mirror of
https://hubproxy.babadafafafafa.cn/https://github.com/Mapleawaa/PVE-Tools-9.git
synced 2026-09-20 08:03:35 +08:00
d8b3d9fbdf
Unify all menus on lib/menu.sh (run_menu), harden GPU/GRUB writes with two-tier confirms and markers, fix remote/self-update to Releases assets, and close real CI quality gates with SHA256SUMS. Bump to 11.0.0 / Liino.
506 lines
16 KiB
Bash
506 lines
16 KiB
Bash
#!/bin/bash
|
||
# SPDX-License-Identifier: GPL-3.0-only
|
||
# Copyright (C) 2026 Ciriu Networks
|
||
|
||
setup_colors() {
|
||
# NO_COLOR 遵循 no-color.org 规范：只要设置了该变量（即使为空值）即禁用颜色
|
||
if [[ -t 1 && -z "${NO_COLOR+x}" ]]; then
|
||
# 使用 printf 确保变量包含真实的转义字符，提高不同 shell 间的兼容性
|
||
RED=$(printf '\033[0;31m')
|
||
GREEN=$(printf '\033[0;32m')
|
||
YELLOW=$(printf '\033[1;33m')
|
||
BLUE=$(printf '\033[0;34m')
|
||
PINK=$(printf '\033[0;35m')
|
||
CYAN=$(printf '\033[0;36m')
|
||
MAGENTA=$(printf '\033[0;35m')
|
||
WHITE=$(printf '\033[1;37m')
|
||
ORANGE=$(printf '\033[0;33m')
|
||
NC=$(printf '\033[0m')
|
||
|
||
|
||
# UI 辅助色映射
|
||
PRIMARY="${CYAN}"
|
||
H1=$(printf '\033[1;36m')
|
||
H2=$(printf '\033[1;37m')
|
||
else
|
||
RED='' GREEN='' YELLOW='' BLUE='' PINK='' CYAN='' MAGENTA='' WHITE='' ORANGE='' NC=''
|
||
PRIMARY='' H1='' H2=''
|
||
fi
|
||
|
||
# UI 界面一致性常量
|
||
UI_BORDER="${NC}═════════════════════════════════════════════════${NC}"
|
||
UI_DIVIDER="${NC}═════════════════════════════════════════════════${NC}"
|
||
UI_FOOTER="${NC}═════════════════════════════════════════════════${NC}"
|
||
UI_HEADER="${NC}═════════════════════════════════════════════════${NC}"
|
||
}
|
||
|
||
# 初始化颜色
|
||
setup_colors
|
||
log_info() {
|
||
local timestamp=$(date +'%H:%M:%S')
|
||
echo -e "${GREEN}[$timestamp]${NC} ${CYAN}INFO${NC} $1"
|
||
echo "[$timestamp] INFO $1" >> /var/log/pve-tools.log
|
||
}
|
||
log_warn() {
|
||
local timestamp=$(date +'%H:%M:%S')
|
||
echo -e "${YELLOW}[$timestamp]${NC} ${ORANGE}WARN${NC} $1"
|
||
echo "[$timestamp] WARN $1" >> /var/log/pve-tools.log
|
||
}
|
||
log_error() {
|
||
local timestamp=$(date +'%H:%M:%S')
|
||
echo -e "${RED}[$timestamp]${NC} ${RED}ERROR${NC} $1" >&2
|
||
echo "[$timestamp] ERROR $1" >> /var/log/pve-tools.log
|
||
}
|
||
log_step() {
|
||
local timestamp=$(date +'%H:%M:%S')
|
||
echo -e "${BLUE}[$timestamp]${NC} ${MAGENTA}STEP${NC} $1"
|
||
echo "[$timestamp] STEP $1" >> /var/log/pve-tools.log
|
||
}
|
||
log_success() {
|
||
local timestamp=$(date +'%H:%M:%S')
|
||
echo -e "${GREEN}[$timestamp]${NC} ${GREEN}OK${NC} $1"
|
||
