#!/bin/bash

VERSION="1.7.6"
FILENAME="nerdctl-full-${VERSION}-linux-amd64.tar.gz"
# https://github.com/containerd/nerdctl/releases/download/v2.0.0/nerdctl-full-2.0.0-linux-amd64.tar.gz
DOWNLOAD_URL="https://ghproxy.dockless.eu.org/https://github.com/containerd/nerdctl/releases/download/v${VERSION}/${FILENAME}"

install_nerdctl() {
    echo "正在安装必要的依赖包..."

    # 删除 Docker 源
    if [ -f /etc/apt/sources.list.d/docker.list ]; then
        echo "删除 Docker APT 源..."
        sudo rm /etc/apt/sources.list.d/docker.list
    fi

    sudo apt-get update
    sudo apt-get install -y wget tar jq curl gnupg lsb-release uidmap

    # 检查文件是否已经下载
    if [ -f "${FILENAME}" ]; then
        echo "${FILENAME} 已存在，跳过下载。"
    else
        echo "下载 nerdctl-full..."
        wget ${DOWNLOAD_URL}
    fi

    echo "解压并移动到 /usr/local..."
    sudo tar -C /usr/local -xzf ${FILENAME}

    # echo "清理下载文件..."
    # rm ${FILENAME}

    echo "安装 nerdctl bash 自动补全..."
    sudo apt install bash-completion -y
    sudo nerdctl completion bash | sudo tee /etc/bash_completion.d/nerdctl > /dev/null
    sudo nerdctl completion bash | sudo tee /etc/bash_completion.d/docker > /dev/null
    sudo bash -c "source /etc/bash_completion.d/nerdctl"
    sudo bash -c "source /etc/bash_completion.d/docker"

    echo "创建 docker 兼容命令..."
    sudo tee /usr/local/bin/docker > /dev/null <<EOT
#!/bin/bash
exec nerdctl "\$@"
EOT
    sudo chmod +x /usr/local/bin/docker

    echo "for root 生成 nerdctl 默认配置文件..."
sudo mkdir -p /etc/nerdctl
sudo tee /etc/nerdctl/nerdctl.toml > /dev/null <<EOT
debug = false
address = "unix:///run/containerd/containerd.sock"
namespace = "k8s.io"
snapshotter = "overlayfs"
cgroup_manager = "cgroupfs"
hosts_dir = ["/etc/containerd/certs.d"]
experimental = true
EOT


    echo "for 普通用户 安装 nerdctl"
    /usr/local/bin/containerd-rootless-setuptool.sh install

    echo "for 普通用户 生成 nerdctl 默认配置文件..."
mkdir -p ~/.config/nerdctl
tee ~/.config/nerdctl/nerdctl.toml > /dev/null <<EOT
debug = false
address = "unix:///run/containerd/containerd.sock"
namespace = "k8s.io"
snapshotter = "overlayfs"
cgroup_manager = "cgroupfs"
hosts_dir = ["/etc/containerd/certs.d"]
experimental = true
EOT

    echo "启动并启用 containerd 服务..."
    sudo systemctl enable --now containerd

    check_containerd_socket

    echo "验证安装..."
    nerdctl --version

    echo "nerdctl-full 安装完成。"
}

check_containerd_socket() {
    SOCKET_PATH="/run/containerd/containerd.sock"

    if [ -S "$SOCKET_PATH" ]; then
        echo "containerd 启动成功，套接字文件已存在：$SOCKET_PATH"
    else
        echo "containerd 未启动或套接字文件不存在，尝试启动 containerd..."
        sudo systemctl restart containerd

        # 再次检查套接字文件
        if [ -S "$SOCKET_PATH" ]; then
            echo "containerd 启动成功，套接字文件已创建：$SOCKET_PATH"
        else
            echo "containerd 启动失败，请检查服务状态。"
        fi
    fi
}


uninstall_nerdctl() {
    echo "停止 containerd 服务..."
    sudo systemctl disable --now containerd

    # 移除 BuildKit、bypass4netnsd、fuse-overlayfs 和 stargz 插件的 systemd 单元文件
    echo "卸载 BuildKit、bypass4netnsd、fuse-overlayfs 和 stargz 插件..."

    /usr/local/bin/containerd-rootless-setuptool.sh uninstall-buildkit
    /usr/local/bin/containerd-rootless-setuptool.sh uninstall-bypass4netnsd
    /usr/local/bin/containerd-rootless-setuptool.sh uninstall-fuse-overlayfs
    /usr/local/bin/containerd-rootless-setuptool.sh uninstall-stargz

    echo "删除 nerdctl 二进制文件..."
    sudo rm -rf /usr/local/bin/nerdctl
    sudo rm -rf /usr/local/libexec/cni

    echo "删除 containerd..."
    sudo rm -rf /usr/local/bin/containerd*
    sudo rm -rf /usr/local/bin/ctr
    sudo rm -rf /usr/local/bin/runc

    echo "删除相关文件和目录..."
    sudo rm -rf /etc/containerd
    sudo rm -rf /data/containerd
    sudo rm -rf /var/lib/containerd
    sudo rm -rf /usr/local/libexec/cni

    echo "删除 buildkit 服务和 socket 文件..."
    sudo systemctl stop buildkit
    sudo systemctl stop buildkit.socket
    sudo systemctl disable buildkit
    sudo systemctl disable buildkit.socket
    sudo rm -f /etc/systemd/system/buildkit.service
    sudo rm -f /etc/systemd/system/buildkit.socket
    sudo rm -f /usr/lib/systemd/system/buildkit.service
    sudo rm -f /usr/lib/systemd/system/buildkit.socket

