mirror of
https://github.com/xkatld/lxdapi-web-server.git
synced 2026-05-31 16:31:23 +08:00
511 lines
17 KiB
Bash
511 lines
17 KiB
Bash
#!/bin/bash
|
||
|
||
cd /root >/dev/null 2>&1
|
||
|
||
RED='\033[0;31m'
|
||
GREEN='\033[0;32m'
|
||
YELLOW='\033[1;33m'
|
||
BLUE='\033[0;34m'
|
||
NC='\033[0m'
|
||
|
||
REGEX=("debian|astra" "ubuntu")
|
||
RELEASE=("Debian" "Ubuntu")
|
||
CMD=("$(grep -i pretty_name /etc/os-release 2>/dev/null | cut -d \" -f2)" "$(lsb_release -sd 2>/dev/null)")
|
||
SYS="${CMD[0]}"
|
||
[[ -n $SYS ]] || exit 1
|
||
|
||
for ((int = 0; int < ${#REGEX[@]}; int++)); do
|
||
if [[ $(echo "$SYS" | tr '[:upper:]' '[:lower:]') =~ ${REGEX[int]} ]]; then
|
||
SYSTEM="${RELEASE[int]}"
|
||
[[ -n $SYSTEM ]] && break
|
||
fi
|
||
done
|
||
|
||
if [[ "$SYSTEM" != "Debian" && "$SYSTEM" != "Ubuntu" ]]; then
|
||
echo -e "${RED}[ERR]${NC} 此脚本仅支持 Debian 和 Ubuntu 系统"
|
||
exit 1
|
||
fi
|
||
|
||
log() { echo -e "$1"; }
|
||
ok() { log "${GREEN}[OK]${NC} $1"; }
|
||
info() { log "${BLUE}[INFO]${NC} $1"; }
|
||
warn() { log "${YELLOW}[WARN]${NC} $1"; }
|
||
err() { log "${RED}[ERR]${NC} $1"; exit 1; }
|
||
|
||
reading() { read -rp "$(echo -e "${GREEN}$1${NC}")" "$2"; }
|
||
|
||
install_package() {
|
||
package_name=$1
|
||
if dpkg -l 2>/dev/null | grep -q "^ii.*$package_name"; then
|
||
ok "$package_name 已安装"
|
||
else
|
||
apt-get install -y $package_name >/dev/null 2>&1
|
||
if [ $? -ne 0 ]; then
|
||
apt-get install -y $package_name --fix-missing >/dev/null 2>&1
|
||
fi
|
||
if dpkg -l 2>/dev/null | grep -q "^ii.*$package_name"; then
|
||
ok "$package_name 已安装"
|
||
else
|
||
warn "$package_name 安装失败"
|
||
fi
|
||
fi
|
||
}
|
||
|
||
install_base_packages() {
|
||
info "更新软件包列表..."
|
||
apt-get update >/dev/null 2>&1
|
||
apt-get autoremove -y >/dev/null 2>&1
|
||
|
||
info "安装基础软件包..."
|
||
DEBIAN_FRONTEND=noninteractive apt-get install -y unzip e2fsprogs bc nftables fdisk parted iptables-persistent nginx >/dev/null 2>&1
|
||
ok "软件包安装完成"
|
||
|
||
systemctl enable nftables >/dev/null 2>&1
|
||
systemctl start nftables >/dev/null 2>&1
|
||
ok "nftables 已启动"
|
||
|
||
if command -v lxc &>/dev/null && lxc network show lxdbr0 &>/dev/null; then
|
||
lxc network set lxdbr0 ipv4.nat true 2>/dev/null
|
||
lxc network set lxdbr0 ipv6.nat true 2>/dev/null
|
||
ok "LXD NAT 规则已重建"
|
||
fi
|
||
|
||
systemctl enable nginx >/dev/null 2>&1
|
||
systemctl start nginx >/dev/null 2>&1
|
||
ok "nginx 已启动"
|
||
}
|
||
|
||
deploy_lxdapi() {
|
||
info "检测系统架构..."
