456 lines
14 KiB
Plaintext
456 lines
14 KiB
Plaintext
# Copyright (c) 2021-2025 tteck
|
|
# Author: tteck (tteckster)
|
|
# Co-Author: MickLesk
|
|
# License: MIT
|
|
# https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
|
|
|
|
# This function sets color variables for formatting output in the terminal
|
|
color() {
|
|
# Colors
|
|
YW=$(echo "\033[33m")
|
|
YWB=$(echo "\033[93m")
|
|
BL=$(echo "\033[36m")
|
|
RD=$(echo "\033[01;31m")
|
|
GN=$(echo "\033[1;92m")
|
|
|
|
# Formatting
|
|
CL=$(echo "\033[m")
|
|
BFR="\\r\\033[K"
|
|
BOLD=$(echo "\033[1m")
|
|
HOLD=" "
|
|
TAB=" "
|
|
|
|
# System
|
|
RETRY_NUM=10
|
|
RETRY_EVERY=3
|
|
|
|
# Icons
|
|
CM="${TAB}✔️${TAB}${CL}"
|
|
CROSS="${TAB}✖️${TAB}${CL}"
|
|
INFO="${TAB}💡${TAB}${CL}"
|
|
NETWORK="${TAB}📡${TAB}${CL}"
|
|
HOSTNAME="${TAB}🏠${TAB}${CL}"
|
|
}
|
|
|
|
# Function to set STD mode based on verbosity
|
|
set_std_mode() {
|
|
if [ "$VERBOSE" = "yes" ]; then
|
|
STD=""
|
|
else
|
|
STD="silent"
|
|
fi
|
|
}
|
|
|
|
# Silent execution function
|
|
silent() {
|
|
"$@" >/dev/null 2>&1
|
|
}
|
|
|
|
# This function enables IPv6 if it's not disabled and sets verbose mode
|
|
verb_ip6() {
|
|
set_std_mode # Set STD mode based on VERBOSE
|
|
|
|
if [ "$DISABLEIPV6" == "yes" ]; then
|
|
echo "net.ipv6.conf.all.disable_ipv6 = 1" >>/etc/sysctl.conf
|
|
$STD sysctl -p
|
|
fi
|
|
}
|
|
|
|
# This function sets error handling options and defines the error_handler function to handle errors
|
|
catch_errors() {
|
|
set -Eeuo pipefail
|
|
trap 'error_handler $LINENO "$BASH_COMMAND"' ERR
|
|
}
|
|
|
|
# This function handles errors
|
|
error_handler() {
|
|
source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/api.func)
|
|
if [ -n "$SPINNER_PID" ] && ps -p $SPINNER_PID >/dev/null; then kill $SPINNER_PID >/dev/null; fi
|
|
printf "\e[?25h"
|
|
local exit_code="$?"
|
|
local line_number="$1"
|
|
local command="$2"
|
|
local error_message="${RD}[ERROR]${CL} in line ${RD}$line_number${CL}: exit code ${RD}$exit_code${CL}: while executing command ${YW}$command${CL}"
|
|
echo -e "\n$error_message"
|
|
if [[ "$line_number" -eq 50 ]]; then
|
|
echo -e "The silent function has suppressed the error, run the script with verbose mode enabled, which will provide more detailed output.\n"
|
|
post_update_to_api "failed" "No error message, script ran in silent mode"
|
|
else
|
|
post_update_to_api "failed" "${command}"
|
|
fi
|
|
}
|
|
|
|
# This function displays a spinner.
|
|
spinner() {
|
|
local frames=('⠋' '⠙' '⠹' '⠸' '⠼' '⠴' '⠦' '⠧' '⠇' '⠏')
|
|
local spin_i=0
|
|
local interval=0.1
|
|
printf "\e[?25l"
|
|
|
|
local color="${YWB}"
|
|
|
|
while true; do
|
|
printf "\r ${color}%s${CL}" "${frames[spin_i]}"
|
|
spin_i=$(((spin_i + 1) % ${#frames[@]}))
|
|
sleep "$interval"
|
|
done
|
|
}
|
|
|
|
# This function displays an informational message with a yellow color.
|
|
msg_info() {
|
|
local msg="$1"
|
|
echo -ne "${TAB}${YW}${HOLD}${msg}${HOLD}"
|
|
spinner &
|
|
SPINNER_PID=$!
