Move PiFrameFleet to dedicated repo
This commit is contained in:
parent
83de1e9a99
commit
325b587310
|
|
@ -1,80 +0,0 @@
|
|||
FROM ubuntu:latest
|
||||
|
||||
# Don't bother us for selections during install
|
||||
ENV DEBIAN_FRONTEND="noninteractive"
|
||||
|
||||
# We work off /opt, the *nix way
|
||||
WORKDIR /opt/
|
||||
|
||||
# need to figure out if arm64/arm64 32bit multilib/arm
|
||||
COPY piframefleet/arch_detect.sh /opt/
|
||||
|
||||
# Install and base setup all the things
|
||||
RUN apt update && apt upgrade -y && \
|
||||
apt install -y python3 curl jq bash unzip nano git && \
|
||||
ARCH=$(/opt/arch_detect.sh); \
|
||||
echo "**** Detected arch: $ARCH ****" && \
|
||||
S6_RELEASE=$(curl -sX GET "https://api.github.com/repos/just-containers/s6-overlay/tags" \
|
||||
| jq -r .[0].name); \
|
||||
echo "**** s6-overlay release: ${S6_RELEASE} ****" && \
|
||||
echo "**** Installing s6-overlay ****" && \
|
||||
curl -L https://github.com/just-containers/s6-overlay/releases/latest/download/s6-overlay-${ARCH}.tar.gz \
|
||||
-o /opt/s6-overlay.tar.gz && \
|
||||
tar xzf /opt/s6-overlay.tar.gz -C / --exclude="./bin" && \
|
||||
tar xzf /opt/s6-overlay.tar.gz -C /usr ./bin && \
|
||||
echo "**** wireguard ****" && \
|
||||
apt install -y build-essential ifupdown net-tools iproute2 iptables iputils-ping libc6 libelf-dev pkg-config && \
|
||||
WIREGUARD_RELEASE=$(curl -sX GET "https://api.github.com/repos/WireGuard/wireguard-tools/tags" \
|
||||
| jq -r .[0].name); \
|
||||
git clone https://git.zx2c4.com/wireguard-tools /opt/wireguard-tools && \
|
||||
cd /opt/wireguard-tools && \
|
||||
git checkout "${WIREGUARD_RELEASE}" && \
|
||||
make -C src -j$(nproc) && \
|
||||
make -C src install && \
|
||||
cd /opt && \
|
||||
echo "**** syncthing ****" && \
|
||||
curl -s https://syncthing.net/release-key.txt | apt-key add - && \
|
||||
echo "deb https://apt.syncthing.net/ syncthing stable" | tee /etc/apt/sources.list.d/syncthing.list && \
|
||||
apt update && apt install -y syncthing && \
|
||||
echo "**** rclone ****" && \
|
||||
curl https://rclone.org/install.sh | bash && \
|
||||
echo "**** filebrowser ****" && \
|
||||
curl -fsSL https://filebrowser.org/get.sh | bash && \
|
||||
echo "**** ansible ****" && \
|
||||
apt install -y python3-apt sshpass ansible ansible-lint ansible-doc && \
|
||||
echo "**** cleanup ****" && \
|
||||
rm /opt/arch_detect.sh && \
|
||||
rm /opt/s6-overlay.tar.gz && \
|
||||
rm -rf /opt/wireguard-tools && \
|
||||
apt remove --purge -y build-essential pkg-config libelf-dev unzip && \
|
||||
apt autoremove --purge -y && \
|
||||
rm -rf /var/lib/apt/lists/*
|
||||
|
||||
# Copy the s6 related 'stuff' to the container
|
||||
ADD /piframefleet/root/ /
|
||||
|
||||
# Ansible related 'stuff'
|
||||
VOLUME /opt/ansible
|
||||
|
||||
# Wireguard related 'stuff'
|
||||
ENV ENABLE_WIREGUARD=false
|
||||
EXPOSE 51820/udp
|
||||
VOLUME /lib/modules
|
||||
VOLUME /opt/wireguard
|
||||
|
||||
# SyncThing related 'stuff'
|
||||
ENV ENABLE_SYNCTHING=false
|
||||
EXPOSE 8384/tcp
|
||||
EXPOSE 22000/tcp
|
||||
VOLUME /opt/syncthing
|
||||
|
||||
# FileBrowser related 'stuff'
|
||||
ENV ENABLE_FILEBROWSER=false
|
||||
EXPOSE 9191/tcp
|
||||
VOLUME /opt/filebrowser
|
||||
|
||||
# General 'stuff'
|
||||
VOLUME /opt/pictures
|
||||
|
||||
# Run s6-overlay as the init so we get services and similar
|
||||
ENTRYPOINT [ "/init" ]
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
# PiFrameFleet
|
||||
|
||||
This is a basic Docker container setup for managing a fleet of PiFrames.