echo "[$timestamp] OK $1" >> /var/log/pve-tools.log
|
||
}
|
||
log_tips(){
|
||
local timestamp=$(date +'%H:%M:%S')
|
||
echo -e "${CYAN}[$timestamp]${NC} ${MAGENTA}TIPS${NC} $1"
|
||
echo "[$timestamp] TIPS $1" >> /var/log/pve-tools.log
|
||
}
|
||
|
||
# Enhanced error handling function with consistent messaging
|
||
display_error() {
|
||
local error_msg="$1"
|
||
local suggestion="${2:-请检查输入或联系作者寻求帮助。}"
|
||
|
||
log_error "$error_msg"
|
||
echo -e "${YELLOW}提示: $suggestion${NC}"
|
||
}
|
||
|
||
# Enhanced success feedback
|
||
display_success() {
|
||
local success_msg="$1"
|
||
local next_step="${2:-}"
|
||
|
||
log_success "$success_msg"
|
||
if [[ -n "$next_step" ]]; then
|
||
echo -e "${GREEN}下一步: $next_step${NC}"
|
||
fi
|
||
}
|
||
|
||
# Confirmation prompt with consistent UI
|
||
confirm_action() {
|
||
local action_desc="$1"
|
||
local default_choice="${2:-N}"
|
||
|
||
echo -e "${YELLOW}确认操作: $action_desc${NC}"
|
||
read -p "请输入 'yes' 确认继续，其他任意键取消 [$default_choice]: " -r confirm
|
||
if [[ "$confirm" == "yes" || "$confirm" == "YES" ]]; then
|
||
return 0
|
||
else
|
||
log_info "操作已取消"
|
||
return 1
|
||
fi
|
||
}
|
||
confirm_high_risk_action() {
|
||
local action_desc="$1"
|
||
local risk_desc="$2"
|
||
local impact_desc="$3"
|
||
local backup_desc="$4"
|
||
local confirm_word="${5:-CONFIRM}"
|
||
|
||
echo -e "${RED}${UI_DIVIDER}${NC}"
|
||
echo -e "${RED}高风险数据操作警告${NC}"
|
||
echo -e "${YELLOW}操作:${NC} $action_desc"
|
||
echo -e "${YELLOW}风险:${NC} $risk_desc"
|
||
echo -e "${YELLOW}影响:${NC} $impact_desc"
|
||
echo -e "${YELLOW}建议:${NC} $backup_desc"
|
||
echo -e "${RED}请输入确认词 ${confirm_word} 继续，其他任意输入将取消。${NC}"
|
||
echo -e "${RED}${UI_DIVIDER}${NC}"
|
||
local confirm
|
||
read -p "确认词: " -r confirm
|
||
if [[ "$confirm" == "$confirm_word" ]]; then
|
||
return 0
|
||
fi
|
||
log_warn "未通过高风险确认，操作已取消。"
|
||
return 1
|
||
}
|
||
vm_show_data_risk_banner() {
|
||
# 每会话仅完整展示一次，避免每次重绘菜单都整屏刷同一段风险横幅
|
||
if [[ "${VM_RISK_BANNER_SHOWN:-0}" -eq 1 ]]; then
|
||
return 0
|
||
fi
|
||
VM_RISK_BANNER_SHOWN=1
|
||
echo -e "${RED}${UI_DIVIDER}${NC}"
|
||
echo -e "${RED}以下操作将直接改写 VM 配置、磁盘、快照、克隆、恢复或迁移状态。${NC}"
|
||
echo -e "${RED}本软件会执行您要求它做的事情，不会替您判断对错。${NC}"
|
||
echo -e "${RED}您已被告知风险，请确保备份就绪、窗口明确、命令理解到位。${NC}"
|
||
echo -e "${RED}如果心存疑虑，请停下来——数据无价。${NC}"
|
||
echo -e "${RED}恢复参考: https://pve.u3u.icu/advanced/data-recovery-after-mistake${NC}"
|
||
echo -e "${RED}${UI_DIVIDER}${NC}"
|
||
}
|
||
|
||
LEGAL_VERSION="1.1"
|
||
LEGAL_EFFECTIVE_DATE="2026-04-05"
|
||