|
|
}
|
|
|
|
# This function displays a success message with a green color.
|
|
msg_ok() {
|
|
if [ -n "$SPINNER_PID" ] && ps -p $SPINNER_PID >/dev/null; then kill $SPINNER_PID >/dev/null; fi
|
|
printf "\e[?25h"
|
|
local msg="$1"
|
|
echo -e "${BFR}${CM}${GN}${msg}${CL}"
|
|
}
|
|
|
|
# This function displays a error message with a red color.
|
|
msg_error() {
|
|
if [ -n "$SPINNER_PID" ] && ps -p $SPINNER_PID >/dev/null; then kill $SPINNER_PID >/dev/null; fi
|
|
printf "\e[?25h"
|
|
local msg="$1"
|
|
echo -e "${BFR}${CROSS}${RD}${msg}${CL}"
|
|
}
|
|
|
|
# This function sets up the Container OS by generating the locale, setting the timezone, and checking the network connection
|
|
setting_up_container() {
|
|
msg_info "Setting up Container OS"
|
|
sed -i "/$LANG/ s/\(^# \)//" /etc/locale.gen
|
|
locale_line=$(grep -v '^#' /etc/locale.gen | grep -E '^[a-zA-Z]' | awk '{print $1}' | head -n 1)
|
|
echo "LANG=${locale_line}" >/etc/default/locale
|
|
locale-gen >/dev/null
|
|
export LANG=${locale_line}
|
|
echo $tz >/etc/timezone
|
|
ln -sf /usr/share/zoneinfo/$tz /etc/localtime
|
|
for ((i = RETRY_NUM; i > 0; i--)); do
|
|
if [ "$(hostname -I)" != "" ]; then
|
|
break
|
|
fi
|
|
echo 1>&2 -en "${CROSS}${RD} No Network! "
|
|
sleep $RETRY_EVERY
|
|
done
|
|
if [ "$(hostname -I)" = "" ]; then
|
|
echo 1>&2 -e "\n${CROSS}${RD} No Network After $RETRY_NUM Tries${CL}"
|
|
echo -e "${NETWORK}Check Network Settings"
|
|
exit 1
|
|
fi
|
|
rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
|
|
systemctl disable -q --now systemd-networkd-wait-online.service
|
|
msg_ok "Set up Container OS"
|
|
msg_ok "Network Connected: ${BL}$(hostname -I)"
|
|
}
|
|
|
|
exit_script() {
|
|
clear
|
|
echo -e "\n${CROSS}${RD}Script aborted.${CL}\n"
|
|
exit
|
|
}
|
|
|
|
# This function checks the network connection by pinging a known IP address and prompts the user to continue if the internet is not connected
|
|
network_check() {
|
|
set +e
|
|
trap - ERR
|
|
ipv4_connected=false
|
|
ipv6_connected=false
|
|
sleep 1
|
|
# Check IPv4 connectivity to Google, Cloudflare & Quad9 DNS servers.
|
|
if ping -c 1 -W 1 1.1.1.1 &>/dev/null || ping -c 1 -W 1 8.8.8.8 &>/dev/null || ping -c 1 -W 1 9.9.9.9 &>/dev/null; then
|
|
msg_ok "IPv4 Internet Connected"
|
|
ipv4_connected=true
|
|
else
|
|
msg_error "IPv4 Internet Not Connected"
