mirror of
https://github.com/wnlen/clash-for-linux.git
synced 2026-03-21 22:06:45 +08:00
Merge branch 'dev' of https://github.com/wnlen/clash-for-linux into dev
This commit is contained in:
wnlen
7
.env
7
.env
@ -15,6 +15,11 @@
|
||||
# 示例：export CLASH_URL='https://example.com/sub?token=xxx'
|
||||
export CLASH_URL=''
|
||||
|
||||
# 是否自动更新 Clash 订阅配置：
|
||||
# true = 启动时检查订阅并重新下载/转换配置
|
||||
# false = 禁用自动更新，直接使用本地已有 config.yaml
|
||||
export CLASH_AUTO_UPDATE="true"
|
||||
|
||||
# 订阅请求头（可选）
|
||||
# 常见机场需要 User-Agent；如不需要可留空
|
||||
export CLASH_HEADERS='User-Agent: ClashforWindows/0.20.39'
|
||||
@ -42,7 +47,7 @@ CLASH_SHOW_SECRET_MASKED=true
|
||||
# - 默认仅监听本机：127.0.0.1:9090 （推荐）
|
||||
# - 如需局域网访问再改成：0.0.0.0:9090，并确保 CLASH_SECRET 足够复杂
|
||||
export EXTERNAL_CONTROLLER_ENABLED=true
|
||||
export EXTERNAL_CONTROLLER='127.0.0.1:9090'
|
||||
export EXTERNAL_CONTROLLER='0.0.0.0:9090'
|
||||
|
||||
# -------------------------
|
||||
# 3) 代理端口与监听（常用）
|
||||
|
||||
42
README.md
42
README.md
@ -1,5 +1,3 @@
|
||||
[TOC]
|
||||
|
||||
# 关于本项目
|
||||
|
||||
**clash-for-linux** 是一个面向 Linux 服务器/桌面环境的 **Clash 自动化运行与管理脚本集**。
|
||||
@ -11,11 +9,10 @@
|
||||
</p>
|
||||
|
||||
本项目主要解决以下问题：
|
||||
|
||||
- ❌ 官方 Clash 二进制下载、架构区分、配置部署繁琐
|
||||
- ❌ 手动管理 Clash 进程、端口、环境变量不稳定
|
||||
- ❌ systemd 服务、权限、安全配置缺乏统一方案
|
||||
- ❌ 多订阅 / 配置混乱，升级和回滚成本高
|
||||
- ✕ 官方 Clash 二进制下载、架构区分、配置部署繁琐
|
||||
- ✕ 手动管理 Clash 进程、端口、环境变量不稳定
|
||||
- ✕ systemd 服务、权限、安全配置缺乏统一方案
|
||||
- ✕ 多订阅 / 配置混乱，升级和回滚成本高
|
||||
|
||||
### 核心特性
|
||||
|
||||
@ -28,7 +25,7 @@
|
||||
- 自动生成或自定义 Secret
|
||||
- 默认开启 TLS 校验
|
||||
- 🧪 **端口自动检测与分配**，避免冲突
|
||||
- 🔄 **多订阅管理（clashctl）**，支持订阅切换、更新、日志查看
|
||||
- 🔄 **多订阅管理（clashctl）**，支持自动订阅切换（Vmess / V2Ray、Shadowsocks (SS)、ShadowsocksR (SSR)、Trojan、VLESS、Hysteria / Hysteria2、TUIC、HTTP / SOCKS5）
|
||||
- 🧠 **Mixin 机制**，可按需追加/覆盖 Clash 配置
|
||||
- 🌐 **Tun 模式支持**（需 Clash Meta / Premium）
|
||||
|
||||
@ -46,13 +43,6 @@
|
||||
- ❌ 不适合只想“点点 UI 就用”的纯桌面用户
|
||||
- ❌ 不包含任何节点、机场或订阅推荐
|
||||
|
||||
### 更新状态
|
||||
|
||||
📅 **持续维护中**
|
||||
最近更新：**2026-01-15**
|
||||
|
||||
|
||||
|
||||
# 安装
|
||||
|
||||
> **推荐路径优先，一键安装即可满足 90% 使用场景。**
|
||||
@ -127,6 +117,26 @@ http://127.0.0.1:9090/ui
|
||||
|
||||
> 不建议直接将管理端口暴露到公网。
|
||||
|
||||
如果想要**公网访问**
|
||||
编辑 `.env` 文件，设置公网访问（对外端口不用改，改了机器人也能扫到，密钥设置的长点就行）：
|
||||
|
||||
```
|
||||
sudo bash -c 'echo "EXTERNAL_CONTROLLER=0.0.0.0:9090" > /opt/clash-for-linux/.env'
|
||||
```
|
||||
|
||||
配置完成后，**重启服务使配置生效**：
|
||||
|
||||
```
|
||||
sudo systemctl restart clash-for-linux.service
|
||||
```
|
||||
|
||||
密钥留空时：脚本可自动生成随机值
|
||||
获取密钥命令：
|
||||
```
|
||||
sudo sed -nE 's/^[[:space:]]*secret:[[:space:]]*//p' "/opt/clash-for-linux/conf/config.yaml" | head -n 1
|
||||
```
|
||||
|
||||
|
||||
------
|
||||
|
||||
## ▶️ 开启 / 关闭系统代理
|
||||
@ -349,4 +359,4 @@ sudo chmod +x /etc/rc.local
|
||||
3. 程序日志中出现`error: unsupported rule type RULE-SET`报错，解决方法查看官方[WIKI](https://github.com/Dreamacro/clash/wiki/FAQ#error-unsupported-rule-type-rule-set)
|
||||
## ⭐ Star History
|
||||
|
||||
[](https://star-history.com/#wnlen/clash-for-linux&Date)
|
||||
[](https://star-history.com/#wnlen/clash-for-linux&Date)
|
||||
|
||||
9
clashctl
9
clashctl
@ -35,7 +35,9 @@ PID_FILE="$CLASH_HOME/temp/clash.pid"
|
||||
SUBSCRIPTION_FILE="$CLASH_HOME/conf/subscriptions.list"
|
||||
|
||||
use_systemd() {
|
||||
command -v systemctl >/dev/null 2>&1
|
||||
command -v systemctl >/dev/null 2>&1 || return 1
|
||||
systemctl show --property=Version --value >/dev/null 2>&1 || return 1
|
||||
return 0
|
||||
}
|
||||
|
||||
action_with_systemd() {
|
||||
@ -78,10 +80,11 @@ set_env_var() {
|
||||
echo "[ERROR] 未找到 .env 文件: $ENV_FILE" >&2
|
||||
exit 1
|
||||
fi
|
||||
local escaped
|
||||
local escaped escaped_sed
|
||||
escaped=$(printf "%s" "$value" | sed "s/'/'\"'\"'/g")
|
||||
escaped_sed=$(printf "%s" "$escaped" | sed 's/[\\&@]/\\&/g')
|
||||
if grep -q "^export ${key}=" "$ENV_FILE"; then
|
||||
sed -i "s@^export ${key}=.*@export ${key}='${escaped}'@" "$ENV_FILE"
|
||||
sed -i "s@^export ${key}=.*@export ${key}='${escaped_sed}'@" "$ENV_FILE"
|
||||
else
|
||||
echo "export ${key}='${escaped}'" >> "$ENV_FILE"
|
||||
fi
|
||||
|
||||
Binary file not shown.
