Fix fatal permission issue
Fix non-arch system execution installation arch system related software errors Fix the problem that the created user has login permissions, etc.
This commit is contained in:
黑歌-共穷国际大中华区CFO
GitHub
parent
64ef1a250b
commit
f46a4c0539
@ -2,7 +2,7 @@
|
|||||||
|
|
||||||
#========================================================
|
#========================================================
|
||||||
# System Required: CentOS 7+ / Debian 8+ / Ubuntu 16+ / Alpine 3+ /
|
# System Required: CentOS 7+ / Debian 8+ / Ubuntu 16+ / Alpine 3+ /
|
||||||
# Arch 未测试
|
# Arch 仅测试了一次，如有问题带截图反馈 dysf888@pm.me
|
||||||
# Description: 哪吒监控安装脚本
|
# Description: 哪吒监控安装脚本
|
||||||
# Github: https://github.com/naiba/nezha
|
# Github: https://github.com/naiba/nezha
|
||||||
#========================================================
|
#========================================================
|
||||||
@ -31,15 +31,15 @@ pre_check() {
|
|||||||
## os_arch
|
## os_arch
|
||||||
if [[ $(uname -m | grep 'x86_64') != "" ]]; then
|
if [[ $(uname -m | grep 'x86_64') != "" ]]; then
|
||||||
os_arch="amd64"
|
os_arch="amd64"
|
||||||
elif [[ $(uname -m | grep 'i386\|i686') != "" ]]; then
|
elif [[ $(uname -m | grep 'i386\|i686') != "" ]]; then
|
||||||
os_arch="386"
|
os_arch="386"
|
||||||
elif [[ $(uname -m | grep 'aarch64\|armv8b\|armv8l') != "" ]]; then
|
elif [[ $(uname -m | grep 'aarch64\|armv8b\|armv8l') != "" ]]; then
|
||||||
os_arch="arm64"
|
os_arch="arm64"
|
||||||
elif [[ $(uname -m | grep 'arm') != "" ]]; then
|
elif [[ $(uname -m | grep 'arm') != "" ]]; then
|
||||||
os_arch="arm"
|
os_arch="arm"
|
||||||
elif [[ $(uname -m | grep 's390x') != "" ]]; then
|
elif [[ $(uname -m | grep 's390x') != "" ]]; then
|
||||||
os_arch="s390x"
|
os_arch="s390x"
|
||||||
elif [[ $(uname -m | grep 'riscv64') != "" ]]; then
|
elif [[ $(uname -m | grep 'riscv64') != "" ]]; then
|
||||||
os_arch="riscv64"
|
os_arch="riscv64"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
@ -49,17 +49,17 @@ pre_check() {
|
|||||||
echo "根据ipapi.co提供的信息，当前IP可能在中国"
|
echo "根据ipapi.co提供的信息，当前IP可能在中国"
|
||||||
read -e -r -p "是否选用中国镜像完成安装? [Y/n] " input
|
read -e -r -p "是否选用中国镜像完成安装? [Y/n] " input
|
||||||
case $input in
|
case $input in
|
||||||
[yY][eE][sS] | [yY])
|
[yY][eE][sS] | [yY])
|
||||||
echo "使用中国镜像"
|
echo "使用中国镜像"
|
||||||
CN=true
|
CN=true
|
||||||
;;
|
;;
|
||||||
|
|
||||||
[nN][oO] | [nN])
|
[nN][oO] | [nN])
|
||||||
echo "不使用中国镜像"
|
echo "不使用中国镜像"
|
||||||
;;
|
;;
|
||||||
*)
|
*)
|
||||||
echo "使用中国镜像"
|
echo "使用中国镜像"
|
||||||
CN=true
|
CN=true
|
||||||
;;
|
;;
|
||||||
esac
|
esac
|
||||||
fi
|
fi
|
||||||
@ -122,16 +122,35 @@ before_show_menu() {
|
|||||||
|
|
||||||
