From 373ff0a17d2eafd2e37893dfc7ed247acf502745 Mon Sep 17 00:00:00 2001
From: thelamer <ryankuba@gmail.com>
Date: Mon, 22 Sep 2025 15:42:51 -0400
Subject: [PATCH] rebase to trixie

---
 Dockerfile      | 2 +-
 README.md       | 8 ++++----
 readme-vars.yml | 9 +++------
 3 files changed, 8 insertions(+), 11 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index ef5d266..9bea207 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-FROM ghcr.io/linuxserver/baseimage-selkies:debianbookworm
+FROM ghcr.io/linuxserver/baseimage-selkies:debiantrixie
 
 # set version label
 ARG BUILD_DATE
diff --git a/README.md b/README.md
index a1a5be4..ff4ee2f 100644
--- a/README.md
+++ b/README.md
@@ -220,8 +220,6 @@ services:
   openshot:
     image: lscr.io/linuxserver/openshot:latest
     container_name: openshot
-    security_opt:
-      - seccomp:unconfined #optional
     environment:
       - PUID=1000
       - PGID=1000
@@ -231,6 +229,7 @@ services:
     ports:
       - 3000:3000
       - 3001:3001
+    shm_size: "1gb"
     restart: unless-stopped
 ```
 
@@ -239,13 +238,13 @@ services:
 ```bash
 docker run -d \
   --name=openshot \
-  --security-opt seccomp=unconfined `#optional` \
   -e PUID=1000 \
   -e PGID=1000 \
   -e TZ=Etc/UTC \
   -p 3000:3000 \
   -p 3001:3001 \
   -v /path/to/openshot/config:/config \
+  --shm-size="1gb" \
   --restart unless-stopped \
   lscr.io/linuxserver/openshot:latest
 ```
@@ -262,7 +261,7 @@ Containers are configured using parameters passed at runtime (such as those abov
 | `-e PGID=1000` | for GroupID - see below for explanation |
 | `-e TZ=Etc/UTC` | specify a timezone to use, see this [list](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List). |
 | `-v /config` | User's home directory in the container, stores program settings and files. |
-| `--security-opt seccomp=unconfined` | For Docker Engine only, many modern gui apps need this to function on older hosts as syscalls are unknown to Docker. |
+| `--shm-size=` | Recommended for all desktop images. |
 
 ## Environment variables from files (Docker secrets)
 
@@ -426,5 +425,6 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64
 
 ## Versions
 
+* **22.09.25:** - Rebase to Debian Trixie.
 * **29.07.25:** - Rebase to selkies. Breaking Change: HTTPS is now required. Either use a reverse proxy (like SWAG) with SSL cert or direct connect to port 3001 with HTTPS.
 * **23.12.24:** - Initial release.
diff --git a/readme-vars.yml b/readme-vars.yml
index 4ef0b2b..ef31147 100644
--- a/readme-vars.yml
+++ b/readme-vars.yml
@@ -21,15 +21,11 @@ param_usage_include_ports: true
 param_ports:
   - {external_port: "3000", internal_port: "3000", port_desc: "OpenShot desktop gui (for reverse proxy only)."}
   - {external_port: "3001", internal_port: "3001", port_desc: "OpenShot desktop gui HTTPS."}
-opt_security_opt_param: true
-opt_security_opt_param_vars:
-  - {run_var: "seccomp=unconfined", compose_var: "seccomp:unconfined", desc: "For Docker Engine only, many modern gui apps need this to function on older hosts as syscalls are unknown to Docker."}
+custom_params:
+  - {name: "shm-size", name_compose: "shm_size", value: "1gb", desc: "Recommended for all desktop images."}
 # Selkies blurb settings
 selkies_blurb: true
 show_nvidia: true
-external_http_port: "3000"
-external_https_port: "3001"
-noto_fonts: "font-noto-cjk"
 # application setup block
 app_setup_block_enabled: true
 app_setup_block: |
@@ -106,5 +102,6 @@ init_diagram: |
   "openshot:latest" <- Base Images
 # changelog
 changelogs:
+  - {date: "22.09.25:", desc: "Rebase to Debian Trixie."}
   - {date: "29.07.25:", desc: "Rebase to selkies. Breaking Change: HTTPS is now required. Either use a reverse proxy (like SWAG) with SSL cert or direct connect to port 3001 with HTTPS."}
   - {date: "23.12.24:", desc: "Initial release."}