND/Bitcoind and the scripts tightly bundled together exactly in the dependency/combination like I tested them and it's much easier to reproduce bug reports and give support that way.
-
-Of course, people should modify the system, add own scripts, etc ... but if you want to also have the benefit of the updates of the RaspiBlitz, you have two ways to do it:
-
-1. Contribute your changes back to the main project as pull requests so that they become part of the next update - the next SD card release.
-
-2. Make your changes so that they survive an SD card update easily - put all your scripts and extra data onto the HDD, AND document for yourself how to activate them again after an update. The file `/mnt/hdd/app-data/custom-installs.sh` runs with sudo rights after an update/recovery from a fresh SD card. This is the place to put all the install commands, cronjobs or editing of system configs for your personal modifications of RaspiBlitz.
-
-*BTW there is a beneficial side effect when updating with a new SD card: You also get rid of any malware or system bloat that happened in the past. You start with a fresh system :)*
-
-## I have the full blockchain on another storage. How do I copy it to the RaspiBlitz?
-
-Copying a already synced blockchain from another storage (e.g. your Laptop or external hard drive) can be a quick way to get the RaspiBlitz started or replacing a corrupted blockchain with a fresh one. Also that way you have synced and verified the blockchain yourself, and are not trusting the RaspiBlitz Torrent downloads (Don't trust, verify).
-
-One requirement is that the blockchain is from another bitcoin-core client with version greater or equal to 0.17.1.
-
-But we don't copy the data via USB to the device, because the HDD needs to be formatted in EXT4 and that is usually not read/writable by Windows or Mac computers. So I will explain a way to copy the data through your local network. This should work from Windows, Mac, Linux and even from another already synced RaspiBlitz.
-
-Both computers (your RaspberryPi and the other computer with the full blockchain) need to be connected to the same local network. Make sure that bitcoind/bitcoin-qt is stopped on the computer containing the blockchain. 
-If your blockchain source is another RaspiBlitz v1.5 or higher - go to `REPAIR` > `COPY-SOURCE`. 
-If your RaspiBlitz is below v1.5 then on the terminal `sudo systemctl stop bitcoind` and then go to the directory where the blockchain data is with `cd /mnt/hdd/bitcoin` - when the copy/transfer is done later reboot a RaspiBlitz source with `sudo shutdown -r now`.
-
-If everything described above is in order, start the setup of the new RaspiBlitz with a fresh SD card (like explained in the README) - it's OK that there is no blockchain data on your HDD yet - just follow the setup. When you get to the setup-point `Getting the Blockchain` choose the COPY option. Starting from version 1.0 of the RaspiBlitz this will give you further detailed instructions how to transfer the blockchain data onto your RaspiBlitz. In short: On your computer with the blockchain data source you will execute SCP commands that will copy the data over your local network to your RaspiBlitz.
-
-Once you finished all the transfers, the Raspiblitz will make a quick-check on the data - but that will not guarantee that everything in detail was OK with the transfer. Check further FAQ answers if you get stuck or see a final sync with a value below 90%.
-
-## How do I generate a Debug Report?
-
-If your RaspiBlitz is not working correctly and you like to get help from the community, it's good to provide more debug information, so others can better diagnose your problem - please follow the following steps to generate a debug report:
-
-- SSH into your raspiblitz as admin user with your password A
-- If you see the menu - use CTRL+C to get to the terminal
-- To generate debug report run: `debug`
-- Then copy all output beginning with `*** RASPIBLITZ LOGS ***` and share this
-
-*PLEASE NOTICE: It's possible that these logs can contain private information (like IPs, node IDs, ...) - just share publicly what you feel OK with.*
-
-## Can I run my RaspiBlitz on Solar Energy?
-
-Yes - take a look at the project of [Chimezie Chuta](https://twitter.com/mezie16/status/1264513274080636928?s=20) 
-
-![RaspiSolar](pictures/raspisolar.jpg)
-
-More details in his book ["A-Z of Building your own Full Bitcoin Lightning Node: A hand Book for Enthusiasts"](https://blockspace.shop/products/a-z-of-building-your-own-full-bitcoin-lightning-node-a-hand-book-for-enthusiasts)
-
-## Why is my "final sync" taking so long?
-
-First of all if you see a final sync over 90% and you can see from time to time small increase - you should be OK ... this can take a looong time to catch up with the network. Only in the case that you actively choose the `SYNC` option in the `Getting the Blockchain` is a final sync under 90% OK. If you did a torrent or a copy from another computer and you are seeing under 90% something went wrong, and the setup process is ignoring your prepared Blockchain and doing a full sync - which can almost take forever on a raspberryPi.
-
-If something is wrong (like mentioned above) then try again from the beginning. You need to reset your HDD for a fresh start: SSH in as admin user. Abort the final sync info with CTRL+c to get to the terminal. Then run `sudo /home/admin/XXcleanHDD.sh -all` and follow the script to delete all data in HDD. When finished power down with `sudo shutdown now`. Then make a fresh SD card from image and this time try another option to get the blockchain. If you run into trouble the second time, please report an issue on GitHub.
-
-## How do I backup my Lightning Node?
-
-There are two ways of performing a Backup:
-
-### 1) Securing your On-Chain- and Channel-Funds during Operation
-
-This is best done by auto backing-up the 'channel.backup' file to a remote location. But it just secures the funds you have in your on-chain wallet or in your channels. On recovery the channels will get closed. For details on how to setup see the README:
-https://github.com/rootzoll/raspiblitz/blob/v1.2/README.md#backup-for-on-chain---channel-funds
-
-### 2) Making a complete LND data backup
-
-This backups all your LND data - including all open channels. But it's just intended to use when you move your LND data between computers, during update situations, or in rescue recoveries, because replaying out-dated backups can lead to the loss of all channel funds.
-
-To backup LND data in a rescue situation see next question "How can I recover my coins from a failing RaspiBlitz?".
-
-## How can I recover my coins from a failing RaspiBlitz?
-
-On a RaspiBlitz you have coins in your on-chain wallet (bitcoin wallet) and also coins in lightning channels. First we will try to recover all of them while trying to keep your channels open with "Recover LND data". If that is not possible you can fall back to the second option "Recover from Wallet Seed".
-
-### 1) Recover LND data
-
-The best chance to recover all your LND data/channels is when you still can SSH into the RaspiBlitz and the HDD is still usable/reachable (mounted) - even if it shows some errors. If this is not possible anymore you should skip to the second option "Recover from Wallet Seed" or try to recover the LND data from the HDD (directory `lnd`) from another computer.
-
-If you still can SSH in and HDD is readable, we can try to rescue/export your LND data (funds and channels) from a RaspiBlitz to then be able to restore it back to a fresh one. For this you can use the following procedure ...
-
-To rescue/export your Lightning data from a RaspiBlitz (since v1.1):
-
-* SSH into your RaspiBlitz and EXIT to terminal from the menu.
-* then run: `/home/admin/config.scripts/lnd.backup.sh lnd-export-gui`
-* follow the instructions of the script.
-
-This will create a lnd-rescue file (ends on gz.tar) that contains all the data from the LND. The script offers you a command to transfer the lnd-rescue file to your laptop. If the transfer was successful you can now setup a fresh RaspiBlitz. Do all the setup until you have a clean new Lightning node running - just without any funding or channels.
-
-Then to restore your old LND data and to recover your funds and channels:
-
-* SSH into your new RaspiBlitz and EXIT to terminal from the menu.
-* then run: `/home/admin/config.scripts/lnd.backup.sh lnd-import-gui`
-* follow the instructions of the script.
-
-This script will offer you a way to transfer the lnd-rescue file from your laptop to the new RaspiBlitz and will restore the old data. LND then gets restarted for you, and after some time it should show you the status screen again with your old funds and channels.
-
-**Be aware that if backup is some hours old, channels could have been closed by the other party and it may take some time until you see funds back on-chain. If backup is somewhat older then 1 day also the channel counter-parties may have used your offline time to cheat you with an old state. And if your backup was not the latest state it could also be happening that you are posting an old channel state (seen as cheating) and funds of that channel get forfeited as punishment. So again .. this backup method can be risky, use with caution. While it's recommended to try in recover and rescue situations - it's not for regular backups.**
-
-### 2) Recover from Wallet Seed
-
-Remember those 24 words you were writing down during the setup? That's your "cipher seed" - These words are very important for recovering your wallet. If you don't have them anymore: go back to option "Recover LND data" (see above) and check all possible ways to recover data from the HDD. If you still have the word seed: good, but read the following carefully:
-
-With the word seed you can recover the on-chain funds that LND was managing for you - but it does not contain all the details about the channels you have open - it's mostly the key to your funding wallet. If you were able to close all channels or never opened any, then you should be safe: The best results to recover on-chain funds from wallet seeds have been reported from people installing the Lightning Labs App on laptop and then using the wallet seed (and same wallet passwords): https://github.com/lightninglabs/lightning-app/releases. Other people were succesful in this process using the Zap Desktop wallet (OSX, Win, Linux): https://zap.jackmallers.com/download
-
-If you had open channels it would be best to check if you have also the `channel.backup` file (Static-Channel-Backup feature) that is available since LND 0.6 (RaspiBlitz v1.2) and use it in the process below ... for more details on the `channel.backup` file see [README.md on backups](README.md#backup-for-on-chain---channel-funds).
-
-- SetUp a fresh RaspiBlitz (fresh SD-Card image and clean HDD).
-- During the new SetUp, when you get to the point of creating the LND wallet (see image below).
-- Choose `OLD - I had an old Node I want to recover/restore`  option and then
-- Choose `SEED+SCB - Seed & channel.backup file` option
-- and follow the instructions to upload your `channel.backup` file and enter your seed
-
-Then give LND some time to re-scan the blockchain. In the end you will have restored your funding wallet. You maybe need to wait for your old channel counterparts to force close the old channels until you see the coins displayed again.
-
-If you don't have the `channel.backup` file but only the seed words there is a last hope - read this article:
-https://medium.com/@guggero/did-you-lose-funds-on-the-lightning-network-because-of-a-disk-crash-8971b6a92494
-
-*Important: If you see a zero balance for on-chain funds after restoring from seed ... see details discussed [here](https://github.com/rootzoll/raspiblitz/issues/278) - you might try setup fresh this time with bigger look-ahead number.*
-
-## What is this mnemonic seed word list?
-
-With the 24 word list given you by LND upon wallet creation you can recover your private key. You should write it down and store it at a safe place. Bear in mind that *this 24 word mnemonic seed is not based on the BIP 39* and therefore cannot be recovered using a Bitcoin wallet.
-
-For more background on the LND mnemonic seed [read this article](https://github.com/lightningnetwork/lnd/blob/master/docs/recovery.md#recovering-funds-from-lnd-funds-are-safu).
-
-## How do I move funds & channels from RaspiBlitz to LND Lightning Desktop App?
-
-Before you start - download a LND-data-rescue file from your RaspiBlitz to your laptop `main menu -> UPDATE -> Update Anyway -> Start Update -> Download Backup -> FOLLOW INSTRUCTIONS and press Enter when ready with download -> START UPDATE`. Now your RaspiBlitz will power down.
-
-Now install the LND Lightning Desktop App for your OS: https://github.com/lightninglabs/lightning-app/releases
-
-Then start the App and create a new wallet - it's a throw-away wallet (will be deleted afterwards with no funds) - so you don't need to keep seeds safe. To get easily through the setup just make a photo of the seed with your mobile. If you get asked for funding - just click "done" until you reach the basic wallet screen. Then close the LND Desktop App.
-
-Now find out the path where LND stores the wallet data on your computer.
-
-Linux: [USER-DIRECTORY]/.config/lightning-app/lnd
-OSX: [USER-DIRECTORY]/Library/Application Support/lightning-app/lnd
-Windows: %USERPROFILE%\AppData\Roaming\lightning-app\lnd
-
-Then open that directory on your local file manager and delete all data in the `lnd` directory.
-
-Now unpack the lnd-rescue you made before and copy all the data from the `mnt/hdd/lnd` directory (including sub directories) into the LND-Path lnd directory. Delete the "lnd.conf" file.
-
-Now start the Lightning App again. Your wallet password should now be your RaspIBlitz Password C.
-
-**If it's working and you have access to your funds/channels on the Desktop App ... don't start the RaspiBlitz anymore. Delete SD card and HDD.**
-
-## How do I change the Name/Alias of my lightning node
-
-Use the "Change Name/Alias of Node" option in the Lightning - LND Wallet Options menu. The RaspiBlitz will automatically reboot after this.
-
-## What to do when on SSH I see "WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!"
-
-This means that he public SSH key of the RaspiBlitz has changed to the one you logged in with the last time under that IP.
-
-It's OK when happening during an update - when you changed the SD card image. If it's really happening out of the blue - check your local network setup for a problem. Maybe the local IP of your RaspiBlitz changed? Is there a second RaspiBlitz connected? It's a security warning, so at least take some time to check if anything is strange. But also don't immediately panic - when it's in your local network, normally it's some network thing - not an intruder.
-
-To fix this and to be able to login with SSH again, you have to remove the old public key for that IP from your local client computer. Just run the following command (with the replaced IP of your RaspiBlitz): `ssh-keygen -R IP-OF-YOUR-RASPIBLITZ` or remove the line for this IP manually from the known_hosts file (see the path to the file in the warning message).
-
-After that, you should be able to login with SSH again.
-
-## When using Auto-Unlock, how much security do I lose?
-
-The idea of the "wallet lock" in general, is that your private key / seed / wallet is stored in a encrypted way on your HDD. On every restart, you have to input the password once manually (unlock your wallet), so that the LND can read and write to the encrypted wallet again. This improves your security if your RaspiBlitz gets stolen or taken away - it loses power and then your wallet is safe - the attacker cannot access your wallet.
-
-When you activate the "Auto-Unlock" feature of the RaspiBlitz, the password of the wallet gets stored on the RaspiBlitz. So if an attacker steals the RaspiBlitz physically, it's now possible for them to find the password and unlock the wallet.
-
-## I connected my HDD but it still says 'Connect HDD' on the display?
-
-Your HDD may have no partitions yet. SSH into the RaspiBlitz as admin (see command and password on display) and you should be offered the option to create a partition. If this is not the case:
-
-Check/Exchange the USB cable. Connect the HDD to another computer and check if it shows up at all.
-
-OSX: https://www.howtogeek.com/212836/how-to-use-your-macs-disk-utility-to-partition-wipe-repair-restore-and-copy-drives/
-
-Windows: https://www.lifewire.com/how-to-open-disk-management-2626080
-
-Linux/Ubuntu (desktop): https://askubuntu.com/questions/86724/how-do-i-open-the-disk-utility-in-unity
-
-Linux/Raspbian (command line): https://www.addictivetips.com/ubuntu-linux-tips/manually-partition-a-hard-drive-command-line-linux/
-
-## How do I shrink the QR code for connecting my Shango/Zap/Zeus mobile phone?
-
-Make the fonts smaller until the QR code fits into your (fullscreen) terminal. In OSX use `CMD` + `-` key. In LINUX use `CTRL`+ `-` key. On WINDOWS Putty go into the settings and change the font size: https://globedrill.com/change-font-size-putty
-
-## Why is my bitcoin IP on the display red?
-
-The bitcoin IP is red when the RaspiBlitz detects that it cannot reach the port of bitcoin node from the outside. This means the bitcoin node can peer with other bitcoin nodes, but other bitcoin nodes cannot initiate a peering with you. Don't worry, you don't need a publicly reachable bitcoin node to run a (public) lightning node. If you want to change this however, you need to forward port 8333 on your router to the the RaspiBlitz. How to do this is different on every router.
-
-Some routers support a feature called UPnP where devices can automatically request a forwarding to be publicly reachable. By turning on `BTC UPnP` in the main menu `SERVICES` section, you can try if your router supports this feature.
-
-On details how to set port forwarding manually on your router model see: https://portforward.com
-
-## Why is my node address on the display red?
-
-The node address is red when the RaspiBlitz detects that it cannot reach the port of the LND node from the outside - when the device is behind a NAT or firewall of the the router. Your node is not publicly reachable. This means you can peer+openChannel with other public nodes, but other nodes cannot peer+openChannel with you. To change this you need to forward port 9735 on your router to the the RaspiBlitz. How to do this is different on every router.
-
-Some routers support a feature called UPnP where devices can automatically request a forwarding to be publicly reachable. By turning on `LND UPnP` in the main menu `SERVICES` section, you can try if your router supports this feature.
-
-On details how to set port forwarding manually on your router model see: https://portforward.com
-
-Also the self-testing of the RaspiBlitz to see if the port is forwarded or not might not work if your router is not supporting [Hairpinning](https://en.wikipedia.org/wiki/Hairpinning).
-
-## Why is my node address on the display yellow (not green)?
-
-Yellow is OK. The RaspiBlitz can detect that it can reach a service on the port 9735 of your public IP - this is in most cases the LND of your RaspiBlitz. But the RaspiBlitz cannot 100% for sure detect that this is its own LND service on that port - that's why it's just yellow, not green.
-
-For details on how to set port forwarding on your router model see: https://portforward.com
-
-## Can I run the RaspiBlitz as Backend for BTCPayServer?
-
-BTCPay Server is a solution to be your own payment processor to accept Lightning Payments for your online store: https://github.com/btcpayserver/btcpayserver
-
-You can find setup instructions for a experimental setup here: https://goo.gl/KnTzLu
-
-Thanks to @RobEdb (ask on twitter for more details) for running his demo store with RaspiBlitz: https://store.edberg.eu - buy a picture of [him and Andreas](https://store.edberg.eu/produkt/jag-andreas/) :)
-
-## I don't have a LAN port on my Laptop - how do I connect to my RaspiBlitz?
-
-You don't need a LAN port on your laptop as long as you can connect over WLAN to the same LAN router/switch the RaspiBlitz is connected to .. and you are on the same local network.
-
-## Is it possible to connect the Blitz over Wifi instead of using a LAN cable?
-
-A LAN cable is recommended because it reduces a possible source of error on the network connection side. But how to setup WLAN when you don't have a LAN-Router/Switch available see here:
-https://stadicus.github.io/RaspiBolt/raspibolt_20_pi.html#prepare-wifi
-
-## Can I directly connect the RaspiBlitz to my laptop?
-
-If you have a LAN port on your laptop - or you have a USB-LAN adapter, you can connect the RaspiBlitz directly (without a router/switch) to your laptop and share the WIFI internet connection. You can follow this [guide for OSX](https://medium.com/@tzhenghao/how-to-ssh-into-your-raspberry-pi-with-a-mac-and-ethernet-cable-636a197d055).
-
-In short for OSX:
-
-* make sure all VPNs are off (can interfere with local LAN)
-* connect with LAN directly
-* Settings > Sharing/Freigaben > activate "internet sharing" from WLAN to Ethernet
-* Settings > Network > Ethernet-Adapter > set to DHCP
-* in terminal > `ifconfig` there you should see the IP of the bridge100
-* in terminal > `arp -a` and check for an IP of a client to the bridge
-* in terminal > ssh admin@[clientIP]
-
-If anyone has experience on doing this in Linux/Win, please share.
-
-## How do I unplug/shutdown safely without SSH
-
-Just removing power from the RaspiBlitz can lead to data corruption if the HDD is right in the middle of a writing process. The safest way is always to SSH into the RaspiBlitz and use the "POWER OFF" option in the main menu.
-
-But if cannot login with SSH and you need to power off at least remove the LAN cable (network connection)first for sometime (around 10-30 secs - until you can see no more blinking lights on the HDD) and then remove the power cable. This should minimize the risk if data corruption in this situations.
-
-## How can I build an SD card from another branch?
-
-There might be new, but not released features in development that are not yet in the master branch - but you want to try them out.
-
-To build a SD card image from another branch than master, you follow the [Build the SD Card Image](README.md#build-the-sd-card-image) from the README, but execute the build script from the other branch and add the name of that branch as a parameter to the build script.
-
-For example if you want to make a build from the 'dev' branch you execute the following command:
-
-`wget --no-cache https://raw.githubusercontent.com/rootzoll/raspiblitz/dev/build_sdcard.sh && sudo bash build_sdcard.sh false false rootzoll dev lcd true true`
-
-## How can I build an SD card from my forked GitHub Repo?
-
-If you fork the RaspiBlitz repo (much welcome) and you want to run that code on your RaspiBlitz, there are two ways to do that:
-
-* The quick way: For small changes in scripts, go to `/home/admin` on your running RaspiBlitz, delete the old git with `sudo rm -r raspiblitz` then replace it with your code `git clone [YOURREPO]` and `patch`
-
-* The long way: If you like to install/remove/change services and system configurations you need to build a SD card from your own code. Prepare like in [Build the SD Card Image](README.md#build-the-sd-card-image) from the README but in the end run the command:
-
-`wget --no-cache https://raw.githubusercontent.com/[GITHUB-USERNAME]/raspiblitz/[BRANCH]/build_sdcard.sh && sudo bash build_sdcard.sh false false [GITHUB-USERNAME] [BRANCH] lcd true true`
-
-If you are then working in your forked repo and want to update the scripts on your RaspiBlitz with your latest repo changes, run `patch` - That's OK as long as you don't make changes to the SD card build script - for that you would need to build a fresh SD card again from your repo.
-
-## How can I checkout a new branch from the RaspiBlitz repo to my forked repo?
-
-You need to have your forked repo checked-out on your laptop. There your should see your forked repo as `origin` when you run `git remote -v`. If you don't see an additional `upstream` remote yet, then create it with the following command: `git remote add upstream https://github.com/rootzoll/raspiblitz.git`.
-
-So, first checkout the new branch named `BRANCH` from the original RaspBlitz repo to your local computer with: `git fetch upstream` and then `git checkout -b BRANCH upstream/BRANCH`.
-
-Now push the new branch to your forked GitHub repo with `git push -u origin BRANCH`.
-
-Once the branch is available and synced between the RaspiBlitz GitHub repo, your forked GitHub repo and your local computer git repo, you can start developing.
-
-## How can I sync a branch of my forked GitHub with my local RaspiBlitz?
-
-Since v1.5 of RaspiBlitz there has been an easy way thru the SSH menus: Under `MAIN MENU > UPDATE > PATCH` you have the option to change the GitHub repository and and branch to sync with. You change the GitHub Reposity by setting the GitHub username where you forked the Repo.
-
-So for example: If you forked the RaspiBlitz project (rootzoll/raspiblitz) on GitHub and your GitHub project page is now called: https://github.com/raumi75/raspiblitz ... then just change the repo to sync/patch with to your username `raumi75`. 
-
-Now you can use the `Patch/Sync RaspiBlitz with GitHub Repo` to easily keep your RaspiBlitz in sync with your forked repository and develop your own customizations and features.
-
-Background info and doing it manually:
-
-There is a git copy of the original RaspiBlitz GitHub repo on your physical RaspiBlitz in the folder `/home/admin/raspiblitz`. If you change into that folder and run `git remote -v` you can see the set origin repo.
-
-You need to change that origin repo to your forked repo. You do that with:
-```
-git remote set-url origin [THE-URL-OF-YOUR-FORKED-REPO]
-```
-
-Now to sync your branch namend BRANCH on your forked repo with your RaspiBlitz, you always just run:
-```
-/home/admin/config.scripts/blitz.github.sh BRANCH
-```
-
-So your workflow can go like this: You write code on your local computer. Commit to your local repo, push it to your forked repo and use the sync-script above to get the code to your RaspiBlitz.
-
-## How contribute a feature/change from my forked branch back to the RaspiBlitz repo?
-
-In the same way as described above, you can build a new feature or test a change. Once you have something ready that you want to contribute back, you make sure it's pushed to your forked GitHub repo, and then start a pull request from your forked repo to the RaspiBlitz repo.
-
-See more info: https://yangsu.github.io/pull-request-tutorial/
-
-## How can I help testing a Pull Request?
-
-Make sure to have the correct base image.
-Then go to the command line and create a branch for the PR:
-
-```
-cd /home/admin/raspiblitz
-git fetch origin pull/[PRNUMBER]/head:pr[PRNUMBER]
-git checkout pr[PRNUMBER]
-cd /home/admin
-/home/admin/config.scripts/blitz.github.sh -justinstall
-```
-
-Now you have the code of the PR active - depending on what scripts are changed you might need to reboot.
-
-To change back to the code:
-```
-/home/admin/config.scripts/blitz.github.sh master
-```
-
-## How to attach the RaspberryPi to the HDD?
-
-Try a rubber band.
-
-## What other case options do I have?
-
-You can put the heatsink-case (top-part mentioned in the shopping lists) into a customized 3D printed case for the RaspiBlitz called "Lightning Shell" - great work by @CryptoCloaks
-
-https://www.cryptocloaks.com/product/lightningshell/ (Delivery from USA)
-
-![LightningShell](pictures/lightningshell.jpeg)
-
-![LightningShell](pictures/lightningshell2.jpeg)
-
-Also there is the ZKDS metal case available that also needs some extra hardware (SATA-USB expansion board and USB bridge).
-
-https://diynodes.com (delivery from UK)
-
-![ZKDSMetalCase](pictures/metalcase.png)
-
-## Are those "Under-Voltage detected" warnings a problem?
-
-When your USB power adapter for the RaspiBlitz delivers too low of a power level, those messages with "Under-Voltage detected" (under-voltage) are shown on the display. This can lead to data loss/corruption on the HDD. If you see this just one or two times it's not OK, but can be in a tolerant window. Nevertheless it is important to make sure that your USB power adapter can deliver at least 3A (big and stable is good). If you still see those warnings maybe get a second USB Power adapter just for the HDD, and power the HDD through a Y-Cable - see https://en.wikipedia.org/wiki/Y-cable#USB or put a USB Hub with extra power between the Raspberry and the HDD.
-
-## Is using the prepared SD card image secure?
-
-Using pre-built software almost always shifts trust to the one who made the binary. But at least you can check with the SHA checksum after downloading to verify that the image downloaded is really the one offered by the GitHub repo. To do so, make a quick check that your browser is really on the correct GitHub page, and that the HTTPS of the GitHub page is signed by 'DigiCert'. Then compare the SHA-256 string (always next to the download link of the image on the README) with the result of the command `shasum -a 256 [DOWNLOADED-FILE-TO-CHECK]` (Mac/Linux). Still, this is not optimal and if at least some people from the community request it, I will consider signing the download as an author for the future.
-
-The best way would be to build the SD card yourself. You use the script `build_sdcard.sh` for this. Take a few minutes to check if you see anything suspicious in that build script and then follow the [README](README.md#build-the-sd-card-image) on this.
-
-## What is the process of creating a new SD card image release?
-
-Work notes for the process of producing a new SD card image release:
-
-* Make sure you have the "Versioning" final in your RaspiBlitz Source Code
-* Start [`Ubuntu LIVE`](http://releases.ubuntu.com/18.04.3/ubuntu-18.04.3-desktop-amd64.iso) from USB stick on the Build Computer (press F12 on startup)
-* Connect to a secure WiFi (hardware switch on) or LAN
-* Download the latest RaspiOS-64bit (zip & sig file) namend in the [build_sdcard.sh](./build_sdcard.sh) and note the SHA256 checksum
-* From the browser `Show All Downloads` and from the context menu select `Open Containing Folder`
-* On that file manager open context (right click) on the white-space and select `Open in Terminal`
-* Compare the checksum with the one you just made note of, using `shasum -a 256 *.zip`
-* Install curl if needed `sudo apt-get install -f curl net-tools`
-* Check signature: `curl https://www.raspberrypi.org/raspberrypi_downloads.gpg.key | gpg --import && gpg --verify *.sig`
-* The result should say "correct signature" and the fingerprint should end with `8738 CD6B 956F 460C`
-* Insert an NTFS formatted USB stick and use the file manager to move all files to the USB
-* Use in file manager context on NTFS USB stick `extract here` to unzip
-* Connect SD card reader with a 8GB SD card
-* In the file manager open context on the .img-file, select `Open With Disk Image Writer` and write the image to the SD card
-* In the file manager open context on `boot` drive free space `open in terminal`
-* Run the commands: `touch ssh` and `exit`
-* Eject the `boot` and the `NTFS` volume
-* Connect a RaspiBlitz (without HDD) to network, insert sd card and power up
-* Find the IP of the RaspiBlitz (arp -a or check router)
-* In terminal `ssh pi@[IP-OF-RASPIBLITZ]`
-* Password is `raspberry`
-* Run the following command BUT REPLACE `[BRANCH]` with the branch-string of your latest version
-* `wget --no-cache https://raw.githubusercontent.com/rootzoll/raspiblitz/[BRANCH]/build_sdcard.sh && sudo bash build_sdcard.sh false true rootzoll [BRANCH] lcd true true`
-* Monitor/Check outputs for warnings/errors - install LCD
-* Login new with `ssh admin@[IP-OF-RASPIBLITZ]` (pw: raspiblitz) and run `release`
-* Disconnect WiFi/LAN on build laptop (hardware switch off) and shutdown
-* Remove `Ubuntu LIVE` USB stick and cut power from the RaspberryPi
-* Connect USB stick with latest `TAILS` (make it stay offline)
-* Power on the Build Laptop (press F12 for boot menu)
-* Connect USB stick with GPG signing keys - decrypt drive if needed
-* Open Terminal and cd into directory of USB Stick under `/media/amnesia`
-* Run `gpg --import ./sub.key`, check and `exit`
-* Disconnect USB stick with GPG keys
-* Take the SD card from the RaspberryPi and connect with an external SD card reader to the laptop
-* Click on `boot` volume once in the file manger
-* Connect the NTFS USB stick, open in file manager and delete old files
-* Open Terminal and cd into directory of NTFS USB stick under `/media/amnesia`
-* Run `df` to check on the SD card device name (`boot` - ignore last partition number)
-* `dd if=/dev/[sdcarddevice] | gzip > ./raspiblitz-vX.X-YEAR-MONTH-DAY.img.gz`
-* When finished you should see that more then 7GB were copied
-* Then run `shasum -a 256 *.gz > sha256.txt`
-* Sign with `gpg --output raspiblitz-vX.X-YEAR-MONTH-DAY.img.gz.sig --detach-sign *.gz`
-* Shutdown build computer
-* Connect the NTFS USB stick to MacOS (it is just read-only)
-* Run tests on the new image
-* Upload the new image to the Download Server - put sig-file next to it
-* Copy SHA256-String into GitHub README and update the download link
-
-## How do I return to the menu after exiting to the command line
-
-Type the command `raspiblitz` to return to the main menu if you exited to the command line.
-
-## Can I run RaspiBlitz on other computers than RaspberryPi?
-
-There is an experimental section in this GitHub that tries to build for other SingleBoardComputers. Feel free to try it out and share your experience: [alternative.platforms/README.md](alternative.platforms/README.md)
-
-## Can I flip the screen?
-
-There is now an option under `SETTINGS` to rotate the screen.
-
-To do it manually: For the default 3.5" LCD you need to edit the /boot/config.txt. Run `sudo nano /boot/config.txt`
-Look for the line `dtoverlay=tft35a:rotate=270` towards the end. To flip the screen with 180 degrees change the line to `dtoverlay=tft35a:rotate=90` and reboot with `sudo reboot`. Reference: https://github.com/goodtft/LCD-show/issues/34
-
-## How do I setup fresh/clean/reset and without going into recovery mode?
-
-When you put in a SD card with a new/clean RaspiBlitz image the RaspiBlitz will go into recovery mode because it detects the old data on your HDD and assumes you just want to continue to work with this data.
-
-But there might be cases where you want to start a totally fresh/clean RaspiBlitz from the beginning. To do so you need to delete the old data from the HDD. Choose the option `RESET-ALL` under `REPAIR` to delete all data and start fresh.
-
-When the HDD is clean, then flash a new RaspiBlitz sd card and your setup should start fresh.
-
-## My blockchain data is corrupted - what can I do?
-
-You could try to re-index, but that can take a very long time - multiple days or even weeks. But there are other options:
-
-1. Get new Blockchain
-
-Use `REPAIR` in the SSH main menu and then choose `RESET-CHAIN`. Then you get offered multiple options to get new blockchain data.
-
-2. Backup LND Data, make fresh Blitz, Replay LND Data
-
-You can backup your channel and wallet data, make a complete fresh RaspiBlitz and after that is setup, you replace the LND data with your old data. Also make sure to check again on your power supply - it needs to deliver equal or more then 3A, and should deliver a stable current. If you think your HDD or SD card is degrading - maybe this is a good time to replace it. See for details the FAQ question: [How can I recover my coins from a failing RaspiBlitz?](FAQ.md#how-can-i-recover-my-coins-from-a-failing-raspiblitz)*
-
-## Can I run the RaspiBlitz without a display/LCD?
-
-The display is one of the nice features of the RaspiBlitz but it can run without it. Maybe not all the add-on features can be used to the full extent, but you can get started without the LCD and if you wish, plug it on later.
-
-If you want to use the HDMI output you can place a file called `hdmi` on the `boot` section of the RaspiBlitz sd card ... just connect the sd card to your laptop, create that file and then boot it up in the RaspberryPi.
-
-If you are already logged in you can use on the console the commands:
-
-- `hdmi` --> switch to HDMI
-- `lcd` --> switch to LCD
-
-## How do I set up VNC?
-
-Enter the Console/Terminal by selecting the last option from the Raspiblitz menu.  
-![Raspiblitz menu](pictures/vnc-go-to-console.png)  
-
-Enable the VNC server using raspi-config:  
-
-`sudo raspi-config`
-
-In the menu, go to  
-*Interfacing Options > VNC > Enable*  
-![Raspi-config menu](pictures/vnc-raspi-config-menu.png)  
-  
-After that reboot the Raspiblitz. You can do this easily from the Raspiblitz menu.  
-In the command line, type:   
-`menu`  
-The Raspiblitz menu has a reboot option if you scroll down. Select it and reboot.
-
-![Raspi-config menu](pictures/vnc-reboot-from-menu.png)
-
-
-After the Raspiblitz is rebooted, set a password for the VNC Server:  
-`sudo vncpasswd -service`  
-
-Set the Authentication parameter:  
-`sudo echo "Authentication=VncAuth" > /etc/vnc/config.d/common.custom`  
-
-Restart the VNC Server for settings to take effect:  
-`sudo systemctl restart vncserver-x11-serviced`  
-
-Open the relevant port in the firewall (ufw):  
-`sudo ufw allow vnc`
-
-Start the VNC server from the Raspiblitz:  
-`vncserver`  
-This will run by default in the display number '1'. If you want to specify another number, run this (change  *\<display-number\>* to whatever you prefer):  
-`vncserver :<display-number>`  
-
-![VNC server started](pictures/vnc-server-started.png)  
-
-From the VNC client (e.g. your PC, laptop), connect to the IP that the previous command has displayed in the screen (I covered it in pink in the screenshot). If everything is alright, you can see the display from the VNC client now.
-
-In order to stop broadcasting your display, stop the server from the Raspiblitz with this:  
-`vncserver -kill :<display-number>`  
-
-For example:
-`vncserver -kill :1`  
-
-
-**Note**: You may have to set the resolution through raspi-config in certain situations:  
-`sudo raspi-config`  
- *Advanced Options > Resolution*
-
-**Hint**: From macOS, there is a built in VNC client hidden away at: /System/Library/CoreServices/Applications/Screen\ Sharing.app  
-
-**Hint 2**: Find more info about VNC in Raspberry [here](https://www.raspberrypi.org/documentation/remote-access/vnc/).
-
-## I have two RaspiBlitz in my network - can they both be public?
-
-Yes but you need to change the port number (for example to 9736) on at least one of your RaspiBlitzes - see how to change a port below. Then you can forward both ports from your home internet router to the matching RaspiBlitzes.
-
-## How do I change the public port LND/Lightning node is running on?
-
-There is a experimental script you can call from the terminal that will make all changes for you ... see details here: https://github.com/rootzoll/raspiblitz/issues/100#issuecomment-466722712
-
-## How do I solve a "signature mismatch after caveat verification" error?
-
-If you get this error by LND it means that something is wrong with the macaroons being used to communicate with LND .. see: https://github.com/lightningnetwork/lnd/blob/master/docs/macaroons.md
-
-Fixing this depends on where you get this error:
-
-* If you get it in a mobile wallet, then redo the connection with the RaspiBlitz to get fresh macaroons.
-* If you get this from RTL or from the scripts of the SSH menus of the RaspiBlitz, then go to "EXPORT Macacroons and TLS.cert" in SSH main menu and choose the the "RESET Macaroons & TLS" option.
-
-Also make sure to check again on your power supply - it needs to deliver equal or more then 3A and should deliver a stable current. If you think your HDD is degrading - maybe this is a good time to replace it. See for details the FAQ question: [How can I recover my coins from a failing RaspiBlitz?](FAQ.md#how-can-i-recover-my-coins-from-a-failing-raspiblitz)
-
-## Why is my node not routing?
-
-1. You don't have inbound liquidity
-2. Low uptime
-3. Capital is committed to competitive destinations
-4. Capital committed to destinations no one wants to send to
-5. Fees are too high
-6. Your inbound liquidity doesn't have good inbound liquidity itself
-
-## How can I update LND or bitcoind even before the next RaspiBlitz update?
-
-Try updating before a official RaspiBlitz at your own risk - you can find some info about that here:
-https://stadicus.github.io/RaspiBolt/raspibolt_faq.html#how-to-upgrade-bitcoin-core
-
-## I cannot connect via SSH to my RaspiBlitz. What do I do?
-
-- Check the command again with how it shows on the display  - do you have it typed in correctly?
-- Replace `ssh` with `sudo ssh` and try it (laptop admin password might be required).
-
-If that doesn't work, try to ping the IP of the RaspiBlitz with `ping [IP-of-RaspiBlitz]`. If you get no response on the ping requests and the device is not reachable, try this check list:
-
-- Make sure that your RaspiBlitz and your laptop are really on the same local network
-- Check if you have a VPN running on your laptop - some VPNs block local network
-- Some Routers have `IP Isolation` switched on - not allowing two devices to connect
-
-If you've checked those and SSH is still not working: Join the conversation on [GitHub Issue #420](https://github.com/rootzoll/raspiblitz/issues/420).
-
-## How to SSH over Tor?
-
-SSH is already encrypted, why would I want to use it with Tor?
-* Remote access when away from LAN.
-* Anonymized access - Someone sniffing the traffic don't know where the server you are establishing a connection is, not the server side knows where the client is.
-
-Create Hidden Service:
-`bash /home/admin/config.scripts/internet.hiddenservice.sh ssh 22 22`
-
-SSH over Tor:
-`torsocks ssh admin@HiddenServiceAddress.onion`
-
-Get the address:
-`sudo cat /mnt/hdd/tor/ssh/hostname`
-
-## How to setup port-forwarding with a SSH tunnel?
-
-To use a public server for port-forwarding thru a SSH tunnel you can use the following experimental script on the RaspiBlitz (since v1.2):
-
-`/home/admin/config.scripts/internet.sshtunnel.py`
-
-But first you need to make sure that the public server you are using is supporting SSH reverse-tunneling and authentication by public authorized key. Check the `/etc/ssh/sshd_config` on the public server. It should contain the following settings:
-
-```
-RSAAuthentication yes
-PubkeyAuthentication yes
-GatewayPorts yes
-AllowTcpForwarding yes
-ClientAliveInterval 60
-ClientAliveCountMax 2
-```
-
-*Last two parameters were added as used in the ssh tunnel demo at #GPN19 https://media.ccc.de/v/gpn19-76-einen-server-daheim-ohne-ffentliche-ipv4-adresse#t=911*
-
-You can add those at the end of the file, save and reboot.
-
-On the RaspiBlitz you can then setup for example to forward the gRPC port 10009 (internal port) to the port 20009 on the public server (external port) with the user = `test` and server address = `raspiblitz.com` with the following command:
-
-`/home/admin/config.scripts/internet.sshtunnel.py on test@raspiblitz.com "10009<20009"`
-
-You can even set multiple port forwardings like with:
-
-`/home/admin/config.scripts/internet.sshtunnel.py on test@raspiblitz.com "10009<20009" "8080<9090"`
-
-Please be aware that after you set such a port forwarding you will need to set the domain of the public server as a `DynamicDNS` name (leave update url empty) and then connect mobile wallets fresh, or export the macaroons/certs again. When connecting the mobile wallets you may need to adjust ports manually after QR code scan. And if you SSH tunnel the LND node port `9735` you may also need to set the custom LND port script and maybe also a manual set of the domain in the LND service would be needed. This all is very experimental at the moment ... better integration will come in the future.
-
-To switch this SSH tunneling off again use:
-
-`/home/admin/config.scripts/internet.sshtunnel.py off` and also deactivate the DynamicDNS again.
-
-To check if a tunnel is running on the tunneling server check: `netstat -tulpn`
-
-## How do I setup just a port-forwarding user on my public server?
-
-Make sure the `/etc/ssh/sshd_config` has the following lines at the end:
-
-```
-RSAAuthentication yes
-PubkeyAuthentication yes
-GatewayPorts yes
-AllowTcpForwarding yes
-AuthorizedKeysFile  /etc/ssh/authorized_keys/%u
-```
-
-The last one stores all authorized_keys in one directory with a file per user. See https://serverfault.com/questions/313465/is-a-central-location-for-authorized-keys-a-good-idea#424659 To prepare this run:
-```
-mkdir /etc/ssh/authorized_keys
-groupadd forwardings
-```
-
-To add a forwarding user run:
-```
-useradd -g forwardings -d /home [USERNAME]
-echo 'command="date" [CONTENT-OF-RASPIBLITZ-ROOT-SSH-PUBKEY]' > /etc/ssh/authorized_keys/[USERNAME]
-```
-
-The `[CONTENT-OF-RASPIBLITZ-ROOT-SSH-PUBKEY]` you get when running the `internet.sshtunnel.py` script on the RaspiBlitz (see above). Now restart the RaspiBlitz. The server should not need a restart after adding a additional forwarding user.
-
-To check if a tunnel is running on on server check: `netstat -tulpn`
-
-To check for any errors on RaspiBlitz after restart check logs: `sudo journalctl -f -u autossh-tunnel.service`
-
-## How do I connect a UPS to the RaspiBlitz?
-
-A UPS (Uninterruptible Power Supply) is used to protect the RaspiBlitz against power outages. Normally you put it just between your normal power outlet and your RaspiBlitz and you are set. But some UPS offer a way to communicate with devices. This can be very useful for example if on a longer power outage the battery of the UPS runs low the RaspiBlitz could detect this and power down in a clean way - instead of a sudden stop that risks data loss or corruption.
-
-There is an experimental script to connect the RaspiBlitz to a UPS over USB cable build by APC - the Model tested with was [APC Back-UPS BX - BX700U-GR](https://www.amazon.de/APC-Back-UPS-Unterbrechungsfreie-Stromversorgung-BX700U-GR/dp/B00T7BYRCK) but it should work with every APC model offering a USB port.
-
-To turn it on run from terminal: `/home/admin/config.scripts/blitz.ups.sh on apcusb`
-
-If you have other UPS models or ways to connect ... feel free to extend this script.
-
-## Why use BTRFS on RaspiBlitz?
-
-The file system [BTRFS](https://de.wikipedia.org/wiki/Btrfs) for your HDD/SSD provides two new features to make the data storage more resilient:
-
-### Storing your important Data in RAID1 with a USB Thumb Drive
-
-BTRFS comes with build in RAID features - that means that data can be stored on two physical drives at the same time and if one is failing the other one can be used to heal the other one or its replacement.
-
-For the Raspiblitz this means that you can connect an additional 32GB USB3 Thumb Drive (under 10 USD) and have it running in a RAID with your HDD/SSD - keeping your LND channel data and all other important data of your RaspiBlitz double-safe.
-
-### Snapshotting the Blockchain
-
-BTRFS comes with a build in snapshot feature - that means that your RaspiBlitz can make every day a backup of the blockchain data and if a blockchain corruption occurs (exmaple thru a power outage) there is no need to sync the complete chain again. Just switch back to the last backup state and quickly sync up from there. On BTRFS such backups can be done as snapshots that dont need much more space on the drive and are quickly done - no need to buy a bigger SSD or wait for copying over 200GB.
-
-## How do I use BTRFS on RaspiBlitz?
-
-Because the BTRFS is still experimental it's a bit hidden. There are two ways to activate:
-
-- When you start a fresh setup just connect a 32GB Thumb Drive on the second USB3 port from the beginning and you should be asked during HDD setup if you want to try out BTRFS and gave the Thumb Drive as RAID1.
-
-- If you have a existing RaspiBlitz and you want to switch to BTRFS then you need to export a Migration File (MAINMENU > REPAIR > MIGRATION) an then format your HDD/SSD clean. When you import a Migration File during a fresh Setup (see above) you will get the option to format the HDD/SSD with BTRFS. 
-
-Once the Blitz is running on BTRFS you can use the '/home/admin/config.scripts/blitz.datadrive.sh' script to add a RAID drive or make a snapshot.
-
-## How to recover a BTRFS partition?
-
-This articles goes thru the usual options:
-https://ownyourbits.com/2019/03/03/how-to-recover-a-btrfs-partition/
-https://seravo.fi/2015/using-raid-btrfs-recovering-broken-disks
-
-## How do I fix a displayed Error in my Config?
-
-When the LCD display is telling you to do a config check:
-- go to the RaspiBlitz terminal (X on main menu) and run 'patch'
-- start reboot with command: 'restart' 
-- go to the RaspiBlitz terminal run the command: 'check'
-- now edit the RaspiBlitz config and get rid of the errors: 'nano /mnt/hdd/raspiblitz.conf'
-- save config with: CTRL+o
-- exit nano editor with: CTRL+x
-- start reboot with command: 'restart' 
-
-## How to fix my upside down LCD after update?
-
-Some displays have a different orientation. To fix this activate/deactivate the LCD-ROTATION option in the MAINMENU > SERVICES and let it reboot. You might need to do this up to 3 times until your display works correctly.
-
-## How can I repair my SSH login?
-
-If you cannot login via SSH into your RaspiBlitz your SSH RaspiBlitz certs might be corrupted. To renew and reset those do the following (since version 1.5):
-
-- shutdown the RaspiBlitz - if you dont have touchscreen activated, disconnect LAN cable, wait until HDD/SSD activity slows down (no constant blinking) and then cut the power
-- take out the SD card and connect it to your laptop - it should appear as a `boot` drive
-- in the root directory of that `boot` drive create a file called `ssh.reset`
-- that file can be empty or just copy another file on that drive and rename it ()
-- eject the drive from your laptop safely
-- put SD card back into the RaspiBlitz (also make sure LAN cable is connected again)
-- power up - the RaspiBlitz should boot up & reboot again
-- then try again to SSH login
-
-If you see a "REMOTE HOST IDENTIFICATION HAS CHANGED!" warning on login, that's what we wanted - the SSH cert of your RaspiBlitz changed - thats good. We just need to remove the old one from our laptop first - on OSX you can use `rm ~/.ssh/known_hosts` (deletes all cached server certs) or remove the line with your RaspiBlitz IP manually from the `~/.ssh/known_hosts` file with a text editor. 
-
-## How to use the Let's Encrypt client
-
-The [Let's Encrypt](https://letsencrypt.org/) client software [acme.sh](https://github.com/acmesh-official/acme.sh) is 
-included (since v1.6) and can be used to create TLS certificates that are signed by the Certificate Authority (*Root 
-CA*) **Let's Encrypt** and which are therefore trusted on all modern platforms.
-
-In order to successfully get a signed certificate you need to **verify ownership** over a **DNS domain** or a **full 
-qualified domain name** (**FQDN**). Currently Let's Encrypt **doesn't** issue certificates for IP addresses. The two 
-most common standards for verification of control are `HTTP-01` and `DNS-01`.
-
-The **acme.sh** client supports both modes and has a large number of DNS services (more than 50) it can interact with. 
-More details can be found on the [acme.sh wiki](https://github.com/acmesh-official/acme.sh/wiki).
-
-### Let's Encrypt - HTTP-01
-
-To use `HTTP-01` your RaspiBlitz needs to be accessible directly from the Internet on a **public IP address** on **port 
-80**. If you don't have a public IPv4/IPv6 IP on either `eth0` or `wlan0` then it might be possible to use **NAT port 
-forwarding** or an **autossh-tunnel** to fulfill this requirement.
-
-If everything (this includes creating a `DNS A` or `DNS CNAME` record that points to a static or dynamic IP address) is 
-set up so that the Let's Encrypt servers can reach your RaspiBlitz on port 80 then the following command will perform 
-the initial creation of a signed certificate and will also store the configuration data needed to regularly refresh it. 
-Just run this once and then lean back and forget about it. :-D
-
-```
-~/.acme.sh/acme.sh --keylength ec-256 --issue -d hostname.example.com -w /var/www/letsencrypt/ 
-```
-
-### Let's Encrypt - DNS-01
-
-The `DNS-01` standard **proves ownership** by creating `DNS TXT` records on the domain or subdomain you want to use.
-This requires interaction with and access to a dns server but comes with the benefit that `wildcard certificates` 
-can be issued. 
-
-It is beyond the scope of this FAQ entry to explain all details of this - please refer to the official documentation. 
-Assuming you are using the [DuckDNS](https://www.duckdns.org/) dynamic DNS service then the following command will
-get a certificate (including a wildcard subject alternative name (**SAN**) listing). It will also take care of continuous 
-renewals. 
-
-```
-export DuckDNS_Token="abcdefgh-0123-56ij-78kl-abcd9012efgh"
-~/.acme.sh/acme.sh --issue --keylength ec-256 --dns dns_duckdns -d hostname.duckdns.org -d *.hostname.duckdns.org
-```
-
-As mentioned, more that 50 other services (including self-hosted options like e.g. `nsupdate` or `PowerDNS`) are supported.   
-
-### Let's Encrypt - eMail Address
-
-The installation process of the `acme.sh` client includes a prompt for an eMail address. The data entered there is 
-stored in the `accounts.conf` file as `ACCOUNT_EMAIL`. This address is used by Let's Encrypt to notify you about 
-the expiry of certificates (which is not really needed as renewals are automated) and also about changes to their 
-**Terms of Service**. For more details please check their [privacy policy](https://letsencrypt.org/privacy/).
-
-It is currently considered completely fine to leave this field empty and not provide an eMail address.  
-
-### Let's Encrypt - Installation details
-
-The `acme.sh` script is installed in `/home/admin/.acme.sh/` - the configuration and the certificates are stored on the 
-external hard disk in `/mnt/hdd/app-data/letsencrypt`. 
-
-### How can I customize my RaspiBlitz or add other software?
-
-The RaspiBlitz is your computer to experiment with. Feel free to add your own scripts, edit the system or install further software from the command line. Just keep in mind that after an update/recovery the RaspiBlitz starts with a fresh and clean operating system again. So all your editings and installs might be gone. To prevent this you should do the following:
-
-- place your own scripts and data that should survive an update/recovery into the `/mnt/hdd/app-data` directory
-- put all install commands & modification of the system into the script `/mnt/hdd/app-data/custom-installs.sh` which will be started automatically on a recovery/update.
-
-## Versioning
-
-* Major Updates: 1.0.0, 2.0.0, 3.0.0, ... are epic updates signaling that the software reached a new era.
-* Main Updates: 1.1.0, 1.2.0, 1.3.0, ... are breaking updates - the reflashing of the sd ard is mandatory.
-* Minor Updates: 1.1.0, 1.2.0, 1.3.0, ... are soft updates - can be done by 'patching' the scripts & code, but new sd card reflash is still advised.
-
-## GitHub Workflow
-
-- Development is done on the 'dev' branch, new features should be done on single feature branches and merged into 'dev' once ready.
-- When a release of a new main-update (see above) comes closer, a new release branch gets created from 'dev' with the first release candidate - the RCs and the final release sd card will be build from this branch.
-- All minor-releases will basically all work with the same 'build_sdcard.sh' script so that the code could be updated by just calling 'patch'. Emergency updates on lnd & bitcoin may break this guideline, but basic structure & packaging should stay mostly consistent over a main-update version.
-- Once a release is ready, that release branch will be set as the "default" branch on GitHub (so its shown as main page)
-- Hot fixes & new features for minor verisons will be created as single branches from the release branch, and once ready will be merged back into that release branch as a Pull Request using 'Squash-Merge' AND then, this 'Squash-Merge' (one single commit) will get cherry-picked into the  'dev' branch ('git cherry-pick COMMITHASH' - may call 'git fetch' & 'git pull' before to make a clean cherry-pick into dev).
-
-## How do I find the IP address when running without a display?
-
-If you can login into your local internet router it should show you the IP address assigned to the RaspberryPi.
-
-Another way is to use [Angry IP Scanner](https://angryip.org/) to find the IP address.
-
-You can also put an empty file just called `hdmi` (without any ending) onto the sd card when connected to your laptop and then start it up on the RaspberryPi. This will activate the HDMI port and if you connect a HDMI monitor to the RaspberryPi it will show you the RaspiBlitz status screen containing the local IP address.
-
-## How can I enforce UASP mode for my SSD controller?
-
-By default just tested & selected SSD encasings/controller are running enabled with UASP in RaspiBlitz. UASP brings a speed up for the SSD but also if not well supported by the SSD encasing/controller can lead to system halts. If you know for sure that your SSD encasing/controller is supporting UASP fully you can place a file called `uasp.force` on the sd card boot section after flashing the image with your laptop. See details or report errors on issue [#2488](https://github.com/rootzoll/raspiblitz/issues/2488)
-

LICENSE

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2018 The RaspiBlitz developers
+Copyright (c) 2018-2022 The RaspiBlitz developers
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
@@ -18,4 +18,4 @@ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
+THE SOFTWARE.

