#!/bin/bash # by https://github.com/oneclickvirt/lxd # 2026.04.06 # 一键安装（交互式）： # curl -L https://raw.githubusercontent.com/oneclickvirt/lxd/main/scripts/lxdinstall.sh -o lxdinstall.sh && chmod +x lxdinstall.sh && bash lxdinstall.sh # # 一键安装（无交互，环境变量预定义）： # export noninteractive=true # export DISK_NUMS=40 # bash lxdinstall.sh # # export noninteractive=true # export DISK_NUMS=40 # export STORAGE_PATH=/data/lxd-storage # bash lxdinstall.sh # # 可用环境变量： # noninteractive=true 跳过所有交互提示，使用默认值或其他环境变量 # DISK_NUMS=<正整数> 存储池大小（单位 GB），如 DISK_NUMS=40 # STORAGE_PATH=<绝对路径> 自定义存储路径，如 STORAGE_PATH=/data/lxd-storage # WITHOUTCDN=true 跳过 CDN 加速 # CN=true 强制使用中国镜像 cd /root >/dev/null 2>&1 || exit 1 REGEX=("debian|astra" "ubuntu" "centos|red hat|kernel|oracle linux|alma|rocky" "'amazon linux'" "fedora" "arch|manjaro" "alpine" "freebsd") RELEASE=("Debian" "Ubuntu" "CentOS" "CentOS" "Fedora" "Arch" "Alpine" "FreeBSD") CMD=("$(grep -i pretty_name /etc/os-release 2>/dev/null | cut -d \" -f2)" "$(hostnamectl 2>/dev/null | grep -i system | cut -d : -f2)" "$(lsb_release -sd 2>/dev/null)" "$(grep -i description /etc/lsb-release 2>/dev/null | cut -d \" -f2)" "$(grep . /etc/redhat-release 2>/dev/null)" "$(grep . /etc/issue 2>/dev/null | cut -d \\ -f1 | sed '/^[ ]*$/d')" "$(grep -i pretty_name /etc/os-release 2>/dev/null | cut -d \" -f2)" "$(uname -s)") SYS="${CMD[0]}" [[ -n $SYS ]] || exit 1 for ((int = 0; int < ${#REGEX[@]}; int++)); do if [[ $(echo "$SYS" | tr '[:upper:]' '[:lower:]') =~ ${REGEX[int]} ]]; then SYSTEM="${RELEASE[int]}" [[ -n $SYSTEM ]] && break fi done TRIED_STORAGE_FILE="/usr/local/bin/lxd_tried_storage" INSTALLED_STORAGE_FILE="/usr/local/bin/lxd_installed_storage" LEGACY_TRIED_STORAGE_FILE="/usr/local/bin/incus_tried_storage" LEGACY_INSTALLED_STORAGE_FILE="/usr/local/bin/incus_installed_storage" if [ ! -d "/usr/local/bin" ]; then mkdir -p /usr/local/bin fi [ ! -f "$TRIED_STORAGE_FILE" ] && [ -f "$LEGACY_TRIED_STORAGE_FILE" ] && cp "$LEGACY_TRIED_STORAGE_FILE" "$TRIED_STORAGE_FILE" [ ! -f "$INSTALLED_STORAGE_FILE" ] && [ -f "$LEGACY_INSTALLED_STORAGE_FILE" ] && cp "$LEGACY_INSTALLED_STORAGE_FILE" "$INSTALLED_STORAGE_FILE" _red() { printf '\033[31m\033[01m%s\033[0m\n' "$*"; } _green() { printf '\033[32m\033[01m%s\033[0m\n' "$*"; } _yellow() { printf '\033[33m\033[01m%s\033[0m\n' "$*"; } _blue() { printf '\033[36m\033[01m%s\033[0m\n' "$*"; } reading() { read -rp "$(_green "$1")" "$2"; } is_true() { local value value=$(printf '%s' "${1:-}" | tr '[:upper:]' '[:lower:]') [ "$value" = "true" ] || [ "$value" = "1" ] || [ "$value" = "yes" ] || [ "$value" = "y" ] } sed_compatible() { if echo "test" | sed -E 's/test/ok/' >/dev/null 2>&1; then sed -E "$@" else sed -r "$@" fi } service_manager() { local action=$1 local service_name=$2 local success=false case "$action" in enable) if command -v systemctl >/dev/null 2>&1; then if systemctl enable "$service_name" 2>/dev/null; then success=true fi fi if command -v rc-update >/dev/null 2>&1; then if rc-update add "$service_name" default 2>/dev/null; then success=true fi fi if command -v chkconfig >/dev/null 2>&1; then if chkconfig "$service_name" on 2>/dev/null; then success=true fi fi if command -v update-rc.d >/dev/null 2>&1; then if update-rc.d "$service_name" defaults 2>/dev/null || update-rc.d "$service_name" enable 2>/dev/null; then success=true fi fi ;; disable) if command -v systemctl >/dev/null 2>&1; then systemctl disable "$service_name" 2>/dev/null && success=true fi if command -v rc-update >/dev/null 2>&1; then rc-update del "$service_name" default 2>/dev/null && success=true fi if command -v chkconfig >/dev/null 2>&1; then chkconfig "$service_name" off 2>/dev/null && success=true fi if command -v update-rc.d >/dev/null 2>&1; then update-rc.d "$service_name" disable 2>/dev/null && success=true fi ;; start) if command -v systemctl >/dev/null 2>&1; then if systemctl start "$service_name" 2>/dev/null; then success=true fi fi if ! $success && command -v rc-service >/dev/null 2>&1; then if rc-service "$service_name" start 2>/dev/null; then success=true fi fi if ! $success && command -v service >/dev/null 2>&1; then if service "$service_name" start 2>/dev/null; then success=true fi fi if ! $success && [ -x "/etc/init.d/$service_name" ]; then