|
Before Width: | Height: | Size: 89 KiB After Width: | Height: | Size: 146 KiB |
58
install.sh
58
install.sh
@ -5,7 +5,7 @@ set -euo pipefail
|
||||
# 基础参数
|
||||
# =========================
|
||||
Server_Dir=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
|
||||
Install_Dir="${CLASH_INSTALL_DIR:-/opt/clash-for-linux}"
|
||||
Install_Dir="${CLASH_INSTALL_DIR:-$Server_Dir}"
|
||||
Service_Name="clash-for-linux"
|
||||
Service_User="root"
|
||||
Service_Group="root"
|
||||
@ -136,7 +136,6 @@ if [[ -z "${CpuArch:-}" ]]; then
|
||||
err "无法识别 CPU 架构"
|
||||
exit 1
|
||||
fi
|
||||
info "CPU architecture: ${CpuArch}"
|
||||
|
||||
# =========================
|
||||
# .env 写入工具：write_env_kv（必须在 prompt 之前定义）
|
||||
@ -361,10 +360,10 @@ if command -v systemctl >/dev/null 2>&1; then
|
||||
CLASH_SERVICE_USER="$Service_User" CLASH_SERVICE_GROUP="$Service_Group" "$Install_Dir/scripts/install_systemd.sh"
|
||||
|
||||
if [ "${CLASH_ENABLE_SERVICE:-true}" = "true" ]; then
|
||||
systemctl enable "${Service_Name}.service" >/dev/null 2>&1 || true
|
||||
systemctl start "${Service_Name}.service" || true
|
||||
fi
|
||||
if [ "${CLASH_START_SERVICE:-true}" = "true" ]; then
|
||||
systemctl start "${Service_Name}.service" >/dev/null 2>&1 || true
|
||||
systemctl start "${Service_Name}.service" || true
|
||||
fi
|
||||
|
||||
if systemctl is-enabled --quiet "${Service_Name}.service" 2>/dev/null; then
|
||||
@ -474,28 +473,65 @@ section "控制面板"
|
||||
api_port="$(parse_port "${EXTERNAL_CONTROLLER}")"
|
||||
api_host="${EXTERNAL_CONTROLLER%:*}"
|
||||
|
||||
get_public_ip() {
|
||||
if command -v curl >/dev/null 2>&1; then
|
||||
curl -4 -fsS --max-time 3 https://api.ipify.org 2>/dev/null \
|
||||
|| curl -4 -fsS --max-time 3 https://ifconfig.me 2>/dev/null \
|
||||
|| curl -4 -fsS --max-time 3 https://ipv4.icanhazip.com 2>/dev/null \
|
||||
|| true
|
||||
elif command -v wget >/dev/null 2>&1; then
|
||||
wget -qO- --timeout=3 https://api.ipify.org 2>/dev/null \
|
||||
|| wget -qO- --timeout=3 https://ifconfig.me 2>/dev/null \
|
||||
|| wget -qO- --timeout=3 https://ipv4.icanhazip.com 2>/dev/null \
|
||||
|| true
|
||||
else
|
||||
true
|
||||
fi
|
||||
}
|
||||
|
||||
if [[ -z "$api_host" ]] || [[ "$api_host" == "$EXTERNAL_CONTROLLER" ]]; then
|
||||
api_host="127.0.0.1"
|
||||
fi
|
||||
|
||||
if [[ "$api_host" == "0.0.0.0" ]] || [[ "$api_host" == "::" ]] || [[ "$api_host" == "localhost" ]]; then
|
||||
api_host="$(get_public_ip | tr -d '\r\n')"
|
||||
[[ -z "$api_host" ]] && api_host="$(hostname -I 2>/dev/null | awk '{print $1}')"
|
||||
[[ -z "$api_host" ]] && api_host="127.0.0.1"
|
||||
fi
|
||||
|
||||
CONF_DIR="$Install_Dir/conf"
|
||||
CONF_FILE="$CONF_DIR/config.yaml"
|
||||
TEMP_DIR="$Install_Dir/temp"
|
||||
|
||||
SECRET_VAL=""
|
||||
if wait_secret_ready "$CONF_FILE" 6; then
|
||||
SECRET_VAL="$(read_secret_from_config "$CONF_FILE" || true)"
|
||||
fi
|
||||
SECRET_FILE=""
|
||||
|
||||
for _ in {1..15}; do
|
||||
for f in \
|
||||
"$TEMP_DIR/config.yaml" \
|
||||
"$CONF_DIR/config.yaml"
|
||||
do
|
||||
SECRET_VAL="$(read_secret_from_config "$f" 2>/dev/null || true)"
|
||||
if [[ -n "$SECRET_VAL" ]]; then
|
||||
SECRET_FILE="$f"
|
||||
break 2
|
||||
fi
|
||||
done
|
||||
sleep 0.2
|
||||
done
|
||||
|
||||
dash="http://${api_host}:${api_port}/ui"
|
||||
log "🌐 Dashboard：$(url "$dash")"
|
||||
|
||||
SHOW_FILE="${SECRET_FILE:-$CONF_DIR/config.yaml}"
|
||||
|
||||
if [[ -n "$SECRET_VAL" ]]; then
|
||||
MASKED="${SECRET_VAL:0:4}****${SECRET_VAL: -4}"
|
||||
MASKED="${SECRET_VAL}"
|
||||
log "🔐 Secret：${C_YELLOW}${MASKED}${C_NC}"
|
||||
log " 查看完整 Secret：$(cmd "sudo sed -nE 's/^[[:space:]]*secret:[[:space:]]*//p' \"$CONF_FILE\" | head -n 1")"
|
||||
# log " 查看完整 Secret：$(cmd "sudo sed -nE 's/^[[:space:]]*secret:[[:space:]]*//p' \"$SHOW_FILE\" | head -n 1")"
|
||||
else
|
||||
log "🔐 Secret：${C_YELLOW}启动中暂未读到（稍后再试）${C_NC}"
|
||||
log " 稍后查看：$(cmd "sudo sed -nE 's/^[[:space:]]*secret:[[:space:]]*//p' \"$CONF_FILE\" | head -n 1")"
|
||||
