Open Beta v10.8 | Please help testing and hardening our upcoming release

Open Beta v10.8 | Please help testing and hardening our upcoming release

All info can be found on GitHub: https://github.com/MichaIng/DietPi/issues/8353

Many thanks to all testers in advance! :heart:

Hi,
Thanks for the release, I had some NTP errors when running: sudo dietpi-update

DietPi-Update
─────────────────────────────────────────────────────
Phase: Checking for available DietPi update

[  OK  ] DietPi-Update | Checking IPv4 network connectivity
[  OK  ] DietPi-Update | Checking DNS resolver
[  OK  ] dietpi-timesync | systemctl restart systemd-timesyncd
/boot/dietpi/func/dietpi-timesync: line 48: ((: i<=: syntax error: operand expected (error token is "<=")
[FAILED] dietpi-timesync | Time sync timed out
[  OK  ] dietpi-timesync | systemctl stop systemd-timesyncd
[ INFO ] dietpi-timesync | Please check the service logs for more information:
journalctl -u systemd-timesyncd
[  OK  ] DietPi-Update | Getting latest version from: https://raw.githubusercontent.com/MichaIng/DietPi/dev/.update/version
[  OK  ] DietPi-Update | Got valid latest version: 10.8.0
[  OK  ] DietPi-Update | No update required, your DietPi installation is already up to date:
[ INFO ] DietPi-Update | Current version : v10.8.0
[ INFO ] DietPi-Update | Latest version  : v10.8.0
[ INFO ] DietPi-Update | Checking for new available live patches
[ INFO ] DietPi-Update | APT update, please wait...
Hit:1 
 trixie InRelease
Hit:2 
 trixie-updates InRelease
Hit:3 
 trixie-security InRelease
Hit:4 
 trixie-backports InRelease
Get:5 
 trixie InRelease [32.5 kB]
Hit:6 
 trixie InRelease
Hit:7 
 trixie InRelease
Hit:8 
 all InRelease
Fetched 32.5 kB in 0s (82.3 kB/s)
Reading package lists...
[  OK  ] DietPi-Update | APT update
[ INFO ] DietPi-Update | No APT upgrades were found, not creating variable: G_AGUP_COUNT

I’m a novice with Linux, so I ran the error through Claude and ran the following to resolve:
sudo sed -i 's/declare -r MAX_LOOPS_CHECK$/declare -gr MAX_LOOPS_CHECK/' /boot/dietpi/func/dietpi-timesync
sudo /boot/dietpi/func/dietpi-timesync 1
ls -l /run/systemd/timesync/synchronized

sudo /boot/dietpi/func/dietpi-timesync 1
ls -l /run/systemd/timesync/synchronized

I can now run sudo dietpi-update without any errors again.

This is what AI thinks caused the issue:

I compared the two versions on GitHub. The stable (master) version sets and locks the variable in a single line:

bash

declare -r MAX_LOOPS_CHECK=${MAX_LOOPS_CHECK:-60}

That works because the value is assigned in the same statement.

The dev version adds a new option, so the timeout can be set via CONFIG_TIMESYNC_TIMEOUT in dietpi.txt. To support it, the code was split into steps: work out the value first, then lock it with a bare declare -r MAX_LOOPS_CHECK. Inside a function, a bare declare creates a new, empty local variable instead of locking the existing one. The check loop then ran with no upper limit, crashed immediately, and was reported as a timeout.

Thanks, that declare was a start to keep the variable local and R/O as before, which is however unnecessary for this little single-function script. So the declare just needs to be removed. The 60 seconds default is already applied in the logic above that line.

Instead, it could make sense to allow changing the timeout from the error handler, and restart the systemd-timesyncd service on a β€œRetry”, instead of just waiting for another loop whether it finally syncs, if it is still running.

Fixed with dietpi-timesync: remove unnecessary MAX_LOOPS_CHECK declare Β· MichaIng/DietPi@d83b5bc Β· GitHub.

DietPi v10.8 has been released: https://dietpi.com/docs/releases/v10_8/

Many thanks to all testers! :heart:

Hi all, thanks for the new release. I just installed it on trixie/Pi 3B and noticed that PHP is at version 8.4.26. Can I manually upgrade to 8.4.27 to avoid CVE-2026-109618 and CVE-2026-109619?

There is no relationship between the DietPi version and the PHP version, since PHP is installed from the Debian repository. Normally, a version of PHP with the appropriate security fix should already be available on all Debian Trixie systems.

php8.4 (8.4.27-1~deb13u1) was released yesterday https://packages.debian.org/trixie/php8.4

Can you check

apt update
dpkg -l php8.4*

For trixie, it works:

apt update

apt upgrade

dietpi-services restart

bookworm is not yet fixed.

Sorry for hijacking this thread.

pls open an own new issue and fill all required data. This has nothing to do with DietPi version and/or beta release

This is Raspbian, which does not have the fixed version yet. I just sent them a security bug report.

As you have a 64-bit capable RPi 3, I recommend to switch to our 64-bit image, when you have some spare hours to migrate.

just to avoid a misunderstanding, this would mean a fresh install. :wink:

Solved in Raspbian for Trixie and Bookworm.

Hi there, i upgraded to v10.8 and notice after in the dietpi-dashboard the sofware list stays empty.

I reinstalled it but it;s the same, maybe related to the change of software names instead of numbers?

Makes sense. The regex to match the ID needs to be widened.

Same here.