内核都卸载了，DKMS 却还在为它们编译 110M 模块：揪出 i915-sriov-dkms 的“幽灵内核”

# 1) 卸掉孤儿 headers（镜像已卸载、headers 还在的，就是孤儿）
apt-get purge -y proxmox-headers-6.17.13-2-pve proxmox-headers-6.17.13-21-pve \
                 proxmox-headers-6.17.13-4-pve proxmox-headers-6.17.4-2-pve

# 2) 清掉为幽灵内核编译的 DKMS 条目
for k in 6.17.13-2-pve 6.17.13-21-pve 6.17.13-4-pve 6.17.4-2-pve; do
  dkms remove i915-sriov-dkms/2026.08.12.1 -k $k
done

# 3) 删掉 /lib/modules 下的残留空目录（确认对应内核包已不存在）
rm -rf /lib/modules/6.17.13-2-pve /lib/modules/6.17.13-21-pve \
       /lib/modules/6.17.13-4-pve /lib/modules/6.17.4-2-pve

#!/usr/bin/env bash
# fix-dkms-ghost-kernels.sh — 清理"幽灵内核"：为已卸载内核残留的 DKMS 构建、孤儿 headers、残留目录
# 本机体检:   sudo bash fix-dkms-ghost-kernels.sh
# 本机清理:   sudo bash fix-dkms-ghost-kernels.sh --apply
# 远程体检:   bash fix-dkms-ghost-kernels.sh root@<目标节点IP>
# 远程清理:   bash fix-dkms-ghost-kernels.sh root@<目标节点IP> --apply
set -euo pipefail
TARGET=""
APPLY_ARG=""
for a in "$@"; do
  case "$a" in
    --apply) APPLY_ARG="--apply" ;;
    *) TARGET="$a" ;;
  esac
done

PAYLOAD=$(cat <<'EOS'
set -euo pipefail
APPLY=0
[ "${1:-}" = "--apply" ] && APPLY=1
REPORT="${TMPDIR:-/tmp}/dkms-ghost-kernels-$(date +%Y%m%d-%H%M%S).txt"
log(){ printf '%s\n' "$*" | tee -a "$REPORT"; }

RUNNING="$(uname -r)"
log "== [1/6] DKMS 幽灵内核体检 $(date -Is) =="
log "运行中内核: $RUNNING"
INSTALLED_KERNELS="$(cd /boot 2>/dev/null && ls vmlinuz-* 2>/dev/null | sed 's/^vmlinuz-//' || true)"
log "已安装内核镜像 (/boot/vmlinuz-*):"
printf '%s\n' "$INSTALLED_KERNELS" | sed 's/^/  - /' | while read -r l; do log "$l"; done

log "== [2/6] dkms status 现状 =="
dkms status 2>/dev/null | while IFS= read -r l; do log "$l"; done
[ -z "$(dkms status 2>/dev/null)" ] && log "(无任何 DKMS 条目)" || true

log "== [3/6] 逐个分类 /lib/modules 下的内核目录 =="
GHOST_DIRS=()
for d in /lib/modules/*/; do
  v="$(basename "$d")"
  [ "$v" = "$RUNNING" ] && { log "KEEP  $v  (正在运行，绝不动它)"; continue; }
  if printf '%s\n' "$INSTALLED_KERNELS" | grep -qxF "$v"; then
    log "KEEP  $v  (内核镜像仍已安装)"; continue
  fi
  if dpkg -S "/lib/modules/$v" >/dev/null 2>&1; then
    log "KEEP  $v  (仍有已安装的软件包占用，跳过)"; continue
  fi
  GHOST_DIRS+=("$v")
  log "GHOST $v  (内核镜像已卸载，残留目录；文件数: $(find "$d" -type f 2>/dev/null | wc -l))"
done