|
||||
|
||||
This area of the code base is very much a work in progress and should **NOT** be used unless you're interested in submitting patches.
|
||||
|
|
@ -1,20 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
python3 <<EOF
|
||||
from __future__ import print_function
|
||||
import platform
|
||||
processor = platform.machine()
|
||||
architecture = platform.architecture()
|
||||
if processor == 'aarch64':
|
||||
# Mutli arch arm support is why this 32bit check is present
|
||||
if '32bit' in architecture:
|
||||
print('arm', end='')
|
||||
else:
|
||||
print('aarch64', end='')
|
||||
elif processor == 'x86 64' or processor == 'x86_64':
|
||||
print('amd64', end='')
|
||||
elif processor == 'armv7l':
|
||||
print('arm', end='')
|
||||
else:
|
||||
print('armhf', end='')
|
||||
EOF
|
||||
|
|
@ -1,28 +0,0 @@
|
|||
#!/usr/bin/with-contenv bash
|
||||
|
||||
echo "
|
||||
-------------------------------------
|
||||
Welcome to PiFrameFleet
|
||||
This container includes the following
|
||||
- WireGuard VPN
|
||||
- Ansible
|
||||
- SyncThing
|
||||
- rclone
|
||||
- FileBrowser (admin/password)
|
||||
-------------------------------------"
|
||||
echo "
|
||||
-------------------------------------
|
||||
Service Status
|
||||
- WireGuard VPN : ${ENABLE_WIREGUARD}
|
||||
- SyncThing : ${ENABLE_SYNCTHING}
|
||||
- FileBrowser : ${ENABLE_FILEBROWSER}
|
||||
-------------------------------------
|
||||
"
|
||||
if [ -f "/opt/ansible/ssh.key" ] ; then
|
||||
echo "
|
||||
-------------------------------------
|
||||
Ansible SSH Key"
|
||||
cat /opt/ansible/ssh.key.pub
|
||||
echo "-------------------------------------
|
||||
"
|
||||
fi
|
||||
|
|
@ -1,88 +0,0 @@
|
|||
#!/usr/bin/with-contenv bash
|
||||
|
||||
####################
|
||||
# Pictures storage
|
||||
####################
|
||||
if [ ! -d "/opt/pictures" ] ; then
|
||||
mkdir /opt/pictures
|
||||
fi
|
||||
|
||||
####################
|
||||
# Ansible
|
||||
####################
|
||||
if [ ! -d "/opt/ansible" ] ; then
|
||||
mkdir /opt/ansible
|
||||
fi
|
||||
if [ ! -d "/opt/ansible/.git" ] ; then
|
||||
git clone https://git.kemonine.info/PiFrame/ansible.git /opt/ansible/
|
||||
else
|
||||
cd /opt/ansible
|
||||
git pull
|
||||
fi
|
||||
if [ ! -f "/opt/ansible/ssh.key" ] ; then
|
||||
ssh-keygen -t rsa -b 4096 -f /opt/ansible/ssh.key -N ''
|
||||
echo "
|
||||
-------------------------------------
|
||||
Ansible SSH Key"
|
||||
cat /opt/ansible/ssh.key.pub
|
||||
echo "-------------------------------------
|
||||
"
|
||||
fi
|
||||
|
||||
####################
|
||||
# WireGuard
|
||||
####################
|
||||
if [ "$ENABLE_WIREGUARD" = true ] ; then
|
||||
