main:
  vscode:
    - docker:
        image: docker.cnb.cool/8888/cnbcnb/imadesk/cnb_xfce_qemu/cnb_xfce_qemu/ce12_cnb_qemu_vm_for_os_study:latest
      runner:
        cpus: 16
        # tags: cnb:arch:amd64:gpu
      services:
        - vscode
        - docker
      # 开发环境启动后会执行的任务
      stages:
        - name: 通过make展示帮助信息
          script: "[ -f ${HOME}/Makefile ] && make -f ${HOME}/Makefile help"
      env:
        # NOTE 如下是选择分支后_展示_帮助信息
        CNB_WELCOME_EXECUTE_COMMAND: |
          [[ -f "${HOME}/Makefile" ]] && make -f ${HOME}/Makefile help && echo -e "\n位于_git分支_main"

cd ${HOME} && make help && make de60

ps aux | grep qemu | grep 'name'

cd ${HOME} && make help && make de60_stop

cd ${HOME} && make help && make de60_hard_stop

ssh -p 2222 root@localhost

cd ${HOME} && ls -alh *.sh && source 03_ssh_2222端口_用户_root_密码_123456_执行本脚本登录.sh

sshpass -p123456 ssh -p 2222 root@localhost

ssh -p 2222 root@localhost bash -c "ls -lah /root"

ssh -p 2222 root@localhost << 'EOF'
de30_exec_inside_vm() {
  ls -alh /root
  cd /etc
  find . | wc -l
}
de30_exec_inside_vm
EOF

sshpass -p '123456' ssh -p 2222 root@localhost << 'EOF'
de60_exec_inside_vm() {
  ls -alh /root
  cd /etc
  find . | wc -l
}
de60_exec_inside_vm
EOF

#!/bin/bash
my_function() {
  echo "Hello from remote VM!"
  echo "Current user: $(whoami)"
  echo "Date: $(date)"
}
my_function

ssh -p 2222 root@localhost 'bash -s' < remote_func.sh

FUNCTION_NAME="my_remote_func"
FUNCTION_BODY="echo '这是一个可以通过拼串模式,动态创建的bash函数'; echo '虚拟内执行: \$(whoami)'; ls -lah /root"
sshpass -p '123456' ssh -p 2222 root@localhost << EOF
$FUNCTION_NAME() {
  $FUNCTION_BODY
}
$FUNCTION_NAME
EOF

export source_dir=/root
export target_dir=/tmp/cm30_scp_de60_vm_target
mkdir -p ${target_dir}
cd ${target_dir}
scp \
  -P 2222 \
  -r \
  root@localhost:/${source_dir} \
  ${target_dir}

ls -alh ${target_dir} && pwd

# rsync 从 cnb.cool 到 本地笔记本电脑环境(Linux或 windows 10 WSL环境) 是成功的
export source_dir=/root
export target_dir=/tmp/cm36_rsync_de60_vm_target
mkdir -p ${target_dir}
cd ${target_dir}
apt update && apt install -y rsync lsof tree psmisc && \
rsync \
  -avzP \
  -e "ssh -p 2222" \
  root@localhost:${source_dir} .

ls -lah ${target_dir} && pwd

wget -c \
  https://cloud.debian.org/images/cloud/bookworm/latest/debian-12-generic-amd64.qcow2

cp debian-12-generic-amd64.qcow2 \
  dm30_debian-12-generic-amd64_这里是来自debian官方的原始镜像_需要用guestfish修改root密码为123456.qcow2

cp -f debian-12-generic-amd64.qcow2 \
  ../de60_debian_12_generic_amd64.qcow2

[debian-10.2-cloud]
name=Debian 10.2.0 (Buster) Cloud
osinfo=debian10
arch=x86_64
file=de60_debian_12_generic_amd64.qcow2
checksum[sha512]=296ad8345cb49e52464a0cb8bf4365eb0b9e4220c47ebdd73d134d51effc756d5554aee15027fffd038fef4ad5fa984c94208bce60572d58b2ab26f74bb2a5de
format=qcow2
size=566434304
revision=20191116
notes=Debian 10.2.0 (Buster).

 This is a Debian installation, suited for running as OpenStack guest.

[root@support01 ~]# openssl passwd -1 123456
$1$0cFL6rLW$aKxksiunPZOskbplB5Uk90

apt update && apt install -y guestfish

guestfish --rw -a de60_debian_12_generic_amd64.qcow2

Welcome to guestfish, the guest filesystem shell for
editing virtual machine filesystems and disk images.