Makefile

@@ -0,0 +1,127 @@
+SHELL = /bin/bash
+GITHUB_ACTOR = $(shell git remote -v | grep origin | head -1 | cut -d/ -f4)
+GITHUB_HEAD_REF = $(shell git rev-parse --abbrev-ref HEAD)
+
+amd64-lean-desktop-uefi-image:
+	# Run the build script
+	cd ci/amd64 && \
+	sudo bash packer.build.amd64-debian.sh \
+	  --pack lean \
+	  --github_user $(GITHUB_ACTOR) \
+	  --branch $(GITHUB_HEAD_REF) \
+	  --preseed_file preseed.cfg \
+	  --boot uefi \
+	  --desktop gnome
+
+	# Compute the checksum of the qemu image
+	cd ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu && \
+	sha256sum raspiblitz-amd64-debian-lean.qcow2 > raspiblitz-amd64-debian-lean.qcow2.sha256
+
+	# Compress the image
+	cd ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu && \
+	gzip -v9 raspiblitz-amd64-debian-lean.qcow2
+
+	# Compute the checksum of the compressed image
+	cd ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu && \
+	sha256sum raspiblitz-amd64-debian-lean.qcow2.gz > raspiblitz-amd64-debian-lean.qcow2.gz.sha256
+
+	# List the generated files
+	ls -lah ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu/raspiblitz-amd64-debian-lean.qcow2.*
+
+amd64-lean-server-legacyboot-image:
+	# Run the build script
+	cd ci/amd64 && \
+	sudo bash packer.build.amd64-debian.sh \
+	  --pack lean \
+	  --github_user $(GITHUB_ACTOR) \
+	  --branch $(GITHUB_HEAD_REF) \
+	  --preseed_file preseed.cfg \
+	  --boot bios-256k.bin \
+	  --desktop none
+
+	# Compute the checksum of the qemu image
+	cd ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu && \
+	sha256sum raspiblitz-amd64-debian-lean.qcow2 > raspiblitz-amd64-debian-lean.qcow2.sha256
+
+	# Compress the image
+	cd ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu && \
+	gzip -v9 raspiblitz-amd64-debian-lean.qcow2
+
+	# Compute the checksum of the compressed image
+	cd ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu && \
+	sha256sum raspiblitz-amd64-debian-lean.qcow2.gz > raspiblitz-amd64-debian-lean.qcow2.gz.sha256
+
+	# List the generated files
+	ls -lah ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu/raspiblitz-amd64-debian-lean.qcow2.*
+
+amd64-fatpack-desktop-uefi-image:
+	# Run the build script
+	cd ci/amd64 && \
+	sudo bash packer.build.amd64-debian.sh \
+	--pack fatpack \
+	--github_user $(GITHUB_ACTOR) \
+	--branch $(GITHUB_HEAD_REF) \
+	--preseed_file preseed.cfg \
+	--boot uefi \
+	--desktop gnome
+
+	# Compute the checksum of the qemu image
+	cd ci/amd64/builds/raspiblitz-amd64-debian-fatpack-qemu && \
+	sha256sum raspiblitz-amd64-debian-fatpack.qcow2 > raspiblitz-amd64-debian-fatpack.qcow2.sha256
+
+	# Compress the image
+	cd ci/amd64/builds/raspiblitz-amd64-debian-fatpack-qemu && \
+	gzip -v9 raspiblitz-amd64-debian-fatpack.qcow2
+
+	# Compute the checksum of the compressed image
+	cd ci/amd64/builds/raspiblitz-amd64-debian-fatpack-qemu && \
+	sha256sum raspiblitz-amd64-debian-fatpack.qcow2.gz > raspiblitz-amd64-debian-fatpack.qcow2.gz.sha256
+
+	# List the generated files
+	ls -lah ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu/raspiblitz-amd64-debian-fatpack.qcow2.*
+
+arm64-rpi-lean-image:
+	# Run the build script
+	cd ci/arm64-rpi && \
+	sudo bash packer.build.arm64-rpi.local.sh \
+	--pack lean \
+	--github_user $(GITHUB_ACTOR) \
+	--branch $(GITHUB_HEAD_REF)
+
+	# Compute the checksum of the raw image
+	cd ci/arm64-rpi/packer-builder-arm && \
+	sha256sum raspiblitz-arm64-rpi-lean.img > raspiblitz-arm64-rpi-lean.img.sha256
+
+	# Compress the image
+	cd ci/arm64-rpi/packer-builder-arm  && \
+	gzip -v9 raspiblitz-arm64-rpi-lean.img
+
+	# Compute the checksum of the compressed image
+	cd ci/arm64-rpi/packer-builder-arm  && \
+	sha256sum raspiblitz-arm64-rpi-lean.img.gz > raspiblitz-arm64-rpi-lean.img.gz.sha256
+
+	# List the generated files
+	ls -lah ci/arm64-rpi/packer-builder-arm/raspiblitz-arm64-rpi-lean.img.*
+
+arm64-rpi-fatpack-image:
+	# Run the build script
+	cd ci/arm64-rpi && \
+	bash packer.build.arm64-rpi.local.sh \
+	--pack fatpack \
+	--github_user $(GITHUB_ACTOR) \
+	--branch $(GITHUB_HEAD_REF)
+
+	# Compute the checksum of the raw image
+	cd ci/arm64-rpi/packer-builder-arm  && \
+	sha256sum raspiblitz-arm64-rpi-fatpack.img > raspiblitz-arm64-rpi-fatpack.img.sha256
+
+	# Compress the image
+	cd ci/arm64-rpi/packer-builder-arm  && \
+	gzip -v9 raspiblitz-arm64-rpi-fatpack.img
+
+	# Compute the checksum of the compressed image
+	cd ci/arm64-rpi/packer-builder-arm  && \
+	sha256sum raspiblitz-arm64-rpi-fatpack.img.gz > raspiblitz-arm64-rpi-fatpack.img.gz.sha256
+
+	# List the generated files
+	ls -lah ci/arm64-rpi/packer-builder-arm/raspiblitz-arm64-rpi-fatpack.img.*

SECURITY.md

@@ -1,74 +0,0 @@
-# Security Policy
-
-*NOTE: This document is just a first draft and still under contruction.*
-
-Only use this software with funds you could afford to lose. Especially a lightning wallet that is a hot wallet, which has constant connection to the internet and can be target of exploitation.
-
-Just because the software is OpenSource does not mean its free of errors. Especially if you run additional apps, the RaspiBlitz team cannot review all the code of those external projects.
-
-The software is provided "AS IS", without warrenty of any kind. In no event shall the
-authors or copyright holders be liable for any claim, damages or other
-liability. [details on legal license](LICENSE.md)
-
-## Supported Versions
-
-Updates are made only for the latest version.
-
-Security patches can be done with `MAINMENU > UPDATE > PATCH` for the current branch in the case of a high risk issue before next release.
-
-The latest version always have the `latest` tag. To make sure you are using the lastest version, run:
-```
-curl -s https://api.github.com/repos/rootzoll/raspiblitz/releases/latest|grep tag_name|head -1|cut -d '"' -f4
-```
-
-## Reporting a Vulnerability
-
-To report security issues send an email to christian@rotzoll.de (not for support).
-
-The following keys may be used to communicate sensitive information to developers:
-
-| Name | Fingerprint | 64-bit |
-|------|-------------|--------|
-|Rootzoll|92A7 46AE 33A3 C186 D014 BF5C 1C73 060C 7C17 6461|1C73 060C 7C17 6461|
-|Openoms|13C6 88DB 5B9C 745D E4D2 E454 5BFB 7760 9B08 1B65|5BFB 7760 9B08 1B65|
-
-You can import a key by running the following command with that individual’s fingerprint:
-```
-curl https://keybase.io/rootzoll/pgp_keys.asc | gpg --import
-curl https://keybase.io/oms/pgp_keys.asc | gpg --import
-```
-Ensure that you put quotes around fingerprints containing spaces if importing with other methods.
-
-# Online Security
-
-* Wi-fi and Bluetooth is disabled by default in the build script.
-* UFW is active and only specific ports are open, closing ports and removing hidden services when services are uninstalled.
-* Fail-2-Ban is protecting the SSH login against brute-force-attacks.
-* Admin (and Joinmarket [optional]) users have passwordless sudo access to be able to perform installations and read password without much user interaction.
-
-# Physical Security
-
-* The lightning wallet and user interfaces are password protected by default so this has more privacy implications (in the case of physical theft) than security.
-* Basic hardening measures are applied to all non-root systemd services
-* Optional log in through SSH using a hardware wallet.
-* LUKS encryption would be welcome in the future.
-
-# On-chain Funds
-
-Please keep in mind that there can be two different on-chain wallets on the RaspiBlitz:
-
-## Lightning Wallet (default)
-
-The default is the on-chain lightning wallet - that's the wallet where you normally send your funds before opening a channel & where your funds return to when you close a channel. With the initial word seed you get during RaspiBlitz setup, you can get access again to this on-chain wallet. Keep the seed words secure in a off-line location.
-
-## Bitcoin Core Wallet (deactivated by default)
-
-Beside lightning you have a bitcoin core installed. Normally, bitcoin core acts just as a blockchain informational service to the lightning wallet and its internal seperate on-chain wallet is deactivated. 
-
-Some apps (like Fully Noded or JoinMarket) activate the bitcoin core wallet and use it for their own needs. This on-chain balance will not be reflected in the rest of the RaspiBlitz software and is NOT backuped by the seed words from the RaspiBlitz setup. If you make use of the bitcoin core wallet please take care of these funds. 
-
-# Off-chain Funds (Lightning Channels)
-
-Please note that there is no perfect backup concept for the funds in your lightning channels yet. We strongly recommend using the `Static Channel Backup` provided by LND and consider off-line location backup of that file to have the best chances to recover Lightning funds in a case of recoverying from a disaster.
-
-For more practical information on this topic see: [Backup Channel Funds](README.md#backup-for-on-chain---channel-funds)

WORKSHOP.md

@@ -1,228 +0,0 @@
-# RaspiBlitz Workshop Tutorial
-
-One goal of the RaspiBlitz project is to provide an open DIY platform for workshops - to setup your own lightning node and learn to manage it. This tutorial is collecting best practices on how to organise a RaspiBlitz workshop.
-
-<br/>
-
-# Time Planning
-
-First thing on planning a RaspiBlitz workshop is to calculate the time needed correctly. For example, the setup from scratch with no further support is still a weekend project - mostly because downloading and syncing the blockchain takes a lot of time.
-
-
-So the time required for the workshop all depends on the preparation you as a workshop organizer are interested to provide ahead of the workshop. This document outlines three starting configurations... going from most preparation required to least.
-
-Note that the time estimates below are about getting a node to a "clean setup". They do not include the funding & setting up channels process - which is adding an additional 30 min to 1 hour to the calculation.
-
-
-Also, if your group is lager then 5 participants, calculate some extra time for individual support. You can compensate for that if you let two participants work together on one RaspiBlitz setup; this way you limit individual support and let them help each other.
-
-
-## Workshop Scenario A) Provide a Ready-2-Go RaspiBlitz
-
-_Estimated Duration: 2 Hours_
-
-Sure, one part of the fun for participants is to assemble the hardware themselves. But if you aim for the shortest workshop possible, then this is the way to go (around 2 hours length). If you have the RaspiBlitz already assembled to be operational at the workshop you should already set them up with a basic setup, maybe even transfer a small amount of coins onto them. This way you can give the workshop participants the A.B.C.D passwords on a sheet of paper and let them jump right into learning how to manage a node. While waiting for confirmations on the first channel opening you can use the time to explain how to build a RaspiBlitz from scratch and some Lightning basics.
-
-These are the following steps you need to prepare (follow links for details):
-
-- [Buy all the Hardware](WORKSHOP.md#buy-all-the-hardware)
-- [Assemble all the Hardware](WORKSHOP.md#assemble-all-the-hardware)
-- [Prepare HDDs with Blockchain Data](WORKSHOP.md#prepare-hdds-with-blockchain-data)
-- [Prepare SD cards with latest RaspiBlitz image](WORKSHOP.md#prepare-sd-cards-with-latest-raspiblitz-image)
-- Run Basic Node Setup
-- [Setup Workshop Environment](WORKSHOP.md#setup-workshop-environment)
-
-_NOTE: Make sure that the blockchain of the RaspiBlitzes are synced before the workshop begins._
-
-## Workshop Scenario B) Provide a RaspiBlitz Hardware-Kit
-
-_Estimated Duration: 3 Hours_
-
-
-In this workshop scenario you buy all the hardware but let participants assemble the RaspiBlitz themselves - that's half the fun and people get a feel for the gear. But to keep the blockchain sync time short and be able to keep in a 3 hour timeframe you need to prepare the HDDs with blockchain data not much older than one day. Start ordering the parts at least one week before the workshop (budget as needed) and plan the day before completely for copying blockchain data to all those HDDs.
-
-
-These are the following steps you need to prepare (follow links for details):
-
-- [Buy all the Hardware](WORKSHOP.md#buy-all-the-hardware)
-- [Prepare HDDs with Blockchain Data](WORKSHOP.md#prepare-hdds-with-blockchain-data)
-- [Prepare SD cards with latest RaspiBlitz image](WORKSHOP.md#prepare-sd-cards-with-latest-raspiblitz-image)
-- [Setup Workshop Environment](WORKSHOP.md#setup-workshop-environment)
-
-Variation: If you don't have a big bugdet to prefinance the parts or people have already hardware they want to bring you can just buy the HDDs and SD cards and prepare them to run this scenario.
-
-
-## Workshop Scenario C) Bring your own Hardware
-
-
-_Estimated Duration: 4–6 Hours_
-
-This scenario is advised only for small groups, or you'll need to bring multiple blockchain copy stations - see details on "Prepare HDDs with Blockchain Data". Otherwise it needs the least prepartion time and prefinance and can be announced to participants about 5 days beforehand, so that they have time to order all the parts online.
-
-
-- [Instruct Participants to bring Hardware](WORKSHOP.md#instruct-participants-to-bring-hardware)
-- [Prepare Blockchain Copy Station](WORKSHOP.md#prepare-blockchain-copy-station)
-- [Setup Workshop Environment](WORKSHOP.md#setup-workshop-environment)
-
-
-As soon as the participants arrive at the workhop, make sure to check their hardware list. We also suggest taking their HDDs and starting the blockchain copy process before official starting time.
-
-
-<br/>
-
-
-# Checklist for Running a Workshop
-
-Make sure you have the following hardware and infrastructure ready for the workshop:
-
-- Lots of 'multiple power outlets/extensions' (min. 2 per participants - RaspiBlitz + Laptop)
-- Network-Switch with enough ports (min. 1 per RaspiBlitz)
-- Enough LAN network cables (short ones to connect the RaspiBlitzes)
-- Good internet connection at location with LAN port (or a WLAN to LAN adapter)
-- Extra WLAN Router (if you are not sure if LAN & WLAN is not on the same network at location)
-- One or two USB SD card adapters
-- One or two USB-C to USB-A adapters
-- Some Tape, Markers & Pens always come in handy (also for participants to wirte down seeds & passwords)
-- Potentially some bitcoin funds (if people dont have their own to start funding channels)
-
-Participants need to bring at least their laptops.
-
-<br/>
-
-# Running of the Workshop
-
-_The basic structure of the workshop is set by the RaspiBlitz setup process. Simply follow that. The following parts should share some experiences and suggestions on how you can optimize the time and mentoring during this process. Feel free to share your experience here._
-
-## Welcome and Intro
-
-In the beginning, it's great to give a small introduction to the Lightning Network and show the RaspiBlitz GitHub page to let everybody know where to find the basic info. But try to keep it around 10 min, in order to not waste time.
-
-
-Also, even before the intro, take care of the blockchain preparation. If people bring clean HDDs, hook them up to your blockchain copy station as soon as possible. If you have to copy on location, plan to spend time for some deeper educational intro while the HDDs get prepared.
-
-## Assembling
-
-If you hand out hardware kits or people bring their own hardware, it's time to put it together. If you are in a ready-2-go scenario, of course skip this and just hand them out.
-
-## Basic Setup
-
-
-Connect everybody's laptop to the same local network the RaspiBlitzes are connected to. Be prepared to explain how to open a terminal - Windows' users especially need some help here (see README on this).
-
-
-Then everybody is SSHing into the RaspiBlitz and is following the setup dialog. Hand out paper and pens for people to write down their passwords and wallet seeds.
-
-## Waiting Time
-
-After the lightning wallet setup comes the longest waiting time during the workshop - around 30 min. When you have a presynced ready-2-go or up to 1 hour for the other scenarios. It's the time when the node is syncing up the blockchain and LND is scanning. If you see someone's blockchain progress under 97%, something is wrong - possibly the HDD was not correctly prepared or the blockchain data is way too old to finish during workshop time if you work with old RaspberryPi3. The new RaspberryPi4 with SSD can catch up much faster.
-
-
-Use this time for a more in-depth educational segment on lightning in general. This time can also be used to demo with one RaspiBlitz that is already on clean-setup (you prepared before the workshop) how the funding, setting up channels and the other features of the RaspiBlitz work. That way people see what are the next steps once their node is ready and even if your workshop time is over by then they can know the next steps to do at home.
-
-Also this time is good for troubleshooting in individual sessions. If someone is not able to finish the sync on location in time shutdown the Raspiblitz from SSH terminal with CTRL+C and then `shutdown now`. If the device gets connected back up at home it should pickup the sync/scan process (let people know about the wallet unlock).
-
-
-## Finalizing Setup
-
-Once the RaspiBlitz is ready (LCD shows status screen) and people can SSH into the main menu, let them go into the `SERVICES` section and activate the `RTL WebUI`. It's the best interface to then continue with the peering, funding and channel opening.
-
-## Funding, Channels, API
-
-Check how much time is left to go thru the next steps of connecting to peers, funding and opening channels. While you wait on funding or channel opening confirmations, its a good moment to try to connect users mobile wallets with the device. But just so that on the local network for demo - dynamicDNS is something people then can try at home with port forwarding on their routers.
-
-Its also nice to add casual social open-end segment to the end of the workshop. So people can already go into personal conversations, music and beverages while some last nodes sync up, confirmations come in and people sending their first satoshis on some lightning chess or from node to node.
-
-Here are some videos that show what else is possible with the RaspiBlitz:
-
-- [Lightning Network LND API - Buying Stickers using Commandline](https://youtu.be/tocJFPU8sAc) 24min
-
-<br/>
-
-# Organisation Tasks
-
-
-*Which of the following organisation tasks are relevant for you depends on which starting scenario you choose (see above). Here is the complete possible list with details:*
-
-
-## Buy all the Hardware
-
-See the shopping list on the RaspiBlitz Github README. You need to buy all of those, and every participant also needs a short (about 1m) network cable.
-
-
-From experience start ordering two weeks before the workshop (if you need to assemble) and minimum one week if you're handing out hardware kits - even if you have Amazon Prime. There is always a shipment coming late, and it's a lot of packages.
-
-
-If you like to support the RaspiBlitz project you can order a ready-2-go RaspiBlitz or a all-you-need-hardwareset for your RaspiBlitz workshop from [raspiblitz.com](https://raspiblitz.com)
-
-## Instruct Participants to Bring Hardware
-
-This is for the scenario where people bring their own hardware. Make sure to let them know at least a week before the event so that there is enough time for online ordering. Also make sure that especially the power supply needs to provide 3A and a stable current (big fat with a thick cable is good) because that's the most often error source if people just reuse some old weak power supply.
-
-In all scenarios make sure people bring their laptops.
-
-## Assemble all the Hardware
-
-
-Basically you follow the assembly instructions on the RaspiBlitz GitHUb README. Think of a safe way to transport the assembled devices to the workshop location - HDDs like it soft.
-
-
-## Prepare HDDs with Blockchain Data
-
-This is the most time consuming part of the preparation. Try it once to get a feel for how much time you need to prepare one HDD. If you prepare more than one HDD check out the "Copystation" script below.
-
-A prepared HDD is formatted in EXT4 and named "BLOCKCHAIN". In a folder called `bitcoin` it contains a copy of the following data folders from a running Bitcoin core client (same version on RaspiBlitz).
-
-```
-/bitcoin/blocks
-/bitcoin/chainstate
-```
-
-The bitcoin core client (0.17.1 or higher) needs to be stopped while the data is copied to the HDD.
-
-The easiest way to get a "template" of such HDD is to setup a fresh RaspiBlitz (without channel and fundings) and then run the script `/home/admin/XXcleanHDD.sh` and manually delete all rest data from the HDD and just leave those folders.
-
-
-Once you have that "template" you can make an image from that and write that image to the other HDDs. 
-
-
-
-## Prepare Blockchain Copy Station
-
-In the RaspiBlitz GitHub repo and also on every RaspiBlitz (since v1.3) you can find the script:
-`/home/admin/XXcopyStation.sh`
-
-This can be used to prepare and keep multiple HDDs in snyc with blockchain data in preparation of a workshop. You can start it directly on a RaspiBlitz and turn it into "Copy Station Mode" by executing on the command line:
-
-`sudo /home/admin/XXcopyStation.sh`
-
-_Beware that it will not run as a Lightning Node during that time (LND is stopped). And to reset it back into normal mode you need to stop the script with `CTLR+c` and the reboot with `sudo shutdown -r now`._
-
-
-In "Copy Station Mode" the RaspiBlitz will just run the bitcoind (so it needs network connection), copy fresh blockchain data over to a template folder on the HDD called `/mnt/hdd/templateHDD` and from there sync it to further HDDs that get connected to it.
-
-If you run it in a setup like on this photo with an extra powered USB hub, you can connect up to 10 HDDs at once to be synced with an almost up-to-date blockchain.
-
-At the moment the "Blockchain Copy Station" is just a computer (laptop - not a RaspberryPi) having an image of a "template" HDD (see above) and you can attach (with a USB3.0 Hub) multiple fresh HHDs to it and start writing in the template image to that.
-
-To update the "template" HDD for the next workshop use it for a fresh clean RaspiBllitz setup just days before, sync the blockchain to 100% and repeat the process above.
-
-_This version is not tested, but seems like the easiest to setup so far. Images can have the problem of being too large when some 1TB HDDs are just some bytes smaller. So for the template HDD it would be best to find the smallest 1TB HDD possible or just writing the image to HDDs of the same brand & model._
-
-Copying the blockchain between RaspberryPis during the workshop is not an option, because the network and its USB2 is too slow and will take 3 to 4 hours.
-
-For former workshops I had a laptop just with the data and had a script that was formatting and rsyning that data over to a fresh HDD. That took around 1,5 hours per HDD.
-
-_If someone has a better idea for a 'Blockchain Copy Station', please feel free to contribute._
-
-## Prepare SD Cards with Latest RaspiBlitz Image
-
-Download the latest RaspiBlitz SD card image from the README page. `Balena Etcher` is the best image writing software for this use case because if you have multiple sd card adapters, you can write multiple cards at once,cutting down your preparation time.
-
-## Setup Workshop Environment
-
-See hardware checklist for what to bring to the workshop in the earlier chapter.
-
-Setup power outlets for everybody. Its always good to be way early at the workshop location for setup, especially if you run the "pre-sync" of the ready-2-go scenario.
-
-Most important is the network setup. Every RaspiBlitz needs a LAN port in the switch and that switch needs to be on the same local network as the WLAN so that participants laptop can SSH into the RaspiBlitz. If that is not the case or you cannot confirm that before the event its best to bring an additional WLAN router. Then you give the WLAN router internet uplink thru the available LAN cable and you put the network switch for the Raspiblitzes behind that router and open an additional WLAN on that WLAN router for everybody to connect to. It's OK to be behind a NAT; it's just important for everybody to be behind the same NAT.
-

alternative.platforms/Proxmox/README.md

@@ -0,0 +1,150 @@
+# Install Raspiblitz on proxmox
+
+Here I want to show you how to install a new Raspiblitz on a Debian VM on Proxmox and get it running. My Raspiblitz ran very long and stable on a Raspberry Pi 4 with 8GB RAM. It would very likely continue to do so for a longer time, however my Lightning Node is growing more and more and various apps and services are built on top of my Node. So the issue of availability and backup becomes more and more important. Therefore I decided to migrate the Raspiblitz to a VM in Proxmox. So I have much more room to maneuver regarding backup and administration.
+
+This guide here will help you to set up a completely new Raspiblitz with Proxmox. The guide for the migration will follow soon...
+
+### What is needed?
+
+- Proxmox installation on an Intel NUC, laptop or server
+- at least 1TB SSD
+
+You have several options for the SSD: Either you install the 1TB SSD in the system and install your Proxmox host on it or (as I did) you have an internal SSD (in my case 500GB M2 SSD) where the host operating system is located. I connected the 1TB SSD via SATA to my Intel NUC. This is used exclusively for storing the blockchain and Lightning Node.
+
+## Create Debian VM
+
+We install Raspiblitz on a fresh Debian machine. Therefore we have to download the ISO file from Debian first. Here just choose the right processor architecture: (For me it is amd64)
+
+[https://www.debian.org/distrib/netinst](https://www.debian.org/distrib/netinst)
+
+Afterwards this ISO file can be uploaded under Proxmox. To do this, click on the Local Storage, ISO Images and on Upload:
+
+![](images/2022-09-21_16-05.png)
+
+Now you can create a new virtual machine by clicking on "Create VM" in the upper right corner. Now we click on it.
+
+![](images/2022-09-21_20-16.png)
+
+A settings window appears where we can now specify the properties of the VM. In my example, the properties look like this:
+
+VM ID and name can be selected by yourself.
+
+![](images/2022-09-21_20-03.png)
+
+Under the item "OS" we now select the previously downloaded ISO file:
+
+![](images/2022-09-21_20-04.png)
+
+Under "System" we can leave the default settings. I have checked Qemu Agent so that the VM can communicate with the Proxmox host via Qemu Agent and transfer data.
+
+![](images/2022-09-21_20-05.png)
+
+Under "Disks" you can now specify the desired size of the VM. I have set the same size (32GB) as my SD cards from the Raspiblitz are big. This can be increased at any time in the future, if you need more space and the host machine also has this space available. Another advantage why I virtualized my Raspiblitz :)
+
+![](images/2022-09-21_20-06.png)
+
+Under "CPU" you can specify the desired number of cores. Of course, this depends on your host operating system. My Intel NUC has 4 cores, so I can provide 4 cores to the VM.
+
+![](images/2022-09-21_20-06_1.png)
+
+Under "Memory" you must specify the desired RAM number in MB. This also depends on your host. If possible, I would enter 8GB or more. **Small hint: 1GB = 1024 MB. So 8GB = 8192 MB. (8 x 1024)**
+
+![](images/2022-09-21_20-07.png)
+
+The VM also needs a network adapter. You also have to select this adapter based on your Proxmox installation. Default will be vmbr0. On my Proxmox I have configured several VLAN, where vmbr3 is my BTC VLAN. But this is only the case for me.
+
+![](images/2022-09-21_20-08.png)
+
+After that you can click on "Finish" and the VM will be created. This now also appears with name on the left side and can now be started. (Right click -> Start)
+
+Now you can open the console (top right) of the VM and do the Debian installation steps normally. I have abbreviated the steps a bit here:
+
+- Install
+- Select Language
+- Select Location
+- Select Keyboard Language
+- Set Hostname
+- Set domain (or just leave it empty)
+- Set root password
+- Create new user (mine is called "pi")
+- Set password for user pi
+- Guided - use entire disk
+- Select SCSI3 harddisk
+- All files in one partition
+- Finish partitioning and write changes to disk
+- "Write the changes to disks?" -> Yes
+- Scan extra installation media? -> No
+- Package manager -> Select your country
+- Package manager -> deb.debian.org
+- http proxy -> leave empty and continue
+- Participate in the package usage survey? -> No
+- Software selection: SSH server and standard utilities should be sufficient here
+- Install the GRUB boot loader to your primary drive? -> Yes
+- Select /dev/sda
+
+The VM is now installed and starts to boot. In the meantime you can remove the ISO file. (VM -> Hardware -> CD/DVD Drive -> Do not use any media -> OK)
+
+## Add storage
+
+Now to install Raspiblitz on this new VM we need to do 2 things: Connect the hard disk for the blockchain data and pass it to the VM and install the SD Card Builder Script of Raspiblitz. We start first with the hard disk, where there are 2 variants:
+
+### Variant 1: External hard disk
+
+Now connect the hard drive to the host system using SATA or USB. In my example here I use a USB hard disk, which I connected via USB 3.1 to the Intel NUC. The best thing to do now is to shutdown the Raspiblitz VM.
+
+Now you need to log in to the console on the Proxmox host system and do the following:
+
+https://www.youtube.com/watch?v=U-UTMuhmC1U
+
+The commands from the video here again to copy:
+
+```
+ls -n /dev/disk/by-id/
+/sbin/qm set [VM-ID] -virtio2 /dev/disk/by-id/[DISK-ID]
+```
+
+It is important here that the hard disk is passed through by ID. If something changes in the dev sda order in the future, the correct hard disk is still connected to the VM.
+
+### Variant 2: Use internal storage
+
+If you have enough space on the host operating system, you do not have to use an external hard disk. You can simply add a second hard disk to the VM under "Hardware -> Add -> Hard Disk". I would recommend at least 1TB as storage size.
+
+* * *
+
+Regardless of whether variant 1 or 2 was executed, the VM should now have 2 hard disks connected in the hardware overview: A smaller one (e.g. 32GB) where the operating system of Raspiblitz will be installed and run and a larger one (e.g. 1TB or more) where all the blockchain data will be stored later.
+
+![](images/2022-09-21_21-04.png)
+
+## Install Raspiblitz
+
+Now we are ready to install Raspiblitz via script. For this we start the Raspiblitz VM and log in as root user in the console. First of all update everything:
+
+```
+apt update
+apt upgrade -y
+apt install sudo
+```
+
+Now we need to download the Build SDCard Script from Rootzoll. The version can be customized as you like. The latest version (as of block time 768745) is the 1.9.
+
+```
+wget https://raw.githubusercontent.com/rootzoll/raspiblitz/v1.9/build_sdcard.sh
+```
+
+And run:
+
+```
+sudo bash build_sdcard.sh
+```
+
+The script now shows you information from your system. If all this is correct, start with "yes".
+
+![](images/2022-09-21_21-16.png)
+
+Now the installation takes a few minutes. Do not abort or shut down the VM here, just let it install. When everything is finished, a reboot is needed:
+
+```
+sudo shutdown -r now
+```
+
+Now you can call the IP address of your VM in the browser and perform the normal installation steps of Raspiblitz.

alternative.platforms/QEMU/raspiblitz-on-qemu.md

@@ -0,0 +1,61 @@
+Documentation focused on install for macos dev environment. Do not rely on this setup for mainnet nodes. 
+
+1. Download [Debian 10.4 Minimal Image](https://mac.getutm.app/gallery/debian-10-4-minimal)
+2. Resize the image container to 30GB
+	`qemu-img resize ~/Library/Containers/com.utmapp.UTM/Data/Documents/Debian\ ARM.utm/Images/debian.qcow2 +30G`
+3. Add USB Device to the VM
+	- Right click the VM from the list.
+	- Select `new drive` from the Drives Menu
+	- Update the interface to `USB`
+	- Update size to 40GB
+4. Install Dependencies
+	- `sudo apt install mount e2fsprogs gnupg2`
+	- Install [armbian-config](https://github.com/armbian/config#armbian-configuration-utility)
+		```
+		echo "deb [arch=arm64] http://apt.armbian.com $(lsb_release -cs) main" > /etc/apt/sources.list.d/armbian.list
+		apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 9F0E78D5
+		sudo apt update
+		sudo apt install armbian-config
+		```
+5. (Optional) Switch to swapfile - [Reference](https://www.linuxuprising.com/2018/08/how-to-use-swap-file-instead-of-swap.html)	
+	```
+	sudo swapoff /dev/vda3
+	sudo vim /etc/fstab 
+	sudo dd if=/dev/zero of=/swapfile bs=1024 count=1048576`
+	sudo chmod 600 /swapfile 
+	sudo mkswap /swapfile
+	sudo swapon /swapfile
+	swapon -s
+	```
+6. Update `/etc/apt/sources` to `bullseye` and add `raspi.list`
+	```
+	deb https://archive.raspberrypi.org/debian/ bullseye main
+	deb-src https://archive.raspberrypi.org/debian/ bullseye main
+	```
+	- [https://ict.gctaa.net/resources/adding_raspbian_repo.html](https://ict.gctaa.net/resources/adding_raspbian_repo.html)
+	- [https://www.linuxquestions.org/questions/blog/craigevil-176422/raspberry-pi-os-debian-11-bullseye-apt-repos-38636/](https://www.linuxquestions.org/questions/blog/craigevil-176422/raspberry-pi-os-debian-11-bullseye-apt-repos-38636/)
+	- [https://www.cyberciti.biz/faq/update-upgrade-debian-10-to-debian-11-bullseye/](https://www.cyberciti.biz/faq/update-upgrade-debian-10-to-debian-11-bullseye/)
+	- [https://www.tomshardware.com/how-to/upgrade-raspberry-pi-os-to-bullseye-from-buster](https://www.tomshardware.com/how-to/upgrade-raspberry-pi-os-to-bullseye-from-buster)
+7. Add /usr/sbin to path
+   1. `sudo vim ~/.bashrc`
+   2. Add `PATH=$PATH:/usr/sbin` to the end of the file
+   3. Save File `:wq!`
+   4. Run `source ~/.bashrc`
+
+8.  Add keys 
+	```
+	sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 82B129927FA3303E
+	sudo apt-key adv --recv-keys --keyserver **keys.openpgp.org** 74A941BA219EC810
+	```
+9. Resize partition - [Source](https://askubuntu.com/a/116367)
+	1. Run `sudo fdisk /dev/sda`
+	    - use `p` to list the partitions. Make note of the start cylinder of `/dev/sda1`
+	    - use `d` to **delete** first the swap partition (`2`) and then the `/dev/sda1` partition. This is very scary but is actually harmless as the data is not written to the disk until you write the changes to the disk.
+	    - use `n` to **create** a new primary partition. Make sure its start cylinder is exactly the same as the old `/dev/sda1` used to have. For the end cylinder agree with the default choice, which is to make the partition to span the whole disk.
+	    - review your changes, make a deep breath and use `w` to write the new partition table to disk. 
+	2. Reboot with `sudo reboot`.
+10. Make usb  filesystem  by running command  `mkfs.ext4 /dev/sda1` where `/dev/sda1` is your new disk.
+11. [Install raspiblitz via build script](https://github.com/rootzoll/raspiblitz/tree/v1.7/alternative.platforms#building-the-raspiblitz-scripts)
+12. [Configure signet](https://github.com/rootzoll/raspiblitz/issues/1500#issuecomment-982779830)
+13. Reboot with `sudo reboot`.
+14. Login with `admin` user.  Default password: `raspiblitz`

alternative.platforms/README.md

@@ -1,24 +1,116 @@
+<!-- omit in toc -->
 # ⚡️ Alternative platforms for the RaspiBlitz ⚡️
+- [Minimum requirements](#minimum-requirements)
+  - [Recommended specs](#recommended-specs)
+- [amd64 image](#amd64-image)
+  - [Requirements](#requirements)
+  - [Automated builds](#automated-builds)
+- [Virtual Machine](#virtual-machine)
+  - [Create the base image](#create-the-base-image)
+  - [Building the Raspiblitz scripts](#building-the-raspiblitz-scripts)
+  - [Notes](#notes)
+    - [Data drive](#data-drive)
+- [Armbian](#armbian)
+- [Ubuntu](#ubuntu)
+- [Python upgrade](#python-upgrade)
+- [Manual image release for amd64](#manual-image-release-for-amd64)
+  - [Requirements:](#requirements-1)
+  - [Create an NTFS formatted USB Stick / USB disk](#create-an-ntfs-formatted-usb-stick--usb-disk)
+  - [Boot Ubuntu Live from USB](#boot-ubuntu-live-from-usb)
+  - [Download and verify the base image](#download-and-verify-the-base-image)
+  - [Flash the base image to the installation medium](#flash-the-base-image-to-the-installation-medium)
+  - [Install Debian to the OS disk](#install-debian-to-the-os-disk)
+  - [Install the RaspiBlitz Scripts](#install-the-raspiblitz-scripts)
+  - [Prepare the release](#prepare-the-release)
+    - [Clean and shutdown the build machine](#clean-and-shutdown-the-build-machine)
+    - [Start Tails](#start-tails)
+    - [Import the signing keys](#import-the-signing-keys)
+      - [Prepare the disk](#prepare-the-disk)
+  - [Verify the downloaded image](#verify-the-downloaded-image)
+    - [Linux instructions](#linux-instructions)
+  - [Create a torrent](#create-a-torrent)
 
-Minimum requirements:
-* ARMv7, ARMv8 or x86 processor (32 or 64 bit)
+## Minimum requirements
+* ARMv8 or x86 processor (64 bit)
 * 1 GB RAM
-* \> 300 GB HDD
-
-Desirable:
-* \> 2GB DDR3 RAM
-* USB 3.0 or SATA connector
-* SSD
-* Compact case with efficient cooling (heatsink / fan)
-* HDMI / GPIO screen
+* 500 GB HDD
+* Python >=3.9 (see [how to upgrade below](#python-upgrade) )
 
+### Recommended specs
+* \> 2GB DDR3 ECC RAM (8GB+ if using ZFS)
+* USB 3.0 / SATA / PCIE / NVME connectors
+* SSD - multiple disks for redundancy
 
 Specifications of the tested hardware: [hw_comparison.md](hw_comparison.md)
 
 All testers are welcome. Open an issue for your specific board to collaborate and share your experience.
 
----
-## Armbian Buster
+## amd64 image
+### Requirements
+* amd64 Laptop, Desktop or Server connected to the internet via a LAN cable
+
+* `OS disk`: min 32GB SSD is recommended to run the system on
+    * if the computer can boot from an SDcard an Endurance type card can be used similar to the RPi setup
+    * USB SSD recommendation: [Sandisk Extreme Pro USB 128 GB](https://www.amazon.co.uk/SanDisk-Extreme-Solid-State-Flash/dp/B01MU8TZRV)
+    * if the laptop has an optical drive an [Optical Drive Bay Caddy / adapter](https://www.amazon.co.uk/dp/B07SHSCVC7/) can be used to change it to a second SSD instead.
+* `Data disk`: a new, minimum 1TB SSD is recommended - stores data independent of the operating system
+    * usually placed internally
+### Automated builds
+* find the download links or build locally with the instructions in: [/ci/README.md](/ci/README.md)
+
+## Virtual Machine
+
+Instructions to run a RaspiBlitz as a VM on a Linux host machine.
+The process is similar if you want to run RaspiBlitz on the bare metal.
+
+Tested with:
+* Debian image in VirtualBox and linux virt-manager / [cockpit-machines](https://github.com/cockpit-project/cockpit-machines)
+* Ubuntu image in VirtualBox and linux virt-manager / [cockpit-machines](https://github.com/cockpit-project/cockpit-machines)
+* Debian image in VirtualBox https://github.com/rootzoll/raspiblitz/issues/2756#issuecomment-983532237
+* TrueNAS (FreeBSD bhyve) with an Ubuntu VM: https://github.com/rootzoll/raspiblitz/issues/2104#issuecomment-917444238
+* [QEMU+UTM](https://github.com/rootzoll/raspiblitz/blob/dev/alternative.platforms/QEMU/raspiblitz-on-qemu.md)
+
+### Create the base image
+* Download and install the base OS on an at least 32GB drive
+* Debian is the most tested and is closest to the RaspberryOS: <https://www.debian.org/distrib/>
+* Ubuntu should work, but less tested
+* To just experiment can load a virtualbox image from: <https://www.osboxes.org/debian/> or <https://www.osboxes.org/ubuntu>.
+These not need installation, password: `osboxes.org`
+
+### Building the Raspiblitz scripts
+* Run the build script in the terminal of the base OS (with sudo access):
+
+  ```bash
+  # download the build script
+  wget https://raw.githubusercontent.com/rootzoll/raspiblitz/dev/build_sdcard.sh
+  # run
+  sudo bash build_sdcard.sh -f false -b dev -d headless -t false -w off
+  ```
+  ```
+  Options:
+    -EXPORT                                  just print build parameters & exit'
+    -h, --help                               this help info
+    -i, --interaction [0|1]                  interaction before proceeding with execution (default: 1)
+    -f, --fatpack [0|1]                      fatpack mode (default: 1)
+    -u, --github-user [raspiblitz|other]       github user to be checked from the repo (default: raspiblitz)
+    -b, --branch [v1.7|v1.8]                 branch to be built on (default: v1.10)
+    -d, --display [lcd|hdmi|headless]        display class (default: lcd)
+    -t, --tweak-boot-drive [0|1]             tweak boot drives (default: 1)
+    -w, --wifi-region [off|US|GB|other]      wifi iso code (default: US) or 'off'
+  ```
+
+* Switch off when ready
+* Attach an other disk (can be even small if you prune or [stop bitcoind](https://github.com/rootzoll/raspiblitz/issues/1500#issuecomment-982779830) manually.
+The second virtual disk will be used as the BLOCKCHAIN drive.
+This makes that data portable and independent from the OS similar to the combination of the SDcard and separate SSD.
+
+### Notes
+
+#### Data drive
+* create a raw image of 500+ GB for best compatibility
+* if there are permission issues try to symlink the disk image to `/var/lib/libvirt/images`
+
+## Armbian
 Many SBC-s are supported:
 https://www.armbian.com/download/
 
@@ -27,14 +119,13 @@ To verify the downloaded image follow: https://docs.armbian.com/User-Guide_Getti
 Tested on:
 * Odroid XU4 / HC1 / HC2 with the Armbian Buster image from https://www.armbian.com/odroid-xu4/
 
-
 Burn the image to the SDcard with [Etcher](https://www.balena.io/etcher/).
 
-Assemble and boot.  
+Assemble and boot.
 
 `ssh root@192.168.x.x`
 
-password: 1234
+password: `1234`
 
 Follow the instructions in the terminal. Set the new password to `raspiblitz` and name the new user `admin` to keep in line with the rest of the setup.
 
@@ -42,8 +133,7 @@ Continue with building the SDcard: https://github.com/rootzoll/raspiblitz#build-
 
 ---
 
-## Ubuntu Bionic
-
+## Ubuntu
 A common distro to be supplied by the manufacturer for various boards.
 
 Tested on:
@@ -74,26 +164,258 @@ Continue with building the SDcard: https://github.com/rootzoll/raspiblitz#build-
 
 ---
 
-## DietPi
+## Python upgrade
+* run the commands below in the terminal line-by-line
+  ```bash
+  # select version
+  pythonVersion="3.10.4"
+  majorPythonVersion=$(echo "$pythonVersion" | awk -F. '{print $1"."$2}' )
+  # update and upgrade
+  sudo apt update
+  sudo apt upgrade -y
+  # dependencies
+  sudo apt install wget software-properties-common build-essential libnss3-dev zlib1g-dev libgdbm-dev libncurses5-dev libssl-dev libffi-dev libreadline-dev libsqlite3-dev libbz2-dev -y
+  # download
+  wget https://www.python.org/ftp/python/${pythonVersion}/Python-${pythonVersion}.tgz
+  # optional signature for verification
+  wget https://www.python.org/ftp/python/${pythonVersion}/Python-${pythonVersion}.tgz.asc
+  # get PGP pubkey of Pablo Galindo Salgado
+  gpg --recv-key CFDCA245B1043CF2A5F97865FFE87404168BD847
+  # check for: Good signature from "Pablo Galindo Salgado <pablogsal@gmail.com>"
+  gpg --verify Python-${pythonVersion}.tgz.asc
+  # unzip
+  tar xvf Python-${pythonVersion}.tgz
+  cd Python-${pythonVersion}
+  # configure
+  ./configure --enable-optimizations
+  # install
+  sudo make altinstall
+  # move the python binary to the expected directory
+  sudo mv $(which python${majorPythonVersion}) /usr/bin/
+  # check
+  ls -la /usr/bin/python${majorPythonVersion}
+  # make the new version the default
+  sudo rm /etc/alternatives/python
+  sudo update-alternatives --install /usr/bin/python python /usr/bin/python${majorPythonVersion} 1
+  sudo update-alternatives --install /usr/bin/python3 python3 /usr/bin/python${majorPythonVersion} 1
+  # check
+  python --version
+  python3 --version
+  ```
 
-Many SBC-s are supported:
-https://dietpi.com/#download
+## Manual image release for amd64
 
-Tested on:
+Work notes partially based on: https://github.com/rootzoll/raspiblitz/blob/v1.7/FAQ.md#what-is-the-process-of-creating-a-new-sd-card-image-release
 
-* Odroid HC1
-* Odroid HC2 (the same board with a 3.5" 12V HDD)
-* Odroid XU4 (with HDMI screen)
-* Raspberry Pi 3 B+ (with the default GPIO or HDMI display)
+### Requirements:
+* amd64 Laptop or Server connected to the internet via a LAN cable
+* [`Ubuntu Live`](https://releases.ubuntu.com/focal/ubuntu-20.04.5-desktop-amd64.iso) USB Stick to start on a clean system
+* `Installation medium`: min 8GB SDcard / USB stick to install the base image from
+* `OS disk`: min 32 GB Endurance type SDcard or USB SSD to run the operating system on
+* (`Data disk`: a new, minimum 1TB SSD is recommended - not needed to create the image release)
+* [`Tails USB Stick`](https://tails.boum.org/install/download/) to sign the image offline
+* PGP keys on an USB stick to sign the image
+* NTFS formatted USB Stick or disk to store the signed image (can reuse the Installation medium)
+
+### Create an NTFS formatted USB Stick / USB disk
+* can be prepared any time on a separate computer and can reuse the Installation medium
+
+### Boot Ubuntu Live from USB
+* Start [`Ubuntu Live`](https://releases.ubuntu.com/focal/ubuntu-20.04.5-desktop-amd64.iso) from USB stick
+* Under Settings: best to set correct keyboard language & power settings to prevent monitor turn off
+
+### Download and verify the base image
+* Download the latest [Debian Desktop netinst.io, SHA512SUMS and Signature](https://www.debian.org/download) and verify the [downloaded image](https://www.debian.org/CD/verify)
+* In a terminal can use the following commands (see the comments for the explanations and an example output)
+    ```bash
+    # Download the base image:
+    wget https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-11.3.0-amd64-netinst.iso
+    # Download the SHA512SUMS:
+    wget https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/SHA512SUMS
+    # Download the Signature:
+    wget https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/SHA512SUMS.sign
+
+    # Verify:
+    # download the signing pubkey:
+    gpg --keyserver keyring.debian.org --receive-key DF9B9C49EAA9298432589D76DA87E80D6294BE9B
+    # gpg: key DA87E80D6294BE9B: public key "Debian CD signing key <debian-cd@lists.debian.org>" imported
+    # gpg: Total number processed: 1
+    # gpg:               imported: 1
+    # Verify the signature of the SHA512SUMS file
+    gpg --verify gpg --verify SHA512SUMS.sign
+    # Look for the output 'Good signature':
+    # gpg: assuming signed data in 'SHA512SUMS'
+    # gpg: Signature made Sat 26 Mar 2022 21:22:41 GMT
+    # gpg:                using RSA key DF9B9C49EAA9298432589D76DA87E80D6294BE9B
+    # gpg: Good signature from "Debian CD signing key <debian-cd@lists.debian.org>" [unknown]
+    # gpg: WARNING: This key is not certified with a trusted signature!
+    # gpg:          There is no indication that the signature belongs to the owner.
+    # Primary key fingerprint: DF9B 9C49 EAA9 2984 3258  9D76 DA87 E80D 6294 BE9B
+
+    # Compare the hash to the hash of the image file:
+    sha512sum -c SHA512SUMS --ignore-missing
+    # Look for the output 'OK':
+    # debian-11.3.0-amd64-netinst.iso: OK
+    ```
+### Flash the base image to the installation medium
+* Connect an SDcard reader with a min 8GB SDcard or an USB stick.
+* In the file manager open the context menu (right click) on the `netinst.iso` file.
+* Select the option `Open With Other Application` and choose `Open With Disk Image Writer`.
+* Write the image to the SDcard / USB SSD (Installation medium).
+* Shut down the Laptop now and remove the `Ubuntu Live` USB Stick.
+
+### Install Debian to the OS disk
+* Connect the Laptop / Server to the LAN (with cable) with only the OS disk connected (no Data disk)
+* Insert the installation medium to the USB and power up - boot from USB.
+* Continue to work on the screen of the laptop or a connected monitor
+* Install Debian with the defaults:
+    * leave the root password empty (root user disabled)
+    * create a new user called `pi`, set the password to `raspiblitz`
+    * use a single partition for the OS
+      * Choose: `Guided - use entire disk`
+      * Select the OS disk
+      * All files in one partition
+      * Can remove the `Swap` partition - a swap file will be created on the Data disk later
+* At the `Software selection` choose:
+    * Debian desktop environment
+    * GNOME (could be other as preferred)
+    * SSH server
+    * standard system utilities
+* Install GRUB on the primary partition (OS Disk)
 
 
-The HDMI screen tested: https://www.aliexpress.com/item/3-5-inch-LCD-HDMI-USB-Touch-Screen-Real-HD-1920x1080-LCD-Display-Py-for-Raspberri/32818537950.html
+### Install the RaspiBlitz Scripts
+* Once the setup is finished reboot and log in with the `pi` user (pw: `raspiblitz`)
+* Run the following commands to build from the `dev` branch or change `dev` with the branch name of your version:
+    ```bash
+    # download
+    wget https://raw.githubusercontent.com/rootzoll/raspiblitz/dev/build_sdcard.sh
+    # run
+    sudo bash build_sdcard.sh -f true -b dev -d headless -t false -w off
+    ```
+* The `[sudo] password for pi:` is `raspiblitz`
+* Confirm the chosen parameters
+* Monitor/Check outputs for warnings/errors
+* (Optional for development - copy the output to a build_sdcard.sh.log)
 
-Detailed instructions for the RaspiBlitz-on-DietPi: [alternative.platforms/dietpi/README.md](/alternative.platforms/dietpi/README.md)
+* Useful settings:
+  * In Settings - Power - Automatic Suspend - Plugged In - Off
+  * In Tweaks - General - Suspend when laptop lid is closed - Off
 
----
-For the process to build a custom SDcard image release see:
-https://github.com/rootzoll/raspiblitz/blob/dev/FAQ.md#what-is-the-process-of-creating-a-new-sd-card-image-release
 