|
||
sys_arch=$(uname -m)
|
||
case $sys_arch in
|
||
x86_64)
|
||
arch="amd64"
|
||
ok "检测到架构: x86_64"
|
||
;;
|
||
aarch64|arm64)
|
||
arch="arm64"
|
||
ok "检测到架构: $sys_arch"
|
||
;;
|
||
*)
|
||
err "不支持的架构: $sys_arch"
|
||
;;
|
||
esac
|
||
|
||
while true; do
|
||
reading "请选择下载源 github/gitee [github]：" download_source
|
||
download_source=${download_source:-github}
|
||
if [[ "$download_source" =~ ^(github|gitee)$ ]]; then
|
||
break
|
||
else
|
||
warn "请输入 github 或 gitee"
|
||
fi
|
||
done
|
||
|
||
if [[ "$download_source" == "github" ]]; then
|
||
latest_tag=$(curl -s https://api.github.com/repos/xkatld/lxdapi-web-server/releases/latest | grep '"tag_name"' | sed -n 's/.*"tag_name": *"\([^"]*\)".*/\1/p')
|
||
base_url="https://github.com/xkatld/lxdapi-web-server/releases/download"
|
||
else
|
||
latest_tag=$(curl -s https://gitee.com/api/v5/repos/xkatld/lxdapi-web-server/releases/latest | grep '"tag_name"' | sed -n 's/.*"tag_name": *"\([^"]*\)".*/\1/p')
|
||
base_url="https://gitee.com/xkatld/lxdapi-web-server/releases/download"
|
||
fi
|
||
|
||
if [ -z "$latest_tag" ]; then
|
||
err "无法获取最新版本信息"
|
||
fi
|
||
|
||
info "最新版本: $latest_tag"
|
||
reading "请输入安装版本 [$latest_tag]：" install_version
|
||
install_version=${install_version:-$latest_tag}
|
||
ok "安装版本: $install_version"
|
||
|
||
download_url="${base_url}/${install_version}/lxdapi-linux-${arch}.tar.gz"
|
||
|
||
info "下载 lxdapi..."
|
||
info "下载地址: $download_url"
|
||
|
||
temp_file=$(mktemp)
|
||
if wget -q --show-progress -O "$temp_file" "$download_url" 2>&1; then
|
||
ok "下载完成"
|
||
else
|
||
rm -f "$temp_file"
|
||
err "下载失败"
|
||
fi
|
||
|
||
info "解压到 /opt/lxdapi..."
|
||
mkdir -p /opt/lxdapi
|
||
tar -xzf "$temp_file" -C /opt/lxdapi --strip-components=1
|
||
rm -f "$temp_file"
|
||
}
|
||
|
||
configure_lxdapi() {
|
||
info "配置 lxdapi..."
