66 lines
2.1 KiB
Bash
66 lines
2.1 KiB
Bash
#!/bin/bash
|
|
# Provision an app LXC on the internal network (10.10.10.0/24)
|
|
# Usage: ./provision.sh <lxc-id> <last-octet> <app-name> <git-repo-url>
|
|
# Example: ./provision.sh 110 110 kitchen https://forgejo.yourserver.com/hnf/hnf-kitchen.git
|
|
set -e
|
|
|
|
LXC_ID=$1
|
|
OCTET=$2
|
|
APP=$3
|
|
REPO=$4
|
|
IP="10.10.10.${OCTET}"
|
|
|
|
if [ -z "$LXC_ID" ] || [ -z "$OCTET" ] || [ -z "$APP" ]; then
|
|
echo "Usage: $0 <lxc-id> <ip-octet> <app-name> [git-repo-url]"
|
|
exit 1
|
|
fi
|
|
|
|
echo "==> Creating LXC $LXC_ID: $APP at $IP"
|
|
|
|
# Create LXC (Ubuntu 22.04, no public template — adjust storage pool as needed)
|
|
pct create "$LXC_ID" local:vztmpl/ubuntu-22.04-standard_22.04-1_amd64.tar.zst \
|
|
--hostname "hnf-$APP" \
|
|
--memory 512 \
|
|
--cores 1 \
|
|
--rootfs local-lvm:8 \
|
|
--net0 name=eth0,bridge=vmbr1,ip="${IP}/24",gw=10.10.10.1 \
|
|
--features nesting=1 \
|
|
--unprivileged 0 \
|
|
--start 1
|
|
|
|
sleep 5
|
|
echo "==> LXC started, installing Docker..."
|
|
|
|
pct exec "$LXC_ID" -- bash -c "
|
|
apt-get update -qq
|
|
apt-get install -y -qq ca-certificates curl gnupg git openssh-server
|
|
install -m 0755 -d /etc/apt/keyrings
|
|
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
|
|
echo 'deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu jammy stable' \
|
|
> /etc/apt/sources.list.d/docker.list
|
|
apt-get update -qq
|
|
apt-get install -y -qq docker-ce docker-ce-cli containerd.io docker-compose-plugin
|
|
systemctl enable docker
|
|
mkdir -p /opt/$APP
|
|
"
|
|
|
|
# Copy management container's SSH public key for update webhooks
|
|
if [ -f /root/.ssh/management_deploy.pub ]; then
|
|
pct exec "$LXC_ID" -- bash -c "
|
|
mkdir -p /root/.ssh
|
|
echo '$(cat /root/.ssh/management_deploy.pub)' >> /root/.ssh/authorized_keys
|
|
chmod 600 /root/.ssh/authorized_keys
|
|
"
|
|
echo "==> SSH key installed"
|
|
fi
|
|
|
|
# Clone app repo if provided
|
|
if [ -n "$REPO" ]; then
|
|
pct exec "$LXC_ID" -- bash -c "git clone '$REPO' /opt/$APP"
|
|
echo "==> Repo cloned to /opt/$APP"
|
|
fi
|
|
|
|
echo ""
|
|
echo "==> LXC $LXC_ID ($APP) ready at $IP"
|
|
echo " SSH: pct enter $LXC_ID"
|
|
echo " Next: copy .env, then: cd /opt/$APP && docker compose up -d"
|