install_base() {
|
install_base() {
|
||||||
(command -v git >/dev/null 2>&1 && command -v curl >/dev/null 2>&1 && command -v wget >/dev/null 2>&1 && command -v unzip >/dev/null 2>&1 && command -v getenforce >/dev/null 2>&1) ||
|
(command -v git >/dev/null 2>&1 && command -v curl >/dev/null 2>&1 && command -v wget >/dev/null 2>&1 && command -v unzip >/dev/null 2>&1 && command -v getenforce >/dev/null 2>&1) ||
|
||||||
(install_soft curl wget git unzip)
|
(install_soft curl wget git unzip)
|
||||||
|
}
|
||||||
|
install_arch(){
|
||||||
|
echo -e "${green}提示: ${plain} Arch安装libselinux需添加nezha-agent用户，安装完会自动删除，建议手动检查一次\n"
|
||||||
|
read -e -r -p "是否安装libselinux? [Y/n] " input
|
||||||
|
case $input in
|
||||||
|
[yY][eE][sS] | [yY])
|
||||||
|
useradd -m nezha-agent
|
||||||
|
sed -i "$ a\nezha-agent ALL=(ALL ) NOPASSWD:ALL" /etc/sudoers
|
||||||
|
sudo -iu nezha-agent yay -S libselinux --noconfirm
|
||||||
|
sed -i '/nezha-agent/d' /etc/sudoers && sleep 30s && killall -u nezha-agent&&userdel nezha-agent
|
||||||
|
echo -e "${red}提示: ${plain}已删除用户nezha-agent，请务必手动核查一遍！\n"
|
||||||
|
;;
|
||||||
|
[nN][oO] | [nN])
|
||||||
|
echo "不安装libselinux"
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "不安装libselinux"
|
||||||
|
exit 0
|
||||||
|
;;
|
||||||
|
esac
|
||||||
}
|
}
|
||||||
|
|
||||||
install_soft() {
|
install_soft() {
|
||||||
# Arch官方库不包含selinux等组件
|
|
||||||
(command -v yum >/dev/null 2>&1 && yum makecache && yum install $* selinux-policy -y) ||
|
(command -v yum >/dev/null 2>&1 && yum makecache && yum install $* selinux-policy -y) ||
|
||||||
(command -v apt >/dev/null 2>&1 && apt update && apt install $* selinux-utils -y) ||
|
(command -v apt >/dev/null 2>&1 && apt update && apt install $* selinux-utils -y) ||
|
||||||
(command -v pacman >/dev/null 2>&1 && pacman -Syu $*) ||
|
(command -v pacman >/dev/null 2>&1 && pacman -Syu $* yay --noconfirm && install_arch) ||
|
||||||
(command -v apt-get >/dev/null 2>&1 && apt-get update && apt-get install $* selinux-utils -y) ||
|
(command -v apt-get >/dev/null 2>&1 && apt-get update && apt-get install $* selinux-utils -y) ||
|
||||||
(command -v apk >/dev/null 2>&1 && apk update && apk add $* -f)
|
(command -v apk >/dev/null 2>&1 && apk update && apk add $* -f)
|
||||||
}
|
}
|
||||||
|
|
||||||
install_dashboard() {
|
install_dashboard() {
|
||||||
@ -146,16 +165,16 @@ install_dashboard() {
|
|||||||
echo "您可能已经安装过面板端，重复安装会覆盖数据，请注意备份。"
|
echo "您可能已经安装过面板端，重复安装会覆盖数据，请注意备份。"
|
||||||
read -e -r -p "是否退出安装? [Y/n] " input
|
read -e -r -p "是否退出安装? [Y/n] " input
|
||||||
case $input in
|
case $input in
|
||||||
[yY][eE][sS] | [yY])
|
[yY][eE][sS] | [yY])
|
||||||
echo "退出安装"
|
echo "退出安装"
|
||||||
exit 0
|
exit 0
|