    echo "删除 nvidia-container-toolkit..."
    sudo apt-get remove --purge -y nvidia-container-toolkit

    echo "删除 nerdctl bash 自动补全..."
    sudo rm -f /etc/bash_completion.d/nerdctl
    sudo rm -f /etc/bash_completion.d/docker

    echo "删除 docker 兼容命令..."
    sudo rm -f /usr/local/bin/docker

    echo "清理完成。"
}

install_nvidia_docker() {
    echo "正在安装 NVIDIA Docker..."
    sudo apt-get update
    sudo apt-get install -y curl gnupg lsb-release

    if ! grep -q "^deb .\+nvidia-container-toolkit" /etc/apt/sources.list /etc/apt/sources.list.d/*; then
        curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey | sudo gpg --dearmor -o /usr/share/keyrings/nvidia-container-toolkit-keyring.gpg \
        && curl -s -L https://nvidia.github.io/libnvidia-container/stable/deb/nvidia-container-toolkit.list | \
        sed 's#deb https://#deb [signed-by=/usr/share/keyrings/nvidia-container-toolkit-keyring.gpg] https://#g' | \
        sudo tee /etc/apt/sources.list.d/nvidia-container-toolkit.list
    else
        echo "NVIDIA Docker 源已经配置，跳过此步骤。"
    fi

    sudo apt-get update
    sudo apt-get install -y nvidia-container-toolkit
}

configure_containerd() {
    echo "正在配置 containerd 使用 NVIDIA runtime..."

    # 创建 /etc/containerd 目录并生成默认配置文件
    sudo mkdir -p /etc/containerd
    containerd config default | sudo tee /etc/containerd/config.toml

    # 使用 sed 命令在特定位置添加配置项
    sudo sed -i '/\[plugins."io.containerd.grpc.v1.cri".registry.configs\]/a \\t[plugins."io.containerd.grpc.v1.cri".registry.configs."docker.io".tls]\n\t\tinsecure_skip_verify = true' /etc/containerd/config.toml

    # 配置 NVIDIA runtime
    sudo nvidia-ctk runtime configure --runtime=containerd

    # 配置镜像源
    echo "配置镜像源....."
    bash ./setup_containerd_mirror_addall.sh

    # 重启 containerd 服务
    sudo systemctl daemon-reload
    sudo systemctl restart containerd
}

start_containerd() {
    echo "正在启动 containerd..."
    sudo systemctl enable --now containerd
    if [ $? -ne 0 ]; then
        echo "启动 containerd 失败。"
        exit 1
    fi
    echo "containerd 启动成功。"
}

configure_buildkitd() {
    echo "配置 buildkitd 服务..."

    /usr/local/bin/containerd-rootless-setuptool.sh check
    /usr/local/bin/containerd-rootless-setuptool.sh install-buildkit
    echo "buildkitd 服务 安装完成。"
}

configure_fuse_overlayfs() {
    echo "配置 FUSE-OverlayFS..."
    /usr/local/bin/containerd-rootless-setuptool.sh check
    /usr/local/bin/containerd-rootless-setuptool.sh install-fuse-overlayfs
    echo "FUSE-OverlayFS 安装完成。"
}

configure_stargz_snapshotter() {
    echo "配置 Stargz Snapshotter..."
    /usr/local/bin/containerd-rootless-setuptool.sh check
    /usr/local/bin/containerd-rootless-setuptool.sh install-stargz
    echo "Stargz Snapshotter 安装完成。"
}

configure_bypass4netnsd() {
    echo "配置 bypass4netnsd 网络加速..."
    /usr/local/bin/containerd-rootless-setuptool.sh check
    /usr/local/bin/containerd-rootless-setuptool.sh install-bypass4netnsd
    echo "bypass4netnsd 安装完成。"
    sudo systemctl daemon-reload
    sudo systemctl enable --now buildkit.socket
    sudo systemctl start buildkit

    echo "buildkit 服务配置完成。"
}

case "$1" in
    install)
        install_nerdctl
        install_nvidia_docker
        configure_containerd
        start_containerd
        configure_buildkitd
        configure_fuse_overlayfs
        configure_stargz_snapshotter
        configure_bypass4netnsd
        ;;
    uninstall)
        uninstall_nerdctl
        ;;
    *)
        echo "Usage: $0 {install|uninstall}"
        exit 1
        ;;
esac

# https://blog.csdn.net/u013522701/article/details/142153885
# 跳过校验
# [plugins]
#   [plugins."io.containerd.grpc.v1.cri"]
#     [plugins."io.containerd.grpc.v1.cri".registry]
#       [plugins."io.containerd.grpc.v1.cri".registry.configs]
#         [plugins."io.containerd.grpc.v1.cri".registry.configs."docker.io".tls]
#           insecure_skip_verify = true
# 配置镜像
# 在这里一行([plugins."io.containerd.grpc.v1.cri".registry])后面的一行加上：
# config_path = "/etc/containerd/certs.d"
# 然后在这个加上的路径上面添加文件夹(docker.io)并在这个文件里面添加hosts.toml文件
# cd /etc/containerd/certs.d
# mkdir -p docker.io
# 内容如下：
# server = "https://docker.io"
# [host."https://docker.rainbond.cc"]
#   capabilities = ["pull", "resolve"]
  
# [host."https://docker.1panel.live"]
#   capabilities = ["pull", "resolve"]