if /etc/init.d/"$service_name" start 2>/dev/null; then success=true fi fi ;; stop) if command -v systemctl >/dev/null 2>&1; then systemctl stop "$service_name" 2>/dev/null && success=true fi if ! $success && command -v rc-service >/dev/null 2>&1; then rc-service "$service_name" stop 2>/dev/null && success=true fi if ! $success && command -v service >/dev/null 2>&1; then service "$service_name" stop 2>/dev/null && success=true fi if ! $success && [ -x "/etc/init.d/$service_name" ]; then /etc/init.d/"$service_name" stop 2>/dev/null && success=true fi ;; restart) if command -v systemctl >/dev/null 2>&1; then if systemctl restart "$service_name" 2>/dev/null; then success=true fi fi if ! $success && command -v rc-service >/dev/null 2>&1; then if rc-service "$service_name" restart 2>/dev/null; then success=true fi fi if ! $success && command -v service >/dev/null 2>&1; then if service "$service_name" restart 2>/dev/null; then success=true fi fi if ! $success && [ -x "/etc/init.d/$service_name" ]; then if /etc/init.d/"$service_name" restart 2>/dev/null; then success=true fi fi ;; daemon-reload) if command -v systemctl >/dev/null 2>&1; then systemctl daemon-reload 2>/dev/null && success=true else success=true fi ;; is-active) if command -v systemctl >/dev/null 2>&1; then if systemctl is-active --quiet "$service_name" 2>/dev/null; then return 0 fi fi if command -v rc-service >/dev/null 2>&1; then if rc-service "$service_name" status >/dev/null 2>&1; then return 0 fi fi if command -v service >/dev/null 2>&1; then if service "$service_name" status >/dev/null 2>&1; then return 0 fi fi if [ -x "/etc/init.d/$service_name" ]; then if /etc/init.d/"$service_name" status >/dev/null 2>&1; then return 0 fi fi return 1 ;; esac if [ "$action" != "is-active" ]; then $success && return 0 || return 1 fi } cdn_urls=("https://cdn0.spiritlhl.top/" "http://cdn1.spiritlhl.net/" "http://cdn2.spiritlhl.net/" "http://cdn3.spiritlhl.net/" "http://cdn4.spiritlhl.net/") set_locale() { utf8_locale=$(locale -a 2>/dev/null | grep -i -m 1 -E "utf8|UTF-8") export DEBIAN_FRONTEND=noninteractive if [[ -z "$utf8_locale" ]]; then _yellow "No UTF-8 locale found" else export LC_ALL="$utf8_locale" export LANG="$utf8_locale" export LANGUAGE="$utf8_locale" _green "Locale set to $utf8_locale" fi } install_package() { package_name=$1 if command -v "$package_name" >/dev/null 2>&1; then _green "$package_name has been installed" _green "$package_name 已经安装" else if [ "$SYSTEM" = "Alpine" ] && command -v apk >/dev/null 2>&1; then apk add --no-cache "$package_name" elif [ "$SYSTEM" = "Arch" ] && command -v pacman >/dev/null 2>&1; then pacman -S --noconfirm --needed "$package_name" elif command -v apt-get >/dev/null 2>&1; then apt-get install -y "$package_name" if [ $? -ne 0 ]; then apt-get install -y "$package_name" --fix-missing fi elif command -v yum >/dev/null 2>&1; then yum install -y "$package_name" elif command -v dnf >/dev/null 2>&1; then dnf install -y "$package_name" elif command -v apk >/dev/null 2>&1; then apk add --no-cache "$package_name" elif command -v pacman >/dev/null 2>&1; then pacman -S --noconfirm --needed "$package_name" else _yellow "No supported package manager found" _yellow "未找到支持的包管理器" return 1 fi _green "$package_name has attempted to install" _green "$package_name 已尝试安装" fi } check_cdn() { local o_url=$1 local shuffled_cdn_urls=() mapfile -t shuffled_cdn_urls < <(printf '%s\n' "${cdn_urls[@]}" | shuf) for cdn_url in "${shuffled_cdn_urls[@]}"; do if curl -4 -sL -k "$cdn_url$o_url" --max-time 6 | grep -q "success" >/dev/null 2>&1; then export cdn_success_url="$cdn_url" return fi sleep 0.5 done export cdn_success_url="" } check_cdn_file() { local withoutcdn_upper withoutcdn_upper=$(printf '%s' "${WITHOUTCDN:-}" | tr '[:lower:]' '[:upper:]') if [ "$withoutcdn_upper" = "TRUE" ]; then export cdn_success_url="" echo "WITHOUTCDN=TRUE, skip CDN acceleration" return fi check_cdn "https://raw.githubusercontent.com/spiritLHLS/ecs/main/back/test" if [ -n "$cdn_success_url" ]; then echo "CDN available, using CDN" else echo "No CDN available, no use CDN" fi } download_file() { local url="$1" local output="$2" if ! curl -fsSLk "${cdn_success_url}${url}" -o "$output"; then _red "Failed to download: ${url}" _red "下载失败：${url}" exit 1 fi } ensure_lxc_path() { if ! lxc -h >/dev/null 2>&1; then grep -qxF 'alias lxc="/snap/bin/lxc"' /root/.bashrc 2>/dev/null || echo 'alias lxc="/snap/bin/lxc"' >>/root/.bashrc fi export PATH="$PATH:/snap/bin" } statistics_of_run_times() { COUNT=$(curl -4 -ksm1 "https://hits.spiritlhl.net/lxd?action=hit&title=Hits&title_bg=%23555555&count_bg=%2324dde1&edge_flat=false" 2>/dev/null || curl -6 -ksm1 "https://hits.spiritlhl.net/lxd?action=hit&title=Hits&title_bg=%23555555&count_bg=%2324dde1&edge_flat=false" 2>/dev/null) TODAY=$(echo "$COUNT" | grep -oE '"daily":[[:space:]]*[0-9]+' | sed 's/"daily":[[:space:]]*\([0-9]*\)/\1/') TOTAL=$(echo "$COUNT" | grep -oE '"total":[[:space:]]*[0-9]+' | sed 's/"total":[[:space:]]*\([0-9]*\)/\1/') } rebuild_cloud_init() { if [ -f "/etc/cloud/cloud.cfg" ]; then chattr -i /etc/cloud/cloud.cfg if grep -q "preserve_hostname: true" "/etc/cloud/cloud.cfg"; then : else sed_compatible -i 's/preserve_hostname:[[:space:]]*false/preserve_hostname: true/g' "/etc/cloud/cloud.cfg" echo "change preserve_hostname to true" fi if grep -q "disable_root: false" "/etc/cloud/cloud.cfg"; then : else sed_compatible -i 's/disable_root:[[:space:]]*true/disable_root: false/g' "/etc/cloud/cloud.cfg" echo "change disable_root to false" fi chattr -i /etc/cloud/cloud.cfg content=$(cat /etc/cloud/cloud.cfg) line_number=$(grep -n "^system_info:" "/etc/cloud/cloud.cfg" | cut -d ':' -f 1) if [ -n "$line_number" ]; then lines_after_system_info=$(echo "$content" | sed -n "$((line_number + 1)),\$p") if [ -n "$lines_after_system_info" ]; then updated_content=$(echo "$content" | sed "$((line_number + 1)),\$d") echo "$updated_content" >"/etc/cloud/cloud.cfg" fi fi sed -i '/^[[:space:]]*- set-passwords/s/^/#/' /etc/cloud/cloud.cfg chattr +i /etc/cloud/cloud.cfg fi } get_available_space() { local available_space available_space=$(df -BG / | awk 'NR==2 {gsub("G","",$4); print $4}') echo "$available_space" } install_base_packages() { if [ "$SYSTEM" = "Alpine" ] && command -v apk >/dev/null 2>&1; then apk update elif [ "$SYSTEM" = "Arch" ] && command -v pacman >/dev/null 2>&1; then pacman -Sy elif command -v apt-get >/dev/null 2>&1; then apt-get update apt-get autoremove -y elif command -v yum >/dev/null 2>&1; then yum update -y elif command -v dnf >/dev/null 2>&1; then dnf update -y fi install_package wget install_package curl install_package sudo if [ "$SYSTEM" = "Alpine" ]; then install_package dos2unix || apk add --no-cache busybox-extras else install_package dos2unix fi install_package ufw || _yellow "ufw not available on this system" install_package jq install_package uidmap || _yellow "uidmap not available on this system" if [ "$SYSTEM" = "Alpine" ]; then install_package ipcalc || apk add --no-cache ipcalc-ng else install_package ipcalc fi install_package unzip } install_lxd() { lxd_snap=$(dpkg -l | awk '/^[hi]i/{print $2}' | grep -ow snap) lxd_snapd=$(dpkg -l | awk '/^[hi]i/{print $2}' | grep -ow snapd) if [[ "$lxd_snap" =~ ^snap.* ]] && [[ "$lxd_snapd" =~ ^snapd.* ]]; then _green "snap is installed" _green "snap已安装" else _green "start installation of snap" _green "开始安装snap" apt-get update install_package snapd fi snap_core=$(snap list core) snap_lxd=$(snap list lxd) if [[ "$snap_core" =~ core.* ]] && [[ "$snap_lxd" =~ lxd.* ]]; then _green "lxd is installed" _green "lxd已安装" ensure_lxc_path lxd_lxc_detect=$(lxc list) if [[ "$lxd_lxc_detect" =~ "snap-update-ns failed with code1".* ]]; then service_manager restart apparmor snap restart lxd else _green "No problems with environmental testing" _green "环境检测无问题" fi else _green "Start installation of LXD" _green "开始安装LXD" snap install lxd if [[ $? -ne 0 ]]; then snap remove lxd snap install core snap install lxd fi ensure_lxc_path ! lxc -h >/dev/null 2>&1 && _yellow 'lxc路径有问题，请检查修复' && exit 1 _green "LXD installation complete" _green "LXD安装完成" fi snap set lxd lxcfs.loadavg=true snap set lxd lxcfs.pidfd=true snap set lxd lxcfs.cfs=true service_manager restart snap.lxd.daemon } configure_resources() { # 支持环境变量预定义以实现无交互安装。 if is_true "${noninteractive:-}" || is_true "${NONINTERACTIVE:-}" || [ -n "${DISK_NUMS:-}" ] || [ -n "${STORAGE_PATH:-}" ]; then noninteractive=true fi if is_true "${noninteractive:-}"; then # 存储路径：优先使用 STORAGE_PATH 环境变量，未设置则留空使用默认 storage_path="${STORAGE_PATH:-}" if [ -n "$storage_path" ]; then if [[ ! "$storage_path" =~ ^/.