mirror of
https://github.com/MacRimi/ProxMenux.git
synced 2026-09-16 11:46:45 +00:00
MacRimiandClaude Opus 5
da8a480eff
ProxMenux modifies the host: it rewrites configuration files, installs packages, enables services. Until now nobody could say afterwards what had changed, and showing the script does not answer that question — a four-hundred-line function may alter two values, and the reader has no way to know which two. This adds the two halves of an answer. The change journal records what ProxMenux does as it does it. Eleven bash primitives capture the previous state, apply the change and record it in the same step, writing to a spool that the Monitor reads back. One hundred and thirteen functions across twenty-five scripts are instrumented, covering post-install, shared storage, security tooling, container conversions, disk operations and the PVE 8 to 9 upgrade path. The page shows the difference — rotate 7 becoming rotate 14 — and never the script. Restore and backup scripts are deliberately left out: a restore puts the host back to a state some other script already recorded. The Audit and reports page answers the other half: what state is this host in, regardless of who put it there. Forty-three checks across seven areas read the host and classify each result as critical, warning, observation, conformant, unverified or not applicable, with the evidence they read attached to each one. A declared policy lets the reader say what this particular host is expected to do — which guests must have a backup, which storages are essential — so the report judges the host against its own intent rather than a generic template. An inventory records the hardware, network and guest topology behind those readings, a comparison shows what moved between two runs, and six report profiles produce a printable document scoped to what the reader needs. Everything is available in the eight supported languages. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
628 lines
25 KiB
Bash
628 lines
25 KiB
Bash
#!/bin/bash
|
|
# ==========================================================
|
|
# ProxMenux - NFS Server Manager for LXC
|
|
# ==========================================================
|
|
# Author : MacRimi
|
|
# Copyright : (c) 2024 MacRimi
|
|
# License : GPL-3.0
|
|
# https://github.com/MacRimi/ProxMenux/blob/main/LICENSE
|
|
# Version : 1.0
|
|
# ==========================================================
|
|
# Description:
|
|
# Manages NFS exports from inside a Proxmox LXC container.
|
|
# Requires a privileged container (the kernel NFS server module
|
|
# needs capabilities that unprivileged CTs do not expose).
|
|
#
|
|
# Features:
|
|
# - Install and configure nfs-kernel-server inside the CT.
|
|
# - Create NFS exports for folders under /mnt.
|
|
# - Set up a universal "sharedfiles" group (GID 101000) on the
|
|
# CT as a convention for cross-CT file sharing.
|
|
# - List configured exports and check service status.
|
|
# - Remove exports cleanly.
|
|
# ==========================================================
|
|
|
|
# Configuration
|
|
LOCAL_SCRIPTS="/usr/local/share/proxmenux/scripts"
|
|
BASE_DIR="/usr/local/share/proxmenux"
|
|
UTILS_FILE="$BASE_DIR/utils.sh"
|
|
|
|
if [[ -f "$UTILS_FILE" ]]; then
|
|
source "$UTILS_FILE"
|
|
fi
|
|
|
|
if [[ -f "$LOCAL_SCRIPTS/global/pmx_journal.sh" ]]; then
|
|
source "$LOCAL_SCRIPTS/global/pmx_journal.sh"
|
|
fi
|
|
|
|
# Load shared functions
|
|
SHARE_COMMON_FILE="$LOCAL_SCRIPTS/global/share-common.func"
|
|
if ! source "$SHARE_COMMON_FILE" 2>/dev/null; then
|
|
msg_error "$(translate "Could not load shared functions. Script cannot continue.")"
|
|
exit 1
|
|
fi
|
|
|
|
load_language
|
|
initialize_cache
|
|
|
|
|
|
select_privileged_lxc
|
|
|
|
|
|
|
|
|
|
setup_universal_sharedfiles_group() {
|
|
local ctid="$1"
|
|
local FUNC_VERSION="1.0"
|
|
pmx_journal_context "setup_universal_sharedfiles_group" "$FUNC_VERSION"
|
|
pmx_record_execution "configure sharedfiles group and UID mappings in CT ${ctid}" \
|
|
"pct exec ${ctid} -- manage sharedfiles group, memberships and remapped users"
|
|
|
|
msg_info "$(translate "Setting sharedfiles group with UID remapping...")"
