ProxmoxVE/ct/openthread-br.sh

#!/usr/bin/env bash
source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)

# Copyright (c) 2021-2026 community-scripts ORG
# Author: MickLesk (CanbiZ) | Co-Author: Tom Frenzel (tomfrenzel)
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
# Source: https://openthread.io/guides/border-router

APP="OpenThread-BR"
var_tags="${var_tags:-thread;iot;border-router;matter}"
var_cpu="${var_cpu:-2}"
var_ram="${var_ram:-2048}"
var_disk="${var_disk:-4}"
var_os="${var_os:-debian}"
var_version="${var_version:-13}"
var_arm64="${var_arm64:-yes}"
var_unprivileged="${var_unprivileged:-0}"
var_tun="${var_tun:-yes}"

header_info "$APP"
variables
color
catch_errors

function update_script() {
  header_info
  check_container_storage
  check_container_resources

  if [[ ! -d /opt/ot-br-posix ]]; then
    msg_error "No ${APP} Installation Found!"
    exit
  fi

  if check_for_gh_release "openthread-br" "openthread/ot-br-posix"; then
    msg_info "Stopping Services"
    systemctl stop otbr-web
    systemctl stop otbr-agent
    msg_ok "Stopped Services"

    if [[ -f /etc/init.d/otbr-agent ]] || [[ -f /etc/init.d/otbr-web ]]; then
      msg_info "Removing legacy services"
      rm -f /etc/init.d/otbr-agent /etc/init.d/otbr-web
      systemctl daemon-reload
      msg_ok "Removed legacy services"
    fi

    msg_info "Backing up Configuration"
    cp /etc/default/otbr-agent /etc/default/otbr-agent.bak
    msg_ok "Backed up Configuration"

    msg_info "Fetching GitHub release OpenThread-BR (${CHECK_UPDATE_RELEASE#v})" 
    cd /opt/ot-br-posix
    $STD git fetch --depth 1 origin tag "$CHECK_UPDATE_RELEASE"
    $STD git checkout -f "$CHECK_UPDATE_RELEASE"
    $STD git submodule update --depth 1 --init --recursive
    echo "${CHECK_UPDATE_RELEASE#v}" > ~/.openthread-br
    msg_ok "Deployed GitHub release OpenThread-BR (${CHECK_UPDATE_RELEASE#v})"

  msg_info "Rebuilding OpenThread Border Router (Patience)"
  cd /opt/ot-br-posix/build
  $STD cmake -GNinja \
    -DBUILD_TESTING=OFF \
    -DCMAKE_INSTALL_PREFIX=/usr \
    -DOTBR_DBUS=ON \
    -DOTBR_MDNS=openthread \
    -DOTBR_REST=ON \
    -DOTBR_WEB=ON \
    -DOTBR_BORDER_ROUTING=ON \
    -DOTBR_BACKBONE_ROUTER=ON \
    -DOTBR_SYSTEMD_UNIT_DIR=/etc/systemd/system \
    -DOT_FIREWALL=ON \
    -DOTBR_NAT64=ON \
    -DOT_POSIX_NAT64_CIDR="192.168.255.0/24" \
    -DOTBR_DNS_UPSTREAM_QUERY=ON \
    ..
  $STD ninja
  $STD ninja install
  msg_ok "Rebuilt OpenThread Border Router"

  if ! grep -q "net.ipv6.conf.all.accept_ra=2" /etc/sysctl.d/99-otbr.conf; then
    msg_info "Configuring Network"
    cat <<EOF >/etc/sysctl.d/99-otbr.conf
net.ipv6.conf.all.forwarding=1
net.ipv6.conf.all.accept_ra=2
net.ipv6.conf.all.accept_ra_rtr_pref=1
net.ipv6.conf.all.accept_ra_rt_info_max_plen=64
net.ipv6.conf.default.forwarding=1
net.ipv6.conf.default.accept_ra=2
net.ipv6.conf.default.accept_ra_rtr_pref=1
net.ipv6.conf.default.accept_ra_rt_info_max_plen=64
net.ipv6.conf.eth0.forwarding=1
net.ipv6.conf.eth0.accept_ra=2
net.ipv6.conf.eth0.accept_ra_rtr_pref=1
net.ipv6.conf.eth0.accept_ra_rt_info_max_plen=64
net.ipv4.ip_forward=1
EOF
    $STD sysctl -p /etc/sysctl.d/99-otbr.conf
    msg_ok "Configured Network"
  fi

  msg_info "Restoring Configuration"
  mv /etc/default/otbr-agent.bak /etc/default/otbr-agent
  msg_ok "Restored Configuration"

  if [[ ! -f /etc/systemd/system/otbr-agent.service.d/10-otbr-post-start.conf ]]; then
    msg_info "Configuring OpenThread Border Router post-start service"
    cat <<'EOF' >/usr/local/bin/otbr-post-start.sh
#!/bin/sh

# OpenThread Border Router post-start script
# Run custom commands for runtime configuration options

# Wait for the otbr-agent service to be initialized
#sleep 3

# Configure routing and translation features
#ot-ctl nat64 enable
#ot-ctl dns server upstream enable
EOF
    chmod +x /usr/local/bin/otbr-post-start.sh
    mkdir -p /etc/systemd/system/otbr-agent.service.d
    cat <<'EOF' >/etc/systemd/system/otbr-agent.service.d/10-otbr-post-start.conf
[Service]
ExecStartPost=/usr/local/bin/otbr-post-start.sh
EOF
    systemctl daemon-reload
    msg_ok "Configured OpenThread Border Router post-start service"
  fi

  msg_info "Starting Services"
  systemctl start otbr-agent
  systemctl start otbr-web
  msg_ok "Started Services"
  msg_ok "Updated successfully!"
  fi
  exit
}

start
build_container
description

msg_ok "Completed Successfully!\n"
echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
echo -e "${INFO}${YW}Access it using the following URL:${CL}"
echo -e "${GATEWAY}${BGN}http://${IP}${CL}"