mirror of
https://github.com/wnlen/clash-for-linux.git
synced 2026-02-04 10:11:28 +08:00
467 lines
14 KiB
Bash
Executable File
467 lines
14 KiB
Bash
Executable File
#!/bin/bash
|
||
set -euo pipefail
|
||
|
||
# =========================
|
||
# 基础参数
|
||
# =========================
|
||
Server_Dir=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
|
||
Install_Dir="${CLASH_INSTALL_DIR:-/opt/clash-for-linux}"
|
||
Service_Name="clash-for-linux"
|
||
Service_User="${CLASH_SERVICE_USER:-clash}"
|
||
Service_Group="${CLASH_SERVICE_GROUP:-$Service_User}"
|
||
|
||
# =========================
|
||
# 彩色输出（统一 printf + 自动降级 + 手动关色）
|
||
# =========================
|
||
|
||
# ---- 关色开关（优先级最高）----
|
||
NO_COLOR_FLAG=0
|
||
for arg in "$@"; do
|
||
case "$arg" in
|
||
--no-color|--nocolor)
|
||
NO_COLOR_FLAG=1
|
||
;;
|
||
esac
|
||
done
|
||
|
||
if [[ -n "${NO_COLOR:-}" ]] || [[ -n "${CLASH_NO_COLOR:-}" ]]; then
|
||
NO_COLOR_FLAG=1
|
||
fi
|
||
|
||
# ---- 初始化颜色 ----
|
||
if [[ "$NO_COLOR_FLAG" -eq 0 ]] && [[ -t 1 ]] && command -v tput >/dev/null 2>&1; then
|
||
if tput setaf 1 >/dev/null 2>&1; then
|
||
C_RED="$(tput setaf 1)"
|
||
C_GREEN="$(tput setaf 2)"
|
||
C_YELLOW="$(tput setaf 3)"
|
||
C_BLUE="$(tput setaf 4)"
|
||
C_CYAN="$(tput setaf 6)"
|
||
C_GRAY="$(tput setaf 8 2>/dev/null || true)"
|
||
C_BOLD="$(tput bold)"
|
||
C_UL="$(tput smul)"
|
||
C_NC="$(tput sgr0)"
|
||
fi
|
||
fi
|
||
|
||
# ---- ANSI fallback ----
|
||
if [[ "$NO_COLOR_FLAG" -eq 0 ]] && [[ -t 1 ]] && [[ -z "${C_NC:-}" ]]; then
|
||
C_RED=$'\033[31m'
|
||
C_GREEN=$'\033[32m'
|
||
C_YELLOW=$'\033[33m'
|
||
C_BLUE=$'\033[34m'
|
||
C_CYAN=$'\033[36m'
|
||
C_GRAY=$'\033[90m'
|
||
C_BOLD=$'\033[1m'
|
||
C_UL=$'\033[4m'
|
||
C_NC=$'\033[0m'
|
||
fi
|
||
|
||
# ---- 强制无色 ----
|
||
if [[ "$NO_COLOR_FLAG" -eq 1 ]] || [[ ! -t 1 ]]; then
|
||
C_RED='' C_GREEN='' C_YELLOW='' C_BLUE='' C_CYAN='' C_GRAY='' C_BOLD='' C_UL='' C_NC=''
|
||
fi
|
||
|
||
# =========================
|
||
# 基础输出函数
|
||
# =========================
|
||
log() { printf "%b\n" "$*"; }
|
||
info() { log "${C_CYAN}[INFO]${C_NC} $*"; }
|
||
ok() { log "${C_GREEN}[OK]${C_NC} $*"; }
|
||
warn() { log "${C_YELLOW}[WARN]${C_NC} $*"; }
|
||
err() { log "${C_RED}[ERROR]${C_NC} $*"; }
|
||
|
||
# =========================
|
||
# 样式助手
|
||
# =========================
|
||
path() { printf "%b" "${C_BOLD}$*${C_NC}"; }
|
||
cmd() { printf "%b" "${C_GRAY}$*${C_NC}"; }
|
||
url() { printf "%b" "${C_UL}$*${C_NC}"; }
|
||
good() { printf "%b" "${C_GREEN}$*${C_NC}"; }
|
||
bad() { printf "%b" "${C_RED}$*${C_NC}"; }
|
||
|
||
# =========================
|
||
# 分段标题（CLI 风格 section）
|
||
# =========================
|
||
