feat: initial commit of clean multi-protocol singbox core script
This commit is contained in:
jocay
@@ -0,0 +1,333 @@
|
||||
#!/usr/bin/env bash
|
||||
# ==============================================================================
|
||||
# 项目：Sing-box 极简现代化核心部署管理脚本 (全协议增强版)
|
||||
# 支持五大协议：VLESS-Reality / Hysteria 2 / TUIC v5 / VMess-WS / AnyTLS
|
||||
# 特性：原生二进制、安全防火墙精准放行、零隐私泄露、零后门、多平台订阅一键生成
|
||||
# ==============================================================================
|
||||
|
||||
set -eo pipefail
|
||||
|
||||
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||
|
||||
# 加载各核心子模块
|
||||
source "${SCRIPT_DIR}/lib/env.sh"
|
||||
source "${SCRIPT_DIR}/lib/system.sh"
|
||||
source "${SCRIPT_DIR}/lib/cert.sh"
|
||||
source "${SCRIPT_DIR}/lib/singbox.sh"
|
||||
source "${SCRIPT_DIR}/lib/config.sh"
|
||||
source "${SCRIPT_DIR}/lib/info.sh"
|
||||
|
||||
# 创建或确保全局快捷指令
|
||||
ensure_symlink() {
|
||||
if [[ ! -e "${SCRIPT_LINK}" ]]; then
|
||||
ln -sf "${SCRIPT_DIR}/sb.sh" "${SCRIPT_LINK}"
|
||||
chmod +x "${SCRIPT_LINK}"
|
||||
log_info "已创建全局快捷指令：直接在终端输入 ${CLR_GREEN}sb${CLR_RESET} 即可随时调出菜单"
|
||||
fi
|
||||
}
|
||||
|
||||
# 部署并启动服务
|
||||
finish_setup() {
|
||||
setup_systemd_service
|
||||
restart_service
|
||||
ensure_symlink
|
||||
sleep 1
|
||||
|
||||
if is_service_active; then
|
||||
log_success "Sing-box 核心代理守护服务已平稳启动！"
|
||||
show_node_info
|
||||
else
|
||||
log_error "Sing-box 启动异常，请通过 'sb log' 查看详细报错！"
|
||||
fi
|
||||
}
|
||||
|
||||
# 模式 1：一键五协议共存模式部署
|
||||
do_install_all() {
|
||||
check_root
|
||||
log_info "========== 开始安装 Sing-box 五协议共存套件 =========="
|
||||
|
||||
install_dependencies || exit 1
|
||||
install_singbox_binary || exit 1
|
||||
|
||||
local p_vless="${1:-443}"
|
||||
local p_hy2="${2:-8443}"
|
||||
local p_tuic="${3:-9443}"
|
||||
local p_vmess="${4:-8080}"
|
||||
local p_anytls="${5:-10443}"
|
||||
|
||||
if [[ -z "${1:-}" ]]; then
|
||||
echo -e "${CLR_BOLD}请指定各协议监听端口（直接回车使用推荐默认值）：${CLR_RESET}"
|
||||
read -rp "1. VLESS-Reality 端口 [默认: 443/tcp]: " in_vless
|
||||
read -rp "2. Hysteria 2 端口 [默认: 8443/udp]: " in_hy2
|
||||
read -rp "3. TUIC v5 端口 [默认: 9443/udp]: " in_tuic
|
||||
read -rp "4. VMess-WS 端口 [默认: 8080/tcp]: " in_vmess
|
||||
read -rp "5. AnyTLS 端口 [默认: 10443/tcp]: " in_anytls
|
||||
|
||||
p_vless="${in_vless:-443}"
|
||||
p_hy2="${in_hy2:-8443}"
|
||||
p_tuic="${in_tuic:-9443}"
|
||||
p_vmess="${in_vmess:-8080}"
|
||||
p_anytls="${in_anytls:-10443}"
|
||||
fi
|
||||
|
||||
# 生成多协议套件配置
|
||||
generate_suite_config "all" "$p_vless" "$p_hy2" "$p_tuic" "$p_vmess" "$p_anytls" || exit 1
|
||||
|
||||
# 安全放行对应端口与协议
|
||||
open_firewall_port "$p_vless" "tcp"
|
||||
open_firewall_port "$p_hy2" "udp"
|
||||
open_firewall_port "$p_tuic" "udp"
|
||||
open_firewall_port "$p_vmess" "tcp"
|
||||
open_firewall_port "$p_anytls" "tcp"
|
||||
|
||||
finish_setup
|
||||
}
|
||||
|
||||
# 模式 2：指定单协议独立安装
|
||||
do_install_single() {
|
||||
local proto="$1"
|
||||
check_root
|
||||
|
||||
install_dependencies || exit 1
|
||||