Type: 'help' for help on commands
      'man' to read the manual
      'quit' to quit the shell

>  run
>  list-filesystems
/dev/sda1: ext4
>  mount /dev/sda1 /
>

>  vi /etc/shadow

root:*:18216:0:99999:7:::
daemon:*:18216:0:99999:7:::
bin:*:18216:0:99999:7:::
sys:*:18216:0:99999:7:::
sync:*:18216:0:99999:7:::
games:*:18216:0:99999:7:::
man:*:18216:0:99999:7:::
lp:*:18216:0:99999:7:::
mail:*:18216:0:99999:7:::
news:*:18216:0:99999:7:::
uucp:*:18216:0:99999:7:::
proxy:*:18216:0:99999:7:::
www-data:*:18216:0:99999:7:::
backup:*:18216:0:99999:7:::
list:*:18216:0:99999:7:::
irc:*:18216:0:99999:7:::
gnats:*:18216:0:99999:7:::
nobody:*:18216:0:99999:7:::
_apt:*:18216:0:99999:7:::
systemd-timesync:*:18216:0:99999:7:::
systemd-network:*:18216:0:99999:7:::
systemd-resolve:*:18216:0:99999:7:::
messagebus:*:18216:0:99999:7:::
unscd:*:18216:0:99999:7:::
ntp:*:18216:0:99999:7:::
sshd:*:18216:0:99999:7:::

root:$1$0cFL6rLW$aKxksiunPZOskbplB5Uk90:18216:0:99999:7:::

>  vi /etc/ssh/sshd_config

#PermitRootLogin prohibit-password

PermitRootLogin yes

# PubkeyAuthentication yes

PubkeyAuthentication yes

#PasswordAuthentication yes

PasswordAuthentication yes

# See /etc/apt/sources.list.d/debian.sources
deb https://mirrors.tencent.com/debian/ bookworm main non-free non-free-firmware contrib
deb-src https://mirrors.tencent.com/debian/ bookworm main non-free non-free-firmware contrib
deb https://mirrors.tencent.com/debian-security/ bookworm-security main
deb-src https://mirrors.tencent.com/debian-security/ bookworm-security main
deb https://mirrors.tencent.com/debian/ bookworm-updates main non-free non-free-firmware contrib
deb-src https://mirrors.tencent.com/debian/ bookworm-updates main non-free non-free-firmware contrib
deb https://mirrors.tencent.com/debian/ bookworm-backports main non-free non-free-firmware contrib
deb-src https://mirrors.tencent.com/debian/ bookworm-backports main non-free non-free-firmware contrib

#!/bin/bash

# 函数:设置静态且不可变的 /etc/resolv.conf
# 功能:
#   1. 强制删除 /etc/resolv.conf(无论是文件还是符号链接)
#   2. 写入自定义的 DNS 服务器地址
#   3. 使用 chattr +i 锁定文件,防止被修改
# 注意:此函数需要 root 权限执行
set_static_resolv_conf() {
    # 定义要写入的 DNS 服务器内容
    local dns_content="nameserver 10.0.2.3
nameserver 114.114.114.114
nameserver 8.8.8.8"

    echo ">>> 开始配置静态 /etc/resolv.conf..."

    # 步骤 1: 强制删除现有的 /etc/resolv.conf
    # -f 选项可以强制删除文件或符号链接,即使不存在也不会报错
    echo ">>> 正在删除现有的 /etc/resolv.conf..."
    rm -f /etc/resolv.conf
    if [ $? -eq 0 ]; then
        echo ">>> 已成功删除旧的 /etc/resolv.conf."
    else
        echo "!!! 错误:删除 /etc/resolv.conf 失败." >&2
        return 1
    fi

    # 步骤 2: 写入新的 DNS 配置
    # 使用 echo 和 > 重定向来创建新文件并写入内容
    echo ">>> 正在写入新的 DNS 配置..."
    echo -e "$dns_content" > /etc/resolv.conf
    if [ $? -eq 0 ]; then
        echo ">>> 已成功写入新的 /etc/resolv.conf."
    else
        echo "!!! 错误:写入 /etc/resolv.conf 失败." >&2
        return 1
    fi

