fanhuadesenlinnn/PVE-Tools-9
1
0
Fork 0
mirror of https://hubproxy.babadafafafafa.cn/https://github.com/Mapleawaa/PVE-Tools-9.git synced 2026-09-20 08:03:35 +08:00
Code Issues Packages Projects Releases Wiki Activity
239 Commits 4 Branches 6 Tags
081b242a077669f254ff2cb6ede1e92c029824e7
Commit Graph

239 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Maple
081b242a07 fix: NVMe 温度检测改用字符设备校验 
- /dev/nvme0（控制器，major 243）是字符设备，/dev/nvme0n1（命名空间）才是块设备（major 259）
- 上一版 -b 块设备校验会跳过所有真实 NVMe 控制器，导致温度监控对 NVMe 失效，属回归缺陷
- 改为 -c 字符设备校验；glob 无匹配时的字面模式串既非字符也非块设备，跳过行为不变
 2026-08-19 19:27:39 +08:00
Maple
64433dce95 fix: review fixes — IOMMU 增强参数重档确认与回滚、11-help 拆文件、mac-bind 文案 
- iommu.sh: 增强参数确认升级为 confirm_high_risk_action（确认词 IOMMU-ENHANCE），符合写 GRUB 配置必须重档确认的项目规范
- iommu.sh: enable_pass 增强参数对增加返回值检查，第二个参数写入失败时回滚已写入参数并中止；disable_pass 任一参数移除失败即中止报错，不继续后续流程
- 11-help: 信息展示函数拆分至 info.sh，init.sh 仅保留菜单入口（符合项目 FAQ 约定）
- mac-bind.sh: 接口名校验错误文案列出全部合法字符（字母/数字/下划线/点/连字符）
 2026-08-19 18:56:33 +08:00
Maple
50d0ecfa50 feat: v11.1.0 beta — 获取帮助板块、IOMMU ACS 拆分增强、NVMe 温度检测修复 
- 新增主菜单「11. 获取帮助」：QQ 水群 / Telegram 聊天社区 / 作者付费咨询与赞助入口
- 硬件直通一键配置 (IOMMU) 可选增强参数：iommu=pt 与 pcie_acs_override=downstream,multifunction（强制拆分 IOMMU 组，解决 GPU 与系统盘同组时 vfio-pci 误接管系统盘问题）
- 修复温度监控无 NVMe 盘时误报 nvme0（glob 无匹配陷阱）
- 修正 MAC 绑定接口名校验提示文案
- 版本号升至 11.1.0（VERSION / CURRENT_VERSION / UPDATE 三处同步）；新增 Docs/CHANGELOG.md 更新日志
 2026-08-19 18:43:34 +08:00
Maple
8ec4315012 chore: restore images, update install URLs to release assets 2026-07-28 15:09:21 +08:00
Maple
dc55838c88 docs: update README files 2026-07-28 15:00:21 +08:00
Maple
14a3c4b355 fix: resolve shellcheck SC2045 and SC1087 errors blocking release pipeline 2026-07-28 14:50:03 +08:00
Maple
d8b3d9fbdf feat: release v11.0.0 Liino — menu framework, risk guards, CI gates 
Unify all menus on lib/menu.sh (run_menu), harden GPU/GRUB writes with
two-tier confirms and markers, fix remote/self-update to Releases assets,
and close real CI quality gates with SHA256SUMS. Bump to 11.0.0 / Liino.
v11.0.0 		2026-07-28 14:43:58 +08:00
Maple
d6ca27b0a3 chore: bump version to v10.2.2 v10.2.2 2026-07-26 13:40:35 +08:00
CyreneNight
cfac1693d1 Merge pull request #92 from PVE-Tools/10.2.1 
chore: bump version to v10.2.1
 2026-07-26 13:39:48 +08:00
Maple
937ba82e56 fix(it87): 锁定 IT87_REPO_REF 为 PGP 签名提交 SHA，改用 git init+fetch 支持 SHA 
- config.sh: IT87_REPO_REF 设为 81ae4a610ea763fa7f8cd195e712c41f33207264
- it87_install_dkms/it87_install_direct: git clone --branch → git init + fetch
  避免 git clone --branch 不支持任意 commit SHA 的问题
 2026-07-26 13:34:32 +08:00
Maple
56188182cb fix(it87): 添加 backup_file 备份、mktemp 临时目录、DKMS 格式兼容及 read -r 
Inline fixes:
- it87_read_fan_rpm: 添加 rpm 为 local 变量，((count++)) → ((++count))
- it87_detect_version: grep/awk 兼容逗号和斜杠分隔的 dkms status
- it87_install_dkms: 清理时同时移除精确克隆目标
- it87_disable_autostart/it87_uninstall: 修改配置前调用 backup_file