|
||
|
||
config_file="/opt/lxdapi/configs/config.yaml"
|
||
|
||
if [ ! -f "$config_file" ]; then
|
||
err "配置文件不存在: $config_file"
|
||
fi
|
||
|
||
reading "请输入服务端口 [8443]：" server_port
|
||
server_port=${server_port:-8443}
|
||
|
||
reading "请输入API密钥 [随机生成]：" api_hash
|
||
if [ -z "$api_hash" ]; then
|
||
api_hash=$(openssl rand -hex 16)
|
||
ok "API密钥已生成: $api_hash"
|
||
fi
|
||
|
||
reading "请输入管理员用户名 [admin]：" admin_user
|
||
admin_user=${admin_user:-admin}
|
||
|
||
reading "请输入管理员密码 [随机生成]：" admin_pass
|
||
if [ -z "$admin_pass" ]; then
|
||
admin_pass=$(openssl rand -hex 8)
|
||
ok "管理员密码已生成: $admin_pass"
|
||
fi
|
||
|
||
session_secret=$(openssl rand -hex 16)
|
||
|
||
reading "请输入流量采集间隔秒数 [20]：" traffic_interval
|
||
traffic_interval=${traffic_interval:-20}
|
||
|
||
reading "请输入流量批量更新数量 [10]：" traffic_batch_size
|
||
traffic_batch_size=${traffic_batch_size:-10}
|
||
|
||
reading "请输入任务自动清理天数 [7]：" auto_cleanup_days
|
||
auto_cleanup_days=${auto_cleanup_days:-7}
|
||
|
||
while true; do
|
||
reading "请选择任务队列后端 memory/redis [memory]：" task_backend
|
||
task_backend=${task_backend:-memory}
|
||
if [[ "$task_backend" =~ ^(memory|redis)$ ]]; then
|
||
break
|
||
else
|
||
warn "请输入 memory 或 redis"
|
||
fi
|
||
done
|
||
|
||
if [[ "$task_backend" == "redis" ]]; then
|
||
while true; do
|
||
reading "使用本地安装还是远程配置？local/remote [local]：" redis_location
|
||
redis_location=${redis_location:-local}
|
||
if [[ "$redis_location" =~ ^(local|remote)$ ]]; then
|
||
break
|
||
else
|
||
warn "请输入 local 或 remote"
|
||
fi
|
||
done
|
||
|
||
if [[ "$redis_location" == "local" ]]; then
|
||
info "安装 Redis..."
|
||
apt-get install -y redis-server >/dev/null 2>&1
|
||
systemctl start redis-server
|
||
systemctl enable redis-server
|
||
|
||
redis_host="localhost"
|
||
redis_port="6379"
|
||
redis_password=""
|
||
redis_db="0"
|
||
ok "Redis 已安装"
|
||
else
|
||
reading "请输入 Redis 主机地址：" redis_host
|
||
reading "请输入 Redis 端口 [6379]：" redis_port
|
||
redis_port=${redis_port:-6379}
|
||
reading "请输入 Redis 密码 [留空表示无密码]：" redis_password
|
||
reading "请输入 Redis 数据库编号 [0]：" redis_db
|
||
redis_db=${redis_db:-0}
|
||
fi
|
||
else
|
||
redis_host="localhost"
|
||
redis_port="6379"
|
||
redis_password=""
|
||
redis_db="0"
|
||
fi
|
||
|
||
while true; do
|
||
reading "请选择数据库类型 sqlite/mysql/postgres [sqlite]：" db_type
|
||
db_type=${db_type:-sqlite}
|
||
if [[ "$db_type" =~ ^(sqlite|mysql|postgres)$ ]]; then
|
||
break
|
||
else
|
||
warn "请输入 sqlite、mysql 或 postgres"
|
||
fi
|
||
done
|
||
|
||
if [[ "$db_type" == "mysql" ]]; then
|
||
while true; do
|
||
reading "使用本地安装还是远程配置？local/remote [local]：" mysql_location
|
||
mysql_location=${mysql_location:-local}
|
||
if [[ "$mysql_location" =~ ^(local|remote)$ ]]; then
|
||
break
|
||
else
|
||
warn "请输入 local 或 remote"
|
||
fi
|
||
done
|
||
|
||
if [[ "$mysql_location" == "local" ]]; then
|
||
info "安装 MariaDB..."
|
||
apt-get install -y mariadb-server >/dev/null 2>&1
|
||
systemctl start mariadb
|
||
systemctl enable mariadb
|
||
|
||
mysql_host="localhost"
|
||
mysql_port="3306"
|
||
mysql_user="lxdapi"
|
||
mysql_password=$(openssl rand -hex 8)
|
||
mysql_database="lxdapi"
|
||
|
||
info "创建数据库和用户..."