section() {
|
||
local title="$*"
|
||
log ""
|
||
log "${C_BOLD}▶ ${title}${C_NC}"
|
||
log "${C_GRAY}────────────────────────────────────────${C_NC}"
|
||
}
|
||
|
||
# =========================
|
||
# 前置校验
|
||
# =========================
|
||
if [ "$(id -u)" -ne 0 ]; then
|
||
err "需要 root 权限执行安装脚本（请使用 sudo bash install.sh）"
|
||
exit 1
|
||
fi
|
||
|
||
if [ ! -f "${Server_Dir}/.env" ]; then
|
||
err "未找到 .env 文件，请确认脚本所在目录：${Server_Dir}"
|
||
exit 1
|
||
fi
|
||
|
||
# =========================
|
||
# 同步到安装目录（保持你原逻辑）
|
||
# =========================
|
||
mkdir -p "$Install_Dir"
|
||
if [ "$Server_Dir" != "$Install_Dir" ]; then
|
||
info "同步项目文件到安装目录：${Install_Dir}"
|
||
if command -v rsync >/dev/null 2>&1; then
|
||
rsync -a --delete --exclude '.git' "$Server_Dir/" "$Install_Dir/"
|
||
else
|
||
cp -a "$Server_Dir/." "$Install_Dir/"
|
||
fi
|
||
fi
|
||
|
||
chmod +x "$Install_Dir"/*.sh 2>/dev/null || true
|
||
chmod +x "$Install_Dir"/scripts/* 2>/dev/null || true
|
||
chmod +x "$Install_Dir"/bin/* 2>/dev/null || true
|
||
chmod +x "$Install_Dir"/clashctl 2>/dev/null || true
|
||
|
||
# =========================
|
||
# 加载环境与依赖脚本
|
||
# =========================
|
||
# shellcheck disable=SC1090
|
||
source "$Install_Dir/.env"
|
||
# shellcheck disable=SC1090
|
||
source "$Install_Dir/scripts/get_cpu_arch.sh"
|
||
# shellcheck disable=SC1090
|
||
source "$Install_Dir/scripts/resolve_clash.sh"
|
||
# shellcheck disable=SC1090
|
||
source "$Install_Dir/scripts/port_utils.sh"
|
||
|
||
if [[ -z "${CpuArch:-}" ]]; then
|
||
err "无法识别 CPU 架构"
|
||
exit 1
|
||
fi
|
||
info "CPU architecture: ${CpuArch}"
|
||
|
||
# =========================
|
||
# 交互式填写订阅地址（仅在 CLASH_URL 为空时触发）
|
||
# - 若非 TTY（CI/管道）则跳过交互
|
||
# - 若用户回车跳过，则保持原行为：装完提示手动配置
|
||
# =========================
|
||
prompt_clash_url_if_empty() {
|
||
# 兼容 .env 里可能是 CLASH_URL= 或 CLASH_URL=""
|
||
local cur="${CLASH_URL:-}"
|
||
cur="${cur%\"}"; cur="${cur#\"}"
|
||
|
||
if [ -n "$cur" ]; then
|
||
return 0
|
||
fi
|
||
|
||
# 非交互环境：不阻塞
|
||
if [ ! -t 0 ]; then
|
||
warn "CLASH_URL 为空且当前为非交互环境（stdin 非 TTY），将跳过输入引导。"
|
||
return 0
|
||
fi
|
||
|
||
echo
|
||
warn "未检测到订阅地址（CLASH_URL 为空）"
|
||
echo "请粘贴你的 Clash 订阅地址（直接回车跳过，稍后手动编辑 .env）："
|
||
read -r -p "Clash URL: " input_url
|
||
|
||
if [ -z "$input_url" ]; then
|
||
warn "已跳过填写订阅地址，安装完成后请手动编辑：${Install_Dir}/.env"
|
||
return 0
|
||
fi
|
||
|
||
if ! echo "$input_url" | grep -Eq '^https?://'; then
|
||
err "订阅地址格式不正确（必须以 http:// 或 https:// 开头）"
|
||
exit 1
|
||
fi
|
||
|
||
# 写入 .env：优先替换已存在的 CLASH_URL= 行；若不存在则追加
|
||
if grep -qE '^CLASH_URL=' "$Install_Dir/.env"; then
|
||
# 用 | 做分隔符，避免 URL 里有 /
|
||