install_singbox_binary || exit 1
|
||||
|
||||
case "$proto" in
|
||||
vless)
|
||||
local port="${2:-}"
|
||||
local sni="${3:-}"
|
||||
if [[ -z "$port" ]]; then
|
||||
read -rp "请输入 VLESS-Reality 端口 [默认: 443]: " in_port
|
||||
read -rp "请输入伪装域名 SNI [默认: www.apple.com]: " in_sni
|
||||
port="${in_port:-443}"
|
||||
sni="${in_sni:-www.apple.com}"
|
||||
fi
|
||||
generate_suite_config "vless" "$port" "$sni" || exit 1
|
||||
open_firewall_port "$port" "tcp"
|
||||
;;
|
||||
hy2)
|
||||
local port="${2:-}"
|
||||
if [[ -z "$port" ]]; then
|
||||
read -rp "请输入 Hysteria 2 端口 [默认: 8443]: " in_port
|
||||
port="${in_port:-8443}"
|
||||
fi
|
||||
generate_suite_config "hy2" "$port" || exit 1
|
||||
open_firewall_port "$port" "udp"
|
||||
;;
|
||||
tuic)
|
||||
local port="${2:-}"
|
||||
if [[ -z "$port" ]]; then
|
||||
read -rp "请输入 TUIC v5 端口 [默认: 9443]: " in_port
|
||||
port="${in_port:-9443}"
|
||||
fi
|
||||
generate_suite_config "tuic" "$port" || exit 1
|
||||
open_firewall_port "$port" "udp"
|
||||
;;
|
||||
vmess)
|
||||
local port="${2:-}"
|
||||
if [[ -z "$port" ]]; then
|
||||
read -rp "请输入 VMess-WS 端口 [默认: 8080]: " in_port
|
||||
port="${in_port:-8080}"
|
||||
fi
|
||||
generate_suite_config "vmess" "$port" || exit 1
|
||||
open_firewall_port "$port" "tcp"
|
||||
;;
|
||||
anytls)
|
||||
local port="${2:-}"
|
||||
if [[ -z "$port" ]]; then
|
||||
read -rp "请输入 AnyTLS 端口 [默认: 10443]: " in_port
|
||||
port="${in_port:-10443}"
|
||||
fi
|
||||
generate_suite_config "anytls" "$port" || exit 1
|
||||
open_firewall_port "$port" "tcp"
|
||||
;;
|
||||
*)
|
||||
log_error "不支持的协议: $proto"
|
||||
return 1
|
||||
;;
|
||||
esac
|
||||
|
||||
finish_setup
|
||||
}
|
||||
|
||||
# 单协议交互选择子菜单
|
||||
show_single_menu() {
|
||||
clear
|
||||
echo -e "${CLR_GREEN}================================================================${CLR_RESET}"
|
||||
echo -e "${CLR_BOLD}${CLR_GREEN} 请选择要单独安装的代理协议 ${CLR_RESET}"
|
||||
echo -e "${CLR_GREEN}================================================================${CLR_RESET}"
|
||||
echo -e " ${CLR_BOLD}1)${CLR_RESET} VLESS-Reality-Vision (免证书顶级抗封锁)"
|
||||
echo -e " ${CLR_BOLD}2)${CLR_RESET} Hysteria 2 (极速 QUIC/UDP，恶劣网络首选)"
|
||||
echo -e " ${CLR_BOLD}3)${CLR_RESET} TUIC v5 (BBR 拥塞控制 QUIC)"
|
||||
echo -e " ${CLR_BOLD}4)${CLR_RESET} VMess-WS (经典 WebSocket，兼容 CDN 反代)"
|
||||
echo -e " ${CLR_BOLD}5)${CLR_RESET} AnyTLS (Sing-box 原生 TLS 协议)"
|
||||
echo -e " ${CLR_BOLD}0)${CLR_RESET} 返回上一级菜单"
|
||||
echo -e "${CLR_GREEN}================================================================${CLR_RESET}"
|
||||
read -rp "请选择 [0-5]: " sub_choice
|
||||
|
||||
case "$sub_choice" in
|
||||
1) do_install_single "vless" ;;
|
||||
2) do_install_single "hy2" ;;
|
||||
3) do_install_single "tuic" ;;
|
||||
4) do_install_single "vmess" ;;
|
||||
5) do_install_single "anytls" ;;
|
||||
0) return 0 ;;
|
||||
*) log_warn "无效选项！" ;;
|
||||
esac
|
||||
}
|
||||
|
||||
# 查看实时日志
|
||||
do_logs() {
|
||||
check_root
|
||||
log_info "正在查看 Sing-box 实时运行日志 (按 Ctrl+C 退出)..."