    # 步骤 3: 使用 chattr 锁定文件
    # +i 属性(immutable)会让文件不能被修改,删除,重命名,即使是 root 也不行
    echo ">>> 正在锁定 /etc/resolv.conf 文件..."
    chattr +i /etc/resolv.conf
    if [ $? -eq 0 ]; then
        echo ">>> 成功!/etc/resolv.conf 已被设为不可变."
    else
        echo "!!! 错误:使用 chattr 锁定文件失败." >&2
        return 1
    fi

    echo ">>> 所有操作完成!"
    return 0
}

sudo hostnamectl set-hostname de60-debian-12-qemu-vm

>  vi /root/.bashrc

# ~/.bashrc: executed by bash(1) for non-login shells.

# Note: PS1 and umask are already set in /etc/profile. You should not
# need this unless you want different defaults for root.
# PS1='${debian_chroot:+($debian_chroot)}\h:\w\$ '
# umask 022

# You may uncomment the following lines if you want `ls' to be colorized:
# export LS_OPTIONS='--color=auto'
# eval "`dircolors`"
# alias ls='ls $LS_OPTIONS'
# alias ll='ls $LS_OPTIONS -l'
# alias l='ls $LS_OPTIONS -lA'
#
# Some more alias to avoid making mistakes:
# alias rm='rm -i'
# alias cp='cp -i'
# alias mv='mv -i'

# ~/.bashrc: executed by bash(1) for non-login shells.

# NOTE 必须保持这样判断,这样通过scp拷贝内容的时候,不会出现问题
case $- in
    *i*) ;;
      *) return;;
esac


# Note: PS1 and umask are already set in /etc/profile. You should not
# need this unless you want different defaults for root.
# PS1='${debian_chroot:+($debian_chroot)}\h_虚拟机内部:\w\$ '
# NOTE 用黄色字体显示PS1 提示符
PS1='\[\e[1;33m\]${debian_chroot:+($debian_chroot)}\h_虚拟机内部:\w\$ \[\e[0m\]'
umask 022

# You may uncomment the following lines if you want `ls' to be colorized:
export LS_OPTIONS='--color=auto'
eval "$(dircolors)"
alias ls='ls $LS_OPTIONS'
alias ll='ls $LS_OPTIONS -l'
alias l='ls $LS_OPTIONS -lA'
#
# Some more alias to avoid making mistakes:
# alias rm='rm -i'
# alias cp='cp -i'
# alias mv='mv -i'
# dhclient ens3

ensure_dhclient_running() {
    if ! pgrep -f "dhclient.*ens3" > /dev/null; then
        echo "dhclient for ens3 is not running. Starting it now..."
        /sbin/dhclient ens3
    fi
}

# ensure_dhclient_running

de60_exec_inside_vm() {
    local lock_file="${HOME}/lc20_de60_debian_12_vm_lock.sh"

    # 检查锁文件是否存在
    if [ -f "$lock_file" ]; then
       # echo "锁文件已存在,跳过执行."
        echo "#--> 最后一次执行: $(date)" >> "$lock_file"

        return 0
    fi

    echo "锁文件不存在,开始执行命令..."

    # 执行命令序列
    echo "正在显示网络接口信息..."
    ip a

    echo "正在为 ens3 接口获取 IP 地址..."
    dhclient ens3

    echo "再次显示网络接口信息..."
    ip a

    echo "正在显示路由表..."
    ip route

    echo "正在测试网络连通性(ping 8.8.8.8)..."
    ping 8.8.8.8 -c 3

    echo "正在测试 HTTP 连接(访问 www.baidu.com)..."
    curl www.baidu.com
    echo -e  "\n\n\n"
    hostnamectl

    # 创建锁文件
    touch "$lock_file"
    echo "###--> 创建了锁文件: $(date)" >> "$lock_file"
    echo "已创建锁文件 :$lock_file"
    echo -e "\e[1;32m\n本信息只在第1次登录的时候测试网络联通性,以后登录都不会再测试了\e[0m"

}

# 调用函数
de60_exec_inside_vm

>  vi /usr/share/vim/vim81/defaults.vim

if has('mouse')
  set mouse=a
endif

if has('mouse')
  set mouse-=a
endif

# 必须是切换到 git仓库的 main分支
git switch main

env | grep VSCODE_REMOTE

# 获得类似如下的内容

CNB_VSCODE_REMOTE_SSH_SCHEMA=vscode://vscode-remote/ssh-remote+cnb-11g-1j6caqd5t-001.59900aed-2fcf-469e-8389-2e640dea4227-qmo@remote.cnb.space:2201/workspace/

