CLICD is a lightweight virtualization management panel for LXC and KVM. It combines a web console, CLI tools, REST API, NAT/IPv6 networking, WebSSH/WebVNC access, resource quotas, traffic limits, snapshots, and delegated sub-user access into a single deployable service.
CLICD 是一个面向 LXC/KVM 的轻量虚拟化管理面板，集成 Web 控制台、CLI、REST API、NAT/IPv6 网络、WebSSH/WebVNC、资源配额、流量限制、快照和子用户授权能力，适合 VPS 商家、实验室、开发者自建虚拟化节点以及需要批量开通容器的场景。
One-click Install / 一键安装：
curl -fsSL https://raw.githubusercontent.com/MengMengCode/CLICD/main/install.sh | sudo shOne-click Uninstall / 一键卸载：
curl -fsSL https://raw.githubusercontent.com/MengMengCode/CLICD/main/install.sh | sudo sh -s -- uninstall| Area | What CLICD provides |
|---|---|
| Virtualization | Manage LXC containers and KVM virtual machines from one panel, including create, reinstall, start, stop, restart, delete, password reset, expiry control, and batch actions. |
| Images and templates | Built-in template and image management for Ubuntu, Debian, Alpine, CentOS, Arch Linux, Fedora, Rocky Linux, and other common distributions. Images can be enabled, disabled, downloaded, cancelled, or removed from cache. |
| Local images | Upload validated ISO/QCOW2 files up to 32 GiB. Generic ISO installation uses WebVNC and persistent, removable installation media. |
| Networking | NAT4 port quotas, random available port allocation, TCP/UDP port mappings, public IPv4 pool management, IPv6 prefix detection, IPv6 status checks, and per-container IPv6 assignment. |
| Resource control | CPU, memory, disk, swap, bandwidth usage, traffic reset, traffic limit, and resource limit management, with automatic shutdown behavior for expired or over-quota containers. |
| Console access | Browser-based WebSSH and WebVNC ticket access, so users can open terminals or consoles without manually exchanging credentials. |
| Snapshots | Snapshot overview, per-container snapshots, create/delete/restore operations, scheduled snapshots, and quota controls. |
| Disks and portable backups | Offline disk growth, up to 8 managed data disks, full backups/download/import, independent full clones, and reusable installed-instance templates. Restore creates a stopped instance with a new identity and preserved guest accounts. |
| Accounts and audit | Delegated sub-user links, sub-user password rotation, per-user container permissions, audit logs, login logs, and API key management. |
| Automation | Versioned REST API under /api/v1, task queue endpoints, batch create/action endpoints, and a Mofang finance integration module packaged automatically by GitHub Actions. |
| Operations | Dashboard statistics, persisted metric history, durable task stages/errors, host resource overview, routing overview, swap management, CLI-only mode, and release artifacts generated by GitHub Actions. |
| 模块 | CLICD 提供的能力 |
|---|---|
| 虚拟化管理 | 在同一个面板里管理 LXC 容器和 KVM 虚拟机，支持创建、重装、开机、关机、重启、删除、重置密码、到期时间和批量操作。 |
| 镜像与模板 | 内置模板和镜像管理，支持 Ubuntu、Debian、Alpine、CentOS、Arch Linux、Fedora、Rocky Linux 等常见发行版，镜像可按需下载、取消、启用、禁用和清理缓存。 |