log " 稍后查看：$(cmd "sudo sed -nE 's/^[[:space:]]*secret:[[:space:]]*//p' \"$CONF_DIR/config.yaml\" | head -n 1")"
|
||||
log " 也可检查运行态：$(cmd "sudo sed -nE 's/^[[:space:]]*secret:[[:space:]]*//p' \"$TEMP_DIR/config.yaml\" | head -n 1")"
|
||||
fi
|
||||
|
||||
# =========================
|
||||
|
||||
@ -47,4 +47,5 @@ else
|
||||
exitWithError "Unsupported Linux distribution"
|
||||
fi
|
||||
|
||||
echo "CPU architecture: $CpuArch"
|
||||
log_info() { echo "[INFO] $*"; }
|
||||
log_info "CPU architecture: $CpuArch"
|
||||
@ -10,47 +10,64 @@ Service_User="root"
|
||||
Service_Group="root"
|
||||
|
||||
Unit_Path="/etc/systemd/system/${Service_Name}.service"
|
||||
PID_FILE="$Server_Dir/temp/clash.pid"
|
||||
Env_File="$Server_Dir/temp/clash-for-linux.sh"
|
||||
|
||||
#################### 权限检查 ####################
|
||||
|
||||
if [ "$(id -u)" -ne 0 ]; then
|
||||
echo -e "\033[31m[ERROR] 需要 root 权限来安装 systemd 单元\033[0m"
|
||||
echo -e "[31m[ERROR] 需要 root 权限来安装 systemd 单元[0m"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
#################### 目录初始化 ####################
|
||||
|
||||
install -d -m 0755 \
|
||||
"$Server_Dir/conf" \
|
||||
"$Server_Dir/logs" \
|
||||
"$Server_Dir/temp"
|
||||
install -d -m 0755 "$Server_Dir/conf" "$Server_Dir/logs" "$Server_Dir/temp"
|
||||
|
||||
# 预创建 env 文件，避免 systemd 因路径不存在报错
|
||||
: > "$Env_File"
|
||||
chmod 0644 "$Env_File"
|
||||
|
||||
#################### 生成 systemd Unit ####################
|
||||
|
||||
cat >"$Unit_Path"<<EOF
|
||||
cat >"$Unit_Path" <<EOF
|
||||
[Unit]
|
||||
Description=Clash for Linux
|
||||
After=network-online.target
|
||||
Description=Clash for Linux (Mihomo)
|
||||
Documentation=https://github.com/wnlen/clash-for-linux
|
||||
After=network-online.target nss-lookup.target
|
||||
Wants=network-online.target
|
||||
StartLimitIntervalSec=0
|
||||
StartLimitBurst=10
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=$Service_User
|
||||
Group=$Service_Group
|
||||
WorkingDirectory=$Server_Dir
|
||||
|
||||
# 启动 / 停止
|
||||
# 启动环境
|
||||
Environment=SYSTEMD_MODE=true
|
||||
Environment=CLASH_ENV_FILE=$Env_File
|
||||
Environment=HOME=/root
|
||||
|
||||
# 主进程必须由 start.sh 最后一跳 exec 成 mihomo/clash
|
||||
ExecStart=/bin/bash $Server_Dir/start.sh
|
||||
ExecStop=/bin/bash $Server_Dir/shutdown.sh
|
||||
ExecReload=/bin/kill -HUP \$MAINPID
|
||||
|
||||
# 失败策略
|
||||
Restart=on-failure
|
||||
RestartSec=5
|
||||
# 常驻策略：即使上层脚本正常退出，也要由 systemd 拉回
|
||||
Restart=always
|
||||
RestartSec=5s
|
||||
|
||||
# 停止与日志
|
||||
KillMode=mixed
|
||||
TimeoutStartSec=120
|
||||
TimeoutStopSec=30
|
||||
StandardOutput=journal
|
||||
StandardError=journal
|
||||
|
||||
# 环境变量
|
||||
Environment=SYSTEMD_MODE=true
|
||||
Environment=CLASH_ENV_FILE=$Server_Dir/temp/clash-for-linux.sh
|
||||
# 安全与文件权限
|
||||
UMask=0022
|
||||
NoNewPrivileges=false
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@ -59,7 +76,10 @@ EOF
|
||||
#################### 刷新 systemd ####################
|
||||
|
||||
systemctl daemon-reload
|
||||
systemctl enable "$Service_Name".service >/dev/null 2>&1 || true
|
||||
|
||||
echo -e "\033[32m[OK] 已生成 systemd 单元: ${Unit_Path}\033[0m"
|
||||
echo -e "可执行以下命令启动服务："
|
||||
echo -e " sudo systemctl enable --now ${Service_Name}.service"
|
||||
echo -e "[32m[OK] 已生成 systemd 单元: ${Unit_Path}[0m"
|
||||
echo -e "已启用开机自启，可执行以下命令启动服务："
|
||||
echo -e " systemctl restart ${Service_Name}.service"
|
||||
echo -e "查看状态："
|
||||
echo -e " systemctl status ${Service_Name}.service -l --no-pager"
|
||||
|
||||
@ -36,7 +36,8 @@ download_clash_bin() {
|
||||
return 1
|
||||
fi
|
||||
|
||||
download_url="${CLASH_DOWNLOAD_URL_TEMPLATE:-https://github.com/Dreamacro/clash/releases/latest/download/clash-{arch}.gz}"
|
||||
local _default_url="https://github.com/Dreamacro/clash/releases/latest/download/clash-{arch}.gz"
|
||||
download_url="${CLASH_DOWNLOAD_URL_TEMPLATE:-$_default_url}"
|
||||
if [ -z "$download_url" ]; then
|
||||
echo -e "\033[33m[WARN] 未设置 CLASH_DOWNLOAD_URL_TEMPLATE，跳过 Clash 内核自动下载\033[0m"
|
||||
return 1
|