log "== [4/6] 需要清理的 DKMS 构建条目 =="
STALE_COUNT=0
while IFS= read -r line; do
  [ -z "$line" ] && continue
  kv="$(printf '%s' "$line" | awk -F', ' '/,/{print $2}' | cut -d, -f1)"
  [ -z "$kv" ] && continue
  [ "$kv" = "$RUNNING" ] && continue
  printf '%s\n' "$INSTALLED_KERNELS" | grep -qxF "$kv" && continue
  mod="$(printf '%s' "$line" | cut -d/ -f1)"
  mv="$(printf '%s' "$line" | cut -d/ -f2 | cut -d, -f1)"
  STALE_COUNT=$((STALE_COUNT+1))
  if [ "$APPLY" = 1 ]; then
    log "CLEAN dkms remove $mod/$mv -k $kv"
    dkms remove "$mod/$mv" -k "$kv" || log "  (移除失败，请手动检查)"
  else
    log "STALE $mod/$mv  for kernel $kv  (将执行: dkms remove $mod/$mv -k $kv)"
  fi
done < <(dkms status 2>/dev/null)
[ "$STALE_COUNT" = 0 ] && [ "$APPLY" = 0 ] && log "(没有为幽灵内核编译的 DKMS 条目，干净)" || true

log "== [5/6] 需要卸载的孤儿内核头文件包 =="
ORPHANS=()
for pkg in $(dpkg --list 2>/dev/null | awk '/^ii  (linux-headers|proxmox-headers|pve-headers)-[0-9]/{print $2}'); do
  v="$(printf '%s' "$pkg" | sed -E 's/^(linux|proxmox|pve)-headers-//')"
  printf '%s' "$v" | grep -qE '^[0-9]+\.[0-9]+\.[0-9]+' || { log "SKIP  $pkg  (元包/版本号不完整，不自动处理)"; continue; }
  [ "$v" = "$RUNNING" ] && { log "SKIP  $pkg  (属于运行中内核)"; continue; }
  [ -e "/boot/vmlinuz-$v" ] && { log "SKIP  $pkg  (内核镜像仍已安装)"; continue; }
  ORPHANS+=("$pkg")
  log "ORPHAN $pkg  (对应内核 $v 已卸载)"
done
if [ "${#ORPHANS[@]}" -gt 0 ]; then
  if [ "$APPLY" = 1 ]; then
    log "PURGE: apt-get -y purge ${ORPHANS[*]}"
    DEBIAN_FRONTEND=noninteractive apt-get -y purge "${ORPHANS[@]}" || log "  (卸载失败，请手动检查)"
  else
    log "演练: apt-get -s purge ${ORPHANS[*]}"
    apt-get -s purge "${ORPHANS[@]}" 2>/dev/null | grep -E '^(Remv|Purg)' | while IFS= read -r l; do log "  $l"; done || true
  fi
else
  log "(没有孤儿头文件包，干净)"
fi

log "== [6/6] 清理幽灵残留目录 =="
if [ "${#GHOST_DIRS[@]}" -gt 0 ]; then
  for v in "${GHOST_DIRS[@]}"; do
    if [ "$APPLY" = 1 ]; then
      log "RMDIR /lib/modules/$v"
      rm -rf "/lib/modules/$v"
    else
      log "演练: rm -rf /lib/modules/$v"
    fi
  done
else
  log "(没有幽灵残留目录，干净)"
fi

log "== 复核 =="
log "dkms status:"; dkms status 2>/dev/null | sed 's/^/  /' | while IFS= read -r l; do log "$l"; done
log "/lib/modules:"; ls /lib/modules | sed 's/^/  /' | while IFS= read -r l; do log "$l"; done
log "DKMS 缓存占用: $(du -sh /var/lib/dkms 2>/dev/null | cut -f1)"
if [ "$APPLY" = 1 ]; then
  log "完成。清理报告: $REPORT"
else
  log "以上为演练结果（未做任何修改）。确认无误后加 --apply 重新执行。报告: $REPORT"
fi
EOS
)

if [ -n "$TARGET" ]; then
  ssh "$TARGET" "bash -s $APPLY_ARG" <<<"$PAYLOAD"
else
  [ "$(id -u)" -eq 0 ] || { echo "本机清理需要 root 权限，请用 sudo 运行。"; exit 1; }
  bash -s $APPLY_ARG <<<"$PAYLOAD"
fi