+ ]]; then _red "STORAGE_PATH must be an absolute path: $storage_path" _red "STORAGE_PATH 必须是绝对路径：$storage_path" exit 1 fi if [ ! -d "$storage_path" ]; then if ! mkdir -p "$storage_path" 2>/dev/null; then _red "Failed to create STORAGE_PATH: $storage_path" _red "创建 STORAGE_PATH 失败：$storage_path" exit 1 fi fi echo "$storage_path" >/usr/local/bin/lxd_storage_path _green "Using storage path: $storage_path" _green "使用自定义存储路径：$storage_path" else rm -f /usr/local/bin/lxd_storage_path fi # 存储池大小：优先使用 DISK_NUMS 环境变量，否则自动计算（可用空间 - 1GB） if [ -n "${DISK_NUMS:-}" ]; then if ! [[ "${DISK_NUMS}" =~ ^[1-9][0-9]*$ ]]; then _red "DISK_NUMS must be a positive integer: $DISK_NUMS" _red "DISK_NUMS 必须是正整数：$DISK_NUMS" exit 1 fi disk_nums="$DISK_NUMS" _green "Using pre-defined storage pool size: ${disk_nums}GB" _green "使用预定义存储池大小：${disk_nums}GB" else available_space=$(get_available_space) if ! [[ "$available_space" =~ ^[0-9]+$ ]] || [ "$available_space" -le 1 ]; then _red "Available disk space is insufficient for automatic storage sizing: ${available_space:-unknown}GB" _red "可用磁盘空间不足，无法自动设置存储池大小：${available_space:-unknown}GB" exit 1 fi disk_nums=$((available_space - 1)) _green "Auto-detected storage pool size: ${disk_nums}GB" _green "自动检测存储池大小：${disk_nums}GB" fi else while true; do _green "Do you want to specify a custom path for the storage pool? (y/n) [n]:" reading "是否需要指定存储池的自定义路径？(y/n) [n]：" use_custom_path use_custom_path=${use_custom_path:-n} if [[ "$use_custom_path" =~ ^[yYnN]$ ]]; then break else _yellow "Please enter y or n." _yellow "请输入 y 或 n。" fi done if [[ "$use_custom_path" =~ ^[yY]$ ]]; then while true; do _green "Please enter the custom storage path (e.g., /data/lxd-storage):" reading "请输入自定义存储路径 (例如：/data/lxd-storage)：" storage_path if [[ -n "$storage_path" && "$storage_path" =~ ^/.+ ]]; then if [ ! -d "$storage_path" ]; then mkdir -p "$storage_path" 2>/dev/null if [ $? -eq 0 ]; then echo "$storage_path" >/usr/local/bin/lxd_storage_path _green "Created directory: $storage_path" _green "已创建目录：$storage_path" break else _yellow "Failed to create directory. Please check permissions or try another path." _yellow "创建目录失败，请检查权限或尝试其他路径。" fi else echo "$storage_path" >/usr/local/bin/lxd_storage_path break fi else _yellow "Please enter a valid absolute path starting with /." _yellow "请输入以 / 开头的有效绝对路径。" fi done else storage_path="" rm -f /usr/local/bin/lxd_storage_path fi while true; do _green "How large a storage pool does the host need to open? (Note that it is in GB, enter 10 if you need 10G storage pool):" reading "宿主机需要开设多大的存储池？(注意是GB为单位，需要10G存储池则输入10)：" disk_nums if [[ "$disk_nums" =~ ^[1-9][0-9]*$ ]]; then break else _yellow "Invalid input, please enter a positive integer." _yellow "输入无效，请输入一个正整数。" fi done fi } record_tried_storage() { local storage_type="$1" grep -qxF "$storage_type" "$TRIED_STORAGE_FILE" 2>/dev/null || echo "$storage_type" >>"$TRIED_STORAGE_FILE" is_storage_tried "$storage_type" || TRIED_STORAGE+=("$storage_type") } record_installed_storage() { local storage_type="$1" grep -qxF "$storage_type" "$INSTALLED_STORAGE_FILE" 2>/dev/null || echo "$storage_type" >>"$INSTALLED_STORAGE_FILE" is_storage_installed "$storage_type" || INSTALLED_STORAGE+=("$storage_type") } load_storage_state() { TRIED_STORAGE=() INSTALLED_STORAGE=() if [ -f "$TRIED_STORAGE_FILE" ]; then while IFS= read -r storage_type; do [ -n "$storage_type" ] && TRIED_STORAGE+=("$storage_type") done <"$TRIED_STORAGE_FILE" fi if [ -f "$INSTALLED_STORAGE_FILE" ]; then while IFS= read -r storage_type; do [ -n "$storage_type" ] && INSTALLED_STORAGE+=("$storage_type") done <"$INSTALLED_STORAGE_FILE" fi } is_storage_tried() { local storage_type="$1" for tried in "${TRIED_STORAGE[@]}"; do if [ "$tried" = "$storage_type" ]; then return 0 fi done return 1 } is_storage_installed() { local storage_type="$1" for installed in "${INSTALLED_STORAGE[@]}"; do if [ "$installed" = "$storage_type" ]; then return 0 fi done return 1 } # 创建稀疏文件 create_sparse_file() { local file_path="$1" local size_gb="$2" if dd if=/dev/zero of="$file_path" bs=1G count=0 seek="${size_gb}" 