mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-03-18 16:02:59 +01:00
3ce3c6f613
* core: add progress; fix exit status Introduce post_progress_to_api() in alpine-install.func and install.func to send a lightweight, fire-and-forget telemetry ping (HTTP POST) that updates an existing telemetry record to "configuring" when DIAGNOSTICS=yes and RANDOM_UUID is set. The function is non-blocking (curl -m 5, errors ignored) and is invoked during container setup and after OS updates to signal active progress. Also adjust api_exit_script() in build.func to report success (post_update_to_api "done" "0") for cases where the script exited normally but a completion status wasn't posted, instead of reporting failure. * Safer tools.func load and improved error handling Replace process-substitution sourcing of tools.func with an explicit curl -> variable -> source via /dev/stdin, adding failure messages and a check that expected functions (e.g. fetch_and_deploy_gh_release) are present (misc/alpine-install.func, misc/install.func). Add categorize_error mapping for exit code 10 -> "config" (misc/api.func). Tweak build.func: minor pipeline formatting and change the ERR trap to capture the actual exit code and only call ensure_log_on_host/post_update on non-zero exits, preventing erroneous failure reporting. * tools: add data init and auto-reporting to tools and pve section Introduce telemetry helpers in misc/api.func: _telemetry_report_exit (reports success/failure via post_tool_to_api/post_addon_to_api) and init_tool_telemetry (reads DIAGNOSTICS, starts install timer and installs an EXIT trap to auto-report). Integrate telemetry into many tools/addon and tools/pve scripts by sourcing the remote api.func and calling init_tool_telemetry (guarded with declare -f). Also apply a minor arithmetic formatting tweak in misc/build.func for RECOVERY_ATTEMPT.
151 lines
4.6 KiB
Bash
151 lines
4.6 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Copyright (c) 2021-2026 tteck
|
|
# Author: tteck (tteckster)
|
|
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
|
|
|
set -Eeuo pipefail
|
|
trap 'echo -e "\n[ERROR] in line $LINENO: exit code $?"' ERR
|
|
|
|
function header_info() {
|
|
clear
|
|
cat <<"EOF"
|
|
______ _ __ __
|
|
/_ __/___ _(_) /_____________ _/ /__
|
|
/ / / __ `/ / / ___/ ___/ __ `/ / _ \
|
|
/ / / /_/ / / (__ ) /__/ /_/ / / __/
|
|
/_/ \__,_/_/_/____/\___/\__,_/_/\___/
|
|
|
|
EOF
|
|
}
|
|
|
|
function msg_info() { echo -e " \e[1;36m➤\e[0m $1"; }
|
|
function msg_ok() { echo -e " \e[1;32m✔\e[0m $1"; }
|
|
function msg_error() { echo -e " \e[1;31m✖\e[0m $1"; }
|
|
|
|
# Telemetry
|
|
source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
|
|
declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "add-tailscale-lxc" "tool"
|
|
|
|
header_info
|
|
|
|
if ! command -v pveversion &>/dev/null; then
|
|
msg_error "This script must be run on the Proxmox VE host (not inside an LXC container)"
|
|
exit 1
|
|
fi
|
|
|
|
while true; do
|
|
read -rp "This will add Tailscale to an existing LXC Container ONLY. Proceed (y/n)? " yn
|
|
case "$yn" in
|
|
[Yy]*) break ;;
|
|
[Nn]*) exit 0 ;;
|
|
*) echo "Please answer yes or no." ;;
|
|
esac
|
|
done
|
|
|
|
header_info
|
|
msg_info "Loading container list..."