# Fix-DkmsGhostKernels.ps1 - Check & clean "ghost kernels" on a remote Ubuntu/Debian/PVE node.
# Dry run : .\Fix-DkmsGhostKernels.ps1 -Target "root@<server-ip>"
# Apply   : .\Fix-DkmsGhostKernels.ps1 -Target "root@<server-ip>" -Apply
# Uses only the built-in OpenSSH client. (ASCII-only on purpose: Windows PowerShell 5.1
# mis-decodes BOM-less UTF-8 scripts and may fail to parse non-ASCII strings.)
param(
  [Parameter(Mandatory = $true)][string]$Target,
  [int]$Port = 22,
  [switch]$Apply
)

$payload = @'
set -euo pipefail
APPLY=0
[ "${1:-}" = "--apply" ] && APPLY=1
REPORT="${TMPDIR:-/tmp}/dkms-ghost-kernels-$(date +%Y%m%d-%H%M%S).txt"
log(){ printf '%s\n' "$*" | tee -a "$REPORT"; }

RUNNING="$(uname -r)"
log "== [1/6] DKMS ghost-kernel health check $(date -Is) =="
log "Running kernel: $RUNNING"
INSTALLED_KERNELS="$(cd /boot 2>/dev/null && ls vmlinuz-* 2>/dev/null | sed 's/^vmlinuz-//' || true)"
log "Installed kernel images (/boot/vmlinuz-*):"
printf '%s\n' "$INSTALLED_KERNELS" | sed 's/^/  - /' | while read -r l; do log "$l"; done

log "== [2/6] dkms status =="
dkms status 2>/dev/null | while IFS= read -r l; do log "$l"; done
[ -z "$(dkms status 2>/dev/null)" ] && log "(no DKMS entries)" || true

log "== [3/6] Classifying /lib/modules entries =="
GHOST_DIRS=()
for d in /lib/modules/*/; do
  v="$(basename "$d")"
  [ "$v" = "$RUNNING" ] && { log "KEEP  $v  (running kernel, never touched)"; continue; }
  if printf '%s\n' "$INSTALLED_KERNELS" | grep -qxF "$v"; then
    log "KEEP  $v  (kernel image still installed)"; continue
  fi
  if dpkg -S "/lib/modules/$v" >/dev/null 2>&1; then
    log "KEEP  $v  (still owned by installed packages, skipped)"; continue
  fi
  GHOST_DIRS+=("$v")
  log "GHOST $v  (image uninstalled, leftover dir; files: $(find "$d" -type f 2>/dev/null | wc -l))"
done

log "== [4/6] DKMS builds for ghost kernels =="
STALE_COUNT=0
while IFS= read -r line; do
  [ -z "$line" ] && continue
  kv="$(printf '%s' "$line" | awk -F', ' '/,/{print $2}' | cut -d, -f1)"
  [ -z "$kv" ] && continue
  [ "$kv" = "$RUNNING" ] && continue
  printf '%s\n' "$INSTALLED_KERNELS" | grep -qxF "$kv" && continue
  mod="$(printf '%s' "$line" | cut -d/ -f1)"
  mv="$(printf '%s' "$line" | cut -d/ -f2 | cut -d, -f1)"
  STALE_COUNT=$((STALE_COUNT+1))
  if [ "$APPLY" = 1 ]; then
    log "CLEAN dkms remove $mod/$mv -k $kv"
    dkms remove "$mod/$mv" -k "$kv" || log "  (remove failed, please check manually)"
  else
    log "STALE $mod/$mv  for kernel $kv  (will run: dkms remove $mod/$mv -k $kv)"
  fi
done < <(dkms status 2>/dev/null)
[ "$STALE_COUNT" = 0 ] && [ "$APPLY" = 0 ] && log "(no DKMS builds for ghost kernels, clean)" || true