ensure_legal_acceptance() {
|
||
local dir="/var/lib/pve-tools"
|
||
local marker="${dir}/legal_acceptance_${LEGAL_VERSION}"
|
||
mkdir -p "$dir" >/dev/null 2>&1 || true
|
||
|
||
if [[ -f "$marker" ]]; then
|
||
return 0
|
||
fi
|
||
|
||
clear
|
||
show_menu_header "许可与服务条款"
|
||
echo -e "继续使用本脚本即表示您同意以下条款："
|
||
echo -e " ${CYAN}ULA${NC}（最终用户许可与使用协议）: https://pve.u3u.icu/ula"
|
||
echo -e " ${CYAN}TOS${NC}（服务条款）: https://pve.u3u.icu/tos"
|
||
echo
|
||
echo -e "${RED}本软件会做您明确告诉它要做的事情，无论那件事情多么荒谬或具有破坏性。${NC}"
|
||
echo -e "${RED}您已被告知所有风险，并已独立决定使用本软件。${NC}"
|
||
echo -e "${RED}从此刻起，您与您的数据之间唯一的屏障就是您自己的谨慎与备份策略。${NC}"
|
||
echo
|
||
echo -e "${YELLOW}最后提醒：如果您仍然心存疑虑，请不要使用本软件。${NC}"
|
||
echo -e "${YELLOW}世界上有许多带有商业支持、附带责任保险的成熟 PVE 管理工具，您可以考虑购买它们。${NC}"
|
||
echo
|
||
echo -e "${YELLOW} 撤回同意: 删除 ${marker}${NC}"
|
||
echo -e "${UI_DIVIDER}"
|
||
echo -n "是否同意协议并继续？(Y/N): "
|
||
local ans
|
||
read -n 1 -r ans
|
||
echo
|
||
if [[ "$ans" == "Y" || "$ans" == "y" ]]; then
|
||
printf '%s\n' "accepted_version=${LEGAL_VERSION}" "accepted_effective_date=${LEGAL_EFFECTIVE_DATE}" "accepted_time=$(date +%F\ %T)" > "$marker" 2>/dev/null || true
|
||
log_success "已记录同意条款，后续将自动跳过许可检查。"
|
||
return 0
|
||
fi
|
||
|
||
log_info "未同意条款，退出脚本。"
|
||
exit 0
|
||
}
|
||
|
||
# ============ 配置文件安全管理函数 ============
|
||
|
||
# 备份文件到 /var/backups/pve-tools/
|
||
backup_file() {
|
||
local file_path="$1"
|
||
local result_var="${2:-}"
|
||
local backup_dir="/var/backups/pve-tools"
|
||
|
||
if [[ -z "$file_path" ]]; then
|
||
log_error "backup_file: 缺少文件路径参数"
|
||
return 1
|
||
fi
|
||
|
||
if [[ ! -f "$file_path" ]]; then
|
||
log_warn "文件不存在，跳过备份: $file_path"
|
||
return 1
|
||
fi
|
||
|
||
mkdir -p "$backup_dir" >/dev/null 2>&1 || {
|
||
log_error "无法创建备份目录: $backup_dir"
|
||
return 1
|
||
}
|
||
|
||
local filename timestamp backup_path
|
||
filename="$(basename "$file_path")"
|
||
timestamp="$(date +%Y%m%d_%H%M%S)"
|
||
backup_path="${backup_dir}/${filename}.${timestamp}.bak"
|
||
|
||
if cp -a "$file_path" "$backup_path"; then
|
||
[[ -n "$result_var" ]] && printf -v "$result_var" '%s' "$backup_path"
|
||
log_success "文件已备份: $backup_path"
|
||
return 0
|
||
fi
|
||
|
||
log_error "备份失败: $file_path"
|
||
return 1
|
||
}
|
||
pve_tools_download_url() {
|
||
local url="$1"
|
||
local timeout="${2:-15}"
|
||
|
||
if [[ -z "$url" ]]; then
|
||
return 1
|
||
fi
|
||
|
||
if command -v curl >/dev/null 2>&1; then
|
||
curl -fsSL --connect-timeout "$timeout" --max-time "$timeout" "$url" 2>/dev/null