|
|
|
|
if ! pct exec "$ctid" -- getent group sharedfiles >/dev/null 2>&1; then
|
|
pct exec "$ctid" -- groupadd -g 101000 sharedfiles
|
|
msg_ok "$(translate "Created sharedfiles group (GID: 101000)")"
|
|
else
|
|
local current_gid=$(pct exec "$ctid" -- getent group sharedfiles | cut -d: -f3)
|
|
if [[ "$current_gid" != "101000" ]]; then
|
|
pct exec "$ctid" -- groupmod -g 101000 sharedfiles
|
|
msg_ok "$(translate "Updated sharedfiles group to GID: 101000")"
|
|
else
|
|
msg_ok "$(translate "Sharedfiles group already exists (GID: 101000)")"
|
|
fi
|
|
fi
|
|
|
|
|
|
local lxc_users=$(pct exec "$ctid" -- awk -F: '$3 >= 1000 && $3 < 65534 {print $1 ":" $3}' /etc/passwd)
|
|
|
|
|
|
if [[ -n "$lxc_users" ]]; then
|
|
msg_info "$(translate "Adding existing users to sharedfiles group...")"
|
|
while IFS=: read -r username uid; do
|
|
if [[ -n "$username" ]]; then
|
|
pct exec "$ctid" -- usermod -a -G sharedfiles "$username" 2>/dev/null || true
|
|
msg_ok "$(translate "Added user") $username (UID: $uid) $(translate "to sharedfiles group")"
|
|
fi
|
|
done <<< "$lxc_users"
|
|
fi
|
|
|
|
|
|
# `+ 100000` UID-shift only makes sense in unprivileged containers
|
|
# (UID 0 in CT == UID 100000 on host). `select_privileged_lxc` already
|
|
# gated the flow to privileged CTs above, so the shift is meaningless
|
|
# here and creates phantom `remap_NNNN` accounts that don't map to
|
|
# any real UID. Skip the loop in privileged context. Audit Tier 6 —
|
|
# UID-shift remapping en CTs privilegiados donde no aplica.
|
|
local _is_unpriv=0
|
|
if pct config "$ctid" 2>/dev/null | grep -qE '^unprivileged:\s*1'; then
|
|
_is_unpriv=1
|
|
fi
|
|
local remapped_count=0
|
|
|
|
if (( _is_unpriv == 1 )); then
|
|
msg_info "$(translate "Creating UID remapping for unprivileged container compatibility...")"
|
|
|
|
if [[ -n "$lxc_users" ]]; then
|
|
while IFS=: read -r username uid; do
|
|
if [[ -n "$uid" ]]; then
|
|
local remapped_uid=$((uid + 100000))
|
|
local remapped_username="remap_${uid}"
|
|
|
|
if ! pct exec "$ctid" -- id "$remapped_username" >/dev/null 2>&1; then
|
|
pct exec "$ctid" -- useradd -u "$remapped_uid" -g sharedfiles -s /bin/false -M "$remapped_username" 2>/dev/null || true
|
|
msg_ok "$(translate "Created remapped user") $remapped_username (UID: $remapped_uid)"
|
|
((remapped_count++))
|
|
else
|
|
pct exec "$ctid" -- usermod -g sharedfiles "$remapped_username" 2>/dev/null || true
|
|
fi
|
|
fi
|
|
done <<< "$lxc_users"
|
|
fi
|
|
|
|
|
|
local common_uids=(33 1000 1001 1002)
|
|
for base_uid in "${common_uids[@]}"; do
|
|
local remapped_uid=$((base_uid + 100000))
|
|
local remapped_username="remap_${base_uid}"
|
|
|
|
if ! pct exec "$ctid" -- id "$remapped_username" >/dev/null 2>&1; then
|
|
pct exec "$ctid" -- useradd -u "$remapped_uid" -g sharedfiles -s /bin/false -M "$remapped_username" 2>/dev/null || true
|
|
msg_ok "$(translate "Created common remapped user") $remapped_username (UID: $remapped_uid)"
|
|
((remapped_count++))
|
|
fi
|
|
done
|
|
|
|
msg_ok "$(translate "Universal sharedfiles group configured with") $remapped_count $(translate "remapped users")"
|
|
else
|
|