-Extras for advanced users and powerful hardware:
-https://github.com/openoms/bitcoin-tutorials/
+### Prepare the release
+#### Clean and shutdown the build machine
+* run the command (same as running `release` under `admin`):
+    ```bash
+    sudo -u admin /home/admin/config.scripts/blitz.preparerelease.sh
+    ```
+* This will shut down the laptop.
+* Remove the `Installation medium` and the `Ubuntu Live` USB stick and the LAN cable
+#### Start Tails
+* Connect the `Tails USB Stick` (make it stay offline)
+* Boot Tails and set and Admin password in Additional Settings (will need it to work with the disk)
+* Set the screen to not switch off: Settings > Power -> Blank screen - Never
+#### Import the signing keys
+* Connect USB stick with GPG signing keys - decrypt drive if needed
+* Open Terminal and cd into directory of USB Stick under `/media/amnesia`
+* Run `gpg --import ./secret-key-backup.key`, check and `exit`
+* Disconnect USB stick with GPG keys
+##### Prepare the disk
+* Start Disks and resize the OS disk partition to 10GB
+* Connect the NTFS USB stick, open in file manager and delete old files
+* Open a terminal from the NTFS disk with right click
+* Run `lsblk` in a terminal to double check the OS disk device name (ignore last partition number)
+* Clone and compress the OS disk image (copy 11GB so the 10GB sized partition is comfortably included):
+    ```bash
+    sudo dd if=/dev/[OSdiskddevice] bs=1G count=11 status=progress | gzip > raspiblitz-amd64-vX.X.X-YEAR-MONTH-DAY.img.gz
+    ```
+* When finished you should see that 30GB was copied (the resulting compressed file is less than 3GB).
+* Create sha256 hash of the image:
+    ```bash
+    sha256sum *.gz > raspiblitz-amd64-vX.X.X-YEAR-MONTH-DAY.img.gz.sha256
+    ```
+* Sign the sha256 hash file:
+    ```bash
+    gpg --detach-sign --armor *.sha256
+    ```
+* Check the files:
+  ```bash
+  ls
+    raspiblitz-amd64-vX.X.X-YEAR-MONTH-DAY.img.gz
+    raspiblitz-amd64-vX.X.X-YEAR-MONTH-DAY.img.gz.sha256
+    raspiblitz-amd64-vX.X.X-YEAR-MONTH-DAY.img.gz.sha256.asc
+  ```
+
+* Test with:
+    ```bash
+    gpg --verify *.asc
+    shasum -c *.sha256
+    ```
+
+* Shutdown the build computer
+* Upload the new image to server - put the .sig file and .sha256 next to it
+* Copy the sha256sum to GitHub README and update the download link
+
+### Verify the downloaded image
+#### Linux instructions
+* Open a terminal in the directory with the downloaded files
+    ```
+    raspiblitz-amd64-vX.X.X-YEAR-MONTH-DAY.img.gz
+    raspiblitz-amd64-vX.X.X-YEAR-MONTH-DAY.img.gz.sha256
+    raspiblitz-amd64-vX.X.X-YEAR-MONTH-DAY.img.gz.sha256.asc
+    ```
+* Paste the following commands (see the comments for the explanations and an example output)
+  ```bash
+  # Import the signing pubkey:
+  curl https://keybase.io/oms/pgp_keys.asc | gpg --import
+
+  # Verify the signature of the sha256 hash:
+  gpg --verify *.asc
+  # Look for the output 'Good signature':
+  # gpg: assuming signed data in 'raspiblitz-amd64-vX.X.X-YEAR-MONTH-DAY.img.gz.sha256'
+  # gpg: Signature made Mon DAY MONTH YEAR xx:xx:xx GMT
+  # gpg:                using RSA key 13C688DB5B9C745DE4D2E4545BFB77609B081B65
+  # gpg: Good signature from "openoms <oms@tuta.io>" [unknown]
+  # gpg: WARNING: This key is not certified with a trusted signature!
+  # gpg:          There is no indication that the signature belongs to the owner.
+  # Primary key fingerprint: 13C6 88DB 5B9C 745D E4D2  E454 5BFB 7760 9B08 1B65
+
+  # Compare the sha256 hash to the hash of the image file
+  shasum -c *.sha256
+  # Look for the output 'OK' :
+  # raspiblitz-amd64-vX.X.X-YEAR-MONTH-DAY.img.gz: OK
+  ```
+
+### Create a torrent
+* Create Torrent file from image (for example with Transmission / qbBittorrent) and place in the `home.admin/assets` folder & link on README
+* Tracker list recommended to be used with the torrent:
+    ```
+    udp://tracker.coppersurfer.tk:6969/announce
+    http://tracker.yoshi210.com:6969/announce
+    http://open.acgtracker.com:1096/announce
+    http://tracker.skyts.net:6969/announce
+    udp://9.rarbg.me:2780/announce
+    http://tracker2.itzmx.com:6961/announce
+    udp://exodus.desync.com:6969/announce
+    http://pow7.com:80/announce
+    udp://tracker.leechers-paradise.org:6969
+    ```
+* Comments:
+    ```
+    raspiblitz-raspiblitz-amd64-vX.X.X-YEAR-MONTH-DAY
+
+    raspiblitz-raspiblitz-amd64-vX.X.X-YEAR-MONTH-DAY image, sha256sum and signature
+
+    Find more info at: https://github.com/rootzoll/raspiblitz/tree/dev/alternative.platforms
+
+    # Import the signing pubkey:
+    curl https://keybase.io/oms/pgp_keys.asc | gpg --import
+    gpg --verify *.asc
+
+    # Verify the signature of the sha256 hash (Look for the output 'Good signature'):
+    gpg --verify *.asc
+    # Look for the output 'Good signature'
+
+    # Compare the sha256 hash to the hash of the image file (Look for the output 'OK'):
+    shasum -c *.sha256
+    ```

alternative.platforms/amd64/packer/raspiblitz.json

@@ -21,18 +21,8 @@
       "ssh_username": "vagrant",
       "type": "virtualbox-iso",
       "vboxmanage": [
-        [
-          "modifyvm",
-          "{{.Name}}",
-          "--memory",
-          "1024"
-        ],
-        [
-          "modifyvm",
-          "{{.Name}}",
-          "--cpus",
-          "1"
-        ]
+        ["modifyvm", "{{.Name}}", "--memory", "1024"],
+        ["modifyvm", "{{.Name}}", "--cpus", "1"]
       ],
       "vm_name": "raspiblitz-amd64"
     }
@@ -63,10 +53,9 @@
   ],
   "variables": {
     "branch": "dev",
-    "github_user": "rootzoll",
-    "iso_checksum": "2af8f43d4a7ab852151a7f630ba596572213e17d3579400b5648eba4cc974ed0",
+    "github_user": "raspiblitz",
+    "iso_checksum": "23ab444503069d9ef681e3028016250289a33cc7bab079259b73100daee0af66",
     "iso_checksum_type": "sha256",
-    "iso_url": "https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-10.6.0-amd64-netinst.iso"
+    "iso_url": "https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-12.2.0-amd64-netinst.iso"
   }
 }
-

alternative.platforms/amd64/packer/scripts/init.sh

@@ -22,9 +22,3 @@ wget --no-check-certificate \
      -O /home/vagrant/.ssh/authorized_keys
 chmod 0600 /home/vagrant/.ssh/authorized_keys
 chown -R vagrant /home/vagrant/.ssh
-
-# disable apparmor - tor will not work with raspiblitz customization
-mkdir -p /etc/default/grub.d
-echo 'GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT apparmor=0"' \
-    | tee /etc/default/grub.d/apparmor.cfg
-update-grub

alternative.platforms/amd64/packer/scripts/init_vagrant.sh

@@ -10,7 +10,7 @@ cp /vagrant/home.admin/config.scripts/blitz.github.sh /home/admin/config.scripts
 # execute 'patch' command to sync laptop with VM
 /home/admin/config.scripts/blitz.github.sh -run
 
-source <(/home/admin/config.scripts/internet.sh status)
+source <(/home/admin/config.scripts/internet.sh status local)
 
 echo
 echo "************* NEXT ********************"

alternative.platforms/display.alternatives.sh

@@ -21,7 +21,7 @@ if [ ${isDietPi} -gt 0 ]; then
 fi
 if [ "${baseimage}" = "?" ]; then
   cat /etc/os-release 2>/dev/null
-  echo "!!! FAIL !!!"
+  echo "# FAIL #"
   echo "Base Image cannot be detected or is not supported."
   exit 1
 else
@@ -55,7 +55,7 @@ if [ "${CHOICE}" = "GPIO" ]; then
     sudo apt-mark hold raspberrypi-bootloader
     sudo ./LCD35-show
   else
-    sudo rm -rf /etc/X11/xorg.conf.d/40-libinput.conf
+    sudo rm -rf /etc/X11/xorg.conf.d/40-libinput.conf 2>/dev/null
     sudo mkdir /etc/X11/xorg.conf.d
     sudo cp ./usr/tft35a-overlay.dtb /boot/overlays/
     sudo cp ./usr/tft35a-overlay.dtb /boot/overlays/tft35a.dtbo
@@ -79,7 +79,7 @@ elif [ "${CHOICE}" = "HDMI" ]; then
   sudo chmod -R 755 LCD-show
   cd LCD-show/
   #sudo ./MPI3508-show  
-  sudo rm -rf /etc/X11/xorg.conf.d/40-libinput.conf
+  sudo rm -rf /etc/X11/xorg.conf.d/40-libinput.conf 2>/dev/null
   
   if [ "${baseimage}" != "dietpi" ]; then
     sudo cp -rf ./boot/config-35-480X320.txt /boot/config.txt  

case.3dprint/standard/readme.md

@@ -1,9 +0,0 @@
-# Raspiblitz Case: Standard
-
-This is a raspiblitz case prototype. The standard file (Raspiblitz_standard.stl) should be modified to fit your HDD. 
-
-#### To Do
-
-* Update the HDD container to fit the standard HDD model from the raspiblitz amazon buylist. (Toshiba HDTB420EK3AA 2TB Canvio Basics 2.5-Inch USB 3.0 Portable External Hard Drive - Black)
-
-* Add a cool lightning bolt to improve the design.

ci/README.md

@@ -0,0 +1,272 @@
+<!-- omit in toc -->
+# Automated builds
+
+<details>
+<summary>Table of Contents</summary>
+
+- [Ready made images for arm64-rpi](#ready-made-images-for-arm64-rpi)
+- [Ready made images for amd64 (x86)](#ready-made-images-for-amd64-x86)
+  - [Write the image to a disk connected with USB](#write-the-image-to-a-disk-connected-with-usb)
+    - [Prepare the disk](#prepare-the-disk)
+    - [Option 1 - rite the .qcow2 file directly to disk with `qemu-image dd`](#option-1---rite-the-qcow2-file-directly-to-disk-with-qemu-image-dd)
+    - [Option 2 - convert the .qcow2 volume to a raw disk image](#option-2---convert-the-qcow2-volume-to-a-raw-disk-image)
+  - [The first boot](#the-first-boot)
+    - [Lean image with Gnome desktop (default image)](#lean-image-with-gnome-desktop-default-image)
+    - [Extend the root partition (optional - recommended)](#extend-the-root-partition-optional---recommended)
+    - [Add wifi driver (optional)](#add-wifi-driver-optional)
+- [Local build](#local-build)
+  - [Generate an arm64-rpi image](#generate-an-arm64-rpi-image)
+  - [Generate an amd64 image](#generate-an-amd64-image)
+    - [amd64-lean-desktop-uefi-image](#amd64-lean-desktop-uefi-image)
+    - [amd64-lean-server-legacyboot-image](#amd64-lean-server-legacyboot-image)
+- [Notes for the lean server image without Gnome desktop](#notes-for-the-lean-server-image-without-gnome-desktop)
+  - [After the boot](#after-the-boot)
+  - [Connect to wifi from the command line (optional)](#connect-to-wifi-from-the-command-line-optional)
+    - [Add Gnome desktop to the server image (optional)](#add-gnome-desktop-to-the-server-image-optional)
+- [Fatpack images](#fatpack-images)
+- [Workflow notes](#workflow-notes)
+  - [VNC](#vnc)
+  - [Packer settings](#packer-settings)
+  - [Flashing](#flashing)
+
+</details>
+
+## Ready made images for arm64-rpi
+* The images are built in GitHub actions
+* To see the downloadable artifacts will need to log in to GitHub
+* Find the latest successful build of the default amd64 image:
+https://github.com/raspiblitz/raspiblitz/actions/workflows/arm64-rpi-lean-image.yml?query=workflow%3Aarm64-rpi-lean-image-build+is%3Asuccess+branch%3Adev
+* unpack the artifact to the same directory
+  ```
+  unzip ./raspiblitz-arm64-rpi-image-*.zip
+  ```
+* The resulting `raspiblitz-arm64-rpi-lean.img.gz` can be written to an SDcard directly with Balena Etcher
+
+
+## Ready made images for amd64 (x86)
+* The images are built in GitHub actions
+* To see the downloadable artifacts will need to log in to GitHub
+* Find the latest successful build of the default amd64 image:
+https://github.com/rootzoll/raspiblitz/actions/workflows/amd64-lean-image.yml?query=workflow%3Aamd64-lean-image-build+branch%3Adev+is%3Asuccess++
+  ```
+  # unpack the artifact to the same directory
+  unzip ./raspiblitz-amd64-image-*.zip
+  # unpack the image
+  gzip -dkv raspiblitz-amd64-debian-lean.qcow2.gz
+  # install qemu-utils
+  sudo apt install -y qemu-utils
+  ```
+###  Write the image to a disk connected with USB
+
+#### Prepare the disk
+* identify the connected disk with `lsblk` e.g., `/dev/sdk`
+* set the disk variable
+  ```
+  # identify the USB connected disk
+  lsblk
+  # set the disk variable
+  disk=/dev/sdk
+  ```
+* clean the existing partitions:
+  ```
+  # unmount all partitions
+  sudo umount ${disk}*
+  # wipe the partition table
+  sudo wipefs --all ${disk}
+  ```
+
+#### Option 1 - rite the .qcow2 file directly to disk with `qemu-image dd`
+* requires less disk space - the .qcow2 volume is 8.1 GB
+  ```
+  sudo qemu-img dd if=./raspiblitz-amd64-debian-lean.qcow2 of=${disk} bs=4M
+  ```
+
+#### Option 2 - convert the .qcow2 volume to a raw disk image
+* the raw .img is 30GB
+  ```
+  # convert
+  qemu-img convert ./raspiblitz-amd64-debian-lean.qcow2 ./raspiblitz-amd64-debian-lean.img
+  ```
+* identify the connected disk with `lsblk` e.g., `/dev/sdk`
+* use [Balena Etcher](https://www.balena.io/etcher/)
+* or `dd` to write the .img to disk
+  ```
+  sudo dd if=./raspiblitz-amd64-debian-lean.img of=${disk} bs=4M status=progress
+  ```
+
+### The first boot
+#### Lean image with Gnome desktop (default image)
+* log in on screen:
+  * username: `admin`
+  * password: `raspiblitz`
+* start a terminal for guidance
+* alternatively connect with ssh over the LAN with the same username and password
+
+#### Extend the root partition (optional - recommended)
+* The default image is 30GB. The partition can be extended to the full size of the disk.
+* The lvm partition can be extended while mounted so this step can be done later as well while the system is running.
+* CLI (recommended)
+  ```
+  # identify the USB connected disk
+  lsblk
+  df -h
+  # select the disk carefully
+  disk="/dev/sde"
+  # resize the extended partition to the full size of the disk
+  sudo parted ${disk} -- resizepart 2 100%
+  # resize the lvm partition to the full size of the disk
+  sudo parted ${disk} -- resizepart 5 100%
+  # extend the physical volume to size of the lvm partition
+  sudo pvresize ${disk}5
+  # extend the root lvm to the full free space and resize the filesystem
+  sudo lvextend -r -l +100%FREE /dev/mapper/raspiblitz--amd64--vg-root
+  ```
+* GUI with GParted
+  ```
+  # install
+  sudo apt install gparted
+  # start the gparted GUI
+  sudo gparted
+  # resize the extended partition to the full size of the disk
+  # extend the lvm to the full free space and resize the filesystem (extends the swap space by default)
+  # in CLI: extend the root lvm
+  sudo lvextend -r -l +100%FREE /dev/mapper/raspiblitz--amd64--vg-root
+  ```
+
+#### Add wifi driver (optional)
+* as in https://wiki.debian.org/iwlwifi
+* add the component `non-free` after `deb http://deb.debian.org/debian bullseye main` in `/etc/apt/sources.list`
+* install the wifi driver for the mentioned cards:
+  ```
+  sudo apt update && sudo apt install firmware-iwlwifi
+  ```
+* alternatively download the deb package from: http://ftp.debian.org/debian/pool/non-free-firmware/f/firmware-nonfree/firmware-iwlwifi_20230210-5_all.deb
+* install with:
+  ```
+  sudo dpkg -i firmware-iwlwifi_20230210-5_all.deb
+  ```
+
+## Local build
+with the [Makefile](https://github.com/rootzoll/raspiblitz/blob/dev/Makefile)
+* needs ~20 GB free space
+* tested on:
+  * Ubuntu Live (jammy)
+  * Debian Bullseye Desktop
+* Preparation:
+  ```
+  # change to a mountpoint with sufficient space (check with 'df -h')
+  cd $HOME/
+  # switch to root
+  sudo su
+  # install git and make
+  apt update && apt install -y git make
+  # download the repo (or your fork)
+  git clone https://github.com/rootzoll/raspiblitz
+  cd raspiblitz
+  # checkout the desired branch
+  git checkout dev
+  ```
+
+### Generate an arm64-rpi image
+* The workflow locally and in github actions generates a .img raw format image for the Raspberry Pi.
+  ```
+  make arm64-rpi-lean-image
+  ```
+* find the image and sha256 hashes in the `ci/arm64-rpi/packer-builder-arm` directory
+* the .img.gz file can be written to an SDcard directly with Balena Etcher
+
+### Generate an amd64 image
+* The workflow locally and in github actions generates a .qcow2 format amd64 image.
+* When finished find the compressed .qcow2 image and sha256 hashes in the `ci/amd64/builds` directory
+
+#### amd64-lean-desktop-uefi-image
+* lean image, Gnome desktop, UEFI boot
+* Tested with
+  * written to disk and booted with UEFI
+  ```
+  make amd64-lean-desktop-uefi-image
+  ```
+
+#### amd64-lean-server-legacyboot-image
+* lean image, no desktop (cli only), legacy boot for old computers
+* Tested with
+  * libvirt / virsh / virt-manager (https://virt-manager.org/)
+  * written to disk and booted with legacy boot (non-UEFI / CSM mode)
+  ```
+  make amd64-lean-server-legacyboot-image
+  ```
+
+## Notes for the lean server image without Gnome desktop
+### After the boot
+* press any key to get to a login prompt after the splash screen
+  * username: `admin`
+  * password: `raspiblitz`
+
+### Connect to wifi from the command line (optional)
+* if the wifi driver is included in the FOSS Debian distro
+* in the command line run the network manager interface to connect:
+  ```
+  sudo nmtui
+  ```
+
+#### Add Gnome desktop to the server image (optional)
+* Connect to the internet (easiest to plug in a LAN cable - use a USB - LAN adapter if have no port)
+  ```
+  apt install gnome
+  systemctl start gdm
+  ```
+
+## Fatpack images
+* can open a browser and go to:
+  * http://localhost
+* can also open the WebUI on another computer
+  * Find the the RaspiBlitz_IP in your router dashboard, in the terminal prompt or with `hostname -I`
+  * open: http://RaspiBlitz_IP
+
+## Workflow notes
+The github workflow files are the equivalent of the Makefile commands run locally.
+The local repo owner (`GITHUB_ACTOR`) and branch (`GITHUB_HEAD_REF`) is picked up.
+The build_sdcard.sh is downloaded from the source branch and built with the options pack=[lean|fatpack] to set fatpack=[0|1].
+
+The github workflow is running the job in an ubuntu-22.04 image.
+
+The amd64 image is built with running a qemu VM
+* installs the base OS (Debian)
+* connects with ssh and runs the scripts including the build_sdcard.sh
+
+The arm64-rpi image generation runs in Docker in github actions and without Docker locally.
+* the base image (RaspberryOS) is started in the qemu VM
+* Packer runs the build_sdcard.sh directly in the VM
+
+After the image is built (and there is no exit with errors) the next steps are:
+* compute checksum of the qemu/raw image
+* compress the image with gzip
+* compute checksum of the compressed image
+* (in github actions: upload the artifacts in one .zip file)
+
+### VNC
+* can follow the setup locally in VNC with the port stated in the first part of the logs eg: `Found available VNC port: 5900 on IP: 127.0.0.1`
+
+### Packer settings
+* `disk_size` / `image_size` - the size op the raw image. The .qcow2 file is compressed.
+* `template`  - image filename
+* `output_directory` - directory under builds where the image will be placed
+* the `pi` user is given passwordless sudo access and used for the image setup
+* use `file_checksum`  instead of `file_checksum_url`. The image must be downloaded and verified with PGP manually to fill the field:
+  ```
+  # image
+  wget https://downloads.raspberrypi.org/raspios_arm64/images/raspios_arm64-2022-09-26/2022-09-22-raspios-bullseye-arm64.img.xz
+  # signature
+  wget https://downloads.raspberrypi.org/raspios_arm64/images/raspios_arm64-2022-09-26/2022-09-22-raspios-bullseye-arm64.img.xz.sig
+  # hash
+  wget https://downloads.raspberrypi.org/raspios_arm64/images/raspios_arm64-2022-09-26/2022-09-22-raspios-bullseye-arm64.img.xz.sha256
+
+  curl https://www.raspberrypi.org/raspberrypi_downloads.gpg.key | gpg --import
+
+  sha256sum -c 2022-09-22-raspios-bullseye-arm64.img.xz.sha256 && \
+  gpg --verify 2022-09-22-raspios-bullseye-arm64.img.xz.sig
+
+  cat 2022-09-22-raspios-bullseye-arm64.img.xz.sha256
+  ```
+### Flashing
+* using `qemu-img dd bs=4M if=raspiblitz-amd64-debian-lean.qcow2 of=/dev/sdd` changed the UUID so it won't boot without editing GRUB

ci/amd64/_common/env.sh

@@ -0,0 +1,4 @@
+#!/bin/sh
+
+echo "# Display the environment variables"
+env

ci/amd64/_common/sshd.sh

@@ -0,0 +1,20 @@
+#!/bin/sh -eux
+
+SSHD_CONFIG="/etc/ssh/sshd_config"
+
+# ensure that there is a trailing newline before attempting to concatenate
+sed -i -e '$a\' "$SSHD_CONFIG"
+
+USEDNS="UseDNS no"
+if grep -q -E "^[[:space:]]*UseDNS" "$SSHD_CONFIG"; then
+    sed -i "s/^\s*UseDNS.*/${USEDNS}/" "$SSHD_CONFIG"
+else
+    echo "$USEDNS" >>"$SSHD_CONFIG"
+fi
+
+GSSAPI="GSSAPIAuthentication no"
+if grep -q -E "^[[:space:]]*GSSAPIAuthentication" "$SSHD_CONFIG"; then
+    sed -i "s/^\s*GSSAPIAuthentication.*/${GSSAPI}/" "$SSHD_CONFIG"
+else
+    echo "$GSSAPI" >>"$SSHD_CONFIG"
+fi

ci/amd64/debian/build.amd64-debian.pkr.hcl

@@ -0,0 +1,115 @@
+variable "iso_name" { default = "debian-12.6.0-amd64-netinst.iso" }
+variable "iso_checksum" { default = "ade3a4acc465f59ca2496344aab72455945f3277a52afc5a2cae88cdc370fa12" }
+
+variable "pack" { default = "lean" }
+variable "github_user" { default = "raspiblitz" }
+variable "branch" { default = "dev" }
+variable "desktop" { default = "none" }
+
+variable "boot" { default = "uefi" }
+variable "preseed_file" { default = "preseed.cfg" }
+variable "hostname" { default = "raspiblitz-amd64" }
+
+variable "disk_size" { default = "30000" }
+variable "memory" { default = "4096" }
+variable "cpus" { default = "4" }
+
+locals {
+  name_template = "${var.hostname}-debian-${var.pack}"
+  bios_file     = var.boot == "uefi" ? "OVMF.fd" : "bios-256k.bin"
+  boot_command = var.boot == "uefi" ? [
+    "<wait><wait><wait>c<wait><wait><wait>",
+    "linux /install.amd/vmlinuz ",
+    "auto=true ",
+    "url=http://{{ .HTTPIP }}:{{ .HTTPPort }}/${var.preseed_file} ",
+    "hostname=${var.hostname} ",
+    "domain=${var.hostname}.local ",
+    "interface=auto ",
+    "vga=788 noprompt quiet --<enter>",
+    "initrd /install.amd/initrd.gz<enter>",
+    "boot<enter>"
+    ] : [
+    "<esc><wait>install <wait>",
+    "<wait><wait><wait><wait><wait><wait><wait><wait><wait><wait><wait><wait><wait><wait><wait><wait> preseed/url=http://{{ .HTTPIP }}:{{ .HTTPPort }}/${var.preseed_file} <wait>",
+    "debian-installer=en_US.UTF-8 <wait>",
+    "auto <wait>",
+    "locale=en_US.UTF-8 <wait>",
+    "kbd-chooser/method=us <wait>",
+    "keyboard-configuration/xkb-keymap=us <wait>",
+    "netcfg/get_hostname=${var.hostname} <wait>",
+    "netcfg/get_domain=${var.hostname}.local <wait>",
+    "fb=false <wait>",
+    "debconf/frontend=noninteractive <wait>",
+    "console-setup/ask_detect=false <wait>",
+    "console-keymaps-at/keymap=us <wait>",
+    "grub-installer/bootdev=default <wait>",
+    "<enter><wait>"
+  ]
+}
+
+source "qemu" "debian" {
+  boot_command     = local.boot_command
+  boot_wait        = "5s"
+  cpus             = var.cpus
+  disk_size        = var.disk_size
+  http_directory   = "./http"
+  iso_checksum     = var.iso_checksum
+  iso_url          = "https://cdimage.debian.org/cdimage/release/current/amd64/iso-cd/${var.iso_name}"
+  memory           = var.memory
+  output_directory = "../builds/${local.name_template}-qemu"
+  shutdown_command = "echo 'raspiblitz' | sudo /sbin/shutdown -hP now"
+  ssh_password     = "raspiblitz"
+  ssh_port         = 22
+  ssh_timeout      = "10000s"
+  ssh_username     = "pi"
+  format           = "qcow2"
+  vm_name          = "${local.name_template}.qcow2"
+  headless         = false
+  vnc_bind_address = "127.0.0.1"
+  vnc_port_max     = 5900
+  vnc_port_min     = 5900
+  qemuargs = [
+    ["-m", var.memory],
+    ["-bios", local.bios_file],
+    ["-display", "none"]
+  ]
+}
+
+build {
+  description = "Can't use variables here yet!"
+  sources     = ["source.qemu.debian"]
+
+  provisioner "shell" {
+    environment_vars = [
+      "HOME_DIR=/home/pi",
+      "github_user=${var.github_user}",
+      "branch=${var.branch}",
+      "pack=${var.pack}",
+      "desktop=${var.desktop}"
+    ]
+
+    execute_command   = "echo 'raspiblitz' | {{.Vars}} sudo -S -E sh -eux '{{.Path}}'"
+    expect_disconnect = true
+    scripts = [
+      "./../_common/env.sh",
+      "./scripts/update.sh",
+      "./../_common/sshd.sh",
+      "./scripts/networking.sh",
+      "./scripts/sudoers.sh",
+      "./scripts/systemd.sh",
+      "./scripts/build.raspiblitz.sh",
+      "./scripts/cleanup.sh"
+    ]
+  }
+}
+
+packer {
+  required_version = ">= 1.7.0, < 2.0.0"
+
+  required_plugins {
+    qemu = {
+      source  = "github.com/hashicorp/qemu"
+      version = ">= 1.0.0, < 2.0.0"
+    }
+  }
+}

ci/amd64/debian/http/preseed.cfg

@@ -0,0 +1,72 @@
+# https://github.com/chef/bento/blob/main/packer_templates/http/debian/preseed.cfg
+# https://www.debian.org/releases/stable/example-preseed.txt
+# https://github.com/tylert/packer-build/blob/master/source/debian/12_bookworm/base-uefi.preseed
+# variables: https://github.com/tylert/packer-build/blob/master/source/debian/12_bookworm/base-uefi.pkr.hcl
+
+# Locale Setup
+d-i debian-installer/language string en
+d-i debian-installer/country string US
+d-i debian-installer/locale string en_US.UTF-8
+# d-i localechooser/supported-locales multiselect en_CA.UTF-8 fr_CA.UTF-8 zh_CN.UTF-8
+# d-i pkgsel/install-language-support boolean true
+
+# Keyboard Setup
+d-i keyboard-configuration/xkb-keymap select us
+
+# Clock Setup
+# d-i time/zone string Canada/Eastern
+d-i time/zone string UTC
+d-i clock-setup/utc boolean true
+# set above to false if making a bootable USB to run on same system as Windows
+
+# Network Setup
+d-i netcfg/get_hostname string raspiblitz-amd64
+d-i netcfg/get_domain string
+# https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/713385
+d-i netcfg/choose_interface select auto
+# make sure you also add "interface=auto" to your boot command too
+# https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/713385
+
+# User Setup
+d-i passwd/root-login boolean false
+d-i passwd/root-password-again password raspiblitz
+d-i passwd/root-password password raspiblitz
+d-i passwd/user-fullname string pi
+d-i passwd/user-uid string 1000
+d-i passwd/user-password password raspiblitz
+d-i passwd/user-password-again password raspiblitz
+d-i passwd/username string pi
+
+# Package Setup
+d-i hw-detect/load_firmware boolean false
+d-i hw-detect/load_media boolean false
+apt-cdrom-setup apt-setup/cdrom/set-first boolean false
+d-i mirror/country string manual
+d-i mirror/http/hostname string httpredir.debian.org
+d-i mirror/http/directory string /debian
+d-i mirror/http/proxy string
+d-i apt-setup/contrib boolean true
+d-i apt-setup/non-free boolean true
+
+tasksel tasksel/first multiselect ssh-server, standard
+d-i pkgsel/include string sudo bzip2 acpid cryptsetup zlib1g-dev wget curl dkms fuse make nfs-common net-tools cifs-utils rsync
+d-i pkgsel/install-language-support boolean false
+d-i pkgsel/update-policy select none
+d-i pkgsel/upgrade select full-upgrade
+
+popularity-contest popularity-contest/participate boolean false
+
+# Drive setup
+d-i partman-auto-lvm/guided_size string max
+d-i partman-auto/choose_recipe select atomic
+d-i partman-auto/method string lvm
+d-i partman-lvm/confirm boolean true
+d-i partman-lvm/confirm_nooverwrite boolean true
+d-i partman-lvm/device_remove_lvm boolean true
+d-i partman/choose_partition select finish
+d-i partman/confirm boolean true
+d-i partman/confirm_nooverwrite boolean true
+d-i partman/confirm_write_new_label boolean true
+
+# Final Setup
+d-i finish-install/reboot_in_progress note

ci/amd64/debian/scripts/build.raspiblitz.sh

@@ -0,0 +1,19 @@
+#!/bin/sh -eux
+
+echo 'Download the build_sdcard.sh script ...'
+wget https://raw.githubusercontent.com/${github_user}/raspiblitz/${branch}/build_sdcard.sh
+
+if [ ${pack} = "fatpack" ]; then
+  fatpack="1"
+else
+  fatpack="0"
+fi
+
+if [ "${desktop}" = "gnome" ]; then
+  echo 'Add Gnome desktop'
+  export DEBIAN_FRONTEND=none
+  sudo apt install gnome -y
+fi
+
+echo 'Build RaspiBlitz ...'
+bash build_sdcard.sh -f ${fatpack} -u ${github_user} -b ${branch} -d headless -t false -w off -i false

ci/amd64/debian/scripts/cleanup.sh

@@ -0,0 +1,55 @@
+#!/bin/sh -eux
+
+echo "remove linux-headers"
+dpkg --list \
+  | awk '{ print $2 }' \
+  | grep 'linux-headers' \
+  | xargs apt-get -y purge;
+
+echo "remove specific Linux kernels, such as linux-image-4.9.0-13-amd64 but keeps the current kernel and does not touch the virtual packages"
+dpkg --list \
+    | awk '{ print $2 }' \
+    | grep 'linux-image-[234].*' \
+    | grep -v `uname -r` \
+    | xargs apt-get -y purge;
+
+echo "remove linux-source package"
+dpkg --list \
+    | awk '{ print $2 }' \
+    | grep linux-source \
+    | xargs apt-get -y purge;
+
+echo "remove obsolete networking packages"
+apt-get -y purge ppp pppconfig pppoeconf;
+
+echo "remove popularity-contest package"
+apt-get -y purge popularity-contest;
+
+echo "remove installation-report package"
+apt-get -y purge installation-report;
+
+echo "autoremoving packages and cleaning apt data"
+apt-get -y autoremove;
+apt-get -y clean;
+
+echo "remove /var/cache"
+find /var/cache -type f -exec rm -rf {} \;
+
+echo "truncate any logs that have built up during the install"
+find /var/log -type f -exec truncate --size=0 {} \;
+
+echo "blank netplan machine-id (DUID) so machines get unique ID generated on boot"
+truncate -s 0 /etc/machine-id
+
+echo "remove the contents of /tmp and /var/tmp"
+rm -rf /tmp/* /var/tmp/*
+
+echo "force a new random seed to be generated"
+rm -f /var/lib/systemd/random-seed
+
+echo "delete the SSH keys (will be recreated on the first boot)"
+rm -f /etc/ssh/ssh_host_*
+
+echo "clear the history so our install isn't there"
+rm -f /root/.wget-hsts
+export HISTSIZE=0

ci/amd64/debian/scripts/networking.sh

@@ -0,0 +1,14 @@
+#!/bin/sh -eux
+
+# Disable Predictable Network Interface names and use eth0
+sed -i 's/en[[:alnum:]]*/eth0/g' /etc/network/interfaces
+sed -i 's/GRUB_CMDLINE_LINUX="\(.*\)"/GRUB_CMDLINE_LINUX="net.ifnames=0 biosdevname=0 \1"/g' /etc/default/grub
+update-grub
+
+# Adding a 2 sec delay to the interface up, to make the dhclient happy
+echo "pre-up sleep 2" >>/etc/network/interfaces
+
+# needed for resolvconf installed in build_sdcard.sh
+apt-get install resolvconf -y
+echo 'nameserver 1.1.1.1' >/etc/resolv.conf
+echo 'nameserver 8.8.8.8' >>/etc/resolv.conf

ci/amd64/debian/scripts/sudoers.sh

@@ -0,0 +1,9 @@
+#!/bin/sh -eux
+
+# Only add the secure path line if it is not already present
+grep -q 'secure_path' /etc/sudoers \
+  || sed -i -e '/Defaults\s\+env_reset/a Defaults\tsecure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"' /etc/sudoers;
+
+# Set up password-less sudo for the pi user
+echo 'pi ALL=(ALL) NOPASSWD:ALL' >/etc/sudoers.d/99_pi;
+chmod 440 /etc/sudoers.d/99_pi;

ci/amd64/debian/scripts/systemd.sh

@@ -0,0 +1,4 @@
+#!/bin/sh -eux
+
+# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751636
+apt-get install libpam-systemd

ci/amd64/debian/scripts/update.sh

@@ -0,0 +1,19 @@
+#!/bin/sh -eux
+
+arch="$(uname -r | sed 's/^.*[0-9]\{1,\}\.[0-9]\{1,\}\.[0-9]\{1,\}\(-[0-9]\{1,2\}\)-//')"
+debian_version="$(lsb_release -r | awk '{print $2}')"
+major_version="$(echo $debian_version | awk -F. '{print $1}')"
+
+# Disable systemd apt timers/services
+systemctl stop apt-daily.timer
+systemctl stop apt-daily-upgrade.timer
+systemctl disable apt-daily.timer
+systemctl disable apt-daily-upgrade.timer
+systemctl mask apt-daily.service
+systemctl mask apt-daily-upgrade.service
+systemctl daemon-reload
+
+## leave update and upgrade to the build_sdcard.sh
+#apt-get update
+#apt-get -y upgrade linux-image-$arch
+#apt-get -y install linux-headers-$(uname -r)

ci/amd64/packer.build.amd64-debian.sh

@@ -0,0 +1,33 @@
+#!/bin/bash -e
+
+sudo apt-get update
+
+# install packer
+if ! packer version 2>/dev/null; then
+  curl -fsSL https://apt.releases.hashicorp.com/gpg | sudo apt-key add -
+  sudo apt-add-repository -y "deb [arch=amd64] https://apt.releases.hashicorp.com $(lsb_release -cs) main"
+  sudo apt-get update
+  echo -e "\nInstalling packer..."
+  sudo apt-get install -y packer
+else
+  echo "# Packer is installed"
+fi
+
+# install qemu
+echo "# Install qemu ..."
+sudo apt-get update
+sudo apt-get install -y qemu-system
+
+# set vars
+echo "# Setting the variables: $*"
+source ../set_variables.sh
+set_variables "$@"
+
+# Build the image
+echo "# Build the image ..."
+cd debian
+packer init -upgrade .
+command="PACKER_LOG=1 packer build ${vars} -only=qemu packer.build.amd64-debian.hcl"
+echo "# Running: $command"
+if [ ${#vars} -eq 0 ];then exit 1;fi
+PACKER_LOG=1 packer build ${vars} -only=qemu.debian build.amd64-debian.pkr.hcl || exit 1

ci/arm64-rpi/build.arm64-rpi.pkr.hcl

@@ -0,0 +1,78 @@
+variable "pack" { default = "lean" }
+variable "github_user" { default = "raspiblitz" }
+variable "branch" { default = "dev" }
+variable "image_link" { default = "https://downloads.raspberrypi.org/raspios_arm64/images/raspios_arm64-2024-03-15/2024-03-15-raspios-bookworm-arm64.img.xz" }
+variable "image_checksum" { default = "7e53a46aab92051d523d7283c080532bebb52ce86758629bf1951be9b4b0560f" }
+variable "image_size" { default = "20G" }
+
+source "arm" "raspiblitz-arm64-rpi" {
+  file_checksum_type    = "sha256"
+  file_checksum         = var.image_checksum
+  file_target_extension = "xz"
+  file_unarchive_cmd    = ["xz", "--decompress", "$ARCHIVE_PATH"]
+  file_urls             = [var.image_link]
+  image_build_method    = "resize"
+  image_chroot_env      = ["PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin"]
+  image_partitions {
+    filesystem   = "vfat"
+    mountpoint   = "/boot"
+    name         = "boot"
+    size         = "256M"
+    start_sector = "8192"
+    type         = "c"
+  }
+  image_partitions {
+    filesystem   = "ext4"
+    mountpoint   = "/"
+    name         = "root"
+    size         = "0"
+    start_sector = "532480"
+    type         = "83"
+  }
+  image_path                   = "raspiblitz-arm64-rpi-${var.pack}.img"
+  image_size                   = var.image_size
+  image_type                   = "dos"
+  qemu_binary_destination_path = "/usr/bin/qemu-arm-static"
+  qemu_binary_source_path      = "/usr/bin/qemu-arm-static"
+}
+
+build {
+  sources = ["source.arm.raspiblitz-arm64-rpi"]
+
+  provisioner "shell" {
+    inline = [
+      "echo 'nameserver 1.1.1.1' > /etc/resolv.conf",
+      "echo 'nameserver 8.8.8.8' >> /etc/resolv.conf",
+      "echo 'debconf debconf/frontend select Noninteractive' | debconf-set-selections",
+      "apt-get update",
+      "apt-get install -y sudo wget",
+      "apt-get -y autoremove",
+      "apt-get -y clean",
+      "touch /boot/ssh",
+      "echo 'pi:$6$TE7HmruYY9EaNiKP$Vz0inJ6gaoJgJvQrC5z/HMDRMTN2jKhiEnG83tc1Jsw7lli5MYdeA83g3NOVCsBaTVW4mUBiT/1ZRWYdofVQX0' > /boot/userconf"
+    ]
+  }
+
+  provisioner "shell" {
+    environment_vars = [
+      "github_user=${var.github_user}",
+      "branch=${var.branch}",
+      "pack=${var.pack}"
+    ]
+    script = "./build.raspiblitz.sh"
+  }
+
+  provisioner "shell" {
+    inline = [
+      "echo '# delete the SSH keys (will be recreated on the first boot)'",
+      "rm -f /etc/ssh/ssh_host_*",
+      "echo 'OK'",
+    ]
+  }
+
+  provisioner "shell" {
+    inline = [
+      "if [ \"${var.pack}\" = \"base\" ]; then echo 'Adding stop file to /boot/'; touch /boot/stop; fi"
+    ]
+  }
+}

ci/arm64-rpi/build.raspiblitz.sh

@@ -0,0 +1,18 @@
+#!/bin/sh -eux
+
+echo 'Download the build_sdcard.sh script ...'
+wget https://raw.githubusercontent.com/${github_user}/raspiblitz/${branch}/build_sdcard.sh
+
+if [ "${pack}" = "fatpack" ]; then
+  fatpack="1"
+  display="lcd"
+else
+  fatpack="0"
+  display="headless"
+fi
+
+# make /dev/shm world writable for qemu
+sudo chmod 777 /dev/shm
+
+echo 'Build RaspiBlitz ...'
+bash build_sdcard.sh -f ${fatpack} -u ${github_user} -b ${branch} -t false -w off -i false -d ${display}

ci/arm64-rpi/packer.build.arm64-rpi.local.sh

@@ -0,0 +1,72 @@
+#!/bin/bash -e
+
+echo -e "\n# Install dependencies with apt"
+if [ "$(uname -n)" = "ubuntu" ]; then
+  sudo add-apt-repository -y universe
+fi
+
+# Install dependencies
+# needed on Ubuntu Live ('lsb_release -cs': jammy)
+sudo apt install -y qemu-user-static || exit 1
+
+# from https://github.com/mkaczanowski/packer-builder-arm/blob/master/docker/Dockerfile
+sudo apt install -y \
+  wget \
+  curl \
+  ca-certificates \
+  dosfstools \
+  fdisk \
+  gdisk \
+  kpartx \
+  libarchive-tools \
+  parted \
+  psmisc \
+  qemu-utils \
+  sudo \
+  xz-utils || exit 1
+
+echo -e "\n# Install Packer..."
+if ! packer version 2>/dev/null; then
+  curl -fsSL https://apt.releases.hashicorp.com/gpg | sudo apt-key add -
+  sudo apt-add-repository -y "deb [arch=amd64] https://apt.releases.hashicorp.com $(lsb_release -cs) main"
+  sudo apt-get update -y && sudo apt-get install packer -y || exit 1
+else
+  echo "# Packer is installed"
+fi
+
+echo -e "\n# Install Go"
+export PATH=$PATH:/usr/local/go/bin
+# https://go.dev/dl/
+GOVERSION="1.20.6"
+GOHASH="b945ae2bb5db01a0fb4786afde64e6fbab50b67f6fa0eb6cfa4924f16a7ff1eb"
+if ! go version 2>/dev/null | grep "${GOVERSION}"; then
+  wget --progress=bar:force https://go.dev/dl/go${GOVERSION}.linux-amd64.tar.gz
+  echo "${GOHASH} go${GOVERSION}.linux-amd64.tar.gz" | sha256sum -c - || exit 1
+  sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go${GOVERSION}.linux-amd64.tar.gz
+  sudo rm -rf go${GOVERSION}.linux-amd64.tar.gz
+else
+  echo "# Go ${GOVERSION} is installed"
+fi
+
+echo -e "\n# Download the packer-builder-arm plugin"
+git clone https://github.com/mkaczanowski/packer-builder-arm
+cd packer-builder-arm
+# https://github.com/mkaczanowski/packer-builder-arm/releases
+git reset --hard "v1.0.7"
+echo -e "\n# Build the packer-builder-arm plugin"
+go mod download
+go build || exit 1
+
+# set vars
+echo "# Setting the variables: $*"
+# running from the ci/arm64-rpi/packer-builder-arm directory
+source ../../set_variables.sh
+set_variables "$@"
+
+cp ../build.arm64-rpi.pkr.hcl ./
+cp ../build.raspiblitz.sh ./
+
+echo -e "\n# Build the image"
+command="packer build ${vars} build.arm64-rpi.pkr.hcl"
+echo "# Running: $command"
+$command || exit 1

ci/arm64-rpi/packer.build.arm64-rpi.sh

@@ -0,0 +1,15 @@
+#!/bin/bash -e
+
+# set vars
+echo "# Setting the variables: $*"
+source ../set_variables.sh
+set_variables "$@"
+
+# build the image in docker
+echo -e "\nBuild the image..."
+# from https://hub.docker.com/r/mkaczanowski/packer-builder-arm/tags
+command="docker run --rm --privileged -v /dev:/dev -v ${PWD}:/build \
+  mkaczanowski/packer-builder-arm@sha256:0ff8ce0cf33e37be6c351c8bcb2643835c7f3525b7f591808b91c04238d45695 \
+  build ${vars} build.arm64-rpi.pkr.hcl"
+echo "# Running: $command"
+$command || exit 1

ci/packer.sh

@@ -0,0 +1,300 @@
+#!/usr/bin/env bash
+
+#########################################################################
+# script to trigger packer image build on a debian LIVE system
+# see FAQ.dev.md for instructions
+##########################################################################
+
+# YOUR REPO (REPLACE WITH YOUR OWN FORK IF NEEDED)
+REPO="https://github.com/raspiblitz/raspiblitz"
+
+# folders to store the build results
+BUILDFOLDER="images"
+
+# check if started with sudo
+if [ "$EUID" -ne 0 ]; then
+  echo "error='run as root / may use sudo'"
+  exit 1
+fi
+
+# usage info
+echo "packer.sh [BRANCH] [arm|x86] [min|fat] [?lastcommithash]"
+echo "Build RaspiBlitz install images on a Debian LIVE system"
+echo "From repo (change in script is needed):"
+echo $REPO
+echo "Results will be stored in:"
+echo $BUILDFOLDER
+echo "Start this script in the root of an writable 128GB NTFS formatted USB drive."
+
+# check if internet is available
+if ping -c 1 "1.1.1.1" &> /dev/null; then
+  echo "# checking internet"
+else
+  echo "error='script needs internet connection to run'"
+  exit 1
+fi
+
+# get parameters
+if [ $# -eq 0 ] || [ "$1" = "-h" ] || [ "$1" = "-help" ]; then
+
+  # by input
+  read -p "Press ENTER to continue or CTRL+C to exit"
+  read -p "Enter the branch to build: " BRANCH
+  read -p "Enter the architecture to build (arm|x86): " ARCH
+  read -p "Enter the type to build (min|fat): " TYPE
+  read -p "Enter the last commit hash to check (optional): " COMMITHASH
+
+else
+
+  # by command line
+  BRANCH=$1
+  ARCH=$2
+  TYPE=$3
+  COMMITHASH=$4
+  
+fi
+
+# check if branch is set
+if [ ${#BRANCH} -eq 0 ]; then
+  echo "error='branch not set'"
+  exit 1
+fi
+
+# check if arch is set
+if [ ${#ARCH} -eq 0 ]; then
+  echo "error='ARCH not set'"
+  exit 1
+fi
+if [ "$ARCH" != "arm" ] && [ "$ARCH" != "x86" ]; then
+  echo "error='ARCH not supported'"
+  exit 1
+fi
+
+# check if type is set
+if [ ${#TYPE} -eq 0 ]; then
+  echo "error='TYPE not set'"
+  exit 1
+fi
+if [ "$TYPE" != "min" ] && [ "$TYPE" != "fat" ]; then
+  echo "error='TYPE not supported'"
+  exit 1
+fi
+
+# install git and make
+apt update && apt install -y git make
+
+# clean old repo
+rm -rf raspiblitz 2>/dev/null
+
+# download the repo
+git clone $REPO
+if [ $? -gt 0 ]; then
+  echo "# REPO: ${REPO}"
+  echo "error='git clone failed'"
+  exit 1
+fi
+
+cd raspiblitz
+
+# checkout the desired branch
+git checkout $BRANCH
+if [ $? -gt 0 ]; then
+  cd ..
+  rm -rf raspiblitz 2>/dev/null
+  echo "# BRANCH: ${BRANCH}"
+  echo "error='git checkout BRANCH failed'"
+  exit 1
+fi
+
+# check commit hash if set
+if [ ${#COMMITHASH} -gt 0 ]; then
+  echo "# CHECKING COMMITHASH"
+  actualCOMMITHASH=$(git log -1 --format=%H)
+  echo "# actual(${actualCOMMITHASH}) ?= wanted(${COMMITHASH})"
+  matches=$(echo "${actualCOMMITHASH}" | grep -c "${COMMITHASH}")
+  if [ ${matches} -eq 0 ]; then
+    cd ..
+    rm -rf raspiblitz 2>/dev/null
+    echo "error='COMMITHASH of branch does not match'"
+    exit 1
+  fi
+  echo "# COMMITHASH CHECK OK"
+else
+  echo "# NO COMMITHASH CHECK"
+fi
+
+# make sure make build runs thru
+safedir=$(realpath ./ci/arm64-rpi/packer-builder-arm)
+echo "# Setting safe.directory to: ${safedir}"
+git config --global --add safe.directory "${safedir}"
+
+# get code version
+codeVersion=$(cat ./home.admin/_version.info | grep 'codeVersion="' | cut -d'"' -f2)
+if [ ${#codeVersion} -eq 0 ]; then
+  echo "error='codeVersion not found'"
+  exit 1
+fi
+echo "# RaspiBlitz Version: ${codeVersion}"
+
+# get date as string formatted like YEAR-MONTH-DAY
+dateString=$(date +%Y-%m-%d)
+echo "# Date: ${dateString}"
+
+if [ "${ARCH}" == "arm" ] && [ "${TYPE}" == "min" ]; then
+  PACKERTARGET="arm64-rpi-lean-image"
+  PACKERBUILDPATH="./raspiblitz/ci/arm64-rpi/packer-builder-arm/raspiblitz-arm64-rpi-lean.img"
+  PACKERFINALFILE="raspiblitz-min-v${codeVersion}-${dateString}.img"
+elif [ "${ARCH}" == "arm" ] && [ "${TYPE}" == "fat" ]; then
+  PACKERTARGET="arm64-rpi-fatpack-image" 
+  PACKERBUILDPATH="./raspiblitz/ci/arm64-rpi/packer-builder-arm/TODO" #TODO
+  PACKERFINALFILE="raspiblitz-fat-v${codeVersion}-${dateString}.img"
+elif [ "${ARCH}" == "x86" ] && [ "${TYPE}" == "min" ]; then
+  PACKERTARGET="amd64-lean-server-legacyboot-image"
+  PACKERBUILDPATH="./raspiblitz/ci/amd64/builds/raspiblitz-amd64-debian-lean-qemu/raspiblitz-amd64-debian-lean.qcow2"
+  PACKERFINALFILE="raspiblitz-amd64-min-v${codeVersion}-${dateString}.qcow2"
+else
+  echo "error='$ARCH-$TYPE not supported'"
+  exit 1
+fi
+
+echo "# PACKER TARGET: ${PACKERTARGET}"
+echo "# PACKER BUILD PATH: ${PACKERBUILDPATH}"
+echo "# PACKER FINAL FILE: ${PACKERFINALFILE}"
+
+# check if file already exists
+if [ -f "./${BUILDFOLDER}/${PACKERFINALFILE}.img.gz" ]; then
+  echo "error='image already exists'"
+  echo "# delete ./${BUILDFOLDER}/${PACKERFINALFILE}.img.gz (and all .sha256 & .sig) before trying again"
+  exit 1
+fi
+
+# prevent monitor to go to sleep during long non-interactive build
+xset s off
+gsettings set org.gnome.desktop.screensaver idle-activation-enabled false
+
+echo "# BUILDING '${PACKERTARGET}' ###########################################"
+make $PACKERTARGET
+
+# check if build was successful
+if [ $? -gt 0 ]; then
+  echo "# BUILDING FAILED ###########################################"
+  echo "# Check the output above for errors."
+  exit 1
+fi
+
+echo "# BUILDING SUCCESS ###########################################"
+
+echo "# moving build to timestamped folder ./${BUILDFOLDER}"
+cd ..
+mkdir "${BUILDFOLDER}" 2>/dev/null
+
+#check that Build folder exists
+if [ ! -d "./${BUILDFOLDER}" ]; then
+  echo "# FAILED CREATING BUILD FOLDER: ./${BUILDFOLDER}"
+  exit 1
+fi
+
+# move .gz file to build folder
+mv "${PACKERBUILDPATH}.gz" "./${BUILDFOLDER}/${PACKERFINALFILE}.gz"
+if [ $? -gt 0 ]; then
+  echo "# FAILED MOVING .gz"
+  exit 1
+fi
+
+# move gz.sha256 file to build folder
+mv "${PACKERBUILDPATH}.gz.sha256" "./${BUILDFOLDER}/${PACKERFINALFILE}.gz.sha256"
+if [ $? -gt 0 ]; then
+  echo "# FAILED MOVING .gz.sha256"
+  exit 1
+fi
+
+# move sha256 file to build folder
+mv "${PACKERBUILDPATH}.sha256" "./${BUILDFOLDER}/${PACKERFINALFILE}.sha256"
+if [ $? -gt 0 ]; then
+  echo "# FAILED MOVING .sha256"
+  exit 1
+fi
+
+# special handling for qcow2
+if [ "${ARCH}" == "x86" ]; then
+  echo "# decompressing qcow2"
+  gunzip "./${BUILDFOLDER}/${PACKERFINALFILE}.gz"
+  echo "# converting qcow2 to raw"
+  qemu-img convert -f qcow2 -O raw "./${BUILDFOLDER}/${PACKERFINALFILE}.qcow2" "./${BUILDFOLDER}/${PACKERFINALFILE}.img"
+  if [ $? -gt 0 ]; then
+    echo "# FAILED CONVERTING qcow2 to raw"
+    exit 1
+  fi
+  echo "# compressing raw"
+  gzip -9 "./${BUILDFOLDER}/${PACKERFINALFILE}.img"
+  if [ $? -gt 0 ]; then
+    echo "# FAILED COMPRESSING raw"
+    exit 1
+  fi
+  echo "# removing raw"
+  rm "./${BUILDFOLDER}/${PACKERFINALFILE}.img"
+  if [ $? -gt 0 ]; then
+    echo "# FAILED REMOVING raw"
+    exit 1
+  fi
+fi
+
+
+echo "# clean up"
+rm -rf ./../raspiblitz 2>/dev/null
+
+echo "# SIGN & SECURE IMAGE ###########################################"
+echo
+
+# security check that internet is cut
+echo "# MANUAL ACTION NEEDED:"
+echo "# Cut the connection to the internet before signing the image."
+echo
+echo "# Press RETURN to continue..."
+read -r -p "" key
+if ping -c 1 "1.1.1.1" &> /dev/null; then
+    echo "# FAIL - Internet connection is up - EXITING SCRIPT"
+    exit 1
+else
+    echo "# OK - Internet connection is cut"
+fi
+echo
+
+# Note down the SHA256 checksum of the image
+echo "# MANUAL ACTION NEEDED:"
+echo "# Note down the SHA256 checksum of the image:"
+echo
+cat ./${BUILDFOLDER}/${PACKERFINALFILE}.gz.sha256
+echo 
+echo "# Press RETURN to continue..."
+read -r -p "" key
+
+# import the signer keys
+echo "# MANUAL ACTION NEEDED:"
+echo "# Keep this terminal open and the 128GB stick connected."
+echo "# Additionalley connect and unlock the USB device with the signer keys."
+echo "# Open in Filemanager and use right-click 'Open in Termonal' and run:"
+echo "# sudo gpg --import ./sub.key"
+echo "# Close that second terminal and remove USB device with signer keys."
+echo 
+echo "# Press RETURN to continue..."
+read -r -p "" key
+
+# signing instructions
+echo "# MANUAL ACTION NEEDED:"
+echo "# Please wait infront of the screen until the signing process is asks you for the password."
+echo
+cd "${BUILDFOLDER}"
+gpg --output ${PACKERFINALFILE}.gz.sig --detach-sign ${PACKERFINALFILE}.gz
+if [ $? -gt 0 ]; then
+  echo "# !!!!!!! SIGNING FAILED - redo manual before closing this terminbal !!!!!!!"
+  echo "gpg --output ${PACKERFINALFILE}.gz.sig --detach-sign ${PACKERFINALFILE}.gz"
+else
+  echo "# OK Signing successful."
+fi
+
+# last notes
+echo
+echo "Close this terminal and eject your 128GB usb device."
+echo "Have fun with your build image on it under:"
+echo "${BUILDFOLDER}/${PACKERFINALFILE}.gz"

ci/set_variables.sh

@@ -0,0 +1,75 @@
+#!/bin/bash
+
+function set_variables() {
+
+  declare -A params
+  while (("$#")); do
+    case "$1" in
+    --pack)
+      params[pack]="$2"
+      shift 2
+      ;;
+    --github_user)
+      params[github_user]="$2"
+      shift 2
+      ;;
+    --branch)
+      params[branch]="$2"
+      shift 2
+      ;;
+    # arm64-rpi
+    --image_link)
+      params[image_link]="$2"
+      shift 2
+      ;;
+    # arm64-rpi
+    --image_checksum)
+      params[image_checksum]="$2"
+      shift 2
+      ;;
+    # amd64
+    # preseed.cfg
+    --preseed_file)
+      params[preseed_file]="$2"
+      shift 2
+      ;;
+    # amd64
+    # uefi | bios
+    --boot)
+      params[boot]="$2"
+      shift 2
+      ;;
+    # amd64
+    # none | gnome
+    --desktop)
+      params[desktop]="$2"
+      shift 2
+      ;;
+    --image_size)
+      params[image_size]="$2"
+      shift 2
+      ;;
+    --)
+      shift
+      break
+      ;;
+    *)
+      echo "Error: Invalid argument"
+      exit 1
+      ;;
+    esac
+  done
+
+  # Reset the global vars string
+  vars=""
+  # Iterate over all keys in the params array
+  for key in "${!params[@]}"; do
+    # If the value for this key is not empty, add it to vars
+    if [ -n "${params[$key]}" ]; then
+      vars="$vars -var $key=${params[$key]}"
+    fi
+  done
+
+  export vars
+
+}

home.admin/00infoBlitz.sh

@@ -1,9 +1,58 @@
 #!/bin/bash
 
-# 00infoBlitz.sh <cl|lnd> <testnet|mainnet|signet>
+source <(/home/admin/_cache.sh get \
+  state \
+  setupPhase \
+  network \
+  chain \
+  lightning \
+  codeVersion \
+  hostname \
+  undervoltageReports \
+  hdd_used_info \
+  internet_localip \
+  internet_public_ip_clean \
+  internet_rx \
+  internet_tx \
+  system_ram_available_mb \
+  system_ram_mb \
+  system_ups_status \
+  system_ups_battery \
+  system_cpu_load \
+  system_up_text \
+  system_temp_celsius \
+  system_temp_fahrenheit \
+  runBehindTor \
+  ups \
+  ElectRS \
+  BTCRPCexplorer \
+  joinmarket \
+  blitzapi \
+)
 
