mirror of
https://github.com/MengMengCode/CLICD.git
synced 2026-08-06 05:52:19 +08:00
MengMengCode
138 lines
4.4 KiB
Bash
138 lines
4.4 KiB
Bash
#!/bin/bash
|
|
set -euo pipefail
|
|
|
|
echo "====================================="
|
|
echo " CLICD Installation"
|
|
echo "====================================="
|
|
|
|
if [ "$EUID" -ne 0 ]; then
|
|
echo "Please run as root: sudo ./install.sh"
|
|
echo "Or: curl -fsSL https://raw.githubusercontent.com/MengMengCode/CLICD/main/install.sh | sudo bash"
|
|
exit 1
|
|
fi
|
|
|
|
if [ ! -f "./clicd" ]; then
|
|
REPO="${CLICD_REPO:-MengMengCode/CLICD}"
|
|
VERSION="${CLICD_VERSION:-latest}"
|
|
ASSET="clicd-linux-amd64.tar.gz"
|
|
|
|
if [ "$VERSION" = "latest" ]; then
|
|
DOWNLOAD_URL="https://github.com/${REPO}/releases/latest/download/${ASSET}"
|
|
else
|
|
DOWNLOAD_URL="https://github.com/${REPO}/releases/download/${VERSION}/${ASSET}"
|
|
fi
|
|
|
|
echo "clicd binary not found in current directory."
|
|
echo "Downloading release package: ${DOWNLOAD_URL}"
|
|
|
|
TMP_DIR="$(mktemp -d)"
|
|
trap 'rm -rf "$TMP_DIR"' EXIT
|
|
|
|
if command -v curl >/dev/null 2>&1; then
|
|
curl -fL "$DOWNLOAD_URL" -o "$TMP_DIR/$ASSET"
|
|
elif command -v wget >/dev/null 2>&1; then
|
|
wget -O "$TMP_DIR/$ASSET" "$DOWNLOAD_URL"
|
|
else
|
|
echo "ERROR: curl or wget is required to download the release package."
|
|
exit 1
|
|
fi
|
|
|
|
tar -xzf "$TMP_DIR/$ASSET" -C "$TMP_DIR"
|
|
cd "$TMP_DIR/clicd-linux-amd64"
|
|
fi
|
|
|
|
if ! command -v lxc-create >/dev/null 2>&1; then
|
|
echo "LXC is not installed. Installing dependencies..."
|
|
if command -v apt-get >/dev/null 2>&1; then
|
|
apt-get update
|
|
apt-get install -y lxc lxc-templates bridge-utils xz-utils quota
|
|
elif command -v yum >/dev/null 2>&1; then
|
|
yum install -y epel-release
|
|
yum install -y lxc lxc-templates xz quota
|
|
elif command -v dnf >/dev/null 2>&1; then
|
|
dnf install -y lxc lxc-templates xz quota
|
|
else
|
|
echo "Could not detect package manager. Please install LXC manually."
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
# Setup subordinate UID/GID for unprivileged containers
|
|
echo "Setting up subordinate UID/GID ranges..."
|
|
grep -q '^root:' /etc/subuid 2>/dev/null || echo 'root:100000:65536' >> /etc/subuid
|
|
grep -q '^root:' /etc/subgid 2>/dev/null || echo 'root:100000:65536' >> /etc/subgid
|
|
|
|
# Enable ext4 project quota if supported
|
|
if tune2fs -l /dev/sda1 2>/dev/null | grep -q 'Filesystem features'; then
|
|
echo "Enabling ext4 project quota..."
|
|
mkdir -p /etc/initramfs-tools/hooks /etc/initramfs-tools/scripts/local-premount
|
|
|
|
# Hook to copy tune2fs into initramfs
|
|
cat > /etc/initramfs-tools/hooks/tune2fs-hook << 'HOOK'
|
|
#!/bin/sh
|
|
PREREQ=""
|
|
prereqs() { echo "$PREREQ"; }
|
|
case "$1" in prereqs) prereqs; exit 0;; esac
|
|
. /usr/share/initramfs-tools/hook-functions
|
|
copy_exec /sbin/tune2fs /sbin/tune2fs
|
|
copy_exec /usr/sbin/setquota /usr/sbin/setquota
|
|
HOOK
|
|
chmod +x /etc/initramfs-tools/hooks/tune2fs-hook
|
|
|
|
# Script to run tune2fs before mount
|
|
cat > /etc/initramfs-tools/scripts/local-premount/prjquota << 'SCRIPT'
|
|
#!/bin/sh
|
|
PREREQ=""
|
|
prereqs() { echo "$PREREQ"; }
|
|
case "$1" in prereqs) prereqs; exit 0;; esac
|
|
/sbin/tune2fs -O project -Q prjquota /dev/sda1 2>/dev/null
|
|
SCRIPT
|
|
chmod +x /etc/initramfs-tools/scripts/local-premount/prjquota
|
|
|
|
update-initramfs -u -k all 2>/dev/null || true
|
|
|
|
# Add prjquota to fstab if not already there
|
|
grep -q 'prjquota' /etc/fstab 2>/dev/null || sed -i 's|ext4 rw,|ext4 rw,prjquota,|' /etc/fstab
|
|
fi
|
|
|
|
cp ./clicd /usr/local/bin/clicd
|
|
chmod +x /usr/local/bin/clicd
|
|
echo "Installed binary: /usr/local/bin/clicd"
|
|
|
|
cat > /etc/systemd/system/clicd.service << 'EOF'
|
|
[Unit]
|
|
Description=CLICD - LXC Container Manager
|
|
After=network.target lxc.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
ExecStart=/usr/local/bin/clicd server
|
|
Restart=always
|
|
RestartSec=5
|
|
Environment=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
|
|
systemctl daemon-reload
|
|
systemctl enable clicd
|
|
systemctl restart clicd
|
|
|
|
sleep 2
|
|
|
|
echo ""
|
|
echo "====================================="
|
|
echo " Installation Complete"
|
|
echo "====================================="
|
|
echo " Web: http://YOUR_SERVER_IP:8999"
|
|
echo " Service: systemctl {start|stop|restart|status} clicd"
|
|
echo " Logs: journalctl -u clicd -f"
|
|
echo "====================================="
|
|
echo ""
|
|
echo "Initial credentials, if this was the first run:"
|
|
journalctl -u clicd --no-pager -n 80 | grep -E "Username:|Password:" || true
|
|
echo ""
|
|
echo "If no password is shown, this server already had /root/.clicd/config.json."
|
|
echo "The existing admin password cannot be recovered from the bcrypt hash."
|