mirror of
https://github.com/thelittlerocket/pve.git
synced 2024-11-15 19:44:38 +08:00
73 lines
2.2 KiB
Bash
73 lines
2.2 KiB
Bash
#!/bin/bash
|
|
#from https://github.com/spiritLHLS/pve
|
|
|
|
# 打印信息
|
|
_red() { echo -e "\033[31m\033[01m$@\033[0m"; }
|
|
_green() { echo -e "\033[32m\033[01m$@\033[0m"; }
|
|
_yellow() { echo -e "\033[33m\033[01m$@\033[0m"; }
|
|
_blue() { echo -e "\033[36m\033[01m$@\033[0m"; }
|
|
|
|
# 创建资源池
|
|
_green "正在创建资源池 mypool..."
|
|
pvesh create /pools --poolid mypool
|
|
_green "资源池 mypool 已创建！"
|
|
|
|
# 创建网桥
|
|
interfaces=($(ls /sys/class/net))
|
|
for interface in ${interfaces[@]}; do
|
|
if [[ $interface != "lo" ]] && [[ $interface != "vmbr"* ]]; then
|
|
bridge_ports="$interface"
|
|
break
|
|
fi
|
|
done
|
|
if [[ -z $bridge_ports ]]; then
|
|
_red "错误：找不到可用网络接口"
|
|
exit 1
|
|
fi
|
|
_green "Creating bridge vmbr1..."
|
|
cat <<EOF >> /etc/network/interfaces.d/vmbr1.cfg
|
|
auto vmbr1
|
|
iface vmbr1 inet static
|
|
address 192.168.1.1
|
|
netmask 255.255.255.0
|
|
bridge_ports $bridge_ports
|
|
bridge_stp off
|
|
bridge_fd 0
|
|
|
|
iface vmbr1 inet6 static
|
|
address $(ip -6 addr show dev $bridge_ports | grep inet6 | awk '{ print $2 }' | cut -d'/' -f1)
|
|
netmask $(ip -6 addr show dev $bridge_ports | grep inet6 | awk '{ print $4 }' | cut -d'/' -f1)
|
|
EOF
|
|
if grep -q "iface vmbr1" /etc/network/interfaces; then
|
|
_green "网桥 vmbr1 已经在 Proxmox VE 配置中"
|
|
else
|
|
_green "将网桥 vmbr1 添加到 Proxmox VE 配置中..."
|
|
cat <<EOF >> /etc/network/interfaces
|
|
# Proxmox VE bridge vmbr1
|
|
iface vmbr1 inet manual
|
|
bridge-ports $bridge_ports
|
|
bridge-stp off
|
|
bridge-fd 0
|
|
EOF
|
|
fi
|
|
systemctl restart networking.service
|
|
_green "网桥 vmbr1 已创建！"
|
|
|
|
# 检测AppArmor模块
|
|
if ! dpkg -s apparmor > /dev/null 2>&1; then
|
|
_green "正在安装 AppArmor..."
|
|
apt-get update
|
|
apt-get install -y apparmor
|
|
fi
|
|
if ! systemctl is-active --quiet apparmor.service; then
|
|
_green "启动 AppArmor 服务..."
|
|
systemctl enable apparmor.service
|
|
systemctl start apparmor.service
|
|
fi
|
|
if ! lsmod | grep -q apparmor; then
|
|
_green "正在加载 AppArmor 内核模块..."
|
|
modprobe apparmor
|
|
fi
|
|
if ! lsmod | grep -q apparmor; then
|
|
_yellow "AppArmor 仍未加载，可能需要重新启动系统，然后使用 lsmod | grep apparmor 查询是否加载成功"
|
|
fi
|