|
||
elif command -v wget >/dev/null 2>&1; then
|
||
wget -q -T "$timeout" -O - "$url" 2>/dev/null
|
||
else
|
||
return 1
|
||
fi
|
||
}
|
||
pve_tools_download_file() {
|
||
local url="$1"
|
||
local output_file="$2"
|
||
local timeout="${3:-60}"
|
||
|
||
if [[ -z "$url" || -z "$output_file" ]]; then
|
||
return 1
|
||
fi
|
||
|
||
if command -v curl >/dev/null 2>&1; then
|
||
curl -fsSL --connect-timeout 15 --max-time "$timeout" -o "$output_file" "$url" 2>/dev/null
|
||
elif command -v wget >/dev/null 2>&1; then
|
||
wget -q -T "$timeout" -O "$output_file" "$url" 2>/dev/null
|
||
else
|
||
return 1
|
||
fi
|
||
}
|
||
pve_tools_choose_update_urls() {
|
||
local prefer_mirror=0
|
||
local version_url="$VERSION_FILE_URL"
|
||
local update_url="$UPDATE_FILE_URL"
|
||
local script_url="$PVE_TOOLS_SCRIPT_URL"
|
||
|
||
if [[ -n "$USER_COUNTRY_CODE" ]]; then
|
||
prefer_mirror=$USE_MIRROR_FOR_UPDATE
|
||
elif detect_network_region >/dev/null 2>&1; then
|
||
prefer_mirror=$USE_MIRROR_FOR_UPDATE
|
||
fi
|
||
|
||
if [[ "$prefer_mirror" -eq 1 ]]; then
|
||
version_url="${GITHUB_MIRROR_PREFIX}${VERSION_FILE_URL}"
|
||
update_url="${GITHUB_MIRROR_PREFIX}${UPDATE_FILE_URL}"
|
||
script_url="${GITHUB_MIRROR_PREFIX}${PVE_TOOLS_SCRIPT_URL}"
|
||
fi
|
||
|
||
printf '%s|%s|%s|%s\n' "$prefer_mirror" "$version_url" "$update_url" "$script_url"
|
||
}
|
||
pve_tools_version_gt() {
|
||
local newer="$1"
|
||
local current="$2"
|
||
|
||
[[ -n "$newer" && -n "$current" ]] || return 1
|
||
# Strip pre-release suffixes (-beta, -alpha, -rc) so sort -V compares only
|
||
# the numeric version; a pre-release is never newer than its base release.
|
||
local newer_clean="${newer%%-*}"
|
||
local current_clean="${current%%-*}"
|
||
[[ "$(printf '%s\n' "$newer_clean" "$current_clean" | sort -V | tail -n1)" == "$newer_clean" && "$newer_clean" != "$current_clean" ]]
|
||
}
|
||
# 写入配置块（带标记）
|
||
# 用法: apply_block <file> <marker> <content>
|
||
apply_block() {
|
||
local file_path="$1"
|
||
local marker="$2"
|
||
local content="$3"
|
||
|
||
if [[ -z "$file_path" || -z "$marker" ]]; then
|
||
log_error "apply_block: 缺少必需参数"
|
||
return 1
|
||
fi
|
||
|
||
# 先备份文件
|
||
backup_file "$file_path"
|
||
|
||
# 移除旧的配置块（如果存在）
|
||
remove_block "$file_path" "$marker"
|
||
|
||
# 写入新的配置块
|
||
{
|
||
echo "# PVE-TOOLS BEGIN $marker"
|
||
echo "$content"
|
||
echo "# PVE-TOOLS END $marker"
|
||
} >> "$file_path"
|
||
|
||
log_success "配置块已写入: $file_path [$marker]"
|
||
}
|
||
|
||
# 删除配置块（精确匹配标记）
|
||