|
|
fi
|
|
|
|
# Check IPv6 connectivity to Google, Cloudflare & Quad9 DNS servers.
|
|
if ping6 -c 1 -W 1 2606:4700:4700::1111 &>/dev/null || ping6 -c 1 -W 1 2001:4860:4860::8888 &>/dev/null || ping6 -c 1 -W 1 2620:fe::fe &>/dev/null; then
|
|
msg_ok "IPv6 Internet Connected"
|
|
ipv6_connected=true
|
|
else
|
|
msg_error "IPv6 Internet Not Connected"
|
|
fi
|
|
|
|
# If both IPv4 and IPv6 checks fail, prompt the user
|
|
if [[ $ipv4_connected == false && $ipv6_connected == false ]]; then
|
|
read -r -p "No Internet detected,would you like to continue anyway? <y/N> " prompt
|
|
if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
|
|
echo -e "${INFO}${RD}Expect Issues Without Internet${CL}"
|
|
else
|
|
echo -e "${NETWORK}Check Network Settings"
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
RESOLVEDIP=$(getent hosts github.com | awk '{ print $1 }')
|
|
if [[ -z "$RESOLVEDIP" ]]; then msg_error "DNS Lookup Failure"; else msg_ok "DNS Resolved github.com to ${BL}$RESOLVEDIP${CL}"; fi
|
|
set -e
|
|
trap 'error_handler $LINENO "$BASH_COMMAND"' ERR
|
|
}
|
|
|
|
# This function updates the Container OS by running apt-get update and upgrade
|
|
update_os() {
|
|
msg_info "Updating Container OS"
|
|
if [[ "$CACHER" == "yes" ]]; then
|
|
echo "Acquire::http::Proxy-Auto-Detect \"/usr/local/bin/apt-proxy-detect.sh\";" >/etc/apt/apt.conf.d/00aptproxy
|
|
cat <<EOF >/usr/local/bin/apt-proxy-detect.sh
|
|
#!/bin/bash
|
|
if nc -w1 -z "${CACHER_IP}" 3142; then
|
|
echo -n "http://${CACHER_IP}:3142"
|
|
else
|
|
echo -n "DIRECT"
|
|
fi
|
|
EOF
|
|
chmod +x /usr/local/bin/apt-proxy-detect.sh
|
|
fi
|
|
$STD apt-get update
|
|
$STD apt-get -o Dpkg::Options::="--force-confold" -y dist-upgrade
|
|
rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
|
|
msg_ok "Updated Container OS"
|
|
|
|
msg_info "Installing core dependencies"
|
|
$STD apt-get update
|
|
$STD apt-get install -y sudo curl mc
|
|
msg_ok "Core dependencies installed"
|
|
}
|
|
|
|
# This function modifies the message of the day (motd) and SSH settings
|
|
motd_ssh() {
|
|
grep -qxF "export TERM='xterm-256color'" /root/.bashrc || echo "export TERM='xterm-256color'" >>/root/.bashrc
|
|
|
|
if [ -f "/etc/os-release" ]; then
|
|
OS_NAME=$(grep ^NAME /etc/os-release | cut -d= -f2 | tr -d '"')
|
|
OS_VERSION=$(grep ^VERSION_ID /etc/os-release | cut -d= -f2 | tr -d '"')
|
|
elif [ -f "/etc/debian_version" ]; then
|
|
OS_NAME="Debian"
|
|
OS_VERSION=$(cat /etc/debian_version)
|
|
fi
|
|
|
|
PROFILE_FILE="/etc/profile.d/00_lxc-details.sh"
|
|
echo "echo -e \"\"" >"$PROFILE_FILE"
|
|
echo -e "echo -e \"${BOLD}${YW}${APPLICATION} LXC Container - DEV Repository${CL}\"" >>"$PROFILE_FILE"
|
|
echo -e "echo -e \"${RD}WARNING: This is a DEVELOPMENT version (ProxmoxVED). Do NOT use in production!${CL}\"" >>"$PROFILE_FILE"
|
|
echo -e "echo -e \"${YW} OS: ${GN}${OS_NAME} - Version: ${OS_VERSION}${CL}\"" >>"$PROFILE_FILE"
|
|
echo -e "echo -e \"${YW} Hostname: ${GN}\$(hostname)${CL}\"" >>"$PROFILE_FILE"
|
|
echo -e "echo -e \"${YW} IP Address: ${GN}\$(hostname -I | awk '{print \$1}')${CL}\"" >>"$PROFILE_FILE"
|
|
echo -e "echo -e \"${YW} Repository: ${GN}https://github.com/community-scripts/ProxmoxVED${CL}\"" >>"$PROFILE_FILE"
|
|
echo "echo \"\"" >>"$PROFILE_FILE"
|
|
|
|
chmod -x /etc/update-motd.d/*
|
|
|
|
if [[ "${SSH_ROOT}" == "yes" ]]; then
|
|
sed -i "s/#PermitRootLogin prohibit-password/PermitRootLogin yes/g" /etc/ssh/sshd_config