Nitpick fixes:
- config.sh: 添加 IT87_REPO_REF 锁定克隆版本
- it87_install_dkms/it87_install_direct: clone 命令支持 --branch
- it87_install_direct: /tmp/it87-build → mktemp -d
- 所有 read 命令添加 -r 参数（SC2162）
 2026-07-26 13:29:39 +08:00
CyreneNight
91f13d23a2 Merge branch 'main' into 10.2.1 2026-07-26 13:15:07 +08:00
CyreneNight
3fbb5017d8 Delete dist directory 2026-07-26 13:13:59 +08:00
Maple
034b184730 chore: bump version to v10.2.1 2026-07-26 13:13:07 +08:00
CyreneNight
660fbc9e31 Merge pull request #91 from PVE-Tools/beta-v10.2 
feat: improve bootstrap downloads for v10.2.0
 2026-07-11 20:31:47 +08:00
Maple
dbd3888dac feat: improve bootstrap downloads for v10.2.0 2026-07-11 20:20:02 +08:00
Maple
e1341b26ba chore: bump version to v10.1.0 2026-07-08 15:56:55 +08:00
CyreneNight
e0ca8555c5 Merge pull request #90 from PVE-Tools/beta-v10 
Fix version comparison and streamline bootstrap file downloads
 2026-07-08 15:55:31 +08:00
Maple
fce2285647 fix: source each module init.sh before sibling scripts 
Previously find|sort loaded all .sh files globally, so cpupower.sh (c < i)
loaded before init.sh in the same module. Now each module directory loads
init.sh first, then the remaining files in alphabetical order.
 2026-07-08 15:48:14 +08:00
Maple
a2da01efe7 refactor: simplify bootstrap to download dist single file only 
Remove the per-module download fallback. Now that dist/PVE-Tools.sh is
committed to the repo, the bootstrap only downloads one file.

169 lines -> 73 lines
 2026-07-08 15:18:00 +08:00
Maple
a8799d7ac0 fix: add dist/PVE-Tools.sh and missing cve-fix.sh to bootstrap 
- Un-ignore dist/PVE-Tools.sh so it is available on GitHub raw for the
  bootstrap loader to download directly (faster single-file path).
- Add src/modules/09-security/cve-fix.sh to remote file list so the
  fallback per-module download path is complete.
- The bootstrap now has both download paths working.
 2026-07-08 15:14:17 +08:00
Maple
1520744bc9 fix: strip pre-release suffix in version comparison 
sort -V treats "-beta" suffix as lexicographically greater than plain
version, causing 10.0.0-beta to appear newer than 10.0.0.
Strip -beta/-alpha/-rc before comparing to fix this.
 2026-07-08 15:06:40 +08:00
CyreneNight
efb1d0804d Merge pull request #89 from PVE-Tools/beta-v10 
Bump version to v10.0.1 and add CVE fixes and enhancements
 2026-07-08 15:01:15 +08:00
Maple
c932028f5b chore: update docs, images, CI configs and script initialization hints 
- lib/core.sh: update script initialization prompts
- intel-sriov/intel-legacy/intel-gvtg/nvidia: minor refinements
- Docs: update README, CLAUDE.md and images
- CI: sync beta-release and release workflow configs
- self-update: update version check logic
 2026-07-08 14:36:37 +08:00
Maple
389536dfcc fix: cve-fix.sh - remove double pause, idempotent blacklist, drop_caches gating 
- Remove pause_function from all leaf action functions (menus handle it)
- Module blacklist: trailing newline guard before appending
- rmmod_and_drop_caches: only flush when modules actually unloaded
- Batch mitigation: check grub_add_param and update-grub return values
- Final message reflects actual success/failure state
 2026-07-08 14:22:22 +08:00
Maple
94ca8d142d fix: cve-fix.sh hardening - idempotency, error checks, read -r, kernel detection 
- module blacklist: idempotent dedup + write error checks + caller return gating
- module restore: rm error check before success log
- GRUB update-grub/grub-mkconfig: fail closed on all 3 call sites
- menu reads: read -p -> read -rp (SC2162)
- kernel detection: build date is heuristic only, handle unknown state (rc=2)
 2026-07-08 14:17:20 +08:00
Maple
74cc60176c feat: add Copy Fail and Dirty Frag LPE fixes 2026-07-08 14:04:57 +08:00
Maple
9d3b17daed feat: v10.0.1 — 安全中心新增 CVE 漏洞修补 (Januscape CVE-2026-53359) 
新增 src/modules/09-security/cve-fix.sh:
- 漏洞检测：嵌套虚拟化状态 + 内核版本综合评估
- 临时修补：grub_add_param 禁用 kvm_intel/kvm_amd 嵌套虚拟化
- 升级内核修补：引导至内核管理模块安装已修复内核
- 恢复嵌套虚拟化：grub_remove_param 移除禁用参数
- CVE 修补主菜单：集成到安全中心第 3 项