#!/bin/bash

# NOTE 如下的URL是拷贝自上面的 CNB_VSCODE_REMOTE_SSH_SCHEMA 环境变量
export URL="vscode://vscode-remote/ssh-remote+cnb-11g-1j6caqd5t-001.59900aed-2fcf-469e-8389-2e640dea4227-qmo@remote.cnb.space:2201/workspace/"

SSH_ADDRESS=$(echo "$URL" | awk -F'+' '{print $2}' | awk -F':' '{print $1}')

export MY_CNB_CURRENT_SSH_ADDRESS="$SSH_ADDRESS"

echo "MY_CNB_CURRENT_SSH_ADDRESS=$MY_CNB_CURRENT_SSH_ADDRESS"

ssh -p 2201 ${MY_CNB_CURRENT_SSH_ADDRESS}

#!/bin/bash

# NOTE 如下的URL是拷贝自上面的 CNB_VSCODE_REMOTE_SSH_SCHEMA 环境变量
export URL="vscode://vscode-remote/ssh-remote+cnb-11g-1j6caqd5t-001.59900aed-2fcf-469e-8389-2e640dea4227-qmo@remote.cnb.space:2201/workspace/"

SSH_ADDRESS=$(echo "$URL" | awk -F'+' '{print $2}' | awk -F':' '{print $1}')

export MY_CNB_CURRENT_SSH_ADDRESS="$SSH_ADDRESS"

echo "MY_CNB_CURRENT_SSH_ADDRESS=$MY_CNB_CURRENT_SSH_ADDRESS"

# NOTE 下面需要修改为你自己的qemu qcow2镜像的地址
export my_source_qemu_vm_filename="my_qemu_vm.qcow2"
export cnb_target_dir="/tmp/cm40_de60_qemu_vm_rsync_workdir"

# NOTE 如下参数是支持断点续传的
apt update && apt install -y rsync lsof tree psmisc && \
rsync \
  -avzP \
  -e "ssh -p 2201" \
  ${my_source_qemu_vm_filename} \
  ${cnb_target_dir}

# NOTE 尝试通过 ssh通道 查看一下 传递到 cnb.cool主工作空间中文件的情况
ssh -p 2201 ${MY_CNB_CURRENT_SSH_ADDRESS} ls -lah "${cnb_target_dir}/${my_source_qemu_vm_filename}"

# NOTE 为了简化本README 我们假设您的qemu虚拟机 只有一个qcow2文件组成
if [[ -f "${cnb_target_dir}/${my_source_qemu_vm_filename}" ]]; then
  if [[ -f "/workspace/ho38_qemu_images/de60_debian_12_generic_amd64.qcow2" ]]; then
    if [[ ! -f "/workspace/ho38_qemu_images/oe60_de60_debian_12_备份虚拟机/de60_debian_12_generic_amd64.qcow2" ]]; then
      # NOTE 通过移动原有的文件_实现备份的目的
      mv \
        "/workspace/ho38_qemu_images/de60_debian_12_generic_amd64.qcow2" \
        "/workspace/ho38_qemu_images/oe60_de60_debian_12_备份虚拟机/de60_debian_12_generic_amd64.qcow2"
    fi

    # NOTE 更改原有的镜像的名字_方便以后的_操作
    echo -e "/workspace/ho38_qemu_images/oe60_de60_debian_12_备份虚拟机/bk30_$(date '+%Y-%m-%d日_%H:%M:%S秒')_虚拟机镜像备份_de60_debian_12_generic_amd64.qcow2"

    mv \
      "/workspace/ho38_qemu_images/oe60_de60_debian_12_备份虚拟机/de60_debian_12_generic_amd64.qcow2" \
      "/workspace/ho38_qemu_images/oe60_de60_debian_12_备份虚拟机/bk30_$(date '+%Y-%m-%d日_%H:%M:%S秒')_虚拟机镜像备份_de60_debian_12_generic_amd64.qcow2"

