PVE、OPNsense、Ubuntu Server设置小记

vfio
vfio_iommu_type1
vfio_pci
vfio_virqfd

#!/bin/bash
shopt -s nullglob
for g in `find /sys/kernel/iommu_groups/* -maxdepth 0 -type d | sort -V`; do
    echo "IOMMU Group ${g##*/}:"
    for d in $g/devices/*; do
        echo -e "\t$(lspci -nns ${d##*/})"
    done;
done;

# 这里无线网卡在虚拟机中分配到的是 hostpci4，按需修改
args: -set device.hostpci4.x-msix-relocation=bar2

#!/bin/sh
# $FreeBSD$

# PROVIDE: clash
# REQUIRE: LOGIN cleanvar
# KEYWORD: shutdown

# Add the following lines to /etc/rc.conf to enable clash:
# clash_enable (bool):  Set to "NO" by default.
#      Set to "YES" to enable clash.
# clash_config (path): Clash config dir.
#      Defaults to "/usr/local/etc/clash"


. /etc/rc.subr

name="clash"
rcvar=clash_enable


load_rc_config $name

: ${clash_enable:="NO"}
: ${clash_config="/usr/local/clash"}

command="/usr/local/clash/clash"
#pidfile="/var/run/clash.pid"
required_files="${clash_config}"
clash_group="clash"
clash_user="clash"

command_args="-d $clash_config"

run_rc_command "$1"

[start]
command:/usr/local/etc/rc.d/clash onestart
type:script
message:starting clash

[stop]
command:/usr/local/etc/rc.d/clash stop
type:script
message:stoping clash

[status]
command:/usr/local/etc/rc.d/clash statusexit 0
type:script_output
message:get clash status

[restart]
command:/usr/local/etc/rc.d/clash onerestart
type:script
message:restarting clash

#!/bin/sh

# 设置当前工作目录的变量
current_directory="/usr/local/clash"

# 定义下载config.yaml的链接
download_config_url="http://openmediavault:25500/getprofile?name=profiles/default.ini&token=xxx"

# 定义下载ui.zip的链接
download_ui_url="https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip"

# 定义Clash core GitHub仓库信息
repo_owner="MetaCubeX"
repo_name="Clash.Meta"
repo_filename="clash.meta-freebsd-amd64-<version>.gz"

# 添加代理变量
update_core_proxy="socks5://opnsense:7891"
update_config_proxy=""

# 定义当前所要执行的更新命令
current_command=$1

# 帮助文档函数
print_help() {
  echo "Usage: $0 [config|core|stop|help]"
  echo "Commands:"
  echo "  config   更新config.yaml文件"
  echo "  core     下载最新的clash可执行文件并替换"
  echo "  ui       下载最新的ui.zip文件"
  echo "  stop     停止clash进程"
  echo "  help     显示帮助文档"
}

# 备份并替换文件函数
backup_file() {
  if [ -f "$1" ]; then
    mv -f "$1" "$1.bak"
  fi
}

# 停止进程并设置权限
stop_and_cleanup() {
  echo "停止 Clash 进程："
  chown -R clash:clash $current_directory
  /usr/local/sbin/configctl clash stop
}

# 定义信号处理函数
interrupt_handler() {
  echo "下载被中止。"

  # 根据当前执行的命令来选择是否替换文件
  if [ "$current_command" = "core" ]; then
    # 如果是下载 core，还原备份的clash（如果存在）
    if [ -f "$current_directory/clash.bak" ]; then
      cp -f "$current_directory/clash.bak" "$current_directory/clash"
      echo "已还原备份的Clash。"
    fi
  elif [ "$current_command" = "config" ]; then
    # 如果是下载 config，还原备份的config.yaml.bak（如果存在）
    if [ -f "$current_directory/config.yaml.bak" ]; then
      cp -f "$current_directory/config.yaml.bak" "$current_directory/config.yaml"
      echo "已还原备份的config.yaml.bak。"
    fi
  fi

  stop_and_cleanup
  exit 1
}

# 设置信号处理程序
trap interrupt_handler SIGINT

# 获取最新版本的clash可执行文件下载链接函数
get_core_latest_version() {
  local proxy_option="$1"  # 接受传入的core_proxy作为参数

  # 获取最新发布版本信息
  release_url="https://api.github.com/repos/$repo_owner/$repo_name/releases/latest"
  latest_release_info=$(curl $proxy_option -s "$release_url")