msg_ok "$(translate "Privileged container — UID-shift remapping skipped (not applicable)")"
|
|
fi
|
|
}
|
|
|
|
|
|
|
|
|
|
select_mount_point() {
|
|
local FUNC_VERSION="1.0"
|
|
pmx_journal_context "select_mount_point" "$FUNC_VERSION"
|
|
|
|
while true; do
|
|
METHOD=$(whiptail --backtitle "ProxMenux" --title "$(translate "Select Folder")" \
|
|
--menu "$(translate "How do you want to select the folder to export?")" 15 60 5 \
|
|
"auto" "$(translate "Select from folders inside /mnt")" \
|
|
"manual" "$(translate "Enter path manually")" \
|
|
3>&1 1>&2 2>&3)
|
|
|
|
if [[ $? -ne 0 ]]; then
|
|
return 1
|
|
fi
|
|
|
|
case "$METHOD" in
|
|
auto)
|
|
DIRS=$(pct exec "$CTID" -- find /mnt -maxdepth 1 -mindepth 1 -type d 2>/dev/null)
|
|
if [[ -z "$DIRS" ]]; then
|
|
whiptail --title "$(translate "No Folders")" --msgbox "$(translate "No folders found inside /mnt in the CT.")" 8 60
|
|
continue
|
|
fi
|
|
|
|
OPTIONS=()
|
|
while IFS= read -r dir; do
|
|
name=$(basename "$dir")
|
|
OPTIONS+=("$dir" "$name")
|
|
done <<< "$DIRS"
|
|
|
|
MOUNT_POINT=$(whiptail --backtitle "ProxMenux" --title "$(translate "Select Folder")" \
|
|
--menu "$(translate "Choose a folder to export:")" 20 60 10 "${OPTIONS[@]}" 3>&1 1>&2 2>&3)
|
|
if [[ $? -ne 0 ]]; then
|
|
return 1
|
|
fi
|
|
[[ -n "$MOUNT_POINT" ]] && return 0
|
|
;;
|
|
manual)
|
|
CT_NAME=$(pct config "$CTID" | awk -F: '/hostname/ {print $2}' | xargs)
|
|
DEFAULT_MOUNT_POINT="/mnt/${CT_NAME}_nfs"
|
|
MOUNT_POINT=$(whiptail --title "$(translate "Mount Point")" \
|
|
--inputbox "$(translate "Enter the mount point for the NFS export (e.g., /mnt/mynfs):")" \
|
|
10 70 "$DEFAULT_MOUNT_POINT" 3>&1 1>&2 2>&3)
|
|
if [[ $? -ne 0 ]]; then
|
|
return 1
|
|
fi
|
|
if [[ -z "$MOUNT_POINT" ]]; then
|
|
whiptail --title "$(translate "Error")" \
|
|
--msgbox "$(translate "No mount point was specified.")" 8 50
|
|
continue
|
|
fi
|
|
pmx_record_execution "create NFS export directory ${MOUNT_POINT} in CT ${CTID}" \
|
|
"pct exec ${CTID} -- mkdir -p ${MOUNT_POINT}"
|
|
pct exec "$CTID" -- mkdir -p "$MOUNT_POINT" 2>/dev/null
|
|
return 0
|
|
;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
get_network_config() {
|
|
NETWORK=$(whiptail --backtitle "ProxMenux" --title "$(translate "Network Configuration")" --menu "\n$(translate "Select network access level:")" 15 70 4 \
|
|
"1" "$(translate "Local network only (192.168.0.0/16)")" \
|
|
"2" "$(translate "Specific subnet (enter manually)")" \
|
|
"3" "$(translate "Specific host (enter IP)")" 3>&1 1>&2 2>&3)
|
|
|
|
case "$NETWORK" in
|
|
1)
|
|
NETWORK_RANGE="192.168.0.0/16"
|
|
;;
|
|
2)
|
|
clear
|
|
NETWORK_RANGE=$(whiptail --inputbox "$(translate "Enter subnet (e.g., 192.168.0.0/24):")" 10 60 "192.168.0.0/24" --title "$(translate "Subnet")" 3>&1 1>&2 2>&3)
|
|
[[ -z "$NETWORK_RANGE" ]] && return 1
|
|
;;
|
|
3)
|
|
dialog
|
|
NETWORK_RANGE=$(whiptail --inputbox "$(translate "Enter host IP (e.g., 192.168.0.100):")" 10 60 --title "$(translate "Host IP")" 3>&1 1>&2 2>&3)
|
|
[[ -z "$NETWORK_RANGE" ]] && return 1
|
|
;;
|
|
*)
|
|
return 1
|
|
;;
|
|
esac
|
|
return 0
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
select_export_options() {
|
|
