ACE on PRoot 的测试：在小小电脑上使用bwrap发行版容器

[shenmo7192]

进度汇报：通过手工方式手动启动了容器，目前发现 /proc 等等目录直通会直接崩掉容器，还在进一步科研中

通过这种方式可以在小小电脑上启动其他发行版容器——目前正在使用的是 Debian 12

https://gitee.com/amber-ce/ace-common

[shenmo7192]

目前的脚本删除了一部分内容，简而言之，是这样

#!/bin/bash

bash(){
/usr/bin/bash --rcfile <(cat ~/.bashrc; echo "PS1=\"\[\e[37;40m\][\[\e[32;40m\]\u\[\e[37;40m\]@Amber-CE-Bookworm \[\e[36;40m\]\w\[\e[0m\]]\\\$ \"") $@
}
export -f bash

curdir=`realpath $0`
parent_dir=`dirname $curdir`
pparent_dir=`dirname $parent_dir`
ppparent_dir=`dirname $pparent_dir`
PKGNAME=`basename $ppparent_dir`
export ACE_PACKAGE_NAME=$PKGNAME

chrootEnvPath=/opt/apps/$PKGNAME/files/ace-env

#if [ ! -e $chrootEnvPath/finish.flag ];then
#
#if [ "$(id -u)" = "0" ]; then
#    `dirname $chrootEnvPath`/bin/ace-init
#else
#pkexec `dirname $chrootEnvPath`/bin/ace-init
#fi


#fi
non_root_user=$(who  | awk '{print $1}' | head -n 1)
uid=$(id -u $non_root_user)


#### This part is for args pharm
if [ $# -eq 0 ]; then
    container_command="bash"
else
    # 正确转义所有参数，处理空格和特殊字符
    container_command=""
    for arg in "$@"; do
        # 使用 printf %q 进行安全的 shell 转义
        escaped_arg="$(printf "%q" "$arg")"
        container_command="${container_command} ${escaped_arg}"
    done
    container_command="${container_command# }"  # 移除开头的空格
fi

#########################################################################################
##########合成bwrap 1. 基础函数配置段
# 初始化 EXEC_COMMAND 为 bwrap 基础指令
EXEC_COMMAND="bwrap --dev-bind / / bwrap"

# add_command 函数定义
function add_command() {
    # 参数拼接，考虑到转义和空格的处理
    for arg in "$@"; do
        EXEC_COMMAND="${EXEC_COMMAND} ${arg}"
    done
}

function add_env_var() {
    local var_name="${1}"
    local var_value="${2}"
    if [ "$var_value" != "" ]; then    
	add_command "--setenv $var_name $var_value"
	
    fi
}
##########合成bwrap 2. 特殊需求函数配置段
function cursor_theme_dir_integration() {

local directory=""
if [ "$(id -u)" = "0" ]; then #####We don't want bother root to install themes,but will try to fix the unwriteable issue
	mkdir -p $chrootEnvPath/usr/share/icons
	chmod 777 -R $chrootEnvPath/usr/share/icons
	return
fi

for directory in "/usr/share/icons"/*; do
    # 检查是否为目录
    if [ -d "$directory" ]; then
        # 检查目录中是否存在 cursors 文件
        if [ -d "$directory/cursors" ]; then
        	if [ -w $chrootEnvPath/usr/share/icons ];then
			add_command "--ro-bind-try $directory $directory"
		fi
        fi
    fi
done







}
##########合成bwrap 3. 环境变量和目录绑定配置段
# 添加环境变量和其他初始设置
ENV_VARS=(
    "FAKEROOTDONTTRYCHOWN 1"
    "PULSE_SERVER /run/user/\$uid/pulse/native"
    "PATH /amber-ce-tools/bin-override:\$PATH"
    "IS_ACE_ENV 1"
    "XDG_DATA_DIRS /amber-ce-tools/additional-data-dir-in-container:\$XDG_DATA_DIRS"
)

