66 lines
2.8 KiB
Markdown
66 lines
2.8 KiB
Markdown
# lxc-iptag
|
|
|
|
lxc-iptag is a simple script to add ip tags to LXC containers.
|
|
|
|
|
|
|
|
## 1. Installation
|
|
|
|
```sh
|
|
curl -sL https://github.com/gitsang/lxc-iptag/raw/main/install.sh | bash
|
|
```
|
|
|
|
This script will:
|
|
|
|
- Install script prerequisites
|
|
- Install the `lxc-iptag` script to `/usr/local/bin/lxc-iptag`
|
|
- Copy config file to `/usr/local/etc/lxc-iptag.conf`
|
|
- Add a systemd unit to start the service
|
|
|
|
### 1.1 Update
|
|
|
|
```sh
|
|
curl -sSL https://raw.githubusercontent.com/gitsang/lxc-iptag/main/lxc-iptag -o /usr/local/bin/lxc-iptag && chmod +x /usr/local/bin/lxc-iptag
|
|
systemctl restart lxc-iptag.service
|
|
```
|
|
|
|
This script will only update the `lxc-iptag` executable script
|
|
|
|
## 2. Configure
|
|
|
|
Open `/usr/local/etc/lxc-iptag.conf` and change the config
|
|
|
|
| Option | Example | Description |
|
|
| ------------------------------- | ------------------------------------------- | ------------------------------------------------------------------------------------------------------- |
|
|
| CIDR_LIST | `(192.168.0.0/16 172.16.0.0/12 10.0.0.0/8)` | IP filter list in CIDR format |
|
|
| LOOP_INTERVAL | `60` | Main loop interval(seconds) |
|
|
| FW_NET_INTERFACE_CHECK_INTERVAL | `60` | The interval(seconds) for using `ip link` to check lxc status changed (Set -1 to disable this feature) |
|
|
| LXC_STATUS_CHECK_INTERVAL | `-1` | The interval(seconds) for using `pct list` to check lxc status changed (Set -1 to disable this feature) |
|
|
| FORCE_UPDATE_INTERVAL | `1800` | The interval(seconds) for force check and update lxc tags |
|
|
| EXCLUSION_LIST | see [lxc-iptag.conf](./lxc-iptag.conf) | List of container id or ip to exclude from tagging |
|
|
|
|
## 3. Uninstall
|
|
|
|
```sh
|
|
# stop lxc-iptag
|
|
systemctl stop lxc-iptag.service
|
|
systemctl disable lxc-iptag.service
|
|
|
|
# remove lxc-iptag
|
|
rm -f /lib/systemd/system/lxc-iptag.service
|
|
rm -f /usr/local/etc/lxc-iptag.conf
|
|
rm -f /usr/local/bin/lxc-iptag
|
|
```
|
|
|
|
If you want to remove all lxc-iptag related datas (includes all ip tags), run the following command:
|
|
|
|
This script will:
|
|
|
|
- Stop and disable `lxc-iptag` systemd service
|
|
- Remove pve all lxc ip tags
|
|
- Delete all lxc-iptag related systemd unit, config file and script
|
|
|
|
```sh
|
|
curl -sL https://github.com/gitsang/lxc-iptag/raw/main/uninstall.sh | bash
|
|
```
|