# 用法: remove_block <file> <marker>
|
||
remove_block() {
|
||
local file_path="$1"
|
||
local marker="$2"
|
||
|
||
if [[ -z "$file_path" || -z "$marker" ]]; then
|
||
log_error "remove_block: 缺少必需参数"
|
||
return 1
|
||
fi
|
||
|
||
if [[ ! -f "$file_path" ]]; then
|
||
log_warn "文件不存在，跳过删除: $file_path"
|
||
return 0
|
||
fi
|
||
|
||
# 使用 sed 删除标记之间的所有内容（包括标记行）
|
||
sed -i "/# PVE-TOOLS BEGIN $marker/,/# PVE-TOOLS END $marker/d" "$file_path"
|
||
|
||
log_info "配置块已删除: $file_path [$marker]"
|
||
}
|
||
|
||
# ============ 配置文件安全管理函数结束 ============
|
||
|
||
# ============ GRUB 参数幂等管理函数 ============
|
||
|
||
# 检查 GRUB_CMDLINE_LINUX_DEFAULT 是否已含指定参数（按 key 精确匹配，不受注释/其他行干扰）
|
||
# 用法: grub_has_param "intel_iommu=on" 或 grub_has_param "intel_iommu"
|
||
grub_has_param() {
|
||
local param_key="${1%%=*}"
|
||
local current_line current_params
|
||
current_line=$(grep '^GRUB_CMDLINE_LINUX_DEFAULT=' /etc/default/grub 2>/dev/null) || return 1
|
||
current_params=$(echo "$current_line" | sed 's/^GRUB_CMDLINE_LINUX_DEFAULT="\(.*\)"$/\1/')
|
||
local -a items=()
|
||
read -r -a items <<< "$current_params"
|
||
local item
|
||
for item in "${items[@]}"; do
|
||
[[ "${item%%=*}" == "$param_key" ]] && return 0
|
||
done
|
||
return 1
|
||
}
|
||
|
||
# 添加 GRUB 参数（幂等操作，不会重复添加）
|
||
# 用法: grub_add_param "intel_iommu=on"
|
||
grub_add_param() {
|
||
local param="$1"
|
||
|
||
if [[ -z "$param" ]]; then
|
||
log_error "grub_add_param: 缺少参数"
|
||
return 1
|
||
fi
|
||
|
||
# 备份 GRUB 配置
|
||
backup_file "/etc/default/grub"
|
||
|
||
# 读取当前的 GRUB_CMDLINE_LINUX_DEFAULT 值
|
||
local current_line=$(grep '^GRUB_CMDLINE_LINUX_DEFAULT=' /etc/default/grub)
|
||
|
||
if [[ -z "$current_line" ]]; then
|
||
log_error "未找到 GRUB_CMDLINE_LINUX_DEFAULT 配置"
|
||
return 1
|
||
fi
|
||
|
||
# 提取引号内的参数
|
||
local current_params=$(echo "$current_line" | sed 's/^GRUB_CMDLINE_LINUX_DEFAULT="\(.*\)"$/\1/')
|
||
|
||
# 数组化精确增删：按空格切分后逐项比对 key（'=' 前部分），
|
||
# 避免旧正则 \b$key[^ ]* 在 key 含 '.' 等元字符时的前缀误伤/误删
|
||
local param_key="${param%%=*}"
|
||
local -a items=() kept=()
|
||
read -r -a items <<< "$current_params"
|
||
local item
|
||
for item in "${items[@]}"; do
|
||
if [[ "${item%%=*}" != "$param_key" ]]; then
|
||
kept+=("$item")
|
||
fi
|
||
done
|
||
kept+=("$param")
|
||
|
||
local new_params="${kept[*]}"
|
||
|
||
# 写回配置文件
|
||
sed -i "s|^GRUB_CMDLINE_LINUX_DEFAULT=.*|GRUB_CMDLINE_LINUX_DEFAULT=\"$new_params\"|" /etc/default/grub
|
||
|
||
log_success "GRUB 参数已添加: $param"
|
||
}
|
||
|
||
# 删除 GRUB 参数（精确删除，不影响其他参数）
|