BIND_DIRS=(
    "--dev-bind $chrootEnvPath/ /"
#    "--dev-bind-try /media /media"
#    "--dev-bind-try /mnt /mnt"
#    "--dev-bind-try /tmp /tmp"
#    "--dev-bind-try /data /data"
#    "--dev-bind-try /dev /dev"
#    "--proc /proc"
#    "--dev-bind /sys /sys"
    "--dev-bind /run /run"
    "--dev-bind-try /run/user/\$uid/pulse /run/user/\$uid/pulse"
    "--dev-bind / /host"
    "--ro-bind-try /usr/share/themes /usr/local/share/themes"
    "--ro-bind-try /usr/share/icons /usr/local/share/icons"
    "--ro-bind-try /usr/share/fonts /usr/local/share/fonts"
    "--dev-bind-try /etc/resolv.conf /etc/resolv.conf"
    "--dev-bind-try /home /home"
)
EXTRA_ARGS=(
    "--cap-add CAP_SYS_ADMIN"
)

EXTRA_SCRIPTS=(
    cursor_theme_dir_integration
)

##########合成bwrap 4. 合成并执行指令
# 逐一添加到 EXEC_COMMAND
for var in "${ENV_VARS[@]}"; do
    add_env_var $var
done

for var in "${BIND_DIRS[@]}"; do
    add_command "$var"
done

for var in "${EXTRA_ARGS[@]}"; do
    add_command "$var"
done

for var in "${EXTRA_SCRIPTS[@]}"; do
    $var
done

# 添加最终的 bash 命令
add_command "bash -c \"${container_command}\""

# 输出完整的 EXEC_COMMAND 以查看
# echo "${EXEC_COMMAND}"

# 注意: 实际执行时，请确保所有变量（如 $uid, $chrootEnvPath 等）都已正确定义
eval ${EXEC_COMMAND}

[shenmo7192]

apm 安装应用时报错

dpkg --force-all -i ./linuxqq_3.2.30-50969_arm64.deb
(Reading database ... 64 files and directories currently installed.)
Preparing to unpack .../linuxqq_3.2.30-50969_arm64.deb ...
Unpacking linuxqq (3.2.30-50969) ...
dpkg: error processing archive ./linuxqq_3.2.30-50969_arm64.deb (--install):
 error setting ownership of '/var/lib/apm/linuxqq/files/core/opt/QQ/.wh..opq.dpkg-new': No such file or directory
dpkg-deb (subprocess): decompressing archive './linuxqq_3.2.30-50969_arm64.deb' (size=187417388) member 'data.tar': lzma write error: Broken pipe
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
dpkg-deb (subprocess): cannot copy archive member from './linuxqq_3.2.30-50969_arm64.deb' to decompressor pipe: failed to write (Broken pipe)

似乎proot下这些 .wh 文件会被忽略—— @Cateners 能搞吗

[shenmo7192]

手动处理了文件后仍然无法启动 APM 应用，是fuse挂载失败了

root@localhost:/opt/apps/amber-ce-bookworm/files# apm run linuxqq bash
[INFO]:  Running user command: bash
[DEBUG]: Mounting overlayfs
[DEBUG]: lowerdir=/var/lib/apm/apm/files/ace-env//var/lib/apm/amber-pm-bookworm/files/ace-env
unknown argument ignored: lazytime
fuse: failed to open /dev/fuse: Permission denied
fuse-overlayfs: cannot mount: Permission denied
目录 '/root/.apm/linuxqq/' 不存在，正在创建...
成功创建目录 '/root/.apm/linuxqq/'
bwrap: Can't get type of source /tmp/apm/linuxqq: No such file or directory

看起来overlayfs挂载还是用不了.....没有实现 fuse @Cateners 佬能搞吗，让proot支持fuse

[Cateners]

如果有问题，我肯定没能力搞😂只能看上游有没有意愿支持了......

我试了一下，确实不支持fuse。但一般的mount还是有支持的

[shenmo7192]

如果有问题，我肯定没能力搞😂只能看上游有没有意愿支持了......

我试了一下，确实不支持fuse。但一般的mount还是有支持的

有趣，你那边能测试下overlayfs能挂载吗

mount -t overlay overlay

[shenmo7192]

如果有问题，我肯定没能力搞😂只能看上游有没有意愿支持了......

我试了一下，确实不支持fuse。但一般的mount还是有支持的
可以mount但是没生效

[Cateners]

...不行。大概只支持--bind的mount