mirror of
https://github.com/flynx/proxmox-utils.git
synced 2025-10-28 18:50:08 +00:00
134 lines
3.0 KiB
Bash
Executable File
134 lines
3.0 KiB
Bash
Executable File
#!/usr/bin/bash
|
|
#----------------------------------------------------------------------
|
|
|
|
cd $(dirname $0)
|
|
PATH=$PATH:$(dirname "$(pwd)")
|
|
|
|
|
|
#----------------------------------------------------------------------
|
|
|
|
source ../.pct-helpers
|
|
|
|
|
|
#----------------------------------------------------------------------
|
|
|
|
readConfig
|
|
|
|
|
|
#----------------------------------------------------------------------
|
|
|
|
DFL_ID=${GATE_ID:=${DFL_ID:-102}}
|
|
DFL_CTHOSTNAME=${GATE_HOSTNAME:-${DFL_CTHOSTNAME:-gate}}
|
|
|
|
CORES=1
|
|
RAM=128
|
|
SWAP=$RAM
|
|
DRIVE=0.5
|
|
|
|
#DFL_WAN_IP=${DFL_WAN_IP}
|
|
#DFL_WAN_GATE=${DFL_WAN_GATE}
|
|
|
|
# XXX revise...
|
|
DFL_ADMIN_IP=${GATE_ADMIN_IP:=${DFL_ADMIN_IP:=10.0.0.2/24}}
|
|
ADMIN_GATE=SKIP
|
|
# XXX revise...
|
|
DFL_LAN_IP=${GATE_LAN_IP:=${DFL_LAN_IP:=10.1.1.2/24}}
|
|
LAN_GATE=SKIP
|
|
|
|
REBOOT=${REBOOT:=1}
|
|
|
|
|
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
|
# Bootstrap cleanup...
|
|
|
|
# NOTE: this is intentionally handled before the bootstrap...
|
|
if ! [ -z $BOOTSTRAP_CLEAN ] ; then
|
|
#ID=${ID:-${DFL_ID}}
|
|
|
|
xread "ID: " ID
|
|
xread "Bootstrap bridge: vmbr" BOOTSTRAP_BRIDGE
|
|
readBridgeVars
|
|
|
|
echo "# Reverting gate's WAN bridge to: vmbr${WAN_BRIDGE}..."
|
|
@ sed -i \
|
|
-e 's/^\(net0.*vmbr\)'${BOOTSTRAP_BRIDGE}'/\1'${WAN_BRIDGE}'/' \
|
|
/etc/pve/lxc/${ID}.conf
|
|
exit
|
|
fi
|
|
|
|
|
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
|
# Bootstrap...
|
|
|
|
if ! [ -z $BOOTSTRAP ] ; then
|
|
xread "Bootstrap bridge: vmbr" BOOTSTRAP_BRIDGE
|
|
# this will allow the bootstrapped CTs to access the network...
|
|
WAN_BRIDGE=${BOOTSTRAP_BRIDGE}
|
|
fi
|
|
|
|
|
|
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
|
|
|
readVars
|
|
|
|
|
|
|
|
#----------------------------------------------------------------------
|
|
|
|
|
|
# XXX add interface bootstrap...
|
|
INTERFACES=(
|
|
"name=wan,bridge=vmbr${WAN_BRIDGE},firewall=1${WAN_GATE:+,gw=${WAN_GATE}}${WAN_IP:+,ip=${WAN_IP}},type=veth"
|
|
"name=admin,bridge=vmbr${ADMIN_BRIDGE},firewall=1${ADMIN_IP:+,ip=${ADMIN_IP}},type=veth"
|
|
"name=lan,bridge=vmbr${LAN_BRIDGE},firewall=1${LAN_IP:+,ip=${LAN_IP}},type=veth"
|
|
)
|
|
|
|
OPTS_STAGE_2="\
|
|
--startup order=80 \
|
|
--onboot 1 \
|
|
"
|
|
|
|
|
|
#----------------------------------------------------------------------
|
|
|
|
echo "# Building config..."
|
|
buildAssets
|
|
|
|
echo "# Creating CT..."
|
|
pctCreateAlpine $ID "$PASS"
|
|
|
|
# XXX this requires a bootsrapped interface...
|
|
echo "# Installing dependencies..."
|
|
@ lxc-attach $ID apk add bash bridge iptables traefik logrotate
|
|
|
|
echo "# Copying assets..."
|
|
pctPushAssets $ID
|
|
|
|
echo "# Setup: traefik..."
|
|
@ lxc-attach $ID rc-update add traefik
|
|
@ lxc-attach $ID rc-service traefik start
|
|
|
|
echo "# Setup: iptables..."
|
|
@ lxc-attach $ID rc-update add iptables
|
|
@ lxc-attach $ID bash /root/routing.sh
|
|
@ lxc-attach $ID rc-service iptables save
|
|
@ lxc-attach $ID rc-service iptables start
|
|
|
|
echo "# Setup: iptables update script..."
|
|
@ lxc-attach $ID rc-update add local
|
|
@ lxc-attach $ID -- ln -s /root/routing.sh /etc/local.d/iptables-update.start
|
|
|
|
echo "# Post config..."
|
|
pctSet $ID "${OPTS_STAGE_2}" $REBOOT
|
|
pctSetNotes $ID
|
|
|
|
saveLastRunConfig
|
|
|
|
showNotes
|
|
echo "# Done."
|
|
|
|
|
|
|
|
#----------------------------------------------------------------------
|
|
# vim:set ts=4 sw=4 :
|