ip link del dev test 2>/dev/null
|
||||
if ip link add dev test type wireguard; then
|
||||
echo "**** It seems the wireguard module is already active :) ****"
|
||||
ip link del dev test
|
||||
else
|
||||
echo "**** The wireguard module is not active, please install wireguard on the host and activate the 'wg' kernel module ****"
|
||||
fi
|
||||
if [ ! -d "/opt/wireguard" ] ; then
|
||||
mkdir /opt/wireguard
|
||||
fi
|
||||
fi
|
||||
|
||||
####################
|
||||
# syncthing
|
||||
####################
|
||||
if [ "$ENABLE_SYNCTHING" = true ] ; then
|
||||
if [ ! -d "/opt/syncthing" ]; then
|
||||
mkdir /opt/syncthing
|
||||
fi
|
||||
ST_CONF="/opt/syncthing/config.xml"
|
||||
if [ ! -f "$ST_CONF" ]; then
|
||||
echo "**** Initial Syncthing Config ****"
|
||||
/usr/bin/syncthing -generate /opt/syncthing
|
||||
sed -i 's/<address>127.0.0.1:8384<\/address>/<address>0.0.0.0:8384<\/address>/g' /opt/syncthing/config.xml
|
||||
sed -i 's/<folder id="default" label="Default Folder" path="\/root\/Sync" type="sendreceive" rescanIntervalS="3600" fsWatcherEnabled="true" fsWatcherDelayS="10" ignorePerms="false" autoNormalize="true">/<folder id="piframe-pictures" label="PiFrameFleet Pictures" path="\/opt\/pictures" type="sendonly" rescanIntervalS="86400" fsWatcherEnabled="true" fsWatcherDelayS="10" ignorePerms="false" autoNormalize="true">/g' /opt/syncthing/config.xml
|
||||
if [ -d "/root/Sync" ]; then
|
||||
rm -r /root/Sync
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
|
||||
####################
|
||||
# FileBrowser
|
||||
####################
|
||||
if [ "$ENABLE_FILEBROWSER" = true ] ; then
|
||||
if [ ! -d "/opt/filebrowser" ]; then
|
||||
mkdir /opt/filebrowser
|
||||
fi
|
||||
FB_DB="/opt/filebrowser/pictures.db"
|
||||
if [ ! -f "$FB_DB" ]; then
|
||||
echo "**** Initial FileBrowser Config ****"
|
||||
filebrowser -d $FB_DB \
|
||||
config init 2>&1 > /dev/null
|
||||
filebrowser -d $FB_DB \
|
||||
config set --address 0.0.0.0 2>&1 > /dev/null
|
||||
filebrowser -d $FB_DB \
|
||||
config set --port 9191 2>&1 > /dev/null
|
||||
filebrowser -d $FB_DB \
|
||||
config set --branding.name "PiFrameFleet - Pictures" 2>&1 > /dev/null
|
||||
filebrowser -d $FB_DB \
|
||||
users add admin password 2>&1 > /dev/null
|
||||
fi
|
||||
fi
|
||||
|
|
@ -1,20 +0,0 @@
|
|||
#!/usr/bin/with-contenv bash
|
||||
|
||||
# Only run the services control script (this one) once
|
||||
# DO NOT IMMEDIATELY DOWN -- NEED TO TERM THE REST OF THE SERVICES FIRST
|
||||
s6-svc -o /var/run/s6/services/_service_control
|
||||
|
||||
# s6-svc -od means to take down the service and flag it to run AT MOST once
|
||||