log "== [5/6] Orphan kernel header packages =="
ORPHANS=()
for pkg in $(dpkg --list 2>/dev/null | awk '/^ii  (linux-headers|proxmox-headers|pve-headers)-[0-9]/{print $2}'); do
  v="$(printf '%s' "$pkg" | sed -E 's/^(linux|proxmox|pve)-headers-//')"
  printf '%s' "$v" | grep -qE '^[0-9]+\.[0-9]+\.[0-9]+' || { log "SKIP  $pkg  (meta package, not handled automatically)"; continue; }
  [ "$v" = "$RUNNING" ] && { log "SKIP  $pkg  (belongs to the running kernel)"; continue; }
  [ -e "/boot/vmlinuz-$v" ] && { log "SKIP  $pkg  (kernel image still installed)"; continue; }
  ORPHANS+=("$pkg")
  log "ORPHAN $pkg  (kernel $v no longer installed)"
done
if [ "${#ORPHANS[@]}" -gt 0 ]; then
  if [ "$APPLY" = 1 ]; then
    log "PURGE: apt-get -y purge ${ORPHANS[*]}"
    DEBIAN_FRONTEND=noninteractive apt-get -y purge "${ORPHANS[@]}" || log "  (purge failed, please check manually)"
  else
    log "Dry-run: apt-get -s purge ${ORPHANS[*]}"
    apt-get -s purge "${ORPHANS[@]}" 2>/dev/null | grep -E '^(Remv|Purg)' | while IFS= read -r l; do log "  $l"; done || true
  fi
else
  log "(no orphan header packages, clean)"
fi

log "== [6/6] Removing ghost leftover dirs =="
if [ "${#GHOST_DIRS[@]}" -gt 0 ]; then
  for v in "${GHOST_DIRS[@]}"; do
    if [ "$APPLY" = 1 ]; then
      log "RMDIR /lib/modules/$v"
      rm -rf "/lib/modules/$v"
    else
      log "Dry-run: rm -rf /lib/modules/$v"
    fi
  done
else
  log "(no ghost leftover dirs, clean)"
fi

log "== Verification =="
log "dkms status:"; dkms status 2>/dev/null | sed 's/^/  /' | while IFS= read -r l; do log "$l"; done
log "/lib/modules:"; ls /lib/modules | sed 's/^/  /' | while IFS= read -r l; do log "$l"; done
log "DKMS cache usage: $(du -sh /var/lib/dkms 2>/dev/null | cut -f1)"
if [ "$APPLY" = 1 ]; then
  log "Done. Report: $REPORT"
else
  log "This was a DRY RUN (nothing changed). Re-run with -Apply to clean. Report: $REPORT"
fi
'@

$arg = ''
if ($Apply) { $arg = '--apply' }
$payload | ssh -p $Port $Target "bash -s $arg"
if ($LASTEXITCODE -eq 0) {
  Write-Host "Done. Please review the final 'Verification' block above." -ForegroundColor Green
} else {
  Write-Host "Failed. Check the SSH connection and the output above." -ForegroundColor Red
}

#!/usr/bin/env zsh
# fix-dkms-ghost-kernels-macos.zsh — macOS 26 一键体检/清理远程节点的"幽灵内核"
# 体检: bash fix-dkms-ghost-kernels-macos.zsh root@<目标节点IP>
# 清理: bash fix-dkms-ghost-kernels-macos.zsh root@<目标节点IP> --apply
# 只依赖系统自带的 ssh，目标机需为 Ubuntu / Debian / Proxmox VE。
set -euo pipefail
TARGET="${1:?用法: bash fix-dkms-ghost-kernels-macos.zsh root@<目标节点IP> [--apply]}"
APPLY_ARG="${2:-}"

ssh "$TARGET" "bash -s $APPLY_ARG" <<'EOS'
set -euo pipefail
APPLY=0
[ "${1:-}" = "--apply" ] && APPLY=1
REPORT="${TMPDIR:-/tmp}/dkms-ghost-kernels-$(date +%Y%m%d-%H%M%S).txt"
log(){ printf '%s\n' "$*" | tee -a "$REPORT"; }