||||||
;;
|
;;
|
||||||
[nN][oO] | [nN])
|
[nN][oO] | [nN])
|
||||||
echo "继续安装"
|
echo "继续安装"
|
||||||
;;
|
;;
|
||||||
*)
|
*)
|
||||||
echo "退出安装"
|
echo "退出安装"
|
||||||
exit 0
|
exit 0
|
||||||
;;
|
;;
|
||||||
esac
|
esac
|
||||||
fi
|
fi
|
||||||
@ -185,13 +204,13 @@ install_dashboard() {
|
|||||||
selinux(){
|
selinux(){
|
||||||
#判断当前的状态
|
#判断当前的状态
|
||||||
if [ "$os_alpine" != 1 ];then
|
if [ "$os_alpine" != 1 ];then
|
||||||
getenforce | grep '[Ee]nfor'
|
getenforce | grep '[Ee]nfor'
|
||||||
if [ $? -eq 0 ];then
|
if [ $? -eq 0 ];then
|
||||||
echo -e "SELinux是开启状态，正在关闭！"
|
echo -e "SELinux是开启状态，正在关闭！"
|
||||||
setenforce 0 &>/dev/null
|
setenforce 0 &>/dev/null
|
||||||
find_key="SELINUX="
|
find_key="SELINUX="
|
||||||
sed -ri "/^$find_key/c${find_key}disabled" /etc/selinux/config
|
sed -ri "/^$find_key/c${find_key}disabled" /etc/selinux/config
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -230,8 +249,8 @@ install_agent() {
|
|||||||
fi
|
fi
|
||||||
|
|
||||||
unzip -qo nezha-agent_linux_${os_arch}.zip &&
|
unzip -qo nezha-agent_linux_${os_arch}.zip &&
|
||||||
mv nezha-agent $NZ_AGENT_PATH &&
|
mv nezha-agent $NZ_AGENT_PATH &&
|
||||||
rm -rf nezha-agent_linux_${os_arch}.zip README.md
|
rm -rf nezha-agent_linux_${os_arch}.zip README.md
|
||||||
|
|
||||||
if [ $# -ge 3 ]; then
|
if [ $# -ge 3 ]; then
|
||||||
modify_agent_config "$@"
|
modify_agent_config "$@"
|
||||||
@ -248,18 +267,18 @@ modify_agent_config() {
|
|||||||
echo -e "> 修改Agent配置"
|
echo -e "> 修改Agent配置"
|
||||||
|
|
||||||
if [ "$os_alpine" != 1 ];then
|
if [ "$os_alpine" != 1 ];then
|
||||||
wget -t 2 -T 10 -O $NZ_AGENT_SERVICE https://${GITHUB_RAW_URL}/script/nezha-agent.service >/dev/null 2>&1
|
wget -t 2 -T 10 -O $NZ_AGENT_SERVICE https://${GITHUB_RAW_URL}/script/nezha-agent.service >/dev/null 2>&1
|
||||||
if [[ $? != 0 ]]; then
|
if [[ $? != 0 ]]; then
|
||||||
echo -e "${red}文件下载失败，请检查本机能否连接 ${GITHUB_RAW_URL}${plain}"
|
echo -e "${red}文件下载失败，请检查本机能否连接 ${GITHUB_RAW_URL}${plain}"
|
||||||
return 0
|
return 0
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if [ $# -lt 3 ]; then
|
if [ $# -lt 3 ]; then
|
||||||
echo "请先在管理面板上添加Agent，记录下密钥" &&
|
echo "请先在管理面板上添加Agent，记录下密钥" &&
|
||||||
read -ep "请输入一个解析到面板所在IP的域名（不可套CDN）: " nz_grpc_host &&
|
read -ep "请输入一个解析到面板所在IP的域名（不可套CDN）: " nz_grpc_host &&
|
||||||
read -ep "请输入面板RPC端口: (5555)" nz_grpc_port &&
|
read -ep "请输入面板RPC端口: (5555)" nz_grpc_port &&
|
||||||
read -ep "请输入Agent 密钥: " nz_client_secret
|
read -ep "请输入Agent 密钥: " nz_client_secret
|
||||||
if [[ -z "${nz_grpc_host}" || -z "${nz_client_secret}" ]]; then
|
if [[ -z "${nz_grpc_host}" || -z "${nz_client_secret}" ]]; then
|
||||||
echo -e "${red}所有选项都不能为空${plain}"
|
