「UPS」再也不怕拉闸了

UPSNAME UPS1
UPSCABLE usb
UPSTYPE usb
DEVICE  # 注意此处留空
LOCKFILE /var/lock
ONBATTERYDELAY 6  # 掉电后等待多少秒再认为是“断电状态”，防止电源闪断
BATTERYLEVEL 50  # 当电池电量低于这个百分比时执行关机
MINUTES 15  # 预估 `UPS` 还能支撑多长时间时执行关机
TIMEOUT 0  # UPS 断电后最多运行多少秒后强制关机（0 表示不启用）
ANNOY 300  # 用户登录后每隔多长时间提醒一次电源问题，设 0 禁用
ANNOYDELAY 60  # 掉电后多久开始提醒用户
NOLOGON disable  # 掉电期间是否允许新用户登录
KILLDELAY 0  # 关机信号后多长时间强制断电
NETSERVER on  # 启用 `apcupsd` 网络服务（供其他从设备查询 UPS 状态）
NISIP 0.0.0.0  # `apcupsd` 监听的 `IP` 地址
NISPORT 3551  # `apcupsd` 网络监听端口

[bk650m2]
    driver = usbhid-ups
    port = auto
    desc = "APC UPS"
    override.battery.charge.low = 50  # 电量低于该值认为低电量
    override.battery.runtime.low = 300  # 剩余时间低于该值认为低电量
    override.input.sensitivity = medium  # 输入切换（市电/电池）敏感度
    # override.input.transfer.low = 180
    # override.input.transfer.high = 266
    # override.input.voltage.nominal = 220
    override.ups.delay.shutdown = 20  # 触发低电量延迟关机时间
    override.ups.beeper.status = enable

tee /usr/local/bin/nut_shutdown.sh <<'EOF'
#!/bin/bash
LOG_FILE="/var/log/nut_shutdown.log"
TRUENAS_VMID="101"  # TrueNAS will turn it off on its own
TRUENAS_BLOCKING_TIME=240
NEED_WAIT=false

{
    echo "===== 准备关机 [$(date)] ====="
    echo "排除的虚拟机ID: $TRUENAS_VMID"

    echo "=== 阶段1: 逐个发送优雅关闭信号 ==="

    # 1.1 关闭所有容器
    for ct in $(pct list | awk '$2 == "running" {print $1}'); do
        if pct exec "$ct" -- bash -c "shutdown -h now" >/dev/null 2>&1; then
            echo "[容器] 已发送关机信号: $ct"
            NEED_WAIT=true
        else
            echo "[容器] 警告: $ct 内 shutdown 命令失败"
        fi
    done

    # 1.2 关闭所有虚拟机（排除 TrueNAS）
    for vmid in $(qm list | awk -v exclude="$TRUENAS_VMID" '$3 == "running" && $1 != exclude {print $1}'); do
        if qm shutdown "$vmid" --timeout 60 >/dev/null 2>&1; then
            echo "[虚拟机] 已发送ACPI信号: $vmid"
            NEED_WAIT=true
        else
            echo "[虚拟机] 警告: $vmid ACPI不可用"
        fi
    done

    echo "=== 阶段2: 按需等待80秒 ==="

    if $NEED_WAIT; then
        echo "等待中 ..."
        sleep 80
    fi

    echo "=== 阶段3: 逐个强制关闭 ==="

    # 3.1 强制关闭未停止的容器
    pct list | awk '$2 == "running" {print $1}' | while read ct; do
        if pct stop "$ct" --overrule-shutdown --skiplock >/dev/null 2>&1; then
            echo "[容器] 已强制关闭: $ct"
        else
            echo "[容器] 错误: $ct 强制关闭失败"
        fi
    done

    # 3.2 强制关闭未停止的虚拟机（排除 TrueNAS）
    qm list | awk -v exclude="$TRUENAS_VMID" '$3 == "running" && $1 != exclude {print $1}' | while read vmid; do
        if qm stop "$vmid" --skiplock >/dev/null 2>&1; then
            echo "[虚拟机] 已强制关闭: $vmid"
        else
            echo "[虚拟机] 错误: $vmid 强制关闭失败"
        fi
    done

    echo "=== 阶段4: 等待TruNAS关机（最多 $TRUENAS_BLOCKING_TIME 秒） ==="
    TRUENAS_STATUS=$(qm status "$TRUENAS_VMID" | awk '{print $2}')
    if [[ "$TRUENAS_STATUS" == "running" ]]; then
        echo "[TruNAS] 仍在运行，等待关机..."
        START_TIME=$(date +%s)
        TIMEOUT=$(( START_TIME + TRUENAS_BLOCKING_TIME ))

        while [[ $(date +%s) -lt $TIMEOUT ]]; do
            TRUENAS_STATUS=$(qm status "$TRUENAS_VMID" | awk '{print $2}')
            if [[ "$TRUENAS_STATUS" != "running" ]]; then
                echo "[TruNAS] 已关机"
                break
            fi
            sleep 5  # 每5秒检查一次
        done

        if [[ "$TRUENAS_STATUS" == "running" ]]; then
            echo "[TruNAS] 错误: 等待超时（${TRUENAS_BLOCKING_TIME}秒）仍未关闭！"
        fi
    else
        echo "[TruNAS] 未运行，无需等待"
    fi

    echo "===== 准备完成，即将关闭宿主机 [$(date)] ====="

    systemctl poweroff  # 使用 `shutdown -h now` 可能只关机不断电
} | tee -a "$LOG_FILE"
EOF

chmod +x /usr/local/bin/nut_shutdown.sh
chown nut:nut /usr/local/bin/nut_shutdown.sh

tee /usr/local/bin/nut_emergency_shutdown.sh <<'EOF'
#!/bin/bash
LOG_FILE="/var/log/nut_emergency_shutdown.log"
NEED_WAIT=false