||||
|
||||
147
start.sh
147
start.sh
@ -1,6 +1,6 @@
|
||||
#!/usr/bin/env bash
|
||||
# 严格模式
|
||||
set -eo pipefail
|
||||
set -euo pipefail
|
||||
|
||||
# --- DEBUG: 打印具体失败的行号和命令（systemd 下非常关键） ---
|
||||
trap 'rc=$?; echo "[ERR] rc=$rc line=$LINENO cmd=$BASH_COMMAND" >&2' ERR
|
||||
@ -88,13 +88,41 @@ URL="${CLASH_URL:-}"
|
||||
|
||||
# 清理可能的 CRLF（Windows 写 .env 很常见）
|
||||
URL="$(printf '%s' "$URL" | tr -d '\r')"
|
||||
URL="$(printf '%s' "$URL" | sed -E 's/^[[:space:]]+//; s/[[:space:]]+$//')"
|
||||
|
||||
# 允许手动启动时交互填写；直接回车则切到本地兜底配置
|
||||
MANUAL_EMPTY_URL_FALLBACK=false
|
||||
if [ -z "$URL" ] && [ "${SYSTEMD_MODE:-false}" != "true" ]; then
|
||||
if [ -t 0 ]; then
|
||||
echo
|
||||
echo "[WARN] 未检测到订阅地址（CLASH_URL 为空）"
|
||||
echo "请粘贴你的 Clash 订阅地址（直接回车将使用本地兜底配置启动）："
|
||||
read -r -p "Clash URL: " input_url
|
||||
input_url="$(printf '%s' "$input_url" | tr -d '\r')"
|
||||
input_url="$(printf '%s' "$input_url" | sed -E 's/^[[:space:]]+//; s/[[:space:]]+$//')"
|
||||
|
||||
if [ -n "$input_url" ]; then
|
||||
if ! printf '%s' "$input_url" | grep -Eq '^https?://'; then
|
||||
echo "[ERR] CLASH_URL 格式无效：必须以 http:// 或 https:// 开头" >&2
|
||||
exit 2
|
||||
fi
|
||||
URL="$input_url"
|
||||
export CLASH_URL="$URL"
|
||||
else
|
||||
echo "[WARN] 未填写订阅地址，切换为本地兜底配置启动"
|
||||
MANUAL_EMPTY_URL_FALLBACK=true
|
||||
fi
|
||||
else
|
||||
echo "[ERR] CLASH_URL 为空（未配置订阅地址）" >&2
|
||||
exit 2
|
||||
fi
|
||||
fi
|
||||
|
||||
#让 bash 子进程能拿到
|
||||
export CLASH_URL="$URL"
|
||||
|
||||
# 只有在“需要在线更新订阅”的模式下才强制要求 URL
|
||||
if [ -z "$URL" ] && [ "${SYSTEMD_MODE:-false}" != "true" ]; then
|
||||
echo "[ERR] CLASH_URL 为空（未配置订阅地址）"
|
||||
if [ -n "$URL" ] && ! printf '%s' "$URL" | grep -Eq '^https?://'; then
|
||||
echo "[ERR] CLASH_URL 格式无效：必须以 http:// 或 https:// 开头" >&2
|
||||
exit 2
|
||||
fi
|
||||
|
||||
@ -114,10 +142,10 @@ fi
|
||||
# 兜底生成随机 secret
|
||||
if [ -z "$Secret" ]; then
|
||||
if command -v openssl >/dev/null 2>&1; then
|
||||
Secret="$(openssl rand -hex 32)"
|
||||
Secret="$(openssl rand -hex 16)"
|
||||
else
|
||||
# 32 bytes -> 64 hex chars
|
||||
Secret="$(head -c 32 /dev/urandom | od -An -tx1 | tr -d ' \n')"
|
||||
Secret="$(head -c 16 /dev/urandom | od -An -tx1 | tr -d ' \n')"
|
||||
fi
|
||||
fi
|
||||
|
||||
@ -174,7 +202,7 @@ ensure_ui_links() {
|
||||
|
||||
force_write_controller_and_ui() {
|
||||
local file="$1"
|
||||
local controller="${EXTERNAL_CONTROLLER:-127.0.0.1:9090}"
|
||||
local controller="${EXTERNAL_CONTROLLER:-0.0.0.0:9090}"
|
||||
|
||||
[ -n "$file" ] || return 1
|
||||
|
||||
@ -244,11 +272,11 @@ fix_external_ui_by_safe_paths() {
|
||||
CLASH_HTTP_PORT="${CLASH_HTTP_PORT:-7890}"
|
||||
CLASH_SOCKS_PORT="${CLASH_SOCKS_PORT:-7891}"
|
||||
CLASH_REDIR_PORT="${CLASH_REDIR_PORT:-7892}"
|
||||
CLASH_LISTEN_IP="${CLASH_LISTEN_IP:-127.0.0.1}"
|
||||
CLASH_LISTEN_IP="${CLASH_LISTEN_IP:-0.0.0.0}"
|
||||
CLASH_ALLOW_LAN="${CLASH_ALLOW_LAN:-false}"
|
||||
|
||||
EXTERNAL_CONTROLLER_ENABLED="${EXTERNAL_CONTROLLER_ENABLED:-true}"
|
||||
EXTERNAL_CONTROLLER="${EXTERNAL_CONTROLLER:-127.0.0.1:9090}"
|
||||
EXTERNAL_CONTROLLER="${EXTERNAL_CONTROLLER:-0.0.0.0:9090}"
|
||||
|
||||
ALLOW_INSECURE_TLS="${ALLOW_INSECURE_TLS:-false}"
|
||||
|
||||
@ -347,6 +375,10 @@ ensure_subconverter() {
|
||||
local bin="${Server_Dir}/tools/subconverter/subconverter"
|
||||
local port="25500"
|
||||
|
||||
# 自动获取服务器IP
|
||||
local host_ip
|
||||
host_ip="$(hostname -I | awk '{print $1}')"
|
||||
|
||||
# 没有二进制直接跳过
|
||||
if [ ! -x "$bin" ]; then
|
||||
echo "[WARN] subconverter bin not found: $bin"
|
||||
@ -356,20 +388,20 @@ ensure_subconverter() {
|
||||
|
||||
# 已在监听则认为就绪
|
||||
if ss -lntp 2>/dev/null | grep -qE ":${port}[[:space:]]"; then
|
||||
export SUBCONVERTER_URL="${SUBCONVERTER_URL:-http://127.0.0.1:${port}}"
|
||||
export SUBCONVERTER_URL="${SUBCONVERTER_URL:-http://${host_ip}:${port}}"
|
||||
export SUBCONVERTER_READY="true"
|
||||
return 0
|
||||
fi
|
||||
|
||||
# 启动（后台）
|
||||
# 启动（监听所有IP）
|
||||
echo "[INFO] starting subconverter..."
