Reindent functions to use consistent 2-space style
Changed all function bodies in misc/build.func to use 2-space indentation for improved readability and consistency. No logic changes were made; only whitespace and indentation were updated.
This commit is contained in:
CanbiZ
parent
8f3162cce1
commit
19f3c6b67d
5787
misc/build.func
5787
misc/build.func
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
287
misc/install.func.bak
Normal file
287
misc/install.func.bak
Normal file
@ -0,0 +1,287 @@
|
|||||||
|
# Copyright (c) 2021-2025 tteck
|
||||||
|
# Author: tteck (tteckster)
|
||||||
|
# Co-Author: MickLesk
|
||||||
|
# Co-Author: michelroegl-brunner
|
||||||
|
# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# INSTALL.FUNC - CONTAINER INSTALLATION & SETUP
|
||||||
|
# ==============================================================================
|
||||||
|
#
|
||||||
|
# This file provides installation functions executed inside LXC containers
|
||||||
|
# after creation. Handles:
|
||||||
|
#
|
||||||
|
# - Network connectivity verification (IPv4/IPv6)
|
||||||
|
# - OS updates and package installation
|
||||||
|
# - DNS resolution checks
|
||||||
|
# - MOTD and SSH configuration
|
||||||
|
# - Container customization and auto-login
|
||||||
|
#
|
||||||
|
# Usage:
|
||||||
|
# - Sourced by <app>-install.sh scripts
|
||||||
|
# - Executes via pct exec inside container
|
||||||
|
# - Requires internet connectivity
|
||||||
|
#
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# SECTION 1: INITIALIZATION
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
if ! command -v curl >/dev/null 2>&1; then
|
||||||
|
printf "\r\e[2K%b" '\033[93m Setup Source \033[m' >&2
|
||||||
|
apt-get update >/dev/null 2>&1
|
||||||
|
apt-get install -y curl >/dev/null 2>&1
|
||||||
|
fi
|
||||||
|
source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/misc/core.func)
|
||||||
|
source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/misc/error_handler.func)
|
||||||
|
load_functions
|
||||||
|
catch_errors
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# SECTION 2: NETWORK & CONNECTIVITY
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# verb_ip6()
|
||||||
|
#
|
||||||
|
# - Configures IPv6 based on IPV6_METHOD variable
|
||||||
|
# - If IPV6_METHOD=disable: disables IPv6 via sysctl
|
||||||
|
# - Sets verbose mode via set_std_mode()
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
verb_ip6() {
|
||||||
|
set_std_mode # Set STD mode based on VERBOSE
|
||||||
|
|
||||||
|
if [ "${IPV6_METHOD:-}" = "disable" ]; then
|
||||||
|
msg_info "Disabling IPv6 (this may affect some services)"
|
||||||
|
mkdir -p /etc/sysctl.d
|
||||||
|
$STD tee /etc/sysctl.d/99-disable-ipv6.conf >/dev/null <<EOF
|
||||||
|
# Disable IPv6 (set by community-scripts)
|
||||||
|
net.ipv6.conf.all.disable_ipv6 = 1
|
||||||
|
net.ipv6.conf.default.disable_ipv6 = 1
|
||||||
|
net.ipv6.conf.lo.disable_ipv6 = 1
|
||||||
|
EOF
|
||||||
|
$STD sysctl -p /etc/sysctl.d/99-disable-ipv6.conf
|
||||||
|
msg_ok "Disabled IPv6"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# setting_up_container()
|
||||||
|
#
|
||||||
|
# - Verifies network connectivity via hostname -I
|
||||||
|
# - Retries up to RETRY_NUM times with RETRY_EVERY seconds delay
|
||||||
|
# - Removes Python EXTERNALLY-MANAGED restrictions
|
||||||
|
# - Disables systemd-networkd-wait-online.service for faster boot
|
||||||
|
# - Exits with error if network unavailable after retries
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
setting_up_container() {
|
||||||
|
msg_info "Setting up Container OS"
|
||||||
|
for ((i = RETRY_NUM; i > 0; i--)); do
|
||||||
|
if [ "$(hostname -I)" != "" ]; then
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
echo 1>&2 -en "${CROSS}${RD} No Network! "
|
||||||
|
sleep $RETRY_EVERY
|
||||||
|
done
|
||||||
|
if [ "$(hostname -I)" = "" ]; then
|
||||||
|
echo 1>&2 -e "\n${CROSS}${RD} No Network After $RETRY_NUM Tries${CL}"
|
||||||
|
echo -e "${NETWORK}Check Network Settings"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
|
||||||
|
systemctl disable -q --now systemd-networkd-wait-online.service
|
||||||
|
msg_ok "Set up Container OS"
|
||||||
|
#msg_custom "${CM}" "${GN}" "Network Connected: ${BL}$(hostname -I)"
|
||||||
|
msg_ok "Network Connected: ${BL}$(hostname -I)"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# network_check()
|
||||||
|
#
|
||||||
|
# - Comprehensive network connectivity check for IPv4 and IPv6
|
||||||
|
# - Tests connectivity to multiple DNS servers:
|
||||||
|
# * IPv4: 1.1.1.1 (Cloudflare), 8.8.8.8 (Google), 9.9.9.9 (Quad9)
|
||||||
|
# * IPv6: 2606:4700:4700::1111, 2001:4860:4860::8888, 2620:fe::fe
|
||||||
|
# - Verifies DNS resolution for GitHub and Community-Scripts domains
|
||||||
|
# - Prompts user to continue if no internet detected
|
||||||
|
# - Uses fatal() on DNS resolution failure for critical hosts
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
network_check() {
|
||||||
|
set +e
|
||||||
|
trap - ERR
|
||||||
|
ipv4_connected=false
|
||||||
|
ipv6_connected=false
|
||||||
|
sleep 1
|
||||||
|
|
||||||
|
# Check IPv4 connectivity to Google, Cloudflare & Quad9 DNS servers.
|
||||||
|
if ping -c 1 -W 1 1.1.1.1 &>/dev/null || ping -c 1 -W 1 8.8.8.8 &>/dev/null || ping -c 1 -W 1 9.9.9.9 &>/dev/null; then
|
||||||
|
msg_ok "IPv4 Internet Connected"
|
||||||
|
ipv4_connected=true
|
||||||
|
else
|
||||||
|
msg_error "IPv4 Internet Not Connected"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Check IPv6 connectivity to Google, Cloudflare & Quad9 DNS servers.