2>/dev/null; then _green "使用 dd 创建稀疏文件成功: $file_path (${size_gb}GB)" _green "Successfully created sparse file using dd: $file_path (${size_gb}GB)" return 0 else _yellow "dd 创建失败，尝试使用 truncate..." _yellow "dd failed, trying truncate..." if command -v truncate >/dev/null 2>&1; then if truncate -s "${size_gb}G" "$file_path" 2>/dev/null; then _green "使用 truncate 创建稀疏文件成功: $file_path (${size_gb}GB)" _green "Successfully created sparse file using truncate: $file_path (${size_gb}GB)" return 0 else _red "truncate 创建失败" _red "truncate failed" return 1 fi else _red "truncate 命令不可用，无法创建稀疏文件" _red "truncate command not available, cannot create sparse file" return 1 fi fi } # 创建和配置存储池（使用自定义路径） create_storage_pool_with_custom_path() { local backend="$1" local storage_path="$2" local disk_nums="$3" local loop_file mount_point temp status mkdir -p "$storage_path" if [ "$backend" = "lvm" ]; then loop_file="$storage_path/lvm_pool.img" _green "创建 LVM 存储池..." _green "Creating LVM storage pool..." if [ -f "$loop_file" ]; then _yellow "检测到旧的循环文件，正在清理..." _yellow "Detected old loop file, cleaning up..." vgremove -f lxd_vg 2>/dev/null || true while IFS= read -r old_loop_dev; do [ -n "$old_loop_dev" ] && losetup -d "$old_loop_dev" 2>/dev/null || true done < <(losetup -j "$loop_file" | cut -d: -f1) rm -f "$loop_file" fi _green "创建稀疏文件：$loop_file (${disk_nums}GB)..." if ! create_sparse_file "$loop_file" "$disk_nums"; then return 1 fi _green "设置循环设备..." loop_dev=$(losetup -f) losetup "$loop_dev" "$loop_file" _green "创建 LVM 物理卷和卷组..." pvcreate "$loop_dev" >/dev/null 2>&1 vgcreate lxd_vg "$loop_dev" >/dev/null 2>&1 echo "$loop_file" > "$storage_path/lvm_loop_file.txt" temp=$(/snap/bin/lxc storage create default lvm source=lxd_vg 2>&1) status=$? elif [ "$backend" = "btrfs" ]; then loop_file="$storage_path/btrfs_pool.img" mount_point="$storage_path/btrfs_mount" _green "创建 btrfs 存储池..." _green "Creating btrfs storage pool..." if mountpoint -q "$mount_point" 2>/dev/null; then _yellow "检测到旧的挂载点，正在卸载..." _yellow "Detected old mount point, unmounting..." umount "$mount_point" 2>/dev/null || true fi if [ -f "$loop_file" ]; then _yellow "检测到旧的循环文件，正在删除..." _yellow "Detected old loop file, removing..." while IFS= read -r old_loop_dev; do [ -n "$old_loop_dev" ] && losetup -d "$old_loop_dev" 2>/dev/null || true done < <(losetup -j "$loop_file" | cut -d: -f1) rm -f "$loop_file" fi mkdir -p "$mount_point" _green "创建稀疏文件：$loop_file (${disk_nums}GB)..." if ! create_sparse_file "$loop_file" "$disk_nums"; then return 1 fi _green "格式化为 btrfs..." mkfs.btrfs -f "$loop_file" >/dev/null 2>&1 if [ $? -ne 0 ]; then _red "btrfs 格式化失败" _red "btrfs formatting failed" return 1 fi _green "挂载 btrfs 文件系统..." mount -o loop "$loop_file" "$mount_point" if [ $? -ne 0 ]; then _red "挂载失败" _red "Mount failed" return 1 fi if ! grep -Fq "$loop_file" /etc/fstab 2>/dev/null; then echo "$loop_file $mount_point btrfs loop 0 0" >>/etc/fstab _green "已添加到 /etc/fstab 实现开机自动挂载" _green "Added to /etc/fstab for automatic mounting on boot" fi chmod 711 "$mount_point" temp=$(/snap/bin/lxc storage create default btrfs source="$mount_point" 2>&1) status=$? elif [ "$backend" = "zfs" ]; then loop_file="$storage_path/zfs_pool.img" local zpool_name="lxd_zfs_pool" _green "创建 ZFS 存储池..." _green "Creating ZFS storage pool..." if zpool list "$zpool_name" >/dev/null 2>&1; then _yellow "检测到旧的 ZFS pool，正在删除..." _yellow "Detected old ZFS pool, removing..." zpool destroy -f "$zpool_name" 2>/dev/null || true fi if [ -f "$loop_file" ]; then _yellow "检测到旧的循环文件，正在删除..." _yellow "Detected old loop file, removing..." rm -f "$loop_file" fi _green "创建稀疏文件：$loop_file (${disk_nums}GB)..." if ! create_sparse_file "$loop_file" "$disk_nums"; then return 1 fi _green "创建 ZFS pool..." zpool create -f "$zpool_name" "$loop_file" >/dev/null 2>&1 if ! zpool list "$zpool_name" >/dev/null 2>&1; then _red "ZFS pool 创建失败！" _red "ZFS pool creation failed!" return 1 fi temp=$(/snap/bin/lxc storage create default zfs source="$zpool_name" 2>&1) status=$? else _red "不支持的存储后端：$backend" _red "Unsupported storage backend: $backend" return 1 fi echo "$temp" return $status } execute_storage_init() { local backend="$1" local temp local status if [ -n "$storage_path" ]; then /snap/bin/lxd init --auto 