|
||||
(cd "${Server_Dir}/tools/subconverter" && nohup "./subconverter" >/dev/null 2>&1 &)
|
||||
(cd "${Server_Dir}/tools/subconverter" && nohup "./subconverter" -listen 0.0.0.0:${port} >/dev/null 2>&1 &)
|
||||
|
||||
# 等待端口起来
|
||||
for _ in 1 2 3 4 5; do
|
||||
sleep 1
|
||||
if ss -lntp 2>/dev/null | grep -qE ":${port}[[:space:]]"; then
|
||||
export SUBCONVERTER_URL="${SUBCONVERTER_URL:-http://127.0.0.1:${port}}"
|
||||
export SUBCONVERTER_URL="${SUBCONVERTER_URL:-http://${host_ip}:${port}}"
|
||||
export SUBCONVERTER_READY="true"
|
||||
echo "[OK] subconverter ready at ${SUBCONVERTER_URL}"
|
||||
return 0
|
||||
@ -431,15 +463,21 @@ ensure_fallback_config() {
|
||||
}
|
||||
SKIP_CONFIG_REBUILD=false
|
||||
|
||||
# systemd 模式下若 URL 为空：直接兜底启动
|
||||
if [ "${SYSTEMD_MODE}" = "true" ] && [ -z "${URL:-}" ]; then
|
||||
echo -e "\033[33m[WARN]\033[0m SYSTEMD_MODE=true 且 CLASH_URL 为空，跳过订阅更新，使用本地兜底配置启动"
|
||||
# systemd 模式下 URL 为空，或手动模式下用户回车跳过：直接兜底启动
|
||||
if { [ "${SYSTEMD_MODE}" = "true" ] && [ -z "${URL:-}" ]; } || [ "${MANUAL_EMPTY_URL_FALLBACK:-false}" = "true" ]; then
|
||||
if [ "${SYSTEMD_MODE}" = "true" ]; then
|
||||
echo -e "\033[33m[WARN]\033[0m SYSTEMD_MODE=true 且 CLASH_URL 为空，跳过订阅更新，使用本地兜底配置启动"
|
||||
else
|
||||
echo -e "\033[33m[WARN]\033[0m 手动模式未填写订阅地址，跳过订阅更新，使用本地兜底配置启动"
|
||||
fi
|
||||
ensure_fallback_config || true
|
||||
SKIP_CONFIG_REBUILD=true
|
||||
fi
|
||||
|
||||
CLASH_AUTO_UPDATE="${CLASH_AUTO_UPDATE:-true}"
|
||||
|
||||
#################### Clash 订阅地址检测及配置文件下载 ####################
|
||||
if [ "$SKIP_CONFIG_REBUILD" != "true" ]; then
|
||||
if [ "$SKIP_CONFIG_REBUILD" != "true" ] && [ "$CLASH_AUTO_UPDATE" = "true" ]; then
|
||||
echo -e '\n正在检测订阅地址...'
|
||||
Text1="Clash订阅地址可访问！"
|
||||
Text2="Clash订阅地址不可访问！"
|
||||
@ -484,7 +522,7 @@ if [ "$SKIP_CONFIG_REBUILD" != "true" ]; then
|
||||
fi
|
||||
|
||||
#################### 下载订阅并生成 config.yaml（非兜底路径） ####################
|
||||
if [ "$SKIP_CONFIG_REBUILD" != "true" ]; then
|
||||
if [ "$SKIP_CONFIG_REBUILD" != "true" ] && [ "$CLASH_AUTO_UPDATE" = "true" ]; then
|
||||
ensure_subconverter || true
|
||||
echo -e '\n正在下载Clash配置文件...'
|
||||
Text3="配置文件clash.yaml下载成功！"
|
||||
@ -638,11 +676,30 @@ if [ "$SKIP_CONFIG_REBUILD" != "true" ]; then
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ "$SKIP_CONFIG_REBUILD" != "true" ] && [ "$CLASH_AUTO_UPDATE" != "true" ]; then
|
||||
echo -e "\033[33m[WARN]\033[0m 已关闭自动更新订阅，优先使用本地已有配置启动"
|
||||
|
||||
# 1) 优先使用已有 conf/config.yaml；没有才 fallback
|
||||
if [ ! -s "$Conf_Dir/config.yaml" ]; then
|
||||
ensure_fallback_config || true
|
||||
fi
|
||||
|
||||
# 2) 补齐运行必须字段
|
||||
force_write_controller_and_ui "$Conf_Dir/config.yaml" || true
|
||||
force_write_secret "$Conf_Dir/config.yaml" || true
|
||||
|
||||
# 3) 明确指定运行配置
|
||||
CONFIG_FILE="$Conf_Dir/config.yaml"
|
||||
|
||||
# 4) 跳过后续“下载 / 转换 / 拼接”流程
|
||||
SKIP_CONFIG_REBUILD=true
|
||||
fi
|
||||
|
||||
# =========================================================
|
||||
# 判断订阅是否已是完整 Clash YAML（Meta / Mihomo / Premium）
|
||||
# 若是完整配置，则直接使用，跳过后续代理拆解与拼接
|
||||
# =========================================================
|
||||
if grep -qE '^(proxies:|proxy-providers:|mixed-port:|port:)' "$Temp_Dir/clash.yaml"; then
|
||||
if [ -s "$Temp_Dir/clash.yaml" ] && grep -qE '^(proxies:|proxy-providers:|mixed-port:|port:)' "$Temp_Dir/clash.yaml"; then
|
||||
echo "[INFO] subscription is a full Clash config, use it directly"
|
||||
cp -f "$Temp_Dir/clash.yaml" "$Conf_Dir/config.yaml"
|
||||
|
||||
@ -667,8 +724,8 @@ if grep -qE '^(proxies:|proxy-providers:|mixed-port:|port:)' "$Temp_Dir/clash.ya
|
||||
ln -sfn "$Dashboard_Src" "$Conf_Dir/ui" 2>/dev/null || true
|
||||
fi
|
||||
|
||||
SKIP_CONFIG_REBUILD=true
|
||||
fi
|
||||
SKIP_CONFIG_REBUILD=true
|
||||
fi
|
||||
|
||||
#################### 订阅转换/拼接（非兜底路径） ####################
|
||||
if [ "$SKIP_CONFIG_REBUILD" != "true" ]; then
|
||||
@ -822,12 +879,33 @@ Clash_Bin="$(resolve_clash_bin "$Server_Dir" "$CpuArch")"
|
||||
ReturnStatus=$?