|
||||||
|
if ping6 -c 1 -W 1 2606:4700:4700::1111 &>/dev/null || ping6 -c 1 -W 1 2001:4860:4860::8888 &>/dev/null || ping6 -c 1 -W 1 2620:fe::fe &>/dev/null; then
|
||||||
|
msg_ok "IPv6 Internet Connected"
|
||||||
|
ipv6_connected=true
|
||||||
|
else
|
||||||
|
msg_error "IPv6 Internet Not Connected"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# If both IPv4 and IPv6 checks fail, prompt the user
|
||||||
|
if [[ $ipv4_connected == false && $ipv6_connected == false ]]; then
|
||||||
|
read -r -p "No Internet detected, would you like to continue anyway? <y/N> " prompt
|
||||||
|
if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
|
||||||
|
echo -e "${INFO}${RD}Expect Issues Without Internet${CL}"
|
||||||
|
else
|
||||||
|
echo -e "${NETWORK}Check Network Settings"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# DNS resolution checks for GitHub-related domains (IPv4 and/or IPv6)
|
||||||
|
GIT_HOSTS=("github.com" "raw.githubusercontent.com" "api.github.com" "git.community-scripts.org")
|
||||||
|
GIT_STATUS="Git DNS:"
|
||||||
|
DNS_FAILED=false
|
||||||
|
|
||||||
|
for HOST in "${GIT_HOSTS[@]}"; do
|
||||||
|
RESOLVEDIP=$(getent hosts "$HOST" | awk '{ print $1 }' | grep -E '(^([0-9]{1,3}\.){3}[0-9]{1,3}$)|(^[a-fA-F0-9:]+$)' | head -n1)
|
||||||
|
if [[ -z "$RESOLVEDIP" ]]; then
|
||||||
|
GIT_STATUS+="$HOST:($DNSFAIL)"
|
||||||
|
DNS_FAILED=true
|
||||||
|
else
|
||||||
|
GIT_STATUS+=" $HOST:($DNSOK)"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
if [[ "$DNS_FAILED" == true ]]; then
|
||||||
|
fatal "$GIT_STATUS"
|
||||||
|
else
|
||||||
|
msg_ok "$GIT_STATUS"
|
||||||
|
fi
|
||||||
|
|
||||||
|
set -e
|
||||||
|
trap 'error_handler $LINENO "$BASH_COMMAND"' ERR
|
||||||
|
}
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# SECTION 3: OS UPDATE & PACKAGE MANAGEMENT
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# update_os()
|
||||||
|
#
|
||||||
|
# - Updates container OS via apt-get update and dist-upgrade
|
||||||
|
# - Configures APT cacher proxy if CACHER=yes (accelerates package downloads)
|
||||||
|
# - Removes Python EXTERNALLY-MANAGED restrictions for pip
|
||||||
|
# - Sources tools.func for additional setup functions after update
|
||||||
|
# - Uses $STD wrapper to suppress output unless VERBOSE=yes
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
update_os() {
|
||||||
|
msg_info "Updating Container OS"
|
||||||
|
if [[ "$CACHER" == "yes" ]]; then
|
||||||
|
echo 'Acquire::http::Proxy-Auto-Detect "/usr/local/bin/apt-proxy-detect.sh";' >/etc/apt/apt.conf.d/00aptproxy
|
||||||
|
cat <<EOF >/usr/local/bin/apt-proxy-detect.sh
|
||||||
|
#!/bin/bash
|
||||||
|
if nc -w1 -z "${CACHER_IP}" 3142; then
|
||||||
|
echo -n "http://${CACHER_IP}:3142"
|
||||||
|
else
|
||||||
|
echo -n "DIRECT"
|
||||||
|
fi
|
||||||
|
EOF
|
||||||
|
chmod +x /usr/local/bin/apt-proxy-detect.sh
|
||||||
|
fi
|
||||||
|
$STD apt-get update
|
||||||
|
$STD apt-get -o Dpkg::Options::="--force-confold" -y dist-upgrade
|
||||||
|
rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
|
||||||
|
msg_ok "Updated Container OS"
|
||||||
|
source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/misc/tools.func)
|
||||||
|
}
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# SECTION 4: MOTD & SSH CONFIGURATION
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# motd_ssh()
|
||||||
|
#
|
||||||
|
# - Configures Message of the Day (MOTD) with container information
|
||||||
|
# - Creates /etc/profile.d/00_lxc-details.sh with:
|
||||||
|
# * Application name
|
||||||
|
# * Warning banner (DEV repository)
|
||||||
|
# * OS name and version
|
||||||
|
# * Hostname and IP address
|
||||||
|
# * GitHub repository link
|
||||||
|
# - Disables executable flag on /etc/update-motd.d/* scripts
|
||||||
|
# - Enables root SSH access if SSH_ROOT=yes
|
||||||
|
# - Configures TERM environment variable for better terminal support
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
motd_ssh() {
|
||||||
|
# Set terminal to 256-color mode
|
||||||
|
grep -qxF "export TERM='xterm-256color'" /root/.bashrc || echo "export TERM='xterm-256color'" >>/root/.bashrc
|
||||||
|
|
||||||
|
# Get OS information (Debian / Ubuntu)
|
||||||
|
if [ -f "/etc/os-release" ]; then
|
||||||
|
OS_NAME=$(grep ^NAME /etc/os-release | cut -d= -f2 | tr -d '"')
|
||||||
|
OS_VERSION=$(grep ^VERSION_ID /etc/os-release | cut -d= -f2 | tr -d '"')
|
||||||
|
elif [ -f "/etc/debian_version" ]; then
|
||||||
|
OS_NAME="Debian"
|
||||||
|
OS_VERSION=$(cat /etc/debian_version)
|
||||||
|
fi
|
||||||
|
|
||||||
|
PROFILE_FILE="/etc/profile.d/00_lxc-details.sh"
|
||||||
|
echo "echo -e \"\"" >"$PROFILE_FILE"
|
||||||
|
echo -e "echo -e \"${BOLD}${YW}${APPLICATION} LXC Container - DEV Repository${CL}\"" >>"$PROFILE_FILE"
|
||||||
|
echo -e "echo -e \"${RD}WARNING: This is a DEVELOPMENT version (ProxmoxVED). Do NOT use in production!${CL}\"" >>"$PROFILE_FILE"
|
||||||
|
echo -e "echo -e \"${YW} OS: ${GN}${OS_NAME} - Version: ${OS_VERSION}${CL}\"" >>"$PROFILE_FILE"
|
||||||
|
echo -e "echo -e \"${YW} Hostname: ${GN}\$(hostname)${CL}\"" >>"$PROFILE_FILE"
|
||||||
|
echo -e "echo -e \"${YW} IP Address: ${GN}\$(hostname -I | awk '{print \$1}')${CL}\"" >>"$PROFILE_FILE"
|
||||||
|
echo -e "echo -e \"${YW} Repository: ${GN}https://github.com/community-scripts/ProxmoxVED${CL}\"" >>"$PROFILE_FILE"