{
    echo "===== 准备紧急关机 [$(date)] ====="

    echo "=== 阶段1: 逐个发送优雅关闭信号 ==="

    # 1.1 关闭所有容器
    for ct in $(pct list | awk '$2 == "running" {print $1}'); do
        if pct exec "$ct" -- bash -c "shutdown -h now" >/dev/null 2>&1; then
            echo "[容器] 已发送关机信号: $ct"
            NEED_WAIT=true
        else
            echo "[容器] 警告: $ct 内 shutdown 命令失败"
        fi
    done

    # 1.2 关闭所有虚拟机
    for vmid in $(qm list | awk '$3 == "running" {print $1}'); do
        if qm shutdown "$vmid" --timeout 60 >/dev/null 2>&1; then
            echo "[虚拟机] 已发送ACPI信号: $vmid"
            NEED_WAIT=true
        else
            echo "[虚拟机] 警告: $vmid ACPI不可用"
        fi
    done

    echo "=== 阶段2: 按需等待80秒 ==="

    if $NEED_WAIT; then
        echo "等待中 ..."
        sleep 80
    fi

    echo "=== 阶段3: 逐个强制关闭 ==="

    # 3.1 强制关闭未停止的容器
    pct list | awk '$2 == "running" {print $1}' | while read ct; do
        if pct stop "$ct"  --overrule-shutdown --skiplock >/dev/null 2>&1; then
            echo "[容器] 已强制关闭: $ct"
        else
            echo "[容器] 错误: $ct 强制关闭失败"
        fi
    done

    # 3.2 强制关闭未停止的虚拟机
    qm list | awk '$3 == "running" {print $1}' | while read vmid; do
        if qm stop "$vmid" --skiplock >/dev/null 2>&1; then
            echo "[虚拟机] 已强制关闭: $vmid"
        else
            echo "[虚拟机] 错误: $vmid 强制关闭失败"
        fi
    done

    echo "===== 准备完成，即将关闭宿主机 [$(date)] ====="

    systemctl poweroff
} | tee -a "$LOG_FILE"
EOF
chmod +x /usr/local/bin/nut_emergency_shutdown.sh
chown nut:nut /usr/local/bin/nut_emergency_shutdown.sh

# PVE 默认用户都操作 root，因此未安装 sudo
apt update && apt install sudo -y

# 让 nut 用户具备无密码提权执行特定脚本的
echo "nut ALL=(ALL) NOPASSWD: /usr/local/bin/nut_shutdown.sh" | tee /etc/sudoers.d/nut_shutdown
# sudoers 文件必须只读，否则 sudo 将拒绝加载
chmod 440 /etc/sudoers.d/nut_shutdown

cat > /etc/nut/upssched-cmd.sh <<'EOF'
#!/bin/sh

# set -ex  # 出错退出且命令回显

case $1 in
    shutdown)
        logger -t upssched-cmd "当前用户: $(whoami)"
        logger -t upssched-cmd "UPS市电断开超时，触发关机"
        /usr/bin/sudo /usr/local/bin/nut_shutdown.sh
        ;;
    *)
        logger -t upssched-cmd "未知指令: $1"
        ;;
esac
EOF

chmod +x /etc/nut/upssched-cmd.sh

MONITOR [email protected] 1 upsmon fixmepass secondary

# 需要直接关机时被调用
SHUTDOWNCMD "/sbin/shutdown -h +0"

# 基于事件通知调度，可灵活自定义
NOTIFYCMD /sbin/upssched
NOTIFYFLAG ONLINE	SYSLOG+EXEC
NOTIFYFLAG ONBATT	SYSLOG+EXEC

FINALDELAY 0

# 若无 sudo 需安装
apt update && apt install sudo -y

# 让 nut 用户具备无密码提权执行特定脚本
echo "nut ALL=(ALL) NOPASSWD: /sbin/shutdown" | tee /etc/sudoers.d/nut_shutdown
# sudoers 文件必须只读，否则 sudo 将拒绝加载
chmod 440 /etc/sudoers.d/nut_shutdown

cat > /etc/nut/upssched-cmd.sh <<'EOF'
#!/bin/sh

# set -ex  # 出错退出且命令回显

case $1 in
    shutdown)
        logger -t upssched-cmd "当前用户: $(whoami)"
        logger -t upssched-cmd "UPS市电断开超时，触发关机"
        /usr/bin/sudo /sbin/shutdown -h now
        ;;
    *)
        logger -t upssched-cmd "未知指令: $1"
        ;;
esac
EOF

chmod +x /etc/nut/upssched-cmd.sh