mirror of
https://github.com/MacRimi/ProxMenux.git
synced 2026-09-29 18:16:43 +00:00
MacRimiandClaude Opus 5
bcabcb618c
Adds the OCI manager: an engine that turns a Docker Compose file into an LXC definition, a catalog of 365 applications drawn from LinuxServer.io and other container image sources, and a per-instance registry recording what each container was built from. Reachable from the main menu. Catalog text is translated like every other string in the project: the taglines go through translate() and land in lang/*.json, so the entries read in all eight languages instead of only English. Translation cache builder: - a failed translation leaves the key absent rather than writing English, which previously made the string count as translated forever - a result identical to a 3+ word source is rejected, catching a provider that silently returns the text it was given - strings that are nothing but glossary terms keep their source spelling instead of being discarded as failures - no backoff between attempts when the provider is deterministic - application names are protected so "HAOS One" survives translation - argos joins the provider list, and the workflow reads the OCI sources Audit & Report: - findings that moved in the wrong direction between runs are reported alongside the ones that improved - an accepted risk can carry a review date and is flagged when it falls due - backup checks explain in plain language what they looked at and what to do next Monitor: - disks can be excluded from periodic reads, and an idle disk says so instead of showing a stale temperature - per-disk identity survives a controller or enclosure change - scheduled Borg backups resolve their SSH key from the repository entry - PVE upgrades log the package list and the resulting dpkg changes The web build no longer copies scripts/ into public/: the documentation links to GitHub, so nothing read that folder. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
82 lines
4.4 KiB
Bash
Executable File
82 lines
4.4 KiB
Bash
Executable File
# Shared NVIDIA runtime setup for native OCI installers.
|
|
# Sourced by the installers: uses their msg_*, translate, oci_log and die.
|
|
configure_nvidia_runtime() {
|
|
local inventory path source target runtime_mode hook_hash hook_path capabilities
|
|
local device_count=0 mount_count=0
|
|
declare -A configured_paths=()
|
|
msg_info "$(translate "Preparing the NVIDIA GPU...")"
|
|
command -v nvidia-smi >/dev/null 2>&1 \
|
|
|| die "$(translate "The image requests NVIDIA, but the host has no working NVIDIA driver")"
|
|
nvidia-smi -L >/dev/null 2>&1 \
|
|
|| die "$(translate "The host NVIDIA driver is not responding correctly")"
|
|
command -v nvidia-container-cli >/dev/null 2>&1 \
|
|
|| die "$(translate "NVIDIA Container Toolkit is missing on the host (nvidia-container-cli)")"
|
|
runtime_mode=$(jq -r '.runtime_mode // "static"' <<<"$DEVICE")
|
|
[[ $runtime_mode == static || $runtime_mode == dynamic ]] \
|
|
|| die "$(translate "Unsupported NVIDIA mode:") $runtime_mode"
|
|
if [[ $runtime_mode == dynamic ]]; then
|
|
[[ $UNPRIVILEGED_FLAG == 1 ]] || die "$(translate "The dynamic NVIDIA profile requires an unprivileged LXC")"
|
|
[[ -f ${SCRIPT_DIR}/nvidia_lxc_mount_lab.sh ]] || die "$(translate "The dynamic NVIDIA hook is missing")"