|
||||||
|
echo "echo \"\"" >>"$PROFILE_FILE"
|
||||||
|
|
||||||
|
chmod -x /etc/update-motd.d/*
|
||||||
|
|
||||||
|
if [[ "${SSH_ROOT}" == "yes" ]]; then
|
||||||
|
sed -i "s/#PermitRootLogin prohibit-password/PermitRootLogin yes/g" /etc/ssh/sshd_config
|
||||||
|
systemctl restart sshd
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# SECTION 5: CONTAINER CUSTOMIZATION
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# customize()
|
||||||
|
#
|
||||||
|
# - Customizes container for passwordless root login if PASSWORD is empty
|
||||||
|
# - Configures getty for auto-login via /etc/systemd/system/container-getty@1.service.d/override.conf
|
||||||
|
# - Creates /usr/bin/update script for easy application updates
|
||||||
|
# - Injects SSH authorized keys if SSH_AUTHORIZED_KEY variable is set
|
||||||
|
# - Sets proper permissions on SSH directories and key files
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
customize() {
|
||||||
|
if [[ "$PASSWORD" == "" ]]; then
|
||||||
|
msg_info "Customizing Container"
|
||||||
|
GETTY_OVERRIDE="/etc/systemd/system/container-getty@1.service.d/override.conf"
|
||||||
|
mkdir -p $(dirname $GETTY_OVERRIDE)
|
||||||
|
cat <<EOF >$GETTY_OVERRIDE
|
||||||
|
[Service]
|
||||||
|
ExecStart=
|
||||||
|
ExecStart=-/sbin/agetty --autologin root --noclear --keep-baud tty%I 115200,38400,9600 \$TERM
|
||||||
|
EOF
|
||||||
|
systemctl daemon-reload
|
||||||
|
systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
|
||||||
|
msg_ok "Customized Container"
|
||||||
|
fi
|
||||||
|
echo "bash -c \"\$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/ct/${app}.sh)\"" >/usr/bin/update
|
||||||
|
chmod +x /usr/bin/update
|
||||||
|
if [[ -n "${SSH_AUTHORIZED_KEY}" ]]; then
|
||||||
|
mkdir -p /root/.ssh
|
||||||
|
echo "${SSH_AUTHORIZED_KEY}" >/root/.ssh/authorized_keys
|
||||||
|
chmod 700 /root/.ssh
|
||||||
|
chmod 600 /root/.ssh/authorized_keys
|
||||||
|
fi
|
||||||
|
}
|
||||||
992
misc/install.func.unified
Normal file
992
misc/install.func.unified
Normal file
@ -0,0 +1,992 @@
|
|||||||
|
# Copyright (c) 2021-2025 community-scripts ORG
|
||||||
|
# Author: tteck (tteckster)
|
||||||
|
# Co-Author: MickLesk
|
||||||
|
# Co-Author: michelroegl-brunner
|
||||||
|
# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# INSTALL.FUNC - UNIFIED CONTAINER INSTALLATION & SETUP
|
||||||
|
# ==============================================================================
|
||||||
|
#
|
||||||
|
# All-in-One install.func supporting multiple Linux distributions:
|
||||||
|
# - Debian, Ubuntu, Devuan (apt, systemd/sysvinit)
|
||||||
|
# - Alpine (apk, OpenRC)
|
||||||
|
# - Fedora, Rocky, AlmaLinux, CentOS (dnf/yum, systemd)
|
||||||
|
# - Arch Linux (pacman, systemd)
|
||||||
|
# - openSUSE (zypper, systemd)
|
||||||
|
# - Gentoo (emerge, OpenRC)
|
||||||
|
# - NixOS (nix, systemd)
|
||||||
|
#
|
||||||
|
# Features:
|
||||||
|
# - Automatic OS detection
|
||||||
|
# - Unified package manager abstraction
|
||||||
|
# - Init system abstraction (systemd/OpenRC/runit/sysvinit)
|
||||||
|
# - Network connectivity verification
|
||||||
|
# - MOTD and SSH configuration
|
||||||
|
# - Container customization
|
||||||
|
#
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# SECTION 1: INITIALIZATION & OS DETECTION
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# Global variables for OS detection
|
||||||
|
OS_TYPE="" # debian, ubuntu, alpine, fedora, arch, opensuse, gentoo, nixos, devuan, rocky, alma, centos
|
||||||
|
OS_FAMILY="" # debian, alpine, rhel, arch, suse, gentoo, nixos
|
||||||
|
OS_VERSION="" # Version number
|
||||||
|
PKG_MANAGER="" # apt, apk, dnf, yum, pacman, zypper, emerge, nix-env
|
||||||
|
INIT_SYSTEM="" # systemd, openrc, runit, sysvinit
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# detect_os()
|
||||||
|
#
|
||||||
|
# Detects the operating system and sets global variables:
|
||||||
|
# OS_TYPE, OS_FAMILY, OS_VERSION, PKG_MANAGER, INIT_SYSTEM
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
detect_os() {
|
||||||
|
if [[ -f /etc/os-release ]]; then
|
||||||
|
# shellcheck disable=SC1091
|
||||||
|
. /etc/os-release
|
||||||
|
OS_TYPE="${ID:-unknown}"
|
||||||
|
OS_VERSION="${VERSION_ID:-unknown}"
|
||||||
|
elif [[ -f /etc/alpine-release ]]; then
|
||||||
|
OS_TYPE="alpine"
|
||||||
|
OS_VERSION=$(cat /etc/alpine-release)
|
||||||
|
elif [[ -f /etc/debian_version ]]; then
|
||||||
|
OS_TYPE="debian"
|
||||||
|
OS_VERSION=$(cat /etc/debian_version)
|
||||||
|
elif [[ -f /etc/redhat-release ]]; then
|
||||||
|
OS_TYPE="centos"
|
||||||
|
OS_VERSION=$(grep -oE '[0-9]+\.[0-9]+' /etc/redhat-release | head -1)
|
||||||
|
elif [[ -f /etc/arch-release ]]; then
|
||||||
|
OS_TYPE="arch"
|
||||||
|
OS_VERSION="rolling"
|
||||||
|
elif [[ -f /etc/gentoo-release ]]; then
|
||||||
|
OS_TYPE="gentoo"
|
||||||
|
OS_VERSION=$(cat /etc/gentoo-release | grep -oE '[0-9.]+')
|
||||||
|
else
|
||||||
|
OS_TYPE="unknown"
|
||||||
|
OS_VERSION="unknown"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Normalize OS type and determine family
|
||||||
|
case "$OS_TYPE" in
|
||||||
|
debian)
|
||||||
|
OS_FAMILY="debian"
|
||||||
|
PKG_MANAGER="apt"
|
||||||
|
;;
|
||||||
|
ubuntu)
|
||||||
|
OS_FAMILY="debian"
|
||||||
|
PKG_MANAGER="apt"
|
||||||
|
;;
|
||||||
|
devuan)
|