echo -e "${red}所有选项都不能为空${plain}"
|
||||||
before_show_menu
|
before_show_menu
|
||||||
@ -275,28 +294,28 @@ modify_agent_config() {
|
|||||||
fi
|
fi
|
||||||
|
|
||||||
if [ "$os_alpine" != 1 ];then
|
if [ "$os_alpine" != 1 ];then
|
||||||
sed -i "s/nz_grpc_host/${nz_grpc_host}/" ${NZ_AGENT_SERVICE}
|
sed -i "s/nz_grpc_host/${nz_grpc_host}/" ${NZ_AGENT_SERVICE}
|
||||||
sed -i "s/nz_grpc_port/${nz_grpc_port}/" ${NZ_AGENT_SERVICE}
|
sed -i "s/nz_grpc_port/${nz_grpc_port}/" ${NZ_AGENT_SERVICE}
|
||||||
sed -i "s/nz_client_secret/${nz_client_secret}/" ${NZ_AGENT_SERVICE}
|
sed -i "s/nz_client_secret/${nz_client_secret}/" ${NZ_AGENT_SERVICE}
|
||||||
|
|
||||||
shift 3
|
shift 3
|
||||||
if [ $# -gt 0 ]; then
|
if [ $# -gt 0 ]; then
|
||||||
args=" $*"
|
args=" $*"
|
||||||
sed -i "/ExecStart/ s/$/${args}/" ${NZ_AGENT_SERVICE}
|
sed -i "/ExecStart/ s/$/${args}/" ${NZ_AGENT_SERVICE}
|
||||||
fi
|
fi
|
||||||
else
|
else
|
||||||
echo "@reboot nohup ${NZ_AGENT_PATH}/nezha-agent -s ${nz_grpc_host}:${nz_grpc_port} -p ${nz_client_secret} >/dev/null 2>&1 &" >> /etc/crontabs/root
|
echo "@reboot nohup ${NZ_AGENT_PATH}/nezha-agent -s ${nz_grpc_host}:${nz_grpc_port} -p ${nz_client_secret} >/dev/null 2>&1 &" >> /etc/crontabs/root
|
||||||
crond
|
crond
|
||||||
fi
|
fi
|
||||||
|
|
||||||
echo -e "Agent配置 ${green}修改成功，请稍等重启生效${plain}"
|
echo -e "Agent配置 ${green}修改成功，请稍等重启生效${plain}"
|
||||||
|
|
||||||
if [ "$os_alpine" != 1 ];then
|
if [ "$os_alpine" != 1 ];then
|
||||||
systemctl daemon-reload
|
systemctl daemon-reload
|
||||||
systemctl enable nezha-agent
|
systemctl enable nezha-agent
|
||||||
systemctl restart nezha-agent
|
systemctl restart nezha-agent
|
||||||
else
|
else
|
||||||
nohup ${NZ_AGENT_PATH}/nezha-agent -s ${nz_grpc_host}:${nz_grpc_port} -p ${nz_client_secret} >/dev/null 2>&1 &
|
nohup ${NZ_AGENT_PATH}/nezha-agent -s ${nz_grpc_host}:${nz_grpc_port} -p ${nz_client_secret} >/dev/null 2>&1 &
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if [[ $# == 0 ]]; then
|
if [[ $# == 0 ]]; then
|
||||||
@ -321,14 +340,14 @@ modify_dashboard_config() {
|
|||||||
fi
|
fi
|
||||||
|
|
||||||
echo "关于 GitHub Oauth2 应用：在 https://github.com/settings/developers 创建，无需审核，Callback 填 http(s)://域名或IP/oauth2/callback" &&
|
echo "关于 GitHub Oauth2 应用：在 https://github.com/settings/developers 创建，无需审核，Callback 填 http(s)://域名或IP/oauth2/callback" &&
|
||||||
echo "关于 Gitee Oauth2 应用：在 https://gitee.com/oauth/applications 创建，无需审核，Callback 填 http(s)://域名或IP/oauth2/callback" &&
|
echo "关于 Gitee Oauth2 应用：在 https://gitee.com/oauth/applications 创建，无需审核，Callback 填 http(s)://域名或IP/oauth2/callback" &&
|
||||||
read -ep "请输入 OAuth2 提供商(github/gitlab/jihulab/gitee，默认 github): " nz_oauth2_type &&
