mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-05-23 17:14:44 +00:00
SystemIdleProcess
a73aefa8fd
* configure gateway during install for best chance of it not getting disabled * add missing dbus-run-session on service * add back chmod to .env file * remove extra character * add back mkdir for /root/.ironclaw * remove erroneous msg blocks, service env values and tab in post completion gateway line
98 lines
3.4 KiB
Bash
98 lines
3.4 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Copyright (c) 2021-2026 community-scripts ORG
|
|
# Author: MickLesk (CanbiZ)
|
|
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
|
# Source: https://github.com/nearai/ironclaw
|
|
|
|
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
|
color
|
|
verb_ip6
|
|
catch_errors
|
|
setting_up_container
|
|
network_check
|
|
update_os
|
|
|
|
msg_info "Installing Dependencies"
|
|
$STD apk add openssl dbus gnome-keyring
|
|
msg_ok "Installed Dependencies"
|
|
|
|
msg_info "Installing PostgreSQL"
|
|
$STD apk add postgresql17 postgresql17-openrc postgresql-pgvector postgresql-common
|
|
$STD rc-service postgresql setup
|
|
$STD rc-update add postgresql default
|
|
$STD rc-service postgresql start
|
|
msg_ok "Installed PostgreSQL"
|
|
|
|
msg_info "Setting up Database"
|
|
PG_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
|
|
$STD su -s /bin/sh postgres -c "psql -c \"CREATE ROLE ironclaw WITH LOGIN PASSWORD '${PG_PASS}';\""
|
|
$STD su -s /bin/sh postgres -c "psql -c \"CREATE DATABASE ironclaw WITH OWNER ironclaw;\""
|
|
$STD su -s /bin/sh postgres -c "psql -d ironclaw -c \"CREATE EXTENSION IF NOT EXISTS vector;\""
|
|
msg_ok "Set up Database"
|
|
|
|
fetch_and_deploy_gh_release "ironclaw-bin" "nearai/ironclaw" "prebuild" "latest" "/usr/local/bin" \
|
|
"ironclaw-$(uname -m)-unknown-linux-musl.tar.gz"
|
|
chmod +x /usr/local/bin/ironclaw
|
|
|
|
msg_info "Configuring Environment"
|
|
GATEWAY_TOKEN=$(openssl rand -hex 32)
|
|
mkdir -p /root/.ironclaw
|
|
{
|
|
echo "Gateway-Token"
|
|
echo "Token: $GATEWAY_TOKEN"
|
|
} >> /root/.ironclaw/gateway.creds
|
|
|
|
mkdir -p /root/.ironclaw
|
|
cat <<EOF >/root/.ironclaw/.env
|
|
DATABASE_BACKEND=postgres
|
|
DATABASE_URL=postgresql://ironclaw:${PG_PASS}@localhost:5432/ironclaw?sslmode=disable
|
|
GATEWAY_ENABLED=true
|
|
GATEWAY_HOST=0.0.0.0
|
|
GATEWAY_PORT=3000
|
|
GATEWAY_AUTH_TOKEN=${GATEWAY_TOKEN}
|
|
CLI_ENABLED=false
|
|
RUST_LOG=ironclaw=info,tower_http=info
|
|
EOF
|
|
chmod 600 /root/.ironclaw/.env
|
|
msg_ok "Configured Environment"
|
|
|
|
msg_info "Configuring IronClaw"
|
|
# Set values in the database since it is typically the true source of truth and ensures values are set correctly on first run before the service starts.
|
|
/usr/local/bin/ironclaw --no-onboard config set database_backend postgres >/dev/null
|
|
/usr/local/bin/ironclaw --no-onboard config set database_url "postgresql://ironclaw:${PG_PASS}@localhost:5432/ironclaw?sslmode=disable" >/dev/null
|
|
/usr/local/bin/ironclaw --no-onboard config set channels.gateway_enabled true >/dev/null
|
|
/usr/local/bin/ironclaw --no-onboard config set channels.gateway_host 0.0.0.0 >/dev/null
|
|
/usr/local/bin/ironclaw --no-onboard config set channels.gateway_port 3000 >/dev/null
|
|
/usr/local/bin/ironclaw --no-onboard config set channels.gateway_auth_token "${GATEWAY_TOKEN}" >/dev/null
|
|
/usr/local/bin/ironclaw --no-onboard config set channels.cli_enabled false >/dev/null
|
|
/usr/local/bin/ironclaw --no-onboard config set secrets_master_key_source none >/dev/null
|
|
# Running ironclaw defaults to use env for secrets and creates this entry, but we want to set that during onboard.
|
|
sleep 5
|
|
sed -i '/SECRETS_MASTER_KEY/d' /root/.ironclaw/.env
|
|
msg_ok "Configured IronClaw"
|
|
|
|
msg_info "Creating Service"
|
|
cat <<EOF >/etc/init.d/ironclaw
|
|
#!/sbin/openrc-run
|
|
|
|
name="IronClaw"
|
|
description="IronClaw AI Agent"
|
|
command="/usr/bin/dbus-run-session"
|
|
command_args="/usr/local/bin/ironclaw"
|
|
command_background=true
|
|
pidfile="/run/ironclaw.pid"
|
|
directory="/root"
|
|
supervise_daemon_args="--env-file /root/.ironclaw/.env"
|
|
|
|
depend() {
|
|
need net postgresql
|
|
}
|
|
EOF
|
|
chmod +x /etc/init.d/ironclaw
|
|
$STD rc-update add ironclaw default
|
|
msg_ok "Created Service"
|
|
|
|
motd_ssh
|
|
customize
|