EXPORT_OPTIONS=$(whiptail --title "$(translate "Export Options")" --menu \
|
|
"\n$(translate "Select export permissions:")" 15 70 3 \
|
|
"1" "$(translate "Read-Write (universal)")" \
|
|
"2" "$(translate "Read-Only")" \
|
|
"3" "$(translate "Custom options")" 3>&1 1>&2 2>&3)
|
|
|
|
case "$EXPORT_OPTIONS" in
|
|
1)
|
|
OPTIONS="rw,sync,no_subtree_check,no_root_squash"
|
|
;;
|
|
2)
|
|
OPTIONS="ro,sync,no_subtree_check,no_root_squash"
|
|
;;
|
|
3)
|
|
OPTIONS=$(whiptail --inputbox "$(translate "Enter custom NFS options:")" \
|
|
10 70 "rw,sync,no_subtree_check,no_root_squash" \
|
|
--title "$(translate "Custom Options")" 3>&1 1>&2 2>&3)
|
|
[[ -z "$OPTIONS" ]] && OPTIONS="rw,sync,no_subtree_check,no_root_squash"
|
|
;;
|
|
*)
|
|
OPTIONS="rw,sync,no_subtree_check,no_root_squash"
|
|
;;
|
|
esac
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
create_nfs_export() {
|
|
local FUNC_VERSION="1.0"
|
|
|
|
show_proxmenux_logo
|
|
msg_title "$(translate "Create LXC server NFS")"
|
|
sleep 2
|
|
|
|
|
|
select_mount_point || return
|
|
get_network_config || return
|
|
select_export_options || return
|
|
|
|
pmx_journal_context "create_nfs_export" "$FUNC_VERSION"
|
|
pmx_record_execution "configure NFS export ${MOUNT_POINT} in CT ${CTID}" \
|
|
"install and enable NFS services, update /etc/exports and reload exports"
|
|
|
|
|
|
msg_ok "$(translate "Directory successfully.")"
|
|
|
|
|
|
if ! pct exec "$CTID" -- dpkg -s nfs-kernel-server &>/dev/null; then
|
|
msg_info "$(translate "Installing NFS server packages inside the CT...")"
|
|
pct exec "$CTID" -- bash -c "apt-get update && apt-get install -y nfs-kernel-server nfs-common rpcbind"
|
|
pct exec "$CTID" -- systemctl --now enable rpcbind nfs-kernel-server
|
|
msg_ok "$(translate "NFS server installed successfully.")"
|
|
else
|
|
msg_ok "$(translate "NFS server is already installed.")"
|
|
fi
|
|
|
|
|
|
setup_universal_sharedfiles_group "$CTID"
|
|
|
|
|
|
msg_info "$(translate "Setting directory ownership and permissions...")"
|
|
# Hand off ownership/perm setup to the shared helper. It detects the
|
|
# underlying filesystem (ext4/xfs/zfs/exfat/ntfs-fuse/…), picks the
|
|
# right strategy (chown+chmod, ACLs, or just inform the user when
|
|
# the FS can't carry POSIX permissions), and verifies the result
|
|
# with `runuser`. Empty username — NFS doesn't authenticate per-user
|
|
# the way Samba does; the `sharedfiles` group is all we need.
|
|
pmx_setup_share_permissions "$CTID" "$MOUNT_POINT" ""
|
|
|
|
|
|
|
|
EXPORT_LINE="$MOUNT_POINT $NETWORK_RANGE($OPTIONS)"
|
|
|
|
|
|
if pct exec "$CTID" -- grep -q "^$MOUNT_POINT " /etc/exports; then
|
|
if dialog --yesno "$(translate "Do you want to update the existing export?")" \
|
|
10 60 --title "$(translate "Update Export")"; then
|
|
pct exec "$CTID" -- sed --in-place "\|^$MOUNT_POINT |d" /etc/exports
|
|
pct exec "$CTID" -- bash -c "printf '%s\\n' '$EXPORT_LINE' | tee -a /etc/exports >/dev/null"
|
|
show_proxmenux_logo
|
|
msg_title "$(translate "Create LXC server NFS")"
|
|
msg_ok "$(translate "Directory successfully.")"
|
|
msg_ok "$(translate "Export updated successfully.")"
|
|
msg_ok "$(translate "NFS server is already installed.")"