RUNNING="$(uname -r)"
log "== [1/6] DKMS 幽灵内核体检 $(date -Is) =="
log "运行中内核: $RUNNING"
INSTALLED_KERNELS="$(cd /boot 2>/dev/null && ls vmlinuz-* 2>/dev/null | sed 's/^vmlinuz-//' || true)"
log "已安装内核镜像 (/boot/vmlinuz-*):"
printf '%s\n' "$INSTALLED_KERNELS" | sed 's/^/  - /' | while read -r l; do log "$l"; done

log "== [2/6] dkms status 现状 =="
dkms status 2>/dev/null | while IFS= read -r l; do log "$l"; done
[ -z "$(dkms status 2>/dev/null)" ] && log "(无任何 DKMS 条目)" || true

log "== [3/6] 逐个分类 /lib/modules 下的内核目录 =="
GHOST_DIRS=()
for d in /lib/modules/*/; do
  v="$(basename "$d")"
  [ "$v" = "$RUNNING" ] && { log "KEEP  $v  (正在运行，绝不动它)"; continue; }
  if printf '%s\n' "$INSTALLED_KERNELS" | grep -qxF "$v"; then
    log "KEEP  $v  (内核镜像仍已安装)"; continue
  fi
  if dpkg -S "/lib/modules/$v" >/dev/null 2>&1; then
    log "KEEP  $v  (仍有已安装的软件包占用，跳过)"; continue
  fi
  GHOST_DIRS+=("$v")
  log "GHOST $v  (内核镜像已卸载，残留目录；文件数: $(find "$d" -type f 2>/dev/null | wc -l))"
done

log "== [4/6] 需要清理的 DKMS 构建条目 =="
STALE_COUNT=0
while IFS= read -r line; do
  [ -z "$line" ] && continue
  kv="$(printf '%s' "$line" | awk -F', ' '/,/{print $2}' | cut -d, -f1)"
  [ -z "$kv" ] && continue
  [ "$kv" = "$RUNNING" ] && continue
  printf '%s\n' "$INSTALLED_KERNELS" | grep -qxF "$kv" && continue
  mod="$(printf '%s' "$line" | cut -d/ -f1)"
  mv="$(printf '%s' "$line" | cut -d/ -f2 | cut -d, -f1)"
  STALE_COUNT=$((STALE_COUNT+1))
  if [ "$APPLY" = 1 ]; then
    log "CLEAN dkms remove $mod/$mv -k $kv"
    dkms remove "$mod/$mv" -k "$kv" || log "  (移除失败，请手动检查)"
  else
    log "STALE $mod/$mv  for kernel $kv  (将执行: dkms remove $mod/$mv -k $kv)"
  fi
done < <(dkms status 2>/dev/null)
[ "$STALE_COUNT" = 0 ] && [ "$APPLY" = 0 ] && log "(没有为幽灵内核编译的 DKMS 条目，干净)" || true