|
||||
|
||||
if [ "$ReturnStatus" -eq 0 ]; then
|
||||
echo ''
|
||||
if [ "$EXTERNAL_CONTROLLER_ENABLED" = "true" ]; then
|
||||
SERVER_IP="$(hostname -I | awk '{print $1}')"
|
||||
API_PORT="${EXTERNAL_CONTROLLER##*:}"
|
||||
|
||||
echo -e "Clash Dashboard 访问地址: http://${SERVER_IP}:${API_PORT}/ui"
|
||||
|
||||
SHOW_SECRET="${CLASH_SHOW_SECRET:-false}"
|
||||
SHOW_SECRET_MASKED="${CLASH_SHOW_SECRET_MASKED:-true}"
|
||||
|
||||
if [ "$SHOW_SECRET" = "true" ]; then
|
||||
echo -e "Secret: ${Secret}"
|
||||
elif [ "$SHOW_SECRET_MASKED" = "true" ]; then
|
||||
masked="${Secret:0:4}****${Secret: -4}"
|
||||
echo -e "Secret: ${masked} (set CLASH_SHOW_SECRET=true to show full)"
|
||||
else
|
||||
echo -e "Secret: 已生成（未显示）。查看：${CONFIG_FILE} 或 .env"
|
||||
fi
|
||||
else
|
||||
echo -e "External Controller (Dashboard) 已禁用"
|
||||
fi
|
||||
echo ''
|
||||
|
||||
if [ "${SYSTEMD_MODE:-false}" = "true" ]; then
|
||||
echo "[INFO] SYSTEMD_MODE=true，前台启动交给 systemd 监管"
|
||||
echo "[INFO] Using config: $CONFIG_FILE"
|
||||
echo "[INFO] Using runtime dir: $RUNTIME_DIR"
|
||||
|
||||
# systemd 前台：只用 -f 指定配置文件，-d 作为工作目录
|
||||
exec "$Clash_Bin" -f "$CONFIG_FILE" -d "$RUNTIME_DIR"
|
||||
else
|
||||
echo "[INFO] 后台启动 (nohup)"
|
||||
@ -850,29 +928,6 @@ else
|
||||
if_success "$Text5" "$Text6" "$ReturnStatus"
|
||||
fi
|
||||
|
||||
#################### 输出信息 ####################
|
||||
|
||||
echo ''
|
||||
if [ "$EXTERNAL_CONTROLLER_ENABLED" = "true" ]; then
|
||||
echo -e "Clash Dashboard 访问地址: http://${EXTERNAL_CONTROLLER}/ui"
|
||||
|
||||
SHOW_SECRET="${CLASH_SHOW_SECRET:-false}"
|
||||
SHOW_SECRET_MASKED="${CLASH_SHOW_SECRET_MASKED:-true}"
|
||||
|
||||
if [ "$SHOW_SECRET" = "true" ]; then
|
||||
echo -e "Secret: ${Secret}"
|
||||
elif [ "$SHOW_SECRET_MASKED" = "true" ]; then
|
||||
# 脱敏：前4后4
|
||||
masked="${Secret:0:4}****${Secret: -4}"
|
||||
echo -e "Secret: ${masked} (set CLASH_SHOW_SECRET=true to show full)"
|
||||
else
|
||||
echo -e "Secret: 已生成（未显示）。查看：/opt/clash-for-linux/conf/config.yaml 或 .env"
|
||||
fi
|
||||
else
|
||||
echo -e "External Controller (Dashboard) 已禁用"
|
||||
fi
|
||||
echo ''
|
||||
|
||||
#################### 写入代理环境变量文件 ####################
|
||||
|
||||
Env_File="${CLASH_ENV_FILE:-}"
|
||||
|
||||
204
uninstall.sh
204
uninstall.sh
@ -1,142 +1,152 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
# =========================
|
||||
# 参数（对标 install.sh + install_systemd.sh）
|
||||
# =========================
|
||||
Install_Dir="${CLASH_INSTALL_DIR:-/opt/clash-for-linux}"
|
||||
Service_Name="clash-for-linux"
|
||||
Service_User="root"
|
||||
Service_Group="root"
|
||||
Unit_Path="/etc/systemd/system/${Service_Name}.service"
|
||||
# More accurate uninstall for clash-for-linux
|
||||
SERVICE_NAME="clash-for-linux"
|
||||
UNIT_PATH="/etc/systemd/system/${SERVICE_NAME}.service"
|
||||
|
||||
# =========================
|
||||
# 彩色输出
|
||||
# =========================
|
||||
RED='\033[31m'
|
||||
GREEN='\033[32m'
|
||||
YELLOW='\033[33m'
|
||||
NC='\033[0m'
|
||||
|
||||
info() { echo -e "${GREEN}[INFO]${NC} $*"; }
|
||||
ok() { echo -e "${GREEN}[OK]${NC} $*"; }
|
||||
warn() { echo -e "${YELLOW}[WARN]${NC} $*"; }
|
||||
err() { echo -e "${RED}[ERROR]${NC} $*"; }
|
||||
|
||||
# =========================
|
||||
# 前置校验
|
||||
# =========================
|
||||
if [ "$(id -u)" -ne 0 ]; then
|
||||
err "需要 root 权限执行卸载脚本（请使用 sudo bash uninstall.sh）"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
info "开始卸载 ${Service_Name} ..."
