「PVE」那个背后的存在

# 编辑GRUB文件（/etc/default/grub），增加如下
intel_iommu=on iommu=pt pcie_acs_override=downstream,multifunction video=efifb:off,vesafb:off,simplefb:off,vesa:off
# 创建并编辑黑名单（/etc/modprobe.d/blacklist.conf），屏蔽驱动
blacklist nvidiafb
blacklist snd_hda_intel
blacklist snd_hda_codec_hdmi
blacklist i915
# 查询核显、声卡ID
lspci -n | grep -E "0300|0403"
# 输出为
 # 00:02.0 0300: 8086:5912 (rev 04)
 # 00:1f.3 0403: 8086:a2f0
# 绑定核显、声卡到vfio
echo "options vfio-pci ids=8086:5912,8086:a2f0" > /etc/modprobe.d/vfio.conf
# 更新配置
update-initramfs -u -k all
# 重启物理机

mv /etc/apt/sources.list.d/pve-enterprise.list /etc/apt/sources.list.d/pve-enterprise.list.bak
# 屏蔽订阅企业源
wget https://mirrors.ustc.edu.cn/proxmox/debian/proxmox-release-bookworm.gpg -O /etc/apt/trusted.gpg.d/proxmox-release-bookworm.gpg
echo "deb https://mirrors.ustc.edu.cn/proxmox/debian bookworm pve-no-subscription" > /etc/apt/sources.list.d/pve-no-subscription.list
# 使用 Proxmox 非企业版中科大源
sed -i 's|^deb http://ftp.debian.org|deb https://mirrors.ustc.edu.cn|g' /etc/apt/sources.list
sed -i 's|^deb http://security.debian.org|deb https://mirrors.ustc.edu.cn/debian-security|g' /etc/apt/sources.list
# 将 Debian 官方源替换为中科大源
echo "deb https://mirrors.ustc.edu.cn/proxmox/debian/ceph-quincy bookworm no-subscription" > /etc/apt/sources.list.d/ceph.list
# 替换 Ceph 源
sed -i 's|http://download.proxmox.com|https://mirrors.ustc.edu.cn/proxmox|g' /usr/share/perl5/PVE/APLInfo.pm
# 替换 CT 镜像下载源（重启 PVE 才能生效）
apt update 
# 更新源列表
apt upgrade 
# 升级软件包
apt dist-upgrade 
# 升级系统
apt install openvswitch-switch
# 安装OVS

cat <<EOF > /etc/rc.local
#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.

ethtool -s enp4s0 wol g

exit 0
EOF

chmod +x /etc/rc.local
systemctl start rc-local

sh -c 'cat > /etc/systemd/system/enable-wol.service <<EOF
[Unit]
Description=Enable Wake-on-LAN (WOL) for enp4s0
After=network.target

[Service]
Type=oneshot
ExecStart=/sbin/ethtool -s enp4s0 wol g
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target
EOF'

chmod 644 /etc/systemd/system/enable-wol.service
systemctl daemon-reload
systemctl enable enable-wol.service
# systemctl start enable-wol.service  # 立即运行一次

# 使用NFS挂载（使用 SAMBA 挂载然后映射到 docker 中总是无法启动 jellyfin 应用）
apt update && apt install nfs-common -y

# make mount dirs
mkdir -p /mnt/share/nfs/jellyfin && \
mkdir -p /mnt/share/nfs/general && \
mkdir -p /mnt/share/nfs/av/official && \
mkdir -p /mnt/share/nfs/anim/official

# test mount
mount -t nfs aio.nas.yirami.xyz:/mnt/YDisk/YArk/APPS/jellyfin /mnt/share/nfs/jellyfin
mount -t nfs aio.nas.yirami.xyz:/mnt/YDisk/YArk/General /mnt/share/nfs/general
mount -t nfs aio.nas.yirami.xyz:/mnt/YDisk/YArk/Restricted/AdultVideo/official /mnt/share/nfs/av/official
mount -t nfs aio.nas.yirami.xyz:/mnt/YDisk/YArk/Restricted/Animation/official /mnt/share/nfs/anim/official