log "== [5/6] 需要卸载的孤儿内核头文件包 =="
ORPHANS=()
for pkg in $(dpkg --list 2>/dev/null | awk '/^ii  (linux-headers|proxmox-headers|pve-headers)-[0-9]/{print $2}'); do
  v="$(printf '%s' "$pkg" | sed -E 's/^(linux|proxmox|pve)-headers-//')"
  printf '%s' "$v" | grep -qE '^[0-9]+\.[0-9]+\.[0-9]+' || { log "SKIP  $pkg  (元包/版本号不完整，不自动处理)"; continue; }
  [ "$v" = "$RUNNING" ] && { log "SKIP  $pkg  (属于运行中内核)"; continue; }
  [ -e "/boot/vmlinuz-$v" ] && { log "SKIP  $pkg  (内核镜像仍已安装)"; continue; }
  ORPHANS+=("$pkg")
  log "ORPHAN $pkg  (对应内核 $v 已卸载)"
done
if [ "${#ORPHANS[@]}" -gt 0 ]; then
  if [ "$APPLY" = 1 ]; then
    log "PURGE: apt-get -y purge ${ORPHANS[*]}"
    DEBIAN_FRONTEND=noninteractive apt-get -y purge "${ORPHANS[@]}" || log "  (卸载失败，请手动检查)"
  else
    log "演练: apt-get -s purge ${ORPHANS[*]}"
    apt-get -s purge "${ORPHANS[@]}" 2>/dev/null | grep -E '^(Remv|Purg)' | while IFS= read -r l; do log "  $l"; done || true
  fi
else
  log "(没有孤儿头文件包，干净)"
fi

log "== [6/6] 清理幽灵残留目录 =="
if [ "${#GHOST_DIRS[@]}" -gt 0 ]; then
  for v in "${GHOST_DIRS[@]}"; do
    if [ "$APPLY" = 1 ]; then
      log "RMDIR /lib/modules/$v"
      rm -rf "/lib/modules/$v"
    else
      log "演练: rm -rf /lib/modules/$v"
    fi
  done
else
  log "(没有幽灵残留目录，干净)"
fi

log "== 复核 =="
log "dkms status:"; dkms status 2>/dev/null | sed 's/^/  /' | while IFS= read -r l; do log "$l"; done
log "/lib/modules:"; ls /lib/modules | sed 's/^/  /' | while IFS= read -r l; do log "$l"; done
log "DKMS 缓存占用: $(du -sh /var/lib/dkms 2>/dev/null | cut -f1)"
if [ "$APPLY" = 1 ]; then
  log "完成。清理报告: $REPORT"
else
  log "以上为演练结果（未做任何修改）。确认无误后加 --apply 重新执行。报告: $REPORT"
fi
EOS

请帮我检查并清理一台 Proxmox VE / Ubuntu 服务器上的 DKMS"幽灵内核"——即内核镜像
已卸载、但系统里仍残留其 DKMS 编译产物、孤儿 headers 包和 /lib/modules 残留目录。
请严格按以下步骤操作：

1. 通过 SSH 登录该节点（连接方式见会话上下文/我会另行提供）；
2. 记录现状：uname -r、dkms status、ls /lib/modules、
   dpkg -l | grep -E 'linux-headers|proxmox-headers|pve-headers'；
3. 先以演练模式运行一次体检脚本（先 dry-run，不改任何东西）：
   - 分类规则：uname -r 命中的目录无条件保留；/boot/vmlinuz-<版本> 仍存在的保留；
     dpkg -S 显示仍被已安装包占用的目录跳过；其余判定为幽灵；
   - 孤儿 headers：包名对应的内核版本无 vmlinuz 且非运行内核，且版本号含三段数字
     （形如 proxmox-headers-7.0 的元包不得列入）；
4. 把演练报告给我看，明确列出：将 dkms remove 的条目、将 apt purge 的包、
   将 rm -rf 的目录；等我确认后加 --apply 重新执行；
5. 清理后复核：dkms status 应只剩已安装内核的条目；ls /lib/modules 应与
   /boot/vmlinuz-* 及运行内核一致；du -sh /var/lib/dkms 记录瘦身效果。

约束：绝不触碰运行中内核（uname -r）；不执行 dist-upgrade/full-upgrade；不重启；
不动当前内核的 headers 与模块；rm -rf 仅限 /lib/modules/<幽灵版本> 这一层目录。