mirror of
https://github.com/oneclickvirt/pve.git
synced 2024-11-15 12:36:18 +08:00
127 lines
3.8 KiB
Bash
127 lines
3.8 KiB
Bash
#!/bin/bash
|
|
#from https://github.com/spiritLHLS/pve
|
|
# 2023.06.12
|
|
|
|
# 打印信息
|
|
_red() { echo -e "\033[31m\033[01m$@\033[0m"; }
|
|
_green() { echo -e "\033[32m\033[01m$@\033[0m"; }
|
|
_yellow() { echo -e "\033[33m\033[01m$@\033[0m"; }
|
|
_blue() { echo -e "\033[36m\033[01m$@\033[0m"; }
|
|
reading(){ read -rp "$(_green "$1")" "$2"; }
|
|
export DEBIAN_FRONTEND=noninteractive
|
|
utf8_locale=$(locale -a 2>/dev/null | grep -i -m 1 -E "UTF-8|utf8")
|
|
if [[ -z "$utf8_locale" ]]; then
|
|
echo "No UTF-8 locale found"
|
|
else
|
|
export LC_ALL="$utf8_locale"
|
|
export LANG="$utf8_locale"
|
|
export LANGUAGE="$utf8_locale"
|
|
echo "Locale set to $utf8_locale"
|
|
fi
|
|
|
|
# 查询信息
|
|
if ! command -v lshw > /dev/null 2>&1; then
|
|
apt-get install -y lshw
|
|
fi
|
|
# 提取物理网卡名字
|
|
interface=$(lshw -C network | awk '/logical name:/{print $3}' | head -1)
|
|
if [ -z "$interface" ]; then
|
|
interface="eth0"
|
|
fi
|
|
# 提取IPV4地址
|
|
ipv4_address=$(ip addr show | awk '/inet .*global/ && !/inet6/ {print $2}')
|
|
# 提取IPV4网关
|
|
gateway=$(ip route | awk '/default/ {print $3}')
|
|
# 获取IPV6子网前缀
|
|
SUBNET_PREFIX=$(ip -6 addr show | grep -E 'inet6.*global' | awk '{print $2}' | awk -F'/' '{print $1}' | head -n 1 | cut -d ':' -f1-5):
|
|
# 提取IPV6地址
|
|
ipv6_address=$(ip addr show | awk '/inet6.*scope global/ { print $2 }' | head -n 1)
|
|
# 检查是否存在 IPV6
|
|
if [ -z "$SUBNET_PREFIX" ]; then
|
|
_red "无 IPV6 子网，不进行自动映射"
|
|
else
|
|
_blue "母鸡的IPV6子网前缀为 $SUBNET_PREFIX"
|
|
fi
|
|
if [ -z "$ipv6_address" ]; then
|
|
_red "母机无 IPV6 地址，不进行自动映射"
|
|
else
|
|
_blue "母鸡的IPV6地址为 $ipv6_address"
|
|
fi
|
|
|
|
# 录入网关
|
|
if [ -f /etc/network/interfaces ]; then
|
|
cp /etc/network/interfaces /etc/network/interfaces.bak
|
|
fi
|
|
interfaces_file=""
|
|
if [ -f /etc/network/interfaces.d/50-cloud-init ] && [ -f /etc/network/interfaces ]; then
|
|
if grep -q "source /etc/network/interfaces.d/*" /etc/network/interfaces; then
|
|
interfaces_file="/etc/network/interfaces.d/50-cloud-init"
|
|
fi
|
|
fi
|
|
if [ -z "$interfaces_file" ]; then
|
|
interfaces_file="/etc/network/interfaces"
|
|
fi
|
|
if grep -q "vmbr0" "$interfaces_file"; then
|
|
echo "vmbr0 已存在在 ${interfaces_file}"
|
|
else
|
|
if [ -z "$SUBNET_PREFIX" ] || [ -z "$ipv6_address" ]; then
|
|
cat << EOF | sudo tee -a "$interfaces_file"
|
|
auto vmbr0
|
|
iface vmbr0 inet static
|
|
address $ipv4_address
|
|
gateway $gateway
|
|
bridge_ports $interface
|
|
bridge_stp off
|
|
bridge_fd 0
|
|
EOF
|
|
else
|
|
cat << EOF | sudo tee -a "$interfaces_file"
|
|
auto vmbr0
|
|
iface vmbr0 inet static
|
|
address $ipv4_address
|
|
gateway $gateway
|
|
bridge_ports $interface
|
|
bridge_stp off
|
|
bridge_fd 0
|
|
|
|
iface vmbr0 inet6 static
|
|
address ${ipv6_address}
|
|
gateway ${SUBNET_PREFIX}
|
|
EOF
|
|
fi
|
|
fi
|
|
if grep -q "vmbr1" "$interfaces_file"; then
|
|
echo "vmbr1 已存在在 "$interfaces_file""
|
|
else
|
|
cat << EOF | sudo tee -a "$interfaces_file"
|
|
auto vmbr1
|
|
iface vmbr1 inet static
|
|
address 172.16.1.1
|
|
netmask 255.255.255.0
|
|
bridge_ports none
|
|
bridge_stp off
|
|
bridge_fd 0
|
|
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
|
|
post-up echo 1 > /proc/sys/net/ipv4/conf/vmbr1/proxy_arp
|
|
post-up iptables -t nat -A POSTROUTING -s '172.16.1.0/24' -o vmbr0 -j MASQUERADE
|
|
post-down iptables -t nat -D POSTROUTING -s '172.16.1.0/24' -o vmbr0 -j MASQUERADE
|
|
EOF
|
|
fi
|
|
|
|
# 加载iptables并设置回源且允许NAT端口转发
|
|
apt-get install -y iptables iptables-persistent
|
|
iptables -t nat -A POSTROUTING -j MASQUERADE
|
|
sysctl net.ipv4.ip_forward=1
|
|
sysctl_path=$(which sysctl)
|
|
if grep -q "^net.ipv4.ip_forward=1" /etc/sysctl.conf; then
|
|
if grep -q "^#net.ipv4.ip_forward=1" /etc/sysctl.conf; then
|
|
sed -i 's/^#net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/' /etc/sysctl.conf
|
|
fi
|
|
else
|
|
echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf
|
|
fi
|
|
${sysctl_path} -p
|
|
|
|
# 重启配置
|
|
service networking restart
|
|
systemctl restart networking.service
|