-# load code software version
-source /home/admin/_version.info
+# PARAMETER 1: forcing view on a given network
+PARAMETER_CHAIN=$2
+if [ "${PARAMETER_CHAIN}" == "mainnet" ]; then
+  chain="main"
+fi
+if [ "${PARAMETER_CHAIN}" == "testnet" ]; then
+  chain="test"
+fi
+if [ "${PARAMETER_CHAIN}" == "signet" ]; then
+  chain="sig"
+fi
+
+# PARAMETER 2: forcing view on a lightning implementation
+PARAMETER_LIGHTNING=$1
+if [ "${PARAMETER_LIGHTNING}" == "lnd" ]; then
+  lightning="lnd"
+fi
+if [ "${PARAMETER_LIGHTNING}" == "cl" ]; then
+  lightning="cl"
+fi
+if [ "${PARAMETER_LIGHTNING}" == "none" ]; then
+  lightning=""
+fi
 
 # set colors
 color_red='\033[0;31m'
@@ -12,445 +61,259 @@ color_amber='\033[0;33m'
 color_yellow='\033[1;93m'
 color_gray='\033[0;37m'
 
-## get basic info
-source /home/admin/raspiblitz.info 2>/dev/null
-source /mnt/hdd/raspiblitz.conf 2>/dev/null
-
-source <(/home/admin/config.scripts/network.aliases.sh getvars $1 $2)
-
-## get HDD/SSD info
-source <(sudo /home/admin/config.scripts/blitz.datadrive.sh status)
-hdd="${hddUsedInfo}"
-
-## get internet info
-source <(sudo /home/admin/config.scripts/internet.sh status)
-cleanip=$(echo "${publicIP}" | tr -d '[]')
+# generate netprefix
+netprefix=${chain:0:1}
+if [ "${netprefix}" == "m" ]; then
+  netprefix=""
+fi
 
 ## get UPS info
-source <(/home/admin/config.scripts/blitz.ups.sh status)
 upsInfo=""
-if [ "${upsStatus}" = "ONLINE" ]; then
-  upsInfo="${color_gray}${upsBattery}"
+if [ "${system_ups_status}" = "ONLINE" ]; then
+  upsInfo="${color_gray}${system_ups_battery}"
 fi
-if [ "${upsStatus}" = "ONBATT" ]; then
-  upsInfo="${color_red}${upsBattery}"
+if [ "${system_ups_status}" = "ONBATT" ]; then
+  upsInfo="${color_red}${system_ups_battery}"
 fi
-if [ "${upsStatus}" = "SHUTTING DOWN" ]; then
+if [ "${system_ups_status}" = "SHUTTING DOWN" ]; then
   upsInfo="${color_red}DOWN"
 fi
 
 # check hostname
 if [ ${#hostname} -eq 0 ]; then hostname="raspiblitz"; fi
 
-# for oldnodes
-if [ ${#network} -eq 0 ]; then
-  network="bitcoin"
-  litecoinActive=$(sudo ls /mnt/hdd/litecoin/litecoin.conf 2>/dev/null | grep -c 'litecoin.conf')
-  if [ ${litecoinActive} -eq 1 ]; then
-    network="litecoin"
-  else
-    network=$(sudo cat /home/admin/.network 2>/dev/null)
-  fi
-  if [ ${#network} -eq 0 ]; then
-    network="bitcoin"
-  fi
-fi
-
 # for oldnodes
 if [ ${#chain} -eq 0 ]; then
-  chain="test"
-  isMainChain=$(sudo cat /mnt/hdd/${network}/${network}.conf 2>/dev/null | grep "#testnet=1" -c)
-  if [ ${isMainChain} -gt 0 ];then
-    chain="main"
-  fi
+  network="bitcoin"
+  chain="main"
 fi
 
-# set datadir
-lnd_dir="/home/bitcoin/.lnd"
-lnd_macaroon_dir="/home/bitcoin/.lnd/data/chain/${network}/${chain}net"
-
-# get uptime & load
-load=$(w | head -n 1 | cut -d 'v' -f2 | cut -d ':' -f2)
-
-# get CPU temp - no measurement in a VM
-cpu=0
-if [ -d "/sys/class/thermal/thermal_zone0/" ]; then
-  cpu=$(cat /sys/class/thermal/thermal_zone0/temp)
-fi
-if [ $cpu = 0 ];then
-  tempC=""
-  tempF=""
-else
-  tempC=$((cpu/1000))
-  tempF=$(((tempC * 18 + 325) / 10))
-fi
-# get memory
-ram_avail=$(free -m | grep Mem | awk '{ print $7 }')
-ram=$(printf "%sM / %sM" "${ram_avail}" "$(free -m | grep Mem | awk '{ print $2 }')")
-
-if [ ${ram_avail} -lt 50 ]; then
+# ram info string
+ram=$(printf "%sM / %sM" "${system_ram_available_mb}" "${system_ram_mb}")
+if [ "${system_ram_available_mb}" != "" ] && [ ${system_ram_available_mb} -lt 50 ]; then
   color_ram="${color_red}\e[7m"
 else
   color_ram=${color_green}
 fi
 
-# Bitcoin blockchain
-btc_path=$(command -v ${network}-cli)
-blockInfo="-"
-if [ -n "${btc_path}" ]; then
-  btc_title=$network
-  blockchaininfo="$($bitcoincli_alias getblockchaininfo 2>/dev/null)"
-  if [ ${#blockchaininfo} -gt 0 ]; then
-    btc_title="${btc_title} (${chain}net)"
-
-    # get sync status
-    headers="$(echo "${blockchaininfo}" | jq -r '.headers')"
-    block_verified="$(echo "${blockchaininfo}" | jq -r '.blocks')"
-    block_diff=$(expr ${headers} - ${block_verified})
-    blockInfo="${block_verified}/${headers}"
-
-    progress="$(echo "${blockchaininfo}" | jq -r '.verificationprogress')"
-    sync_percentage=$(echo $progress | awk '{printf( "%.2f%%", 100 * $1)}')
-
-    if [ ${block_diff} -eq 0 ]; then    # fully synced
-      sync="OK"
-      sync_color="${color_green}"
-      sync_behind=" "
-    elif [ ${block_diff} -eq 1 ]; then   # fully synced
-      sync="OK"
-      sync_color="${color_green}"
-      sync_behind="-1 block"
-    elif [ ${block_diff} -le 10 ]; then   # <= 2 blocks behind
-      sync=""
-      sync_color="${color_red}"
-      sync_behind="-${block_diff} blocks"
-    else
-      sync=""
-      sync_color="${color_red}"
-      sync_behind="${sync_percentage}"
-    fi
-
-    # get last known block
-    if [ ! -z "${last_block}" ]; then
-      btc_line2="${btc_line2} ${color_gray}(block ${last_block})"
-    fi
-
-    # get mem pool transactions
-    mempool="$($bitcoincli_alias getmempoolinfo 2>/dev/null | jq -r '.size')"
-
-  else
-    btc_line2="${color_red}NOT RUNNING\t\t"
-  fi
-fi
-
-# get IP address & port
-networkInfo=$($bitcoincli_alias getnetworkinfo 2>/dev/null)
-local_ip="${localip}" # from internet.sh
-public_ip="${cleanip}"
-public_port="$(echo ${networkInfo} | jq -r '.localaddresses [0] .port')"
-if [ "${public_port}" = "null" ]; then
-  if [ "${chain}" = "test" ]; then
-    public_port="18333"
-  else
-    public_port="8333"
-  fi
-fi
-
-# check if RTL web interface is installed
-webinterfaceInfo=""
-runningRTL=$(systemctl status ${netprefix}${typeprefix}RTL.service 2>/dev/null | grep -c active)
-if [ ${runningRTL} -eq 1 ]; then
-  if [ "${lightning}" == "cl" ]; then
-    RTLHTTP=${portprefix}7000
-  elif [ "${lightning}" == "lnd" ];then
-    RTLHTTP=${portprefix}3000
-  fi
-  webinterfaceInfo="Web admin --> ${color_green}http://${local_ip}:${RTLHTTP}"
-fi
-
-# CHAIN NETWORK
-public_addr_pre="Public "
-public_addr="??"
+# Tor info string
 torInfo=""
-# Version
-networkVersion=$($bitcoincli_alias -version 2>/dev/null | cut -d ' ' -f6)
-# TOR or IP
-networkConnections=$(echo ${networkInfo} | jq -r '.connections')
-networkConnectionsInfo="${color_green}${networkConnections} ${color_gray}connections"
-
 if [ "${runBehindTor}" = "on" ]; then
-
-  # TOR address
-  onionAddress=$(echo ${networkInfo} | jq -r '.localaddresses [0] .address')
-  networkConnectionsInfo="${color_green}${networkConnections} ${color_gray}peers"
-  public_addr="${onionAddress}:${public_port}"
-  public=""
-  public_color="${color_green}"
   torInfo="+ Tor"
+fi
 
+#######################
+# BITCOIN INFO
+
+# get block data - use meta on cache to call dynamic variable name
+source <(/home/admin/_cache.sh meta btc_${chain}net_blocks_headers)
+btc_blocks_headers="${value}"
+source <(/home/admin/_cache.sh meta btc_${chain}net_blocks_verified)
+btc_blocks_verified="${value}"
+source <(/home/admin/_cache.sh meta btc_${chain}net_blocks_behind)
+btc_blocks_behind="${value}"
+source <(/home/admin/_cache.sh meta btc_${chain}net_sync_percentage)
+if [ "${value}" != "" ]; then
+  sync_percentage="${value}%"
+fi
+
+# construct blockinfo string
+if [ "${btc_blocks_behind}" == "" ]; then 
+  sync="WAIT"
+  sync_color="${color_yellow}"
+elif [ ${btc_blocks_behind} -lt 2 ]; then 
+  sync="OK"
+  sync_color="${color_green}"
 else
+  sync=""
+  sync_color="${color_red}"
+fi
+blockInfo="Blocks ${btc_blocks_verified}/${btc_blocks_headers} ${color_gray}Sync ${sync_color}${sync}"
+if [ "${btc_blocks_headers}" == "" ]; then
+  blockInfo="${color_red}Not Started | Not Ready Yet | No Data${color_gray}"
+fi
 
-  # IP address
-  networkConnectionsInfo="${color_green}${networkConnections} ${color_gray}connections"
-  public_addr="${publicIP}:${public_port}"
-  public_check=$(nc -z -w6 ${cleanip} ${public_port} 2>/dev/null; echo $?)
-  if [ $public_check = "0" ] || [ "${ipv6}" == "on" ] ; then
-    public=""
-    # only set yellow/normal because netcat can only say that the port is open - not that it points to this device for sure
-    public_color="${color_amber}"
-  else
-    public=""
-    public_color="${color_red}"
+# get address data - use meta on cache to call dynamic variable name
+source <(/home/admin/_cache.sh meta btc_${chain}net_version)
+networkVersion="${value} "
+source <(/home/admin/_cache.sh meta btc_${chain}net_peers)
+btc_peers=${value}
+if [ "${btc_peers}" == "" ]; then
+  networkConnectionsInfo=""
+elif [ ${btc_peers} -gt 0 ]; then
+  networkConnectionsInfo="${color_green}${btc_peers} ${color_gray}peers"
+else
+  networkConnectionsInfo="${color_red}${btc_peers} ${color_gray}peers"
+fi
+
+#######################
+# LIGHTNING INFO
+
+# default values
+ln_alias=${hostname}
+ln_baseInfo="-"
+ln_channelInfo="\n"
+ln_external="\n"
+ln_feeReport=""
+ln_peersInfo=""
+ln_version=""
+ln_publicColor="${color_green}"
+
+if [ "${lightning}" != "" ]; then
+
+  source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_version)
+  ln_version="${value}"
+
+  # get alias
+  source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_alias)
+  if [ "${value}" != "" ]; then
+    ln_alias="${value}"
   fi
 
-  # DynDomain
-  if [ ${#dynDomain} -gt 0 ]; then
+  # consider tor address green for public
+  # when not Tor use yellow because not sure if public
+  if [ "${runBehindTor}" != "on" ]; then
+    ln_publicColor="${color_yellow}"
+  fi
 
-    #check if dynamic domain resolves to correct IP
-    ipOfDynDNS=$(getent hosts ${dynDomain} | awk '{ print $1 }')
-    if [ "${ipOfDynDNS}:${public_port}" != "${public_addr}" ]; then
-      public_color="${color_red}"
+  # get the public address/URI
+  source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_address)
+  ln_external="${value}"
+
+  source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_peers)
+  if [ "${value}" != "" ]; then
+    ln_peersInfo="${color_green}${value} ${color_gray}peers"
+  fi
+
+  source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_ready)
+  ln_ready="${value}"
+  source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_sync_chain)
+  ln_sync="${value}"
+  source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_locked)
+  ln_locked="${value}"
+  source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_recovery_mode)
+  ln_recovery_mode="${value}"
+  source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_recovery_done)
+  ln_recovery_done="${value}"
+
+  # lightning is still starting
+  if [ "${ln_ready}" != "1" ]; then
+
+    ln_baseInfo="\n               ${color_red}Not Started | Not Ready Yet | No Data"
+    ln_peersInfo=""
+
+  # lightning is still syncing
+  elif [ "${ln_locked}" == "1" ]; then
+
+    ln_baseInfo="${color_amber}Wallet Locked"
+    ln_peersInfo=""
+
+  # lightning is still syncing
+  elif [ "${ln_recovery_mode}" == "1" ] && [ "${ln_recovery_done}" == "0" ]; then
+
+    ln_baseInfo="${color_amber}Rescanning transactions"
+    ln_peersInfo=""
+
+  # lightning is still syncing
+  elif [ "${ln_sync}" != "1" ]; then
+
+    source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_sync_progress)
+    ln_syncprogress="${value}"
+    ln_baseInfo="${color_amber}Scanning blocks: ${ln_syncprogress}"
+    ln_peersInfo=""
+
+  # OK lightning is ready - get more details
+  else
+
+    # create fee report
+    if [ "${lightning}" == "lnd" ]; then
+      source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_fees_daily)
+      ln_dailyfees="${value}"
+      source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_fees_weekly)
+      ln_weeklyfees="${value}"
+      source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_fees_month)
+      ln_monthlyfees="${value}"
+      ln_feeReport="Fee Report (D-W-M): ${color_green}${ln_dailyfees}-${ln_weeklyfees}-${ln_monthlyfees} ${color_gray}${netprefix}sat"
     else
-      public_color="${color_amber}"
+      source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_fees_total)
+      ln_totalfees="${value}"
+      ln_feeReport="Fee Report: ${color_green}${ln_totalfees} ${color_gray}${netprefix}msat"
     fi
 
-    # replace IP display with dynDN
-    public_addr_pre="DynDN "
-    public_addr="${dynDomain}"
-  fi
+    # on-chain wallet info
+    ln_pendingonchain=""
+    source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_wallet_onchain_pending)
+    ln_onchain_pending="${value}"
+    if [ "${ln_onchain_pending}" != "" ] && [ ${ln_onchain_pending} -gt 0 ]; then ln_pendingonchain=" (+${ln_onchain_pending})"; fi
+    source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_wallet_onchain_balance)
+    ln_walletbalance=$(printf "%'d" "${value}")
+    ln_baseInfo="${color_gray}Wallet ${ln_walletbalance} ${netprefix}sat ${ln_pendingonchain}"
 
-  if [ ${#public_addr} -gt 25 ]; then
-    # if a IPv6 address dont show peers to save space
-    networkConnectionsInfo=""
-  fi
+    # channel pending info
+    ln_channelbalance_pending=""
+    source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_wallet_channels_pending)
+    ln_channels_pending="${value}"
+    if [ "${ln_channels_pending}" != "" ] && [ ${ln_channels_pending} -gt 0 ]; then ln_channelbalance_pending=" (+${ln_channels_pending})"; fi
 
-  if [ ${#public_addr} -gt 35 ]; then
-    # if a LONG IPv6 address dont show "Public" in front to save space
-    public_addr_pre=""
+    # get channel infos
+    source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_wallet_channels_balance)
+    ln_channels_balance=$(printf "%'d" "${value}")
+    source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_channels_active)
+    ln_channels_online="${value}"
+    source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_channels_total)
+    ln_channels_total="${value}"
+
+    # construct channel info string
+    ln_channelInfo="${ln_channels_online}/${ln_channels_total} Channels ${ln_channels_balance} ${netprefix}sat${ln_channelbalance_pending}"
   fi
 
 fi
 
-# LIGHTNING NETWORK
-if [ "${lightning}" == "cl" ]; then
- ln_getInfo=$($lightningcli_alias getinfo 2>/dev/null)
- ln_baseInfo="-"
- ln_channelInfo="\n"
- ln_external="\n"
- ln_alias="$(sudo cat "${CLCONF}" | grep "^alias=*" | cut -f2 -d=)"
- if [ ${#ln_alias} -eq 0 ];then
-  ln_alias=$(echo "${ln_getInfo}" | grep '"alias":' | cut -d '"' -f4)
- fi
- if [ ${#ln_alias} -eq 0 ];then
-  ln_alias=${hostname}
- fi
- ln_publicColor=""
- ln_port=$(sudo cat "${CLCONF}" | grep "^bind-addr=*" | cut -f2 -d':')
- if [ ${#ln_port} -eq 0 ]; then
-   ln_port=$(echo "${ln_getInfo}" | grep '"port":' | cut -d: -f2 | tail -1 | bc)
- fi
- wallet_unlocked=0 #TODO
- if [ "$wallet_unlocked" -gt 0 ] ; then
-  ln_alias="Wallet Locked"
- else
-  pubkey=$(echo "${ln_getInfo}" | grep '"id":' | cut -d '"' -f4)
-  address=$(echo "${ln_getInfo}" | grep '.onion' | cut -d '"' -f4)
- if [ ${#address} -eq 0 ];then
-  address=$(echo "${ln_getInfo}" | grep '"ipv4"' -A 1 | tail -1 | cut -d '"' -f4)
- fi
-  ln_external="${pubkey}@${address}"
-  ln_tor=$(echo "${ln_external}" | grep -c ".onion")
-  if [ ${ln_tor} -eq 1 ]; then
-    ln_publicColor="${color_green}"
-  else
-    public_check=$(nc -z -w6 ${public_ip} ${ln_port} 2>/dev/null; echo $?)
-   if [ $public_check = "0" ] || [ "${ipv6}" == "on" ]; then
-     # only set yellow/normal because netcat can only say that the port is open - not that it points to this device for sure
-     ln_publicColor="${color_amber}"
-   else
-     ln_publicColor="${color_red}"
-   fi
-  fi
-  BLOCKHEIGHT=$(echo "$blockchaininfo"|grep blocks|awk '{print $2}'|cut -d, -f1)
-  CLHEIGHT=$(echo "${ln_getInfo}" | jq .blockheight)
-  if [ "$BLOCKHEIGHT" == "$CLHEIGHT" ];then
-    ln_sync=1
-  else
-    ln_sync=0
-  fi
-  ln_version=$($lightningcli_alias -V)
-  if [ ${ln_sync} -eq 0 ]; then
-     if [ ${#ln_getInfo} -eq 0 ]; then
-       ln_baseInfo="${color_red} Not Started | Not Ready Yet"
-     else
-       ln_baseInfo="
-               ${color_amber}Scanning blocks: ${CLHEIGHT}/${BLOCKHEIGHT}"
-     fi
-   else
-     ln_walletbalance=0
-     cl_listfunds=$($lightningcli_alias listfunds 2>/dev/null)
-     for i in $(echo "$cl_listfunds" \
-      |jq .outputs[]|jq 'select(.status=="confirmed")'|grep value|awk '{print $2}'|cut -d, -f1);do
-       ln_walletbalance=$((ln_walletbalance+i))
-     done
-     for i in $(echo "$cl_listfunds" \
-      |jq .outputs[]|jq 'select(.status=="unconfirmed")'|grep value|awk '{print $2}'|cut -d, -f1);do
-       ln_walletbalance_wait=$((ln_walletbalance_wait+i))
-     done
-     # ln_closedchannelbalance: "state": "ONCHAIN" funds in channels
-     for i in $(echo "$cl_listfunds" \
-      |jq .channels[]|jq 'select(.state=="ONCHAIN")'|grep channel_sat|awk '{print $2}'|cut -d, -f1);do
-       ln_closedchannelbalance=$((ln_closedchannelbalance+i))
-     done
-     # ln_pendingonchain: waiting onchain + waiting closed channel funds
-     ln_pendingonchain=$((ln_walletbalance_wait+ln_closedchannelbalance))
-     if [ "${ln_pendingonchain}" = "0" ]; then ln_pendingonchain=""; fi
-     if [ ${#ln_pendingonchain} -gt 0 ]; then ln_pendingonchain="(+${ln_pendingonchain})"; fi
-     # ln_channelbalance: "state": "CHANNELD_NORMAL" funds in channels
-     for i in $(echo "$cl_listfunds" \
-      |jq .channels[]|jq 'select(.state=="CHANNELD_NORMAL")'|grep channel_sat|awk '{print $2}'|cut -d, -f1);do
-       ln_channelbalance=$((ln_channelbalance+i))
-     done
-     if [ ${#ln_channelbalance} -eq 0 ];then
-      ln_channelbalance=0
-     fi
-     # ln_channelbalance_all: all funds in channels
-     for i in $(echo "$cl_listfunds" \
-      |jq .channels[]|grep channel_sat|awk '{print $2}'|cut -d, -f1);do
-       ln_channelbalance_all=$((ln_channelbalance_all+i))
-     done
-     ln_channelbalance_pending=$((ln_channelbalance_all-ln_channelbalance-ln_closedchannelbalance))
-     if [ "${ln_channelbalance_pending}" = "0" ]; then ln_channelbalance_pending=""; fi
-     if [ ${#ln_channelbalance_pending} -gt 0 ]; then ln_channelbalance_pending=" (+${ln_channelbalance_pending})"; fi
-     # - **num_peers** (u32): The total count of peers, connected or with channels
-     # - **num_pending_channels** (u32): The total count of channels being opened
-     # - **num_active_channels** (u32): The total count of channels in normal state
-     # - **num_inactive_channels** (u32): The total count of channels waiting for opening or closing 
-     ln_channels_online="$(echo "${ln_getInfo}" | jq -r '.num_active_channels')" 2>/dev/null
-     cl_num_pending_channels="$(echo "${ln_getInfo}" | jq -r '.num_pending_channels')" 2>/dev/null
-     cl_num_inactive_channels="$(echo "${ln_getInfo}" | jq -r '.num_inactive_channels')" 2>/dev/null
-     ln_channels_total=$((ln_channels_online+cl_num_pending_channels+cl_num_inactive_channels))
-     ln_baseInfo="${color_gray}Wallet ${ln_walletbalance} ${netprefix}sat ${ln_pendingonchain}"
-     ln_peers="$(echo "${ln_getInfo}" | jq -r '.num_peers')" 2>/dev/null
-     ln_channelInfo="${ln_channels_online}/${ln_channels_total} Channels ${ln_channelbalance} ${netprefix}sat${ln_channelbalance_pending}"
-     ln_peersInfo="${color_green}${ln_peers} ${color_gray}peers"
-     # - **fees_collected_msat** (msat): Total routing fees collected by this node
-     #ln_dailyfees="$($lncli_alias  feereport | jq -r '.day_fee_sum')" 2>/dev/null
-     #ln_weeklyfees="$($lncli_alias  feereport | jq -r '.week_fee_sum')" 2>/dev/null
-     #ln_monthlyfees="$($lncli_alias  feereport | jq -r '.month_fee_sum')" 2>/dev/null
-     #ln_feeReport="Fee Report (D-W-M): ${color_green}${ln_dailyfees}-${ln_weeklyfees}-${ln_monthlyfees} ${color_gray}sat"
-     ln_feeReport="Fees collected: $(echo "${ln_getInfo}" |  jq -r '.fees_collected_msat')"
-   fi
- fi
- 
-elif [ "${lightning}" == "lnd" ];then
- ln_baseInfo="-"
- ln_channelInfo="\n"
- ln_external="\n"
- ln_alias="$(sudo cat /mnt/hdd/lnd/${netprefix}lnd.conf | grep "^alias=*" | cut -f2 -d=)"
- if [ ${#ln_alias} -eq 0 ];then
-  ln_alias=${hostname}
- fi
- ln_publicColor=""
- ln_port=$(sudo cat /mnt/hdd/lnd/${netprefix}lnd.conf | grep "^listen=*" | cut -f2 -d':')
- if [ ${#ln_port} -eq 0 ]; then
-   ln_port="9735"
- fi
- wallet_unlocked=$(sudo tail -n 1 /mnt/hdd/lnd/logs/${network}/${chain}net/lnd.log 2> /dev/null | grep -c unlock)
- if [ "$wallet_unlocked" -gt 0 ] ; then
-   ln_alias="Wallet Locked"
- else
-  ln_getInfo=$($lncli_alias --macaroonpath=${lnd_macaroon_dir}/readonly.macaroon --tlscertpath=${lnd_dir}/tls.cert getinfo 2>/dev/null)
-  ln_external=$(echo "${ln_getInfo}" | grep "uris" -A 1 | tr -d '\n' | cut -d '"' -f4)
-  ln_tor=$(echo "${ln_external}" | grep -c ".onion")
-  if [ ${ln_tor} -eq 1 ]; then
-    ln_publicColor="${color_green}"
-  else
-    public_check=$(nc -z -w6 ${public_ip} ${ln_port} 2>/dev/null; echo $?)
-   if [ $public_check = "0" ] || [ "${ipv6}" == "on" ]; then
-     # only set yellow/normal because netcat can only say that the port is open - not that it points to this device for sure
-     ln_publicColor="${color_amber}"
-   else
-     ln_publicColor="${color_red}"
-   fi
-  fi
-  ln_sync=$(echo "${ln_getInfo}" | grep "synced_to_chain" | grep "true" -c)
-  ln_version=$(echo "${ln_getInfo}" | jq -r '.version' | cut -d' ' -f1)
-  if [ ${ln_sync} -eq 0 ]; then
-     if [ ${#ln_getInfo} -eq 0 ]; then
-       ln_baseInfo="${color_red} Not Started | Not Ready Yet"
-     else
-       ln_baseInfo="${color_amber} Waiting for Chain Sync"
-     fi
-   else
-     lnd_walletbalance=$($lncli_alias --macaroonpath=${lnd_macaroon_dir}/readonly.macaroon --tlscertpath=${lnd_dir}/tls.cert walletbalance 2>/dev/null)
-     ln_walletbalance="$(echo "$lnd_walletbalance" | jq -r '.confirmed_balance')" 2>/dev/null
-     ln_walletbalance_wait="$(echo "$lnd_walletbalance" | jq -r '.unconfirmed_balance')" 2>/dev/null
-     if [ "${ln_walletbalance_wait}" = "0" ]; then ln_walletbalance_wait=""; fi
-     if [ ${#ln_walletbalance_wait} -gt 0 ]; then ln_walletbalance_wait="(+${ln_walletbalance_wait})"; fi
-     lnd_channelbalance=$($lncli_alias --macaroonpath=${lnd_macaroon_dir}/readonly.macaroon --tlscertpath=${lnd_dir}/tls.cert channelbalance 2>/dev/null)
-     ln_channelbalance="$(echo "$lnd_channelbalance" | jq -r '.balance')" 2>/dev/null
-     ln_channelbalance_pending="$(echo "$lnd_channelbalance" | jq -r '.pending_open_balance')" 2>/dev/null
-     if [ "${ln_channelbalance_pending}" = "0" ]; then ln_channelbalance_pending=""; fi
-     if [ ${#ln_channelbalance_pending} -gt 0 ]; then ln_channelbalance_pending=" (+${ln_channelbalance_pending})"; fi
-     ln_channels_online="$(echo "${ln_getInfo}" | jq -r '.num_active_channels')" 2>/dev/null
-     ln_channels_total="$($lncli_alias --macaroonpath=${lnd_macaroon_dir}/readonly.macaroon --tlscertpath=${lnd_dir}/tls.cert listchannels | jq '.[] | length')" 2>/dev/null
-     ln_baseInfo="${color_gray}wallet ${ln_walletbalance} ${netprefix}sat ${ln_walletbalance_wait}"
-     ln_peers="$(echo "${ln_getInfo}" | jq -r '.num_peers')" 2>/dev/null
-     ln_channelInfo="${ln_channels_online}/${ln_channels_total} Channels ${ln_channelbalance} ${netprefix}sat${ln_channelbalance_pending}"
-     ln_peersInfo="${color_green}${ln_peers} ${color_gray}peers"
-     lnd_feereport=$($lncli_alias --macaroonpath=${lnd_macaroon_dir}/readonly.macaroon --tlscertpath=${lnd_dir}/tls.cert feereport 2>/dev/null)
-     ln_dailyfees="$(echo "$lnd_feereport" | jq -r '.day_fee_sum')" 2>/dev/null
-     ln_weeklyfees="$(echo "$lnd_feereport" | jq -r '.week_fee_sum')" 2>/dev/null
-     ln_monthlyfees="$(echo "$lnd_feereport" | jq -r '.month_fee_sum')" 2>/dev/null
-     ln_feeReport="Fee Report (D-W-M): ${color_green}${ln_dailyfees}-${ln_weeklyfees}-${ln_monthlyfees} ${color_gray}sat"
-   fi
- fi
-fi
 
-# show JoinMarket stats in place of the LND URI only if the Yield Generator is running
-source /home/joinmarket/joinin.conf 2>/dev/null
-if [ "${joinmarket}" = "on" ] && [ $(sudo -u joinmarket pgrep -f "python yg-privacyenhanced.py $YGwallet --wallet-password-stdin" 2>/dev/null | wc -l) -gt 2 ]; then
-  trap 'rm -f "$JMstats"' EXIT
-  JMstats=$(mktemp -p /dev/shm)
-  sudo -u joinmarket /home/joinmarket/info.stats.sh > $JMstats
-  JMstatsL1=$(sed -n 1p < "$JMstats")
-  JMstatsL2=$(sed -n 2p < "$JMstats")
-  JMstatsL3=$(sed -n 3p < "$JMstats")
-  JMstatsL4=$(sed -n 4p < "$JMstats")
   lastLine="\
+${color_yellow}
+${color_yellow}${ln_publicColor}${ln_external}${color_gray}"
+
+if [ "${joinmarket}" = "on" ];then
+  # show JoinMarket stats in place of the LND URI only if the Yield Generator is running
+  if [ "$(sudo -u joinmarket pgrep -f "yg-privacyenhanced.py" 2>/dev/null | wc -l)" -gt 2 ] || \
+     [ "$(curl -ksX GET https://127.0.0.1:28183/api/v1/session | jq  .maker_running 2>/dev/null)" = true ]; then
+
+    trap 'rm -f "$JMstats"' EXIT
+    JMstats=$(mktemp -p /dev/shm)
+    sudo -u joinmarket /home/joinmarket/info.stats.sh > $JMstats
+    JMstatsL1=$(sed -n 1p < "$JMstats")
+    JMstatsL2=$(sed -n 2p < "$JMstats")
+    JMstatsL3=$(sed -n 3p < "$JMstats")
+    JMstatsL4=$(sed -n 4p < "$JMstats")
+    lastLine="\
 ${color_gray}
 ${color_gray}     ╦╔╦╗      ${color_gray}$JMstatsL1
 ${color_gray}     ║║║║      ${color_gray}$JMstatsL2
 ${color_gray}    ╚╝╩ ╩      ${color_gray}$JMstatsL3
 ${color_gray}  ◎=◎=◎=◎=◎    ${color_gray}$JMstatsL4"
-else
-    lastLine="\
-${color_yellow}
-${color_yellow}${ln_publicColor}${ln_external}${color_gray}"
   fi
+fi
 
-if [ "${lightning}" == "cl" ];then
-  LNline="C-LIGHTNING ${color_green}${ln_version}\n               ${ln_baseInfo}"
-elif [ "${lightning}"  == "lnd" ];then
+if [ "${lightning}" == "cl" ]; then
+  LNline="CLN ${color_green}${ln_version} ${ln_baseInfo}"
+elif [ "${lightning}"  == "lnd" ]; then
   LNline="LND ${color_green}${ln_version} ${ln_baseInfo}"
 fi
 
-if [ $cpu = 0 ];then
-  templine="on $(uname -m) VM%s%s"
-else
-  templine="temp %s°C %s°F"
-fi
-sleep 5
-
 LNinfo=" + Lightning Network"
-if [ "${lightning}" == "" ]; then
-  LNinfo=""  
+if [ "${lightning}" == "" ] || [ "${lightning}" == "none" ]; then
+  LNinfo=""
 fi
 
-## get uptime and current date & time
-uptime=$(uptime --pretty)
-datetime=$(date -R)
+webuiinfo=""
+source <(/home/admin/_cache.sh meta ln_${lightning}_${chain}net_recovery_done)
+if [ "${blitzapi}" == "on" ]; then
+ webuiinfo="Web Admin --> http://${internet_localip}"
+fi
+
+datetime=$(date +"%d %b %T %z")
+datetime="${datetime} up ${system_up_text}"
 
 stty sane
 sleep 1
@@ -465,11 +328,11 @@ ${color_yellow}               ${color_gray}${network^} Fullnode${LNinfo} ${torIn
 ${color_yellow}        ,/     ${color_yellow}%s
 ${color_yellow}      ,'/      ${color_gray}%s
 ${color_yellow}    ,' /       ${color_gray}%s, temp %s°C %s°F
-${color_yellow}  ,'  /_____   ${color_gray}Free Mem ${color_ram}${ram} ${color_gray} HDDuse ${color_hdd}%s${color_gray}
-${color_yellow},'_____    ,'  ${color_gray}SSH admin@${color_green}${local_ip}${color_gray} d${network_rx} u${network_tx}
-${color_yellow}      /  ,'    ${color_gray}${webinterfaceInfo}
-${color_yellow}     / ,'      ${color_gray}${network} ${color_green}${networkVersion} ${color_gray}${chain}net ${networkConnectionsInfo}
-${color_yellow}    /,'        ${color_gray}Blocks ${blockInfo} ${color_gray}Sync ${sync_color}${sync} %s
+${color_yellow}  ,'  /_____   ${color_gray}Free Mem ${color_ram}${ram} ${color_gray} HDD ${color_hdd}%s${color_gray}
+${color_yellow},'_____    ,'  ${color_gray}SSH admin@${internet_localip}${color_gray} d${internet_rx} u${internet_tx}
+${color_yellow}      /  ,'    ${color_gray}${webuiinfo} 
+${color_yellow}     / ,'      ${color_gray}${network} ${color_green}${networkVersion}${color_gray}${chain}net ${networkConnectionsInfo}
+${color_yellow}    /,'        ${color_gray}${blockInfo} %s
 ${color_yellow}   /'          ${color_gray}
 ${color_yellow}               ${color_gray}${LNline}
 ${color_yellow}               ${color_gray}${ln_channelInfo} ${ln_peersInfo}
@@ -479,8 +342,8 @@ $lastLine
 "RaspiBlitz v${codeVersion}" \
 "-------------------------------------------" \
 "Refreshed: ${datetime}" \
-"CPU load${load##up*,  }" "${tempC}" "${tempF}" \
-"${hdd}" "${sync_percentage}"
+"CPU load${system_cpu_load##up*,  }" "${system_temp_celsius}" "${system_temp_fahrenheit}" \
+"${hdd_used_info}" "${sync_percentage}"
 
 if [ ${#undervoltageReports} -gt 0 ] && [ "${undervoltageReports}" != "0" ]; then
   echo "${undervoltageReports} undervoltage reports - run 'Hardware Test' in menu"
@@ -492,29 +355,34 @@ else
   appInfoLine=""
 
   # Electrum Server - electrs
-  if [ "${ElectRS}" = "on" ]; then
+  fileFlagExists=$(sudo ls /mnt/hdd/app-storage/electrs/initial-sync.done 2>/dev/null | grep -c 'initial-sync.done')
+  if [ "${ElectRS}" == "on" ] && [ $fileFlagExists -eq 0 ]; then
     error=""
-    source <(sudo /home/admin/config.scripts/bonus.electrs.sh status 2>/dev/null)
+    source <(/home/admin/config.scripts/bonus.electrs.sh status-sync 2>/dev/null)
     if [ ${#infoSync} -gt 0 ]; then
       appInfoLine="Electrum: ${infoSync}"
     fi
   fi
 
-  # BTC RPC EXPLORER
-  if [ "${BTCRPCexplorer}" = "on" ]; then
+  # Electrum Server - fulcrum
+  fileFlagExists=$(sudo ls /mnt/hdd/app-storage/fulcrum/initial-sync.done 2>/dev/null | grep -c 'initial-sync.done')
+  if [ "${fulcrum}" == "on" ] && [ $fileFlagExists -eq 0 ]; then
     error=""
-    source <(sudo /home/admin/config.scripts/bonus.btc-rpc-explorer.sh status 2>/dev/null)
-    if [ ${#error} -gt 0 ]; then
-      appInfoLine="ERROR BTC-RPC-Explorer: ${error} (try restart)"
-    elif [ "${isIndexed}" = "0" ]; then
-      appInfoLine="BTC-RPC-Explorer: ${indexInfo}"
+    source <(/home/admin/config.scripts/bonus.fulcrum.sh status-sync 2>/dev/null)
+    if [ ${#infoSync} -gt 0 ]; then
+      appInfoLine="Fulcrum: ${infoSync}"
     fi
   fi
 
+  # Transaction Index
+  source <(/home/admin/config.scripts/network.txindex.sh status)
+  if [ "${txindex}" == "1" ] && [ "${isIndexed}" != "1" ]; then
+      appInfoLine="Transaction Index: ${indexInfo}"
+  fi
+
   if [ ${#appInfoLine} -gt 0 ]; then
     echo "${appInfoLine}"
   fi
 
 fi
 
-# EOF

home.admin/00infoLCD.sh

@@ -64,8 +64,8 @@ configFile="/mnt/hdd/raspiblitz.conf"
 infoFile="/home/admin/raspiblitz.info"
 
 # check that user is pi
-if [ "$USER" != "pi" ]; then
-  echo "plz run as user pi --> su pi"
+if [ "$USER" != "pi" ] && [ "$USER" != "root" ]; then
+  echo "plz run as user pi or with sudo"
   exit 1
 fi
 
@@ -86,38 +86,57 @@ while :
 
     # get config info if already available (with state value)
     source ${infoFile}
-    configExists=$(ls ${configFile} 2>/dev/null | grep -c '.conf')
+
+    configExists=$(ls "${configFile}" 2>/dev/null | grep -c '.conf')
     if [ ${configExists} -eq 1 ]; then
       source ${configFile}
       source <(/home/admin/config.scripts/network.aliases.sh getvars)
     fi
 
-    if [ "${setupPhase}" != "done" ] || [ "${state}" == "reboot" ] || [ "${state}" == "shutdown" ] || [ "${state}" == "copytarget" ] || [ "${state}" == "copysource" ] || [ "${state}" == "copystation" ]; then
+    if [ "${setupPhase}" != "done" ] || [ "${state}" == "reboot" ] || [ "${state}" == "shutdown" ] || [ "${state}" == "copytarget" ] || [ "${state}" == "copysource" ]; then
 
       # show status info during boot & setup & repair on LCD
+      if [ "${state}" == "" ]; then
+        state="nostate"
+      fi
       /home/admin/setup.scripts/eventInfoWait.sh "${state}" "${message}" lcd
       sleep 1
       continue
 
     fi
 
-    # TODO: ALSO SEPARATE GUI/ACTION FOR THE SCANNING / WALLET UNLOCK / ERROR DETECTION 
     # if lightning is syncing or scanning
-    source <(sudo /home/admin/config.scripts/blitz.statusscan.sh $lightning)
-    if [ "${walletLocked}" == "1" ] || [ "${CLwalletLocked}" == "1" ]; then
+    source <(/home/admin/_cache.sh get \
+      lightning \
+      ln_default_locked \
+      btc_default_synced \
+      btc_default_online \
+      btc_default_sync_initialblockdownload \
+      btc_default_blocks_behind \
+    )
+
+    if [ "${lightning}" != "" ] && [ "${lightning}" != "none" ] && [ "${ln_default_locked}" == "1" ]; then
       /home/admin/setup.scripts/eventInfoWait.sh "walletlocked" "" lcd
       sleep 3
       continue
     fi
 
-    if [ "${syncedToChain}" != "1" ]; then
+    # when lightning is active - show sync until ln_default_sync_initial_done
+    if [ "${lightning}" != "" ] && [ "${lightning}" != "none" ] && [ "${ln_default_sync_initial_done}" == "0" ]; then
       /home/admin/setup.scripts/eventBlockchainSync.sh lcd
-      sleep 10
+      sleep 3
+      continue
+    fi
+
+    # when btc not online or not synced - show sync screen
+    if [ "${btc_default_synced}" != "1" ] || [ "${btc_default_online}" != "1" ]; then
+      /home/admin/setup.scripts/eventBlockchainSync.sh lcd
+      sleep 3
       continue
     fi
 
     # no special case - show status display
-    /home/admin/00infoBlitz.sh $lightning ${chain}net
+    /home/admin/00infoBlitz.sh ${chain}net $lightning
     sleep 5
 
 done

home.admin/00mainMenu.sh

@@ -2,15 +2,9 @@
 
 echo "Starting the main menu ..."
 