|
||
mysql -u root << EOF
|
||
CREATE DATABASE IF NOT EXISTS ${mysql_database};
|
||
CREATE USER IF NOT EXISTS '${mysql_user}'@'localhost' IDENTIFIED BY '${mysql_password}';
|
||
GRANT ALL PRIVILEGES ON ${mysql_database}.* TO '${mysql_user}'@'localhost';
|
||
FLUSH PRIVILEGES;
|
||
EOF
|
||
ok "MariaDB 数据库已创建"
|
||
ok "用户: $mysql_user"
|
||
ok "密码: $mysql_password"
|
||
else
|
||
reading "请输入 MySQL 主机地址：" mysql_host
|
||
reading "请输入 MySQL 端口 [3306]：" mysql_port
|
||
mysql_port=${mysql_port:-3306}
|
||
reading "请输入 MySQL 用户名：" mysql_user
|
||
reading "请输入 MySQL 密码：" mysql_password
|
||
reading "请输入 MySQL 数据库名：" mysql_database
|
||
fi
|
||
|
||
elif [[ "$db_type" == "postgres" ]]; then
|
||
while true; do
|
||
reading "使用本地安装还是远程配置？local/remote [local]：" postgres_location
|
||
postgres_location=${postgres_location:-local}
|
||
if [[ "$postgres_location" =~ ^(local|remote)$ ]]; then
|
||
break
|
||
else
|
||
warn "请输入 local 或 remote"
|
||
fi
|
||
done
|
||
|
||
if [[ "$postgres_location" == "local" ]]; then
|
||
info "安装 PostgreSQL..."
|
||
apt-get install -y postgresql >/dev/null 2>&1
|
||
systemctl start postgresql
|
||
systemctl enable postgresql
|
||
|
||
postgres_host="localhost"
|
||
postgres_port="5432"
|
||
postgres_user="lxdapi"
|
||
postgres_password=$(openssl rand -hex 8)
|
||
postgres_database="lxdapi"
|
||
postgres_sslmode="disable"
|
||
|
||
info "创建数据库和用户..."
|
||
sudo -u postgres psql << EOF
|
||
CREATE DATABASE ${postgres_database};
|
||
CREATE USER ${postgres_user} WITH PASSWORD '${postgres_password}';
|
||
GRANT ALL PRIVILEGES ON DATABASE ${postgres_database} TO ${postgres_user};
|
||
EOF
|
||
ok "PostgreSQL 数据库已创建"
|
||
ok "用户: $postgres_user"
|
||
ok "密码: $postgres_password"
|
||
else
|
||
reading "请输入 PostgreSQL 主机地址：" postgres_host
|
||
reading "请输入 PostgreSQL 端口 [5432]：" postgres_port
|
||
postgres_port=${postgres_port:-5432}
|
||
reading "请输入 PostgreSQL 用户名：" postgres_user
|
||
reading "请输入 PostgreSQL 密码：" postgres_password
|
||
reading "请输入 PostgreSQL 数据库名：" postgres_database
|
||
reading "请输入 PostgreSQL SSL模式 [disable]：" postgres_sslmode
|
||
postgres_sslmode=${postgres_sslmode:-disable}
|
||
fi
|
||
fi
|
||
|
||
info "写入配置文件..."
