mirror of
https://github.com/MacRimi/ProxMenux.git
synced 2026-09-14 18:56:52 +00:00
MacRimi
085cbf7e68
The change journal exists so a sysadmin sees what ProxMenux changed on the host — its own configuration, packages and services — not how it uses the host or configures a guest. Several scripts recorded operations that are neither: disk passthrough to a VM, container conversions, VM import/export, mounting a share into an LXC. Those are restored to their original, uninstrumented form. Scripts that operate on the host while also installing a package now record only the package: format-disk keeps its exFAT-tools install, the UUP ISO builder its build dependencies, and the share/host scripts their packages, services and /etc/fstab writes, while the mount and unmount operations they used to log are dropped. The page now reads in three sections: what ProxMenux optimized after install (each function under its menu name), what its other host scripts changed (by script), and what it installed (packages and utilities, each referencing the script that installed it). A file reads as created or modified with its diff, a service shows its state transition, and the undo line appears only when a revert is possible.
145 lines
4.6 KiB
Bash
145 lines
4.6 KiB
Bash
#!/bin/bash
|
|
|
|
# ==========================================================
|
|
# ProxMenu - LXC Unprivileged to Privileged Converter
|
|
# ==========================================================
|
|
# Author : MacRimi
|
|
# Copyright : (c) 2024 MacRimi
|
|
# License : (GPL-3.0) (https://github.com/MacRimi/ProxMenux/blob/main/LICENSE)
|
|
# Version : 2.0
|
|
# Last Updated: 19/08/2025
|
|
# ==========================================================
|
|
# Description:
|
|
# This script converts an unprivileged LXC container to a privileged one
|
|
# by directly modifying the configuration file.
|
|
# WARNING: This reduces security. Use only when necessary.
|
|
# ==========================================================
|
|
|
|
# Configuration ============================================
|
|
LOCAL_SCRIPTS="/usr/local/share/proxmenux/scripts"
|
|
BASE_DIR="/usr/local/share/proxmenux"
|
|
UTILS_FILE="$BASE_DIR/utils.sh"
|
|
VENV_PATH="/opt/googletrans-env"
|
|
|
|
if [[ -f "$UTILS_FILE" ]]; then
|
|
source "$UTILS_FILE"
|
|
fi
|
|
|
|
load_language
|
|
initialize_cache
|
|
|
|
# ==========================================================
|
|
|
|
|
|
|
|
select_unprivileged_container() {
|
|
|
|
CONTAINERS=$(pct list | awk 'NR>1 {print $1, $3}' | while read id name; do
|
|
if pct config "$id" | grep -q "^unprivileged: 1"; then
|
|
echo "$id" "$name"
|
|
fi
|
|
done | xargs -n2)
|
|
|
|
if [ -z "$CONTAINERS" ]; then
|
|
msg_error "$(translate 'No unprivileged containers available in Proxmox.')"
|
|
exit 1
|
|
fi
|
|
cleanup
|
|
CONTAINER_ID=$(whiptail --title "$(translate 'Select Unprivileged Container')" \
|
|
--menu "$(translate 'Select the unprivileged LXC container to convert:')" 20 70 10 $CONTAINERS 3>&1 1>&2 2>&3)
|
|
|
|
if [ -z "$CONTAINER_ID" ]; then
|
|
msg_error "$(translate 'No container selected. Exiting.')"
|
|
exit 1
|
|
fi
|
|
|
|
msg_ok "$(translate 'Unprivileged container selected:') $CONTAINER_ID"
|
|
}
|
|
|
|
show_backup_warning() {
|
|
if ! whiptail --title "$(translate 'Backup Recommendation')" \
|
|
--yes-button "$(translate 'Continue')" \
|
|
--no-button "$(translate 'Exit')" \
|
|
--yesno "$(translate 'It is recommended to create a backup before continuing.')" \
|
|
12 70; then
|
|
msg_info "$(translate 'Operation cancelled by user to create backup.')"
|
|
exit 0
|
|
fi
|
|
|
|
}
|
|
|
|
convert_to_privileged() {
|
|
CONF_FILE="/etc/pve/lxc/$CONTAINER_ID.conf"
|
|
|
|
CONTAINER_STATUS=$(pct status "$CONTAINER_ID" | awk '{print $2}')
|
|
|
|
if [ "$CONTAINER_STATUS" == "running" ]; then
|
|
msg_info "$(translate 'Stopping container') $CONTAINER_ID..."
|
|
pct shutdown "$CONTAINER_ID"
|
|
|
|
# Wait for container to stop
|
|
for i in {1..10}; do
|
|
sleep 1
|
|
if [ "$(pct status "$CONTAINER_ID" | awk '{print $2}')" != "running" ]; then
|
|
break
|
|
fi
|
|
done
|
|
|
|
# Verify container stopped
|
|
if [ "$(pct status "$CONTAINER_ID" | awk '{print $2}')" == "running" ]; then
|
|
msg_error "$(translate 'Failed to stop the container.')"
|
|
exit 1
|
|
fi
|
|
|
|
msg_ok "$(translate 'Container stopped.')"
|
|
else
|
|
msg_ok "$(translate 'Container is already stopped.')"
|
|
fi
|
|
|
|
msg_info "$(translate 'Creating backup of configuration file...')"
|
|
cp "$CONF_FILE" "$CONF_FILE.bak"
|
|
msg_ok "$(translate 'Configuration backup created:') $CONF_FILE.bak"
|
|
|
|
msg_info "$(translate 'Converting container to privileged...')"
|
|
sed -i '/^unprivileged: 1/d' "$CONF_FILE"
|
|
echo "unprivileged: 0" >> "$CONF_FILE"
|
|
|
|
msg_ok "$(translate 'Container successfully converted to privileged.')"
|
|
|
|
echo -e
|
|
msg_success "Press Enter to continue..."
|
|
read -r
|
|
}
|
|
|
|
finalize_conversion() {
|
|
|
|
if whiptail --yesno "$(translate 'Do you want to start the privileged container') $CONTAINER_ID $(translate 'now?')" 10 60; then
|
|
msg_info "$(translate 'Starting privileged container...')"
|
|
pct start "$CONTAINER_ID"
|
|
msg_ok "$(translate 'Privileged container') $CONTAINER_ID $(translate 'started successfully.')"
|
|
fi
|
|
}
|
|
|
|
main() {
|
|
|
|
show_proxmenux_logo
|
|
msg_title "$(translate "LXC Unprivileged to Privileged conversion")"
|
|
msg_info "$(translate 'Starting LXC Unprivileged to Privileged conversion process...')"
|
|
|
|
|
|
select_unprivileged_container
|
|
show_backup_warning
|
|
convert_to_privileged
|
|
finalize_conversion
|
|
|
|
msg_ok "$(translate 'LXC conversion from unprivileged to privileged completed successfully!')"
|
|
msg_ok "$(translate 'Converted container ID:') $CONTAINER_ID"
|
|
echo -e
|
|
msg_success "$(translate "Press Enter to return to menu...")"
|
|
read -r
|
|
exit 0
|
|
}
|
|
|
|
# Execute main function
|
|
main
|