|
read -ep "请输入 OAuth2 提供商(github/gitlab/jihulab/gitee，默认 github): " nz_oauth2_type &&
|
||||||
read -ep "请输入 Oauth2 应用的 Client ID: " nz_github_oauth_client_id &&
|
read -ep "请输入 Oauth2 应用的 Client ID: " nz_github_oauth_client_id &&
|
||||||
read -ep "请输入 Oauth2 应用的 Client Secret: " nz_github_oauth_client_secret &&
|
read -ep "请输入 Oauth2 应用的 Client Secret: " nz_github_oauth_client_secret &&
|
||||||
read -ep "请输入 GitHub/Gitee 登录名作为管理员，多个以逗号隔开: " nz_admin_logins &&
|
read -ep "请输入 GitHub/Gitee 登录名作为管理员，多个以逗号隔开: " nz_admin_logins &&
|
||||||
read -ep "请输入站点标题: " nz_site_title &&
|
read -ep "请输入站点标题: " nz_site_title &&
|
||||||
read -ep "请输入站点访问端口: (默认 8008)" nz_site_port &&
|
read -ep "请输入站点访问端口: (默认 8008)" nz_site_port &&
|
||||||
read -ep "请输入用于 Agent 接入的 RPC 端口: (默认 5555)" nz_grpc_port
|
read -ep "请输入用于 Agent 接入的 RPC 端口: (默认 5555)" nz_grpc_port
|
||||||
|
|
||||||
if [[ -z "${nz_admin_logins}" || -z "${nz_github_oauth_client_id}" || -z "${nz_github_oauth_client_secret}" || -z "${nz_site_title}" ]]; then
|
if [[ -z "${nz_admin_logins}" || -z "${nz_github_oauth_client_id}" || -z "${nz_github_oauth_client_secret}" || -z "${nz_site_title}" ]]; then
|
||||||
echo -e "${red}所有选项都不能为空${plain}"
|
echo -e "${red}所有选项都不能为空${plain}"
|
||||||
@ -489,13 +508,13 @@ uninstall_agent() {
|
|||||||
echo -e "> 卸载Agent"
|
echo -e "> 卸载Agent"
|
||||||
|
|
||||||
if [ "$os_alpine" != 1 ];then
|
if [ "$os_alpine" != 1 ];then
|
||||||
systemctl disable nezha-agent.service
|
systemctl disable nezha-agent.service
|
||||||
systemctl stop nezha-agent.service
|
systemctl stop nezha-agent.service
|
||||||
rm -rf $NZ_AGENT_SERVICE
|
rm -rf $NZ_AGENT_SERVICE
|
||||||
systemctl daemon-reload
|
systemctl daemon-reload
|
||||||
else
|
else
|
||||||
sed -i "/nezha-agent/d" /etc/crontabs/root
|
sed -i "/nezha-agent/d" /etc/crontabs/root
|
||||||
pkill nezha
|
pkill nezha
|
||||||
fi
|
fi
|
||||||
|
|
||||||
rm -rf $NZ_AGENT_PATH
|
rm -rf $NZ_AGENT_PATH
|
||||||
@ -568,50 +587,50 @@ show_menu() {
|
|||||||
echo && read -ep "请输入选择 [0-13]: " num
|
echo && read -ep "请输入选择 [0-13]: " num
|
||||||
|
|
||||||
case "${num}" in
|
case "${num}" in
|
||||||
0)
|
0)
|
||||||
exit 0
|
exit 0
|
||||||
;;
|
;;
|
||||||
1)
|
1)
|
||||||
install_dashboard
|
install_dashboard
|
||||||
;;
|
;;
|
||||||
2)
|
2)
|
||||||
modify_dashboard_config
|
modify_dashboard_config
|
||||||
;;
|
;;
|
||||||
3)
|
3)
|
||||||
start_dashboard
|
start_dashboard
|
||||||
;;
|
;;
|
||||||
4)
|
4)
|
||||||
stop_dashboard
|
stop_dashboard
|
||||||
;;
|
;;
|
||||||
5)
|
5)
|
||||||
restart_and_update
|
restart_and_update
|
||||||
;;
|
;;
|
||||||
6)
|
6)
|
||||||
show_dashboard_log
|
show_dashboard_log
|
||||||
;;
|
;;
|
||||||
7)
|