|
||
sed -i "s|__SERVER_PORT__|$server_port|g" "$config_file"
|
||
sed -i "s|__API_HASH__|$api_hash|g" "$config_file"
|
||
sed -i "s|__ADMIN_USER__|$admin_user|g" "$config_file"
|
||
sed -i "s|__ADMIN_PASS__|$admin_pass|g" "$config_file"
|
||
sed -i "s|__SESSION_SECRET__|$session_secret|g" "$config_file"
|
||
sed -i "s|__TRAFFIC_INTERVAL__|$traffic_interval|g" "$config_file"
|
||
sed -i "s|__TRAFFIC_BATCH_SIZE__|$traffic_batch_size|g" "$config_file"
|
||
sed -i "s|__AUTO_CLEANUP_DAYS__|$auto_cleanup_days|g" "$config_file"
|
||
sed -i "s|__TASK_BACKEND__|$task_backend|g" "$config_file"
|
||
sed -i "s|__REDIS_HOST__|$redis_host|g" "$config_file"
|
||
sed -i "s|__REDIS_PORT__|$redis_port|g" "$config_file"
|
||
sed -i "s|__REDIS_PASSWORD__|$redis_password|g" "$config_file"
|
||
sed -i "s|__REDIS_DB__|$redis_db|g" "$config_file"
|
||
sed -i "s|__DB_TYPE__|$db_type|g" "$config_file"
|
||
|
||
if [[ "$db_type" == "mysql" ]]; then
|
||
sed -i "s|__MYSQL_HOST__|$mysql_host|g" "$config_file"
|
||
sed -i "s|__MYSQL_PORT__|$mysql_port|g" "$config_file"
|
||
sed -i "s|__MYSQL_USER__|$mysql_user|g" "$config_file"
|
||
sed -i "s|__MYSQL_PASSWORD__|$mysql_password|g" "$config_file"
|
||
sed -i "s|__MYSQL_DATABASE__|$mysql_database|g" "$config_file"
|
||
else
|
||
sed -i "s|__MYSQL_HOST__|localhost|g" "$config_file"
|
||
sed -i "s|__MYSQL_PORT__|3306|g" "$config_file"
|
||
sed -i "s|__MYSQL_USER__|root|g" "$config_file"
|
||
sed -i "s|__MYSQL_PASSWORD__||g" "$config_file"
|
||
sed -i "s|__MYSQL_DATABASE__|lxdapi|g" "$config_file"
|
||
fi
|
||
|
||
if [[ "$db_type" == "postgres" ]]; then
|
||
sed -i "s|__POSTGRES_HOST__|$postgres_host|g" "$config_file"
|
||
sed -i "s|__POSTGRES_PORT__|$postgres_port|g" "$config_file"
|
||
sed -i "s|__POSTGRES_USER__|$postgres_user|g" "$config_file"
|
||
sed -i "s|__POSTGRES_PASSWORD__|$postgres_password|g" "$config_file"
|
||
sed -i "s|__POSTGRES_DATABASE__|$postgres_database|g" "$config_file"
|
||
sed -i "s|__POSTGRES_SSLMODE__|$postgres_sslmode|g" "$config_file"
|
||
else
|
||
sed -i "s|__POSTGRES_HOST__|localhost|g" "$config_file"
|
||
sed -i "s|__POSTGRES_PORT__|5432|g" "$config_file"
|
||
sed -i "s|__POSTGRES_USER__|postgres|g" "$config_file"
|
||
sed -i "s|__POSTGRES_PASSWORD__||g" "$config_file"
|
||
sed -i "s|__POSTGRES_DATABASE__|lxdapi|g" "$config_file"
|
||
sed -i "s|__POSTGRES_SSLMODE__|disable|g" "$config_file"
|
||
fi
|
||
|
||
ok "配置文件已更新"
|
||
}
|
||
|
||
setup_lxdapi_service() {
|
||
info "配置 lxdapi 系统服务..."
|
||
|
||
config_file="/opt/lxdapi/configs/config.yaml"
|
||
if [ ! -f "$config_file" ]; then
|
||
err "配置文件不存在: $config_file"
|
||
fi
|
||
|
||
if grep -q "__SERVER_PORT__" "$config_file"; then
|
||
err "配置文件未完成配置"
|
||
fi
|
||
|
||
sys_arch=$(uname -m)
|
||
case $sys_arch in
|
||
x86_64)
|
||
exec_bin="/opt/lxdapi/lxdapi-amd64"
|
||
;;
|
||
aarch64|arm64)
|
||
exec_bin="/opt/lxdapi/lxdapi-arm64"
|
||
;;
|
||
*)
|
||
err "不支持的架构: $sys_arch"
|
||
;;
|
||
esac
|
||
|
||
service_file="/etc/systemd/system/lxdapi.service"
|
||
|
||
cat > "$service_file" << EOF
|
||
[Unit]
|
||
Description=LXD API Server
|
||
After=network.target lxd.service
|
||
Wants=lxd.service
|
||
|
||
[Service]
|
||
Type=simple
|
||
User=root
|
||
WorkingDirectory=/opt/lxdapi
|
||
Environment="PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
|
||
ExecStart=$exec_bin
|
||
Restart=always
|
||
RestartSec=5
|
||
StandardOutput=journal
|
||
StandardError=journal
|
||
|
||
[Install]
|
||
WantedBy=multi-user.target
|
||
EOF
|
||
|
||
ok "服务文件已创建: $service_file"
|
||
|
||
systemctl daemon-reload
|
||
systemctl enable lxdapi
|
||
systemctl start lxdapi
|
||
|
||
info "等待服务启动..."