Januscape 是 KVM/x86 shadow MMU use-after-free 漏洞，影响 2010~2026 全部内核版本
修复参考: https://github.com/V4bel/Januscape
 2026-07-08 13:57:16 +08:00
Maple
b4b53a8723 chore: bump version to v10.0.0 v10.0.0 2026-07-08 13:47:51 +08:00
CyreneNight
b1c83cad0e Merge pull request #88 from Mapleawaa/beta-v10 
Fix release issues and improve code quality for v10.0.0-beta
 2026-07-08 13:45:22 +08:00
Maple
1fc80ec3ca fix: cpupower 安全写入与 upgrade-pve 强制升级确认加固 
- cpupower.sh: modprobe 失败时跳过驱动写入；backup_file 失败时中止；tmpf 添加 local 并检查 mktemp
- upgrade-pve.sh: 强制升级的 y/N read 替换为 confirm_high_risk_action (FORCE-UPGRADE)
 2026-07-08 13:41:21 +08:00
Maple
413f0e0e66 fix: 修复审查机器人第二轮反馈 — 回归问题与遗漏边界 
- upgrade-pve.sh: 拆分 apt update && dist-upgrade 短路逻辑为独立检查
- intel-legacy.sh: dpkg -i 失败时不再误报成功/锁定包
- cpupower.sh: /etc/modules 备份守卫改用布尔标志，避免重复备份
- popup.sh: 移除 restore_proxmoxlib 中与 reinstall 内部重复的日志
- iommu.sh: disable_pass 添加 /etc/modules backup_file；grub_add_param 失败时 early return
- init.sh(08): backup_file 失败时中止黑名单清理并提示
 2026-07-08 13:34:34 +08:00
Maple
0b0b20ed5e fix: 修复审查机器人发现的代码问题 — 安全规范与代码质量 
- GRUB管理: raw sed 替换为 grub_add_param/grub_remove_param 幂等助手 (iommu/igpu-shared)
- 高风险确认: 9处 ad-hoc read/confirm_action 统一替换为 confirm_high_risk_action
- 配置备份: sysfs.conf/etc/modules/pve-blacklist.conf 修改前添加 backup_file()
- 临时文件安全: 5处硬编码 /tmp 路径替换为 mktemp (intel-legacy/cpupower/ssh-hardening)
- Bug修复: snapshot 后置自增双计数、grub return 0 掩盖失败、firewall stderr 重定向
- 变量作用域: cpupower GOVERNOR 泄漏与重置、backup/snapshot local -a vmids
- 跨模块依赖: tunes/img-import/init.sh 添加注释或替换为同模块函数
- CI增强: pr-validation 新增 dist/PVE-Tools.sh shellcheck 步骤
- 守卫添加: cpu_add() 添加 block_non_pve9_destructive + confirm_high_risk_action
 2026-07-08 13:12:28 +08:00
CyreneNight
52695054b4 Merge pull request #87 from Mapleawaa/main 
Refactor PVE-Tools.sh into modular structure with CI updates
 2026-07-08 12:36:46 +08:00
Maple
107cc85507 fix(release): 修正安装命令格式和域名 2026-07-08 12:01:49 +08:00
Maple
4bd11dafc3 chore(release): 移除二进制编译，只发布原始 Shell 脚本 v10.0.0-beta4 2026-07-08 11:53:02 +08:00
Maple
fda4ee7d9d fix(release): 用 ssc 替代 shc，pipe 模式无 ARG_MAX 限制 2026-07-08 11:49:51 +08:00
Maple
b12179b084 fix(release): shc 静态编译解决 glibc 版本不匹配问题 
- release.yml: CFLAGS=\