|
||||
info "Install_Dir=${Install_Dir}"
|
||||
# Candidate install dirs:
|
||||
# 1) explicit CLASH_INSTALL_DIR
|
||||
# 2) working directory if it looks like clash-for-linux
|
||||
# 3) service WorkingDirectory / ExecStart path inferred from unit
|
||||
# 4) common defaults
|
||||
candidates=()
|
||||
[ -n "${CLASH_INSTALL_DIR:-}" ] && candidates+=("${CLASH_INSTALL_DIR}")
|
||||
PWD_BASENAME="$(basename "${PWD}")"
|
||||
if [ "$PWD_BASENAME" = "clash-for-linux" ] && [ -f "${PWD}/start.sh" ]; then
|
||||
candidates+=("${PWD}")
|
||||
fi
|
||||
|
||||
# =========================
|
||||
# 1) 优雅停止（优先 shutdown.sh，再 systemd）
|
||||
# =========================
|
||||
if [ -f "${Install_Dir}/shutdown.sh" ]; then
|
||||
if [ -f "$UNIT_PATH" ]; then
|
||||
wd="$(sed -nE 's#^WorkingDirectory=(.*)#\1#p' "$UNIT_PATH" | head -n1 || true)"
|
||||
[ -n "$wd" ] && candidates+=("$wd")
|
||||
|
||||
exec_path="$(sed -nE 's#^ExecStart=/bin/bash[[:space:]]+([^[:space:]]+/start\.sh).*#\1#p' "$UNIT_PATH" | head -n1 || true)"
|
||||
if [ -n "$exec_path" ]; then
|
||||
candidates+=("$(dirname "$exec_path")")
|
||||
fi
|
||||
fi
|
||||
|
||||
candidates+=("/root/clash-for-linux" "/opt/clash-for-linux")
|
||||
|
||||
# normalize + uniq + choose first existing dir containing start.sh or shutdown.sh
|
||||
INSTALL_DIR=""
|
||||
declare -A seen
|
||||
for d in "${candidates[@]}"; do
|
||||
[ -n "$d" ] || continue
|
||||
d="${d%/}"
|
||||
[ -n "$d" ] || continue
|
||||
if [ -z "${seen[$d]:-}" ]; then
|
||||
seen[$d]=1
|
||||
if [ -d "$d" ] && { [ -f "$d/start.sh" ] || [ -f "$d/shutdown.sh" ] || [ -d "$d/conf" ]; }; then
|
||||
INSTALL_DIR="$d"
|
||||
break
|
||||
fi
|
||||
fi
|
||||
done
|
||||
|
||||
if [ -z "$INSTALL_DIR" ]; then
|
||||
warn "未能自动识别安装目录，将按候选路径继续清理 systemd / 环境文件。"
|
||||
else
|
||||
info "识别到安装目录: $INSTALL_DIR"
|
||||
fi
|
||||
|
||||
info "开始卸载 ${SERVICE_NAME} ..."
|
||||
|
||||
# 1) graceful stop
|
||||
if [ -n "$INSTALL_DIR" ] && [ -f "${INSTALL_DIR}/shutdown.sh" ]; then
|
||||
info "执行 shutdown.sh（优雅停止）..."
|
||||
bash "${Install_Dir}/shutdown.sh" >/dev/null 2>&1 || true
|
||||
bash "${INSTALL_DIR}/shutdown.sh" >/dev/null 2>&1 || true
|
||||
fi
|
||||
|
||||
if command -v systemctl >/dev/null 2>&1; then
|
||||
info "停止并禁用 systemd 服务..."
|
||||
systemctl stop "${Service_Name}.service" >/dev/null 2>&1 || true
|
||||
systemctl disable "${Service_Name}.service" >/dev/null 2>&1 || true
|
||||
systemctl stop "${SERVICE_NAME}.service" >/dev/null 2>&1 || true
|
||||
systemctl disable "${SERVICE_NAME}.service" >/dev/null 2>&1 || true
|
||||
fi
|
||||
|
||||
# =========================
|
||||
# 2) 兜底：按 PID 文件杀进程（对标 unit 的 PIDFile）
|
||||
# =========================
|
||||
PID_FILE="${Install_Dir}/temp/clash.pid"
|
||||
if [ -f "$PID_FILE" ]; then
|
||||
PID="$(cat "$PID_FILE" 2>/dev/null || true)"
|
||||
if [ -n "${PID:-}" ] && kill -0 "$PID" 2>/dev/null; then
|
||||
info "检测到 PID=${PID}，尝试停止..."
|
||||
kill "$PID" 2>/dev/null || true
|
||||
sleep 1
|
||||
if kill -0 "$PID" 2>/dev/null; then
|
||||
warn "进程仍在运行，强制 kill -9 ${PID}"
|
||||
kill -9 "$PID" 2>/dev/null || true
|
||||
# 2) stop process by pid file from all likely dirs
|
||||
for d in "/root/clash-for-linux" "/opt/clash-for-linux" "${INSTALL_DIR:-}"; do
|
||||
[ -n "$d" ] || continue
|
||||
PID_FILE="$d/temp/clash.pid"
|
||||
if [ -f "$PID_FILE" ]; then
|
||||
PID="$(cat "$PID_FILE" 2>/dev/null || true)"
|
||||
if [ -n "${PID:-}" ] && kill -0 "$PID" 2>/dev/null; then
|
||||
info "检测到 PID=${PID}（来自 $PID_FILE），尝试停止..."
|
||||
kill "$PID" 2>/dev/null || true
|
||||
sleep 1
|
||||
if kill -0 "$PID" 2>/dev/null; then
|
||||
warn "进程仍在运行，强制 kill -9 ${PID}"
|
||||
kill -9 "$PID" 2>/dev/null || true
|
||||
fi
|
||||
fi
|
||||
ok "已停止 clash 进程（PIDFile）"
|
||||
rm -f "$PID_FILE" || true
|
||||
fi
|
||||
fi
|
||||
done
|
||||
|
||||
# 再兜底：按进程名（系统可能有多个 clash，不建议无脑 pkill -9；先提示再杀）
|
||||
if pgrep -x clash >/dev/null 2>&1; then
|
||||
warn "检测到仍有 clash 进程存在（可能非本项目），尝试温和结束..."