  # 从版本信息中提取最新版本号
  latest_version=$(echo "$latest_release_info" | grep -oE '"tag_name": "[^"]+"' | head -n 1 | cut -d '"' -f 4)

  # 返回最新版本号
  echo "$latest_version"
}

# 处理config命令
if [ "$current_command" = "config" ]; then
  # 备份并覆盖config.yaml.bak
  backup_file "$current_directory/config.yaml"

  # 设置代理，如果有的话
  config_proxy=""
  [ -n "$update_config_proxy" ] && config_proxy="-x $update_config_proxy"

  # 使用curl下载文件并重命名为config.yaml
  curl $config_proxy -# -fSL -o "$current_directory/config.yaml" "$download_config_url"
  download_result=$?  # 保存curl命令的退出码

  # 检查下载是否成功
  if [ $download_result -eq 0 ]; then
    echo "config.yaml 更新成功！"
  else
    echo "下载失败。请检查URL是否正确或网络连接是否正常。"
    # 如果下载失败，还原备份的config.yaml.bak（如果存在）
    if [ -f "$current_directory/config.yaml.bak" ]; then
      cp -f "$current_directory/config.yaml.bak" "$current_directory/config.yaml"
      echo "已还原备份的config.yaml.bak。"
    fi
  fi
  stop_and_cleanup

# 处理core命令
elif [ "$current_command" = "core" ]; then
  # 备份并替换clash文件
  backup_file "$current_directory/clash"

  # 设置代理，如果有的话
  core_proxy=""
  [ -n "$update_core_proxy" ] && core_proxy="-x $update_core_proxy"

  # 获取最新版本的clash可执行文件下载链接
  latest_version=$(get_core_latest_version "$core_proxy")
  # 更新 repo_filename，将 <version> 替换为实际的版本号
  repo_filename=$(echo "$repo_filename" | sed "s/<version>/$latest_version/")
  # 构建下载链接
  download_core_url="https://github.com/$repo_owner/$repo_name/releases/download/$latest_version/$repo_filename"
  echo "下载链接：$download_core_url"

  # 下载最新的clash可执行文件并解压
  curl $core_proxy -# -fSL "$download_core_url" | gunzip > "$current_directory/clash"
  download_result=$?  # 保存curl命令的退出码
  chmod +x "$current_directory/clash"

  # 检查是否更新成功
  if [ $download_result -eq 0 ]; then
    echo "Clash core 更新成功！"
    echo "最新版本：$latest_version"
  else
    echo "Clash 更新失败。"
    # 如果更新失败，还原备份的clash（如果存在）
    if [ -f "$current_directory/clash" ]; then
      cp -f "$current_directory/clash.bak" "$current_directory/clash"
      echo "已还原备份的clash。"
    fi
  fi
  stop_and_cleanup

# 处理ui命令
elif [ "$current_command" = "ui" ]; then
  # 备份并覆盖ui.zip.bak
  backup_file "$current_directory/ui.zip"

  # 设置代理，如果有的话
  ui_proxy=""
  [ -n "$update_core_proxy" ] && ui_proxy="-x $update_core_proxy"

  # 使用curl下载ui.zip文件到当前目录
  curl $ui_proxy -# -fSL -o "$current_directory/ui.zip" "$download_ui_url"
  download_result=$?  # 保存curl命令的退出码

  # 检查下载是否成功
  if [ $download_result -eq 0 ]; then
    echo "ui.zip 更新成功！请自行解压到指定文件夹中。"
  else
    echo "下载 ui.zip 失败。请检查URL是否正确或网络连接是否正常。"
    [ -f "$current_directory/ui.zip" ] && rm "$current_directory/ui.zip"  # 如果下载失败并且文件存在，则删除它
  fi  

# 处理stop命令
elif [ "$current_command" = "stop" ]; then
  stop_and_cleanup

# 处理help命令或未知命令
else
  print_help
fi