|
|
capabilities=$(jq -r '[.environment[]? | select(.name == "NVIDIA_DRIVER_CAPABILITIES") | .value] | last // "compute,utility,video"' "$DEPLOYMENT_FILE")
|
|
[[ $capabilities == all || $capabilities =~ ^(compute|utility|video|graphics|display|compat32)(,(compute|utility|video|graphics|display|compat32))*$ ]] \
|
|
|| die "$(translate "Unsupported dynamic NVIDIA capabilities:") $capabilities"
|
|
hook_hash=$(sha256sum "${SCRIPT_DIR}/nvidia_lxc_mount_lab.sh" | awk '{print $1}')
|
|
hook_path="/usr/local/lib/proxmenux/oci/nvidia-mount-${hook_hash}.sh"
|
|
install -d -m 0755 /usr/local/lib/proxmenux/oci
|
|
if [[ -e $hook_path || -L $hook_path ]]; then
|
|
[[ ! -L $hook_path && $(sha256sum "$hook_path" | awk '{print $1}') == "$hook_hash" ]] \
|
|
|| die "$(translate "The persistent NVIDIA hook does not match the installer:") $hook_path"
|
|
else
|
|
install -m 0755 "${SCRIPT_DIR}/nvidia_lxc_mount_lab.sh" "$hook_path"
|
|
fi
|
|
printf 'lxc.environment: NVIDIA_VISIBLE_DEVICES=all\nlxc.environment: NVIDIA_DRIVER_CAPABILITIES=%s\nlxc.hook.mount: %s\n' \
|
|
"$capabilities" "$hook_path" >>"$CONF"
|
|
fi
|
|
|
|
inventory=$(mktemp /tmp/proxmenux-nvidia-inventory.XXXXXX)
|
|
if ! nvidia-container-cli list --device all --libraries --binaries --firmwares --ipcs \
|
|
2>>"${OCI_LOG:-/dev/null}" | sort -u >"$inventory"; then
|
|
rm -f "$inventory"
|
|
die "$(translate "NVIDIA Container Toolkit could not generate the runtime inventory")"
|
|
fi
|
|
while IFS= read -r path; do
|
|
[[ $path == /* && $path != *[[:space:]]* && $path != *","* ]] || continue
|
|
[[ -z ${configured_paths[$path]+x} ]] || continue
|
|
if [[ -c $path ]]; then
|
|
add_character_device "$path" preserve-host host-device-gid 0
|
|
if [[ -n ${NVIDIA_GID_ENV:-} ]]; then
|
|
append_deployment_environment_csv "$NVIDIA_GID_ENV" "$(stat -c '%g' "$path")"
|
|
fi
|
|
device_count=$((device_count + 1))
|
|
elif [[ -f $path ]]; then
|
|
if [[ $runtime_mode == dynamic ]]; then
|
|
continue
|
|
fi
|
|
source=$(readlink -f "$path")
|
|
[[ -f $source ]] || continue
|
|
target=$path
|
|
prepare_file_mount_target "$target"
|
|
target=$PREPARED_FILE_TARGET
|
|
prepare_nvidia_driver_links "$source" "$target"
|
|
printf 'lxc.mount.entry: %s %s none ro,bind,create=file 0 0\n' \
|
|
"$source" "${target#/}" >>"$CONF"
|
|
mount_count=$((mount_count + 1))
|
|
else
|
|
continue
|
|
fi
|
|
configured_paths[$path]=1
|
|
done <"$inventory"
|
|
rm -f "$inventory"
|
|
(( device_count > 0 )) || die "$(translate "The official inventory contains no NVIDIA devices")"
|
|
[[ $runtime_mode == dynamic ]] || (( mount_count > 0 )) \
|
|
|| die "$(translate "The official inventory contains no NVIDIA driver components")"
|
|
NVIDIA_RUNTIME_CONFIGURED=1
|
|
if [[ $runtime_mode == dynamic ]]; then
|
|
oci_log "Dynamic NVIDIA runtime prepared: $device_count native devices; libraries resolved by the Toolkit at every start"
|
|
msg_ok "$(translate "NVIDIA GPU prepared:") $device_count $(translate "devices (dynamic runtime)")"
|
|
return
|
|
fi
|
|
oci_log "NVIDIA runtime prepared from NVIDIA Container Toolkit: $device_count devices and $mount_count read-only components"
|
|
msg_ok "$(translate "NVIDIA GPU prepared:") $device_count $(translate "devices") · $mount_count $(translate "driver components")"
|
|
}
|