#!/bin/bash

VERSION="2.0.0"
FILENAME="nerdctl-full-${VERSION}-linux-amd64.tar.gz"
# https://github.com/containerd/nerdctl/releases/download/v2.0.0/nerdctl-full-2.0.0-linux-amd64.tar.gz
DOWNLOAD_URL="https://ghproxy.dockless.eu.org/https://github.com/containerd/nerdctl/releases/download/v${VERSION}/${FILENAME}"

install_nerdctl() {
    echo "正在安装必要的依赖包..."

    # 删除 Docker 源
    if [ -f /etc/apt/sources.list.d/docker.list ]; then
        echo "删除 Docker APT 源..."
        sudo rm /etc/apt/sources.list.d/docker.list
    fi

    sudo apt-get update
    sudo apt-get install -y wget tar jq curl gnupg lsb-release uidmap

    echo "下载 nerdctl-full..."
    wget ${DOWNLOAD_URL}

    echo "解压并移动到 /usr/local..."
    sudo tar -C /usr/local -xzf ${FILENAME}

    echo "启动并启用 containerd 服务..."
    sudo systemctl enable --now containerd

    echo "验证安装..."
    nerdctl --version

    # echo "清理下载文件..."
    # rm ${FILENAME}

    echo "安装 nerdctl bash 自动补全..."
    sudo apt install bash-completion -y
    nerdctl completion bash > /etc/bash_completion.d/nerdctl
    nerdctl completion bash > /etc/bash_completion.d/docker
    source /etc/bash_completion.d/nerdctl
    source /etc/bash_completion.d/docker

    echo "创建 docker 兼容命令..."
    sudo tee /usr/local/bin/docker > /dev/null <<EOT
#!/bin/bash
exec nerdctl "\$@"
EOT
    sudo chmod +x /usr/local/bin/docker

    echo "普通用户安装"
    /usr/local/bin/containerd-rootless-setuptool.sh install
    /usr/local/bin/containerd-rootless-setuptool.sh check
    nerdctl --version

    echo "nerdctl-full 安装完成。"
}

uninstall_nerdctl() {
    echo "停止 containerd 服务..."
    sudo systemctl disable --now containerd

    echo "删除 nerdctl 二进制文件..."
    sudo rm -rf /usr/local/bin/nerdctl
    sudo rm -rf /usr/local/libexec/cni

    echo "删除 containerd..."
    sudo rm -rf /usr/local/bin/containerd*
    sudo rm -rf /usr/local/bin/ctr
    sudo rm -rf /usr/local/bin/runc

    echo "删除相关文件和目录..."
    sudo rm -rf /etc/containerd
    sudo rm -rf /var/lib/containerd
    sudo rm -rf /usr/local/libexec/cni

    echo "删除 buildkit 服务和 socket 文件..."
    sudo systemctl stop buildkit
    sudo systemctl stop buildkit.socket
    sudo systemctl disable buildkit
    sudo systemctl disable buildkit.socket
    sudo rm -f /etc/systemd/system/buildkit.service
    sudo rm -f /etc/systemd/system/buildkit.socket
    sudo rm -f /usr/lib/systemd/system/buildkit.service
    sudo rm -f /usr/lib/systemd/system/buildkit.socket

    echo "删除 nvidia-container-toolkit..."
    sudo apt-get remove --purge -y nvidia-container-toolkit

    echo "删除 nerdctl bash 自动补全..."
    sudo rm -f /etc/bash_completion.d/nerdctl
    sudo rm -f /etc/bash_completion.d/docker

    echo "删除 docker 兼容命令..."
    sudo rm -f /usr/local/bin/docker

    echo "清理完成。"
}

install_nvidia_docker() {
    echo "正在安装 NVIDIA Docker..."
    sudo apt-get update
    sudo apt-get install -y curl gnupg lsb-release

    if ! grep -q "^deb .\+nvidia-container-toolkit" /etc/apt/sources.list /etc/apt/sources.list.d/*; then
        curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey | sudo gpg --dearmor -o /usr/share/keyrings/nvidia-container-toolkit-keyring.gpg \
        && curl -s -L https://nvidia.github.io/libnvidia-container/stable/deb/nvidia-container-toolkit.list | \
        sed 's#deb https://#deb [signed-by=/usr/share/keyrings/nvidia-container-toolkit-keyring.gpg] https://#g' | \
        sudo tee /etc/apt/sources.list.d/nvidia-container-toolkit.list
    else
        echo "NVIDIA Docker 源已经配置，跳过此步骤。"
    fi

    sudo apt-get update
    sudo apt-get install -y nvidia-container-toolkit
}

configure_containerd() {
    echo "正在配置 containerd 使用 NVIDIA runtime..."