|
|
msg_ok "$(translate "Directory configured with sharedfiles group ownership")"
|
|
|
|
fi
|
|
else
|
|
pct exec "$CTID" -- bash -c "printf '%s\\n' '$EXPORT_LINE' | tee -a /etc/exports >/dev/null"
|
|
msg_ok "$(translate "Export added successfully.")"
|
|
fi
|
|
|
|
|
|
pct exec "$CTID" -- systemctl restart rpcbind nfs-kernel-server
|
|
pct exec "$CTID" -- exportfs -ra
|
|
|
|
|
|
CT_IP=$(pct exec "$CTID" -- hostname -I | awk '{print $1}')
|
|
|
|
echo -e ""
|
|
msg_ok "$(translate "NFS export created successfully!")"
|
|
echo -e ""
|
|
echo -e "${TAB}${BOLD}$(translate "Connection details:")${CL}"
|
|
echo -e "${TAB}${BGN}$(translate "Server IP:")${CL} ${BL}$CT_IP${CL}"
|
|
echo -e "${TAB}${BGN}$(translate "Export path:")${CL} ${BL}$MOUNT_POINT${CL}"
|
|
echo -e "${TAB}${BGN}$(translate "Mount options:")${CL} ${BL}$OPTIONS${CL}"
|
|
echo -e "${TAB}${BGN}$(translate "Network access:")${CL} ${BL}$NETWORK_RANGE${CL}"
|
|
echo -e "${TAB}${BGN}$(translate "NFS Version:")${CL} ${BL}Auto-negotiation (NFSv3/NFSv4)${CL}"
|
|
echo -e ""
|
|
|
|
echo -e "${TAB}${BOLD}$(translate "Mount Examples:")${CL}"
|
|
echo -e "${TAB}${BGN}$(translate "Auto-negotiate:")${CL} ${BL}mount -t nfs $CT_IP:$MOUNT_POINT /mnt/nfs${CL}"
|
|
echo -e "${TAB}${BGN}$(translate "Force NFSv4:")${CL} ${BL}mount -t nfs4 $CT_IP:$MOUNT_POINT /mnt/nfs${CL}"
|
|
echo -e "${TAB}${BGN}$(translate "Force NFSv3:")${CL} ${BL}mount -t nfs -o vers=3 $CT_IP:$MOUNT_POINT /mnt/nfs${CL}"
|
|
echo ""
|
|
|
|
msg_success "$(translate "Press Enter to return to menu...")"
|
|
read -r
|
|
}
|
|
|
|
view_exports() {
|
|
show_proxmenux_logo
|
|
msg_title "$(translate "View Current Exports")"
|
|
|
|
echo -e "$(translate "Current NFS exports in CT") $CTID:"
|
|
echo "=================================="
|
|
|
|
if pct exec "$CTID" -- test -f /etc/exports; then
|
|
EXPORTS=$(pct exec "$CTID" -- cat /etc/exports | grep -v '^#' | grep -v '^$')
|
|
if [[ -n "$EXPORTS" ]]; then
|
|
echo "$EXPORTS"
|
|
echo ""
|
|
echo "$(translate "Active exports:")"
|
|
pct exec "$CTID" -- showmount -e localhost 2>/dev/null || echo "$(translate "No active exports or showmount not available")"
|
|
|
|
|
|
echo ""
|
|
echo "$(translate "Universal Group Configuration:")"
|
|
echo "=================================="
|
|
if pct exec "$CTID" -- getent group sharedfiles >/dev/null 2>&1; then
|
|
local group_members=$(pct exec "$CTID" -- getent group sharedfiles | cut -d: -f4)
|
|
local sharedfiles_gid=$(pct exec "$CTID" -- getent group sharedfiles | cut -d: -f3)
|
|
echo "$(translate "Shared group: sharedfiles (GID:") $sharedfiles_gid)"
|
|
|
|
local member_count=$(echo "$group_members" | tr ',' '\n' | wc -l)
|
|
echo "$(translate "Total members:") $member_count $(translate "users")"
|
|
|
|
|
|
local remapped_users=$(pct exec "$CTID" -- getent passwd | grep "^remap_" | wc -l)
|
|
if [[ "$remapped_users" -gt 0 ]]; then
|
|
echo "$(translate "Remapped users:") $remapped_users $(translate "users (for unprivileged compatibility)")"
|
|
fi
|
|
|
|
echo "$(translate "Universal compatibility: ENABLED")"
|
|
echo "$(translate "NFS Version: Auto-negotiation (NFSv3/NFSv4)")"
|
|
else
|
|
echo "$(translate "Universal group: NOT CONFIGURED")"
|
|
fi
|
|
|
|
CT_IP=$(pct exec "$CTID" -- hostname -I | awk '{print $1}')
|
|
|
|
echo ""
|
|
echo "=================================="
|
|
echo -e "${TAB}${BOLD}$(translate "Connection Details:")${CL}"
|
|
echo -e "${TAB}${BGN}$(translate "Server IP:")${CL} ${BL}$CT_IP${CL}"
|
|
while IFS= read -r export_line; do
|
|
if [[ -n "$export_line" ]]; then
|
|
EXPORT_PATH=$(echo "$export_line" | awk '{print $1}')
|
|
echo -e "${TAB}${BGN}$(translate "Export path:")${CL} ${BL}$EXPORT_PATH${CL}"
|
|
echo ""
|
|
fi
|
|
done <<< "$EXPORTS"
|
|
|
|
else
|
|
echo "$(translate "No exports configured.")"