|
||
for i in {1..10}; do
|
||
printf "\r[%-10s] %d/10s" "$(printf '#%.0s' $(seq 1 $i))" "$i"
|
||
sleep 1
|
||
done
|
||
echo
|
||
|
||
if systemctl is-active --quiet lxdapi; then
|
||
ok "lxdapi 服务已启动"
|
||
else
|
||
warn "lxdapi 服务启动失败"
|
||
journalctl -u lxdapi -n 20 --no-pager
|
||
fi
|
||
}
|
||
|
||
main() {
|
||
echo
|
||
echo "========================================"
|
||
echo " LXDAPI 安装脚本"
|
||
echo " by Github-xkatld"
|
||
echo "========================================"
|
||
echo
|
||
|
||
echo "======== 步骤 1/5: 基础软件包安装 ========"
|
||
reading "是否安装基础软件包？(y/n) [y]：" step1_confirm
|
||
step1_confirm=${step1_confirm:-y}
|
||
if [[ "$step1_confirm" =~ ^[yY]$ ]]; then
|
||
install_base_packages
|
||
ok "基础软件包安装完成"
|
||
else
|
||
info "已跳过基础软件包安装"
|
||
fi
|
||
echo
|
||
|
||
echo "======== 步骤 2/5: 下载 ========"
|
||
reading "是否下载 lxdapi？(y/n) [y]：" step2_confirm
|
||
step2_confirm=${step2_confirm:-y}
|
||
if [[ "$step2_confirm" =~ ^[yY]$ ]]; then
|
||
deploy_lxdapi
|
||
ok "下载完成"
|
||
else
|
||
info "已跳过下载"
|
||
fi
|
||
echo
|
||
|
||
echo "======== 步骤 3/5: 配置 ========"
|
||
reading "是否配置 lxdapi？(y/n) [y]：" step3_confirm
|
||
step3_confirm=${step3_confirm:-y}
|
||
if [[ "$step3_confirm" =~ ^[yY]$ ]]; then
|
||
configure_lxdapi
|
||
ok "配置完成"
|
||
else
|
||
info "已跳过配置"
|
||
fi
|
||
echo
|
||
|
||
echo "======== 步骤 4/5: 启动服务 ========"
|
||
reading "是否启动 lxdapi 服务？(y/n) [y]：" step4_confirm
|
||
step4_confirm=${step4_confirm:-y}
|
||
if [[ "$step4_confirm" =~ ^[yY]$ ]]; then
|
||
setup_lxdapi_service
|
||
ok "服务已启动"
|
||
else
|
||
info "已跳过服务启动"
|
||
fi
|
||
echo
|
||
|
||
echo "======== 步骤 5/5: 完成 ========"
|
||
echo
|
||
echo "========================================"
|
||
echo " LXDAPI 安装完成"
|
||
echo "========================================"
|
||
echo
|
||
info "服务端口: $server_port"
|
||
info "API密钥: $api_hash"
|
||
info "管理员用户: $admin_user"
|
||
info "管理员密码: $admin_pass"
|
||
info "数据库类型: $db_type"
|
||
info "任务队列: $task_backend"
|
||
info "流量采集间隔: ${traffic_interval}s"
|
||
echo
|
||
systemctl status lxdapi --no-pager | head -5
|
||
}
|
||
|
||
main
|