    # 创建 /etc/containerd 目录并生成默认配置文件
    sudo mkdir -p /etc/containerd
    # containerd config default > /etc/containerd/config.toml
    containerd config default | sudo tee /etc/containerd/config.toml

    # 使用 sed 命令在特定位置添加配置项
    sudo sed -i '/\[plugins."io.containerd.grpc.v1.cri".registry.configs\]/a \\t[plugins."io.containerd.grpc.v1.cri".registry.configs."docker.io".tls]\n\t\tinsecure_skip_verify = true' /etc/containerd/config.toml

    # 配置 NVIDIA runtime
    sudo nvidia-ctk runtime configure --runtime=containerd

    # 重启 containerd 服务
    sudo systemctl restart containerd
}

start_containerd() {
    echo "正在启动 containerd..."
    sudo systemctl enable --now containerd
    if [ $? -ne 0 ]; then
        echo "启动 containerd 失败。"
        exit 1
    fi
    echo "containerd 启动成功。"
}

configure_buildkitd() {
    echo "配置 buildkitd 服务..."

    # 创建 buildkitd 配置文件目录
    sudo mkdir -p /etc/buildkit
    # https://github.com/moby/buildkit/blob/master/docs/buildkitd.toml.md
    sudo tee /etc/buildkit/buildkit.toml > /dev/null <<EOT
[worker.oci]
  enabled = false

[worker.containerd]
  enabled = true
  # namespace should be "k8s.io" for Kubernetes (including Rancher Desktop)
  namespace = "buildkit"
  platforms = [ "linux/amd64", "linux/arm64" ]
  gc = true
  # gckeepstorage sets storage limit for default gc profile, in MB.
  gckeepstorage = 9000

# registry configures a new Docker register used for cache import or output.
[registry."docker.io"]
  # mirror configuration to handle path in case a mirror registry requires a /project path rather than just a host:port
  mirrors = ["https://upnuemce.mirror.aliyuncs.com", "core.harbor.domain/proxy.docker.io"]
  http = true
  insecure = true
  #ca=["/etc/config/myca.pem"]
  #[[registry."docker.io".keypair]]
    #key="/etc/config/key.pem"
    #cert="/etc/config/cert.pem"
EOT

    sudo tee /etc/systemd/system/buildkit.service > /dev/null <<EOT
[Unit]
Description=BuildKit Daemon
Documentation=https://github.com/moby/buildkit
Requires=buildkit.socket
After=network.target buildkit.socket

[Service]
Type=notify
ExecStart=/usr/local/bin/buildkitd --config /etc/buildkit/buildkit.toml --addr fd://
Restart=always
RestartSec=10s
StartLimitInterval=0

[Install]
WantedBy=multi-user.target
EOT

    sudo tee /etc/systemd/system/buildkit.socket > /dev/null <<EOT
[Unit]
Description=BuildKit
Documentation=https://github.com/moby/buildkit

[Socket]
ListenStream=%t/buildkit/buildkitd.sock
SocketMode=0660

[Install]
WantedBy=sockets.target
EOT

    sudo systemctl daemon-reload
    sudo systemctl enable --now buildkit.socket
    sudo systemctl start buildkit

    echo "buildkit 服务配置完成。"
}

case "$1" in
    install)
        install_nerdctl
        install_nvidia_docker
        configure_containerd
        start_containerd
        configure_buildkitd
        ;;
    uninstall)
        uninstall_nerdctl
        ;;
    *)
        echo "Usage: $0 {install|uninstall}"
        exit 1
        ;;
esac

# https://blog.csdn.net/u013522701/article/details/142153885
# 跳过校验
# [plugins]
#   [plugins."io.containerd.grpc.v1.cri"]
#     [plugins."io.containerd.grpc.v1.cri".registry]
#       [plugins."io.containerd.grpc.v1.cri".registry.configs]
#         [plugins."io.containerd.grpc.v1.cri".registry.configs."docker.io".tls]
#           insecure_skip_verify = true
# 配置镜像
# 在这里一行([plugins."io.containerd.grpc.v1.cri".registry])后面的一行加上：
# config_path = "/etc/containerd/certs.d"
# 然后在这个加上的路径上面添加文件夹(docker.io)并在这个文件里面添加hosts.toml文件
# cd /etc/containerd/certs.d
# mkdir -p docker.io
# 内容如下：
# server = "https://docker.io"
# [host."https://docker.rainbond.cc"]
#   capabilities = ["pull", "resolve"]
  
# [host."https://docker.1panel.live"]
#   capabilities = ["pull", "resolve"]