||||||
|
OS_FAMILY="debian"
|
||||||
|
PKG_MANAGER="apt"
|
||||||
|
;;
|
||||||
|
alpine)
|
||||||
|
OS_FAMILY="alpine"
|
||||||
|
PKG_MANAGER="apk"
|
||||||
|
;;
|
||||||
|
fedora)
|
||||||
|
OS_FAMILY="rhel"
|
||||||
|
PKG_MANAGER="dnf"
|
||||||
|
;;
|
||||||
|
rocky | rockylinux)
|
||||||
|
OS_TYPE="rocky"
|
||||||
|
OS_FAMILY="rhel"
|
||||||
|
PKG_MANAGER="dnf"
|
||||||
|
;;
|
||||||
|
alma | almalinux)
|
||||||
|
OS_TYPE="alma"
|
||||||
|
OS_FAMILY="rhel"
|
||||||
|
PKG_MANAGER="dnf"
|
||||||
|
;;
|
||||||
|
centos)
|
||||||
|
OS_FAMILY="rhel"
|
||||||
|
# CentOS 7 uses yum, 8+ uses dnf
|
||||||
|
if [[ "${OS_VERSION%%.*}" -ge 8 ]]; then
|
||||||
|
PKG_MANAGER="dnf"
|
||||||
|
else
|
||||||
|
PKG_MANAGER="yum"
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
rhel)
|
||||||
|
OS_FAMILY="rhel"
|
||||||
|
PKG_MANAGER="dnf"
|
||||||
|
;;
|
||||||
|
arch | archlinux)
|
||||||
|
OS_TYPE="arch"
|
||||||
|
OS_FAMILY="arch"
|
||||||
|
PKG_MANAGER="pacman"
|
||||||
|
;;
|
||||||
|
opensuse* | sles)
|
||||||
|
OS_TYPE="opensuse"
|
||||||
|
OS_FAMILY="suse"
|
||||||
|
PKG_MANAGER="zypper"
|
||||||
|
;;
|
||||||
|
gentoo)
|
||||||
|
OS_FAMILY="gentoo"
|
||||||
|
PKG_MANAGER="emerge"
|
||||||
|
;;
|
||||||
|
nixos)
|
||||||
|
OS_FAMILY="nixos"
|
||||||
|
PKG_MANAGER="nix-env"
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
OS_FAMILY="unknown"
|
||||||
|
PKG_MANAGER="unknown"
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
# Detect init system
|
||||||
|
if command -v systemctl &>/dev/null && [[ -d /run/systemd/system ]]; then
|
||||||
|
INIT_SYSTEM="systemd"
|
||||||
|
elif command -v rc-service &>/dev/null || [[ -d /etc/init.d && -f /sbin/openrc ]]; then
|
||||||
|
INIT_SYSTEM="openrc"
|
||||||
|
elif command -v sv &>/dev/null && [[ -d /etc/sv ]]; then
|
||||||
|
INIT_SYSTEM="runit"
|
||||||
|
elif [[ -f /etc/inittab ]]; then
|
||||||
|
INIT_SYSTEM="sysvinit"
|
||||||
|
else
|
||||||
|
INIT_SYSTEM="unknown"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# Bootstrap: Ensure curl is available and source core functions
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
_bootstrap() {
|
||||||
|
# Minimal bootstrap to get curl installed
|
||||||
|
if ! command -v curl &>/dev/null; then
|
||||||
|
printf "\r\e[2K%b" '\033[93m Setup Source \033[m' >&2
|
||||||
|
if command -v apt-get &>/dev/null; then
|
||||||
|
apt-get update &>/dev/null && apt-get install -y curl &>/dev/null
|
||||||
|
elif command -v apk &>/dev/null; then
|
||||||
|
apk update &>/dev/null && apk add curl &>/dev/null
|
||||||
|
elif command -v dnf &>/dev/null; then
|
||||||
|
dnf install -y curl &>/dev/null
|
||||||
|
elif command -v yum &>/dev/null; then
|
||||||
|
yum install -y curl &>/dev/null
|
||||||
|
elif command -v pacman &>/dev/null; then
|
||||||
|
pacman -Sy --noconfirm curl &>/dev/null
|
||||||
|
elif command -v zypper &>/dev/null; then
|
||||||
|
zypper install -y curl &>/dev/null
|
||||||
|
elif command -v emerge &>/dev/null; then
|
||||||
|
emerge --quiet net-misc/curl &>/dev/null
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Source core functions
|
||||||
|
source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/misc/core.func)
|
||||||
|
source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/misc/error_handler.func)
|
||||||
|
load_functions
|
||||||
|
catch_errors
|
||||||
|
}
|
||||||
|
|
||||||
|
# Run bootstrap and OS detection
|
||||||
|
_bootstrap
|
||||||
|
detect_os
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# SECTION 2: PACKAGE MANAGER ABSTRACTION
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# pkg_update()
|
||||||
|
#
|
||||||
|
# Updates package manager cache/database
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
pkg_update() {
|
||||||
|
case "$PKG_MANAGER" in
|
||||||
|
apt)
|
||||||
|
$STD apt-get update
|
||||||
|
;;
|
||||||
|
apk)
|
||||||
|
$STD apk update
|
||||||
|
;;
|
||||||
|
dnf)
|
||||||
|
$STD dnf makecache
|
||||||
|
;;
|
||||||
|
yum)
|
||||||
|
$STD yum makecache
|
||||||
|
;;
|
||||||
|
pacman)
|
||||||
|
$STD pacman -Sy
|
||||||
|
;;
|
||||||
|
zypper)
|
||||||
|
$STD zypper refresh
|
||||||
|
;;
|
||||||
|
emerge)
|
||||||
|
$STD emerge --sync
|
||||||
|
;;
|
||||||
|
nix-env)
|
||||||
|
$STD nix-channel --update
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
msg_error "Unknown package manager: $PKG_MANAGER"
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# pkg_upgrade()
|
||||||
|
#
|
||||||
|
# Upgrades all installed packages
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
pkg_upgrade() {
|
||||||
|
case "$PKG_MANAGER" in
|
||||||
|
apt)
|
||||||
|
$STD apt-get -o Dpkg::Options::="--force-confold" -y dist-upgrade
|
||||||
|
;;
|
||||||
|
apk)
|
||||||
|
$STD apk -U upgrade
|
||||||
|
;;
|
||||||
|
dnf)
|
||||||
|
$STD dnf -y upgrade
|
||||||
|
;;
|
||||||
|
yum)
|
||||||
|
$STD yum -y update
|
||||||
|
;;
|
||||||
|
pacman)
|
||||||
|
$STD pacman -Syu --noconfirm
|
||||||
|
;;
|
||||||
|
zypper)
|
||||||
|
$STD zypper -n update
|
||||||
|
;;
|
||||||
|
emerge)
|
||||||
|
$STD emerge --quiet --update --deep @world
|
||||||
|
;;
|
||||||
|
nix-env)
|
||||||
|
$STD nix-env -u
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
msg_error "Unknown package manager: $PKG_MANAGER"
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# pkg_install(packages...)
