From 58ce47c539acb2e2d84b750e87d596263859c276 Mon Sep 17 00:00:00 2001
From: thelamer <ryankuba@gmail.com>
Date: Mon, 22 Sep 2025 16:34:39 -0400
Subject: [PATCH] rebase to trixie

---
 Dockerfile         | 6 ++++--
 README.md          | 5 +----
 readme-vars.yml    | 7 +------
 root/usr/bin/opera | 7 +------
 4 files changed, 7 insertions(+), 18 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 398cffe..7a62e30 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,6 @@
-FROM ghcr.io/linuxserver/baseimage-selkies:debianbookworm
+# syntax=docker/dockerfile:1
+
+FROM ghcr.io/linuxserver/baseimage-selkies:debiantrixie
 
 # set version label
 ARG BUILD_DATE
@@ -42,6 +44,6 @@ RUN \
 COPY /root /
 
 # ports and volumes
-EXPOSE 3000
+EXPOSE 3001
 
 VOLUME /config
diff --git a/README.md b/README.md
index 8a22897..443a9ec 100644
--- a/README.md
+++ b/README.md
@@ -220,8 +220,6 @@ services:
   opera:
     image: lscr.io/linuxserver/opera:latest
     container_name: opera
-    security_opt:
-      - seccomp:unconfined #optional
     environment:
       - PUID=1000
       - PGID=1000
@@ -241,7 +239,6 @@ services:
 ```bash
 docker run -d \
   --name=opera \
-  --security-opt seccomp=unconfined `#optional` \
   -e PUID=1000 \
   -e PGID=1000 \
   -e TZ=Etc/UTC \
@@ -268,7 +265,6 @@ Containers are configured using parameters passed at runtime (such as those abov
 | `-e OPERA_CLI=https://www.linuxserver.io/` | Specify one or multiple Chromium CLI flags, this string will be passed to the application in full. |
 | `-v /config` | Users home directory in the container, stores local files and settings |
 | `--shm-size=` | This is required for Opera to launch and function. |
-| `--security-opt seccomp=unconfined` | For Docker Engine only, many modern gui apps need this to function on older hosts as syscalls are unknown to Docker. Opera runs in no-sandbox mode without it. |
 
 ## Environment variables from files (Docker secrets)
 
@@ -432,6 +428,7 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64
 
 ## Versions
 
+* **22.09.25:** - Rebase to Debian Trixie.
 * **03.07.25:** - Rebase to Selkies HTTPS is now required.
 * **12.03.25:** - Clear singletons on launch to properly support persistance.
 * **13.02.24:** - Remove manual codecs ingestion.
diff --git a/readme-vars.yml b/readme-vars.yml
index 9b4170b..5cd23c4 100644
--- a/readme-vars.yml
+++ b/readme-vars.yml
@@ -16,9 +16,6 @@ development_versions: false
 # container parameters
 common_param_env_vars_enabled: true
 param_container_name: "{{ project_name }}"
-param_usage_include_env: true
-param_env_vars:
-  - {env_var: "TZ", env_value: "Europe/London", desc: "Specify a timezone to use EG Europe/London."}
 param_usage_include_vols: true
 param_volumes:
   - {vol_path: "/config", vol_host_path: "/path/to/config", desc: "Users home directory in the container, stores local files and settings"}
@@ -32,9 +29,6 @@ custom_params:
 opt_param_usage_include_env: true
 opt_param_env_vars:
   - {env_var: "OPERA_CLI", env_value: "https://www.linuxserver.io/", desc: "Specify one or multiple Chromium CLI flags, this string will be passed to the application in full."}
-opt_security_opt_param: true
-opt_security_opt_param_vars:
-  - {run_var: "seccomp=unconfined", compose_var: "seccomp:unconfined", desc: "For Docker Engine only, many modern gui apps need this to function on older hosts as syscalls are unknown to Docker. Opera runs in no-sandbox mode without it."}
 # Selkies blurb settings
 selkies_blurb: true
 show_nvidia: true
@@ -114,6 +108,7 @@ init_diagram: |
   "opera:latest" <- Base Images
 # changelog
 changelogs:
+  - {date: "22.09.25:", desc: "Rebase to Debian Trixie."}
   - {date: "03.07.25:", desc: "Rebase to Selkies HTTPS is now required."}
   - {date: "12.03.25:", desc: "Clear singletons on launch to properly support persistance."}
   - {date: "13.02.24:", desc: "Remove manual codecs ingestion."}
diff --git a/root/usr/bin/opera b/root/usr/bin/opera
index c871148..77c872d 100755
--- a/root/usr/bin/opera
+++ b/root/usr/bin/opera
@@ -15,9 +15,4 @@ if [ -f /usr/lib/x86_64-linux-gnu/opera/localization/${LANG}.pak ]; then
   LANG_CLI="--lang=${LANG}"
 fi
 
-# Run normally on privved containers or modified un non priv
-if grep -q 'Seccomp:.0' /proc/1/status; then
-  ${BIN} --password-store=basic ${LANG_CLI} "$@"
-else
-  ${BIN} --password-store=basic --no-sandbox --test-type ${LANG_CLI} "$@"
-fi
+${BIN} --password-store=basic --no-sandbox --test-type ${LANG_CLI} "$@"