# Service run scripts should check for enablement and immediately exit for this to work well
|
||||
|
||||
if [ "$ENABLE_WIREGUARD" = false ] ; then
|
||||
s6-svc -od /var/run/s6/services/wireguard
|
||||
fi
|
||||
|
||||
#if [ "$ENABLE_SYNCTHING" = false ] ; then
|
||||
# s6-svc -od /var/run/s6/services/syncthing
|
||||
#fi
|
||||
|
||||
if [ "$ENABLE_FILE_BROWSER" = false ] ; then
|
||||
s6-svc -od /var/run/s6/services/filebrowser
|
||||
fi
|
||||
|
|
@ -1,11 +0,0 @@
|
|||
#!/usr/bin/with-contenv bash
|
||||
|
||||
if [ "$ENABLE_FILEBROWSER" = false ] ; then
|
||||
exit
|
||||
fi
|
||||
|
||||
/usr/local/bin/filebrowser \
|
||||
-d /opt/filebrowser/pictures.db \
|
||||
-r /opt/pictures \
|
||||
--img-processors 1 \
|
||||
--disable-thumbnails
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
#!/usr/bin/with-contenv bash
|
||||
|
||||
if [ "$ENABLE_SYNCTHING" = false ] ; then
|
||||
exit
|
||||
fi
|
||||
|
||||
/usr/bin/syncthing \
|
||||
-home="/opt/syncthing" \
|
||||
-no-browser
|
||||
|
|
@ -1,20 +0,0 @@
|
|||
#!/usr/bin/with-contenv bash
|
||||
|
||||
# Adapted from https://github.com/linuxserver/docker-wireguard
|
||||
|
||||
if [ "$ENABLE_WIREGUARD" = false ] ; then
|
||||
exit
|
||||
fi
|
||||
|
||||
_term() {
|
||||
echo "Caught SIGTERM signal!"
|
||||
wg-quick down /opt/wireguard/wg0.conf
|
||||
}
|
||||
|
||||
trap _term SIGTERM
|
||||
|
||||
wg-quick up /opt/wireguard/wg0.conf
|
||||
|
||||
sleep infinity &
|
||||
|
||||
wait
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
#!/bin/bash
|
||||
|
||||
git pull
|
||||
sudo docker build -t piframe/piframefleet:latest -f piframefleet/Dockerfile .
|
||||
|
|
@ -1,29 +0,0 @@
|
|||
#!/bin/bash
|
||||
|
||||
echo "**** Building latest PiFrameFleet container ****"
|
||||
$(pwd)/piframefleet_build.sh
|
||||
|
||||
echo "**** Deleting Original Container ****"
|
||||
sudo docker rm -f piframefleet
|
||||
|
||||
echo "**** Running PiFrameFleet ****"
|
||||
sudo docker run -it \
|
||||
--restart unless-stopped \
|
||||
--name piframefleet \
|
||||
--cap-add=NET_ADMIN \
|
||||
--cap-add=SYS_MODULE \
|
||||
-e TZ=UTC \
|
||||
-e ENABLE_WIREGUARD=true \
|
||||
-e ENABLE_SYNCTHING=true \
|
||||
-e ENABLE_FILEBROWSER=true \
|
||||
-p 51821:51821/udp \
|
||||
-p 8384:8384/tcp \
|
||||
-p 22000:22000/tcp \
|
||||
-p 9191:9191/tcp \
|
||||
-v /lib/modules:/lib/modules:ro \
|
||||
-v /var/piframefleet/syncthing:/opt/syncthing \
|
||||
-v /var/piframefleet/filebrowser:/opt/filebrowser \
|
||||
-v /var/piframefleet/wireguard:/opt/wireguard \
|
||||
-v /var/piframefleet/ansible:/opt/ansible \
|
||||
-v /var/piframefleet/pictures:/opt/pictures \
|
||||
piframe/piframefleet:latest
|
||||
Loading…
Reference in a new issue