|
||||||
|
#
|
||||||
|
# Installs one or more packages
|
||||||
|
# Arguments:
|
||||||
|
# packages - List of packages to install
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
pkg_install() {
|
||||||
|
local packages=("$@")
|
||||||
|
[[ ${#packages[@]} -eq 0 ]] && return 0
|
||||||
|
|
||||||
|
case "$PKG_MANAGER" in
|
||||||
|
apt)
|
||||||
|
$STD apt-get install -y "${packages[@]}"
|
||||||
|
;;
|
||||||
|
apk)
|
||||||
|
$STD apk add --no-cache "${packages[@]}"
|
||||||
|
;;
|
||||||
|
dnf)
|
||||||
|
$STD dnf install -y "${packages[@]}"
|
||||||
|
;;
|
||||||
|
yum)
|
||||||
|
$STD yum install -y "${packages[@]}"
|
||||||
|
;;
|
||||||
|
pacman)
|
||||||
|
$STD pacman -S --noconfirm "${packages[@]}"
|
||||||
|
;;
|
||||||
|
zypper)
|
||||||
|
$STD zypper install -y "${packages[@]}"
|
||||||
|
;;
|
||||||
|
emerge)
|
||||||
|
$STD emerge --quiet "${packages[@]}"
|
||||||
|
;;
|
||||||
|
nix-env)
|
||||||
|
for pkg in "${packages[@]}"; do
|
||||||
|
$STD nix-env -iA "nixos.$pkg"
|
||||||
|
done
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
msg_error "Unknown package manager: $PKG_MANAGER"
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# pkg_remove(packages...)
|
||||||
|
#
|
||||||
|
# Removes one or more packages
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
pkg_remove() {
|
||||||
|
local packages=("$@")
|
||||||
|
[[ ${#packages[@]} -eq 0 ]] && return 0
|
||||||
|
|
||||||
|
case "$PKG_MANAGER" in
|
||||||
|
apt)
|
||||||
|
$STD apt-get remove -y "${packages[@]}"
|
||||||
|
;;
|
||||||
|
apk)
|
||||||
|
$STD apk del "${packages[@]}"
|
||||||
|
;;
|
||||||
|
dnf)
|
||||||
|
$STD dnf remove -y "${packages[@]}"
|
||||||
|
;;
|
||||||
|
yum)
|
||||||
|
$STD yum remove -y "${packages[@]}"
|
||||||
|
;;
|
||||||
|
pacman)
|
||||||
|
$STD pacman -Rs --noconfirm "${packages[@]}"
|
||||||
|
;;
|
||||||
|
zypper)
|
||||||
|
$STD zypper remove -y "${packages[@]}"
|
||||||
|
;;
|
||||||
|
emerge)
|
||||||
|
$STD emerge --quiet --unmerge "${packages[@]}"
|
||||||
|
;;
|
||||||
|
nix-env)
|
||||||
|
for pkg in "${packages[@]}"; do
|
||||||
|
$STD nix-env -e "$pkg"
|
||||||
|
done
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
msg_error "Unknown package manager: $PKG_MANAGER"
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# pkg_clean()
|
||||||
|
#
|
||||||
|
# Cleans package manager cache to free space
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
pkg_clean() {
|
||||||
|
case "$PKG_MANAGER" in
|
||||||
|
apt)
|
||||||
|
$STD apt-get autoremove -y
|
||||||
|
$STD apt-get autoclean
|
||||||
|
;;
|
||||||
|
apk)
|
||||||
|
$STD apk cache clean
|
||||||
|
;;
|
||||||
|
dnf)
|
||||||
|
$STD dnf clean all
|
||||||
|
$STD dnf autoremove -y
|
||||||
|
;;
|
||||||
|
yum)
|
||||||
|
$STD yum clean all
|
||||||
|
;;
|
||||||
|
pacman)
|
||||||
|
$STD pacman -Scc --noconfirm
|
||||||
|
;;
|
||||||
|
zypper)
|
||||||
|
$STD zypper clean
|
||||||
|
;;
|
||||||
|
emerge)
|
||||||
|
$STD emerge --quiet --depclean
|
||||||
|
;;
|
||||||
|
nix-env)
|
||||||
|
$STD nix-collect-garbage -d
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
return 0
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# SECTION 3: SERVICE/INIT SYSTEM ABSTRACTION
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# svc_enable(service)
|
||||||
|
#
|
||||||
|
# Enables a service to start at boot
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
svc_enable() {
|
||||||
|
local service="$1"
|
||||||
|
[[ -z "$service" ]] && return 1
|
||||||
|
|
||||||
|
case "$INIT_SYSTEM" in
|
||||||
|
systemd)
|
||||||
|
$STD systemctl enable "$service"
|
||||||
|
;;
|
||||||
|
openrc)
|
||||||
|
$STD rc-update add "$service" default
|
||||||
|
;;
|
||||||
|
runit)
|
||||||
|
[[ -d "/etc/sv/$service" ]] && ln -sf "/etc/sv/$service" "/var/service/"
|
||||||
|
;;
|
||||||
|
sysvinit)
|
||||||
|
if command -v update-rc.d &>/dev/null; then
|
||||||
|
$STD update-rc.d "$service" defaults
|
||||||
|
elif command -v chkconfig &>/dev/null; then
|
||||||
|
$STD chkconfig "$service" on
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
msg_warn "Unknown init system, cannot enable $service"
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# svc_disable(service)
|
||||||
|
#
|
||||||
|
# Disables a service from starting at boot
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
svc_disable() {
|
||||||
|
local service="$1"
|
||||||
|
[[ -z "$service" ]] && return 1
|
||||||
|
|
||||||
|
case "$INIT_SYSTEM" in
|
||||||
|
systemd)
|
||||||
|
$STD systemctl disable "$service"
|
||||||
|
;;
|
||||||
|
openrc)
|
||||||
|
$STD rc-update del "$service" default 2>/dev/null || true
|
||||||
|
;;
|
||||||
|
runit)
|
||||||
|
rm -f "/var/service/$service"
|
||||||
|
;;
|
||||||
|
sysvinit)
|
||||||
|
if command -v update-rc.d &>/dev/null; then
|
||||||
|
$STD update-rc.d "$service" remove
|
||||||
|
elif command -v chkconfig &>/dev/null; then
|
||||||
|
$STD chkconfig "$service" off
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# svc_start(service)
|
||||||
|
#
|
||||||
|
# Starts a service immediately
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
svc_start() {
|
||||||
|
local service="$1"
|
||||||
|
[[ -z "$service" ]] && return 1
|
||||||
|
|
||||||
|
case "$INIT_SYSTEM" in
|
||||||
|
systemd)
|
||||||
|
$STD systemctl start "$service"
|
||||||
|
;;
|
||||||
|
openrc)
|
||||||
|
$STD rc-service "$service" start
|
||||||
|
;;
|
||||||
|
runit)
|
||||||
|
$STD sv start "$service"
|
||||||
|
;;
|
||||||
|
sysvinit)
|
||||||
|
$STD /etc/init.d/"$service" start
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# svc_stop(service)
|
||||||