-# CONFIGFILE - configuration of RaspiBlitz
-configFile="/mnt/hdd/raspiblitz.conf"
-
-# INFOFILE - state data from bootstrap
-infoFile="/home/admin/raspiblitz.info"
-
 # MAIN MENU AFTER SETUP
-source ${infoFile}
-source ${configFile}
+source /home/admin/raspiblitz.info
+source /mnt/hdd/raspiblitz.conf
 
 # FUNCTIONS
 
@@ -38,7 +32,7 @@ confirmation()
 }
 
 # get the local network IP to be displayed on the LCD
-source <(/home/admin/config.scripts/internet.sh status local)
+source <(/home/admin/_cache.sh get internet_localip)
 
 if [ ${chain} = test ];then
   netprefix="t"
@@ -64,7 +58,7 @@ fi
 if [ ${#lightning} -gt 0 ]; then
   plus="/ ${lightning} ${plus}"
 fi
-BACKTITLE="${localip} / ${hostname} / ${network} ${plus}"
+BACKTITLE="${internet_localip} / ${hostname} / ${network} ${plus}"
 
 # Basic Options
 OPTIONS+=(INFO "RaspiBlitz Status Screen")
@@ -74,9 +68,9 @@ if [ "${lightning}" == "lnd" ] || [ "${lnd}" == "on" ]; then
   OPTIONS+=(LND "LND Wallet Options")
 fi
 
-# if C-Lightning is active
+# if Core Lightning is active
 if [ "${lightning}" == "cl" ] || [ "${cl}" == "on" ]; then
-  OPTIONS+=(CL "C-lightning Wallet Options")
+  OPTIONS+=(CLN "Core Lightning Wallet Options")
 fi
 
 # Activated Apps/Services
@@ -84,7 +78,7 @@ if [ "${rtlWebinterface}" == "on" ]; then
   OPTIONS+=(LRTL "LND RTL Webinterface")
 fi
 if [ "${crtlWebinterface}" == "on" ]; then
-  OPTIONS+=(CRTL "C-Lightning RTL Webinterface")
+  OPTIONS+=(CRTL "Core Lightning RTL Webinterface")
 fi
 if [ "${BTCPayServer}" == "on" ]; then
   OPTIONS+=(BTCPAY "BTCPay Server Info")
@@ -92,20 +86,24 @@ fi
 if [ "${lit}" == "on" ]; then
   OPTIONS+=(LIT "LIT (loop, pool, faraday)")
 fi
-if [ "${sparko}" == "on" ]; then
-  OPTIONS+=(SPARKO "Sparko Webwallet")
-fi
-if [ "${spark}" == "on" ]; then
-  OPTIONS+=(SPARK "Spark Wallet")
+if [ "${lndg}" == "on" ]; then
+  OPTIONS+=(LNDG "LNDg (auto-rebalance, auto-fees)")
 fi
 if [ "${ElectRS}" == "on" ]; then
   OPTIONS+=(ELECTRS "Electrum Rust Server")
 fi
+if [ "${fulcrum}" == "on" ]; then
+  OPTIONS+=(FULCRUM "Fulcrum Electrum Server")
+fi
 if [ "${BTCRPCexplorer}" == "on" ]; then
   OPTIONS+=(EXPLORE "BTC RPC Explorer")
 fi
 if [ "${LNBits}" == "on" ]; then
-  OPTIONS+=(LNBITS "LNbits Server")
+  if [ "${LNBitsFunding}" == "lnd" ] || [ "${LNBitsFunding}" == "tlnd" ] || [ "${LNBitsFunding}" == "slnd" ] || [ "${LNBitsFunding}" == "" ]; then
+    OPTIONS+=(LNBITS "LNbits on LND")
+  elif [ "${LNBitsFunding}" == "cl" ] || [ "${LNBitsFunding}" == "tcl" ] || [ "${LNBitsFunding}" == "scl" ]; then
+    OPTIONS+=(LNBITS "LNbits on Core Lightning")
+  fi
 fi
 if [ "${lndmanage}" == "on" ]; then
   OPTIONS+=(LNDMANAGE "LND Manage Script")
@@ -113,6 +111,9 @@ fi
 if [ "${loop}" == "on" ]; then
   OPTIONS+=(LOOP "Loop In/Out Service")
 fi
+if [ "${lndk}" == "on" ]; then
+  OPTIONS+=(LNDK "LND BOLT 12 privacy")
+fi
 if [ "${mempoolExplorer}" == "on" ]; then
   OPTIONS+=(MEMPOOL "Mempool Space")
 fi
@@ -122,12 +123,18 @@ fi
 if [ "${joinmarket}" == "on" ]; then
   OPTIONS+=(JM "JoinMarket with JoininBox")
 fi
+if [ "${jam}" == "on" ]; then
+  OPTIONS+=(JAM "Jam (JoinMarket WebUI)")
+fi
 if [ "${faraday}" == "on" ]; then
   OPTIONS+=(FARADAY "Faraday Channel Management")
 fi
 if [ "${bos}" == "on" ]; then
   OPTIONS+=(BOS "Balance of Satoshis")
 fi
+#if [ "${lnproxy}" == "on" ]; then
+#  OPTIONS+=(LNPROXY "lnproxy server")
+#fi
 if [ "${pyblock}" == "on" ]; then
   OPTIONS+=(PYBLOCK "PyBlock")
 fi
@@ -143,11 +150,26 @@ fi
 if [ "${sphinxrelay}" == "on" ]; then
   OPTIONS+=(SPHINX "Sphinx Chat Relay")
 fi
+if [ "${helipad}" == "on" ]; then
+  OPTIONS+=(HELIPAD "Helipad Boostagram reader")
+fi
 if [ "${chantools}" == "on" ]; then
   OPTIONS+=(CHANTOOLS "ChannelTools (Fund Rescue)")
 fi
 if [ "${circuitbreaker}" == "on" ]; then
-  OPTIONS+=(CIRCUIT "Circuitbreaker (LND firewall)")
+  OPTIONS+=(CIRCUITBREAKER "Circuitbreaker (LND firewall)")
+fi
+if [ "${squeaknode}" == "on" ]; then
+  OPTIONS+=(SQUEAKNODE "Squeaknode")
+fi
+if [ "${lightningtipbot}" == "on" ]; then
+  OPTIONS+=(LIGHTNINGTIPBOT "Show LightningTipBot details")
+fi
+if [ "${fints}" == "on" ]; then
+  OPTIONS+=(FINTS "Show FinTS/HBCI details")
+fi
+if [ "${labelbase}" == "on" ]; then
+  OPTIONS+=(LABELBASE "Labelbase (UTXO labeling)")
 fi
 
 # dont offer to switch to "testnet view for now" - so no wswitch back to mainnet needed
@@ -163,9 +185,7 @@ OPTIONS+=(SETTINGS "Node Settings & Options")
 OPTIONS+=(SERVICES "Additional Apps & Services")
 OPTIONS+=(SYSTEM "Monitoring & Configuration")
 OPTIONS+=(CONNECT "Connect Apps & Show Credentials")
-if [ "${lightning}" == "lnd" ] || [ "${lnd}" == "on" ]; then
-  OPTIONS+=(SUBSCRIBE "Manage Subscriptions")
-fi
+OPTIONS+=(SUBSCRIBE "Manage Subscriptions")
 OPTIONS+=(PASSWORD "Change Passwords")
 
 if [ "${touchscreen}" == "1" ]; then
@@ -197,13 +217,13 @@ case $CHOICE in
               do
 
               # show the same info as on LCD screen
-              /home/admin/00infoBlitz.sh ${lightning} ${chain}net
+              /home/admin/00infoBlitz.sh ${chain}net ${lightning}
 
               # wait 6 seconds for user exiting loop
               echo ""
               echo -en "Screen is updating in a loop .... press 'x' now to get back to menu."
               read -n 1 -t 6 keyPressed
-              echo -en "\rGathering information to update info ... please wait.                \n"  
+              echo -en "\rGathering information to update info ... please wait.                \n"
 
               # check if user wants to abort session
               if [ "${keyPressed}" = "x" ]; then
@@ -217,7 +237,7 @@ case $CHOICE in
         LND)
             /home/admin/99lndMenu.sh
             ;;
-        CL)
+        CLN)
             /home/admin/99clMenu.sh ${chain}net
             ;;
         CONNECT)
@@ -245,14 +265,14 @@ case $CHOICE in
         ELECTRS)
             /home/admin/config.scripts/bonus.electrs.sh menu
             ;;
+        FULCRUM)
+            /home/admin/config.scripts/bonus.fulcrum.sh menu
+            ;;
         LIT)
             /home/admin/config.scripts/bonus.lit.sh menu
             ;;
-        SPARKO)
-            /home/admin/config.scripts/cl-plugin.sparko.sh menu mainnet
-            ;;
-        SPARK)
-            /home/admin/config.scripts/cl.spark.sh menu mainnet
+        LNDG)
+            /home/admin/config.scripts/bonus.lndg.sh menu
             ;;
         LNBITS)
             /home/admin/config.scripts/bonus.lnbits.sh menu
@@ -260,8 +280,11 @@ case $CHOICE in
         LNDMANAGE)
             /home/admin/config.scripts/bonus.lndmanage.sh menu
             ;;
-        LOOP)
-            /home/admin/config.scripts/bonus.loop.sh menu
+        LNDK)
+            /home/admin/config.scripts/bonus.lndk.sh menu
+            ;;
+        LIGHTNINGTIPBOT)
+            /home/admin/config.scripts/bonus.lightningtipbot.sh menu
             ;;
         MEMPOOL)
             /home/admin/config.scripts/bonus.mempool.sh menu
@@ -270,13 +293,16 @@ case $CHOICE in
             /home/admin/config.scripts/bonus.specter.sh menu
             ;;
         JM)
-            sudo /home/admin/config.scripts/bonus.joinmarket.sh menu
+            /home/admin/config.scripts/bonus.joinmarket.sh menu
             ;;
-        FARADAY)
-            sudo /home/admin/config.scripts/bonus.faraday.sh menu
+        JAM)
+            /home/admin/config.scripts/bonus.jam.sh menu
             ;;
         BOS)
             sudo /home/admin/config.scripts/bonus.bos.sh menu
+            ;;
+        LNPROXY)
+            sudo /home/admin/config.scripts/bonus.lnproxy.sh menu
             ;;
 		    PYBLOCK)
             sudo /home/admin/config.scripts/bonus.pyblock.sh menu
@@ -287,21 +313,33 @@ case $CHOICE in
         ZEROTIER)
             sudo /home/admin/config.scripts/bonus.zerotier.sh menu
             ;;
-        POOL)
-            sudo /home/admin/config.scripts/bonus.pool.sh menu
-            ;;
         SPHINX)
             sudo /home/admin/config.scripts/bonus.sphinxrelay.sh menu
             ;;
+        HELIPAD)
+            sudo /home/admin/config.scripts/bonus.helipad.sh menu
+            ;;
+        SQUEAKNODE)
+            /home/admin/config.scripts/bonus.squeaknode.sh menu
+            ;;
+        ITCHYSATS)
+            sudo /home/admin/config.scripts/bonus.itchysats.sh menu
+            ;;
         CHANTOOLS)
             sudo /home/admin/config.scripts/bonus.chantools.sh menu
             ;;
-        CIRCUIT)
+        CIRCUITBREAKER)
             sudo /home/admin/config.scripts/bonus.circuitbreaker.sh menu
             ;;
+        LABELBASE)
+            sudo /home/admin/config.scripts/bonus.labelbase.sh menu
+            ;;
+        FINTS)
+            sudo /home/admin/config.scripts/bonus.fints.sh menu
+            ;;
         TESTNETS)
             /home/admin/00parallelChainsMenu.sh
-            ;;  
+            ;;
         SUBSCRIBE)
             /home/admin/config.scripts/blitz.subscriptions.py
             ;;
@@ -315,7 +353,7 @@ case $CHOICE in
             /home/admin/98repairMenu.sh
             ;;
         PASSWORD)
-            sudo /home/admin/config.scripts/blitz.setpassword.sh
+            sudo /home/admin/config.scripts/blitz.passwords.sh set
             ;;
         UPDATE)
             /home/admin/99updateMenu.sh
@@ -358,4 +396,4 @@ exitCodeOfSubmenu=$?
 if [ "${exitCodeOfSubmenu}" != "0" ]; then
   echo "# submenu signaled exit code '${exitCodeOfSubmenu}' --> forward to outside loop"
 fi
-exit ${exitCodeOfSubmenu}
+exit ${exitCodeOfSubmenu}

home.admin/00parallelChainsMenu.sh

@@ -6,9 +6,6 @@
 source /home/admin/raspiblitz.info
 source /mnt/hdd/raspiblitz.conf
 
-# get the local network IP to be displayed on the LCD
-source <(/home/admin/config.scripts/internet.sh status local)
-
 # BASIC MENU INFO
 WIDTH=64
 BACKTITLE="RaspiBlitz"
@@ -20,7 +17,7 @@ plus=""
 if [ "${testnet}" == "on" ]; then
   OPTIONS+=(tSYS "TESTNET Monitoring & Configuration")
   if [ "${lightning}" == "lnd" ] || [ "${lnd}" == "on" ]; then OPTIONS+=(tLND "TESTNET LND Wallet Options"); fi
-  if [ "${lightning}" == "cl" ] || [ "${cl}" == "on" ]; then OPTIONS+=(tCL "TESTNET C-Lightning Wallet Options"); fi
+  if [ "${lightning}" == "cl" ] || [ "${cl}" == "on" ]; then OPTIONS+=(tCL "TESTNET Core Lightning Wallet Options"); fi
 fi
 
 # just an optical splitter - ignored on select
@@ -28,7 +25,7 @@ OPTIONS+=(--- "----------------------------------")
 
 if [ "${signet}" == "on" ]; then
   OPTIONS+=(sSYS "SIGNET Monitoring & Configuration")
-  if [ "${lightning}" == "cl" ] || [ "${cl}" == "on" ]; then OPTIONS+=(sCL "SIGNET C-Lightning Wallet Options"); fi
+  if [ "${lightning}" == "cl" ] || [ "${cl}" == "on" ]; then OPTIONS+=(sCL "SIGNET Core Lightning Wallet Options"); fi
 fi
 
 # DONT OFFER SERVICES FOR TESTNET RIGHT NOW

home.admin/00parallelMainnetServices.sh

@@ -13,8 +13,6 @@ if [ ${#rtlWebinterface} -eq 0 ]; then rtlWebinterface="off"; fi
 if [ ${#lnd} -eq 0 ]; then lnd="off"; fi
 if [ ${#cl} -eq 0 ]; then cl="off"; fi
 if [ ${#crtlWebinterface} -eq 0 ]; then crtlWebinterface="off"; fi
-if [ ${#sparko} -eq 0 ]; then sparko="off"; fi
-if [ ${#spark} -eq 0 ]; then spark="off"; fi
 
 # show select dialog
 echo "run dialog ..."
@@ -22,10 +20,8 @@ echo "run dialog ..."
 OPTIONS=()
 OPTIONS+=(l "LND on $CHAIN" ${lnd})
 OPTIONS+=(r "RTL for LND $CHAIN" ${rtlWebinterface})
-OPTIONS+=(c "C-lightning on $CHAIN" ${cl})
+OPTIONS+=(c "Core Lightning on $CHAIN" ${cl})
 OPTIONS+=(t "RTL for CL on $CHAIN" ${crtlWebinterface})
-OPTIONS+=(s "Sparko for CL on $CHAIN" ${sparko})
-OPTIONS+=(m "Spark for CL on $CHAIN" ${spark})
 
 CHOICES=$(dialog --title ' Additional Services ' \
           --checklist ' use spacebar to activate/de-activate ' \
@@ -60,7 +56,7 @@ if [ "${lnd}" != "${choice}" ]; then
     if [ ${errorOnInstall} -eq 0 ]; then
       echo "# Successfully installed LND on $CHAIN"
     else
-      l1="# !!! FAIL on LND on $CHAIN install !!!"
+      l1="# FAIL on LND on $CHAIN install #"
       l2="# Try manual install on terminal after reboot with:"
       l3="/home/admin/config.scripts/lnd.install.sh on $CHAIN"
       dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -81,8 +77,11 @@ if [ "${cl}" != "${choice}" ]; then
   if [ "${choice}" =  "on" ]; then
     if [ ${errorOnInstall} -eq 0 ]; then
       echo "# Successfully installed CL on $CHAIN"
+      # for mainnet only
+      # generate wallet from seedwords
+      /home/admin/config.scripts/cl.hsmtool.sh new $CHAIN
     else
-      l1="# !!! FAIL on CL on $CHAIN install !!!"
+      l1="# FAIL on CL on $CHAIN install #"
       l2="# Try manual install on terminal after reboot with:"
       l3="/home/admin/config.scripts/cl.install.sh on $CHAIN"
       dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -107,7 +106,7 @@ if [ "${rtlWebinterface}" != "${choice}" ]; then
       sleep 10
       /home/admin/config.scripts/bonus.rtl.sh menu lnd $CHAIN
     else
-      l1="# !!! FAIL on RTL for LND $CHAIN install !!!"
+      l1="# FAIL on RTL for LND $CHAIN install #"
       l2="# Try manual install on terminal after reboot with:"
       l3="/home/admin/config.scripts/bonus.rtl.sh on lnd $CHAIN"
       dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -132,7 +131,7 @@ if [ "${crtlWebinterface}" != "${choice}" ]; then
       sleep 10
       /home/admin/config.scripts/bonus.rtl.sh menu cl $CHAIN
     else
-      l1="!!! FAIL on RTL for CL $CHAIN install !!!"
+      l1="# FAIL on RTL for CL $CHAIN install #"
       l2="Try manual install on terminal after reboot with:"
       l3="/home/admin/config.scripts/bonus.rtl.sh on cl $CHAIN"
       dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -142,50 +141,6 @@ else
   echo "RTL for CL $CHAIN Setting unchanged."
 fi
 
-# sparko process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "s")
-if [ ${check} -eq 1 ]; then choice="on"; fi
-if [ "${sparko}" != "${choice}" ]; then
-  echo "# Sparko on $CHAIN Setting changed .."
-  anychange=1
-  /home/admin/config.scripts/cl-plugin.sparko.sh ${choice} $CHAIN
-  errorOnInstall=$?
-  if [ "${choice}" =  "on" ]; then
-    if [ ${errorOnInstall} -eq 0 ]; then
-      /home/admin/config.scripts/cl-plugin.sparko.sh menu $CHAIN
-    else
-      l1="# !!! FAIL on Sparko on $CHAIN install !!!"
-      l2="# Try manual install on terminal after reboot with:"
-      l3="/home/admin/config.scripts/cl-plugin.sparko.sh on $CHAIN"
-      dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
-    fi
-  fi
-else
-  echo "# Sparko on $CHAIN Setting unchanged."
-fi
-
-# spark process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "m")
-if [ ${check} -eq 1 ]; then choice="on"; fi
-if [ "${spark}" != "${choice}" ]; then
-  echo "# Spark Wallet on $CHAIN Setting changed .."
-  anychange=1
-  /home/admin/config.scripts/cl.spark.sh ${choice} $CHAIN
-  errorOnInstall=$?
-  if [ "${choice}" =  "on" ]; then
-    if [ ${errorOnInstall} -eq 0 ]; then
-      /home/admin/config.scripts/cl.spark.sh menu $CHAIN
-    else
-      l1="# !!! FAIL on Spark Wallet on $CHAIN install !!!"
-      l2="# Try manual install on terminal after reboot with:"
-      l3="/home/admin/config.scripts/cl.spark.sh on $CHAIN"
-      dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
-    fi
-  fi
-else
-  echo "# Spark Wallet on $CHAIN Setting unchanged."
-fi
-
 if [ ${anychange} -eq 0 ]; then
      dialog --msgbox "NOTHING CHANGED!\nUse Spacebar to check/uncheck services." 8 58
      exit 0

home.admin/00parallelTestnetServices.sh

@@ -13,8 +13,6 @@ if [ ${#trtlWebinterface} -eq 0 ]; then trtlWebinterface="off"; fi
 if [ ${#tlnd} -eq 0 ]; then tlnd="off"; fi
 if [ ${#tcrtlWebinterface} -eq 0 ]; then tcrtlWebinterface="off"; fi
 if [ ${#tcl} -eq 0 ]; then tcl="off"; fi
-if [ ${#tsparko} -eq 0 ]; then tsparko="off"; fi
-if [ ${#tspark} -eq 0 ]; then tspark="off"; fi
 
 # show select dialog
 echo "run dialog ..."
@@ -22,10 +20,8 @@ echo "run dialog ..."
 OPTIONS=()
 OPTIONS+=(l "LND on $CHAIN" ${tlnd})
 OPTIONS+=(r "RTL for LND $CHAIN" ${trtlWebinterface})
-OPTIONS+=(c "C-lightning on $CHAIN" ${tcl})
+OPTIONS+=(c "Core Lightning on $CHAIN" ${tcl})
 OPTIONS+=(t "RTL for CL on $CHAIN" ${tcrtlWebinterface})
-OPTIONS+=(s "Sparko for CL on $CHAIN" ${tsparko})
-OPTIONS+=(m "Spark Wallet fro CL on $CHAIN" ${tspark})
 
 CHOICES=$(dialog --title ' Additional Services ' \
           --checklist ' use spacebar to activate/de-activate ' \
@@ -60,7 +56,7 @@ if [ "${tlnd}" != "${choice}" ]; then
     if [ ${errorOnInstall} -eq 0 ]; then
       echo "# Successfully installed LND on $CHAIN"
     else
-      l1="# !!! FAIL on LND on $CHAIN install !!!"
+      l1="# FAIL on LND on $CHAIN install #"
       l2="# Try manual install on terminal after reboot with:"
       l3="/home/admin/config.scripts/lnd.install.sh on $CHAIN"
       dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -82,7 +78,7 @@ if [ "${tcl}" != "${choice}" ]; then
     if [ ${errorOnInstall} -eq 0 ]; then
       echo "# Successfully installed CL on $CHAIN"
     else
-      l1="# !!! FAIL on CL on $CHAIN install !!!"
+      l1="# FAIL on CL on $CHAIN install #"
       l2="# Try manual install on terminal after reboot with:"
       l3="/home/admin/config.scripts/cl.install.sh on $CHAIN"
       dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -107,7 +103,7 @@ if [ "${trtlWebinterface}" != "${choice}" ]; then
       sleep 10
       /home/admin/config.scripts/bonus.rtl.sh menu lnd $CHAIN
     else
-      l1="# !!! FAIL on RTL for LND $CHAIN install !!!"
+      l1="# FAIL on RTL for LND $CHAIN install #"
       l2="# Try manual install on terminal after reboot with:"
       l3="/home/admin/config.scripts/bonus.rtl.sh on lnd $CHAIN"
       dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -132,7 +128,7 @@ if [ "${tcrtlWebinterface}" != "${choice}" ]; then
       sleep 10
       /home/admin/config.scripts/bonus.rtl.sh menu cl $CHAIN
     else
-      l1="!!! FAIL on RTL for CL $CHAIN install !!!"
+      l1="# FAIL on RTL for CL $CHAIN install #"
       l2="Try manual install on terminal after reboot with:"
       l3="/home/admin/config.scripts/bonus.rtl.sh on cl $CHAIN"
       dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -142,50 +138,6 @@ else
   echo "RTL for CL $CHAIN Setting unchanged."
 fi
 
-# tsparko process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "s")
-if [ ${check} -eq 1 ]; then choice="on"; fi
-if [ "${tsparko}" != "${choice}" ]; then
-  echo "# Sparko on $CHAIN Setting changed .."
-  anychange=1
-  /home/admin/config.scripts/cl-plugin.sparko.sh ${choice} $CHAIN
-  errorOnInstall=$?
-  if [ "${choice}" =  "on" ]; then
-    if [ ${errorOnInstall} -eq 0 ]; then
-      /home/admin/config.scripts/cl-plugin.sparko.sh menu $CHAIN
-    else
-      l1="# !!! FAIL on Sparko on $CHAIN install !!!"
-      l2="# Try manual install on terminal after reboot with:"
-      l3="/home/admin/config.scripts/cl-plugin.sparko.sh on $CHAIN"
-      dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
-    fi
-  fi
-else
-  echo "# Sparko on $CHAIN Setting unchanged."
-fi
-
-# tspark process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "m")
-if [ ${check} -eq 1 ]; then choice="on"; fi
-if [ "${tspark}" != "${choice}" ]; then
-  echo "# Spark Wallet on $CHAIN Setting changed .."
-  anychange=1
-  /home/admin/config.scripts/cl.spark.sh ${choice} $CHAIN
-  errorOnInstall=$?
-  if [ "${choice}" =  "on" ]; then
-    if [ ${errorOnInstall} -eq 0 ]; then
-      /home/admin/config.scripts/cl.spark.sh menu $CHAIN
-    else
-      l1="# !!! FAIL on Spark Wallet on $CHAIN install !!!"
-      l2="# Try manual install on terminal after reboot with:"
-      l3="/home/admin/config.scripts/cl.spark.sh on $CHAIN"
-      dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
-    fi
-  fi
-else
-  echo "# Spark Wallet on $CHAIN Setting unchanged."
-fi
-
 if [ ${anychange} -eq 0 ]; then
      dialog --msgbox "NOTHING CHANGED!\nUse Spacebar to check/uncheck services." 8 58
      exit 0

home.admin/00raspiblitz.sh

@@ -8,22 +8,10 @@
 echo "Starting SSH user interface ... (please wait)"
 
 # CONFIGFILE - configuration of RaspiBlitz
-configFile="/mnt/hdd/raspiblitz.conf"
-source ${configFile} 2>/dev/null
+source /mnt/hdd/raspiblitz.conf 2>/dev/null
 
 # INFOFILE - state data from bootstrap
 infoFile="/home/admin/raspiblitz.info"
-
-# check if raspiblitz.info exists
-systemInfoExists=$(ls ${infoFile} | grep -c "${infoFile}")
-if [ "${systemInfoExists}" != "1" ]; then
-  echo "systemInfoExists(${systemInfoExists})"
-  echo "FAIL: ${infoFile} does not exist .. which it should at this point."
-  echo "Check logs & bootstrap.service for errors and report to devs."
-  exit 1
-fi
-
-# get system state information raspiblitz.info
 source ${infoFile}
 
 # check that basic system phase/state information is available
@@ -59,35 +47,27 @@ if [ "${copyInProgress}" = "1" ]; then
   exit
 fi
 
-# special state: reindex was triggered
-if [ "${state}" = "reindex" ]; then
-  echo "Re-Index in progress ... start monitoring:"
-  /home/admin/config.scripts/network.reindex.sh
-  exit
-fi
-
-# special state: copystation
-if [ "${state}" = "copystation" ]; then
-  echo "Copy Station is Running ..."
-  echo "reboot to return to normal"
-  sudo /home/admin/XXcopyStation.sh
-  exit
-fi
-
-# prepare status file
-# TODO: this is to be replaced and unified together with raspiblitz.info
-# when we move to a background monitoring thread & redis for WebUI with v1.8
-sudo touch /var/cache/raspiblitz/raspiblitz.status
-sudo chown admin:admin /var/cache/raspiblitz/raspiblitz.status
-sudo chmod 740 /var/cache/raspiblitz/raspiblitz.status
-
 #####################################
 # SSH MENU LOOP
 # this loop runs until user exits or
 # an error drops user to terminal
 #####################################
 
+# listen to CTRL-c & CTRL-z to break loop
+quit() {
+  echo "SIGINT or SIGTERM received, exiting..."
+  kill -9 $$
+}
+trap quit INT
+trap quit TERM
+
 echo "# start ssh menu loop"
+# put some values on higher scan rate for 10 minute
+/home/admin/_cache.sh focus ln_default_ready 2 600 >/dev/null
+/home/admin/_cache.sh focus ln_default_locked 2 600 >/dev/null
+/home/admin/_cache.sh focus btc_default_synced 2 600 >/dev/null
+
+echo "# starting ssh menu loop ... "
 exitMenuLoop=0
 doneIBD=0
 while [ ${exitMenuLoop} -eq 0 ]
@@ -97,63 +77,56 @@ do
   # Access fresh system info on every loop
 
   # refresh system state information
-  source ${infoFile}
-
-  # gather fresh status scan and store results in memory
-  # TODO: move this into background loop and unify with redis data storage later
-  #echo "# blitz.statusscan.sh"
-
-  firstStatusScanExists=$(ls /var/cache/raspiblitz/raspiblitz.status | grep -c "raspiblitz.status")
-  #echo "firstStatusScanExists(${firstStatusScanExists})"
-  if [ ${firstStatusScanExists} -eq 1 ]; then
-
-    # run statusscan with timeout - if status scan was not killed it will copy over the 
-    timeout 15 /home/admin/config.scripts/blitz.statusscan.sh ${lightning} > /var/cache/raspiblitz/raspiblitz.status.tmp
-    result=$?
-    #echo "result(${result})"
-    if [ "${result}" == "0" ]; then
-     # statusscan finished in under 10 seconds - use results
-     cp /var/cache/raspiblitz/raspiblitz.status.tmp /var/cache/raspiblitz/raspiblitz.status
-    else
-     # statusscan blocked and was killed - fallback to old results
-     echo "statusscan blocked (${result}) - fallback to old results"
-     sleep 1
-    fi 
-  
-  else
-  
-    # first time run statusscan without timeout
-    echo "# running statusscan for the first time ... can take time"
-    /home/admin/config.scripts/blitz.statusscan.sh ${lightning} > /var/cache/raspiblitz/raspiblitz.status 
+  source <(/home/admin/_cache.sh get \
+    systemscan_runtime \
+    state \
+    setupPhase \
+    btc_default_synced \
+    ln_default_sync_chain \
+    ln_default_locked \
+    ln_default_ready \
+    ln_default_sync_initial_done \
+    message \
+    network \
+    chain \
+    lightning \
+    internet_localip
+  )
 
+  # background.scan is not ready yet
+  if [ "${systemscan_runtime}" == "" ]; then
+    echo "# background.scan not ready yet ... (please wait)"
+    sleep 4
+    continue
   fi
 
-  # load statusscan results
-  source /var/cache/raspiblitz/raspiblitz.status 2>/dev/null
-
   #####################################
-  # ALWAYS: Handle System States 
+  # ALWAYS: Handle System States
   #####################################
 
   ############################
-  # LND Wallet Unlock
+  # Wallet Unlock
 
-  if [ "${lndActive}" == "1" ] && [ "${walletLocked}" == "1" ] && [ "${state}" == "ready" ] && [ "${setupPhase}" == "done" ]; then
-    #echo "# lnd.unlock.sh"
-    /home/admin/config.scripts/lnd.unlock.sh
-  fi
+  if [ "${state}" == "ready" ] && [ "${setupPhase}" == "done" ] && [ "${ln_default_locked}" == "1" ]; then
+
+    # unlock lnd
+    if [ "${lightning}" == "lnd" ]; then
+      /home/admin/config.scripts/lnd.unlock.sh
+    fi
+
+    # unlock c-lightning
+    if [ "${lightning}" == "cl" ]; then
+      /home/admin/config.scripts/cl.hsmtool.sh unlock ${chain}net
+      sleep 5
+    fi
 
-  # CL Wallet Unlock 
-  if [ "${CLwalletLocked}" == "1" ] && [ "${state}" == "ready" ] && [ "${setupPhase}" == "done" ]; then
-    /home/admin/config.scripts/cl.hsmtool.sh unlock
-    sleep 5
   fi
 
   #####################################
   # SETUP MENU
   #####################################
 
-  # when is needed & bootstrap process signals that it waits for user dialog 
+  # when is needed & bootstrap process signals that it waits for user dialog
   if [ "${setupPhase}" != "done" ] && [ "${state}" == "waitsetup" ]; then
     # push user to main menu
     echo "# controlSetupDialog.sh"
@@ -168,14 +141,14 @@ do
   # SETUP DONE DIALOGS
   #####################################
 
-  # when is needed & bootstrap process signals that it waits for user dialog 
+  # when is needed & bootstrap process signals that it waits for user dialog
   if [ "${setupPhase}" != "done" ] && [ "${state}" == "waitfinal" ]; then
     # push to final setup gui dialogs
     #echo "# controlFinalDialog.sh"
     /home/admin/setup.scripts/controlFinalDialog.sh
     # exit because controller will reboot at the end
     exit 0
-  fi  
+  fi
 
   # exit loop/script in case if system shutting down
   if [ "${state}" == "reboot" ] || [ "${state}" == "shutdown" ]; then
@@ -186,7 +159,7 @@ do
     echo "***********************************************************"
     if [ "${state}" == "reboot" ]; then
       echo "SSH again into system with:"
-      echo "ssh admin@${localip}"
+      echo "ssh admin@${internet_localip}"
       echo "Use your password A"
       echo "***********************************************************"
     fi
@@ -195,13 +168,88 @@ do
   fi
 
   #####################################
-  # INITIAL BLOCKCHAIN SYNC (SUBLOOP)
+  # MAKE SURE BLOCKCHAIN/LN IS SYNC
   #####################################
-  if [ "${lightning}" == "" ]; then syncedToChain=1; fi
-  if [ "${setupPhase}" == "done" ] && [ "${state}" == "ready" ] && [ "${syncedToChain}" != "1" ]; then
-    /home/admin/setup.scripts/eventBlockchainSync.sh ssh
-    sleep 10
-    continue
+  if [ "${setupPhase}" == "done" ] && [ "${state}" == "ready" ]; then
+    if [ "${lightning}" = "cl" ]; then
+      if [ "${btc_default_synced}" != "1" ] || [ "${ln_default_ready}" == "0" ] || [ "${ln_default_sync_chain}" == "0" ]; then
+        /home/admin/setup.scripts/eventBlockchainSync.sh ssh
+        sleep 3
+        continue
+      fi
+    elif [ "${lightning}" = "lnd" ]; then
+      if [ "${btc_default_synced}" != "1" ] || [ "${ln_default_ready}" == "0" ] || [ "${ln_default_sync_chain}" == "0" ] || [ "${ln_default_sync_initial_done}" == "0" ]; then
+        /home/admin/setup.scripts/eventBlockchainSync.sh ssh
+        sleep 3
+        continue
+      fi  
+    else
+      if [ "${btc_default_synced}" != "1" ]; then
+        /home/admin/setup.scripts/eventBlockchainSync.sh ssh
+        sleep 3
+        continue
+      fi
+    fi
+  fi
+
+  #####################################
+  # SCB ACTIVATION
+  #####################################
+
+  # when setup is done & state is ready .. check for SCB activation
+  if [ "${setupPhase}" == "done" ] && [ "${state}" == "ready" ]; then
+
+    # check if there is a channel.backup to activate
+    gotSCB=$(ls /home/admin/channel.backup 2>/dev/null | grep -c 'channel.backup')
+    if [ "${gotSCB}" == "1" ]; then
+
+      clear
+      echo
+      echo "*** channel.backup Recovery ***"
+      echo "Running ... (please wait)"
+      lncli --chain=${network} restorechanbackup --multi_file=/home/admin/channel.backup 2>/home/admin/.error.tmp
+      error=`cat /home/admin/.error.tmp`
+      rm /home/admin/.error.tmp 2>/dev/null
+
+      if [ ${#error} -gt 0 ]; then
+
+        # output error message
+        echo ""
+        echo "# FAIL # SOMETHING WENT WRONG:"
+        echo "${error}"
+
+        # check if its possible to give background info on the error
+        notMachtingSeed=$(echo $error | grep -c 'unable to unpack chan backup')
+        if [ ${notMachtingSeed} -gt 0 ]; then
+          echo "--> ERROR BACKGROUND:"
+          echo "The WORD SEED is not matching the channel.backup file."
+          echo "Either there was an error in the word seed list or"
+          echo "or the channel.backup file is from another RaspiBlitz."
+          echo
+        fi
+
+        # basic info on error
+        echo "#################"
+        echo "To try upload of channel.backup again:"
+        echo "MAINMENU > REPAIR > REPAIR-LND > RETRYSCB"
+        echo
+        echo "Press ENTER to continue for now ..."
+        rm /home/admin/channel.backup
+        read key
+      else
+        rm /home/admin/channel.backup
+        dialog --title " OK Static-Channel-Backup IMPORT " --msgbox "
+LND accepted the channel.backup file you uploaded.
+It can now take up to an hour until you can see,
+if LND was able to recover funds from your channels.
+
+If you dont see any pending on-chain incoming funds
+within the next hour or you still missing funds, you
+can always retry the upload again under:
+MAINMENU > REPAIR > REPAIR-LND > RETRYSCB
+" 14 58
+      fi
+    fi
   fi
 
   #####################################
@@ -211,6 +259,9 @@ do
   # when setup is done & state is ready .. jump to main menu
   if [ "${setupPhase}" == "done" ] && [ "${state}" == "ready" ]; then
     # MAIN MENU
+    # remove higher scan rate on values
+    /home/admin/_cache.sh focus ln_default_locked -1
+    /home/admin/_cache.sh focus btc_default_synced -1
     echo "# 00mainMenu.sh"
     /home/admin/00mainMenu.sh
     # use the exit code from main menu as signal if menu loop should exited
@@ -220,32 +271,13 @@ do
   fi
 
   #####################################
-  # DURING SETUP: Handle System States 
+  # DURING SETUP: Handle System States
   #####################################
 
   if [ "${setupPhase}" != "done" ]; then
 
     #echo "# DURING SETUP: Handle System State (${state})"
 
-    # when no HDD on Vagrant - just print info & exit (admin info & exit)
-    if [ "${state}" == "noHDD" ] && [ ${vagrant} -gt 0 ]; then
-      echo "***********************************************************"
-      echo "VAGRANT INFO"
-      echo "***********************************************************"
-      echo "To connect a HDD data disk to your VagrantVM:"
-      echo "- shutdown VM with command: off"
-      echo "- open your VirtualBox GUI and select RaspiBlitzVM"
-      echo "- change the 'mass storage' settings"
-      echo "- add a second 'Primary Slave' drive to the already existing controller"
-      echo "- close VirtualBox GUI and run: vagrant up & vagrant ssh"
-      echo "***********************************************************"
-      echo "You can either create a new dynamic VDI with around 900GB or download"
-      echo "a VDI with a presynced blockchain to speed up setup. If you dont have 900GB"
-      echo "space on your laptop you can store the VDI file on an external drive."
-      echo "***********************************************************"
-      exit 1
-    fi
-
     # for all critical errors (admin info & exit)
     if [ "${state}" == "error" ] || [ "${state}" == "errorHDD" ]; then
       clear
@@ -269,6 +301,8 @@ do
       echo "https://github.com/rootzoll/raspiblitz#support"
       echo "command to shutdown --> off"
       exit 1
+    elif [ "${state}" == "" ]; then
+      echo "state(${state}) message(${message})"
     else
         # every other state just push as event to SSH frontend
         /home/admin/setup.scripts/eventInfoWait.sh "${state}" "${message}"
@@ -320,7 +354,7 @@ if [ "${setupPhase}" == "done" ]; then
     echo "LND command line options: lncli -h"
   fi
   if [ "${lightning}" == "cl" ]; then
-    echo "C-Lightning command line options: lightning-cli help"
+    echo "Core Lightning command line options: lightning-cli help"
   fi
 else
   echo "Your setup is not finished."

home.admin/00settingsMenuBasics.sh

@@ -6,10 +6,8 @@ source /home/admin/raspiblitz.info
 source /mnt/hdd/raspiblitz.conf
 
 echo "services default values"
-if [ ${#autoPilot} -eq 0 ]; then autoPilot="off"; fi
 if [ ${#autoUnlock} -eq 0 ]; then autoUnlock="off"; fi
 if [ ${#runBehindTor} -eq 0 ]; then runBehindTor="off"; fi
-if [ ${#autoNatDiscovery} -eq 0 ]; then autoNatDiscovery="off"; fi
 if [ ${#networkUPnP} -eq 0 ]; then networkUPnP="off"; fi
 if [ ${#touchscreen} -eq 0 ]; then touchscreen=0; fi
 if [ ${#lcdrotate} -eq 0 ]; then lcdrotate=0; fi
@@ -18,6 +16,8 @@ if [ ${#circuitbreaker} -eq 0 ]; then circuitbreaker="off"; fi
 if [ ${#clboss} -eq 0 ]; then clboss="off"; fi
 if [ ${#clEncryptedHSM} -eq 0 ]; then clEncryptedHSM="off"; fi
 if [ ${#clAutoUnlock} -eq 0 ]; then clAutoUnlock="off"; fi
+if [ ${#clWatchtowerClient} -eq 0 ]; then clWatchtowerClient="off"; fi
+if [ ${#blitzapi} -eq 0 ]; then blitzapi="off"; fi
 
 echo "# map LND to on/off"
 lndNode="off"
@@ -31,7 +31,7 @@ if [ "${lightning}" == "cl" ] || [ "${cl}" == "on" ]; then
   clNode="on"
 fi
 
-echo "map nextcloudbackup to on/off"
+echo "# map nextcloudbackup to on/off"
 NextcloudBackup="off"
 if [ $nextcloudBackupServer ] && [ $nextcloudBackupUser ] && [ $nextcloudBackupPassword ]; then NextcloudBackup="on"; fi
 
@@ -69,21 +69,6 @@ if [ ${touchscreen} -gt 0 ]; then
   touchscreenMenu='on'
 fi
 
-echo "# map autopilot to on/off"
-lndAutoPilotOn=$(sudo cat /mnt/hdd/lnd/lnd.conf 2>/dev/null | grep -c 'autopilot.active=1')
-if [ ${lndAutoPilotOn} -eq 1 ]; then
-  autoPilot="on"
-else
-  autoPilot="off"
-fi
-
-echo "# map keysend to on/off"
-keysend="on"
-source <(sudo /home/admin/config.scripts/lnd.keysend.sh status)
-if [ ${keysendOn} -eq 0 ]; then
-  keysend="off"
-fi
-
 echo "# map clboss to on/off"
 clbossMenu='off'
 if [ "${clboss}" == "on" ]; then
@@ -102,16 +87,24 @@ if [ "${clAutoUnlock}" == "on" ]; then
   clAutoUnlockMenu='on'
 fi
 
+echo "# map clWatchtowerClient to on/off"
+clWatchtowerClientMenu='off'
+if [ "${clWatchtowerClient}" == "on" ]; then
+  clWatchtowerClientMenu='on'
+fi
+
 # show select dialog
 echo "run dialog ..."
 
 # BASIC MENU INFO
 OPTIONS=()
 
+OPTIONS+=(A 'Blitz API + WebUI' ${blitzapi})
+
 # LCD options (only when running with LCD screen)
 if [ "${displayClass}" == "lcd" ]; then
-  OPTIONS+=(s 'Touchscreen' ${touchscreenMenu}) 
-  OPTIONS+=(r 'LCD Rotate' ${lcdrotateMenu})  
+  # OPTIONS+=(s 'Touchscreen (experimental)' ${touchscreenMenu})
+  OPTIONS+=(r 'LCD Rotate' ${lcdrotateMenu})
 fi
 
 # Important basic options
@@ -120,27 +113,30 @@ OPTIONS+=(z 'ZeroTier' ${zerotierSwitch})
 
 if [ ${#runBehindTor} -eq 0 ] || [ "${runBehindTor}" = "off" ]; then
   OPTIONS+=(y ${dynDomainMenu} ${domainValue})
-  OPTIONS+=(b 'BTC UPnP (AutoNAT)' ${networkUPnP})  
+  OPTIONS+=(b 'BTC UPnP (AutoNAT)' ${networkUPnP})
 fi
 OPTIONS+=(p 'Parallel Testnet/Signet' ${parallelTestnets})
 
-# LND & options (only when running LND)
-OPTIONS+=(m 'LND LIGHTNING LABS NODE' ${lndNode}) 
-if [ "${lndNode}" == "on" ]; then
-  OPTIONS+=(a '-LND Channel Autopilot' ${autoPilot}) 
-  OPTIONS+=(k '-LND Accept Keysend' ${keysend})  
-  OPTIONS+=(c '-LND Circuitbreaker (firewall)' ${circuitbreaker})  
-  OPTIONS+=(u '-LND Auto-Unlock' ${autoUnlock})  
-  OPTIONS+=(x '-LND StaticChannelBackup on Nextcloud' ${NextcloudBackup})
-  OPTIONS+=(e '-LND StaticChannelBackup USB Drive' ${LocalBackup})
-  OPTIONS+=(l '-LND UPnP (AutoNAT)' ${autoNatDiscovery})
+
+# Lightning options (only LND and/or CLN)
+if [ "${lndNode}" == "on" ] || [ "${clNode}" == "on" ]; then
+  OPTIONS+=(x 'SCB/Emergency-Backup on Nextcloud' ${NextcloudBackup})
+  OPTIONS+=(e 'SCB/Emergency-Backup USB Drive' ${LocalBackup})
 fi
 
-# C-Lightning & options/PlugIns
-OPTIONS+=(n 'CL C-LIGHTNING NODE' ${clNode}) 
+# LND & options (only when running LND)
+OPTIONS+=(m 'LND LIGHTNING LABS NODE' ${lndNode})
+if [ "${lndNode}" == "on" ]; then
+  OPTIONS+=(c '-LND Circuitbreaker (firewall)' ${circuitbreaker})
+  OPTIONS+=(u '-LND Auto-Unlock' ${autoUnlock})
+fi
+
+# Core Lightning & options/PlugIns
+OPTIONS+=(n 'CL CORE LIGHTNING NODE' ${clNode})
 if [ "${clNode}" == "on" ]; then
   OPTIONS+=(o '-CL CLBOSS Automatic Node Manager' ${clbossMenu})
   OPTIONS+=(h '-CL Wallet Encryption' ${clEncryptedHSMMenu})
+  OPTIONS+=(w '-CL Watchtower Client' ${clWatchtowerClientMenu})  
   if [ "${clEncryptedHSM}" == "on" ]; then
     OPTIONS+=(q '-CL Auto-Unlock' ${clAutoUnlockMenu})
   fi
@@ -165,16 +161,23 @@ fi
 needsReboot=0
 anychange=0
 
-# LND AUTOPILOT process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "a")
+# Blitz API + webUI process choice
+choice="off"; check=$(echo "${CHOICES}" | grep -c "A")
 if [ ${check} -eq 1 ]; then choice="on"; fi
-if [ "${autoPilot}" != "${choice}" ] && [ "${lndNode}" == "on" ]; then
-  echo "Autopilot Setting changed .."
+if [ "${blitzapi}" != "${choice}" ]; then
+  echo "Blitz API + webUI settings changed .."
   anychange=1
-  sudo /home/admin/config.scripts/lnd.autopilot.sh ${choice}
-  needsReboot=1
+  sudo /home/admin/config.scripts/blitz.web.api.sh ${choice} DEFAULT
+  sudo /home/admin/config.scripts/blitz.web.ui.sh ${choice} DEFAULT
+  errorOnInstall=$?
+  if [ "${choice}" =  "on" ]; then
+    whiptail --title " Installed Blitz API + webUI" --msgbox "\
+The Blitz API + webUI was installed.\n
+See the status screen for more info.\n
+" 10 35
+  fi
 else
-  echo "Autopilot Setting unchanged."
+  echo "Blitz API + webUI Setting unchanged."
 fi
 
 # Dynamic Domain
@@ -210,27 +213,6 @@ else
   echo "BTC UPnP Setting unchanged."
 fi
 
-# LND AutoNAT
-choice="off"; check=$(echo "${CHOICES}" | grep -c "l")
-if [ ${check} -eq 1 ]; then choice="on"; fi
-if [ "${autoNatDiscovery}" != "${choice}" ] && [ "${lndNode}" == "on" ]; then
-  echo "AUTO NAT Setting changed .."
-  anychange=1
-  if [ "${choice}" = "on" ]; then
-    echo "Starting autoNAT ..."
-    /home/admin/config.scripts/lnd.autonat.sh on
-    autoNatDiscovery="on"
-    needsReboot=1
-  else
-    echo "Stopping autoNAT ..."
-    /home/admin/config.scripts/lnd.autonat.sh off
-    autoNatDiscovery="off"
-    needsReboot=1
-  fi
-else
-  echo "LND AUTONAT Setting unchanged."
-fi
-
 # Tor process choice
 choice="off"; check=$(echo "${CHOICES}" | grep -c "t")
 if [ ${check} -eq 1 ]; then choice="on"; fi
@@ -247,14 +229,12 @@ RaspiBlitz will now install/activate Tor & after reboot run behind it.
 Please keep in mind that thru your LND node id & your previous IP history with your internet provider your lightning node could still be linked to your personal id even when running behind Tor. To unlink you from that IP history its recommended that after the switch/reboot to Tor you also use the REPAIR > RESET-LND option to create a fresh LND wallet. That might involve closing all channels & move your funds out of RaspiBlitz before that RESET-LND.
 " 16 76
 
-    # make sure AutoNAT & UPnP is off
-    /home/admin/config.scripts/lnd.autonat.sh off
     /home/admin/config.scripts/network.upnp.sh off
   fi
 
   # change Tor
   anychange=1
-  sudo /home/admin/config.scripts/internet.tor.sh ${choice}
+  sudo /home/admin/config.scripts/tor.network.sh ${choice}
   needsReboot=1
 
 else
@@ -272,7 +252,7 @@ if [ "${autoUnlock}" != "${choice}" ] && [ "${lndNode}" == "on" ]; then
     l1="AUTO-UNLOCK IS NOW OFF"
     if [ "${choice}" = "on" ]; then
       l1="AUTO-UNLOCK IS NOW ACTIVE"
-    fi  
+    fi
     dialog --title 'OK' --msgbox "\n${l1}\n" 9 50
     needsReboot=1
   fi
@@ -345,20 +325,6 @@ else
   echo "BackupdDevice setting unchanged."
 fi
 
-# LND Keysend process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "k")
-if [ ${check} -eq 1 ]; then choice="on"; fi
-if [ "${keysend}" != "${choice}" ] && [ "${lndNode}" == "on" ]; then
-  echo "keysend setting changed .."
-  anychange=1
-  sudo -u admin /home/admin/config.scripts/lnd.keysend.sh ${choice}
-  sudo systemctl restart lnd
-  dialog --msgbox "Accept Keysend on LND mainnet is now ${choice}.\n\nLND restarted - you might need to unlock wallet." 7 52
-  sudo -u admin /home/admin/config.scripts/lnd.unlock.sh
-else
-  echo "keysend setting unchanged."
-fi
-
 # ZeroTier process choice
 choice="off"; check=$(echo "${CHOICES}" | grep -c "z")
 if [ ${check} -eq 1 ]; then choice="on"; fi
@@ -366,19 +332,11 @@ if [ "${zerotierSwitch}" != "${choice}" ]; then
   echo "zerotier setting changed .."
   anychange=1
   error=""
-  source <(sudo -u admin /home/admin/config.scripts/bonus.zerotier.sh ${choice})
-  if [ "${choice}" == "on" ]; then
-    if [ ${#error} -eq 0 ]; then
-      dialog --msgbox "Your RaspiBlitz joined the ZeroTier network." 6 46
-    else
-      if [ "${error}" != "cancel" ]; then
-        dialog --msgbox "ZeroTier Error:\n${error}" 8 46
-      fi
-    fi
-  else
+  sudo -u admin /home/admin/config.scripts/bonus.zerotier.sh ${choice}
+  if [ "${choice}" != "on" ]; then
     dialog --msgbox "ZeroTier is now OFF." 5 46
   fi
-  
+
 else
   echo "ZeroTier setting unchanged."
 fi
@@ -414,17 +372,24 @@ choice="off"; check=$(echo "${CHOICES}" | grep -c "n")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${clNode}" != "${choice}" ]; then
   anychange=1
-  echo "# C-Lightning NODE Setting changed .."
+  echo "# Core Lightning NODE Setting changed .."
   if [ "${choice}" = "on" ]; then
     echo "# turning ON"
     /home/admin/config.scripts/cl.install.sh on mainnet
-    sudo /home/admin/config.scripts/cl.install.sh display-seed mainnet
+    # generate wallet from seedwords or just display (write to dev/null to not write seed words to logs)
+    echo "Generating CL wallet seedwords .."
+    /home/admin/config.scripts/cl.hsmtool.sh new mainnet noninteractive
     if [ "${testnet}" == "on" ]; then
+      # no seed for testnet
+      echo "Turn on CL testnet .."
       /home/admin/config.scripts/cl.install.sh on testnet
     fi
     if [ "${signet}" == "on" ]; then
+      # no seed for signet
+      echo "Turn on CL signet .."
       /home/admin/config.scripts/cl.install.sh on signet
     fi
+
   else
     echo "# turning OFF"
     /home/admin/config.scripts/cl.install.sh off mainnet
@@ -432,7 +397,7 @@ if [ "${clNode}" != "${choice}" ]; then
     /home/admin/config.scripts/cl.install.sh off signet
   fi
 else
-  echo "C-Lightning NODE setting unchanged."
+  echo "Core Lightning NODE setting unchanged."
 fi
 
 # CLBOSS process choice
@@ -441,7 +406,16 @@ if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${clboss}" != "${choice}" ] && [ "${clNode}" == "on" ]; then
   echo "CLBOSS Setting changed .."
   anychange=1
-  sudo /home/admin/config.scripts/cl-plugin.clboss.sh ${choice}
+  if [ ${choice} = on ]; then
+    if /home/admin/config.scripts/cl-plugin.clboss.sh info; then
+      sudo /home/admin/config.scripts/cl-plugin.clboss.sh on
+    else
+      echo "CLBOSS install was cancelled."
+      sleep 2
+    fi
+  else
+    sudo /home/admin/config.scripts/cl-plugin.clboss.sh off
+  fi
   needsReboot=0
 else
   echo "CLBOSS Setting unchanged."
@@ -454,7 +428,7 @@ if [ "${clEncryptedHSM}" != "${choice}" ] && [ "${clNode}" == "on" ]; then
   echo "clEncryptedHSM Setting changed .."
   anychange=1
   if [ "${choice}" == "on" ]; then
-    /home/admin/config.scripts/cl.hsmtool.sh encrypt mainnet
+    sudo /home/admin/config.scripts/cl.hsmtool.sh encrypt mainnet
   else
     /home/admin/config.scripts/cl.hsmtool.sh decrypt mainnet
   fi
@@ -479,10 +453,33 @@ else
   echo "clAutoUnlock Setting unchanged."
 fi
 
+# clWatchtowerClient process choice
+choice="off"; check=$(echo "${CHOICES}" | grep -c "w")
+if [ ${check} -eq 1 ]; then choice="on"; fi
+if [ "${clWatchtowerClient}" != "${choice}" ] && [ "${clNode}" == "on" ]; then
+  echo "CL WATCHTOWER CLIENT Setting changed .."
+  anychange=1
+
+  if [ ${choice} = on ]; then
+    if /home/admin/config.scripts/cl-plugin.watchtower-client.sh info; then
+      sudo /home/admin/config.scripts/cl-plugin.watchtower-client.sh on
+    else
+      echo "CL WATCHTOWER CLIENT install was cancelled."
+      sleep 2
+    fi
+  else
+    sudo /home/admin/config.scripts/cl-plugin.watchtower-client.sh off
+  fi
+  needsReboot=0
+else
+  echo "CL WATCHTOWER CLIENT Setting unchanged."
+fi
+
 # parallel testnet process choice
 choice="off"; check=$(echo "${CHOICES}" | grep -c "p")
 if [ ${check} -eq 1 ]; then choice="on"; fi
-if [ "${testnet}" != "${choice}" ]; then
+if [ "${testnet}" != "${choice}" ] || \
+   [ "${signet}" != "${choice}" ]; then
   echo "# Parallel Testnets Setting changed .."
   anychange=1
   if [ "${choice}" = "on" ]; then
@@ -495,9 +492,9 @@ if [ "${testnet}" != "${choice}" ]; then
     if [ "${lightning}" == "cl" ] || [ "${cl}" == "on" ]; then
       /home/admin/config.scripts/cl.install.sh on testnet
       /home/admin/config.scripts/cl.install.sh on signet
-    fi 
+    fi
   else
-    # just turn al lightning testnets off (even if not on before)
+    # just turn all lightning testnets off (even if not on before)
     /home/admin/config.scripts/lnd.install.sh off testnet
     /home/admin/config.scripts/lnd.install.sh off signet
     /home/admin/config.scripts/cl.install.sh off testnet

home.admin/00settingsMenuServices.sh

@@ -1,5 +1,5 @@
 #!/bin/bash
-
+ 
 # get raspiblitz config
 echo "get raspiblitz config"
 source /home/admin/raspiblitz.info
@@ -15,6 +15,7 @@ if [ ${#BTCPayServer} -eq 0 ]; then BTCPayServer="off"; fi
 if [ ${#ElectRS} -eq 0 ]; then ElectRS="off"; fi
 if [ ${#lndmanage} -eq 0 ]; then lndmanage="off"; fi
 if [ ${#joinmarket} -eq 0 ]; then joinmarket="off"; fi
+if [ ${#jam} -eq 0 ]; then jam="off"; fi
 if [ ${#LNBits} -eq 0 ]; then LNBits="off"; fi
 if [ ${#mempoolExplorer} -eq 0 ]; then mempoolExplorer="off"; fi
 if [ ${#bos} -eq 0 ]; then bos="off"; fi
@@ -22,10 +23,14 @@ if [ ${#pyblock} -eq 0 ]; then pyblock="off"; fi
 if [ ${#thunderhub} -eq 0 ]; then thunderhub="off"; fi
 if [ ${#sphinxrelay} -eq 0 ]; then sphinxrelay="off"; fi
 if [ ${#lit} -eq 0 ]; then lit="off"; fi
+if [ ${#lndg} -eq 0 ]; then lndg="off"; fi
 if [ ${#whitepaper} -eq 0 ]; then whitepaper="off"; fi
 if [ ${#chantools} -eq 0 ]; then chantools="off"; fi
-if [ ${#sparko} -eq 0 ]; then sparko="off"; fi
-if [ ${#spark} -eq 0 ]; then spark="off"; fi
+if [ ${#helipad} -eq 0 ]; then helipad="off"; fi
+if [ ${#lightningtipbot} -eq 0 ]; then lightningtipbot="off"; fi
+if [ ${#fints} -eq 0 ]; then fints="off"; fi
+if [ ${#lndk} -eq 0 ]; then lndk="off"; fi
+if [ ${#labelbase} -eq 0 ]; then labelbase="off"; fi
 