|
|
fi
|
|
else
|
|
echo "$(translate "/etc/exports file does not exist.")"
|
|
fi
|
|
|
|
echo ""
|
|
msg_success "$(translate "Press Enter to return to menu...")"
|
|
read -r
|
|
}
|
|
|
|
delete_export() {
|
|
local FUNC_VERSION="1.0"
|
|
pmx_journal_context "delete_export" "$FUNC_VERSION"
|
|
|
|
if ! pct exec "$CTID" -- test -f /etc/exports; then
|
|
dialog --title "$(translate "Error")" --msgbox "\n$(translate "No exports file found.")" 8 50
|
|
return
|
|
fi
|
|
|
|
EXPORTS=$(pct exec "$CTID" -- awk '!/^#|^$/ {print NR, $0}' /etc/exports)
|
|
if [[ -z "$EXPORTS" ]]; then
|
|
dialog --title "$(translate "No Exports")" --msgbox "$(translate "No exports found in /etc/exports.")" 8 60
|
|
return
|
|
fi
|
|
|
|
OPTIONS=()
|
|
while read -r line; do
|
|
[[ -z "$line" ]] && continue
|
|
NUM=$(echo "$line" | awk '{print $1}')
|
|
EXPORT_LINE=$(echo "$line" | cut -d' ' -f2-)
|
|
EXPORT_PATH=$(echo "$EXPORT_LINE" | awk '{print $1}')
|
|
EXPORT_CLIENT=$(echo "$EXPORT_LINE" | awk '{print $2}' | cut -d'(' -f1)
|
|
[[ -z "$EXPORT_PATH" || -z "$EXPORT_CLIENT" ]] && continue
|
|
OPTIONS+=("$NUM" "$EXPORT_PATH $EXPORT_CLIENT")
|
|
done <<< "$EXPORTS"
|
|
|
|
SELECTED_NUM=$(dialog --title "$(translate "Delete Export")" --menu "$(translate "Select an export to delete:")" 20 70 10 "${OPTIONS[@]}" 3>&1 1>&2 2>&3)
|
|
[ -z "$SELECTED_NUM" ] && return
|
|
|
|
EXPORT_LINE=$(echo "$EXPORTS" | awk -v num="$SELECTED_NUM" '$1 == num {$1=""; print substr($0,2)}')
|
|
|
|
if whiptail --yesno "$(translate "Are you sure you want to delete this export?")\n\n$EXPORT_LINE" 10 70 --title "$(translate "Confirm Deletion")"; then
|
|
show_proxmenux_logo
|
|
msg_title "$(translate "Delete Export")"
|
|
pmx_record_execution "remove NFS export line ${SELECTED_NUM} from CT ${CTID}" \
|
|
"edit /etc/exports and restart nfs-kernel-server"
|
|
pct exec "$CTID" -- sed --in-place "${SELECTED_NUM}d" /etc/exports
|
|
pct exec "$CTID" -- exportfs -ra
|
|
pct exec "$CTID" -- systemctl restart nfs-kernel-server
|
|
msg_ok "$(translate "Export deleted and NFS service restarted.")"
|
|
fi
|
|
|
|
msg_success "$(translate "Press Enter to return to menu...")"