|
#
|
||||||
|
# Stops a running service
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
svc_stop() {
|
||||||
|
local service="$1"
|
||||||
|
[[ -z "$service" ]] && return 1
|
||||||
|
|
||||||
|
case "$INIT_SYSTEM" in
|
||||||
|
systemd)
|
||||||
|
$STD systemctl stop "$service"
|
||||||
|
;;
|
||||||
|
openrc)
|
||||||
|
$STD rc-service "$service" stop
|
||||||
|
;;
|
||||||
|
runit)
|
||||||
|
$STD sv stop "$service"
|
||||||
|
;;
|
||||||
|
sysvinit)
|
||||||
|
$STD /etc/init.d/"$service" stop
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# svc_restart(service)
|
||||||
|
#
|
||||||
|
# Restarts a service
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
svc_restart() {
|
||||||
|
local service="$1"
|
||||||
|
[[ -z "$service" ]] && return 1
|
||||||
|
|
||||||
|
case "$INIT_SYSTEM" in
|
||||||
|
systemd)
|
||||||
|
$STD systemctl restart "$service"
|
||||||
|
;;
|
||||||
|
openrc)
|
||||||
|
$STD rc-service "$service" restart
|
||||||
|
;;
|
||||||
|
runit)
|
||||||
|
$STD sv restart "$service"
|
||||||
|
;;
|
||||||
|
sysvinit)
|
||||||
|
$STD /etc/init.d/"$service" restart
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# svc_status(service)
|
||||||
|
#
|
||||||
|
# Gets service status (returns 0 if running)
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
svc_status() {
|
||||||
|
local service="$1"
|
||||||
|
[[ -z "$service" ]] && return 1
|
||||||
|
|
||||||
|
case "$INIT_SYSTEM" in
|
||||||
|
systemd)
|
||||||
|
systemctl is-active --quiet "$service"
|
||||||
|
;;
|
||||||
|
openrc)
|
||||||
|
rc-service "$service" status &>/dev/null
|
||||||
|
;;
|
||||||
|
runit)
|
||||||
|
sv status "$service" | grep -q "^run:"
|
||||||
|
;;
|
||||||
|
sysvinit)
|
||||||
|
/etc/init.d/"$service" status &>/dev/null
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# svc_reload_daemon()
|
||||||
|
#
|
||||||
|
# Reloads init system daemon configuration (for systemd)
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
svc_reload_daemon() {
|
||||||
|
case "$INIT_SYSTEM" in
|
||||||
|
systemd)
|
||||||
|
$STD systemctl daemon-reload
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
# Other init systems don't need this
|
||||||
|
return 0
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# SECTION 4: NETWORK & CONNECTIVITY
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# get_ip()
|
||||||
|
#
|
||||||
|
# Gets the primary IPv4 address of the container
|
||||||
|
# Returns: IP address string
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
get_ip() {
|
||||||
|
local ip=""
|
||||||
|
|
||||||
|
# Try hostname -I first (most common)
|
||||||
|
if command -v hostname &>/dev/null; then
|
||||||
|
ip=$(hostname -I 2>/dev/null | awk '{print $1}')
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Fallback to ip command
|
||||||
|
if [[ -z "$ip" ]] && command -v ip &>/dev/null; then
|
||||||
|
ip=$(ip -4 addr show scope global | grep -oP '(?<=inet\s)\d+(\.\d+){3}' | head -1)
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Fallback to ifconfig
|
||||||
|
if [[ -z "$ip" ]] && command -v ifconfig &>/dev/null; then
|
||||||
|
ip=$(ifconfig | grep -Eo 'inet (addr:)?([0-9]*\.){3}[0-9]*' | grep -Eo '([0-9]*\.){3}[0-9]*' | grep -v '127.0.0.1' | head -1)
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "$ip"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# verb_ip6()
|
||||||
|
#
|
||||||
|
# Configures IPv6 based on IPV6_METHOD variable
|
||||||
|
# If IPV6_METHOD=disable: disables IPv6 via sysctl
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
verb_ip6() {
|
||||||
|
set_std_mode # Set STD mode based on VERBOSE
|
||||||
|
|
||||||
|
if [[ "${IPV6_METHOD:-}" == "disable" ]]; then
|
||||||
|
msg_info "Disabling IPv6 (this may affect some services)"
|
||||||
|
mkdir -p /etc/sysctl.d
|
||||||
|
cat >/etc/sysctl.d/99-disable-ipv6.conf <<EOF
|
||||||
|
# Disable IPv6 (set by community-scripts)
|
||||||
|
net.ipv6.conf.all.disable_ipv6 = 1
|
||||||
|
net.ipv6.conf.default.disable_ipv6 = 1
|
||||||
|
net.ipv6.conf.lo.disable_ipv6 = 1
|
||||||
|
EOF
|
||||||
|
$STD sysctl -p /etc/sysctl.d/99-disable-ipv6.conf
|
||||||
|
|
||||||
|
# For OpenRC, ensure sysctl runs at boot
|
||||||
|
if [[ "$INIT_SYSTEM" == "openrc" ]]; then
|
||||||
|
$STD rc-update add sysctl default 2>/dev/null || true
|
||||||
|
fi
|
||||||
|
msg_ok "Disabled IPv6"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# setting_up_container()
|
||||||
|
#
|
||||||
|
# Initial container setup:
|
||||||
|
# - Verifies network connectivity
|
||||||
|
# - Removes Python EXTERNALLY-MANAGED restrictions
|
||||||
|
# - Disables network wait services
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
setting_up_container() {
|
||||||
|
msg_info "Setting up Container OS"
|
||||||
|
|
||||||
|
# Wait for network
|
||||||
|
local i
|
||||||
|
for ((i = RETRY_NUM; i > 0; i--)); do
|
||||||
|
if [[ -n "$(get_ip)" ]]; then
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
echo 1>&2 -en "${CROSS}${RD} No Network! "
|
||||||
|
sleep "$RETRY_EVERY"
|
||||||
|
done
|
||||||
|
|
||||||
|
if [[ -z "$(get_ip)" ]]; then
|
||||||
|
echo 1>&2 -e "\n${CROSS}${RD} No Network After $RETRY_NUM Tries${CL}"
|
||||||
|
echo -e "${NETWORK}Check Network Settings"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Remove Python EXTERNALLY-MANAGED restriction (Debian 12+, Ubuntu 23.04+)
|
||||||
|
rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED 2>/dev/null || true
|
||||||
|
|
||||||
|
# Disable network wait services for faster boot
|
||||||
|
case "$INIT_SYSTEM" in
|
||||||
|
systemd)
|
||||||
|
systemctl disable -q --now systemd-networkd-wait-online.service 2>/dev/null || true