 # show select dialog
 echo "run dialog ..."
@@ -34,37 +39,46 @@ OPTIONS=()
 
 # just available for BTC
 if [ "${network}" == "bitcoin" ]; then
-  OPTIONS+=(e 'BTC Electrum Rust Server' ${ElectRS})
-  OPTIONS+=(p 'BTC PayServer' ${BTCPayServer})
-  OPTIONS+=(b 'BTC RPC-Explorer' ${BTCRPCexplorer})
-  OPTIONS+=(s 'BTC Specter Desktop' ${specter})
-  OPTIONS+=(a 'BTC Mempool Space' ${mempoolExplorer})
-  OPTIONS+=(j 'BTC JoinMarket+JoininBox menu' ${joinmarket})
-  OPTIONS+=(w 'BTC Download Bitcoin Whitepaper' ${whitepaper})
+  OPTIONS+=(ea 'BTC Electrum Rust Server' ${ElectRS})
+  OPTIONS+=(pa 'BTC PayServer' ${BTCPayServer})
+  OPTIONS+=(ba 'BTC RPC-Explorer' ${BTCRPCexplorer})
+  OPTIONS+=(sa 'BTC Specter Desktop' ${specter})
+  OPTIONS+=(aa 'BTC Mempool Space' ${mempoolExplorer})
+  OPTIONS+=(ja 'BTC JoinMarket+JoininBox menu' ${joinmarket})
+  OPTIONS+=(za 'BTC Jam (JoinMarket WebUI)' ${jam})
+  OPTIONS+=(wa 'BTC Download Bitcoin Whitepaper' ${whitepaper})
+  OPTIONS+=(ls 'BTC Labelbase' ${labelbase})
+fi
+
+# available for both LND & c-lightning
+if [ "${lnd}" == "on" ] || [ "${cl}" == "on" ]; then
+  OPTIONS+=(ia 'LNbits (Lightning Accounts)' ${LNBits})
+  OPTIONS+=(ga 'LightningTipBot' ${lightningtipbot})
 fi
 
 # just available for LND
 if [ "${lightning}" == "lnd" ] || [ "${lnd}" == "on" ]; then
-  OPTIONS+=(r 'LND RTL Webinterface' ${rtlWebinterface})
-  OPTIONS+=(t 'LND ThunderHub' ${thunderhub})
-  OPTIONS+=(l 'LND LIT (loop, pool, faraday)' ${lit})
-  OPTIONS+=(i 'LND LNbits' ${LNBits})
-  OPTIONS+=(o 'LND Balance of Satoshis' ${bos})
-  OPTIONS+=(y 'LND PyBLOCK' ${pyblock})
-  OPTIONS+=(h 'LND ChannelTools (Fund Rescue)' ${chantools})
-  OPTIONS+=(x 'LND Sphinx-Relay' ${sphinxrelay})
+  OPTIONS+=(ra 'LND RTL Webinterface' ${rtlWebinterface})
+  OPTIONS+=(ta 'LND ThunderHub' ${thunderhub})
+  OPTIONS+=(la 'LND LIT (loop, pool, faraday)' ${lit})
+  OPTIONS+=(gb 'LND LNDg (auto-rebalance, auto-fees)' ${lndg})
+  OPTIONS+=(oa 'LND Balance of Satoshis' ${bos})
+  OPTIONS+=(ya 'LND PyBLOCK' ${pyblock})
+  OPTIONS+=(ha 'LND ChannelTools (Fund Rescue)' ${chantools})
+  OPTIONS+=(fa 'LND Helipad Boostagram reader' ${helipad})
+  OPTIONS+=(lb 'LND LNDK (experimental BOLT 12)' ${lndk})
 fi
 
 # just available for CL
 if [ "${lightning}" == "cl" ] || [ "${cl}" == "on" ]; then
-  OPTIONS+=(c 'C-Lightning RTL Webinterface' ${crtlWebinterface})
-  OPTIONS+=(k 'C-Lightning Sparko WebWallet' ${sparko})
-  OPTIONS+=(n 'C-Lightning Spark Wallet' ${spark})
+  OPTIONS+=(ca 'Core Lightning RTL Webinterface' ${crtlWebinterface})
 fi
 
+OPTIONS+=(fn 'FinTS/HBCI Interface (experimental)' ${fints})
+
 CHOICES=$(dialog --title ' Additional Mainnet Services ' \
           --checklist ' use spacebar to activate/de-activate ' \
-          25 55 18  "${OPTIONS[@]}" 2>&1 >/dev/tty)
+          27 55 20  "${OPTIONS[@]}" 2>&1 >/dev/tty)
 
 dialogcancel=$?
 echo "done dialog"
@@ -84,7 +98,7 @@ needsReboot=0
 anychange=0
 
 # RTL process choice (LND)
-choice="off"; check=$(echo "${CHOICES}" | grep -c "r")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "ra")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 
 if [ "${rtlWebinterface}" != "${choice}" ]; then
@@ -99,7 +113,7 @@ if [ "${rtlWebinterface}" != "${choice}" ]; then
       sleep 10
       /home/admin/config.scripts/bonus.rtl.sh menu lnd mainnet
     else
-      l1="!!! FAIL on RTL lnd install !!!"
+      l1="# FAIL on RTL lnd install #"
       l2="Try manual install on terminal after reboot with:"
       l3="/home/admin/config.scripts/bonus.rtl.sh on lnd mainnet"
       dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -109,8 +123,8 @@ else
   echo "RTL-lnd Webinterface Setting unchanged."
 fi
 
-# RTL process choice (C-Lightning)
-choice="off"; check=$(echo "${CHOICES}" | grep -c "c")
+# RTL process choice (Core Lightning)
+choice="off"; check=$(echo "${CHOICES}" | grep -c "ca")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${crtlWebinterface}" != "${choice}" ]; then
   echo "RTL-cl Webinterface Setting changed .."
@@ -124,7 +138,7 @@ if [ "${crtlWebinterface}" != "${choice}" ]; then
       sleep 10
       /home/admin/config.scripts/bonus.rtl.sh menu cl mainnet
     else
-      l1="!!! FAIL on RTL C-Lightning install !!!"
+      l1="# FAIL on RTL Core Lightning install #"
       l2="Try manual install on terminal after reboot with:"
       l3="/home/admin/config.scripts/bonus.rtl.sh on cl mainnet"
       dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -135,7 +149,7 @@ else
 fi
 
 # BTC-RPC-Explorer process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "b")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "ba")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${BTCRPCexplorer}" != "${choice}" ]; then
   echo "RTL Webinterface Setting changed .."
@@ -152,7 +166,7 @@ When finished use the new 'EXPLORE' entry in Main Menu for more info.\n
 " 14 50
       needsReboot=1
     else
-      l1="!!! FAIL on BTC-RPC-Explorer install !!!"
+      l1="# FAIL on BTC-RPC-Explorer install #"
       l2="Try manual install on terminal after reboot with:"
       l3="/home/admin/config.scripts/bonus.btc-rpc-explorer.sh on"
       dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -163,7 +177,7 @@ else
 fi
 
 # Specter Desktop process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "s")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "sa")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${specter}" != "${choice}" ]; then
   echo "Specter Desktop Setting changed .."
@@ -175,7 +189,7 @@ if [ "${specter}" != "${choice}" ]; then
       sudo systemctl start specter
       /home/admin/config.scripts/bonus.specter.sh menu
     else
-      l1="!!! FAIL on Specter Desktop install !!!"
+      l1="# FAIL on Specter Desktop install #"
       l2="Try manual install on terminal after reboot with:"
       l3="/home/admin/config.scripts/bonus.specter.sh on"
       dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -186,7 +200,7 @@ else
 fi
 
 # ElectRS process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "e")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "ea")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${ElectRS}" != "${choice}" ]; then
   echo "ElectRS Setting changed .."
@@ -213,7 +227,7 @@ When finished use the new 'ELECTRS' entry in Main Menu for more info.\n
 " 14 50
       needsReboot=0
       else
-        l1="!!! FAIL on ElectRS install !!!"
+        l1="# FAIL on ElectRS install #"
         l2="Try manual install on terminal after reboot with:"
         l3="/home/admin/config.scripts/bonus.electrs.sh on"
         dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -236,7 +250,7 @@ else
 fi
 
 # BTCPayServer process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "p")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "pa")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${BTCPayServer}" != "${choice}" ]; then
   echo "BTCPayServer setting changed .."
@@ -272,7 +286,7 @@ else
 fi
 
 # LNDMANAGE process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "m")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "ab")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${lndmanage}" != "${choice}" ]; then
   echo "lndmanage Setting changed .."
@@ -287,7 +301,7 @@ else
 fi
 
 # CHANTOOLS process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "h")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "ha")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${chantools}" != "${choice}" ]; then
   echo "chantools Setting changed .."
@@ -302,7 +316,7 @@ else
 fi
 
 # Balance of Satoshis process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "o")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "oa")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${bos}" != "${choice}" ]; then
   echo "Balance of Satoshis Setting changed .."
@@ -317,7 +331,7 @@ else
 fi
 
 # PyBLOCK process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "y")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "ya")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${pyblock}" != "${choice}" ]; then
   echo "PyBLOCK Setting changed .."
@@ -332,7 +346,7 @@ else
 fi
 
 # thunderhub process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "t")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "ta")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${thunderhub}" != "${choice}" ]; then
   echo "ThunderHub Setting changed .."
@@ -346,7 +360,7 @@ if [ "${thunderhub}" != "${choice}" ]; then
       sleep 10
       /home/admin/config.scripts/bonus.thunderhub.sh menu
     else
-      l1="!!! FAIL on ThunderHub install !!!"
+      l1="# FAIL on ThunderHub install #"
       l2="Try manual install on terminal after reboot with:"
       l3="/home/admin/config.scripts/bonus.thunderhub.sh on"
       dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -357,12 +371,12 @@ else
 fi
 
 # LNbits process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "i")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "ia")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${LNBits}" != "${choice}" ]; then
   echo "LNbits Setting changed .."
   anychange=1
-  sudo -u admin /home/admin/config.scripts/bonus.lnbits.sh ${choice}
+  sudo -u admin /home/admin/config.scripts/bonus.lnbits.sh ${choice} ${lightning}
   if [ "${choice}" =  "on" ]; then
     sudo systemctl start lnbits
     sudo -u admin /home/admin/config.scripts/bonus.lnbits.sh menu
@@ -371,8 +385,23 @@ else
   echo "LNbits setting unchanged."
 fi
 
+# LightningTipBot process choice
+choice="off"; check=$(echo "${CHOICES}" | grep -c "ga")
+if [ ${check} -eq 1 ]; then choice="on"; fi
+if [ "${lightningtipbot}" != "${choice}" ]; then
+  echo "LightningTipBot Setting changed .."
+  anychange=1
+  sudo -u admin /home/admin/config.scripts/bonus.lightningtipbot.sh ${choice}
+  if [ "${choice}" =  "on" ]; then
+    sudo systemctl start lightningtipbot
+    sudo -u admin /home/admin/config.scripts/bonus.lightningtipbot.sh menu
+  fi
+else
+  echo "LightningTipBot setting unchanged."
+fi
+
 # LIT (Lightning Terminal)
-choice="off"; check=$(echo "${CHOICES}" | grep -c "l")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "la")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${lit}" != "${choice}" ]; then
   echo "LIT Setting changed .."
@@ -386,27 +415,74 @@ else
   echo "LIT setting unchanged."
 fi
 
-# Sphinx Relay
-choice="off"; check=$(echo "${CHOICES}" | grep -c "x")
+# LNDg
+choice="off"; check=$(echo "${CHOICES}" | grep -c "gb")
 if [ ${check} -eq 1 ]; then choice="on"; fi
-if [ "${sphinxrelay}" != "${choice}" ]; then
-  echo "Sphinx-Relay Setting changed .."
+if [ "${lndg}" != "${choice}" ]; then
+  echo "LNDg Setting changed .."
   anychange=1
-  sudo -u admin /home/admin/config.scripts/bonus.sphinxrelay.sh ${choice}
+  databasechoice=""
+  isDatabase=$(sudo ls /mnt/hdd/app-data/lndg/data/db.sqlite3 2>/dev/null | grep -c 'db.sqlite3')
+  if ! [ ${isDatabase} -eq 0 ]; then
+    if [ "${choice}" = "off" ]; then
+      whiptail --title "Delete LNDg Database?" \
+      --yes-button "Keep Database" \
+      --no-button "Delete Database" \
+      --yesno "LNDg is getting uninstalled. If you keep the database, you will be able to reuse the data should you choose to re-install. Do you wish to keep the database?" 10 80
+      if [ $? -eq 1 ]; then
+        databasechoice="deletedatabase"
+      fi
+    else
+      whiptail --title "Use Existing LNDg Database?" \
+      --yes-button "Use existing database" \
+      --no-button "Start a new database" \
+      --yesno "LNDg is getting installed, and there is an existing database. You may use the existing database, which will include your old password and all of your old data, or you may start with a clean database. Do you wish to use the existing database?" 10 110
+      if [ $? -eq 1 ]; then
+        databasechoice="deletedatabase"
+      fi
+    fi
+  fi
+  sudo -u admin /home/admin/config.scripts/bonus.lndg.sh ${choice} ${databasechoice}
   if [ "${choice}" =  "on" ]; then
-    echo "Giving service 1 minute to start up ... (please wait) ..."
-    sleep 60
-    whiptail --title " Installed Sphinx Server" --msgbox "\
-Sphinx Server was installed.\n
-Use the new 'SPHINX' entry in Main Menu for more info.\n
-" 10 35
+    sudo -u admin /home/admin/config.scripts/bonus.lndg.sh menu
   fi
 else
-  echo "Sphinx Relay unchanged."
+  echo "LNDg unchanged."
+fi
+
+# Helipad
+choice="off"; check=$(echo "${CHOICES}" | grep -c "fa")
+if [ ${check} -eq 1 ]; then choice="on"; fi
+if [ "${helipad}" != "${choice}" ]; then
+  echo "Helipad setting changed .."
+  anychange=1
+  sudo -u admin /home/admin/config.scripts/bonus.helipad.sh ${choice}
+  if [ "${choice}" =  "on" ]; then
+    sudo systemctl start helipad
+    sudo -u admin /home/admin/config.scripts/bonus.helipad.sh menu
+  fi
+else
+  echo "Helipad setting unchanged."
+fi
+
+# LNDK
+choice="off"; check=$(echo "${CHOICES}" | grep -c "lb")
+if [ ${check} -eq 1 ]; then choice="on"; fi
+if [ "${lndk}" != "${choice}" ]; then
+  echo "LNDK Setting changed .."
+  anychange=1
+  sudo -u admin /home/admin/config.scripts/bonus.lndk.sh ${choice}
+  if [ "${choice}" =  "on" ]; then
+    whiptail --title " Installed LNDK" --msgbox "\
+LNDK was installed.\n
+" 10 45
+  fi
+else
+  echo "LNDK Setting unchanged."
 fi
 
 # JoinMarket process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "j")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "ja")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${joinmarket}" != "${choice}" ]; then
   echo "JoinMarket setting changed .."
@@ -434,8 +510,37 @@ else
   echo "JoinMarket not changed."
 fi
 
+# Jam process choice
+choice="off"; check=$(echo "${CHOICES}" | grep -c "za")
+if [ ${check} -eq 1 ]; then choice="on"; fi
+if [ "${jam}" != "${choice}" ]; then
+  echo "Jam setting changed .."
+  # check if TOR is installed
+  source /mnt/hdd/raspiblitz.conf
+  if [ "${choice}" =  "on" ] && [ "${runBehindTor}" = "off" ]; then
+    whiptail --title " Use Tor with Jam" --msgbox "\
+It is highly recommended to use Tor with Jam.\n
+Please activate TOR in SERVICES first.\n
+Then try activating Jam again in SERVICES.\n
+" 13 42
+  else
+    anychange=1
+    sudo /home/admin/config.scripts/bonus.jam.sh ${choice}
+    errorOnInstall=$?
+    if [ "${choice}" =  "on" ]; then
+      if [ ${errorOnInstall} -eq 0 ]; then
+         sudo /home/admin/config.scripts/bonus.jam.sh menu
+      else
+        whiptail --title 'FAIL' --msgbox "Jam installation is cancelled\nTry again from the menu or install from the terminal with:\nsudo /home/admin/config.scripts/bonus.jam.sh on" 9 65
+      fi
+    fi
+  fi
+else
+  echo "Jam not changed."
+fi
+
 # Mempool process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "a")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "aa")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${mempoolExplorer}" != "${choice}" ]; then
   echo "Mempool Explorer settings changed .."
@@ -451,7 +556,7 @@ This can take ~7 hours on a RPi4 with SSD. Monitor the progress on the LCD.\n
 When finished use the new 'MEMPOOL' entry in Main Menu for more info.\n
 " 14 50
     else
-      l1="!!! FAIL on Mempool Explorer install !!!"
+      l1="# FAIL on Mempool Explorer install #"
       l2="Try manual install on terminal after reboot with:"
       l3="/home/admin/config.scripts/bonus.mempool.sh on"
       dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
@@ -462,7 +567,7 @@ else
 fi
 
 # Whitepaper process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "w")
+choice="off"; check=$(echo "${CHOICES}" | grep -c "wa")
 if [ ${check} -eq 1 ]; then choice="on"; fi
 if [ "${whitepaper}" != "${choice}" ]; then
   echo "Whitepaper setting changed .."
@@ -476,48 +581,30 @@ else
   echo "Whitepaper setting unchanged."
 fi
 
-# sparko process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "k")
+# labelbase process choice
+choice="off"; check=$(echo "${CHOICES}" | grep -c "ls")
 if [ ${check} -eq 1 ]; then choice="on"; fi
-if [ "${sparko}" != "${choice}" ]; then
-  echo "# Sparko on mainnet Setting changed .."
+if [ "${labelbase}" != "${choice}" ]; then
+  echo "Labelbase setting changed .."
   anychange=1
-  /home/admin/config.scripts/cl-plugin.sparko.sh ${choice} mainnet
-  errorOnInstall=$?
-  if [ "${choice}" =  "on" ]; then
-    if [ ${errorOnInstall} -eq 0 ]; then
-      /home/admin/config.scripts/cl-plugin.sparko.sh menu mainnet
-    else
-      l1="# !!! FAIL on Sparko on mainnet install !!!"
-      l2="# Try manual install on terminal after reboot with:"
-      l3="/home/admin/config.scripts/cl-plugin.sparko.sh on mainnet"
-      dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
-    fi
+  sudo -u admin /home/admin/config.scripts/bonus.labelbase.sh ${choice}
+  source /mnt/hdd/raspiblitz.conf
+  if [ "${labelbase}" =  "on" ]; then
+    sudo -u admin /home/admin/config.scripts/bonus.labelbase.sh menu
   fi
 else
-  echo "# Sparko on mainnet Setting unchanged."
+  echo "Labelbase setting unchanged."
 fi
 
-# spark wallet process choice
-choice="off"; check=$(echo "${CHOICES}" | grep -c "n")
+# fints process choice  
+choice="off"; check=$(echo "${CHOICES}" | grep -c "fn")
 if [ ${check} -eq 1 ]; then choice="on"; fi
-if [ "${spark}" != "${choice}" ]; then
-  echo "# Spark Wallet on mainnet Setting changed .."
+if [ "${fints}" != "${choice}" ]; then
+  echo "fints setting changed .."
   anychange=1
-  /home/admin/config.scripts/cl.spark.sh ${choice} mainnet
-  errorOnInstall=$?
-  if [ "${choice}" =  "on" ]; then
-    if [ ${errorOnInstall} -eq 0 ]; then
-      /home/admin/config.scripts/cl.spark.sh menu mainnet
-    else
-      l1="# !!! FAIL on Spark Wallet on mainnet install !!!"
-      l2="# Try manual install on terminal after reboot with:"
-      l3="/home/admin/config.scripts/cl.spark.sh on mainnet"
-      dialog --title 'FAIL' --msgbox "${l1}\n${l2}\n${l3}" 7 65
-    fi
-  fi
+  sudo -u admin /home/admin/config.scripts/bonus.fints.sh ${choice}
 else
-  echo "# Spark Wallet on mainnet Setting unchanged."
+  echo "fints setting unchanged."
 fi
 
 if [ ${anychange} -eq 0 ]; then

home.admin/97addMobileWallet.sh

@@ -12,23 +12,21 @@ if [ "$1" = "-h" ] || [ "$1" = "-help" ];then
   echo "chain=${chain}"
 fi
 
-justLocal=1
-aks4IP2TOR=0
-
 source <(/home/admin/config.scripts/network.aliases.sh getvars $1 $2)
 
+
+justLocal=1
+
 # if TOR is activated then outside reach is possible (no notice)
 if [ "${runBehindTor}" = "on" ]; then
   echo "# runBehindTor ON"
   justLocal=0
-  aks4IP2TOR=1
 fi
 
 # if dynDomain is set connect from outside is possible (no notice)
 if [ ${#dynDomain} -gt 0 ]; then
   echo "# dynDomain ON"
   justLocal=0
-  aks4IP2TOR=0
 fi
 
 # if sshtunnel to 10009/8080 then outside reach is possible (no notice)
@@ -36,19 +34,14 @@ isForwarded=$(echo ${sshtunnel} | grep -c "10009<")
 if [ ${isForwarded} -gt 0 ]; then
   echo "# forward 10009 ON"
   justLocal=0
-  aks4IP2TOR=0
 fi
+
 isForwarded=$(echo ${sshtunnel} | grep -c "8080<")
 if [ ${isForwarded} -gt 0 ]; then
   echo "# forward 8080 ON"
   justLocal=0
-  aks4IP2TOR=0
 fi
 
-# echo "# justLocal(${justLocal})"
-# echo "# aks4IP2TOR(${aks4IP2TOR})"
-# read key
-
 # check if dynamic domain is set
 if [ ${justLocal} -eq 1 ]; then
   whiptail --title " Just Local Network? " --yesno "If you want to connect with your RaspiBlitz
@@ -74,88 +67,20 @@ For full support switch to mainnet.
 fi
 
 # function to call for wallets that support TOR
-connect="ip"
-choose_IP_or_TOR()
-{
-  whiptail --title " How to Connect? " \
-	--yes-button "TOR" \
-	--no-button "IP/Domain" \
-	--yesno "The mobile wallet you selected supports TOR.\nDo you want to connect over TOR to your RaspiBlitz or fallback to Domain/IP?" 9 60
-	if [ $? -eq 0 ]; then
-	  echo "# yes-button -> TOR"
-	  connect="tor" 
-	else
-	  echo "# no-button -> IP"
-	  connect="ip"
-	fi
-}
-
-# function to if already activated or user wants to activate IP2TOR
-# needs parameter: #1 "LND-REST-API" or "LND-GRPC-API"
-ip2tor=""
-checkIP2TOR()
-{
-
-  # check if IP2TOR service is already available
-  error=""
-  ip2tor=""
-  source <(/home/admin/config.scripts/blitz.subscriptions.ip2tor.py subscription-by-service $1)
-  if [ ${#error} -eq 0 ]; then
-    ip2tor="$1"
-  fi
-
-  #echo "# ip2tor(${ip2tor})"
-  #echo "# aks4IP2TOR(${aks4IP2TOR})"
-  #read key
-  
-  # if IP2TOR is not already available:
-  # and the checks from above showed there is SSH forwarding / dynDNS
-  # then ask user if IP2TOR subscription is wanted
-  if [ ${#ip2tor} -eq 0 ] && [ ${aks4IP2TOR} -eq 1 ]; then
-    whiptail --title " Want to use a IP2TOR Bridge? " --yes-button "Go To Shop" --no-button "No Thanks" --yesno "It can be hard to connect to your RaspiBlitz when away from home.\n\nDo you like to subscribe to a IP2TOR bridge service (that will give you a public IP while hidden behind TOR) and make it more easy to connect your mobile wallet?" 12 60
-  	if [ $? -eq 0 ]; then
-  	  echo "# yes-button -> Send To Shop"
-	  port="10009"
-	  toraddress=$(sudo cat /mnt/hdd/tor/lndrpc10009/hostname)
-	  if [ "$1" == "LND-REST-API" ]; then
-	    port="8080"
-		toraddress=$(sudo cat /mnt/hdd/tor/lndrest8080/hostname)
-	  fi
-
-	  userHasActiveChannels=$(sudo -u bitcoin lncli listchannels | grep -c '"active": true')
-	  if [ ${userHasActiveChannels} -gt 0 ]; then
-	    sudo -u admin /home/admin/config.scripts/blitz.subscriptions.ip2tor.py create-ssh-dialog "$1" "$toraddress" "$port"
-	  else
-	  	whiptail --title " Lightning not Ready " --msgbox "\nYou need at least one active Lightning channel.\n\nPlease make sure that your node is funded and\nyou have a confirmed and active channel running.\nThen try again to connect the mobile wallet." 13 52
-	  	exit 0
-	  fi
-      clear
-	fi
-  fi
-
-  # check again if IP2TOR service is now already available
-  error=""
-  source <(/home/admin/config.scripts/blitz.subscriptions.ip2tor.py subscription-by-service "$1")
-  if [ ${#error} -eq 0 ]; then
-    ip2tor="$1"
-  fi
-}
-
 OPTIONS=()
 
 if [ "${lightning}" == "lnd" ] || [ "${lnd}" == "on" ]; then
-  	# Zap deactivated for now - see: https://github.com/rootzoll/raspiblitz/issues/2198#issuecomment-822808428
 	OPTIONS+=(ZEUS_IOS "Zeus to LND (iOS)")
 	OPTIONS+=(ZEUS_ANDROID "Zeus to LND (Android)")
+	OPTIONS+=(ZAP_IOS "Zap to LND (iOS)")
+	OPTIONS+=(ZAP_ANDROID "Zap/Bitbanana to LND (Android)")
 	OPTIONS+=(SPHINX "Sphinx Chat to LND (Android/iOS)")
   	OPTIONS+=(SENDMANY_ANDROID "SendMany to LND (Android)")
 	OPTIONS+=(FULLYNODED_LND "Fully Noded to LND REST (iOS+Tor)") 
 fi
 
 if [ "${lightning}" == "cl" ] || [ "${cl}" == "on" ]; then
-	OPTIONS+=(ZEUS_CLREST "Zeus to C-lightningREST (Android or iOS)")
-	OPTIONS+=(ZEUS_SPARK "Zeus to Sparko (Android or iOS)")
-	OPTIONS+=(SPARK "Spark Wallet to Sparko (Android - EXPERIMENTAL)" )
+	OPTIONS+=(ZEUS_CLREST "Zeus to Core LightningREST (Android or iOS)")
 	OPTIONS+=(FULLYNODED_CL "Fully Noded to CL REST (iOS+Tor)")
 fi
 
@@ -164,9 +89,9 @@ if [ "${runBehindTor}" = "on" ]; then
   OPTIONS+=(FULLYNODED_BTC "Fully Noded to bitcoinRPC (iOS+Tor)") 
 fi
 
-CHOICE=$(whiptail --clear --title "Choose Mobile Wallet" --menu "" 16 75 10 "${OPTIONS[@]}" 2>&1 >/dev/tty)
+CHOICE=$(whiptail --clear --title "Choose Mobile Wallet" --menu "" 18 75 12 "${OPTIONS[@]}" 2>&1 >/dev/tty)
 
-/home/admin/config.scripts/blitz.display.sh hide
+sudo /home/admin/config.scripts/blitz.display.sh hide
 
 clear
 echo "creating install info ..."
@@ -194,69 +119,40 @@ case $CHOICE in
 	  ;;
   ZAP_IOS)
       appstoreLink="https://apps.apple.com/us/app/zap-bitcoin-lightning-wallet/id1406311960"
-      #/home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
-	  #whiptail --title "Install Testflight and Zap on your iOS device" \
-	  #	--yes-button "continue" \
-	  #	--no-button "link as QR code" \
-	  #	--yesno "Search for 'Zap Bitcoin' in Apple Appstore for basic version\nOr join public beta test for latest features:\n${appstoreLink}\n\nJoin testing and follow ALL instructions.\n\nWhen installed and started -> continue" 11 65
-	  # if [ $? -eq 1 ]; then
-	  #  /home/admin/config.scripts/blitz.display.sh qr-console ${appstoreLink}
-	  #fi
-
-      /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_zap.png
+      sudo /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_zap.png
 	  whiptail --title "Install Fully Noded on your iOS device" \
 		--yes-button "Continue" \
 		--no-button "StoreLink" \
 		--yesno "Open the Apple App Store on your mobile phone.\n\nSearch for --> 'Zap Bitcoin'\n\nCheck that logo is like on LCD & author: Zap Technologies LLC\nWhen app is installed and started --> Continue." 12 65
 	  if [ $? -eq 1 ]; then
-		/home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
+		sudo /home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
 		whiptail --title " App Store Link " --msgbox "\
 To install app open the following link:\n
 ${appstoreLink}\n
 Or scan the qr code on the LCD with your mobile phone.
 " 11 70
 	  fi
-	  /home/admin/config.scripts/blitz.display.sh hide
-	  checkIP2TOR LND-GRPC-API
-	  see https://github.com/rootzoll/raspiblitz/issues/1001#issuecomment-634580257
-      if [ ${#ip2tor} -eq 0 ]; then
-	    choose_IP_or_TOR
-	  fi
-  	  /home/admin/config.scripts/bonus.lndconnect.sh zap-ios ${connect}
+	  sudo /home/admin/config.scripts/blitz.display.sh hide
+  	  /home/admin/config.scripts/bonus.lndconnect.sh zap-ios tor
       exit 0;
     ;;
   ZAP_ANDROID)
-      appstoreLink="https://play.google.com/store/apps/details?id=zapsolutions.zap"
-      /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_zap.png
-	  whiptail --title "Install Zap on your Android Phone" \
+	  whiptail --title "Install Zap/Bitbanana on your Android Phone" \
 		--yes-button "Continue" \
 		--no-button "StoreLink" \
-		--yesno "Open the Android Play Store on your mobile phone.\n\nSearch for --> 'zap bitcoin app'\n\nCheck that logo is like on LCD and author is: Zap\nWhen app is installed and started --> Continue." 12 65
-	  if [ $? -eq 1 ]; then
-		/home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
-		whiptail --title " App Store Link " --msgbox "\
-To install app open the following link:\n
-${appstoreLink}\n
-Or scan the qr code on the LCD with your mobile phone.
-" 11 70
-	  fi
-	  /home/admin/config.scripts/blitz.display.sh hide
-	  checkIP2TOR LND-GRPC-API
-      if [ ${#ip2tor} -eq 0 ]; then
-	    choose_IP_or_TOR
-	  fi
-  	  /home/admin/config.scripts/bonus.lndconnect.sh zap-android ${connect}
+		--yesno "Open the Android Play Store on your mobile phone.\n\nSearch for --> 'bitbanana' (for updated fork)\nSearch for --> 'zap bitcoin app' (for original)\n\nWhen app is installed and started --> Continue." 12 65
+  	  /home/admin/config.scripts/bonus.lndconnect.sh zap-android tor
       exit 0;
     ;;
   SENDMANY_ANDROID)
 
       # check if keysend is activated first
-	  source <(/home/admin/config.scripts/lnd.keysend.sh status)
+	  keysendOn=$(cat /mnt/hdd/lnd/lnd.conf | grep -c '^accept-keysend=1')
 	  if [ "${keysendOn}" == "0" ]; then
-	    whiptail --title " KEYSEND NEEDED " --msgbox "
+	    whiptail --title " LND KEYSEND NEEDED " --msgbox "
 To use the chat feature of the SendMany app, you need to activate the Keysend feature first.
 
-Please go to MAINMENU > SERVICES and activate KEYSEND first.
+Please go to MAINMENU > SYSTEM > LNDCONF and set accept-keysend=1 first.
 " 12 65
 	    exit 0
 	  fi
@@ -267,85 +163,84 @@ Please go to MAINMENU > SERVICES and activate KEYSEND first.
 		--no-button "Link as QR code" \
 		--yesno "Download & install the SendMany APK (armeabi-v7) from GitHub:\n\n${appstoreLink}\n\nEasiest way to scan QR code on LCD and download/install.\n\nWhen installed and started -> continue." 13 65
 	  if [ $? -eq 1 ]; then
-	  	/home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
+	  	sudo /home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
 	    /home/admin/config.scripts/blitz.display.sh qr-console ${appstoreLink}
 	  fi
-	  /home/admin/config.scripts/blitz.display.sh hide
-	  checkIP2TOR LND-GRPC-API
-  	  /home/admin/config.scripts/bonus.lndconnect.sh sendmany-android ${connect}
+	  sudo /home/admin/config.scripts/blitz.display.sh hide
+  	  /home/admin/config.scripts/bonus.lndconnect.sh sendmany-android ip
       exit 0;
     ;;
   ZEUS_IOS)
       appstoreLink="https://apps.apple.com/us/app/zeus-ln/id1456038895"
-      /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_zeus.png
+      sudo /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_zeus.png
 	  whiptail --title "Install Zeus on your iOS device" \
 		--yes-button "Continue" \
 		--no-button "Link as QRcode" \
 		--yesno "Open the Apple App Store on your mobile phone.\n\nSearch for --> 'zeus ln'\n\nCheck that logo is like on LCD and author is: Zeus LN LLC\nWhen the app is installed and started --> Continue." 12 65
 	  if [ $? -eq 1 ]; then
-		/home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
+		sudo /home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
 		/home/admin/config.scripts/blitz.display.sh qr-console ${appstoreLink}
 	  fi
-	  /home/admin/config.scripts/blitz.display.sh hide
+	  sudo /home/admin/config.scripts/blitz.display.sh hide
   	  /home/admin/config.scripts/bonus.lndconnect.sh zeus-ios tor
   	  exit 0;
   	;;
   ZEUS_ANDROID)
       appstoreLink="https://play.google.com/store/apps/details?id=app.zeusln.zeus"
-      /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_zeus.png
+      sudo /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_zeus.png
 	  whiptail --title "Install Zeus on your Android Phone" \
 		--yes-button "Continue" \
 		--no-button "StoreLink" \
 		--yesno "Open the Android Play Store on your mobile phone.\n\nSearch for --> 'zeus ln'\n\nCheck that logo is like on LCD and author is: Evan Kaloudis\nWhen app is installed and started --> Continue." 12 65
 	  if [ $? -eq 1 ]; then
-		/home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
+		sudo /home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
 		whiptail --title " App Store Link " --msgbox "\
 To install app open the following link:\n
 ${appstoreLink}\n
 Or scan the qr code on the LCD with your mobile phone.
 " 11 70
 	  fi
-	  /home/admin/config.scripts/blitz.display.sh hide
+	  sudo /home/admin/config.scripts/blitz.display.sh hide
   	  /home/admin/config.scripts/bonus.lndconnect.sh zeus-android tor
   	  exit 0;
   	;;
 
   FULLYNODED_BTC)
       appstoreLink="https://apps.apple.com/us/app/fully-noded/id1436425586"
-      /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_fullynoded.png
+      sudo /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_fullynoded.png
 	  whiptail --title "Install Fully Noded on your iOS device" \
 		--yes-button "Continue" \
 		--no-button "StoreLink" \
 		--yesno "Open the Apple App Store on your mobile phone.\n\nSearch for --> 'fully noded'\n\nCheck that logo is like on LCD and author is: Denton LLC\nWhen app is installed and started --> Continue." 12 65
 	  if [ $? -eq 1 ]; then
-		/home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
+		sudo /home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
 		whiptail --title " App Store Link " --msgbox "\
 To install app open the following link:\n
 ${appstoreLink}\n
 Or scan the qr code on the LCD with your mobile phone.
 " 11 70
 	  fi
-	  /home/admin/config.scripts/blitz.display.sh hide
+	  sudo /home/admin/config.scripts/blitz.display.sh hide
   	  /home/admin/config.scripts/bonus.fullynoded.sh
   	  exit 0;
   	;;
 
   FULLYNODED_LND)
       appstoreLink="https://apps.apple.com/us/app/fully-noded/id1436425586"
-      /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_fullynoded.png
+      sudo /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_fullynoded.png
 	  whiptail --title "Install Fully Noded on your iOS device" \
 		--yes-button "Continue" \
 		--no-button "StoreLink" \
 		--yesno "Open the Apple App Store on your mobile phone.\n\nSearch for --> 'fully noded'\n\nCheck that logo is like on LCD and author is: Denton LLC\nWhen app is installed and started --> Continue." 12 65
 	  if [ $? -eq 1 ]; then
-		/home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
+		sudo /home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
 		whiptail --title " App Store Link " --msgbox "\
 To install app open the following link:\n
 ${appstoreLink}\n
 Or scan the qr code on the LCD with your mobile phone.
 " 11 70
 	  fi
-	  /home/admin/config.scripts/blitz.display.sh hide
+	  sudo /home/admin/config.scripts/blitz.display.sh hide
   	  /home/admin/config.scripts/bonus.lndconnect.sh fullynoded-lnd tor
   	  exit 0;
 	;;
@@ -355,26 +250,26 @@ Or scan the qr code on the LCD with your mobile phone.
 	    /home/admin/config.scripts/cl-plugin.http.sh on
 	  fi
       appstoreLink="https://apps.apple.com/us/app/fully-noded/id1436425586"
-      /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_fullynoded.png
+      sudo /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_fullynoded.png
 	  whiptail --title "Install Fully Noded on your iOS device" \
 		--yes-button "Continue" \
 		--no-button "StoreLink" \
 		--yesno "Open the Apple App Store on your mobile phone.\n\nSearch for --> 'fully noded'\n\nCheck that logo is like on LCD and author is: Denton LLC\nWhen app is installed and started --> Continue." 12 65
 	  if [ $? -eq 1 ]; then
-		/home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
+		sudo /home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
 		whiptail --title " App Store Link " --msgbox "\
 To install app open the following link:\n
 ${appstoreLink}\n
 Or scan the qr code on the LCD with your mobile phone.
 " 11 70
 	  fi
-	  /home/admin/config.scripts/blitz.display.sh hide
+	  sudo /home/admin/config.scripts/blitz.display.sh hide
   	  /home/admin/config.scripts/cl-plugin.http.sh connect
   	  exit 0;
   	;;
 
 ZEUS_CLREST)
-      /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_zeus.png
+      sudo /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_zeus.png
 	  whiptail --title "Install Zeus on your Android or iOS Phone" \
 		--yes-button "Continue" \
 		--no-button "Cancel" \
@@ -382,41 +277,8 @@ ZEUS_CLREST)
 	  if [ $? -eq 1 ]; then
 		exit 0
 	  fi
-	  /home/admin/config.scripts/blitz.display.sh hide
+	  sudo /home/admin/config.scripts/blitz.display.sh hide
   	  /home/admin/config.scripts/cl.rest.sh connect
   	  exit 0;
 	;;
-ZEUS_SPARK)
-      /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_zeus.png
-	  whiptail --title "Install Zeus on your Android or iOS Phone" \
-		--yes-button "Continue" \
-		--no-button "Cancel" \
-		--yesno "Open the https://zeusln.app/ on your mobile phone to find the App Store link or binary for your phone.\n\nWhen the app is installed and started --> Continue." 12 65
-	  if [ $? -eq 1 ]; then
-		exit 0
-	  fi
-	  /home/admin/config.scripts/blitz.display.sh hide
-  	  /home/admin/config.scripts/cl-plugin.sparko.sh connect
-  	  exit 0;
-	;;
-SPARK)
-      appstoreLink="https://github.com/shesek/spark-wallet#mobile-app"
-      /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/app_zeus.png
-	  whiptail --title "Install Zeus on your Android Phone" \
-		--yes-button "Continue" \
-		--no-button "GitHub link" \
-		--yesno "Open the ${appstoreLink} on Android to find the App Store link or binary for your phone.\n\nWhen the app is installed and started --> Continue." 12 65
-	  if [ $? -eq 1 ]; then
-		/home/admin/config.scripts/blitz.display.sh qr ${appstoreLink}
-		whiptail --title " GitHub link " --msgbox "\
-To install app open the following link:\n
-${appstoreLink}\n
-Or scan the QR code on the LCD with your mobile phone.
-" 11 70
-	  fi
-	  /home/admin/config.scripts/blitz.display.sh hide
-  	  /home/admin/config.scripts/cl-plugin.sparko.sh connect
-  	  exit 0;
-;;
-
 esac

home.admin/98repairBlockchain.sh

@@ -17,22 +17,20 @@ clear
 if [ "${CHOICE}" = "COPY" ]; then
     echo "Starting COPY ..."
     sudo sed -i "s/^state=.*/state=recopy/g" /home/admin/raspiblitz.info
-    /home/admin/50copyHDD.sh
+    /home/admin/config.scripts/blitz.copychain.sh target
     sudo sed -i "s/^state=.*/state=na/g" /home/admin/raspiblitz.info
 
 elif [ "${CHOICE}" = "RESYNC" ]; then
     echo "Starting RESYNC ..."
-    /home/admin/50syncHDD.sh
+    #TODO #FIXME
+    # /home/admin/50syncHDD.sh
     dialog --pause "OK. System will reboot to activate changes." 8 58 8
     clear
     echo "rebooting .. (please wait)"
     sudo /home/admin/config.scripts/blitz.shutdown.sh reboot
 
-elif [ "${CHOICE}" = "REINDEX" ]; then
-    echo "Starting REINDEX ..."
-    sudo /home/admin/config.scripts/network.reindex.sh
-
 elif [ "${CHOICE}" = "BACKUP" ]; then
+    /home/admin/config.scripts/lnd.compact.sh interactive
     sudo /home/admin/config.scripts/lnd.backup.sh lnd-export-gui
     echo "PRESS ENTER to continue."
     read key

home.admin/98repairMenu.sh

@@ -6,32 +6,51 @@ source /mnt/hdd/raspiblitz.conf
 
 askBackupCopy()
 {
-    whiptail --title "LND Data Backup" --yes-button "Backup" --no-button "Skip" --yesno "
+    whiptail --title "Lightning Data Backup" --yes-button "Backup" --no-button "Skip" --yesno "
 Before deleting your data, do you want
-to make a backup of all your LND Data
-and download that file to your laptop?
+to make a backup of all your Lightning Data
+and download the file(s) to your laptop?
 
-Download LND Data Backup now?
+Download Lightning Data Backup now?
       " 12 44
     if [ $? -eq 0 ]; then
-      clear
-      echo "*************************************"
-      echo "* PREPARING LND BACKUP DOWNLOAD"
-      echo "*************************************"
-      echo "please wait .."
-      sleep 2
-      /home/admin/config.scripts/lnd.backup.sh lnd-export-gui
-      echo
-      echo "PRESS ENTER to continue once you are done downloading."
-      read key
+      if [ "${lightning}" == "lnd" ] || [ "${lnd}" = "on" ]; then
+        clear
+        echo "***********************************"
+        echo "* PREPARING THE LND BACKUP DOWNLOAD"
+        echo "***********************************"
+        echo "please wait .."
+        /home/admin/config.scripts/lnd.compact.sh interactive
+        /home/admin/config.scripts/lnd.backup.sh lnd-export-gui
+        echo
+        echo "PRESS ENTER to continue once you're done downloading."
+        read key
+      fi
+      if [ "${lightning}" == "cl" ] || [ "${cl}" = "on" ]; then
+        clear
+        echo "**********************************************"
+        echo "* PREPARING THE CORE LIGHTNING BACKUP DOWNLOAD"
+        echo "**********************************************"
+        echo "please wait .."
+        /home/admin/config.scripts/cl.backup.sh cl-export-gui
+        echo
+        echo "PRESS ENTER to continue once you're done downloading."
+        read key
+      fi
     else
       clear
       echo "*************************************"
-      echo "* JUST MAKING BACKUP TO SD CARD"
+      echo "* JUST MAKING A BACKUP TO THE SD CARD"
       echo "*************************************"
       echo "please wait .."
       sleep 2
-      /home/admin/config.scripts/lnd.backup.sh lnd-export
+      if [ "${lightning}" == "lnd" ] || [ "${lnd}" = "on" ]; then
+        /home/admin/config.scripts/lnd.backup.sh lnd-export
+      fi
+      if [ "${lightning}" == "cl" ] || [ "${cl}" = "on" ]; then
+        /home/admin/config.scripts/cl.backup.sh cl-export
+      fi
+      sleep 3
     fi
 }
 
@@ -46,49 +65,74 @@ RaspiBlitz image to your SD card.
 " 12 40
 }
 
+# get status of txindex
+source <(sudo /home/admin/config.scripts/network.txindex.sh status)
+
 OPTIONS=()
 #OPTIONS+=(HARDWARE "Run Hardwaretest")
 OPTIONS+=(SOFTWARE "Run Softwaretest (DebugReport)")
 if [ "${lightning}" == "lnd" ] || [ "${lnd}" == "on" ]; then
-  OPTIONS+=(BACKUP-LND "Backup your LND data (Rescue-File)")
-  OPTIONS+=(RESET-LND "Delete LND & start new node/wallet")
+  OPTIONS+=(REPAIR-LND "Repair/Backup LND")
 fi
 if [ "${lightning}" == "cl" ] || [ "${cl}" == "on" ]; then
-  OPTIONS+=(REPAIR-CL "Repair/Backup C-Lightning")
+  OPTIONS+=(REPAIR-CL "Repair/Backup Core Lightning")
 fi
 OPTIONS+=(MIGRATION "Migrate Blitz Data to new Hardware")
 OPTIONS+=(COPY-SOURCE "Copy Blockchain Source Modus")
+if [ "${txindex}" == "1" ]; then
+  OPTIONS+=(DELETE-INDEX "Reindex Bitcoin Transaction-Index")
+elif [ "${indexByteSize}" != "0" ]; then
+  OPTIONS+=(DELETE-INDEX "Delete Bitcoin Transaction-Index")
+fi
+OPTIONS+=(REINDEX-UTXO "Redindex Just Bitcoin Chainstate (Fast)")
+OPTIONS+=(REINDEX-FULL "Redindex Full Bitcoin Blockchain (Slow)")
 OPTIONS+=(RESET-CHAIN "Delete Blockchain & Re-Download")
 OPTIONS+=(RESET-HDD "Delete HDD Data but keep Blockchain")
 OPTIONS+=(RESET-ALL "Delete HDD completely to start fresh")
 OPTIONS+=(DELETE-ELEC "Delete Electrum Index")
-OPTIONS+=(DELETE-INDEX "Delete Bitcoin Transaction-Index")
 
-CHOICE=$(whiptail --clear --title "Repair Options" --menu "" 18 62 11 "${OPTIONS[@]}" 2>&1 >/dev/tty)
+CHOICE=$(whiptail --clear --title "Repair Options" --menu "" 19 62 12 "${OPTIONS[@]}" 2>&1 >/dev/tty)
 
 clear
 case $CHOICE in
 #  HARDWARE)
 #    ;;
   SOFTWARE)
-    sudo /home/admin/config.scripts/blitz.debug.sh
+    echo "Generating debug logs. Be patient, this should take maximum 2 minutes .."
+    sudo rm /var/cache/raspiblitz/debug.log 2>/dev/null
+    /home/admin/config.scripts/blitz.debug.sh > /var/cache/raspiblitz/debug.log
+    echo "Redacting .."
+    /home/admin/config.scripts/blitz.debug.sh redact /var/cache/raspiblitz/debug.log
+    sudo chmod 640 /var/cache/raspiblitz/debug.log
+    sudo chown root:sudo /var/cache/raspiblitz/debug.log
+    cat /var/cache/raspiblitz/debug.log
+    echo
     echo "Press ENTER to return to main menu."
     read key
     ;;
-  BACKUP-LND)
-    sudo /home/admin/config.scripts/lnd.backup.sh lnd-export-gui
+  REPAIR-LND)
+    /home/admin/99lndRepairMenu.sh
     echo
-    echo "Press ENTER when your backup download is done to shutdown."
+    echo "Press ENTER to return to main menu."
     read key
-    /home/admin/config.scripts/blitz.shutdown.sh
     ;;
   REPAIR-CL)
-    sudo /home/admin/99clRepairMenu.sh
+    /home/admin/99clRepairMenu.sh
     echo
     echo "Press ENTER to return to main menu."
     read key
     ;;
   MIGRATION)
+    if [ "${cl}" == "on" ] || [ "${cl}" == "1" ] && [ "${clEncryptedHSM}" != "on" ] ; then
+      dialog \
+       --title "Encrypt the Core Lightning wallet" \
+       --msgbox "\nWill proceed to encrypt and lock the Core Lightning wallet to prevent it from starting automatically after the backup" 9 55
+      sudo /home/admin/config.scripts/cl.hsmtool.sh encrypt mainnet
+    fi
+    if [ "${clAutoUnlock}" = "on" ]; then
+      /home/admin/config.scripts/cl.hsmtool.sh autounlock-off mainnet
+    fi
+    /home/admin/config.scripts/cl.hsmtool.sh lock mainnet
     sudo /home/admin/config.scripts/blitz.migration.sh "export-gui"
     echo "Press ENTER to return to main menu."
     read key
@@ -99,37 +143,6 @@ case $CHOICE in
     echo "For reboot type: sudo shutdown -r now"
     exit 1;
     ;;
-  RESET-LND)
-    askBackupCopy
-    # ask for a new name so that network analysis has harder time to connect new node id with old
-    result=""
-    while [ ${#result} -eq 0 ]
-    do
-        trap 'rm -f "$_temp"' EXIT
-        _temp=$(mktemp -p /dev/shm/)
-        l1="Please enter the new name of your LND node:\n"
-        l2="different name is better for a fresh identity\n"
-        l3="one word, keep characters basic & not too long"
-        dialog --backtitle "RaspiBlitz - Setup (${network}/${chain})" --inputbox "$l1$l2$l3" 13 52 2>$_temp
-        result=$( cat $_temp | tr -dc '[:alnum:]-.' | tr -d ' ' )
-        echo "processing ..."
-        sleep 3
-    done
-
-    # make sure host is named like in the raspiblitz config
-    echo "Setting the Name/Alias/Hostname .."
-    sudo /home/admin/config.scripts/lnd.setname.sh mainnet ${result}
-    sudo sed -i "s/^hostname=.*/hostname=${result}/g" /mnt/hdd/raspiblitz.conf
-
-    echo "stopping lnd ..."
-    sudo systemctl stop lnd
-    sudo rm -r /mnt/hdd/lnd
-    /home/admin/70initLND.sh
-
-    # go back to main menu (and show)
-    /home/admin/00raspiblitz.sh
-    exit 0;
-    ;;
   RESET-HDD)
     askBackupCopy
     /home/admin/XXcleanHDD.sh
@@ -152,8 +165,18 @@ case $CHOICE in
     /home/admin/config.scripts/network.txindex.sh delete
     exit 0;
     ;;
+  REINDEX-UTXO)
+    /home/admin/config.scripts/network.reindex.sh reindex-chainstate mainnet
+    exit 0;
+    ;;
+  REINDEX-FULL)
+    /home/admin/config.scripts/network.reindex.sh reindex mainnet
+    exit 0;
+    ;;
   COPY-SOURCE)
     /home/admin/config.scripts/blitz.copychain.sh source
     /home/admin/config.scripts/lnd.unlock.sh
     ;;
 esac
+
+exit 0

home.admin/99clMenu.sh

@@ -7,16 +7,16 @@ source /mnt/hdd/raspiblitz.conf
 
 source <(/home/admin/config.scripts/network.aliases.sh getvars cl $1)
 