|
|
read -r
|
|
}
|
|
|
|
check_nfs_status() {
|
|
show_proxmenux_logo
|
|
msg_title "$(translate "Check NFS Status")"
|
|
echo -e "$(translate "NFS Service Status in CT") $CTID:"
|
|
echo "=================================="
|
|
|
|
if pct exec "$CTID" -- dpkg -s nfs-kernel-server &>/dev/null; then
|
|
echo "$(translate "NFS Server: INSTALLED")"
|
|
|
|
if pct exec "$CTID" -- systemctl is-active --quiet nfs-kernel-server; then
|
|
echo "$(translate "NFS Service: RUNNING")"
|
|
else
|
|
echo "$(translate "NFS Service: STOPPED")"
|
|
fi
|
|
|
|
if pct exec "$CTID" -- systemctl is-active --quiet rpcbind; then
|
|
echo "$(translate "RPC Bind Service: RUNNING")"
|
|
else
|
|
echo "$(translate "RPC Bind Service: STOPPED")"
|
|
fi
|
|
|
|
|
|
echo ""
|
|
echo "$(translate "NFS Version Configuration:")"
|
|
echo "$(translate "Version: Auto-negotiation (NFSv3/NFSv4)")"
|
|
echo "$(translate "Client determines best version to use")"
|
|
|
|
|
|
echo ""
|
|
echo "$(translate "Universal Group Configuration:")"
|
|
if pct exec "$CTID" -- getent group sharedfiles >/dev/null 2>&1; then
|
|
echo "$(translate "Shared group: CONFIGURED")"
|
|
local group_members=$(pct exec "$CTID" -- getent group sharedfiles | cut -d: -f4)
|
|
local sharedfiles_gid=$(pct exec "$CTID" -- getent group sharedfiles | cut -d: -f3)
|
|
echo "$(translate "Group GID:") $sharedfiles_gid"
|
|
|
|
local member_count=$(echo "$group_members" | tr ',' '\n' | wc -l)
|
|
echo "$(translate "Total members:") $member_count $(translate "users")"
|
|
|
|
local remapped_users=$(pct exec "$CTID" -- getent passwd | grep "^remap_" | wc -l)
|
|
echo "$(translate "Remapped users:") $remapped_users $(translate "users")"
|
|
|
|
echo "$(translate "Universal compatibility: ENABLED")"
|
|
else
|
|
echo "$(translate "Universal group: NOT CONFIGURED")"
|
|
fi
|
|
|
|
echo ""
|
|
echo "$(translate "Listening ports:")"
|
|
pct exec "$CTID" -- ss -tlnp | grep -E ':(111|2049|20048)' || echo "$(translate "No NFS ports found")"
|
|
|
|
else
|
|
echo "$(translate "NFS Server: NOT INSTALLED")"
|
|
fi
|
|
|
|
echo ""
|
|
msg_success "$(translate "Press Enter to return to menu...")"
|
|
read -r
|
|
}
|
|
|
|
uninstall_nfs() {
|
|
local FUNC_VERSION="1.0"
|
|
pmx_journal_context "uninstall_nfs" "$FUNC_VERSION"
|
|
|
|
if ! pct exec "$CTID" -- dpkg -s nfs-kernel-server &>/dev/null; then
|
|
dialog --title "$(translate "NFS Not Installed")" --msgbox "\n$(translate "NFS server is not installed in this CT.")" 8 60
|
|
return
|
|
fi
|
|
|
|
if ! whiptail --title "$(translate "Uninstall NFS Server")" \
|
|
--yesno "$(translate "WARNING: This will completely remove NFS server from the CT.")\n\n$(translate "This action will:")\n$(translate "• Stop all NFS services")\n$(translate "• Remove all exports")\n$(translate "• Uninstall NFS packages")\n$(translate "• Remove universal sharedfiles group")\n$(translate "• Clean up remapped users")\n\n$(translate "Are you sure you want to continue?")" \
|
|
18 70; then
|
|
return
|
|
fi
|
|
|
|
show_proxmenux_logo
|
|
msg_title "$(translate "Uninstall NFS Server")"
|
|
pmx_record_execution "uninstall NFS server from CT ${CTID}" \
|
|
"stop and disable NFS services, clear exports, remove users, groups and packages"
|
|
|
|
msg_info "$(translate "Stopping NFS services...")"