|
|
|
|
NODE=$(hostname)
|
|
MSG_MAX_LENGTH=0
|
|
CTID_MENU=()
|
|
|
|
while read -r line; do
|
|
TAG=$(echo "$line" | awk '{print $1}')
|
|
ITEM=$(echo "$line" | awk '{print substr($0,36)}')
|
|
OFFSET=2
|
|
((${#ITEM} + OFFSET > MSG_MAX_LENGTH)) && MSG_MAX_LENGTH=$((${#ITEM} + OFFSET))
|
|
CTID_MENU+=("$TAG" "$ITEM" "OFF")
|
|
done < <(pct list | awk 'NR>1')
|
|
|
|
CTID=""
|
|
while [[ -z "${CTID}" ]]; do
|
|
CTID=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "Containers on $NODE" --radiolist \
|
|
"\nSelect a container to add Tailscale to:\n" \
|
|
16 $((MSG_MAX_LENGTH + 23)) 6 \
|
|
"${CTID_MENU[@]}" 3>&1 1>&2 2>&3) || exit 1
|
|
done
|
|
|
|
CTID_CONFIG_PATH="/etc/pve/lxc/${CTID}.conf"
|
|
|
|
# Skip if already configured
|
|
grep -q "lxc.cgroup2.devices.allow: c 10:200 rwm" "$CTID_CONFIG_PATH" || echo "lxc.cgroup2.devices.allow: c 10:200 rwm" >>"$CTID_CONFIG_PATH"
|
|
grep -q "lxc.mount.entry: /dev/net/tun" "$CTID_CONFIG_PATH" || echo "lxc.mount.entry: /dev/net/tun dev/net/tun none bind,create=file" >>"$CTID_CONFIG_PATH"
|
|
|
|
header_info
|
|
msg_info "Installing Tailscale in CT $CTID"
|
|
|
|
pct exec "$CTID" -- bash -c '
|
|
set -e
|
|
export DEBIAN_FRONTEND=noninteractive
|
|
|
|
# Source os-release properly (handles quoted values)
|
|
source /etc/os-release
|
|
|
|
# Fallback if DNS is poisoned or blocked
|
|
ORIG_RESOLV="/etc/resolv.conf"
|
|
BACKUP_RESOLV="/tmp/resolv.conf.backup"
|
|
|
|
# Check DNS resolution using multiple methods (dig may not be installed)
|
|
dns_check_failed=true
|
|
if command -v dig &>/dev/null; then
|
|
if dig +short pkgs.tailscale.com 2>/dev/null | grep -qvE "^127\.|^0\.0\.0\.0$|^$"; then
|
|
dns_check_failed=false
|
|
fi
|
|
elif command -v host &>/dev/null; then
|
|
if host pkgs.tailscale.com 2>/dev/null | grep -q "has address"; then
|
|
dns_check_failed=false
|
|
fi
|
|
elif command -v nslookup &>/dev/null; then
|
|
if nslookup pkgs.tailscale.com 2>/dev/null | grep -q "Address:"; then
|
|
dns_check_failed=false
|
|
fi
|
|
elif command -v getent &>/dev/null; then
|
|
if getent hosts pkgs.tailscale.com &>/dev/null; then
|
|
dns_check_failed=false
|
|
fi
|
|
else
|
|
# No DNS tools available, try curl directly and assume DNS works
|
|
dns_check_failed=false
|
|
fi
|
|
|
|
if $dns_check_failed; then
|
|
echo "[INFO] DNS resolution for pkgs.tailscale.com failed (blocked or redirected)."
|
|
echo "[INFO] Temporarily overriding /etc/resolv.conf with Cloudflare DNS (1.1.1.1)"
|
|
cp "$ORIG_RESOLV" "$BACKUP_RESOLV"
|
|
echo "nameserver 1.1.1.1" >"$ORIG_RESOLV"
|
|
fi
|
|
|
|
if ! command -v curl &>/dev/null; then
|
|
echo "[INFO] curl not found, installing..."
|
|
apt-get update -qq
|
|
apt update -qq
|
|
apt install -y curl >/dev/null
|
|
fi
|
|
|
|
# Ensure keyrings directory exists
|
|
mkdir -p /usr/share/keyrings
|
|
|
|
curl -fsSL "https://pkgs.tailscale.com/stable/${ID}/${VERSION_CODENAME}.noarmor.gpg" \
|
|
| tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null
|
|
|
|
echo "deb [signed-by=/usr/share/keyrings/tailscale-archive-keyring.gpg] https://pkgs.tailscale.com/stable/${ID} ${VERSION_CODENAME} main" \
|
|
>/etc/apt/sources.list.d/tailscale.list
|
|
|
|
apt-get update -qq
|
|
apt update -qq
|
|
apt install -y tailscale >/dev/null
|
|
|
|
if [[ -f /tmp/resolv.conf.backup ]]; then
|
|
echo "[INFO] Restoring original /etc/resolv.conf"
|
|
mv /tmp/resolv.conf.backup /etc/resolv.conf
|
|
fi
|
|
'
|
|
|
|
TAGS=$(awk -F': ' '/^tags:/ {print $2}' "$CTID_CONFIG_PATH")
|
|
TAGS="${TAGS:+$TAGS; }tailscale"
|
|
pct set "$CTID" -tags "$TAGS"
|
|
|
|
msg_ok "Tailscale installed on CT $CTID"
|
|
msg_info "Reboot the container, then run 'tailscale up' inside the container to activate."
|