|
||||
journalctl -u "${SERVICE_NAME}" -f -n 50
|
||||
}
|
||||
|
||||
# 安全清理卸载
|
||||
do_uninstall() {
|
||||
check_root
|
||||
echo -e "${CLR_YELLOW}确定要彻底卸载 Sing-box 代理服务吗？[y/N]: ${CLR_RESET}"
|
||||
read -r choice
|
||||
case "$choice" in
|
||||
[Yy]*)
|
||||
log_info "开始安全清理 Sing-box..."
|
||||
|
||||
# 清理所有已启用的防火墙放行规则
|
||||
if [[ -f "${META_FILE}" ]]; then
|
||||
local p_vl p_hy p_tu p_vm p_an
|
||||
p_vl=$(jq -r '.protocols.vless_reality.port // empty' "${META_FILE}")
|
||||
p_hy=$(jq -r '.protocols.hysteria2.port // empty' "${META_FILE}")
|
||||
p_tu=$(jq -r '.protocols.tuic.port // empty' "${META_FILE}")
|
||||
p_vm=$(jq -r '.protocols.vmess_ws.port // empty' "${META_FILE}")
|
||||
p_an=$(jq -r '.protocols.anytls.port // empty' "${META_FILE}")
|
||||
|
||||
[[ -n "$p_vl" ]] && close_firewall_port "$p_vl" "tcp"
|
||||
[[ -n "$p_hy" ]] && close_firewall_port "$p_hy" "udp"
|
||||
[[ -n "$p_tu" ]] && close_firewall_port "$p_tu" "udp"
|
||||
[[ -n "$p_vm" ]] && close_firewall_port "$p_vm" "tcp"
|
||||
[[ -n "$p_an" ]] && close_firewall_port "$p_an" "tcp"
|
||||
fi
|
||||
|
||||
# 停止并清理守护服务
|
||||
if systemctl is-enabled --quiet "${SERVICE_NAME}" 2>/dev/null; then
|
||||
systemctl stop "${SERVICE_NAME}" >/dev/null 2>&1 || true
|
||||
systemctl disable "${SERVICE_NAME}" >/dev/null 2>&1 || true
|
||||
fi
|
||||
rm -f "${SERVICE_FILE}"
|
||||
systemctl daemon-reload >/dev/null 2>&1 || true
|
||||
|
||||
# 仅清理程序自身目录，杜绝误伤
|
||||
rm -rf "${INSTALL_DIR}"
|
||||
rm -f "${BIN_PATH}" "${SCRIPT_LINK}"
|
||||
|
||||
log_success "Sing-box 核心服务已完全且干净地卸载！"
|
||||
;;
|
||||
*)
|
||||
log_info "已取消卸载。"
|
||||
;;
|
||||
esac
|
||||
}
|
||||
|
||||
# 交互式主菜单
|
||||
show_menu() {
|
||||
clear
|
||||
echo -e "${CLR_GREEN}================================================================${CLR_RESET}"
|
||||
echo -e "${CLR_BOLD}${CLR_GREEN} Sing-box 现代化核心管理工具 (全协议纯净版) ${CLR_RESET}"
|
||||
echo -e "${CLR_GREEN}================================================================${CLR_RESET}"
|
||||
|
||||
local status_text
|
||||
if is_service_active 2>/dev/null; then
|
||||
status_text="${CLR_GREEN}● 运行中${CLR_RESET}"
|
||||
else
|
||||
status_text="${CLR_RED}○ 未运行${CLR_RESET}"
|
||||
fi
|
||||
echo -e "核心状态: ${status_text}"