# umount them
umount /mnt/share/nfs/jellyfin
umount /mnt/share/nfs/general
umount /mnt/share/nfs/av/official
umount /mnt/share/nfs/anim/official

# create service file to /etc/systemd/system/

# reload service
systemctl daemon-reload

# auto start after boot
systemctl enable mnt-share-nfs-jellyfin.mount
# systemctl disable mnt-share-nfs-jellyfin.mount

# start mount serivce
systemctl start mnt-share-nfs-jellyfin.mount
# systemctl stop mnt-share-nfs-jellyfin.mount

#! /bin/sh
echo "CPU temp :"
sysctl -a | egrep -E "cpu\.[0-9]+\.temp"
echo
echo "HDD temp :"
for i in $(sysctl -n kern.disks)
do
        DevTemp=`smartctl -a /dev/$i | awk '/Temperature_Celsius/{print $0}' | awk '{print $10 "C"}'`
        DevSerNum=`smartctl -a /dev/$i | awk '/Serial Number:/{print $0}' | awk '{print $3}'`
        DevName=`smartctl -a /dev/$i | awk '/Device Model:/{print $0}' | awk '{print $3}'`
        echo $i $DevTemp $DevSerNum $DevName
done

apt update
#apt install -y nfs-utils
apt install -y nfs-common
# 1. mount nfs version 3 without user/password
mkdir /mnt/share/yirami/DL
mount -t nfs aio.nas.yirami.xyz:/mnt/YDisk/Public/DL /mnt/share/yirami/DL
# 2. detach this mount
umount /mnt/share/yirami/DL
# 3. mount nfs version 4 without user/password
mkdir /mnt/share/yirami/public
mount -t nfs4 aio.nas.yirami.xyz:/mnt/YDisk/Public /mnt/share/yirami/public
# 4. mount nfs version 4 with user/password
#nfs does not, and has never supported user/pass authentication, this was always implemented via kerberos

docker run -d --name mysql \
-v /mnt/share/yirami/mysql:/var/lib/mysql \
-e MYSQL_ROOT_PASSWORD=y@nxtcloud \
-e MYSQL_DATABASE=nextcloud \
-e MYSQL_USER=yirami \
-e MYSQL_PASSWORD=y@nxtcloud \
-p 3306:3306 \
mysql
# 临时方案
docker run -d --name mysql \
-v /root/mysql:/var/lib/mysql \
-e MYSQL_ROOT_PASSWORD=y@nxtcloud \
-e MYSQL_DATABASE=nextcloud \
-e MYSQL_USER=yirami \
-e MYSQL_PASSWORD=y@nxtcloud \
-p 3306:3306 \
mysql

docker run -d --name nextcloud \
-v /mnt/share/yirami/nextcloud:/var/www/html \
--link mysql:mysql \
-p 8080:80 \
nextcloud
# 临时方案
docker run -d --name nextcloud \
-v /root/nextcloud:/var/www/html \
--link mysql:mysql \
-p 8080:80 \
nextcloud
# web 登录页中 localhost 改为 mysql

# LNMP
wget http://soft.vpser.net/lnmp/lnmp1.7.tar.gz -cO lnmp1.7.tar.gz && tar zxf lnmp1.7.tar.gz && cd lnmp1.7 && ./install.sh lnmp
# MySQL@8.0.20->y@nxtcloud->InnoDB@Y->PHP@7.4.12->Allocator@N
# vhost
lnmp vhost add
# aio.cloud.yirami.xyz->rewrite@y->pathinfo@y->log@n->MySQL@y->`y@nxtcloud`->databasename@`aio_cloud`->databaseusername@`aio_cloud`->`/root/aio.cloud.yirami.xyz.ssl/aio.cloud.yirami.xyz.pem`->`/root/aio.cloud.yirami.xyz.ssl/aio.cloud.yirami.xyz.key`
# Nextcloud
wget https://download.nextcloud.com/server/installer/setup-nextcloud.php
mv setup-nextcloud.php /home/wwwroot/aio.cloud.yirami.xyz/
## pre-download if network is not good
## 1. https://download.nextcloud.com/server/releases/nextcloud-21.0.0.zip
## 2. mv nextcloud-21.0.0.zip /home/wwwroot/aio.cloud.yirami.xyz/nc.zip
# open website then setup
http://aio.cloud.yirami.xyz/setup-nextcloud.php
# install_dir@`.`->user@`yirami`->pw@common
# samba
apt update
apt install -y php-dev libsmbclient libsmbclient-dev php-smbclient smbclient
pecl install smbclient

