🏗️ move make sub-cmd to sub-dir
This commit is contained in:
@@ -10,6 +10,61 @@ import (
|
||||
)
|
||||
|
||||
func (m *maker) HSNet(ctx context.Context) error {
|
||||
const (
|
||||
service = `[Unit]
|
||||
Description=hs-net Container Service
|
||||
Documentation=https://docs.containerd.io
|
||||
After=network.target containerd.service
|
||||
|
||||
[Service]
|
||||
# 启动前清理旧容器
|
||||
# ExecStartPre=-/usr/local/bin/k0s ctr -n hs-net task kill hs-net
|
||||
ExecStartPre=-/usr/local/bin/k0s ctr -n hs-net container rm hs-net
|
||||
|
||||
# 拉取最新镜像(按需启用/注释)
|
||||
# ExecStartPre=/usr/local/bin/k0s ctr -n hs-net images pull hub.yizhisec.com/hybridscope/hsnet:release_2.1.0-std
|
||||
|
||||
# 容器启动命令
|
||||
ExecStart=/usr/local/bin/k0s ctr -n hs-net run \
|
||||
--net-host \
|
||||
--privileged \
|
||||
--cgroup host \
|
||||
--env LD_LIBRARY_PATH=/yizhisec/hs_net \
|
||||
--env RUSTFLAGS="-C target-cpu=nehalem" \
|
||||
--env RUST_BACKTRACE=1 \
|
||||
--mount type=bind,src=/etc/localtime,dst=/etc/localtime,options=rbind:ro \
|
||||
--mount type=bind,src=/etc/hosts,dst=/etc/hosts,options=rbind:ro \
|
||||
--mount type=bind,src=/etc/yizhisec,dst=/etc/yizhisec,options=rbind:rw \
|
||||
--mount type=bind,src=/tmp,dst=/tmp,options=rbind:rw \
|
||||
--mount type=bind,src=/etc/yosguard/uuid,dst=/etc/gateway/uuid.json,options=rbind:ro \
|
||||
--mount type=bind,src=/mnt/huge,dst=/mnt/huge,options=rbind:rw \
|
||||
--mount type=bind,src=/var/run,dst=/var/run,options=rbind:rw \
|
||||
--mount type=bind,src=/yizhisec,dst=/yizhisec,options=rbind:rw \
|
||||
--mount type=bind,src=/yizhisec/hs_net/conf,dst=/etc/hs_net,options=rbind:rw \
|
||||
hub.yizhisec.com/hybridscope/hsnet:release_2.1.0-std hs-net
|
||||
|
||||
# 重启策略
|
||||
Restart=on-failure
|
||||
RestartSec=5s
|
||||
StartLimitInterval=60s
|
||||
StartLimitBurst=5
|
||||
|
||||
# 资源限制(按需调整)
|
||||
MemoryLimit=2G
|
||||
CPUQuota=80%
|
||||
|
||||
# 日志处理(将容器 stdout/stderr 交由 journald 管理)
|
||||
StandardOutput=journal
|
||||
StandardError=journal
|
||||
SyslogIdentifier=hs-net
|
||||
|
||||
# 清理退出的容器
|
||||
# ExecStop=/usr/local/bin/k0s ctr -n hs-net task kill hs-net
|
||||
ExecStopPost=/usr/local/bin/k0s ctr -n hs-net container rm hs-net
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target`
|
||||
)
|
||||
var (
|
||||
err error
|
||||
location = filepath.Join(opt.Cfg.Make.Dir, "dependency", "hs-net")
|
||||
|
||||
Reference in New Issue
Block a user