-# get the local network IP to be displayed on the LCD
-source <(/home/admin/config.scripts/internet.sh status local)
+# make sure the CL wallet is unlocked
+/home/admin/config.scripts/cl.hsmtool.sh unlock ${CHAIN}
 
 # BASIC MENU INFO
 WIDTH=64
 BACKTITLE="RaspiBlitz"
-TITLE=" C-Lightning Options (${CHAIN})"
+TITLE=" Core Lightning Options (${CHAIN})"
 MENU=""
 OPTIONS=()
-  OPTIONS+=(FUNDING "Fund the C-lightning wallet onchain")
+  OPTIONS+=(FUNDING "Fund the Core Lightning wallet onchain")
   OPTIONS+=(PEERING "Connect to a peer")
   OPTIONS+=(CHANNEL "Open a channel with peer")
   OPTIONS+=(SEND "Pay an invoice / payment request")
@@ -33,10 +33,13 @@ if [ ${#openChannels} -gt 0 ] && [ ${openChannels} -gt 0 ]; then
 fi
   OPTIONS+=(CASHOUT "Withdraw all funds onchain ($CHAIN)")
   OPTIONS+=(SEED "Show Wallet Seed Words")
-  OPTIONS+=(REPAIR-CL "Repair options for C-lightning")
+if [ "${clWatchtowerClient}" == "on" ] && [ "${CHAIN}" == "mainnet" ]; then
+  OPTIONS+=(WATCHTOWER  "Watchtower Client Options")
+fi
+  OPTIONS+=(REPAIR-CL "Repair options for Core Lightning")
 if [ "${lightning}" != "cl" ] && [ "${CHAIN}" == "mainnet" ]; then
-  OPTIONS+=(SWITCHLN  "Use C-lightning as default")
-fi  
+  OPTIONS+=(SWITCHLN  "Use Core Lightning as default")
+fi
 
 CHOICE_HEIGHT=$(("${#OPTIONS[@]}/2+1"))
 HEIGHT=$((CHOICE_HEIGHT+6))
@@ -53,7 +56,7 @@ CHOICE=$(dialog --clear \
 case $CHOICE in
   SUMMARY)
       clear
-      /home/admin/config.scripts/cl-plugin.summary.sh $CHAIN
+      /home/admin/config.scripts/cl-plugin.summars.sh $CHAIN
       echo "Press ENTER to return to main menu."
       read key
       ;;
@@ -81,17 +84,17 @@ case $CHOICE in
   NAME)
       sudo /home/admin/config.scripts/cl.setname.sh $CHAIN
       ;;
+  WATCHTOWER)
+      /home/admin/config.scripts/cl-plugin.watchtower-client.sh info
+      ;;
   SUEZ)
       clear
       if [ ! -f /home/bitcoin/suez/suez ];then
         /home/admin/config.scripts/bonus.suez.sh on
       fi
-      cd /home/bitcoin/suez || exit 0
-      command="sudo -u bitcoin /home/bitcoin/.local/bin/poetry run ./suez --client=c-lightning --client-args=--conf=${CLCONF}"
-      echo "# Running the command:"
-      echo "${command}"
+      cd /home/bitcoin/suez || exit 1
       echo
-      $command
+      sudo -u bitcoin poetry run /home/bitcoin/suez/suez --client=c-lightning --client-args=--conf=${CLCONF}
       echo
       echo "Press ENTER to return to main menu."
       read key
@@ -105,10 +108,11 @@ case $CHOICE in
       /home/admin/99clRepairMenu.sh $CHAIN
       ;;
   SWITCHLN)
-      clear 
+      clear
       echo
       # setting value in the raspiblitz.conf
-      sudo sed -i "s/^lightning=.*/lightning=cl/g" /mnt/hdd/raspiblitz.conf
+      /home/admin/config.scripts/blitz.conf.sh set lightning "cl"
+      sudo systemctl restart blitzapi 2>/dev/null
       echo "# OK - lightning=cl is set in /mnt/hdd/raspiblitz.conf"
       echo
       echo "Press ENTER to return to main menu."
@@ -116,4 +120,4 @@ case $CHOICE in
       ;;
 esac
 
-exit 0
+exit 0

home.admin/99clRepairMenu.sh

@@ -7,14 +7,40 @@ source /mnt/hdd/raspiblitz.conf
 
 source <(/home/admin/config.scripts/network.aliases.sh getvars cl $1)
 
-# get the local network IP to be displayed on the LCD
-source <(/home/admin/config.scripts/internet.sh status local)
-NETclEncryptedHSM="${netprefix}clEncryptedHSM"
+sudo mkdir /var/cache/raspiblitz/temp 2>/dev/null
+
+
+function clRescan() {
+  trap 'rm -f "$_temp"' EXIT
+  _temp=$(mktemp -p /dev/shm/)
+  dialog --backtitle "Choose the new gap limit" \
+  --title "Enter the rescan depth or blockheight (-)" \
+  --inputbox "
+Enter the number of blocks to rescan from the current tip
+or use a negative number for the absolute blockheight to scan from.
+
+If left empty will start to rescan from the block 700000 (-700000).
+" 12 71 2> "$_temp"
+  BLOCK=$(cat "$_temp")
+  if [ ${#BLOCK} -eq 0 ]; then
+    BLOCK="-700000"
+  fi
+  sudo /home/admin/config.scripts/cl.backup.sh "${CHAIN}" recoverymode on "${BLOCK}"
+  sudo systemctl restart ${netprefix}lightningd
+}
+
+function resetWallet() {
+    echo "# Delete ${CLCONF}"
+    sudo rm -f ${CLCONF}
+    echo "# Delete and recreate /home/bitcoin/.lightning/${CLNETWORK}"
+    sudo rm -rf /home/bitcoin/.lightning/${CLNETWORK}
+    sudo -u bitcoin mkdir /home/bitcoin/.lightning/${CLNETWORK}
+}
 
 # BASIC MENU INFO
 WIDTH=64
 BACKTITLE="RaspiBlitz"
-TITLE="C-lightning repair options for $CHAIN"
+TITLE="Core Lightning repair options for $CHAIN"
 MENU=""
 OPTIONS=()
 
@@ -23,16 +49,17 @@ if [ "$(eval echo \$${netprefix}clEncryptedHSM)" = "off" ];then
 elif [ "$(eval echo \$${netprefix}clEncryptedHSM)"  = "on" ];then
     OPTIONS+=(PASSWORD_C "Change the hsm_secret encryption password")
     OPTIONS+=(DECRYPT "Decrypt the hsm_secret")
-  if [ ! -f "/root/.${netprefix}cl.pw" ]; then
+  if [ ! -f "/home/bitcoin/.${netprefix}cl.pw" ]; then
     OPTIONS+=(AUTOUNLOCK-ON "Auto-decrypt the hsm_secret after boot")
   else
     OPTIONS+=(AUTOUNLOCK-OFF "Do not auto-decrypt the hsm_secret after boot")
   fi
 fi
-    OPTIONS+=(BACKUP "Full backup (hsm_secret + lightningd.sqlite3")
+    OPTIONS+=(BACKUP "Full backup (hsm_secret + lightningd.sqlite3)")
     OPTIONS+=(RESET "Reset the wallet and create new")
     OPTIONS+=(FILERESTORE "Restore from a rescue file")
     OPTIONS+=(SEEDRESTORE "Restore from a seed (onchain funds only)")
+    OPTIONS+=(RESCAN "Rescan for onchain funds from a given block")
 
 CHOICE_HEIGHT=$(("${#OPTIONS[@]}/2+1"))
 HEIGHT=$((CHOICE_HEIGHT+6))
@@ -48,7 +75,7 @@ CHOICE=$(dialog --clear \
 
 case $CHOICE in
   ENCRYPT)
-    /home/admin/config.scripts/cl.hsmtool.sh encrypt $CHAIN
+    sudo /home/admin/config.scripts/cl.hsmtool.sh encrypt $CHAIN
     source /mnt/hdd/raspiblitz.conf
     ;;
 
@@ -56,22 +83,33 @@ case $CHOICE in
     /home/admin/config.scripts/cl.hsmtool.sh decrypt $CHAIN
     source /mnt/hdd/raspiblitz.conf
     ;;
-  
+
   PASSWORD_C)
     /home/admin/config.scripts/cl.hsmtool.sh change-password $CHAIN
     ;;
-  
+
   AUTOUNLOCK-ON)
     /home/admin/config.scripts/cl.hsmtool.sh autounlock-on $CHAIN
     ;;
-  
+
   AUTOUNLOCK-OFF)
     /home/admin/config.scripts/cl.hsmtool.sh autounlock-off $CHAIN
     ;;
-  
+
   BACKUP)
-    ## from dialogLightningWallet.sh 
-    # run upload dialog and get result
+    if [ "${cl}" == "on" ] || [ "${cl}" == "1" ] && [ "${clEncryptedHSM}" != "on" ]; then
+      dialog \
+       --title "Encrypt the Core Lightning wallet" \
+       --msgbox "
+Will proceed to encrypt and lock the Core Lightning wallet to prevent it from starting automatically after the backup.
+Save this password as it will be needed to restore the backup (same as the Password C for CLN)." 10 55
+      sudo /home/admin/config.scripts/cl.hsmtool.sh encrypt mainnet
+    fi
+    if [ "${clAutoUnlock}" = "on" ]; then
+      /home/admin/config.scripts/cl.hsmtool.sh autounlock-off mainnet
+    fi
+    /home/admin/config.scripts/cl.hsmtool.sh lock mainnet
+    ## from dialogLightningWallet.sh
     _temp="/var/cache/raspiblitz/temp/.temp.tmp"
     clear
     /home/admin/config.scripts/cl.backup.sh cl-export-gui production $_temp
@@ -81,10 +119,10 @@ case $CHOICE in
     echo "Press ENTER when finished downloading."
     read key
     ;;
-  
+
   RESET)
     # backup
-    ## from dialogLightningWallet.sh 
+    ## from dialogLightningWallet.sh
     _temp="/var/cache/raspiblitz/temp/.temp.tmp"
     clear
     /home/admin/config.scripts/cl.backup.sh cl-export-gui production $_temp
@@ -93,21 +131,19 @@ case $CHOICE in
     echo
     echo "The rescue file is stored on the SDcard named cl-rescue.*.tar.gz just in case."
     echo
-    echo "The next step will overwrite the old C-lighthning $CHAIN wallet"
+    echo "The next step will overwrite the old Core Lightning $CHAIN wallet"
     echo "Press ENTER to continue or CTRL+C to abort"
     read key
-    # reset
-    sudo rm /home/bitcoin/.lightning/${CLNETWORK}/hsm_secret
-    sudo rm /home/bitcoin/.lightning/${CLNETWORK}/*.*
+
+    resetWallet
+
     # make sure the new hsm_secret is treated as unencrypted and clear autounlock
-    sudo sed -i \
-      "s/^${netprefix}clEncryptedHSM=.*/${netprefix}clEncryptedHSM=off/g" \
-      /mnt/hdd/raspiblitz.conf
-    sudo sed -i \
-      "s/^${netprefix}clAutoUnlock=.*/${netprefix}clEncryptedHSM=off/g" \
-      /mnt/hdd/raspiblitz.conf
+    /home/admin/config.scripts/blitz.conf.sh set ${netprefix}clEncryptedHSM "off"
+    /home/admin/config.scripts/blitz.conf.sh set ${netprefix}clAutoUnlock "off"
     # new
     /home/admin/config.scripts/cl.hsmtool.sh new $CHAIN
+    # create config
+    /home/admin/config.scripts/cl.install.sh on $CHAIN
     # set the lightningd service file on each active network
     if [ "${cl}" == "on" ] || [ "${cl}" == "1" ]; then
       /home/admin/config.scripts/cl.install-service.sh mainnet
@@ -119,10 +155,10 @@ case $CHOICE in
       /home/admin/config.scripts/cl.install-service.sh signet
     fi
     ;;
-  
+
   FILERESTORE)
     # backup
-    ## from dialogLightningWallet.sh 
+    ## from dialogLightningWallet.sh
     _temp="/var/cache/raspiblitz/temp/.temp.tmp"
     clear
     /home/admin/config.scripts/cl.backup.sh cl-export-gui production $_temp
@@ -131,12 +167,12 @@ case $CHOICE in
     echo
     echo "The rescue file is stored on the SDcard named cl-rescue.*.tar.gz just in case."
     echo
-    echo "The next step will overwrite the old C-lighthning $CHAIN wallet"
+    echo "The next step will overwrite the old Core Lightning $CHAIN wallet"
     echo "Press ENTER to continue or CTRL+C to abort"
     read key
-    # reset
-    sudo rm /home/bitcoin/.lightning/${CLNETWORK}/hsm_secret
-    sudo rm /home/bitcoin/.lightning/${CLNETWORK}/*.*
+
+    resetWallet
+
     # import file
     _temp="/var/cache/raspiblitz/temp/.temp.tmp"
     clear
@@ -144,10 +180,10 @@ case $CHOICE in
     source $_temp 2>/dev/null
     sudo rm $_temp 2>/dev/null
     ;;
-  
+
   SEEDRESTORE)
     # backup
-    ## from dialogLightningWallet.sh 
+    ## from dialogLightningWallet.sh
     _temp="/var/cache/raspiblitz/temp/.temp.tmp"
     clear
     /home/admin/config.scripts/cl.backup.sh cl-export-gui production $_temp
@@ -156,25 +192,33 @@ case $CHOICE in
     echo
     echo "The rescue file is stored on the SDcard named cl-rescue.*.tar.gz just in case."
     echo
-    echo "The next step will overwrite the old C-lighthning $CHAIN wallet"
+    echo "The next step will overwrite the old Core Lightning $CHAIN wallet"
     echo "Press ENTER to continue or CTRL+C to abort"
     read key
-    # reset
-    sudo rm /home/bitcoin/.lightning/${CLNETWORK}/hsm_secret
-    sudo rm /home/bitcoin/.lightning/${CLNETWORK}/config
-    sudo rm /home/bitcoin/.lightning/${CLNETWORK}/*.*
+
+    resetWallet
+
     # import seed
     _temp="/var/cache/raspiblitz/.temp.tmp"
     /home/admin/config.scripts/cl.backup.sh seed-import-gui $_temp
     source $_temp
     /home/admin/config.scripts/cl.hsmtool.sh seed-force "$CHAIN" "${seedWords}"
     sudo rm $_temp 2>/dev/null
+    if ! sudo ls /home/bitcoin/.lightning/${CLNETWORK}/hsm_secret 2>/dev/null; then
+      echo "# There was no hsm_secret created - exiting"
+      exit 15
+    fi
     # regenerate config
     /home/admin/config.scripts/cl.hsmtool.sh autounlock-off
     /home/admin/config.scripts/cl.hsmtool.sh decrypt
     /home/admin/config.scripts/cl.install.sh on $CHAIN
+
+    clRescan
     ;;
 
+  RESCAN)
+    clRescan
+    ;;
 esac
 
 exit 0

home.admin/99connectMenu.sh

@@ -5,8 +5,9 @@ echo "get raspiblitz config"
 source /home/admin/raspiblitz.info
 source /mnt/hdd/raspiblitz.conf
 
-# get the local network IP to be displayed on the LCD
-source <(/home/admin/config.scripts/internet.sh status local)
+source <(/home/admin/_cache.sh get internet_localip internet_localiprange)
+localIP="${internet_localip}"
+localIPrange="${internet_localiprange}"
 
 # BASIC MENU INFO
 WIDTH=64
@@ -19,16 +20,23 @@ OPTIONS+=(MOBILE "Connect Mobile Wallet")
 if [ "${ElectRS}" == "on" ]; then
   OPTIONS+=(ELECTRS "Electrum Rust Server")
 fi
-if [ "${BTCPayServer}" == "on" ]; then
-  OPTIONS+=(BTCPAY "Show LND connection string")
+if [ "${BTCPayServer}" == "on" ] && [ "${lnd}" = "on" ]; then
+  OPTIONS+=(BTCPAY-LND "Show LND connection string")
+fi
+if [ "${BTCPayServer}" == "on" ] && [ "${cl}" = "on" ]; then
+  OPTIONS+=(BTCPAY-CLN "Show CLN connection string")
 fi
 OPTIONS+=(${network}RPC "Connect Specter Desktop or JoinMarket")
 OPTIONS+=(BISQ "Connect Bisq to this node")
 if [ "${lightning}" == "lnd" ] || [ "${lnd}" == "on" ]; then
+  OPTIONS+=(ALBY "Connect Alby to this node")
   OPTIONS+=(EXPORT "Get Macaroons and TLS.cert")
   OPTIONS+=(RESET "Recreate LND Macaroons & tls.cert")
   OPTIONS+=(SYNC "Sync Macaroons & tls.cert with Apps/Users")
 fi
+if [ -f /mnt/hdd/app-data/selfsignedcert/selfsigned.cert ]; then
+  OPTIONS+=(RESET-TLS "Reset the self-signed TLS certificate")
+fi
 
 CHOICE_HEIGHT=$(("${#OPTIONS[@]}/2+1"))
 HEIGHT=$((CHOICE_HEIGHT+6))
@@ -48,24 +56,35 @@ case $CHOICE in
     /home/admin/97addMobileWallet.sh;;
   ELECTRS)
     /home/admin/config.scripts/bonus.electrs.sh menu;;
-  BTCPAY)
+  BTCPAY-LND)
     /home/admin/config.scripts/lnd.export.sh btcpay
     echo "Press ENTER to return to main menu."
     read key
     exit 0;;
+  BTCPAY-CLN)
+    /home/admin/config.scripts/bonus.btcpayserver.sh cln-lightning-rpc-access
+    echo "Press ENTER to return to main menu."
+    read key
+    exit 0;;
   RESET)
-    sudo /home/admin/config.scripts/lnd.credentials.sh reset
-    sudo /home/admin/config.scripts/lnd.credentials.sh sync
+    sudo /home/admin/config.scripts/lnd.credentials.sh reset "${chain:-main}net"
     sudo /home/admin/config.scripts/blitz.shutdown.sh reboot
     exit 0;;
   SYNC)
-    sudo /home/admin/config.scripts/lnd.credentials.sh sync
+    sudo /home/admin/config.scripts/lnd.credentials.sh sync "${chain:-main}net"
     echo "Press ENTER to return to main menu."
     read key
     exit 0;;
   EXPORT)
     sudo /home/admin/config.scripts/lnd.export.sh
     exit 0;;
+  RESET-TLS)
+    sudo /home/admin/config.scripts/internetselfsignedcert.sh reset
+    exit 0;;
+  ALBY)
+    /home/admin/config.scripts/bonus.alby.sh
+    exit 0;
+  ;;
 
   BISQ)
     OPTIONS=()
@@ -161,14 +180,10 @@ HiddenServicePort 8333 127.0.0.1:8333" | sudo tee -a /etc/tor/torrc
       # have this to signal that selection went wrong
       BITCOINRPCPORT=0
     fi
-    echo "# Running on ${chain}net"
+    echo "# Running on ${chain:-main}net"
     echo
-    localIPrange=$(ip addr | grep 'state UP' -A2 | grep -E -v 'docker0|veth' |\
-    grep 'eth0\|wlan0\|enp0\|inet' | tail -n1 | awk '{print $2}' |\
-    awk -F. '{print $1"."$2"."$3".0/24"}')
-    localIP=$(hostname -I | awk '{print $1}')
     allowIPrange=$(grep -c "rpcallowip=$localIPrange" <  /mnt/hdd/${network}/${network}.conf)
-    bindIP=$(grep -c "${chain}.rpcbind=$localIP" <  /mnt/hdd/${network}/${network}.conf)
+    bindIP=$(grep -c "${chain:-main}.rpcbind=$localIP" <  /mnt/hdd/${network}/${network}.conf)
     rpcTorService=$(grep -c "HiddenServicePort ${BITCOINRPCPORT} 127.0.0.1:${BITCOINRPCPORT}"  < /etc/tor/torrc)
     TorRPCaddress=$(sudo cat /mnt/hdd/tor/bitcoin${BITCOINRPCPORT}/hostname)
 
@@ -226,10 +241,10 @@ HiddenServicePort 8333 127.0.0.1:8333" | sudo tee -a /etc/tor/torrc
 
     case $CHOICE in
       ADDRPCLAN)
-        clear       
+        clear
         echo "# Make sure the bitcoind wallet is on"
         /home/admin/config.scripts/network.wallet.sh on
-      
+
         restartCore=0
         if [ $allowIPrange -eq 0 ]; then
           echo "rpcallowip=$localIPrange" | sudo tee -a /mnt/hdd/${network}/${network}.conf
@@ -254,7 +269,7 @@ HiddenServicePort 8333 127.0.0.1:8333" | sudo tee -a /etc/tor/torrc
         clear
         echo "# Make sure the bitcoind wallet is on"
         /home/admin/config.scripts/network.wallet.sh on
-        /home/admin/config.scripts/internet.hiddenservice.sh bitcoin${BITCOINRPCPORT} ${BITCOINRPCPORT} ${BITCOINRPCPORT}
+        /home/admin/config.scripts/tor.onion-service.sh bitcoin${BITCOINRPCPORT} ${BITCOINRPCPORT} ${BITCOINRPCPORT}
         echo
         echo "The address of the local node is: $TorRPCaddress"
         echo
@@ -267,7 +282,7 @@ HiddenServicePort 8333 127.0.0.1:8333" | sudo tee -a /etc/tor/torrc
       CREDENTIALS)
         clear
         showRPCcredentials
-        echo          
+        echo
         echo "Press ENTER to return to the menu."
         read key
         ;;
@@ -275,7 +290,7 @@ HiddenServicePort 8333 127.0.0.1:8333" | sudo tee -a /etc/tor/torrc
         # remove old entry
         sudo sed -i "/# Hidden Service for BITCOIN RPC (mainnet, testnet, signet)/,/^\s*$/{d}" /etc/tor/torrc
         # remove Hidden Service
-        /home/admin/config.scripts/internet.hiddenservice.sh off bitcoin${BITCOINRPCPORT}
+        /home/admin/config.scripts/tor.onion-service.sh off bitcoin${BITCOINRPCPORT}
         sudo ufw deny from $localIPrange to any port ${BITCOINRPCPORT}
         restartCore=0
         if [ $allowIPrange -gt 0 ]; then

home.admin/99lndMenu.sh

@@ -5,9 +5,6 @@ echo "get raspiblitz config"
 source /home/admin/raspiblitz.info
 source /mnt/hdd/raspiblitz.conf
 
-# get the local network IP to be displayed on the LCD
-source <(/home/admin/config.scripts/internet.sh status local)
-
 source <(/home/admin/config.scripts/network.aliases.sh getvars lnd $1)
 
 # make sure lnd wallet is unlocked
@@ -25,6 +22,7 @@ OPTIONS+=(PEERING "Connect to a Peer")
 OPTIONS+=(CHANNEL "Open a Channel with Peer")
 OPTIONS+=(SEND "Pay an Invoice/PaymentRequest")
 OPTIONS+=(RECEIVE "Create Invoice/PaymentRequest")
+OPTIONS+=(XPUB "Show OnChain xPubs")
 
 if [ "${chain}" = "main" ]; then
   OPTIONS+=(lnbalance "Detailed Wallet Balances")
@@ -120,7 +118,7 @@ case $CHOICE in
         /home/admin/config.scripts/bonus.suez.sh on
       fi
       cd /home/bitcoin/suez || exit 1 
-      sudo -u bitcoin /home/bitcoin/.local/bin/poetry run ./suez \
+      sudo -u bitcoin poetry run /home/bitcoin/suez/suez \
         --client-args=-n=${CHAIN} \
         --client-args=--rpcserver=localhost:1${L2rpcportmod}009
       echo
@@ -136,10 +134,23 @@ case $CHOICE in
       clear 
       echo
       # setting value in raspi blitz config
-      sudo sed -i "s/^lightning=.*/lightning=lnd/g" /mnt/hdd/raspiblitz.conf
+      /home/admin/config.scripts/blitz.conf.sh set lightning "lnd"
+      sudo systemctl restart blitzapi 2>/dev/null
       echo "# OK - lightning=lnd is set in /mnt/hdd/raspiblitz.conf"
       echo
       echo "Press ENTER to return to main menu."
       read key
       ;;
+  XPUB)
+    clear
+    echo "LND wallet xPubs => $lncli_alias wallet accounts list --name default"
+    echo
+    $lncli_alias wallet accounts list --name default | grep --color=never .*,
+    echo
+    echo "EXPERIMENTAL - DONT USE FOR SERIOUS FUND RECEIVING YET"
+    echo "Report your experience to: https://github.com/rootzoll/raspiblitz/issues/2192"
+    echo 
+    echo "Press ENTER to return to main menu."
+    read key
+
 esac

home.admin/99lndRepairMenu.sh

@@ -0,0 +1,522 @@
+#!/bin/bash
+
+# get raspiblitz config
+echo "# get raspiblitz config"
+source /home/admin/raspiblitz.info
+source /mnt/hdd/raspiblitz.conf
+
+source <(/home/admin/config.scripts/network.aliases.sh getvars lnd $1)
+
+sudo mkdir /var/cache/raspiblitz/temp 2>/dev/null
+
+askLNDbackupCopy()
+{
+  whiptail --title "LND Data Backup" --yes-button "Backup" --no-button "Skip" --yesno "
+Before deleting your data, do you want
+to make a backup of all your LND Data
+and download the file(s) to your laptop?
+
+Download LND Data Backup now?
+  " 12 44
+  if [ $? -eq 0 ]; then
+    clear
+    echo "***********************************"
+    echo "* PREPARING THE LND BACKUP DOWNLOAD"
+    echo "***********************************"
+    echo "please wait .."
+    /home/admin/config.scripts/lnd.compact.sh interactive
+    /home/admin/config.scripts/lnd.backup.sh lnd-export-gui
+    echo
+    echo "PRESS ENTER to continue once you're done downloading."
+    read key
+  else
+    clear
+    echo "*************************************"
+    echo "* JUST MAKING A BACKUP TO THE SD CARD"
+    echo "*************************************"
+    echo "please wait .."
+    sleep 2
+    /home/admin/config.scripts/lnd.backup.sh lnd-export
+    sleep 3
+  fi
+}
+
+getpasswordC() # from dialogPasswords.sh
+{
+  # temp file for password results
+  _temp="/var/cache/raspiblitz/temp/.temp.tmp"
+  sudo /home/admin/config.scripts/blitz.passwords.sh set x "PASSWORD C - Lightning Wallet Password" $_temp
+  passwordC=$(sudo cat $_temp)
+  sudo rm $_temp
+  dialog --backtitle "RaspiBlitz - Setup" --msgbox "\nThanks - Password C accepted.\n\nAlways use this password to \nunlock your Lightning Wallet." 10 34
+}
+
+lndHealthCheck() 
+{
+  # check that lnd started
+  lndRunning=0
+  loopcount=0
+  while [ ${lndRunning} -eq 0 ]
+  do
+    lndRunning=$(systemctl status ${netprefix}lnd.service | grep -c running)
+    if [ ${lndRunning} -eq 0 ]; then
+      date +%s
+      echo "LND not ready yet ... waiting another 60 seconds."
+      sleep 10
+    fi
+    loopcount=$(($loopcount +1))
+    if [ ${loopcount} -gt 100 ]; then
+      echo "lnd-start-fail" "lnd service not getting to running status" "sudo systemctl status ${netprefix}lnd.service | grep -c running --> ${lndRunning}"
+      exit 8
+    fi
+  done
+  echo "OK - LND is running"
+  sleep 10
+
+  # Check LND health/fails (to be extended)
+  tlsExists=$(ls /mnt/hdd/lnd/tls.cert 2>/dev/null | grep -c "tls.cert")
+  if [ ${tlsExists} -eq 0 ]; then
+    echo "lnd-no-tls" "lnd not created TLS cert" "no /mnt/hdd/lnd/tls.cert"
+    exit 9
+  fi
+}
+
+syncAndCheckLND() # from _provision.setup.sh
+{
+  # make sure all directories are linked
+  sudo /home/admin/config.scripts/blitz.datadrive.sh link
+
+  # check if now a config exists
+  configLinkedCorrectly=$(ls /home/bitcoin/.lnd/${netprefix}lnd.conf | grep -c "${netprefix}lnd.conf")
+  if [ "${configLinkedCorrectly}" != "1" ]; then
+    echo "lnd-link-broken" "link /home/bitcoin/.lnd/${netprefix}lnd.conf broken" ""
+    exit 7
+  fi
+
+  # Init LND service & start
+  echo "*** Init LND Service & Start ***"
+  /home/admin/_cache.sh set message "LND Testrun"
+
+  # just in case
+  sudo systemctl stop ${netprefix}lnd 2>/dev/null
+  sudo systemctl disable ${netprefix}lnd 2>/dev/null
+
+  # copy lnd service - note the same service is created with 'lnd.install.sh on mainnet'
+  sudo cp /home/admin/assets/lnd.service /etc/systemd/system/lnd.service
+
+  # start lnd up
+  echo "Starting LND Service ..."
+  sudo systemctl enable ${netprefix}lnd
+  sudo systemctl start ${netprefix}lnd
+  echo "Starting LND Service ... executed"  
+  
+  if [ $(sudo -u bitcoin ls /mnt/hdd/lnd/data/chain/bitcoin/${chain}net/wallet.db 2>/dev/null | grep -c wallet.db) -gt 0 ]; then
+    echo "# OK, there is an LND wallet present"
+  else
+    echo "lnd-no-wallet" "there is no LND wallet present" "/mnt/hdd/lnd/data/chain/bitcoin/${chain}net/wallet.db --> missing"
+    exit 13
+  fi
+  # sync macaroons & TLS to other users
+  echo "*** Copy LND Macaroons to user admin ***"
+  /home/admin/_cache.sh set message "LND Credentials"
+
+  # check if macaroon exists now - if not fail
+  attempt=0
+  while [ $(sudo -u bitcoin ls -la /home/bitcoin/.lnd/data/chain/${network}/${chain}net/admin.macaroon 2>/dev/null | grep -c admin.macaroon) -eq 0 ]; do
+    echo "Waiting 2 mins for LND to create macaroons ... (${attempt}0s)"
+    sleep 10
+    attempt=$((attempt+1))
+    if [ $attempt -eq 12 ];then
+      /home/admin/config.scripts/blitz.error.sh _provision.setup.sh "lnd-no-macaroons" "lnd did not create macaroons" "/home/bitcoin/.lnd/data/chain/${network}/${chain}net/admin.macaroon --> missing"
+      exit 14
+    fi
+  done
+
+  # now sync macaroons & TLS to other users
+  sudo /home/admin/config.scripts/lnd.credentials.sh sync ${chain}net
+
+ # make a final lnd check
+ source <(/home/admin/config.scripts/lnd.check.sh basic-setup "${chain}net")
+ if [ "${err}" != "" ]; then
+   echo
+   echo "lnd-check-error" "lnd.check.sh basic-setup ${chain}net with error" "/home/admin/config.scripts/lnd.check.sh basic-setup ${chain}net --> ${err}"
+   echo
+   # exit 15
+ fi
+}
+
+function restoreFromSeed()
+{
+    askLNDbackupCopy
+
+    ## from dialogLightningWallet.sh 
+    # let people know about the difference between SEED & SEED+SCB
+    whiptail --title "IMPORTANT INFO" --yes-button "ENTER SEED" --no-button "Go Back" --yesno "
+Using JUST SEED WORDS will only recover your on-chain funds.
+To also try to recover the open channel funds you need the
+channel.backup file (since RaspiBlitz v1.2 / LND 0.6-beta)
+or having a complete LND rescue-backup from your old node.
+    " 11 65
+    
+    # start seed input and get results
+    _temp="/var/cache/raspiblitz/.temp.tmp"
+    /home/admin/config.scripts/lnd.backup.sh seed-import-gui $_temp
+    source $_temp 2>/dev/null
+    sudo rm $_temp 2>/dev/null
+
+    # if user canceled the seed input
+    if [ "${seedWords}" == "" ]; then
+      # signal cancel to the calling script by exit code (4 = exit on seedwords)
+      exit 4
+    fi
+
+    getpasswordC
+
+    removeLNDwallet
+
+    # creates fresh lnd.conf without an alias
+    /home/admin/config.scripts/lnd.install.sh on $CHAIN
+    sudo systemctl start ${netprefix}lnd
+    lndHealthCheck
+
+    # from _provison.setup.sh
+    # create wallet
+    # WALLET --> SEED
+    if [ "${seedWords}" != "" ]; then
+      echo "WALLET --> SEED"
+      /home/admin/_cache.sh set message "LND Wallet (SEED)"
+      source <(/home/admin/config.scripts/lnd.initwallet.py seed "${chain}net" "${passwordC}" "${seedWords}" "${seedPassword}")
+      if [ "${err}" != "" ]; then
+        echo "lnd-wallet-seed" "lnd.initwallet.py seed returned error" "/home/admin/config.scripts/lnd.initwallet.py seed ${chain}net ... --> ${err} + ${errMore}"
+        exit 12
+      fi
+    fi
+
+    syncAndCheckLND
+}
+
+function restoreSCB()
+{
+    # import SCB and get results
+    _temp="/var/cache/raspiblitz/.temp.tmp"
+    # 'production' to use passwordA
+    /home/admin/config.scripts/lnd.backup.sh scb-import-gui production $_temp
+    source $_temp 2>/dev/null
+    sudo rm $_temp 2>/dev/null
+    
+    # if user canceled the upload
+    if ! ls -la /home/admin/channel.backup; then
+      echo "# signal cancel to the calling script by exit code (5 = exit on scb)"
+      exit 5
+    fi
+    
+    echo
+    echo "The next step will attempt to trigger all online peers to force close the channels."
+    echo "Restoring the channel.backup can be repeated until all the channels are force closed."
+    echo
+    echo "Make sure to enter the Raspiblitz menu to trigger the next step."
+    echo "If menu does not open automatically - use command: raspiblitz"
+    echo "Press ENTER to continue or CTRL+C to abort"
+    read key
+
+### --> DEACTIVATED BECAUSE when a file is placed at /home/admin/channel.backup
+###     it will now automatically trigger a Static-Channel-Backup procedure after lnd recoverymode is done
+#
+#    # WALLET --> SEED + SCB 
+#    if ls -la /home/admin/channel.backup; then
+#
+#      # LND was restarted so need to unlock
+#      echo "WALLET --> UNLOCK WALLET - SCAN 0"
+#      /home/admin/_cache.sh set message "LND Wallet Unlock - scan 0"
+#      source <(/home/admin/config.scripts/lnd.initwallet.py unlock "${chain}net" "${passwordC}" 0)
+#      if [ "${err}" != "" ]; then
+#        echo "lnd-wallet-unlock" "lnd.initwallet.py unlock returned error" "/home/admin/config.scripts/lnd.initwallet.py unlock ${chain}net ... --> ${err} + ${errMore}"
+#        if [ "${errMore}" = "wallet already unlocked, WalletUnlocker service is no longer available" ]; then
+#          echo "The wallet is already unlocked, continue."
+#        else
+#          exit 11
+#        fi
+#      fi
+#
+#      echo "WALLET --> SEED + SCB "
+#      /home/admin/_cache.sh set message "LND Wallet (SEED & SCB)"
+#      macaroonPath="/home/admin/.lnd/data/chain/${network}/${chain}net/admin.macaroon"
+#      source <(/home/admin/config.scripts/lnd.initwallet.py scb ${chain}net "/home/admin/channel.backup" "${macaroonPath}")
+#      if [ "${err}" != "" ]; then
+#        echo "lnd-wallet-seed+scb" "lnd.initwallet.py scb returned error" "/home/admin/config.scripts/lnd.initwallet.py scb ${chain}net ... --> ${err} + ${errMore}"
+#        while [ $(echo "${errMore}" | grep -c "RPC server is in the process of starting up") -gt 0 ]; do
+#          echo "# ${errMore}"
+#          echo "# waiting 10 seconds (${counter})"
+#          counter=$((counter+1))
+#          if [ ${counter} -eq 60 ]; then
+#            echo "# Giving up after 10 minutes"
+#            echo
+#            echo "lnd-wallet-seed+scb" "lnd.initwallet.py scb returned error" "/home/admin/config.scripts/lnd.initwallet.py scb ${chain}net ... --> ${err} + ${errMore}"
+#            echo
+#            echo "The SCB recovery is not possible now - use the RETRYSCB option the REPAIR-LND menu after LND is synced."
+#            echo "Can repeat the SCB recovery until all peers have force closed the channels to this node."
+#            echo
+#            echo "# ${netprefix}lnd error logs:"
+#            sudo journalctl -u ${netprefix}lnd
+#            echo
+#            echo "# ${netprefix}lnd logs:"
+#            sudo tail /home/bitcoin/.lnd/logs/bitcoin/${CHAIN}/lnd.log
+#            exit 12
+#          fi
+#          sleep 10
+#          source <(/home/admin/config.scripts/lnd.initwallet.py scb ${chain}net "/home/admin/channel.backup" "${macaroonPath}")
+#        done
+#
+#      fi
+#    fi
+#
+#    syncAndCheckLND
+
+}
+
+function removeLNDwallet 
+{
+  clear
+  echo  
+  echo "The next step WILL REMOVE the old LND wallet on ${CHAIN}"
+  echo "Press ENTER to continue or CTRL+C to abort"
+  read key
+  echo "# Stopping lnd on ${CHAIN} ..."
+  sudo systemctl stop ${netprefix}lnd
+  sudo systemctl disable ${netprefix}lnd
+  echo "Reset wallet on ${CHAIN}"
+  sudo rm -f /home/bitcoin/.lnd/${netprefix}lnd.conf
+  sudo rm -f /home/bitcoin/.lnd/${netprefix}v3_onion_private_key
+  sudo rm -f /mnt/hdd/lnd/data/chain/${network}/${CHAIN}/wallet.db
+  sudo rm -f /home/bitcoin/.lnd/data/graph/${CHAIN}/channel.db
+  sudo rm -f /home/bitcoin/.lnd/data/graph/${CHAIN}/sphinxreplay.db
+  
+  sudo rm -rf /mnt/hdd/lnd/data/chain/${network}/${CHAIN}
+  sudo rm -rf /home/bitcoin/.lnd/logs/${network}/${CHAIN}
+  sudo rm -rf /home/bitcoin/.lnd/data/graph/${CHAIN}
+  sudo rm -rf home/bitcoin/.lnd/data/watchtower/${CHAIN}
+}
+
+# BASIC MENU INFO
+WIDTH=64
+BACKTITLE="RaspiBlitz"
+TITLE="LND repair options for $CHAIN"
+MENU=""
+OPTIONS=()
+if [ "${chain}" = "main" ]; then
+  OPTIONS+=(COMPACT "Compact the LND channel.db")
+  OPTIONS+=(GETSCB "Download channel.backup (StaticChannelBackup)")
+fi
+OPTIONS+=(BACKUP-LND "Backup your LND data (Rescue-File)")
+OPTIONS+=(RESET-LND "Delete LND & start new node/wallet")
+OPTIONS+=(LNDRESCUE "Restore from a rescue file")
+OPTIONS+=(SEED+SCB "Restore from a seed and channel.backup")
+OPTIONS+=(RETRYSCB "Retry closing channels with the channel.backup")
+OPTIONS+=(ONLYSEED "Restore from a seed (onchain funds only)")
+OPTIONS+=(RESCAN "Rescan the blockchain to recover onchain funds")
+
+CHOICE_HEIGHT=$(("${#OPTIONS[@]}/2+1"))
+HEIGHT=$((CHOICE_HEIGHT+6))
+CHOICE=$(dialog --clear \
+                --backtitle "$BACKTITLE" \
+                --title "$TITLE" \
+                --ok-label "Select" \
+                --cancel-label "Main menu" \
+                --menu "$MENU" \
+                $HEIGHT $WIDTH $CHOICE_HEIGHT \
+                "${OPTIONS[@]}" \
+                2>&1 >/dev/tty)
+
+case $CHOICE in
+
+  COMPACT)
+    /home/admin/config.scripts/lnd.compact.sh interactive
+    echo "# Starting ${netprefix}lnd.service ..."
+    sudo systemctl start lnd
+    echo
+    echo "Press ENTER to return to main menu."
+    read key
+    ;;
+  GETSCB)
+    /home/admin/config.scripts/lnd.backup.sh scb-export-gui
+    ;;
+  BACKUP-LND)
+    /home/admin/config.scripts/lnd.compact.sh interactive
+    sudo /home/admin/config.scripts/lnd.backup.sh ${netprefix}lnd-export-gui
+    echo
+    echo "Press ENTER when your backup download is done to shutdown."
+    read key
+    sudo /home/admin/config.scripts/blitz.shutdown.sh
+    ;;
+  RESET-LND)
+    askLNDbackupCopy
+    # ask for a new name so that network analysis has harder time to connect new node id with old
+    result=""
+    while [ ${#result} -eq 0 ]
+    do
+        trap 'rm -f "$_temp"' EXIT
+        _temp=$(mktemp -p /dev/shm/)
+        l1="Please enter the name of your new LND node:\n"
+        l2="different name is better for a fresh identity\n"
+        l3="one word, use up to 32 basic characters"
+        dialog --backtitle "RaspiBlitz - Setup (${network}/${chain})" --inputbox "$l1$l2$l3" 13 52 2>$_temp
+        result=$( cat $_temp | tr -dc '[:alnum:]-.' | tr -d ' ' )
+        echo "processing ..."
+        sleep 3
+    done
+
+    removeLNDwallet
+
+    # create wallet
+    /home/admin/config.scripts/lnd.install.sh on ${chain}net initwallet
+    # display and delete the seed for ${chain}net
+    sudo /home/admin/config.scripts/lnd.install.sh display-seed ${chain}net delete
+
+    #TODO the new hostname is not taken into account on init (user can change set the lnd name in menu later)
+    # make sure host is named like in the raspiblitz config
+    # echo "Setting the Name/Alias/Hostname .."
+    sudo /home/admin/config.scripts/lnd.setname.sh ${chain}net "${result}"
+    # /home/admin/config.scripts/blitz.conf.sh set hostname "${result}"
+
+    syncAndCheckLND
+
+    echo "Press ENTER to return to main menu."
+    read key    
+    # go back to main menu (and show)
+    /home/admin/00raspiblitz.sh
+    exit 0
+    ;;
+  
+  LNDRESCUE)
+    askLNDbackupCopy
+
+    #removeAllLNDwallets 
+    clear
+    echo
+    echo "The next step WILL REMOVE the old LND wallets on ALL CHAINS"
+    echo "Press ENTER to continue or CTRL+C to abort"
+    read key
+    echo "# Stopping lnd on mainnet ..."
+    sudo systemctl stop lnd
+    # don' t want to set CL as default if running parallel
+    #/home/admin/config.scripts/lnd.install.sh off mainnet
+    if [ "${tlnd}" == "on" ];then
+      /home/admin/config.scripts/lnd.install.sh off testnet
+    fi
+    if [ "${slnd}" == "on" ];then
+      /home/admin/config.scripts/lnd.install.sh off signet
+    fi
+    echo "Reset wallet"
+    sudo rm -r /mnt/hdd/lnd
+
+    ## from dialogLightningWallet.sh 
+    # import file
+    # run upload dialog and get result
+    _temp="/var/cache/raspiblitz/temp/.temp.tmp"
+    /home/admin/config.scripts/lnd.backup.sh lnd-import-gui production $_temp
+    source $_temp 2>/dev/null
+    sudo rm $_temp 2>/dev/null
+
+    /home/admin/config.scripts/lnd.install.sh on ${CHAIN}
+    sudo systemctl start ${netprefix}lnd
+    
+    syncAndCheckLND
+    
+    echo "Press ENTER to return to main menu."
+    read key
+    # go back to main menu (and show)
+    /home/admin/00raspiblitz.sh
+    exit 0
+    ;;
+
+  ONLYSEED)
+
+    restoreFromSeed
+    
+    echo "Set lnd recovery mode & restart ..."
+    sudo /home/admin/config.scripts/lnd.backup.sh "${chain}net" recoverymode on
+    sudo systemctl restart ${netprefix}lnd
+    sleep 3
+
+    echo "# Unlock wallet ..."
+    /home/admin/config.scripts/lnd.unlock.sh "${CHAIN}"
+
+    echo
+    echo "System will now go thru rescan for on-chain funds"
+    echo "Press ENTER to return to main menu."
+    read key
+    # go back to main menu (and show)
+    /home/admin/00raspiblitz.sh
+    exit 0
+    ;;
+
+  SEED+SCB)
+
+    restoreFromSeed
+    restoreSCB
+    
+    echo "Set lnd recovery mode & restart ..."
+    sudo /home/admin/config.scripts/lnd.backup.sh "${chain}net" recoverymode on
+    sudo systemctl restart ${netprefix}lnd
+    sleep 3
+
+    echo "# Unlock wallet ..."
+    /home/admin/config.scripts/lnd.unlock.sh "${CHAIN}"
+
+    echo
+    echo "System will now go thru rescan for on-chain funds and when done"
+    echo "the Static-Channel-Backup will trigger to recover off-chain funds."
+    echo "Press ENTER to return to main menu."
+    read key
+
+    # go back to main menu (and show)
+    /home/admin/00raspiblitz.sh
+    exit 0
+    ;;
+
+  RETRYSCB)
+
+    restoreSCB
+
+    # go back to main menu (and show)
+    /home/admin/00raspiblitz.sh
+
+    exit 0
+    ;;
+
+  RESCAN)
+    clear
+
+    source <(sudo /home/admin/config.scripts/lnd.backup.sh "${CHAIN}" recoverymode status)
+    if [ "${recoverymode}" == "0" ]; then
+
+      echo "Putting lnd back in recoverymode."
+      sudo /home/admin/config.scripts/lnd.backup.sh "${CHAIN}" recoverymode on
+      echo "Restarting lnd ..."
+      sudo systemctl restart ${netprefix}lnd
+      sleep 3
+
+    else
+
+      echo "lnd already in recoverymode."
+
+    fi
+
+    echo "# Unlock wallet ..."
+    /home/admin/config.scripts/lnd.unlock.sh "${CHAIN}"
+
+    echo
+    echo "To show the scanning progress in the background will follow the lnd.log with:" 
+    echo "'sudo tail -n 30 -f /mnt/hdd/lnd/logs/${network}/${chain}net/lnd.log'"
+    echo
+    echo "Press ENTER to continue"
+    echo "use CTRL+C any time to exit .. then use the command 'raspiblitz' to return to the menu"
+    echo "(the rescan will continue in the background)"
+    echo "#######################################################################################"
+    read key
+    sudo tail -n 30 -f /mnt/hdd/lnd/logs/${network}/${chain}net/lnd.log    
+    ;;
+
+esac
+
+exit 0

home.admin/99systemMenu.sh

@@ -15,6 +15,9 @@ TITLE=" ${CHAIN} System Options "
 MENU=""    # adds lines to HEIGHT
 OPTIONS=() # adds lines to HEIGHt + CHOICE_HEIGHT
 
+OPTIONS+=(BTOP "Monitor system resources with btop")
+OPTIONS+=(TIME "Set Timezone")
+
 OPTIONS+=(${network}LOG "Monitor the debug.log for ${CHAIN}")
 OPTIONS+=(${network}CONF "Edit the bitcoin.conf")
 
@@ -49,6 +52,16 @@ CHOICE=$(dialog --clear \
                 2>&1 >/dev/tty)
 
 case $CHOICE in
+  BTOP)
+    if ! btop -v; then
+      sudo apt install -y btop
+    fi
+    # run as root to allow signal sending to any process
+    sudo btop
+    ;;
+  TIME)
+    sudo /home/admin/config.scripts/blitz.time.sh choose-timezone
+    ;;
   ${network}LOG)
     if [ ${CHAIN} = signet ]; then
       bitcoinlogpath="/mnt/hdd/bitcoin/signet/debug.log"
@@ -63,8 +76,8 @@ case $CHOICE in
     echo "running: 'sudo tail -n 30 -f ${bitcoinlogpath}'"
     echo
     echo "Press ENTER to continue"
-    echo "use CTRL+C any time to abort .. then use command 'raspiblitz' to return to menu"
-    echo "###############################################################################"
+    echo "use CTRL+C any time to abort .. then use the command 'raspiblitz' to return to the menu"
+    echo "#######################################################################################"
     read key
     sudo tail -n 30 -f ${bitcoinlogpath};;
   ${network}CONF)
@@ -90,8 +103,8 @@ case $CHOICE in
     echo "running 'sudo tail -n 30 -f /mnt/hdd/lnd/logs/${network}/${chain}net/lnd.log'"
     echo
     echo "Press ENTER to continue"
-    echo "use CTRL+C any time to abort .. then use command 'raspiblitz' to return to menu"
-    echo "###############################################################################"
+    echo "use CTRL+C any time to abort .. then use the command 'raspiblitz' to return to the menu"
+    echo "#######################################################################################"
     read key
     sudo tail -n 30 -f /mnt/hdd/lnd/logs/${network}/${chain}net/lnd.log;;
   LNDCONF)
@@ -117,8 +130,8 @@ case $CHOICE in
     echo "running 'sudo tail -n 30 -f /home/bitcoin/.lightning/${CLNETWORK}/cl.log'"
     echo
     echo "Press ENTER to continue"
-    echo "use CTRL+C any time to abort .. then use command 'raspiblitz' to return to menu"
-    echo "###############################################################################"
+    echo "use CTRL+C any time to abort .. then use the command 'raspiblitz' to return to the menu"
+    echo "#######################################################################################"
     read key
     sudo tail -n 30 -f /home/bitcoin/.lightning/${CLNETWORK}/cl.log;;
   CLCONF)
@@ -126,10 +139,10 @@ case $CHOICE in
     then
       whiptail \
         --title "Restart" --yes-button "Restart" --no-button "Not now" \
-        --yesno "To apply the new settings C-lightning needs to restart.
-        Do you want to restart C-lightning now?" 0 0
+        --yesno "To apply the new settings Core Lightning needs to restart.
+        Do you want to restart Core Lightning now?" 0 0
       if [ $? -eq 0 ]; then
-        echo "# Restarting C-lightning"
+        echo "# Restarting Core Lightning"
         sudo systemctl restart ${netprefix}lightningd
       else
         echo "# Continue without restarting."
@@ -170,8 +183,8 @@ thunderhub, tor@default, tor
     echo "Will show the logs with:"
     echo "'sudo journalctl -n 10 -fu $SERVICE'"
     echo
-    echo "use CTRL+C any time to abort .. then use command 'raspiblitz' to return to menu"
-    echo "###############################################################################"
+    echo "use CTRL+C any time to abort .. then use the command 'raspiblitz' to return to the menu"
+    echo "#######################################################################################"
     sudo journalctl -n 10 -fu $SERVICE;;
   CUSTOMRESTART)
     clear
@@ -195,7 +208,7 @@ thunderhub, tor@default, tor
     echo "Will show the logs with:"
     echo "'sudo journalctl -n 10 -fu $SERVICE'"
     echo
-    echo "use CTRL+C any time to abort .. then use command 'raspiblitz' to return to menu"
-    echo "###############################################################################"
+    echo "use CTRL+C any time to abort .. then use the command 'raspiblitz' to return to the menu"
+    echo "#######################################################################################"
     sudo journalctl -n 10 -fu $SERVICE;;
 esac

home.admin/99updateMenu.sh

@@ -1,5 +1,5 @@
 #!/bin/bash
-
+ 
 # load raspiblitz config data
 source /home/admin/_version.info
 source /home/admin/raspiblitz.info
@@ -14,7 +14,7 @@ release()
 - Download the new SD card image to your laptop:
   https://github.com/rootzoll/raspiblitz
 - Flash that SD card image to a new SD card (best)
-  or override old SD card after shutdown (fallback) 
+  or override old SD card after shutdown (fallback)
 - Choose 'Start Update' below.
 
