lxc容器项目创建记录

vi /etc/sysctl.conf

sysctl -p
rc-update add sysctl boot

apk add iptables

cd /etc/wireguard
umask 077
wg genkey | tee server_privatekey | wg pubkey > server_publickey
wg genkey | tee client_privatekey | wg pubkey > client_publickey

nano /etc/wireguard/wg0.conf

[Interface]
Address = 10.0.0.1/24
ListenPort = 51820
PrivateKey = <这里填 server_privatekey 的内容>

# 核心：以下规则允许流量通过这个容器转发到局域网
# 假设容器网卡是 eth0
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE

# 以下是手机或笔记本客户端
[Peer]
PublicKey = <这里填 client_publickey 的内容>
AllowedIPs = 10.0.0.2/32

PostUp = nft add table inet wireguard; nft add chain inet wireguard forward { type filter hook forward priority 0 \; }; nft add rule inet wireguard forward iifname "wg0" accept; nft add table inet nat; nft add chain inet nat postrouting { type nat hook postrouting priority 100 \; }; nft add rule inet nat postrouting oifname "eth0" masquerade
PostDown = nft delete table inet wireguard; nft delete table inet nat

# 创建服务软链接
ln -s /etc/init.d/wg-quick /etc/init.d/wg-quick.wg0

# 启动服务
rc-service wg-quick.wg0 start

# 设置开机自启
rc-update add wg-quick.wg0 default

[Interface]
PrivateKey = <这里填 client_privatekey 的内容>
Address = 10.0.0.2/24
DNS = 223.5.5.5

[Peer]
PublicKey = <这里填 server_publickey 的内容>
Endpoint = <你家里的公网IP>:51820
# 关键：如果你想访问家里所有设备，这里要包含家里的网段
# 比如家里网段是 192.168.1.x，那就写下面的内容：
AllowedIPs = 0.0.0.0/0
PersistentKeepalive = 25

apk add libqrencode
apk add libqrencode-tools

vi /etc/wireguard/add_client.sh

#!/bin/bash

# 配置基础变量
WG_PATH="/etc/wireguard"
SERVER_CONF="$WG_PATH/wg0.conf"
SERVER_PUB_KEY=$(cat $WG_PATH/server_publickey)
# --- 请修改以下两项 ---
ENDPOINT="你的公网IP或DDNS域名:51820"
LAN_SUBNET="192.168.1.0/24"  # 你家里的局域网网段
# --------------------

echo "请输入新客户端的名称 (例如: phone, laptop):"
read CLIENT_NAME

if [ -z "$CLIENT_NAME" ]; then
    echo "错误: 名称不能为空"
    exit 1
fi

# 生成客户端密钥
CLIENT_PRIV_KEY=$(wg genkey)
CLIENT_PUB_KEY=$(echo "$CLIENT_PRIV_KEY" | wg pubkey)

# 自动分配一个没被占用的 IP (从 10.0.0.2 开始)
for i in {2..254}; do
    CLIENT_IP="10.0.0.$i"
    if ! grep -q "$CLIENT_IP" "$SERVER_CONF"; then
        break
    fi
done

# 1. 生成客户端配置文件
CLIENT_FILE="$WG_PATH/$CLIENT_NAME.conf"
cat <<EOF > "$CLIENT_FILE"
[Interface]
PrivateKey = $CLIENT_PRIV_KEY
Address = $CLIENT_IP/24
DNS = 223.5.5.5, 8.8.8.8

[Peer]
PublicKey = $SERVER_PUB_KEY
Endpoint = $ENDPOINT
AllowedIPs = 0.0.0.0/0
PersistentKeepalive = 25
EOF

# 2. 将客户端公钥添加到服务端配置
cat <<EOF >> "$SERVER_CONF"

# Client: $CLIENT_NAME
[Peer]
PublicKey = $CLIENT_PUB_KEY
AllowedIPs = $CLIENT_IP/32
EOF

# 3. 重启 WireGuard 服务以生效
rc-service wg-quick.wg0 restart

echo "------------------------------------------------"
echo "客户端 $CLIENT_NAME 已创建！"
echo "客户端 IP: $CLIENT_IP"
echo "配置文件位置: $CLIENT_FILE"
echo "------------------------------------------------"
echo "请使用手机 WireGuard App 扫描下方二维码导入配置："
echo "------------------------------------------------"