7)
|
||||||
uninstall_dashboard
|
uninstall_dashboard
|
||||||
;;
|
;;
|
||||||
8)
|
8)
|
||||||
install_agent
|
install_agent
|
||||||
;;
|
;;
|
||||||
9)
|
9)
|
||||||
modify_agent_config
|
modify_agent_config
|
||||||
;;
|
;;
|
||||||
10)
|
10)
|
||||||
show_agent_log
|
show_agent_log
|
||||||
;;
|
;;
|
||||||
11)
|
11)
|
||||||
uninstall_agent
|
uninstall_agent
|
||||||
;;
|
;;
|
||||||
12)
|
12)
|
||||||
restart_agent
|
restart_agent
|
||||||
;;
|
;;
|
||||||
13)
|
13)
|
||||||
update_script
|
update_script
|
||||||
;;
|
;;
|
||||||
*)
|
*)
|
||||||
echo -e "${red}请输入正确的数字 [0-13]${plain}"
|
echo -e "${red}请输入正确的数字 [0-13]${plain}"
|
||||||
;;
|
;;
|
||||||
esac
|
esac
|
||||||
}
|
}
|
||||||
@ -620,51 +639,51 @@ pre_check
|
|||||||
|
|
||||||
if [[ $# > 0 ]]; then
|
if [[ $# > 0 ]]; then
|
||||||
case $1 in
|
case $1 in
|
||||||
"install_dashboard")
|
"install_dashboard")
|
||||||
install_dashboard 0
|
install_dashboard 0
|
||||||
;;
|
;;
|
||||||
"modify_dashboard_config")
|
"modify_dashboard_config")
|
||||||
modify_dashboard_config 0
|
modify_dashboard_config 0
|
||||||
;;
|
;;
|
||||||
"start_dashboard")
|
"start_dashboard")
|
||||||
start_dashboard 0
|
start_dashboard 0
|
||||||
;;
|
;;
|
||||||
"stop_dashboard")
|
"stop_dashboard")
|
||||||
stop_dashboard 0
|
stop_dashboard 0
|
||||||
;;
|
;;
|
||||||
"restart_and_update")
|
"restart_and_update")
|
||||||
restart_and_update 0
|
restart_and_update 0
|
||||||
;;
|
;;
|
||||||
"show_dashboard_log")
|
"show_dashboard_log")
|
||||||
show_dashboard_log 0
|
show_dashboard_log 0
|
||||||
;;
|
;;
|
||||||
"uninstall_dashboard")
|
"uninstall_dashboard")
|
||||||
uninstall_dashboard 0
|
uninstall_dashboard 0
|
||||||
;;
|
;;
|
||||||
"install_agent")
|
"install_agent")
|
||||||
shift
|
shift
|
||||||
if [ $# -ge 3 ]; then
|
if [ $# -ge 3 ]; then
|
||||||
install_agent "$@"
|
install_agent "$@"
|
||||||
else
|
else
|
||||||
install_agent 0
|
install_agent 0
|
||||||
fi
|
fi
|
||||||
;;
|
;;
|
||||||
"modify_agent_config")
|
"modify_agent_config")
|
||||||
modify_agent_config 0
|
modify_agent_config 0
|
||||||
;;
|
;;
|
||||||
"show_agent_log")
|
"show_agent_log")
|
||||||
show_agent_log 0
|
show_agent_log 0
|
||||||
;;
|
;;
|
||||||
"uninstall_agent")
|
"uninstall_agent")
|
||||||
uninstall_agent 0
|
uninstall_agent 0
|
||||||
;;
|
;;
|
||||||
"restart_agent")
|
"restart_agent")
|
||||||
restart_agent 0
|
restart_agent 0
|
||||||
;;
|
;;
|
||||||
"update_script")
|
"update_script")
|
||||||
update_script 0
|
update_script 0
|
||||||
;;
|
;;
|
||||||
*) show_usage ;;
|
*) show_usage ;;
|
||||||
esac
|
esac
|
||||||
else
|
else
|
||||||
show_menu
|
show_menu
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user