 No need to close channels or download blockchain again.
@@ -32,39 +32,45 @@ its recommended to make a backup of all your Lightning
 Channel Data and download that file to your laptop.
 
 Do you want to download Lightning Data Backup now?
-      " 12 58
+      " 12 62
     if [ $? -eq 0 ]; then
-      clear
-      echo "*************************************"
-      echo "* PREPARING LIGHTNING BACKUP DOWNLOAD"
-      echo "*************************************"
-      echo "please wait .."
-      sleep 2
-      if [ "${lightning}" == "lnd" ]; then
+      if [ "${lightning}" == "lnd" ] || [ "${lnd}" = "on" ]; then
+        clear
+        echo "***********************************"
+        echo "* PREPARING THE LND BACKUP DOWNLOAD"
+        echo "***********************************"
+        echo "please wait .."
+        /home/admin/config.scripts/lnd.compact.sh interactive
         /home/admin/config.scripts/lnd.backup.sh lnd-export-gui
-      elif [ "${lightning}" == "cl" ]; then
-        /home/admin/config.scripts/cl.backup.sh cl-export-gui
-      else
-        echo "TODO: Implement Data Backup for '${lightning}'"
+        echo
+        echo "PRESS ENTER to continue once you're done downloading."
+        read key
+      fi
+      if [ "${lightning}" == "cl" ] || [ "${cl}" = "on" ]; then
+        clear
+        echo "*******************************************"
+        echo "* PREPARING THE CORE LIGHTNING BACKUP DOWNLOAD"
+        echo "*******************************************"
+        echo "please wait .."
+        /home/admin/config.scripts/cl.backup.sh cl-export-gui
+        echo
+        echo "PRESS ENTER to continue once you're done downloading."
+        read key
       fi
-      echo
-      echo "PRESS ENTER to continue once you're done downloading."
-      read key
     else
       clear
-      echo "*************************************"
-      echo "* JUST MAKING BACKUP TO OLD SD CARD"
-      echo "*************************************"
+      echo "*****************************************"
+      echo "* JUST MAKING A BACKUP TO THE OLD SD CARD"
+      echo "*****************************************"
       echo "please wait .."
       sleep 2
-      if [ "${lightning}" == "lnd" ]; then
+      if [ "${lightning}" == "lnd" ] || [ "${lnd}" = "on" ]; then
         /home/admin/config.scripts/lnd.backup.sh lnd-export
-      elif [ "${lightning}" == "cl" ]; then
-        /home/admin/config.scripts/cl.backup.sh cl-export
-      else
-        echo "TODO: Implement Data Backup for '${lightning}'"
-        sleep 3
       fi
+      if [ "${lightning}" == "cl" ] || [ "${cl}" = "on" ]; then
+        /home/admin/config.scripts/cl.backup.sh cl-export
+      fi
+      sleep 3
     fi
   fi
 
@@ -74,7 +80,7 @@ Once the LCD is white and no LEDs are blinking anymore:
 - Remove the Power from RaspiBlitz
 - Exchange the old with the new SD card
 - Connect Power back to the RaspiBlitz
-- Follow the instructions on the LCD
+- Login again per SSH or WebUI
 
 Do you have the SD card with the new version image ready
 and do you WANT TO START UPDATE NOW?
@@ -99,9 +105,9 @@ patchNotice()
 It means it will sync the program code with the
 GitHub repo for your version branch v${codeVersion}.
 
-This can be useful if there are important updates 
+This can be useful if there are important updates
 in between releases to fix severe bugs. It can also
-be used to sync your own code with your RaspiBlitz 
+be used to sync your own code with your RaspiBlitz
 if you are developing on your own GitHub Repo.
 
 BUT BEWARE: This means RaspiBlitz will contact GitHub,
@@ -127,13 +133,24 @@ patch()
            PR "Checkout a PullRequest to test"
 	)
 
-  CHOICE=$(whiptail --clear --title "GitHub-User: ${activeGitHubUser} Branch: ${activeBranch}" --menu "" 11 55 4 "${OPTIONS[@]}" 2>&1 >/dev/tty)
+  CHOICE=$(whiptail --clear --title " GitHub user:${activeGitHubUser} branch:${activeBranch} (${commitHashShort})" --menu "" 11 60 4 "${OPTIONS[@]}" 2>&1 >/dev/tty)
 
   clear
   case $CHOICE in
     PATCH)
-      sudo -u admin /home/admin/config.scripts/blitz.github.sh -run
-      sleep 4
+      echo
+      echo "#######################################################"
+      echo "### UPDATE BLITZ --> SCRIPTS (code)"
+      /home/admin/config.scripts/blitz.github.sh -run
+      echo
+      echo "#######################################################"
+      echo "### UPDATE BLITZ --> API"
+      sudo /home/admin/config.scripts/blitz.web.api.sh update-code
+      echo
+      echo "#######################################################"
+      echo "### UPDATE BLITZ --> WEBUI"
+      sudo /home/admin/config.scripts/blitz.web.ui.sh update
+      sleep 5
       whiptail --title " Patching/Syncing " --yes-button "Reboot" --no-button "Skip Reboot" --yesno "  OK patching/syncing done.
 
   By default a reboot is advised.
@@ -143,7 +160,7 @@ patch()
       if [ $? -eq 0 ]; then
         clear
         echo "REBOOT .."
-        /home/admin/config.scripts/blitz.shutdown.sh reboot
+        sudo /home/admin/config.scripts/blitz.shutdown.sh reboot
         sleep 8
         exit 1
       else
@@ -160,12 +177,12 @@ patch()
         newGitHubUser=$(echo "${newGitHubUser}" | cut -d " " -f1)
         echo "--> " ${newGitHubUser}
         error=""
-        source <(sudo -u admin /home/admin/config.scripts/blitz.github.sh -clean ${activeBranch} ${newGitHubUser})
+        source <(sudo -u admin /home/admin/config.scripts/blitz.github.sh ${activeBranch} ${newGitHubUser})
         if [ ${#error} -gt 0 ]; then
           whiptail --title "ERROR" --msgbox "${error}" 8 30
         fi
       fi
-      patch
+      patch all
       exit 0
       ;;
     BRANCH)
@@ -182,7 +199,7 @@ patch()
           whiptail --title "ERROR" --msgbox "${error}" 8 30
         fi
       fi
-      patch
+      patch all
       exit 0
       ;;
     PR)
@@ -252,11 +269,28 @@ Do you really want to update LND now?
       if [ ${#error} -gt 0 ]; then
         whiptail --title "ERROR" --msgbox "${error}" 8 30
       else
-        # if loop was installed before reinstall
-        if [ "${loop}" == "on" ]; then
-          sudo -u admin /home/admin/config.scripts/bonus.loop.sh on
+        whiptail \
+         --title " LND update " \
+         --yes-button "Reboot" \
+         --no-button "Skip Reboot" \
+         --yesno \
+"OK LND update is done.
+
+By default a reboot is advised to sync macaroons and the TLS certificate.
+Consider rebooting later manually if encountering any problems.
+      " 12 50
+        if [ $? -eq 0 ]; then
+          clear
+          echo "# REBOOT .."
+          sudo /home/admin/config.scripts/blitz.shutdown.sh reboot
+          sleep 8
+          exit 1
+        else
+          echo "# SKIP REBOOT"
+          echo "# starting the lnd.service .."
+          sudo systemctl start lnd
+          exit 0
         fi
-        /home/admin/config.scripts/blitz.shutdown.sh reboot
         sleep 8
       fi
       ;;
@@ -267,7 +301,7 @@ grab the latest LND release published on the LND GitHub page (also release candi
 There will be no security checks on signature, etc.
 
 This update mode is only recommended for testing and
-development nodes with no serious funding. 
+development nodes with no serious funding.
 
 Do you really want to update LND now?
       " 16 58
@@ -280,7 +314,28 @@ Do you really want to update LND now?
       if [ ${#error} -gt 0 ]; then
         whiptail --title "ERROR" --msgbox "${error}" 8 30
       else
-        /home/admin/config.scripts/blitz.shutdown.sh reboot
+        whiptail \
+         --title " LND update " \
+         --yes-button "Reboot" \
+         --no-button "Skip Reboot" \
+         --yesno \
+"OK LND update is done.
+
+By default a reboot is advised to sync macaroons and the TLS certificate.
+Consider rebooting later manually if encountering any problems.
+      " 12 50
+        if [ $? -eq 0 ]; then
+          clear
+          echo "# REBOOT .."
+          sudo /home/admin/config.scripts/blitz.shutdown.sh reboot
+          sleep 8
+          exit 1
+        else
+          echo "# SKIP REBOOT"
+          echo "# starting the lnd.service .."
+          sudo systemctl start lnd
+          exit 0
+        fi
         sleep 8
       fi
       ;;
@@ -293,27 +348,27 @@ cl()
   # get cl info
   source <(sudo -u admin /home/admin/config.scripts/cl.update.sh info)
 
-  # C-lightning Update Options
+  # Core Lightning Update Options
   OPTIONS=()
   if [ ${clUpdateInstalled} -eq 0 ]; then
-    OPTIONS+=(VERIFIED "Optional C-lightning update to ${clUpdateVersion}")
+    OPTIONS+=(VERIFIED "Optional Core Lightning update to ${clUpdateVersion}")
   fi
-  OPTIONS+=(RECKLESS "Experimental C-lightning update to ${clLatestVersion}")
+  OPTIONS+=(RECKLESS "Experimental Core Lightning update to ${clLatestVersion}")
 
-  CHOICE=$(whiptail --clear --title "Update C-lightning Options" --menu "" 9 60 2 "${OPTIONS[@]}" 2>&1 >/dev/tty)
+  CHOICE=$(whiptail --clear --title "Update Core Lightning Options" --menu "" 9 60 2 "${OPTIONS[@]}" 2>&1 >/dev/tty)
 
   clear
   case $CHOICE in
     VERIFIED)
       if [ ${clUpdateInstalled} -eq 1 ]; then
-        whiptail --title "ALREADY INSTALLED" --msgbox "The C-lightning version ${clUpdateVersion} is already installed." 8 30
+        whiptail --title "ALREADY INSTALLED" --msgbox "The Core Lightning version ${clUpdateVersion} is already installed." 8 30
         exit 0
       fi
-      whiptail --title "OPTIONAL C-lightning UPDATE" --yes-button "Cancel" --no-button "Update" --yesno "BEWARE on updating to C-lightning v${clUpdateVersion}:
+      whiptail --title "OPTIONAL Core Lightning UPDATE" --yes-button "Cancel" --no-button "Update" --yesno "BEWARE on updating to Core Lightning v${clUpdateVersion}:
 
 ${clUpdateComment}
 
-Do you really want to update C-lightning now?
+Do you really want to update Core Lightning now?
       " 16 58
       if [ $? -eq 0 ]; then
         echo "# cancel update"
@@ -325,20 +380,20 @@ Do you really want to update C-lightning now?
       if [ ${#error} -gt 0 ]; then
         whiptail --title "ERROR" --msgbox "${error}" 8 30
       else
-        echo "# C-lightning was updated successfully"
+        echo "# Core Lightning was updated successfully"
         exit 0
       fi
       ;;
     RECKLESS)
-      whiptail --title "RECKLESS C-lightning UPDATE to ${clLatestVersion}" --yes-button "Cancel" --no-button "Update" --yesno "Using the 'RECKLESS' C-lightning update will simply
-grab the latest C-lightning release published on the C-lightning GitHub page (also release candidates).
+      whiptail --title "RECKLESS Core Lightning UPDATE to ${clLatestVersion}" --yes-button "Cancel" --no-button "Update" \
+      --yesno "Using the 'RECKLESS' Core Lightning update will download the latest Core Lightning release published on the Core Lightning GitHub page.
 
-There will be no security checks on signature, etc.
+The update was not tested as a part of the release.
 
 This update mode is only recommended for testing and
-development nodes with no serious funding. 
+development nodes with no serious funding.
 
-Do you really want to update C-lightning now?
+Do you really want to update Core Lightning now?
       " 16 58
       if [ $? -eq 0 ]; then
         echo "# cancel update"
@@ -349,7 +404,11 @@ Do you really want to update C-lightning now?
       if [ ${#error} -gt 0 ]; then
         whiptail --title "ERROR" --msgbox "${error}" 8 30
       else
-        echo "# C-lightning was updated successfully"
+        echo "# Core Lightning was updated successfully"
+
+        # unlock or fix issues from the logs
+        /home/admin/config.scripts/cl.hsmtool.sh unlock ${chain}net
+
         exit 0
       fi
       ;;
@@ -400,12 +459,29 @@ Do you really want to update Bitcoin Core now?
 
       error=""
       warn=""
-      source <(sudo -u admin /home/admin/config.scripts/bitcoin.update.sh tested)
-      if [ ${#error} -gt 0 ]; then
-        whiptail --title "ERROR" --msgbox "${error}" 8 30
-      else
+      sudo -u admin /home/admin/config.scripts/bitcoin.update.sh tested
+      whiptail \
+        --title " Bitcoin Core update " \
+        --yes-button "Reboot" \
+        --no-button "Skip Reboot" \
+        --yesno \
+"OK Bitcoin Core update is done.
+
+By default a reboot is advised.
+      " 9 40
+      if [ $? -eq 0 ]; then
+        clear
+        echo "# REBOOT .."
+        sudo /home/admin/config.scripts/blitz.shutdown.sh reboot
         sleep 8
+        exit 1
+      else
+        echo "# SKIP REBOOT"
+        echo "# starting the bitcoind.service .."
+        sudo systemctl start bitcoind
+        exit 0
       fi
+      sleep 8
       ;;
     RECKLESS)
       whiptail --title "UNTESTED Bitcoin Core update to ${bitcoinLatestVersion}" --yes-button "Cancel" \
@@ -425,19 +501,61 @@ Do you really want to update Bitcoin Core now?
       source <(sudo -u admin /home/admin/config.scripts/bitcoin.update.sh reckless)
       if [ ${#error} -gt 0 ]; then
         whiptail --title "ERROR" --msgbox "${error}" 8 30
-      else
-        sleep 8
       fi
+      whiptail \
+        --title " Bitcoin Core update " \
+        --yes-button "Reboot" \
+        --no-button "Skip Reboot" \
+        --yesno \
+"OK Bitcoin Core update is done.
+
+By default a reboot is advised.
+      " 9 40
+      if [ $? -eq 0 ]; then
+        clear
+        echo "REBOOT .."
+        sudo /home/admin/config.scripts/blitz.shutdown.sh reboot
+        sleep 8
+        exit 1
+      else
+        echo "# SKIP REBOOT"
+        echo "# starting the bitcoind.service .."
+        sudo systemctl start bitcoind
+        exit 0
+      fi
+      sleep 8
       ;;
     CUSTOM)
       sudo -u admin /home/admin/config.scripts/bitcoin.update.sh custom
+      whiptail \
+        --title " Bitcoin Core update " \
+        --yes-button "Reboot" \
+        --no-button "Skip Reboot" \
+        --yesno \
+"OK Bitcoin Core update is done.
+
+By default a reboot is advised.
+      " 9 40
+      if [ $? -eq 0 ]; then
+        clear
+        echo "# REBOOT .."
+        sudo /home/admin/config.scripts/blitz.shutdown.sh reboot
+        sleep 8
+        exit 1
+      else
+        echo "# SKIP REBOOT"
+        echo "# starting the bitcoind.service .."
+        sudo systemctl start bitcoind
+        exit 0
+      fi
+      sleep 8
       ;;
   esac
 }
 
 # quick call by parameter
 if [ "$1" == "github" ]; then
-  patch
+  patch all
   exit 0
 fi
 
@@ -453,39 +571,56 @@ if [ "${lightning}" == "lnd" ] || [ "${lnd}" == "on" ]; then
 fi
 
 if [ "${lightning}" == "cl" ] || [ "${cl}" == "on" ]; then
-  OPTIONS+=(CL "Interim C-lightning Update Options")
+  OPTIONS+=(CL "Interim Core Lightning Update Options")
 fi
 
 if [ "${bos}" == "on" ]; then
   OPTIONS+=(BOS "Update Balance of Satoshis")
 fi
 
+if [ "${ElectRS}" == "on" ]; then
+  OPTIONS+=(ELECTRS "Update Electrs")
+fi
+
+if [ "${RTL}" == "on" ]||[ "${cRTL}" == "on" ]; then
+  OPTIONS+=(RTL "Update RTL")
+fi
+
 if [ "${thunderhub}" == "on" ]; then
   OPTIONS+=(THUB "Update ThunderHub")
 fi
 
+if [ "${lndg}" == "on" ]; then
+  OPTIONS+=(LNDG "Update LNDg")
+fi
+
+## Disabled for now until the base image has Python 3.10
 if [ "${specter}" == "on" ]; then
   OPTIONS+=(SPECTER "Update Specter Desktop")
 fi
 
+if [ "${BTCPayServer}" == "on" ]; then
+  OPTIONS+=(BTCPAY "Update BTCPayServer")
+fi
+
 if [ "${sphinxrelay}" == "on" ]; then
   OPTIONS+=(SPHINX "Update Sphinx Server Relay")
 fi
 
-if [ "${pyblock}" == "on" ]; then
-  OPTIONS+=(PYBLOCK "Update PyBLOCK")
-fi
-
 if [ "${mempoolExplorer}" == "on" ]; then
   OPTIONS+=(MEMPOOL "Update Mempool Explorer")
 fi
 
+if [ "${jam}" == "on" ]; then
+  OPTIONS+=(JAM "Update Jam (JoinMarket WebUI)")
+fi
+
 if [ "${runBehindTor}" == "on" ]; then
-  OPTIONS+=(TOR "Update Tor from the source code")
+  OPTIONS+=(TOR "Update Tor from the Torproject repo")
 fi
 
 CHOICE_HEIGHT=$(("${#OPTIONS[@]}/2+1"))
-HEIGHT=$((CHOICE_HEIGHT+6))  
+HEIGHT=$((CHOICE_HEIGHT+6))
 CHOICE=$(dialog --clear \
                 --backtitle "" \
                 --title " Update Options " \
@@ -501,7 +636,7 @@ case $CHOICE in
     ;;
   PATCH)
     patchNotice
-    patch
+    patch all
     ;;
   LND)
     lnd
@@ -515,22 +650,34 @@ case $CHOICE in
   BOS)
     /home/admin/config.scripts/bonus.bos.sh update
     ;;
+  ELECTRS)
+    /home/admin/config.scripts/bonus.electrs.sh update
+    ;;
+  RTL)
+    /home/admin/config.scripts/bonus.rtl.sh update
+    ;;
   THUB)
     /home/admin/config.scripts/bonus.thunderhub.sh update
     ;;
+  LNDG)
+    /home/admin/config.scripts/bonus.lndg.sh update
+    ;;
   SPECTER)
     /home/admin/config.scripts/bonus.specter.sh update
     ;;
+  BTCPAY)
+    /home/admin/config.scripts/bonus.btcpayserver.sh update
+    ;;
   SPHINX)
     /home/admin/config.scripts/bonus.sphinxrelay.sh update
     ;;
-  PYBLOCK)
-    /home/admin/config.scripts/bonus.pyblock.sh update
-    ;;
   TOR)
-    sudo /home/admin/config.scripts/internet.tor.sh update  
+    sudo /home/admin/config.scripts/tor.network.sh update
     ;;
   MEMPOOL)
-    /home/admin/config.scripts/bonus.mempool.sh update 
+    /home/admin/config.scripts/bonus.mempool.sh update
+    ;;
+  JAM)
+    /home/admin/config.scripts/bonus.jam.sh update
     ;;
 esac

home.admin/BBcashoutWallet.sh

@@ -90,10 +90,14 @@ echo "******************************"
 echo "Sweep all possible Funds"
 echo "******************************"
 
+# raise high focus on onchain wallet balance & pending for the next 15min
+/home/admin/_cache.sh focus ln_${LNTYPE}_${chain}net_wallet_onchain_pending 0 900
+/home/admin/_cache.sh focus ln_${LNTYPE}_${chain}net_wallet_onchain_balance 0 900
+
 # execute command
 if [ ${LNTYPE} = "cl" ];then
   # withdraw destination satoshi [feerate] [minconf] [utxos]
-  command="$lightningcli_alias withdraw ${address} all slow"
+  command="$lightningcli_alias withdraw ${address} all"
 elif [ ${LNTYPE} = "lnd" ];then
   command="$lncli_alias sendcoins --sweepall --addr=${address} --conf_target=36"
 fi
@@ -104,9 +108,9 @@ echo
 if [ ${#error} -gt 0 ]; then
     echo "FAIL: $error"
     echo
-    echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
+    echo "#################################"
     echo "FAIL --> Was not able to send transaction (see error above)"
-    echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
+    echo "#################################"
 else
     echo "Result: $result"
     echo

home.admin/BBcloseAllChannels.sh

@@ -67,6 +67,11 @@ else
   echo "# OK - the chain is synced"
 fi
 
+# raise high focus on lightning channels next 1 hour
+/home/admin/_cache.sh focus ln_${LNTYPE}_${CHAIN}_channels_active 0 3600
+/home/admin/_cache.sh focus ln_${LNTYPE}_${CHAIN}_channels_inactive 0 3600
+/home/admin/_cache.sh focus ln_${LNTYPE}_${CHAIN}_channels_total 0 3600
+
 echo "#####################################"
 echo "# Closing All Channels (EXPERIMENTAL)"
 echo "#####################################"

home.admin/BBconnectPeer.sh

@@ -16,6 +16,9 @@ fi
 
 source <(/home/admin/config.scripts/network.aliases.sh getvars $1 $2)
 
+# raise high focus on lightning peers next 5min
+/home/admin/_cache.sh focus ln_${LNTYPE}_${CHAIN}_peers 0 300
+
 # let user enter a <pubkey>@host
 l1="Enter the node pubkey address with host information:"
 l2="example -----> 024ddf33[...]1f5f9f3@91.65.1.38:9735"
@@ -134,9 +137,9 @@ if [ ${win} -eq 1 ]; then
   echo
   echo "What's next? --> Open a channel with that node."
 else
-  echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
+  echo "###############"
   echo "FAIL"
-  echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
+  echo "###############"
   echo "${info}"
 fi
 

home.admin/BBcreateInvoice.sh

@@ -17,7 +17,6 @@ if [ ${#chain} -eq 0 ]; then
 fi
 
 source <(/home/admin/config.scripts/network.aliases.sh getvars $1 $2)
-
 source <(/home/admin/config.scripts/network.aliases.sh getvars $LNTYPE ${chain}net)
 
 # check if chain is in sync
@@ -56,9 +55,9 @@ elif [ $LNTYPE = lnd ];then
 fi
 if [ ${openChannels} -eq 0 ]; then
   echo 
-  echo "!!!!!!!!!!!!!!!!!!!"
+  echo "#########"
   echo "FAIL - You have NO ESTABLISHED CHANNELS .. open a channel first."
-  echo "!!!!!!!!!!!!!!!!!!!"
+  echo "#########"
   sleep 3
   exit 0
 fi
@@ -110,9 +109,9 @@ error=$(cat ${_error} 2>/dev/null)
 #echo "error(${error})"
 
 if [ ${#error} -gt 0 ]; then
-  echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
+  echo "###############"
   echo "FAIL"
-  echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
+  echo "###############"
   echo "${error}"
 else
   if [ $LNTYPE = cl ];then
@@ -121,12 +120,15 @@ else
     rhash=$(echo "$result" | grep r_hash | cut -d '"' -f4)
     payReq=$(echo "$result" | grep payment_request | cut -d '"' -f4)
   fi
-  /home/admin/config.scripts/blitz.display.sh qr "${payReq}"
+  sudo /home/admin/config.scripts/blitz.display.sh qr "${payReq}"
 
   if [ $(sudo dpkg-query -l | grep "ii  qrencode" | wc -l) = 0 ]; then
    sudo apt-get install qrencode -y > /dev/null
   fi
 
+  # raise high focus on lightning channel balance next 5min
+  /home/admin/_cache.sh focus ln_${LNTYPE}_${CHAIN}_channels_balance 0 300
+
   echo
   echo "********************"
   echo "Here is your invoice"
@@ -160,8 +162,8 @@ else
       echo $result
       echo
       echo "OK the Invoice was paid - returning to menu."
-      /home/admin/config.scripts/blitz.display.sh hide
-      /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/ok.png
+      sudo /home/admin/config.scripts/blitz.display.sh hide
+      sudo /home/admin/config.scripts/blitz.display.sh image /home/admin/raspiblitz/pictures/ok.png
       sleep 2
       break
     fi
@@ -180,7 +182,7 @@ else
 
   done
 
-  /home/admin/config.scripts/blitz.display.sh hide
+  sudo /home/admin/config.scripts/blitz.display.sh hide
 
 fi
 echo "Press ENTER to return to main menu."

home.admin/BBfundWallet.sh

@@ -27,9 +27,9 @@ elif [ $LNTYPE = lnd ];then
 fi
 if [ ${chainOutSync} -eq 1 ]; then
   if [ $LNTYPE = cl ];then
-    echo "# FAIL PRECHECK - lncli getinfo shows 'synced_to_chain': false - wait until chain is sync "
+    echo "# FAIL PRECHECK - '$lightningcli_alias getinfo' blockheight is different from 'bitcoind getblockchaininfo' - wait until chain is sync "
   else
-    echo "# FAIL PRECHECK - 'lightning-cli getinfo' blockheight is different from 'bitcoind getblockchaininfo' - wait until chain is sync "
+    echo "# FAIL PRECHECK - '$lncli_alias getinfo' shows 'synced_to_chain': false - wait until chain is sync "
   fi
   echo 
   echo "# PRESS ENTER to return to menu"
@@ -69,9 +69,6 @@ fi
 
 # prepare coin info
 coininfo="Bitcoin"
-if [ "$network" = "litecoin" ]; then
-  coininfo="Litecoin"
-fi
 if [ "$chain" = "test" ]; then
   coininfo="TESTNET Bitcoin"
 fi
@@ -82,7 +79,11 @@ if [ "$chain" = "test" ]; then
 fi
 
 echo "generating QR code ... please wait"
-/home/admin/config.scripts/blitz.display.sh qr "$network:${address}"
+sudo /home/admin/config.scripts/blitz.display.sh qr "$network:${address}"
+
+# raise high focus on onchain wallet balance & pending for the next 15min
+/home/admin/_cache.sh focus ln_${LNTYPE}_${chain}net_wallet_onchain_pending 0 900
+/home/admin/_cache.sh focus ln_${LNTYPE}_${chain}net_wallet_onchain_balance 0 900
 
 # dialog with instructions while QR code is shown on LCD
 whiptail --backtitle "Fund your onchain wallet" \
@@ -97,7 +98,7 @@ if [ $? -eq 1 ]; then
 fi
 
 # clean up
-/home/admin/config.scripts/blitz.display.sh hide
+sudo /home/admin/config.scripts/blitz.display.sh hide
 
 # follow up info
 if [ $LNTYPE = cl ];then

home.admin/BBopenChannel.sh

@@ -33,9 +33,9 @@ if [ ${chainOutSync} -eq 1 ]; then
   if [ $LNTYPE = cl ];then
     echo "# FAIL PRECHECK - 'lightning-cli getinfo' blockheight is different from 'bitcoind getblockchaininfo' - wait until chain is sync "
   elif [ $LNTYPE = lnd ];then
-    echo "# FAIL PRECHECK - lncli getinfo shows 'synced_to_chain': false - wait until chain is sync "  
+    echo "# FAIL PRECHECK - lncli getinfo shows 'synced_to_chain': false - wait until chain is sync "
   fi
-  echo 
+  echo
   echo "# PRESS ENTER to return to menu"
   read key
   exit 0
@@ -50,7 +50,7 @@ if [ $LNTYPE = cl ];then
     confirmedBalance=$((confirmedBalance+i))
   done
 elif [ $LNTYPE = lnd ];then
-  confirmedBalance=$($lncli_alias walletbalance | grep '"confirmed_balance"' | cut -d '"' -f4)
+  confirmedBalance=$($lncli_alias walletbalance | jq -r .confirmed_balance)
 fi
 
 if [ ${confirmedBalance} -eq 0 ]; then
@@ -79,6 +79,11 @@ if [ ${numConnectedPeers} -eq 0 ]; then
   exit 0
 fi
 
+# raise high focus on lightning channels next 1 hour
+/home/admin/_cache.sh focus ln_${LNTYPE}_${CHAIN}_channels_pending 0 3600
+/home/admin/_cache.sh focus ln_${LNTYPE}_${CHAIN}_channels_total 0 3600
+/home/admin/_cache.sh focus ln_${LNTYPE}_${CHAIN}_channels_active 0 3600
+
 # let user pick a peer to open a channels with
 OPTIONS=()
 if [ $LNTYPE = cl ];then
@@ -108,13 +113,13 @@ pubKey=$(dialog --clear \
 clear
 if [ ${#pubKey} -eq 0 ]; then
   clear
-  echo 
+  echo
   echo "no channel selected - returning to menu ..."
   sleep 4
   exit 0
 fi
 
-# find out what is the minimum amount 
+# find out what is the minimum amount
 # TODO find a better way - also consider dust and channel reserve
 # details see here: https://github.com/btcontract/lnwallet/issues/52
 minSat=20000
@@ -186,9 +191,9 @@ error=$(cat ${_error})
 #echo "error(${error})"
 
 if [ ${#error} -gt 0 ]; then
-  echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
+  echo "###############"
   echo "FAIL"
-  echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
+  echo "###############"
   echo "${error}"
 else
   echo "******************************"
@@ -218,9 +223,6 @@ else
       echo "http://mempoolhqx4isw62xs7abwphsq7ldayuidyx2v2oethdhhj6mlo2r6ad.onion/${chain}net/tx/${fundingTX}"
     fi
   fi
-  if [ "${network}" = "litecoin" ]; then
-    echo "https://live.blockcypher.com/ltc/tx/${fundingTX}/"
-  fi
 fi
 echo
 echo "Press ENTER to return to main menu."

home.admin/BBpayInvoice.sh

@@ -18,8 +18,6 @@ fi
 
 source <(/home/admin/config.scripts/network.aliases.sh getvars $1 $2)
 
-source <(/home/admin/config.scripts/network.aliases.sh getvars $LNTYPE ${chain}net)
-
 # check if chain is in sync
 if [ $LNTYPE = cl ];then
   lncommand="${netprefix}lightning-cli"
@@ -56,34 +54,26 @@ elif [ $LNTYPE = lnd ];then
 fi
 if [ ${openChannels} -eq 0 ]; then
   echo 
-  echo "!!!!!!!!!!!!!!!!!!!"
+  echo "#########"
   echo "FAIL - You have NO ESTABLISHED CHANNELS .. open a channel first."
-  echo "!!!!!!!!!!!!!!!!!!!"
+  echo "#########"
   sleep 3
   echo 
   exit 0
 fi
 
 paymentRequestStart="???"
-if [ "${network}" = "bitcoin" ]; then
-  if [ "${chain}" = "main" ]; then
-    paymentRequestStart="lnbc"
-  else
-    paymentRequestStart="lntb"
-  fi
-elif [ "${network}" = "litecoin" ]; then
-    paymentRequestStart="lnltc"
+if [ "${chain}" = "main" ]; then
+  paymentRequestStart="lnbc"
+else
+  paymentRequestStart="lntb"
 fi
 
 testSite="???"
-if [ "${network}" = "bitcoin" ]; then
-  if [ "${chain}" = "main" ]; then
-    testSite="https://satoshis.place"
-  else
-    testSite="https://starblocks.acinq.co/"
-  fi
-elif [ "${network}" = "litecoin" ]; then
-    testSite="https://millionlitecoinhomepage.net"
+if [ "${chain}" = "main" ]; then
+  testSite="https://satoshis.place"
+else
+  testSite="https://starblocks.acinq.co/"
 fi
 
 # let user enter the invoice
@@ -112,6 +102,9 @@ elif [ $LNTYPE = lnd ];then
   command="$lncli_alias sendpayment --force --pay_req=${invoice}"
 fi
 
+# raise high focus on lightning channel balance next 5min
+/home/admin/_cache.sh focus ln_${LNTYPE}_${CHAIN}_channels_balance 0 300
+
 # info output
 clear
 echo "************************************************************"
@@ -142,10 +135,10 @@ if [ ${resultIsError} -gt 0 ]; then
 fi
 
 if [ ${#error} -gt 0 ]; then
-  echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
+  echo "###############"
   echo "FAIL"
   echo "try with a wallet app or the RTL WebGUI (see services)"
-  echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
+  echo "###############"
   echo "${error}"
 else
   echo "${result}"

home.admin/BlitzTUI/blitztui/client.py

@@ -22,16 +22,16 @@ if IS_WIN32_ENV:
 else:
     sys.path.insert(1, '/home/admin/config.scripts')
 
-from lndlibs import rpc_pb2 as ln
+from lndlibs import lightning_pb2 as ln
 try:
-    from lndlibs import rpc_pb2_grpc as lnrpc
+    from lndlibs import lightning_pb2_grpc as lnrpc
 except ModuleNotFoundError as err:
     log.error("ModuleNotFoundError - most likely an issue with incompatible Python3 import.\n"
               "Please run the following two lines to fix this: \n"
               "\n"
               "sed -i -E '1 a from __future__ import absolute_import' "
-              "/home/admin/config.scripts/lndlibs/rpc_pb2_grpc.py\n"
-              "sed -i -E 's/^(import.*_pb2)/from . \\1/' /home/admin/config.scripts/lndlibs/rpc_pb2_grpc.py")
+              "/home/admin/config.scripts/lndlibs/lightning_pb2_grpc.py\n"
+              "sed -i -E 's/^(import.*_pb2)/from . \\1/' /home/admin/config.scripts/lndlibs/lightning_pb2_grpc.py")
     sys.exit(1)
 
 if not IS_WIN32_ENV:

home.admin/BlitzTUI/blitztui/main.py

@@ -154,6 +154,8 @@ class AppWindow(QMainWindow):
         process.readyReadStandardOutput.connect(
             lambda: log.info(str(process.readAllStandardOutput().data().decode('utf-8'))))
 
+        # test by connecting to the raspiblitz 'ssh -X admin@LAN_IP' and run:
+        # uxterm -fa Terminus -fs 9 -fn fixed +sb -hold -e 'bash -c "sudo -u pi /home/admin/00infoLCD.sh --pause 0"'
         process.start('uxterm', ['-fa', 'Terminus', '-fs', '9', '-fn', 'fixed', '-into', str(int(self.ui.widget.winId())),
                                 '+sb', '-hold', '-e', 'bash -c \"/home/admin/00infoLCD.sh --pause {}\"'.format(pause)])
 

home.admin/BlitzTUI/blitztui/memo.py

@@ -682,7 +682,7 @@ adjectives = [
     "picky",
     "pied",
     "piggy",
-    "pilar",
+    "pillar",
     "pink",
     "plain",
     "plane",

home.admin/BlitzTUI/data/Wordlist-Adjectives-Common-Audited-Len-3-6.txt

@@ -648,7 +648,7 @@ piano
 picky
 pied
 piggy
-pilar
+pillar
 pink
 plain
 plane

home.admin/BlitzTUI/docs/README.md

@@ -39,7 +39,7 @@ Have a look at the [Mini-Tutorial](tutorial.md)
 ## Release workflow
 
 * `make build-ui` - in case there were any changes to the *.ui or *.qrc files
-* make sure you have all changes added and commited (consider re-basing)
+* make sure you have all changes added and committed (consider re-basing)
 * update the version in `blitztui/version.py`
 * update the `CHANGELOG.md` file (reflect the new version!)
 * `git add CHANGELOG.md blitztui/version.py`

home.admin/BlitzTUI/docs/tutorial.md

@@ -25,7 +25,7 @@ Your screen should look similar to this:
 * (3) this should be reflected in the preview Window
 * (4) save your changes
 
-The next step is to transfer (use scp or WinSCP) the updated `home.ui` to the RaspiBlitz.
+The next step is to transfer (use sftp or WinSCP) the updated `home.ui` to the RaspiBlitz.
 
 Login to your RaspiBlitz as **admin** (Password A) and change the directory to `~/raspiblitz/home.admin/BlitzTUI`.
 

home.admin/XXcleanHDD.sh

@@ -4,7 +4,7 @@ extraParameter="$1"
 forceParameter="$2"
 if [ "${extraParameter}" = "-all" ]; then
 
-    echo "# !!!! This will DELETE ALL DATA & POSSIBLE FUNDS from the HDD !!!!"
+    echo "## This will DELETE ALL DATA & POSSIBLE FUNDS from the HDD ##"
     echo "# Press ENTER to really continue - CTRL+c to CANCEL (last chance)"
     read key
 
@@ -17,7 +17,6 @@ if [ "${extraParameter}" = "-all" ]; then
     sudo systemctl stop lnd.service 2>/dev/null
     echo "# - blockchain"
     sudo systemctl stop bitcoind.service 2>/dev/null
-    sudo systemctl stop litecoind.service 2>/dev/null
 
     # delete plain all on HDD
     echo "# cleaning HDD ... (please wait)"
@@ -38,7 +37,6 @@ elif [ "${extraParameter}" = "-blockchain" ]; then
     sudo systemctl stop lnd.service 2>/dev/null
     echo "# - blockchain"
     sudo systemctl stop bitcoind.service 2>/dev/null
-    sudo systemctl stop litecoind.service 2>/dev/null
     echo ""
     echo "# DELETING ..."
 
@@ -50,19 +48,11 @@ elif [ "${extraParameter}" = "-blockchain" ]; then
     sudo mv /mnt/hdd/wallet.dat /mnt/hdd/bitcoin/wallet.dat 2>/dev/null
     sudo chown -R bitcoin:bitcoin /mnt/hdd/bitcoin
 
-    # delete litecoin blockchain (but keep config & wallet)
-    sudo mv /mnt/hdd/litecoin/litecoin.conf /mnt/hdd/litecoin.conf 2>/dev/null
-    sudo mv /mnt/hdd/litecoin/wallet.dat /mnt/hdd/wallet.dat 2>/dev/null
-    sudo rm -f -r /mnt/hdd/litecoin/*
-    sudo mv /mnt/hdd/litecoin.conf /mnt/hdd/litecoin/litecoin.conf 2>/dev/null
-    sudo mv /mnt/hdd/wallet.dat /mnt/hdd/litecoin/wallet.dat 2>/dev/null
-    sudo chown -R bitcoin:bitcoin /mnt/hdd/litecoin
-
     echo "OK Blockchain data deleted - you may want now run: /home/admin/98repairBlockchain.sh"
     
 else
 
-    echo "!!!! This will DELETE your personal data & POSSIBLE FUNDS from the HDD !!!!"
+    echo "## This will DELETE your personal data & POSSIBLE FUNDS from the HDD ##"
     echo "--> It will keep Blockchain data - so you dont have to download/copy again."
     echo "Press ENTER to really continue - CTRL+c to CANCEL (last chance)"
     read key
@@ -80,7 +70,6 @@ else
 
     echo "- blockchain"
     sudo systemctl stop bitcoind.service 2>/dev/null
-    sudo systemctl stop litecoind.service 2>/dev/null
 
     # just delete selective
     echo "selective delete ... (please wait)"
@@ -95,7 +84,7 @@ else
     sudo rm -f /mnt/hdd/bitcoin/testnet3/.* 2>/dev/null
     sudo rm -f -r /mnt/hdd/bitcoin/testnet/database
 
-    # litecoin mainnet (clean working files)
+    # litecoin mainnet (clean working files) -- keep for legacy clean up reasons
     sudo rm -f /mnt/hdd/litecoin/* 2>/dev/null
     sudo rm -f /mnt/hdd/litecoin/.* 2>/dev/null
     sudo rm -f -r /mnt/hdd/litecoin/database

home.admin/XXcopyStation.sh

@@ -1,319 +0,0 @@
-#!/bin/bash
-
-# command info
-if [ "$1" = "-h" ] || [ "$1" = "-help" ]; then
- echo "# Turns the RaspiBlitz into HDD CopyStation Mode"
- echo "# lightning is deactivated during CopyStationMode"
- echo "# reboot RaspiBlitz to set back to normal mode"
- exit 1
-fi
-
-####### CONFIG #############
-
-# where to find the BITCOIN data directory (no trailing /)
-pathBitcoinBlockchain="/mnt/hdd/bitcoin"
-
-# where to find the LITECOIN data directory (no trailing /)
-pathLitecoinBlockchain="/mnt/hdd/litecoin"
-
-# where to find the RaspiBlitz HDD template directory (no trailing /)
-pathTemplateHDD="/mnt/hdd/app-storage/templateHDD"
-
-# 0 = ask before formatting/init new HDD
-# 1 = auto-formatting every new HDD that needs init
-nointeraction=1
-
-# override values if XXcopyStation.conf files exists
-# use when you run this outside RaspiBlitz
-# - clean Ubuntu install
-# - install bitcoind as systemd service
-# - disable automount: https://askubuntu.com/questions/89244/how-to-disable-automount-in-nautiluss-preferences#102601
-# - clone the github to get script (or download)
-# - set your pathes bitcoin/template in conf file
-source ./XXcopyStation.conf 2>/dev/null
-# -- start script with parameter "-foreground"
-
-####### SCRIPT #############
-
-# check sudo
-if [ "$EUID" -ne 0 ]; then
-  echo "Please run as root (with sudo)"
-  exit 1
-fi
-
-# get HDD info
-source <(sudo /home/admin/config.scripts/blitz.datadrive.sh status)
-
-# check if HDD is mounted
-if [ ${isMounted} -eq 0 ]; then
-  echo "error='HDD is not mounted'"
-  exit 1
-fi
-
-# check if HDD is big enough
-if [ ${hddGigaBytes} -lt 800 ]; then
-  echo "# To run copy station (+/- 1TB needed)"
-  echo "error='HDD is too small'"
-  exit 1
-fi
-
-# check that path information is valid
-if [ -d "$pathBitcoinBlockchain" ]; then
-  echo "# OK found $pathBitcoinBlockchain"
-else
-  echo "# FAIL path of 'pathBitcoinBlockchain' does not exists: ${pathBitcoinBlockchain}"
-  echo "error='pathBitcoinBlockchain nit found'"
-  exit 1
-fi
-
-# make sure that its running in screen
-# call with '-foreground' to prevent running in screen
-if [ "$1" != "-foreground" ]; then 
-  screenPID=$(screen -ls | grep "copystation" | cut -d "." -f1 | xargs)
-  if [ ${#screenPID} -eq 0 ]; then
-    # start copystation in screen 
-    echo "# starting copystation screen session"
-    screen -S copystation -dm /home/admin/XXcopyStation.sh -foreground
-    screen -d -r
-    exit 0
-  else
-    echo "# changing into running copystation screen session"
-    screen -d -r
-    exit 0
-  fi
-fi
-
-clear
-echo "# ******************************"
-echo "# RASPIBLITZ COPYSTATION SCRIPT"
-echo "# ******************************"
-echo
-
-echo "*** CHECKING CONFIG"
-
-# check that path information is valid
-if [ -d "$pathTemplateHDD" ]; then
-  echo "# OK found $pathTemplateHDD"
-else
-  echo "# Creating: ${pathTemplateHDD}"
-  mkdir ${pathTemplateHDD}
-  chmod 777 ${pathTemplateHDD}
-fi
-
-# make sure that lnd is stopped (if running)
-systemctl stop lnd 2>/dev/null
-systemctl stop background 2>/dev/null
-
-#if [ "${nointeraction}" == "1" ]; then
-#  echo "setting RaspiBlitz LCD info"
-#  sudo sed -i "s/^state=.*/state=copystation/g" /home/admin/raspiblitz.info 2>/dev/null
-#  sudo sed -i "s/^message=.*/message='Disconnect target HDDs!'/g" /home/admin/raspiblitz.info 2>/dev/null
-#  echo "Disconnect target HDDs! .. 30sec until continue."
-#  sleep 30
-#else
-#  echo
-#  echo "*** INIT HDD SCAN"
-#  echo "Please make sure that no HDDs that you want to sync later to are not connected now."
-#  echo "PRESS ENTER when ready."
-#  read key
-#fi
-
-# finding system drives (the drives that should not be synced to)
-echo "# OK - the following drives detected as the system drive: $datadisk"
-echo
-
-if [ "${nointeraction}" == "1" ]; then
-  sudo sed -i "s/^message=.*/message='Connect target HDDs ..'/g" /home/admin/raspiblitz.info 2>/dev/null
-  sleep 5
-fi
-
-# BASIC IDEA:
-# 1. get fresh data from bitcoind --> template data
-# 2. detect HDDs
-# 3. sync HDDs with template data
-# repeat
-
-echo 
-echo "*** RUNNING ***"
-lastBlockchainUpdateTimestamp=1
-
-while :
-do
-  
-  ################################################
-  # 1. get fresh data from bitcoind for template data
-
-  # only execute every 30min
-  nowTimestamp=$(date +%s)
-  secondsDiff=$(echo "${nowTimestamp}-${lastBlockchainUpdateTimestamp}" | bc)
-  echo "# seconds since last update from bitcoind: ${secondsDiff}"
-  echo
-
-  if [ ${secondsDiff} -gt 3000 ]; then
-  
-    echo "******************************"
-    echo "Bitcoin Blockchain Update"
-    echo "******************************"
-
-    # stop blockchains
-    echo "# Stopping Blockchain ..."
-    systemctl stop bitcoind 2>/dev/null
-    systemctl stop litecoind 2>/dev/null
-    sleep 10
-
-    # sync bitcoin
-    echo "# Syncing Bitcoin to template folder ..."
-
-    sudo sed -i "s/^message=.*/message='Updating Template: Bitcoin'/g" /home/admin/raspiblitz.info 2>/dev/null
-
-    # make sure the bitcoin directory in template folder exists
-    if [ ! -d "$pathTemplateHDD/bitcoin" ]; then
-      echo "# creating the bitcoin subfolder in the template folder"
-      mkdir ${pathTemplateHDD}/bitcoin
-      chmod 777 ${pathTemplateHDD}/bitcoin
-    fi
-
-    # do the sync to the template folder for BITCOIN
-    rsync -a --info=progress2 --delete ${pathBitcoinBlockchain}/chainstate ${pathBitcoinBlockchain}/blocks ${pathTemplateHDD}/bitcoin
-
-    litecoindirsize=$(sudo du -s -b /mnt/hdd/litecoin | awk '$1=$1' | cut -d " " -f1)
-    if [ -d "${pathLitecoinBlockchain}" ] && [ ${litecoindirsize} -gt 1000000000 ]; then
-
-      # sync litecoin
-      echo "# Syncing Litecoin ..."
-
-      echo "# creating the litecoin subfolder in the template folder"
-      mkdir ${pathTemplateHDD}/litecoin 2>/dev/null
-      chmod 777 ${pathTemplateHDD}/litecoin 2>/dev/null
-
-      sudo sed -i "s/^message=.*/message='Updating Template: Litecoin'/g" /home/admin/raspiblitz.info 2>/dev/null
-
-      # do the sync to the template folder for LITECOIN
-      rsync -a --info=progress2 --delete ${pathLitecoinBlockchain}/chainstate ${pathLitecoinBlockchain}/blocks ${pathTemplateHDD}/litecoin
-
-    fi
-
-    # restart bitcoind (to let further setup while syncing HDDs)
-    echo "# Restarting Blockchain ..."
-    systemctl start bitcoind 2>/dev/null
-    systemctl start litecoind 2>/dev/null
-
-    # update timer
-    lastBlockchainUpdateTimestamp=$(date +%s)
-  fi
-
-  ################################################
-  # 2. detect connected HDDs and loop thru them
-
-  echo
-  echo "**************************************"
-  echo "SYNCING TEMPLATE -> CONNECTED HDD/SSDs"
-  echo "**************************************"
-  echo "NOTE: Only use to prepare fresh HDDs"
-
-  sleep 4
-  echo "" > ./.syncinfo.tmp
-  lsblk -o NAME | grep "^[s|v]d" | while read -r detectedDrive ; do
-    isSystemDrive=$(echo "${datadisk}" | grep -c "${detectedDrive}")
-    if [ ${isSystemDrive} -eq 0 ]; then
-
-      # check if drives 1st partition is named BLOCKCHAIN & in EXT4 format
-      isNamedBlockchain=$(lsblk -o NAME,FSTYPE,LABEL | grep "${detectedDrive}" | grep -c "BLOCKCHAIN")
-      isFormatExt4=$(lsblk -o NAME,FSTYPE,LABEL | grep "${detectedDrive}" | grep -c "ext4")
-      
-      # init a fresh device
-      if [ ${isNamedBlockchain} -eq 0 ] || [ ${isFormatExt4} -eq 0 ]; then
-
-        echo "*** NEW EMPTY HDD FOUND ***"
-        echo "Device: ${detectedDrive}"
-        echo "isNamedBlockchain: ${isNamedBlockchain}"
-        echo "isFormatExt4:" ${isFormatExt4}
-
-        # check if size is OK
-        size=$(lsblk -o NAME,SIZE -b | grep "^${detectedDrive}" | awk '$1=$1' | cut -d " " -f 2)
-        echo "size: ${size}"
-        if [ ${size} -lt 250000000000 ]; then
-            whiptail --title "FAIL" --msgbox "
-THE DEVICE IS TOO SMALL <250GB
-Please remove device and PRESS ENTER
-            " 9 46
-        else
-
-          # if config value "nointeraction=1" default to format
-          if [ "${nointeraction}" != "1" ]; then
-            whiptail --title "Format HDD" --yes-button "Format" --no-button "Cancel" --yesno "
-Found new HDD. Do you want to FORMAT now?
-Label of device with: ${detectedDrive}
-            " 10 54
-            choice=$?
-          else
-            choice=0
-            sudo sed -i "s/^message=.*/message='Formatting new HDD: ${formatPartition}'/g" /home/admin/raspiblitz.info 2>/dev/null
-          fi
-
-          # on cancel
-          if [ "${choice}" != "0" ]; then
-            whiptail --title "Format HDD" --msgbox "
-OK NO FORMAT - Please remove device now.
-            " 8 46
-            exit 1
-          fi
-
-          # format the HDD
-          echo "Starting Formatting of device ${detectedDrive} ..."
-          sudo /home/admin/config.scripts/blitz.datadrive.sh format ext4 ${detectedDrive}
-
-        fi
-
-      fi # end init new HDD
-
-      ################################################
-      # 3. sync HDD with template data
-
-      partition=$(lsblk -o NAME,FSTYPE,LABEL | grep "${detectedDrive}" | grep "BLOCKCHAIN" | cut -d ' ' -f 1 | tr -cd "[:alnum:]")
-      if [ ${#partition} -gt 0 ]; then
-
-        # temp mount device
-        echo "mounting: ${partition}"
-        mkdir /mnt/hdd2 2>/dev/null
-        sudo mount -t ext4 /dev/${partition} /mnt/hdd2
-
-        # rsync device
-        mountOK=$(lsblk -o NAME,MOUNTPOINT | grep "${detectedDrive}" | grep -c "/mnt/hdd2")
-        if [ ${mountOK} -eq 1 ]; then
-          sudo sed -i "s/^message=.*/message='Syncing Template -> ${partition}'/g" /home/admin/raspiblitz.info 2>/dev/null
-          rsync -a --info=progress2 --delete ${pathTemplateHDD}/* /mnt/hdd2
-          sudo chmod -R 777 /mnt/hdd2
-          rm -r /mnt/hdd2/lost+found 2>/dev/null
-          echo "${partition} " >> ./.syncinfo.tmp
-        else
-          echo "# FAIL: was not able to mount --> ${partition}"
-        fi
-        
-        # unmount device
-        sudo umount -l /mnt/hdd2
-
-      fi
-
-    fi
-  done
-
-  clear
-  echo "**** SYNC LOOP DONE ****"
-  synced=$(cat ./.syncinfo.tmp | tr '\r\n' ' ')
-  echo "HDDs ready synced: ${synced}"
-  echo "*************************"
-  echo "Its safe to disconnect/remove HDDs now."
-  echo "Or connect a new HDD/SSD for syncing."
-  echo "To stop copystation script: CTRL+c"
-  echo ""
-
-  sudo sed -i "s/^message=.*/message='Ready HDDs: ${synced}'/g" /home/admin/raspiblitz.info 2>/dev/null
-
-  sleep 25
-
-  clear
-  echo "starting new sync loop"
-  sleep 5
-
-done