Commit Graph

6 Commits

Author SHA1 Message Date
Maple
1520744bc9 fix: strip pre-release suffix in version comparison
sort -V treats "-beta" suffix as lexicographically greater than plain
version, causing 10.0.0-beta to appear newer than 10.0.0.
Strip -beta/-alpha/-rc before comparing to fix this.
2026-07-08 15:06:40 +08:00
Maple
c932028f5b chore: update docs, images, CI configs and script initialization hints
- lib/core.sh: update script initialization prompts
- intel-sriov/intel-legacy/intel-gvtg/nvidia: minor refinements
- Docs: update README, CLAUDE.md and images
- CI: sync beta-release and release workflow configs
- self-update: update version check logic
2026-07-08 14:36:37 +08:00
Maple
9d3b17daed feat: v10.0.1 — 安全中心新增 CVE 漏洞修补 (Januscape CVE-2026-53359)
新增 src/modules/09-security/cve-fix.sh:
- 漏洞检测:嵌套虚拟化状态 + 内核版本综合评估
- 临时修补:grub_add_param 禁用 kvm_intel/kvm_amd 嵌套虚拟化
- 升级内核修补:引导至内核管理模块安装已修复内核
- 恢复嵌套虚拟化:grub_remove_param 移除禁用参数
- CVE 修补主菜单:集成到安全中心第 3 项

Januscape 是 KVM/x86 shadow MMU use-after-free 漏洞,影响 2010~2026 全部内核版本
修复参考: https://github.com/V4bel/Januscape
2026-07-08 13:57:16 +08:00
Maple
b4b53a8723 chore: bump version to v10.0.0 2026-07-08 13:47:51 +08:00
Maple
747bef9808 chore: bump version to v10.0.0-beta for release test 2026-07-08 11:38:44 +08:00
Maple
886e82f0cb refactor: 模块化重构 — 拆分 lib/ 基础设施层与 src/modules/ 功能模块
PVE-Tools.sh 从 ~14,700 行单文件重构为 150 行入口点,
所有函数按职责拆分到独立文件,通过 source 机制加载。

lib/ — 基础设施层(零业务逻辑)
  config.sh: 全局变量与常量
  core.sh: 日志、UI、确认、备份、GRUB、进度条
  network.sh: 网络检测、镜像选择
  runtime.sh: 运行时守卫、main() 入口

src/modules/ — 功能模块(10 个目录)
  01-optimization  02-sources  03-boot-kernel
  04-gpu-passthrough  05-vm-container  06-networking
  07-storage-disk  08-tools-about  09-security  10-third-party

新增 build.sh(合并编译)和 dev.sh(开发 source 入口),
release.yml 新增构建步骤,CI 适配模块化结构。
2026-07-08 11:15:59 +08:00