|
||||
echo -e "${CLR_GREEN}----------------------------------------------------------------${CLR_RESET}"
|
||||
echo -e " ${CLR_BOLD}1)${CLR_RESET} 一键安装【五协议共存套件】 (VLESS+Hy2+TUIC+VMess+AnyTLS)"
|
||||
echo -e " ${CLR_BOLD}2)${CLR_RESET} 自选单协议独立安装"
|
||||
echo -e " ${CLR_BOLD}3)${CLR_RESET} 查看当前已装节点信息与分享链接"
|
||||
echo -e " ${CLR_BOLD}4)${CLR_RESET} 启动服务"
|
||||
echo -e " ${CLR_BOLD}5)${CLR_RESET} 停止服务"
|
||||
echo -e " ${CLR_BOLD}6)${CLR_RESET} 重启服务"
|
||||
echo -e " ${CLR_BOLD}7)${CLR_RESET} 查看实时日志"
|
||||
echo -e " ${CLR_BOLD}8)${CLR_RESET} 彻底干净卸载"
|
||||
echo -e " ${CLR_BOLD}0)${CLR_RESET} 退出"
|
||||
echo -e "${CLR_GREEN}================================================================${CLR_RESET}"
|
||||
read -rp "请选择操作 [0-8]: " menu_choice
|
||||
|
||||
case "$menu_choice" in
|
||||
1) do_install_all ;;
|
||||
2) show_single_menu ;;
|
||||
3) show_node_info ;;
|
||||
4)
|
||||
start_service
|
||||
log_success "服务已启动！"
|
||||
;;
|
||||
5)
|
||||
stop_service
|
||||
log_success "服务已停止！"
|
||||
;;
|
||||
6)
|
||||
restart_service
|
||||
log_success "服务已重启！"
|
||||
;;
|
||||
7) do_logs ;;
|
||||
8) do_uninstall ;;
|
||||
0) exit 0 ;;
|
||||
*) log_warn "无效选项，请重新输入！" ;;
|
||||
esac
|
||||
}
|
||||
|
||||
# 命令行 CLI 支持
|
||||
case "${1:-}" in
|
||||
install)
|
||||
shift
|
||||
case "${1:-}" in
|
||||
all)
|
||||
shift
|
||||
do_install_all "$@"
|
||||
;;
|
||||
vless|hy2|tuic|vmess|anytls)
|
||||
proto="$1"
|
||||
shift
|
||||
do_install_single "$proto" "$@"
|
||||
;;
|
||||
*)
|
||||
do_install_all
|
||||
;;
|
||||
esac
|
||||
;;
|
||||
info|show)
|
||||
show_node_info
|
||||
;;
|
||||
start)
|
||||
check_root
|
||||
start_service
|
||||
log_success "服务已启动！"
|
||||
;;
|
||||
stop)
|
||||
check_root
|
||||
stop_service
|
||||
log_success "服务已停止！"
|
||||
;;
|
||||
restart)
|
||||
check_root
|
||||
restart_service
|
||||
log_success "服务已重启！"
|
||||
;;
|
||||
status)
|
||||
if is_service_active; then
|
||||
log_success "Sing-box 正在稳定运行中。"
|
||||
else
|
||||
log_warn "Sing-box 当前未运行。"
|
||||
fi
|
||||
;;
|
||||
log|logs)
|
||||
do_logs
|
||||
;;
|
||||
uninstall)
|
||||
do_uninstall
|
||||
;;
|
||||
*)
|
||||
show_menu
|
||||
;;
|
||||
esac
|
||||
Reference in New Issue
Block a user