# 4. 生成二维码显示在终端
qrencode -t ansiutf8 < "$CLIENT_FILE"
#如果你发现生成的二维码在你的终端里显示得“太宽”或者乱码（因为有些终端的行间距问题），可以尝试在脚本里把最后一行改为：
#qrencode -t ansiutf8 -m 2 < "$CLIENT_FILE"
# -m 2 是增加边距，有时能提高手机扫描的识别率。

  //nano /etc/pve/lxc/id.conf
  mp0: /var/lib/vz/dump,mp=/mnt/dump-local

  //nano /etc/pve/lxc/id.conf
  mp0: /mnt/sdb/Download,mp=/downloads

#!/usr/bin/env bash
#
# https://github.com/P3TERX/aria2.conf
# File name：move.sh
# Description: Move files after Aria2 download is complete
# Version: 3.0
#
# Copyright (c) 2018-2021 P3TERX <https://p3terx.com>
#
# Permission is hereby granted, free of charge, to any person obtaining a copy
# of this software and associated documentation files (the "Software"), to deal
# in the Software without restriction, including without limitation the rights
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
# copies of the Software, and to permit persons to whom the Software is
# furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in all
# copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
# SOFTWARE.
#

CHECK_CORE_FILE() {
    CORE_FILE="$(dirname $0)/core"
    if [[ -f "${CORE_FILE}" ]]; then
        . "${CORE_FILE}"
    else
        echo "!!! core file does not exist !!!"
        exit 1
    fi
}

TASK_INFO() {
    echo -e "
-------------------------- [${YELLOW_FONT_PREFIX}Task Infomation${FONT_COLOR_SUFFIX}] --------------------------
${LIGHT_PURPLE_FONT_PREFIX}Task GID:${FONT_COLOR_SUFFIX} ${TASK_GID}
${LIGHT_PURPLE_FONT_PREFIX}Number of Files:${FONT_COLOR_SUFFIX} ${FILE_NUM}
${LIGHT_PURPLE_FONT_PREFIX}First File Path:${FONT_COLOR_SUFFIX} ${FILE_PATH}
${LIGHT_PURPLE_FONT_PREFIX}Task File Name:${FONT_COLOR_SUFFIX} ${TASK_FILE_NAME}
${LIGHT_PURPLE_FONT_PREFIX}Task Path:${FONT_COLOR_SUFFIX} ${TASK_PATH}
${LIGHT_PURPLE_FONT_PREFIX}Aria2 Download Directory:${FONT_COLOR_SUFFIX} ${ARIA2_DOWNLOAD_DIR}
${LIGHT_PURPLE_FONT_PREFIX}Custom Download Directory:${FONT_COLOR_SUFFIX} ${DOWNLOAD_DIR}
${LIGHT_PURPLE_FONT_PREFIX}Source Path:${FONT_COLOR_SUFFIX} ${SOURCE_PATH}
${LIGHT_PURPLE_FONT_PREFIX}Destination Path:${FONT_COLOR_SUFFIX} ${DEST_PATH}
${LIGHT_PURPLE_FONT_PREFIX}.aria2 File Path:${FONT_COLOR_SUFFIX} ${DOT_ARIA2_FILE}
-------------------------- [${YELLOW_FONT_PREFIX}Task Infomation${FONT_COLOR_SUFFIX}] --------------------------
"
}