|
||||
pkill -x clash >/dev/null 2>&1 || true
|
||||
sleep 1
|
||||
fi
|
||||
if pgrep -x clash >/dev/null 2>&1; then
|
||||
warn "仍残留 clash 进程，执行 pkill -9（可能影响其它 clash 实例）..."
|
||||
pkill -9 -x clash >/dev/null 2>&1 || true
|
||||
fi
|
||||
# 兜底：按完整路径匹配，避免误杀其他 clash
|
||||
pkill -f '/clash-for-linux/.*/clash' >/dev/null 2>&1 || true
|
||||
pkill -f '/clash-for-linux/.*/mihomo' >/dev/null 2>&1 || true
|
||||
sleep 1
|
||||
pkill -9 -f '/clash-for-linux/.*/clash' >/dev/null 2>&1 || true
|
||||
pkill -9 -f '/clash-for-linux/.*/mihomo' >/dev/null 2>&1 || true
|
||||
|
||||
# =========================
|
||||
# 3) 删除 systemd unit（对标 install_systemd.sh）
|
||||
# =========================
|
||||
if [ -f "$Unit_Path" ]; then
|
||||
rm -f "$Unit_Path"
|
||||
ok "已移除 systemd 单元: ${Unit_Path}"
|
||||
# 3) remove unit and related files
|
||||
if [ -f "$UNIT_PATH" ]; then
|
||||
rm -f "$UNIT_PATH"
|
||||
ok "已移除 systemd 单元: ${UNIT_PATH}"
|
||||
fi
|
||||
|
||||
# drop-in（万一用户自定义过）
|
||||
if [ -d "/etc/systemd/system/${Service_Name}.service.d" ]; then
|
||||
rm -rf "/etc/systemd/system/${Service_Name}.service.d"
|
||||
ok "已移除 drop-in: /etc/systemd/system/${Service_Name}.service.d"
|
||||
if [ -d "/etc/systemd/system/${SERVICE_NAME}.service.d" ]; then
|
||||
rm -rf "/etc/systemd/system/${SERVICE_NAME}.service.d"
|
||||
ok "已移除 drop-in: /etc/systemd/system/${SERVICE_NAME}.service.d"
|
||||
fi
|
||||
|
||||
if command -v systemctl >/dev/null 2>&1; then
|
||||
systemctl daemon-reload >/dev/null 2>&1 || true
|
||||
systemctl reset-failed >/dev/null 2>&1 || true
|
||||
fi
|
||||
|
||||
# =========================
|
||||
# 4) 清理默认配置/环境脚本/命令入口
|
||||
# =========================
|
||||
if [ -f "/etc/default/${Service_Name}" ]; then
|
||||
rm -f "/etc/default/${Service_Name}"
|
||||
ok "已移除: /etc/default/${Service_Name}"
|
||||
# 4) cleanup env / command entry
|
||||
rm -f "/etc/default/${SERVICE_NAME}" >/dev/null 2>&1 || true
|
||||
rm -f "/etc/profile.d/clash-for-linux.sh" >/dev/null 2>&1 || true
|
||||
rm -f "/usr/local/bin/clashctl" >/dev/null 2>&1 || true
|
||||
for d in "/root/clash-for-linux" "/opt/clash-for-linux" "${INSTALL_DIR:-}"; do
|
||||
[ -n "$d" ] || continue
|
||||
rm -f "$d/temp/clash-for-linux.sh" >/dev/null 2>&1 || true
|
||||
done
|
||||
|
||||
# 5) remove install dirs
|
||||
removed_any=false
|
||||
for d in "${INSTALL_DIR:-}" "/root/clash-for-linux" "/opt/clash-for-linux"; do
|
||||
[ -n "$d" ] || continue
|
||||
if [ -d "$d" ] && { [ -f "$d/start.sh" ] || [ -d "$d/conf" ] || [ "$d" = "$INSTALL_DIR" ]; }; then
|
||||
rm -rf "$d"
|
||||
ok "已移除安装目录: $d"
|
||||
removed_any=true
|
||||
fi
|
||||
done
|
||||
|
||||
if [ "$removed_any" = false ]; then
|
||||
warn "未发现可删除的安装目录"
|
||||
fi
|
||||
|
||||
# 运行时 Env_File 可能写到 /etc/profile.d 或 temp，这里都清
|
||||
if [ -f "/etc/profile.d/clash-for-linux.sh" ]; then
|
||||
rm -f "/etc/profile.d/clash-for-linux.sh"
|
||||
ok "已移除: /etc/profile.d/clash-for-linux.sh"
|
||||
fi
|
||||
|
||||
if [ -f "${Install_Dir}/temp/clash-for-linux.sh" ]; then
|
||||
rm -f "${Install_Dir}/temp/clash-for-linux.sh" || true
|
||||
ok "已移除: ${Install_Dir}/temp/clash-for-linux.sh"
|
||||
fi
|
||||
|
||||
if [ -f "/usr/local/bin/clashctl" ]; then
|
||||
rm -f "/usr/local/bin/clashctl"
|
||||
ok "已移除: /usr/local/bin/clashctl"
|
||||
fi
|
||||
|
||||
# =========================
|
||||
# 5) 删除安装目录
|
||||
# =========================
|
||||
if [ -d "$Install_Dir" ]; then
|
||||
rm -rf "$Install_Dir"
|
||||
ok "已移除安装目录: ${Install_Dir}"
|
||||
else
|
||||
warn "未找到安装目录: ${Install_Dir}"
|
||||
fi
|
||||
|
||||
# =========================
|
||||
# 7) 提示：当前终端代理变量需要手动清
|
||||
# =========================
|
||||
echo
|
||||
warn "如果你曾执行 proxy_on，当前终端可能仍保留代理环境变量。可执行："
|
||||
echo " unset http_proxy https_proxy no_proxy HTTP_PROXY HTTPS_PROXY NO_PROXY"
|
||||
echo " # 或关闭终端重新打开"
|
||||
|
||||
echo
|
||||
ok "卸载完成（root-only 模式）✅"
|
||||
ok "卸载完成 ✅"
|
||||
|
||||
Reference in New Issue
Block a user