||
# 用法: grub_remove_param "intel_iommu=on" 或 grub_remove_param "intel_iommu"
|
||
grub_remove_param() {
|
||
local param="$1"
|
||
|
||
if [[ -z "$param" ]]; then
|
||
log_error "grub_remove_param: 缺少参数"
|
||
return 1
|
||
fi
|
||
|
||
# 备份 GRUB 配置
|
||
backup_file "/etc/default/grub"
|
||
|
||
# 读取当前的 GRUB_CMDLINE_LINUX_DEFAULT 值
|
||
local current_line=$(grep '^GRUB_CMDLINE_LINUX_DEFAULT=' /etc/default/grub)
|
||
|
||
if [[ -z "$current_line" ]]; then
|
||
log_error "未找到 GRUB_CMDLINE_LINUX_DEFAULT 配置"
|
||
return 1
|
||
fi
|
||
|
||
# 提取引号内的参数
|
||
local current_params=$(echo "$current_line" | sed 's/^GRUB_CMDLINE_LINUX_DEFAULT="\(.*\)"$/\1/')
|
||
|
||
# 数组化精确删除：按 key 匹配（兼容传入 "key" 与 "key=value" 两种形式）
|
||
local param_key="${param%%=*}"
|
||
local -a items=() kept=()
|
||
read -r -a items <<< "$current_params"
|
||
local item
|
||
for item in "${items[@]}"; do
|
||
if [[ "${item%%=*}" == "$param_key" ]]; then
|
||
continue
|
||
fi
|
||
kept+=("$item")
|
||
done
|
||
|
||
local new_params="${kept[*]}"
|
||
|
||
# 写回配置文件
|
||
sed -i "s|^GRUB_CMDLINE_LINUX_DEFAULT=.*|GRUB_CMDLINE_LINUX_DEFAULT=\"$new_params\"|" /etc/default/grub
|
||
|
||
log_success "GRUB 参数已删除: $param"
|
||
}
|
||
|
||
# ============ GRUB 参数幂等管理函数结束 ============
|
||
|
||
# Enhanced visual feedback function
|
||
show_status() {
|
||
local status="$1"
|
||
local message="$2"
|
||
local color="$3"
|
||
|
||
case $status in
|
||
"info")
|
||
echo -e "${CYAN}[INFO]${NC} $message"
|
||
;;
|
||
"success")
|
||
echo -e "${GREEN}[ OK! ]${NC} $message"
|
||
;;
|
||
"warning")
|
||
echo -e "${YELLOW}[WARN]${NC} $message"
|
||
;;
|
||
"error")
|
||
echo -e "${RED}[FAIL]${NC} $message"
|
||
;;
|
||
"step")
|
||
echo -e "${MAGENTA}[STEP]${NC} $message"
|
||
;;
|
||
*)
|
||
echo -e "${WHITE}[$status]${NC} $message"
|
||
;;
|
||
esac
|
||
}
|
||
|
||
pause_function() {
|
||
echo -n "按任意键继续... "
|
||
read -n 1 -s input
|
||
if [[ -n ${input} ]]; then
|
||
echo -e "\b
|
||
"
|
||
fi
|
||
}
|
||
|
||
|
||
|
||
#--------------开启硬件直通----------------
|
||
# 开启硬件直通
|
||
show_menu_header() {
|
||
local title="$1"
|
||
echo -e "${UI_BORDER}"
|
||
echo -e " ${H2}${title}${NC}"
|
||
echo -e "${UI_DIVIDER}"
|
||
}
|
||
show_menu_footer() {
|
||
echo -e "${UI_FOOTER}"
|
||
}
|
||
show_menu_option() {
|
||
local num="$1"
|
||
local desc="$2"
|
||
if [[ -z "$desc" ]]; then
|
||
# 仅作为消息或标题显示
|
||
echo -e " ${H2}$num${NC}"
|
||
else
|
||
printf " ${PRIMARY}%-3s${NC}. %s\\n" "$num" "$desc"
|
||
fi
|
||
}
|
||
|
||
# 镜像源选择函数
|