|
|
pct exec "$CTID" -- systemctl stop nfs-kernel-server 2>/dev/null || true
|
|
pct exec "$CTID" -- systemctl stop rpcbind 2>/dev/null || true
|
|
pct exec "$CTID" -- systemctl disable nfs-kernel-server 2>/dev/null || true
|
|
pct exec "$CTID" -- systemctl disable rpcbind 2>/dev/null || true
|
|
msg_ok "$(translate "NFS services stopped and disabled.")"
|
|
|
|
if pct exec "$CTID" -- test -f /etc/exports; then
|
|
pct exec "$CTID" -- truncate -s 0 /etc/exports
|
|
msg_ok "$(translate "Exports cleared.")"
|
|
fi
|
|
|
|
|
|
msg_info "$(translate "Removing remapped users...")"
|
|
local remapped_users=$(pct exec "$CTID" -- getent passwd | grep "^remap_" | cut -d: -f1)
|
|
if [[ -n "$remapped_users" ]]; then
|
|
while IFS= read -r username; do
|
|
if [[ -n "$username" ]]; then
|
|
pct exec "$CTID" -- userdel "$username" 2>/dev/null || true
|
|
msg_ok "$(translate "Removed remapped user:") $username"
|
|
fi
|
|
done <<< "$remapped_users"
|
|
fi
|
|
|
|
|
|
if pct exec "$CTID" -- getent group sharedfiles >/dev/null 2>&1; then
|
|
local regular_members=$(pct exec "$CTID" -- getent group sharedfiles | cut -d: -f4 | tr ',' '\n' | grep -v "^remap_" | wc -l)
|
|
if [[ "$regular_members" -eq 0 ]]; then
|
|
pct exec "$CTID" -- groupdel sharedfiles 2>/dev/null || true
|
|
msg_ok "$(translate "Removed sharedfiles group.")"
|
|
else
|
|
msg_warn "$(translate "Kept sharedfiles group (has regular users assigned).")"
|
|
fi
|
|
fi
|
|
|
|
pct exec "$CTID" -- apt-get remove --purge -y nfs-kernel-server nfs-common 2>/dev/null || true
|
|
pct exec "$CTID" -- apt-get autoremove -y 2>/dev/null || true
|
|
msg_ok "$(translate "NFS packages removed.")"
|
|
|
|
msg_info "$(translate "Cleaning up remaining processes...")"
|
|
pct exec "$CTID" -- pkill -f nfs 2>/dev/null || true
|
|
pct exec "$CTID" -- pkill -f rpc 2>/dev/null || true
|
|
sleep 2
|
|
msg_ok "$(translate "Universal NFS server has been completely uninstalled!")"
|
|
echo -e ""
|
|
echo -e "${TAB}${BOLD}$(translate "Uninstallation Summary:")${CL}"
|
|
echo -e "${TAB}${BGN}$(translate "Services:")${CL} ${BL}$(translate "Stopped and disabled")${CL}"
|
|
echo -e "${TAB}${BGN}$(translate "Packages:")${CL} ${BL}$(translate "Removed")${CL}"
|
|
echo -e "${TAB}${BGN}$(translate "Exports:")${CL} ${BL}$(translate "Cleared")${CL}"
|
|
echo -e "${TAB}${BGN}$(translate "Universal Group:")${CL} ${BL}$(translate "Cleaned up")${CL}"
|
|
echo -e "${TAB}${BGN}$(translate "Remapped Users:")${CL} ${BL}$(translate "Removed")${CL}"
|
|
echo -e
|
|
|
|
msg_success "$(translate "Press Enter to return to menu...")"
|
|
read -r
|
|
}
|
|
|
|
# === Main Menu ===
|
|
while true; do
|
|
CHOICE=$(dialog --title "$(translate "NFS LXC Manager - CT") $CTID" --menu "$(translate "Choose an option:")" 20 70 12 \
|
|
"1" "$(translate "Create Universal NFS Export")" \
|
|
"2" "$(translate "View Current Exports")" \
|
|
"3" "$(translate "Delete Export")" \
|
|
"4" "$(translate "Check NFS Status")" \
|
|
"5" "$(translate "Uninstall NFS Server")" \
|
|
"6" "$(translate "Exit")" 3>&1 1>&2 2>&3)
|
|
|
|
case $CHOICE in
|
|
1) create_nfs_export ;;
|
|
2) view_exports ;;
|
|
3) delete_export ;;
|
|
4) check_nfs_status ;;
|
|
5) uninstall_nfs ;;
|
|
6) exit 0 ;;
|
|
*) exit 0 ;;
|
|
esac
|
|
done
|