OUTPUT_MOVE_LOG() {
    LOG="${MOVE_LOG}"
    LOG_PATH="${MOVE_LOG_PATH}"
    OUTPUT_LOG
}

DEFINITION_PATH() {
    SOURCE_PATH="${TASK_PATH}"
    if [[ "${DOWNLOAD_DIR}" != "${ARIA2_DOWNLOAD_DIR}" && "${DOWNLOAD_DIR}" =~ "${ARIA2_DOWNLOAD_DIR}" ]]; then
        DEST_PATH="${DEST_DIR}${DEST_PATH_SUFFIX%/*}"
        #DEST_PATH="${DEST_DIR}"
    else
        DEST_PATH="${DEST_DIR}"
    fi
}
DEFINITION_PATHS() {
    local SUB_DIR="$1"  # 接收传递的 SUB_DIR 参数,根据分类重新构建目标目录
    SOURCE_PATH="${TASK_PATH}"
    if [[ "${DOWNLOAD_DIR}" != "${ARIA2_DOWNLOAD_DIR}" && "${DOWNLOAD_DIR}" =~ "${ARIA2_DOWNLOAD_DIR}" ]]; then
        # DEST_PATH="${DEST_DIR}/${SUB_DIR}/${DEST_PATH_SUFFIX%/*}" # 如果不添加subdir这个变量，就是直接把文件夹复制到comlete目录下
        DEST_PATH="${DEST_DIR}${DEST_PATH_SUFFIX%/*}"
    else
        DEST_PATH="${DEST_DIR}/${SUB_DIR}"
    fi
}

MOVE_FILE() {
    echo -e "$(DATE_TIME) ${INFO} Start move files ..."
    TASK_INFO
    mkdir -p "${DEST_PATH}"

    # 获取要移动的文件列表
    IFS=$'\n' read -d '' -r -a FILES < <(find "${SOURCE_PATH}" -type f)

    for FILE in "${FILES[@]}"; do
        # 获取文件扩展名
        EXTENSION="${FILE##*.}"
        EXTENSION_LOWER=$(echo "$EXTENSION" | tr '[:upper:]' '[:lower:]')
        # 根据文件类型设置目标子文件夹
        case "$EXTENSION_LOWER" in
            "exe"|"msi"|"lua"|"py"|"sh"|"vbs"|"js"|"bat"|"cmd"|"pl"|"apk"|"jar"|"class"|"c"|"cpp"|"h"|"java"|"php"|"go"|"rs"|"ts"|"swift"|"m"|"mm"|"cs"|"vb"|"ps1")
                SUB_DIR="Programs"
                ;;
            "pdf"|"doc"|"docx"|"txt"|"csv"|"xls"|"xlsx"|"odt"|"ods"|"rtf"|"md")
                SUB_DIR="Documents"
                ;;
            "zip"|"tar"|"gz"|"tgz"|"bz2"|"rar"|"7z"|"xz")
                SUB_DIR="Compressed"
                ;;
            "mp4"|"avi"|"mkv"|"mov"|"wmv"|"flv"|"mpg"|"mpeg"|"m4v"|"webm"|"3gp"|"3g2"|"mts"|"m2ts"|"ts")
                SUB_DIR="Video"
                ;;
            "mp3"|"wav"|"flac"|"aac"|"ogg"|"wma"|"m4a"|"opus"|"alac"|"aiff"|"dsd"|"ape"|"cue"|"tak"|"wv"|"tta"|"ra"|"spx")
                SUB_DIR="Music"
                ;;
            *)
                SUB_DIR="other"
                ;;
        esac

        # 创建目标子文件夹
        DEFINITION_PATHS "${SUB_DIR}"  # 传递 SUB_DIR 参数
        # DEST_SUB_DIR="${DEST_PATH}/${SUB_DIR}"
        mkdir -p "${DEST_PATH}"

        # 移动文件
        mv -vf "${FILE}" "${DEST_PATH}"
        MOVE_EXIT_CODE=$?
        if [ ${MOVE_EXIT_CODE} -eq 0 ]; then
            MOVE_LOG+="$(DATE_TIME) ${INFO} Move done: ${FILE} -> ${DEST_PATH}\n"
        else
            MOVE_LOG+="$(DATE_TIME) ${ERROR} Move failed: ${FILE}\n"
        fi
    done

    OUTPUT_MOVE_LOG
    DELETE_EMPTY_DIR
}

CHECK_CORE_FILE "$@"
CHECK_PARAMETER "$@"
CHECK_FILE_NUM
CHECK_SCRIPT_CONF
GET_TASK_INFO
GET_DOWNLOAD_DIR
CONVERSION_PATH
DEFINITION_PATH
CLEAN_UP
MOVE_FILE
exit 0

    getfacl: Removing leading '/' from absolute path names
    # file: mnt/sdb/Download/
    # owner: root
    # group: root
    user::rwx
    user:100000:rwx <-- 这就确认有rws权限
    group::rwx
    mask::rwx
    other::rwx
    default:user::rwx <-- 这就确认继承者有rws权限
    default:user:100000:rwx
    default:group::rwx
    default:mask::rwx
    default:other::rwx