2>/dev/null || true _yellow "当前存储池列表：" _yellow "Current storage pools:" /snap/bin/lxc storage list 2>/dev/null || true if /snap/bin/lxc storage list 2>/dev/null | grep -q "^| default"; then _yellow "检测到 default 存储池存在，尝试删除..." _yellow "Default storage pool exists, trying to delete..." /snap/bin/lxc storage volume list default 2>/dev/null | awk 'NR>3 {print $2}' | while read -r vol; do [ -n "$vol" ] && /snap/bin/lxc storage volume delete default "$vol" 2>/dev/null || true done if /snap/bin/lxc storage delete default 2>/dev/null; then _green "成功删除 default 存储池" _green "Successfully deleted default storage pool" else _red "删除 default 存储池失败，存储池可能正在使用中" _red "Failed to delete default storage pool, it may be in use" _yellow "检查正在使用该存储池的配置..." _yellow "Checking profiles using this storage pool..." /snap/bin/lxc profile list 2>/dev/null /snap/bin/lxc profile show default 2>/dev/null | grep -A5 "devices:" || true _yellow "尝试从 default profile 中移除 root 设备..." _yellow "Trying to remove root device from default profile..." /snap/bin/lxc profile device remove default root 2>/dev/null || true if /snap/bin/lxc storage delete default 2>/dev/null; then _green "成功删除 default 存储池" _green "Successfully deleted default storage pool" else _red "仍然无法删除存储池，退出" _red "Still cannot delete storage pool, exiting" return 1 fi fi fi if create_storage_pool_with_custom_path "$backend" "$storage_path" "$disk_nums"; then temp="Storage pool created successfully" status=0 if ! /snap/bin/lxc network list 2>/dev/null | grep -q lxdbr0; then _yellow "网络未初始化，正在初始化网络配置..." _yellow "Network not initialized, initializing network configuration..." /snap/bin/lxd init --auto >/dev/null 2>&1 || true fi else temp="Failed to create storage pool with custom path" status=1 fi else temp=$(/snap/bin/lxd init --storage-backend "$backend" --storage-create-loop "$disk_nums" --storage-pool default --auto 2>&1) status=$? fi echo "$temp" return $status } init_storage_backend() { local backend="$1" if is_storage_tried "$backend"; then _yellow "已经尝试过 $backend，跳过" _yellow "Already tried $backend, skipping" return 1 fi if [ "$backend" = "dir" ]; then _green "使用默认dir类型无限定存储池大小" _green "Using default dir type with unlimited storage pool size" echo "dir" >/usr/local/bin/lxd_storage_type if [ -n "$storage_path" ]; then mkdir -p "$storage_path" /snap/bin/lxd init --auto /snap/bin/lxc storage delete default 2>/dev/null || true /snap/bin/lxc storage create default dir source="$storage_path" else /snap/bin/lxd init --storage-backend "$backend" --auto fi record_tried_storage "$backend" return $? fi _green "尝试使用 $backend 类型，存储池大小为 $disk_nums" _green "Trying to use $backend type with storage pool size $disk_nums" local need_reboot=false if [ "$backend" = "btrfs" ] && ! is_storage_installed "btrfs" && ! command -v btrfs >/dev/null; then _yellow "正在安装 btrfs-progs..." _yellow "Installing btrfs-progs..." install_package btrfs-progs record_installed_storage "btrfs" modprobe btrfs || true _green "无法加载btrfs模块。请重启本机再次执行本脚本以加载btrfs内核。" _green "btrfs module could not be loaded. Please reboot the machine and execute this script again." echo "$backend" >/usr/local/bin/lxd_reboot need_reboot=true elif [ "$backend" = "lvm" ] && ! is_storage_installed "lvm" && ! command -v lvm >/dev/null; then _yellow "正在安装 lvm2..." _yellow "Installing lvm2..." install_package lvm2 record_installed_storage "lvm" modprobe dm-mod || true _green "无法加载LVM模块。请重启本机再次执行本脚本以加载LVM内核。" _green "LVM module could not be loaded. Please reboot the machine and execute this script again." echo "$backend" >/usr/local/bin/lxd_reboot need_reboot=true elif [ "$backend" = "zfs" ] && ! is_storage_installed "zfs" && ! command -v zfs >/dev/null; then _yellow "正在安装 zfsutils-linux..." _yellow "Installing zfsutils-linux..." install_package zfsutils-linux record_installed_storage "zfs" modprobe zfs || true _green "无法加载ZFS模块。