title: pve的lxc安装企业版雷池(软件版)
tags:
- 长亭科技
- 雷池
- pve
- lxc
categories: - 技术/软件
date: 2026-07-15 10:03:00
author: 陈小可
excerpt: 在pve下使用CT安装企业版雷池(软件版)
本文章仅供学习研究使用，该文章的最终解释权归作者所有
前置条件
CT需要联网，如果不联网，可以使用离线的方法安装如下组件tcpdump curl vim strace net-tools sysstat
下载CT模板
创建CT
配置CT
物理机修改ct的配置,112为创建CT的id号。
/etc/pve/lxc/112.conf示例
arch: amd64
cores: 4
features: fuse=1,mount=nfs;cifs,nesting=1
hostname: CT112
memory: 8192
mp0: /,mp=/mnt/root
net0: name=eth0,bridge=vmbr0,gw=xxxx,hwaddr=xxxxxx,ip=xxxx/xx,type=veth
ostype: ubuntu
rootfs: local:xxx/vm-xxx-disk-0.raw,size=100G
swap: 1024
lxc.cgroup.devices.allow: a
lxc.cap.drop:
lxc.cgroup2.devices.allow: c 10:200 rwm需要添加
lxc.cgroup.devices.allow: a
lxc.cap.drop:
lxc.cgroup2.devices.allow: c 10:200 rwm其中mp0: /,mp=/mnt/root这句的意思是挂载宿主机/root目录到CT的/mnt/root目录，安装文件我丢宿主机上
CT运行，开始安装
安装组件，如果不能在线，可以使用离线方式安装
apt install -y tcpdump curl vim strace net-tools sysstat安装雷池
使用chmod +x给执行权限
chmod +x safeline-3-software-installer-xxxx.bin可以直接安装，我这里用nohup
nohup ./safeline-3-software-installer-xxxx.bin -v -p {密码} > logs2.log 2>&1 &如果直接按照，运行如下命令
./safeline-3-software-installer-xxxx.bin -v -p {密码}./safeline-3-software-installer-xxx.bin -h
Usage:
SAFELINE Installer safeline-3-software-installer [flags]
Flags:
-e, --env stringArray set environment variable (key=value)
-h, --help help for SAFELINE
-p, --password string install password
-v, --verbose verbose logging
-C, --work-dir string working directory安装后看docker信息
root# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
root# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
portus.in.chaitin.net/safeline-2/mgt-api xxxx6 xxxx 2 weeks ago 2.64GB
portus.in.chaitin.net/safeline-2/mgt-api latest xxxx 2 weeks ago 2.64GB
portus.in.chaitin.net/safeline-2/postgres-standby xxxx xxxx 2 weeks ago 652MB
portus.in.chaitin.net/safeline-2/postgres-standby latest xxxx 2 weeks ago 652MB
portus.in.chaitin.net/safeline-2/waap xxxx xxxx 2 weeks ago 274MB
portus.in.chaitin.net/safeline-2/waap latest xxxx 2 weeks ago 274MB
portus.in.chaitin.net/safeline-2/mario xxxx xxxx 2 weeks ago 220MB
portus.in.chaitin.net/safeline-2/mario latest xxxx 2 weeks ago 220MB
portus.in.chaitin.net/safeline-2/mgt-keepalived xxxx dxxxx 2 weeks ago 87.3MB
portus.in.chaitin.net/safeline-2/mgt-keepalived latest xxxx 2 weeks ago 87.3MB
portus.in.chaitin.net/safeline-2/keepalived xxxx xxxx 2 weeks ago 88.2MB
portus.in.chaitin.net/safeline-2/keepalived latest xxxx 2 weeks ago 88.2MB
portus.in.chaitin.net/safeline-2/postgres-primary xxxx xxxx 2 weeks ago 586MB
portus.in.chaitin.net/safeline-2/postgres-primary latest xxxx 2 weeks ago 586MB
portus.in.chaitin.net/safeline-2/tengine xxxx xxxx 2 weeks ago 204MB
portus.in.chaitin.net/safeline-2/tengine latest xxxx 2 weeks ago 204MB
portus.in.chaitin.net/safeline-2/tengine-guomi xxxx fxxxx 2 weeks ago 193MB
portus.in.chaitin.net/safeline-2/tengine-guomi latest xxxx 2 weeks ago 193MB
portus.in.chaitin.net/safeline-2/detector-srv xxxx xxxx 2 weeks ago 589MB
portus.in.chaitin.net/safeline-2/detector-srv latest xxxx 2 weeks ago 589MB
portus.in.chaitin.net/safeline-2/ripley xxxx xxxx 2 weeks ago 333MB
portus.in.chaitin.net/safeline-2/ripley latest xxxx 2 weeks ago 333MB
portus.in.chaitin.net/safeline-2/portrait xxxx xxxx 2 weeks ago 106MB
portus.in.chaitin.net/safeline-2/portrait latest xxxx 2 weeks ago 106MB
portus.in.chaitin.net/safeline-2/fvm-compiler xxxx xxxx 2 weeks ago 441MB
portus.in.chaitin.net/safeline-2/fvm-compiler latest xxxx 2 weeks ago 441MB
portus.in.chaitin.net/safeline-public/cadvisor xxxx-selfbuild xxxx 2 years ago 87MB
portus.in.chaitin.net/safeline-public/highgo-db xxxx xxxx 2 years ago 1.64GB
registry-mirrors.dev.in.chaitin.net/library/redis xxxx xxxx 3 years ago 117MB
portus.in.chaitin.net/safeline-public/clickhouse-server xxxx xxxx 3 years ago 890MB
docker-elastic-co.dev.in.chaitin.net/elasticsearch/elasticsearch xxxx xxxx 3 years ago 619MB
