add scripts

This commit is contained in:
xiuting.xu
2026-07-14 14:44:40 +08:00
parent e2bdcd3820
commit 490b79f22c
47 changed files with 1569 additions and 514 deletions

View File

@@ -83,7 +83,7 @@ docker logs -f bird-rpki-client
`OBSERVE_INTERVAL` (seconds, used when `OBSERVE_MODE=interval`),
and `OBSERVE_PROTO`.
- SSH mode mounts `../../certs/ssh` into `/config/ssh` and expects:
`bird-rtr-client.pem` and `ssh_host_rsa_key.pub`.
`rtr-client.key` and `ssh_host_rsa_key.pub`.
- Entrypoint auto-generates `/run/bird/known_hosts` from
`/config/ssh/ssh_host_rsa_key.pub` for BIRD SSH host-key verification.
- If your environment does not support Docker host networking, switch to a

View File

@@ -74,7 +74,7 @@ docker logs -f bird-rpki-client
- 当前 compose 使用 `network_mode: host`,默认通过 `host.docker.internal` 访问 server。
- 观测频率由环境变量控制:`OBSERVE_INTERVAL`(秒,默认 `30`)和 `OBSERVE_PROTO`。
- SSH 模式会将 `../../certs/ssh` 挂载到容器 `/config/ssh`,并使用:
`bird-rtr-client.pem`、`ssh_host_rsa_key.pub`。
`rtr-client.key`、`ssh_host_rsa_key.pub`。
- 入口脚本会基于 `/config/ssh/ssh_host_rsa_key.pub` 自动生成
`/run/bird/known_hosts`,用于 BIRD 的 SSH 主机密钥校验。
- 如果你运行在 Docker Desktop(非 Linux 原生 host network 场景),建议改为自定义 bridge 网络并将 `remote` 地址改成可达的 server 容器名或宿主机地址。

View File

@@ -25,7 +25,7 @@ protocol rpki rpki_ssh {
transport ssh {
user "rpki-rtr";
bird private key "/config/ssh/bird-rtr-client-rsa.pem";
bird private key "/config/ssh/rtr-client.key";
remote public key "/run/bird/known_hosts";
};
}

View File

@@ -24,7 +24,7 @@ protocol rpki rpki_ssh {
transport ssh {
user "rpki-rtr";
bird private key "/config/ssh/bird-rtr-client-rsa.pem";
bird private key "/config/ssh/rtr-client.key";
remote public key "/run/bird/known_hosts";
};
}

View File

@@ -24,7 +24,7 @@ protocol rpki rpki_ssh {
transport ssh {
user "rpki-rtr";
bird private key "/config/ssh/bird-rtr-client-rsa.pem";
bird private key "/config/ssh/rtr-client.key";
remote public key "/run/bird/known_hosts";
};
}

View File

@@ -1,4 +1,7 @@
# Target RTR server addresses for client compose files
# RPKI_RTR_CLIENT_IMAGE=rpki-rtr-debug-client-arm64:v1.2
RPKI_RTR_CLIENT_IMAGE=rpki-rtr-debug-client-amd64:v1.2
# TCP example: 10.0.0.12:323
# TLS example: rpki.example.com:324
# SSH example: 10.0.0.12:22

View File

@@ -1,3 +1,7 @@
# Core runtime knobs.
# RPKI_RTR_SERVER_IMAGE=rpki-rtr-arm64:v1.2
RPKI_RTR_SERVER_IMAGE=rpki-rtr-amd64:v1.2
# Data source directories on host.
RPKI_RTR_CCR_HOST_DIR=../../data
RPKI_RTR_SLURM_HOST_DIR=../../data
@@ -11,7 +15,6 @@ RPKI_RTR_REPORT_HOST_DIR=../../report
RPKI_RTR_DB_PATH=/app/rtr-db
RPKI_RTR_REPORT_DIR=/app/report
# Core runtime knobs.
# Persistent directories on host.
RPKI_RTR_DB_HOST_DIR=../../rtr-db
RPKI_RTR_LOG_HOST_DIR=../../logs/server