Signed-off-by: Maple <Mapleawa07@outlook.com>
v10.0.0-beta2 		2026-07-08 11:45:32 +08:00
Maple
747bef9808 chore: bump version to v10.0.0-beta for release test v10.0.0-beta 2026-07-08 11:38:44 +08:00
CyreneNight
a599a0f190 Merge pull request #1 from Mapleawaa/beta-v10 
Beta v10
 2026-07-08 11:32:24 +08:00
Maple
78b8891794 chore: 移除 Playwright MCP 临时文件，添加到 .gitignore 
清理 .playwright-mcp/ 工作区临时文件并加入 gitignore，
防止开发过程中的临时测试文件被意外跟踪。
 2026-07-08 11:18:26 +08:00
Maple
886e82f0cb refactor: 模块化重构 — 拆分 lib/ 基础设施层与 src/modules/ 功能模块 
PVE-Tools.sh 从 ~14,700 行单文件重构为 150 行入口点，
所有函数按职责拆分到独立文件，通过 source 机制加载。

lib/ — 基础设施层（零业务逻辑）
  config.sh: 全局变量与常量
  core.sh: 日志、UI、确认、备份、GRUB、进度条
  network.sh: 网络检测、镜像选择
  runtime.sh: 运行时守卫、main() 入口

src/modules/ — 功能模块（10 个目录）
  01-optimization  02-sources  03-boot-kernel
  04-gpu-passthrough  05-vm-container  06-networking
  07-storage-disk  08-tools-about  09-security  10-third-party

新增 build.sh（合并编译）和 dev.sh（开发 source 入口），
release.yml 新增构建步骤，CI 适配模块化结构。
 2026-07-08 11:15:59 +08:00
CyreneNight
d9cd6ee39e Merge pull request #86 from Mapleawaa/main 
feat: v9.0.0 重大更新 — 镜像源重构、CoolerControl集成、垃圾清理系统、磁盘直通增强、Web文档站移除
 2026-06-20 22:51:15 +08:00
Maple
6e62bca246 fix: 修复审查机器人发现的代码问题 2026-06-20 22:44:00 +08:00
Maple
d9468189d8 feat: v9.0.0 重大更新 — 镜像源重构、CoolerControl集成、垃圾清理系统、磁盘直通增强、Web文档站移除 
- 镜像源系统重构为并行数组架构，新增智能镜像选择与通用下载函数
- 新增 CoolerControl 风扇控制工具一键管理（安装/更新/卸载）
- 新增完整垃圾清理系统（基础清理、备份修剪、快照修剪、孤立磁盘扫描）
- 磁盘直通能力大幅增强（整盘发现、存储控制器直通、NVMe直通、系统盘保护）
- 新增存储挂载向导，支持 ext4/xfs 分区一键挂载
- 新增安全中心菜单，整合安全相关功能
- 主菜单重组：新增「安全中心」「第三方工具」入口，移除已修复CVE模块
- 虚拟机高级操作拆分为聚焦型子菜单
- 移除内嵌 Web 文档站点，仓库更精简
- VERSION 升级至 9.0.0
 2026-06-20 22:32:22 +08:00
Maple
dec829cae5 docs: 修复README.md中的格式和占位内容 
1. 移除了多余的数字占位符4
2. 修正了警告块的Markdown语法格式
 2026-06-20 17:01:12 +08:00
Maple
ee64dc2c80 Merge branch 'main' of github.com:PVE-Tools/PVE-Tools-9 2026-06-20 17:00:31 +08:00
Maple
5aabc20cea docs: 更新站点logo与README内容 
1. 更新vitepress配置中的站点logo为svg版本
2. 替换README中原停更公告为恢复更新公告
3. 调整README中原项目介绍文本与注释格式
 2026-06-20 16:59:03 +08:00
CyreneNight
c755fa0953 Update README with Go version migration details 2026-05-23 18:43:21 +08:00
CyreneNight
846f7c7794 Revise Shell version update announcement 
Updated caution notice regarding Shell version updates.
 2026-05-23 18:41:11 +08:00