vim /usr/lib/systemd/system/cloudreve.service
# add
[Unit]
Description=Cloudreve
Documentation=https://docs.cloudreve.org
After=network.target
After=mysqld.service
Wants=network.target

[Service]
WorkingDirectory=/home/wwwroot/aio.cloud.yirami.xyz
ExecStart=/home/wwwroot/aio.cloud.yirami.xyz/cloudreve
Restart=on-abnormal
RestartSec=5s
KillMode=mixed

StandardOutput=null
StandardError=syslog

[Install]
WantedBy=multi-user.target
# then
systemctl daemon-reload
systemctl start cloudreve
systemctl enable cloudreve

// ...[OMITTED]...
	{
	    itemId: 'version',
	    colspan: 2,
	    printBar: false,
	    title: gettext('PVE Manager Version'),
	    textField: 'pveversion',
	    value: ''
	},
	{
	    itemId: 'temperatures',
	    colspan: 2,
	    printBar: false,
	    title: gettext('Temperatures'),
	    textField: 'temperatures',
	    renderer: function(value) {
	        value = value.replace(/Â/g, '');
	        let data = [];
	        let cpus = value.matchAll(/^coretemp-isa-(\d{4})$\n.*?\n((?:Package|Core)[\s\S]*?^\n)+/gm);
	        for (const cpu of cpus) {
	  	        let cpuNumber = parseInt(cpu[1], 10);
	  	        data[cpuNumber] = {
	  	     	    packages: [],
	  	     	    cores: []
	  	        };
	        
	  	        let packages = cpu[2].matchAll(/^Package id \d+:\s*([^°]+).*$/gm);
	  	        for (const package of packages) {
	  	     	    data[cpuNumber]['packages'].push(package[1]);
	  	        }
		    
	            let cores = cpu[2].matchAll(/^Core \d+:\s*([^°]+).*$/gm);
	            for (const core of cores) {
	                data[cpuNumber]['cores'].push(core[1]);
	            }
	        }
		    
	        let output = '';
	        for (const [i, cpu] of data.entries()) {
	            output += `CPU ${i}: `;
	            if (cpu.packages.length > 0) {
	                for (const packageTemp of cpu.packages) {
	                    output += `${packageTemp}°C `;
	                }
	            }
	            if (cpu.cores.length > 0) {
	                output += '(';
	                for (const coreTemp of cpu.cores) {
	                    output += `${coreTemp}, `;
	                }
	                output = output.slice(0, -2);
	                output += ')°C';
	            }
	            output += ' | ';
	        }

	        let boardTemp = value.match(/^acpitz-acpi-\d+$\n.*?\n^temp1:\s*([^°]+).*$/m);
	        if (boardTemp.length > 0) {
	            output += `Board: ${boardTemp[1]}°C | `
	        }
	        output = output.slice(0, -3);
		    
	        return output;
	    }
	},
	{
	    itemId: 'hdd-temperatures',
	    colspan: 2,
	    printBar: false,
	    title: gettext('HDD Temperatures'),
	    textField: 'hdd_temperatures',
	    renderer: function(value) {
	        value = value.replace(/Â/g, '');
	        return value.replace(/\n/g, '<br>')
	    }
	}

// ...[OMITTED]...