|
|
systemctl restart sshd
|
|
fi
|
|
}
|
|
|
|
# This function customizes the container by modifying the getty service and enabling auto-login for the root user
|
|
customize() {
|
|
if [[ "$PASSWORD" == "" ]]; then
|
|
msg_info "Customizing Container"
|
|
GETTY_OVERRIDE="/etc/systemd/system/container-getty@1.service.d/override.conf"
|
|
mkdir -p $(dirname $GETTY_OVERRIDE)
|
|
cat <<EOF >$GETTY_OVERRIDE
|
|
[Service]
|
|
ExecStart=
|
|
ExecStart=-/sbin/agetty --autologin root --noclear --keep-baud tty%I 115200,38400,9600 \$TERM
|
|
EOF
|
|
systemctl daemon-reload
|
|
systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
|
|
msg_ok "Customized Container"
|
|
fi
|
|
echo "bash -c \"\$(curl -fsSL https://github.com/community-scripts/ProxmoxVED/raw/main/ct/${app}.sh)\"" >/usr/bin/update
|
|
chmod +x /usr/bin/update
|
|
if [[ -n "${SSH_AUTHORIZED_KEY}" ]]; then
|
|
mkdir -p /root/.ssh
|
|
echo "${SSH_AUTHORIZED_KEY}" >/root/.ssh/authorized_keys
|
|
chmod 700 /root/.ssh
|
|
chmod 600 /root/.ssh/authorized_keys
|
|
fi
|
|
}
|
|
|
|
fetch_and_deploy_gh_release() {
|
|
local repo="$1"
|
|
local app=$(echo ${APPLICATION,,} | tr -d ' ')
|
|
local api_url="https://api.github.com/repos/$repo/releases/latest"
|
|
local header=()
|
|
local attempt=0
|
|
local max_attempts=3
|
|
local api_response tag http_code
|
|
local current_version=""
|
|
local curl_timeout="--connect-timeout 10 --max-time 30"
|
|
|
|
echo "🔍 Checking latest release for: $repo"
|
|
|
|
# Check if the app directory exists and if there's a version file
|
|
if [[ -f "/opt/${app}_version.txt" ]]; then
|
|
current_version=$(cat "/opt/${app}_version.txt")
|
|
$STD msg_info "Current version: $current_version"
|
|
fi
|
|
|
|
# ensure that jq is installed
|
|
if ! command -v jq &>/dev/null; then
|
|
$STD msg_info "Installing jq..."
|
|
apt-get update -qq &>/dev/null
|
|
apt-get install -y jq &>/dev/null || {
|
|
msg_error "Failed to install jq"
|
|
return 1
|
|
}
|
|
fi
|
|
|
|
[[ -n "${GITHUB_TOKEN:-}" ]] && header=(-H "Authorization: token $GITHUB_TOKEN")
|
|
|
|
until [[ $attempt -ge $max_attempts ]]; do
|
|
((attempt++)) || true
|
|
$STD msg_info "[$attempt/$max_attempts] Fetching GitHub release for $repo...\n"
|
|
|
|
api_response=$(curl $curl_timeout -fsSL -w "%{http_code}" -o /tmp/gh_resp.json "${header[@]}" "$api_url")
|
|
http_code="${api_response:(-3)}"
|
|
|
|
if [[ "$http_code" == "404" ]]; then
|
|
msg_error "Repository $repo has no Release candidate (404)"
|
|
return 1
|
|
fi
|
|
|
|
if [[ "$http_code" != "200" ]]; then
|
|
$STD msg_info "Request failed with HTTP $http_code, retrying...\n"
|
|
sleep $((attempt * 2))
|
|
continue
|
|
fi
|
|
|
|
api_response=$(</tmp/gh_resp.json)
|
|
|
|
if echo "$api_response" | grep -q "API rate limit exceeded"; then
|
|
msg_error "GitHub API rate limit exceeded."
|
|
return 1
|
|
fi
|
|
|
|
if echo "$api_response" | jq -e '.message == "Not Found"' &>/dev/null; then
|
|
msg_error "Repository not found: $repo"
|
|
return 1
|
|
fi
|
|
|
|
tag=$(echo "$api_response" | jq -r '.tag_name // .name // empty')
|
|
[[ "$tag" =~ ^v[0-9] ]] && tag="${tag:1}"
|
|
|
|
if [[ -z "$tag" ]]; then
|
|
$STD msg_info "Empty tag received, retrying...\n"
|
|
sleep $((attempt * 2))
|
|
continue
|
|
fi
|
|
|
|
$STD msg_ok "Found release: $tag for $repo"
|
|
break
|
|
done
|
|
|
|
if [[ -z "$tag" ]]; then
|
|
msg_error "Failed to fetch release for $repo after $max_attempts attempts."