registry-mirrors.dev.in.chaitin.net/library/postgres xxxx xxxx5 4 years ago 284MB
portus.in.chaitin.net/safeline-2/umbrella-agent xxxx xxxx 5 years ago 121MB
portus.in.chaitin.net/library/etcd xxxx xxxx 7 years ago 36MB初始化
systemctl stop minion
软件反代单机
minion setup -p /data/safeline -t Software
systemctl restart minion
软件反代集群
minion setup -p /data/safeline -t S20Management
systemctl restart minion查看状态
大概间隔1分钟左右
docker ps -a
管理IP
浏览器打开 https://当前机器 IP :9443 访问管理界面
导入证书后登录管理界面进行使用
docker信息
root@root# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
xxxxx portus.in.chaitin.net/safeline-2/waap:latest "/waap/entrypoint.sh" 19 hours ago Up 19 hours (healthy) waap
xxxxx portus.in.chaitin.net/safeline-2/fvm-compiler:latest "/fvm-compiler/entry…" 19 hours ago Up 19 hours (healthy) fvm-compiler
xxxxx portus.in.chaitin.net/safeline-public/cadvisor:xxxx-selfbuild "/usr/bin/cadvisor -…" 19 hours ago Up 19 hours (healthy) cadvisor
xxxxx portus.in.chaitin.net/safeline-2/tengine:latest "docker-entrypoint.s…" 19 hours ago Up 19 hours (healthy) tengine
xxxxx portus.in.chaitin.net/safeline-2/detector-srv:latest "/detector/entrypoin…" 19 hours ago Up 19 hours (healthy) 8000-8001/tcp detector-srv
xxxxx portus.in.chaitin.net/safeline-2/mario:latest "/mario/entrypoint.sh" 19 hours ago Up 19 hours (healthy) mario
xxxxx portus.in.chaitin.net/safeline-2/mgt-api:latest "/app/deploy/entrypo…" 19 hours ago Up 19 hours (healthy) 0.0.0.0:9443->1443/tcp mgt-api
xxxxx portus.in.chaitin.net/safeline-public/clickhouse-server:xxxxx "/entrypoint.sh" 19 hours ago Up 19 hours 8123/tcp, 9000/tcp, 9009/tcp mgt-clickhouse
xxxxx registry-mirrors.dev.in.chaitin.net/library/redis:xxx "docker-entrypoint.s…" 19 hours ago Up 19 hours 6379/tcp mgt-redis
xxxxx registry-mirrors.dev.in.chaitin.net/library/postgres:xxxx "docker-entrypoint.s…" 19 hours ago Up 19 hours 5432/tcp mgt-postgres安装备注
显示信息，且输出到日志文件logs.log
这里加了个值-e HARDWARE_MODE=1
目的是忽略检测ssse3 and avx2，我猜测的，这个值不是手册的，而是我自己靠AI测试出来的
The CPU does not support the instruction ssse3 and avx2!运行命令
./safeline-3-software-installer-xxxx.bin -p {密码} -v -e HARDWARE_MODE=1 2>&1 | tee logs.log日志
不带-e参数
#### docker信息
```log
root@root# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
xxxxx portus.in.chaitin.net/safeline-2/waap:latest "/waap/entrypoint.sh" 19 hours ago Up 19 hours (healthy) waap
xxxxx portus.in.chaitin.net/safeline-2/fvm-compiler:latest "/fvm-compiler/entry…" 19 hours ago Up 19 hours (healthy) fvm-compiler
xxxxx portus.in.chaitin.net/safeline-public/cadvisor:xxxx-selfbuild "/usr/bin/cadvisor -…" 19 hours ago Up 19 hours (healthy) cadvisor
xxxxx portus.in.chaitin.net/safeline-2/tengine:latest "docker-entrypoint.s…" 19 hours ago Up 19 hours (healthy) tengine
xxxxx portus.in.chaitin.net/safeline-2/detector-srv:latest "/detector/entrypoin…" 19 hours ago Up 19 hours (healthy) 8000-8001/tcp detector-srv
xxxxx portus.in.chaitin.net/safeline-2/mario:latest "/mario/entrypoint.sh" 19 hours ago Up 19 hours (healthy) mario
xxxxx portus.in.chaitin.net/safeline-2/mgt-api:latest "/app/deploy/entrypo…" 19 hours ago Up 19 hours (healthy) 0.0.0.0:9443->1443/tcp mgt-api
xxxxx portus.in.chaitin.net/safeline-public/clickhouse-server:xxxxx "/entrypoint.sh" 19 hours ago Up 19 hours 8123/tcp, 9000/tcp, 9009/tcp mgt-clickhouse
xxxxx registry-mirrors.dev.in.chaitin.net/library/redis:xxx "docker-entrypoint.s…" 19 hours ago Up 19 hours 6379/tcp mgt-redis
xxxxx registry-mirrors.dev.in.chaitin.net/library/postgres:xxxx "docker-entrypoint.s…" 19 hours ago Up 19 hours 5432/tcp mgt-postgres
```
### 安装备注
显示信息，且输出到日志文件logs.log
这里加了个值
`-e HARDWARE_MODE=1`
目的是忽略检测ssse3 and avx2，我猜测的，这个值不是手册的，而是我自己靠AI测试出来的
```log
The CPU does not support the instruction ssse3 and avx2!
```
运行命令
```bash
./safeline-3-software-installer-xxxx.bin -p {密码} -v -e HARDWARE_MODE=1 2>&1 | tee logs.log
```
### 日志
#### 不带-e参数