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
msg_ok "Set up Container OS"
|
||||||
|
msg_ok "Network Connected: ${BL}$(get_ip)"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# network_check()
|
||||||
|
#
|
||||||
|
# Comprehensive network connectivity check for IPv4 and IPv6
|
||||||
|
# Tests connectivity to DNS servers and verifies DNS resolution
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
network_check() {
|
||||||
|
set +e
|
||||||
|
trap - ERR
|
||||||
|
local ipv4_connected=false
|
||||||
|
local ipv6_connected=false
|
||||||
|
sleep 1
|
||||||
|
|
||||||
|
# Check IPv4 connectivity
|
||||||
|
if ping -c 1 -W 1 1.1.1.1 &>/dev/null || ping -c 1 -W 1 8.8.8.8 &>/dev/null || ping -c 1 -W 1 9.9.9.9 &>/dev/null; then
|
||||||
|
msg_ok "IPv4 Internet Connected"
|
||||||
|
ipv4_connected=true
|
||||||
|
else
|
||||||
|
msg_error "IPv4 Internet Not Connected"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Check IPv6 connectivity (if ping6 exists)
|
||||||
|
if command -v ping6 &>/dev/null; then
|
||||||
|
if ping6 -c 1 -W 1 2606:4700:4700::1111 &>/dev/null || ping6 -c 1 -W 1 2001:4860:4860::8888 &>/dev/null; then
|
||||||
|
msg_ok "IPv6 Internet Connected"
|
||||||
|
ipv6_connected=true
|
||||||
|
else
|
||||||
|
msg_error "IPv6 Internet Not Connected"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Prompt if both fail
|
||||||
|
if [[ $ipv4_connected == false && $ipv6_connected == false ]]; then
|
||||||
|
read -r -p "No Internet detected, would you like to continue anyway? <y/N> " prompt
|
||||||
|
if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
|
||||||
|
echo -e "${INFO}${RD}Expect Issues Without Internet${CL}"
|
||||||
|
else
|
||||||
|
echo -e "${NETWORK}Check Network Settings"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# DNS resolution checks
|
||||||
|
local GIT_HOSTS=("github.com" "raw.githubusercontent.com" "git.community-scripts.org")
|
||||||
|
local GIT_STATUS="Git DNS:"
|
||||||
|
local DNS_FAILED=false
|
||||||
|
|
||||||
|
for HOST in "${GIT_HOSTS[@]}"; do
|
||||||
|
local RESOLVEDIP
|
||||||
|
RESOLVEDIP=$(getent hosts "$HOST" 2>/dev/null | awk '{ print $1 }' | head -n1)
|
||||||
|
if [[ -z "$RESOLVEDIP" ]]; then
|
||||||
|
GIT_STATUS+=" $HOST:(${DNSFAIL:-FAIL})"
|
||||||
|
DNS_FAILED=true
|
||||||
|
else
|
||||||
|
GIT_STATUS+=" $HOST:(${DNSOK:-OK})"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
if [[ "$DNS_FAILED" == true ]]; then
|
||||||
|
fatal "$GIT_STATUS"
|
||||||
|
else
|
||||||
|
msg_ok "$GIT_STATUS"
|
||||||
|
fi
|
||||||
|
|
||||||
|
set -e
|
||||||
|
trap 'error_handler $LINENO "$BASH_COMMAND"' ERR
|
||||||
|
}
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# SECTION 5: OS UPDATE & PACKAGE MANAGEMENT
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# update_os()
|
||||||
|
#
|
||||||
|
# Updates container OS and sources appropriate tools.func
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
update_os() {
|
||||||
|
msg_info "Updating Container OS"
|
||||||
|
|
||||||
|
# Configure APT cacher proxy if enabled (Debian/Ubuntu only)
|
||||||
|
if [[ "$PKG_MANAGER" == "apt" && "${CACHER:-}" == "yes" ]]; then
|
||||||
|
echo 'Acquire::http::Proxy-Auto-Detect "/usr/local/bin/apt-proxy-detect.sh";' >/etc/apt/apt.conf.d/00aptproxy
|
||||||
|
cat <<EOF >/usr/local/bin/apt-proxy-detect.sh
|
||||||
|
#!/bin/bash
|
||||||
|
if nc -w1 -z "${CACHER_IP}" 3142; then
|
||||||
|
echo -n "http://${CACHER_IP}:3142"
|
||||||
|
else
|
||||||
|
echo -n "DIRECT"
|
||||||
|
fi
|
||||||
|
EOF
|
||||||
|
chmod +x /usr/local/bin/apt-proxy-detect.sh
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Update and upgrade
|
||||||
|
pkg_update
|
||||||
|
pkg_upgrade
|
||||||
|
|
||||||
|
# Remove Python EXTERNALLY-MANAGED restriction
|
||||||
|
rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED 2>/dev/null || true
|
||||||
|
|
||||||
|
msg_ok "Updated Container OS"
|
||||||
|
|
||||||
|
# Source appropriate tools.func based on OS
|
||||||
|
case "$OS_FAMILY" in
|
||||||
|
alpine)
|
||||||
|
source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/misc/alpine-tools.func)
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/misc/tools.func)
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# SECTION 6: MOTD & SSH CONFIGURATION
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# motd_ssh()
|
||||||
|
#
|
||||||
|
# Configures Message of the Day and SSH settings
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
motd_ssh() {
|
||||||
|
# Set terminal to 256-color mode
|
||||||
|
grep -qxF "export TERM='xterm-256color'" /root/.bashrc 2>/dev/null || echo "export TERM='xterm-256color'" >>/root/.bashrc
|
||||||
|
|
||||||
|
# Get OS information
|
||||||
|
local os_name="$OS_TYPE"
|
||||||
|
local os_version="$OS_VERSION"
|
||||||
|
|
||||||
|
if [[ -f /etc/os-release ]]; then
|
||||||
|
os_name=$(grep ^NAME /etc/os-release | cut -d= -f2 | tr -d '"')
|
||||||
|
os_version=$(grep ^VERSION_ID /etc/os-release | cut -d= -f2 | tr -d '"')
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Create MOTD profile script
|
||||||
|
local PROFILE_FILE="/etc/profile.d/00_lxc-details.sh"
|
||||||
|
cat >"$PROFILE_FILE" <<EOF
|
||||||
|
echo ""
|
||||||
|
echo -e "${BOLD:-}${YW:-}${APPLICATION:-Container} LXC Container - DEV Repository${CL:-}"
|
||||||
|
echo -e "${RD:-}WARNING: This is a DEVELOPMENT version (ProxmoxVED). Do NOT use in production!${CL:-}"
|
||||||
|
echo -e "${YW:-} OS: ${GN:-}${os_name} - Version: ${os_version}${CL:-}"
|
||||||
|
echo -e "${YW:-} Hostname: ${GN:-}\$(hostname)${CL:-}"
|
||||||
|