|
|
exit 1
|
|
fi
|
|
|
|
# Version comparison (if we already have this version, skip)
|
|
if [[ "$current_version" == "$tag" ]]; then
|
|
$STD msg_info "Already running the latest version ($tag). Skipping update."
|
|
return 0
|
|
fi
|
|
|
|
local version="$tag"
|
|
local base_url="https://github.com/$repo/releases/download/v$tag"
|
|
local tmpdir
|
|
tmpdir=$(mktemp -d) || return 1
|
|
|
|
# Extract list of assets from the Release API
|
|
local assets urls
|
|
assets=$(echo "$api_response" | jq -r '.assets[].browser_download_url') || true
|
|
|
|
# Detect current architecture
|
|
local arch
|
|
if command -v dpkg &>/dev/null; then
|
|
arch=$(dpkg --print-architecture)
|
|
elif command -v uname &>/dev/null; then
|
|
case "$(uname -m)" in
|
|
x86_64) arch="amd64" ;;
|
|
aarch64) arch="arm64" ;;
|
|
armv7l) arch="armv7" ;;
|
|
armv6l) arch="armv6" ;;
|
|
*) arch="unknown" ;;
|
|
esac
|
|
else
|
|
arch="unknown"
|
|
fi
|
|
$STD msg_info "Detected system architecture: $arch"
|
|
|
|
# Try to find a matching asset for our architecture
|
|
local url=""
|
|
for u in $assets; do
|
|
if [[ "$u" =~ $arch.*\.tar\.gz$ ]]; then
|
|
url="$u"
|
|
$STD msg_info "Found matching architecture asset: $url"
|
|
break
|
|
fi
|
|
done
|
|
|
|
# Fallback to other architectures if our specific one isn't found
|
|
if [[ -z "$url" ]]; then
|
|
for u in $assets; do
|
|
if [[ "$u" =~ (x86_64|amd64|arm64|armv7|armv6).*\.tar\.gz$ ]]; then
|
|
url="$u"
|
|
$STD msg_info "Architecture-specific asset not found, using: $url"
|
|
break
|
|
fi
|
|
done
|
|
fi
|
|
|
|
# Fallback to any tar.gz
|
|
if [[ -z "$url" ]]; then
|
|
for u in $assets; do
|
|
if [[ "$u" =~ \.tar\.gz$ ]]; then
|
|
url="$u"
|
|
$STD msg_info "Using generic tarball: $url"
|
|
break
|
|
fi
|
|
done
|
|
fi
|
|
|
|
# Final fallback to GitHub source tarball
|
|
if [[ -z "$url" ]]; then
|
|
url="https://github.com/$repo/archive/refs/tags/$version.tar.gz"
|
|
$STD msg_info "Trying GitHub source tarball fallback: $url"
|
|
fi
|
|
|
|
local filename="${url##*/}"
|
|
$STD msg_info "Downloading $url"
|
|
|
|
if ! curl $curl_timeout -fsSL -o "$tmpdir/$filename" "$url"; then
|
|
msg_error "Failed to download release asset from $url"
|
|
rm -rf "$tmpdir"
|
|
return 1
|
|
fi
|
|
|
|
mkdir -p "/opt/$app"
|
|
local extracted=false
|
|
if tar -tzf "$tmpdir/$filename" | grep -q '/'; then
|
|
if tar -xzf "$tmpdir/$filename" -C "/opt/$app" --strip-components=1; then
|
|
extracted=true
|
|
fi
|
|
fi
|
|
|
|
if [[ $extracted != true ]]; then
|
|
if ! tar -xzf "$tmpdir/$filename" -C "/opt/$app"; then
|
|
msg_error "Failed to extract archive for $app"
|
|
rm -rf "$tmpdir"
|
|
return 1
|
|
fi
|
|
fi
|
|
|
|
echo "$version" >"/opt/${app}_version.txt"
|
|
$STD msg_ok "Deployed $app v$version to /opt/$app"
|
|
rm -rf "$tmpdir"
|
|
}
|