    # NOTE 把上面从您自己的qemu虚拟机的qcow2镜像拷贝到特定的位置
    # 并且修改为特定的名称
    # 原因是,这里一个简化的README.md 这样可以服用 我们演示仓库中 现有的脚本,更加容易跑通
    cp -f \
      "${cnb_target_dir}/${my_source_qemu_vm_filename}" \
      "/workspace/ho38_qemu_images/oe60_de60_debian_12_备份虚拟机/de60_debian_12_generic_amd64.qcow2"

    # 紧接着检查退出状态码
    if [ $? -eq 0 ]; then
      echo "✅ 上一个命令执行成功!"
    else
      echo "❌ 20_上一个命令执行失败_原因未知"
    fi

  else
    echo -e "30_情况不明,无法继续进行"
  fi
else
  echo -e "60_没有发现_需要更新的_qemu_虚拟机的镜像_无法在进行操作"
fi

cd /workspace && git switch main

cd /workspace

if [[ -d "/workspace/ho38_qemu_images/sh60_debian_12_虚拟机的_一些文件/rootfs/root/.ssh" ]]; then

  cp -r -f \
    "/workspace/ho38_qemu_images/sh60_debian_12_虚拟机的_一些文件/rootfs/root/.ssh" \
    "/workspace/ho38_qemu_images/sh60_debian_12_虚拟机的_一些文件/rootfs/root/bk30_$(date '+%Y-%m-%d日_%H:%M:%S秒')_上一个虚拟机镜像_配合的_ssh证书备份_ssh"

else
  echo -e "70_没有找到原有的_ssh证书的目录_无法继续"
fi

cd /workspace/ho38_qemu_images/sh60_debian_12_虚拟机的_一些文件/rootfs/root/.ssh

# 手动替换这些证书

➜  .ssh git:(main) ✗ pwd
/workspace/ho38_qemu_images/sh60_debian_12_虚拟机的_一些文件/rootfs/root/.ssh
➜  .ssh git:(main) ✗ ll
total 20K
-rw-r--r-- 1 root root  748 Sep 29 08:01 authorized_keys
-rw-r--r-- 1 root root 3.4K Sep 29 08:01 id_rsa
-rw-r--r-- 1 root root  748 Sep 29 08:01 id_rsa.pub
-rw-r--r-- 1 root root 1.1K Sep 29 08:01 known_hosts
-rw-r--r-- 1 root root  714 Sep 29 08:01 readme.md

cd /workspace

# TODO 下面要特别注意_替换为您自己的docker镜像的地址
bash de93_replace_cnb_docker_image_full_path.sh \
        "docker.cnb.cool/1111/os/cnb_qemu_vm:latest" \
        "docker.cnb.cool/测试组织/fe30_目标仓库:latest"

# 或者如下的命令(注意:下述的方法,有可能失败)
bash de93_replace_cnb_docker_image_full_path.sh \
    "docker.cnb.cool/1111/os/cnb_qemu_vm:latest" \
    "$CNB_DOCKER_REGISTRY/$CNB_REPO_SLUG_LOWERCASE:latest"

cd /workspace

git switch main

git status

# TODO 仔细看这行,这里有一个最为关键的,您必须手动修改的地方
# /workspace/DMakefile
# 大约第11行左右
# 您必须手工的修改为您的docker的地址
# 我没有办法用变量的模式,替您自动完成(经过多次尝试,我们使用变量模式都是失败的)
# 类似如下
# ce12_cnb_qemu_vm_for_os_study_IMAGE_NAME="docker.cnb.cool/1111/os/cnb_qemu_vm:latest"

# 或者如下的命令(注意:下述的方法,有可能失败)
bash de93_replace_cnb_docker_image_full_path.sh \
    "docker.cnb.cool/1111/os/cnb_qemu_vm:latest" \
    "$CNB_DOCKER_REGISTRY/$CNB_REPO_SLUG_LOWERCASE:latest"

cd /workspace && git add .

git commit -m "我把 de60-debian-12-qemu-vm 虚拟机的 qcow2 镜像文件 替换我自己的版本了"

apt update && apt install -y make lsof

# NOTE 下面将
# 依据main分支中的修改 对另外2个git 分支 进行git merge操作(从main分支到该分支 方向)
# git push --all
# docker build .
# docker push
[[ -f "/workspace/DMakefile" ]] && make -f DMakefile sync

# 可以使用如下命令,加速cnb.cool工作空间的关闭
# 不是所有的cnb.cool工作空间中,都安装好了 killall 命令
killall docker-init