echo -e "${YW:-} IP Address: ${GN:-}\$(hostname -I 2>/dev/null | awk '{print \$1}' || ip -4 addr show scope global | grep -oP '(?<=inet\s)\\d+(\\.\\d+){3}' | head -1)${CL:-}"
|
||||||
|
echo -e "${YW:-} Repository: ${GN:-}https://github.com/community-scripts/ProxmoxVED${CL:-}"
|
||||||
|
echo ""
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Disable default MOTD scripts (Debian/Ubuntu)
|
||||||
|
[[ -d /etc/update-motd.d ]] && chmod -x /etc/update-motd.d/* 2>/dev/null || true
|
||||||
|
|
||||||
|
# Configure SSH root access if requested
|
||||||
|
if [[ "${SSH_ROOT:-}" == "yes" ]]; then
|
||||||
|
local sshd_config="/etc/ssh/sshd_config"
|
||||||
|
if [[ -f "$sshd_config" ]]; then
|
||||||
|
sed -i "s/#PermitRootLogin prohibit-password/PermitRootLogin yes/g" "$sshd_config"
|
||||||
|
sed -i "s/PermitRootLogin prohibit-password/PermitRootLogin yes/g" "$sshd_config"
|
||||||
|
|
||||||
|
case "$INIT_SYSTEM" in
|
||||||
|
systemd)
|
||||||
|
svc_restart sshd 2>/dev/null || svc_restart ssh 2>/dev/null || true
|
||||||
|
;;
|
||||||
|
openrc)
|
||||||
|
svc_enable sshd 2>/dev/null || true
|
||||||
|
svc_start sshd 2>/dev/null || true
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
svc_restart sshd 2>/dev/null || true
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# SECTION 7: CONTAINER CUSTOMIZATION
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# customize()
|
||||||
|
#
|
||||||
|
# Customizes container for passwordless login and creates update script
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
customize() {
|
||||||
|
if [[ "${PASSWORD:-}" == "" ]]; then
|
||||||
|
msg_info "Customizing Container"
|
||||||
|
|
||||||
|
# Remove root password for auto-login
|
||||||
|
passwd -d root &>/dev/null || true
|
||||||
|
|
||||||
|
case "$INIT_SYSTEM" in
|
||||||
|
systemd)
|
||||||
|
# Configure getty for auto-login
|
||||||
|
local GETTY_OVERRIDE="/etc/systemd/system/container-getty@1.service.d/override.conf"
|
||||||
|
mkdir -p "$(dirname "$GETTY_OVERRIDE")"
|
||||||
|
cat >"$GETTY_OVERRIDE" <<EOF
|
||||||
|
[Service]
|
||||||
|
ExecStart=
|
||||||
|
ExecStart=-/sbin/agetty --autologin root --noclear --keep-baud tty%I 115200,38400,9600 \$TERM
|
||||||
|
EOF
|
||||||
|
svc_reload_daemon
|
||||||
|
systemctl restart "$(basename "$(dirname "$GETTY_OVERRIDE")" | sed 's/\.d//')" 2>/dev/null || true
|
||||||
|
;;
|
||||||
|
|
||||||
|
openrc)
|
||||||
|
# Alpine/Gentoo: use inittab for auto-login
|
||||||
|
pkg_install util-linux 2>/dev/null || true
|
||||||
|
|
||||||
|
# Create persistent autologin boot script
|
||||||
|
mkdir -p /etc/local.d
|
||||||
|
cat <<'EOFSCRIPT' >/etc/local.d/autologin.start
|
||||||
|
#!/bin/sh
|
||||||
|
sed -i 's|^tty1::respawn:.*|tty1::respawn:/sbin/agetty --autologin root --noclear tty1 38400 linux|' /etc/inittab
|
||||||
|
kill -HUP 1
|
||||||
|
EOFSCRIPT
|
||||||
|
chmod +x /etc/local.d/autologin.start
|
||||||
|
rc-update add local 2>/dev/null || true
|
||||||
|
/etc/local.d/autologin.start 2>/dev/null || true
|
||||||
|
touch /root/.hushlogin
|
||||||
|
;;
|
||||||
|
|
||||||
|
sysvinit)
|
||||||
|
# Devuan/older systems
|
||||||
|
if [[ -f /etc/inittab ]]; then
|
||||||
|
sed -i 's|^1:2345:respawn:/sbin/getty.*|1:2345:respawn:/sbin/agetty --autologin root tty1 38400 linux|' /etc/inittab
|
||||||
|
telinit q 2>/dev/null || true
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
msg_ok "Customized Container"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Create update script
|
||||||
|
echo "bash -c \"\$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/ct/${app}.sh)\"" >/usr/bin/update
|
||||||
|
chmod +x /usr/bin/update
|
||||||
|
|
||||||
|
# Inject SSH authorized keys if provided
|
||||||
|
if [[ -n "${SSH_AUTHORIZED_KEY:-}" ]]; then
|
||||||
|
mkdir -p /root/.ssh
|
||||||
|
echo "${SSH_AUTHORIZED_KEY}" >/root/.ssh/authorized_keys
|
||||||
|
chmod 700 /root/.ssh
|
||||||
|
chmod 600 /root/.ssh/authorized_keys
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# ==============================================================================
|
||||||
|
# SECTION 8: UTILITY FUNCTIONS
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# validate_tz(timezone)
|
||||||
|
#
|
||||||
|
# Validates if a timezone is valid
|
||||||
|
# Returns: 0 if valid, 1 if invalid
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
validate_tz() {
|
||||||
|
local tz="$1"
|
||||||
|
[[ -f "/usr/share/zoneinfo/$tz" ]]
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# set_timezone(timezone)
|
||||||
|
#
|
||||||
|
# Sets container timezone
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
set_timezone() {
|
||||||
|
local tz="$1"
|
||||||
|
if validate_tz "$tz"; then
|
||||||
|
ln -sf "/usr/share/zoneinfo/$tz" /etc/localtime
|
||||||
|
echo "$tz" >/etc/timezone 2>/dev/null || true
|
||||||
|
|
||||||
|
# Update tzdata if available
|
||||||
|
case "$PKG_MANAGER" in
|
||||||
|
apt)
|
||||||
|
dpkg-reconfigure -f noninteractive tzdata 2>/dev/null || true
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
msg_ok "Timezone set to $tz"
|
||||||
|
else
|
||||||
|
msg_warn "Invalid timezone: $tz"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
# os_info()
|
||||||
|
#
|
||||||
|
# Prints detected OS information (for debugging)
|
||||||
|
# ------------------------------------------------------------------------------
|
||||||
|
os_info() {
|
||||||
|
echo "OS Type: $OS_TYPE"
|
||||||
|
echo "OS Family: $OS_FAMILY"
|
||||||
|
echo "OS Version: $OS_VERSION"
|
||||||
|
echo "Pkg Manager: $PKG_MANAGER"
|
||||||
|
echo "Init System: $INIT_SYSTEM"
|
||||||
|
}
|
||||||
Loading…
x
Reference in New Issue
Block a user