| 本地镜像 | 支持上传并校验最多 32 GiB 的 ISO/QCOW2；通用 ISO 可通过 WebVNC 手动安装，安装介质状态持久化并可弹出。 |
| 网络能力 | 支持 NAT4 端口配额、随机可用端口、TCP/UDP 端口映射、公网 IPv4 池管理、IPv6 前缀检测、IPv6 状态检查和容器级 IPv6 分配。 |
| 资源限制 | 支持 CPU、内存、磁盘、Swap、独立上行/下行带宽、读/写 I/O 限速、流量重置、流量限制和资源限制管理；容器到期或超额后可自动关机，避免资源和流量失控。 |
| 远程控制 | 内置 WebSSH 和 WebVNC 票据访问，用户可以直接在浏览器打开终端或控制台，不需要手动复制连接信息。 |
| 快照能力 | 支持快照总览、容器快照、创建快照、删除快照、恢复快照、计划快照和快照配额。 |
| 磁盘与完整备份 | 支持离线扩容、最多 8 块受管数据盘、完整备份下载/导入、独立完整克隆和已安装实例模板。恢复创建新身份的停止实例，保留客户机账户。 |
| 账号与审计 | 支持子用户管理链接、子用户密码轮换、按容器授权、操作日志、登录日志和 API Key 管理，适合分发给下游用户或拼车用户。 |
| 自动化接入 | 全量接口统一使用 /api/v1，覆盖任务队列、容器、镜像、网络、流量、批量创建和批量操作；同时提供魔方财务对接模块，并由 GitHub Actions 自动打包发布。 |
| 运维入口 | 提供总览统计、持久化历史指标、任务阶段/错误记录、主机资源、路由概览、Swap 管理、CLI-only 模式和 GitHub Actions 自动发布产物，便于在小型节点上长期维护。 |
Disk growth is offline and never shrinks: KVM grows managed QCOW2 capacity while guest partitions/filesystems remain manual; LXC supports managed ext4 loop images. Instances with data disks use full backups instead of existing snapshots. Portable archives and their expanded disk payloads are each limited to 64 GiB; sparse KVM virtual capacity is a separate limit. KVM restore/clone requires virt-customize (guestfs-tools or distribution equivalent). See storage and backup details and task retention.
磁盘只支持离线增容：KVM 扩受管 QCOW2 容量，客户机分区/文件系统另行扩展；LXC 支持受管 ext4 loop 镜像。带数据盘实例使用完整备份，拒绝旧快照工作流；可移植归档和展开后的磁盘负载分别限制为 64 GiB，KVM 稀疏磁盘的虚拟容量另行计算。KVM 恢复/克隆需要 virt-customize（guestfs-tools 或发行版对应包），详见磁盘与备份说明和任务历史。
- Backend: Go, net/http, LXC, KVM/libvirt, cgroup v2, iptables, conntrack
- Frontend: React, TypeScript, Vite, Tailwind CSS, lucide-react, xterm.js
- Runtime: Linux, systemd, LXC, KVM/QEMU
- Build: GitHub Actions, Node.js 20, Go 1.24
This open-source software does not distribute Windows system images, nor does it provide any means to bypass or circumvent Windows activation mechanisms.
All download links provided within the software point to resources officially supplied by Microsoft. Users of this software are responsible for obtaining the appropriate licenses from Microsoft before using any Windows operating system downloaded through these links. This project does not bypass activation requirements for installed systems, nor does it assume any responsibility for the consequences of users' actions when using this software.
This open-source software is intended solely for educational purposes, specifically for learning the principles of LXC and KVM. The copyright for the Windows logo and related icons belongs to Microsoft/Windows.
本开源软件不提供任何 Windows 操作系统镜像的分发服务，也不包含任何绕过、破解或免除 Windows 激活机制的功能。
软件内涉及的 Windows 系统下载链接均由微软官方提供。使用者在下载、安装和使用相关 Windows 系统时，应自行向微软或其授权渠道购买并获得相应的软件许可。本项目不会对安装后的 Windows 系统进行任何形式的激活绕过、破解或免激活处理。
对于使用者因使用本软件而产生的任何行为及其后果，包括但不限于软件许可、系统使用、数据丢失、法律责任或其他相关问题，本项目及其开发者不承担任何责任。
本开源软件仅供学习和研究 LXC、KVM 等虚拟化技术原理之目的使用，不得用于任何违反适用法律法规、软件许可协议或第三方权益的行为。
本软件中涉及的 Windows 名称、标识、图标及相关知识产权均归 Microsoft Corporation 及其权利人所有。本项目与微软公司不存在任何关联、授权或合作关系。
- Nodeseek.com — 一个专注于服务器的社区
- Linux.do — 一个充满灵感的科技社区