请重启本机再次执行本脚本以加载ZFS内核。" _green "ZFS module could not be loaded. Please reboot the machine and execute this script again." echo "$backend" >/usr/local/bin/lxd_reboot need_reboot=true elif [ "$backend" = "ceph" ] && ! is_storage_installed "ceph" && ! command -v ceph >/dev/null; then _yellow "正在安装 ceph-common..." _yellow "Installing ceph-common..." install_package ceph-common record_installed_storage "ceph" fi if [ "$backend" = "btrfs" ] && is_storage_installed "btrfs" && ! grep -q btrfs /proc/filesystems; then modprobe btrfs || true elif [ "$backend" = "lvm" ] && is_storage_installed "lvm" && ! grep -q dm-mod /proc/modules; then modprobe dm-mod || true elif [ "$backend" = "zfs" ] && is_storage_installed "zfs" && ! grep -q zfs /proc/filesystems; then modprobe zfs || true fi if [ "$need_reboot" = true ]; then exit 1 fi local temp temp=$(execute_storage_init "$backend") local status=$? _green "Init storage:" echo "$temp" if echo "$temp" | grep -q "lxd.migrate" && [ $status -ne 0 ]; then /snap/bin/lxd.migrate temp=$(execute_storage_init "$backend") status=$? echo "$temp" fi record_tried_storage "$backend" if [ $status -eq 0 ]; then _green "使用 $backend 初始化成功" _green "Successfully initialized using $backend" echo "$backend" >/usr/local/bin/lxd_storage_type return 0 else _yellow "使用 $backend 初始化失败，尝试下一个选项" _yellow "Initialization with $backend failed, trying next option" return 1 fi } setup_storage() { if [ -f "/usr/local/bin/lxd_reboot" ]; then REBOOT_BACKEND=$(cat /usr/local/bin/lxd_reboot) _green "检测到系统重启，尝试继续使用 $REBOOT_BACKEND" _green "System reboot detected, trying to continue with $REBOOT_BACKEND" rm -f /usr/local/bin/lxd_reboot if [ "$REBOOT_BACKEND" = "btrfs" ]; then modprobe btrfs || true elif [ "$REBOOT_BACKEND" = "lvm" ]; then modprobe dm-mod || true elif [ "$REBOOT_BACKEND" = "zfs" ]; then modprobe zfs || true fi if init_storage_backend "$REBOOT_BACKEND"; then return 0 fi fi local BACKENDS=("btrfs" "lvm" "zfs" "ceph" "dir") for backend in "${BACKENDS[@]}"; do if init_storage_backend "$backend"; then return 0 fi done _yellow "所有存储类型尝试失败，使用 dir 作为备选" _yellow "All storage types failed, using dir as fallback" echo "dir" >/usr/local/bin/lxd_storage_type if [ -n "$storage_path" ]; then mkdir -p "$storage_path" /snap/bin/lxd init --auto /snap/bin/lxc storage delete default 2>/dev/null || true /snap/bin/lxc storage create default dir source="$storage_path" else /snap/bin/lxd init --storage-backend dir --auto fi } configure_lxd_network() { ensure_lxc_path ! lxc -h >/dev/null 2>&1 && _yellow '使用 lxc -h 检测到路径有问题，请手动查看LXD是否安装成功' && exit 1 lxc config unset images.auto_update_interval lxc config set images.auto_update_interval 0 if ! lxc remote list 2>/dev/null | grep -q '^| opsmaru[[:space:]]*|'; then lxc remote add opsmaru https://images.opsmaru.dev/spaces/9bfad87bd318b8f06012059a --public --protocol simplestreams fi lxc network set lxdbr0 ipv6.address auto } download_preset_files() { files=( "https://raw.githubusercontent.com/oneclickvirt/lxd/main/scripts/ssh_bash.sh" "https://raw.githubusercontent.com/oneclickvirt/lxd/main/scripts/ssh_sh.sh" "https://raw.githubusercontent.com/oneclickvirt/lxd/main/scripts/config.sh" "https://raw.githubusercontent.com/oneclickvirt/lxd/main/scripts/buildct.sh" ) for file in "${files[@]}"; do filename=$(basename "$file") rm -f -- "$filename" download_file "$file" "$filename" chmod 777 "$filename" dos2unix "$filename" done cp /root/ssh_sh.sh /usr/local/bin cp /root/ssh_bash.sh /usr/local/bin cp /root/config.sh /usr/local/bin } configure_system() { sysctl -w net.ipv4.ip_forward=1 >/dev/null SYSCTL_CONF="/etc/sysctl.conf" SYSCTL_D_CONF="/etc/sysctl.d/99-custom.conf" if [ -f "$SYSCTL_CONF" ]; then if grep -q "^net.ipv4.ip_forward=1" "$SYSCTL_CONF"; then sed -i 's/^#\?net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/' "$SYSCTL_CONF" else echo "net.ipv4.ip_forward=1" >>"$SYSCTL_CONF" fi fi mkdir -p /etc/sysctl.d if ! grep -q "^net.ipv4.ip_forward=1" "$SYSCTL_D_CONF" 2>/dev/null; then echo "net.ipv4.ip_forward=1" >>"$SYSCTL_D_CONF" fi if sysctl --system >/dev/null 2>&1; then sysctl --system >/dev/null else sysctl -p "$SYSCTL_CONF" >/dev/null 2>&1 sysctl -p "$SYSCTL_D_CONF" >/dev/null 2>&1 fi lxc network set lxdbr0 raw.dnsmasq dhcp-option=6,8.8.8.8,8.8.4.4 lxc network set lxdbr0 dns.mode managed lxc network set lxdbr0 ipv4.dhcp true lxc network set lxdbr0 ipv6.dhcp true # Ensure root has subuid/subgid entries for unprivileged containers grep -q "^root:" /etc/subuid 2>/dev/null || echo 'root:100000:65536' >>/etc/subuid grep -q "^root:" /etc/subgid 2>/dev/null || echo 'root:100000:65536' >>/etc/subgid } remove_system_limits() { if [ -f "/etc/security/limits.conf" ]; then if ! grep -Fq "* hard nproc unlimited" /etc/security/limits.conf; then echo '* hard nproc unlimited' | sudo tee -a /etc/security/limits.conf fi if ! grep -Fq "* soft nproc unlimited" /etc/security/limits.conf; then echo '* soft nproc unlimited' | sudo tee -a /etc/security/limits.conf fi fi if [ -f "/etc/systemd/logind.conf" ]; then if ! grep -q "UserTasksMax=infinity" /etc/systemd/logind.conf; then echo 'UserTasksMax=infinity' | sudo tee -a /etc/systemd/logind.conf fi fi ufw disable } install_dns_check() { if [ ! -f /usr/local/bin/check-dns.sh ]; then download_file "https://raw.githubusercontent.com/oneclickvirt/lxd/main/scripts/check-dns.sh" /usr/local/bin/check-dns.sh chmod +x /usr/local/bin/check-dns.sh else echo "Script already exists. Skipping installation." fi if [ ! -f /etc/systemd/system/check-dns.service ]; then download_file "https://raw.githubusercontent.com/oneclickvirt/lxd/main/scripts/check-dns.service" /etc/systemd/system/check-dns.service chmod +x /etc/systemd/system/check-dns.service service_manager daemon-reload service_manager enable check-dns.service service_manager start check-dns.service else echo "Service already exists. Skipping installation." fi } setup_network_preferences() { if [ -f /etc/gai.conf ]; then sed -i 's/.*precedence ::ffff:0:0\/96.*/precedence ::ffff:0:0\/96 100/g' /etc/gai.conf if command -v systemctl >/dev/null 2>&1 && systemctl list-unit-files | grep -q "networking.service"; then service_manager restart networking elif command -v rc-service >/dev/null 2>&1 && rc-service --list | grep -q "networking"; then service_manager restart networking fi fi # 优先使用nftables，不可用时降级为iptables local fw_backend="" if command -v nft >/dev/null 2>&1; then fw_backend="nft" else install_package nftables if command -v nft >/dev/null 2>&1; then fw_backend="nft" else fw_backend="ipt" fi fi if [ "$fw_backend" = "nft" ]; then nft list table inet lxd_nat >/dev/null 2>&1 || nft add table inet lxd_nat nft flush chain inet lxd_nat postrouting_masq 2>/dev/null nft list chain inet lxd_nat postrouting_masq >/dev/null 2>&1 || \ nft 'add chain inet lxd_nat postrouting_masq { type nat hook postrouting priority 100; policy accept; }' nft add rule inet lxd_nat postrouting_masq masquerade nft list ruleset > /etc/nftables.conf 2>/dev/null if command -v systemctl >/dev/null 2>&1; then systemctl enable nftables >/dev/null 2>&1 fi else install_package iptables if [ "$SYSTEM" = "Debian" ] || [ "$SYSTEM" = "Ubuntu" ]; then DEBIAN_FRONTEND=noninteractive install_package iptables-persistent elif [ "$SYSTEM" = "Alpine" ]; then if command -v rc-update >/dev/null 2>&1; then rc-update add iptables default 2>/dev/null || true fi elif [ "$SYSTEM" = "CentOS" ] || [ "$SYSTEM" = "Fedora" ]; then if command -v firewall-cmd >/dev/null 2>&1; then _green "firewall-cmd is available, using firewalld for persistence" else install_package iptables-services 2>/dev/null || true fi fi iptables -t nat -C POSTROUTING -j MASQUERADE 2>/dev/null || iptables -t nat -A POSTROUTING -j MASQUERADE mkdir -p /etc/iptables iptables-save > /etc/iptables/rules.v4 2>/dev/null if command -v netfilter-persistent >/dev/null 2>&1; then netfilter-persistent save >/dev/null 2>&1 fi fi } show_completion_info() { _green "脚本当天运行次数:${TODAY}，累计运行次数:${TOTAL}" _green "LXD Version: $(lxc --version)" _green "If you need to turn on more than 100 cts, it is recommended to wait for a few minutes before performing a reboot to reboot the machine to make the settings take effect" _green "The reboot will ensure that the DNS detection mechanism takes effect, otherwise the batch opening process may cause the host's DNS to be overwritten by the merchant's preset" _green "如果你需要开启超过100个LXC容器，建议等待几分钟后执行 reboot 重启本机以使得设置生效" _green "重启后可以保证DNS的检测机制生效，否则批量开启过程中可能导致宿主机的DNS被商家预设覆盖，所以最好重启系统一次" } main() { set_locale install_base_packages check_cdn_file rebuild_cloud_init if command -v apt-get >/dev/null 2>&1; then apt-get remove cloud-init -y fi statistics_of_run_times install_lxd configure_resources load_storage_state setup_storage configure_lxd_network download_preset_files configure_system remove_system_limits install_dns_check setup_network_preferences show_completion_info } main