Function InstallScriptInLXC

internal/plugins/communityscripts/scripts.go:918–955

InstallScriptInLXC installs a script inside an existing LXC container via pct exec. It SSHes to the node, then runs pct exec -- bash -c "curl ... | bash".

(user, nodeIP string, vmid int, script Script)

// InstallScriptInLXC installs a script inside an existing LXC container via pct exec.
// It SSHes to the node, then runs pct exec <vmid> -- bash -c "curl ... | bash".
func InstallScriptInLXC(user, nodeIP string, vmid int, script Script) (int, error) {
	if err := validateScriptPath(script.ScriptPath); err != nil {
		return -1, err
	}

	getScriptsLogger().Debug("Installing script %s in LXC %d on %s", script.ScriptPath, vmid, nodeIP)

	scriptURL := rawScriptURL(script)
	innerCmd := buildInstallScriptCommand(scriptURL)
	pctCmd := fmt.Sprintf("pct exec %d -- %s", vmid, innerCmd)
	if !strings.EqualFold(user, "root") {
		pctCmd = "sudo " + pctCmd
	}
	pctCmd = wrapRemoteCommandWithBash(pctCmd)

	// #nosec G204 -- command arguments are constructed from validated paths and vmid.
	sshCmd := exec.Command("ssh", "-t", fmt.Sprintf("%s@%s", user, nodeIP), pctCmd)
	sshCmd.Stdin = os.Stdin
	sshCmd.Stdout = os.Stdout
	sshCmd.Stderr = os.Stderr
	sshCmd.Env = append(os.Environ(), "TERM=xterm-256color")

	err := sshCmd.Run()
	exitCode := 0
	if err != nil {
		if exitErr, ok := err.(*exec.ExitError); ok {
			exitCode = exitErr.ExitCode()
		} else {
			exitCode = -1
		}
	}

	if err != nil {
		return exitCode, fmt.Errorf("script installation failed: %w", err)
	}

	return exitCode, nil
}

// ValidateConnection checks if SSH connection to the node is possible.
func ValidateConnection(user, nodeIP string) error {