sed -i "s|^CLASH_URL=.*|CLASH_URL=\"$input_url\"|g" "$Install_Dir/.env"
|
||
else
|
||
echo "CLASH_URL=\"$input_url\"" >> "$Install_Dir/.env"
|
||
fi
|
||
|
||
export CLASH_URL="$input_url"
|
||
ok "已写入订阅地址到：${Install_Dir}/.env"
|
||
}
|
||
|
||
prompt_clash_url_if_empty
|
||
|
||
# =========================
|
||
# 端口冲突检测（保持你原逻辑）
|
||
# =========================
|
||
CLASH_HTTP_PORT=${CLASH_HTTP_PORT:-7890}
|
||
CLASH_SOCKS_PORT=${CLASH_SOCKS_PORT:-7891}
|
||
CLASH_REDIR_PORT=${CLASH_REDIR_PORT:-7892}
|
||
EXTERNAL_CONTROLLER=${EXTERNAL_CONTROLLER:-127.0.0.1:9090}
|
||
|
||
parse_port() {
|
||
local raw="$1"
|
||
raw="${raw##*:}"
|
||
echo "$raw"
|
||
}
|
||
|
||
Port_Conflicts=()
|
||
for port in "$CLASH_HTTP_PORT" "$CLASH_SOCKS_PORT" "$CLASH_REDIR_PORT" "$(parse_port "$EXTERNAL_CONTROLLER")"; do
|
||
if [ "$port" = "auto" ] || [ -z "$port" ]; then
|
||
continue
|
||
fi
|
||
if [[ "$port" =~ ^[0-9]+$ ]]; then
|
||
if is_port_in_use "$port"; then
|
||
Port_Conflicts+=("$port")
|
||
fi
|
||
fi
|
||
done
|
||
|
||
if [ "${#Port_Conflicts[@]}" -ne 0 ]; then
|
||
warn "检测到端口冲突: ${Port_Conflicts[*]}，运行时将自动分配可用端口"
|
||
fi
|
||
|
||
# =========================
|
||
# 创建运行用户/组
|
||
# =========================
|
||
if ! getent group "$Service_Group" >/dev/null 2>&1; then
|
||
groupadd --system "$Service_Group"
|
||
fi
|
||
|
||
if ! id "$Service_User" >/dev/null 2>&1; then
|
||
useradd --system --no-create-home --shell /usr/sbin/nologin --gid "$Service_Group" "$Service_User"
|
||
fi
|
||
|
||
install -d -m 0755 "$Install_Dir/conf" "$Install_Dir/logs" "$Install_Dir/temp"
|
||
chown -R "$Service_User:$Service_Group" "$Install_Dir/conf" "$Install_Dir/logs" "$Install_Dir/temp"
|
||
|
||
# =========================
|
||
# Clash 内核就绪检查/下载
|
||
# =========================
|
||
if ! resolve_clash_bin "$Install_Dir" "$CpuArch" >/dev/null 2>&1; then
|
||
err "Clash 内核未就绪，请检查下载配置或手动放置二进制"
|
||
exit 1
|
||
fi
|
||
|
||
# =========================
|
||
# fonction 工具函数区
|
||
# =========================
|
||
# 等待 config.yaml 出现并写入 secret（默认最多等 6 秒）
|
||
wait_secret_ready() {
|
||
local conf_file="$1"
|
||
local timeout_sec="${2:-6}"
|
||
|
||
local end=$((SECONDS + timeout_sec))
|
||
while [ "$SECONDS" -lt "$end" ]; do
|
||
if [ -s "$conf_file" ] && grep -qE '^[[:space:]]*secret:' "$conf_file"; then
|
||
return 0
|
||
fi
|
||
sleep 0.2
|
||
done
|
||
return 1
|
||
}
|
||
|
||
# 计算字符串可视宽度：中文大概率按 2 宽处理（简单够用版）
|
||
# 注：终端宽度/字体不统一时，中文宽度估算永远只能“近似”
|
||
vis_width() {
|
||
python3 - <<'PY' "$1"
|
||
import sys
|
||
s=sys.argv[1]
|
||
w=0
|
||
for ch in s:
|
||
# East Asian Wide/FullWidth 近似当 2
|
||
w += 2 if ord(ch) >= 0x2E80 else 1
|
||
print(w)
|
||
PY
|
||
}
|
||
|
||
pad_right() { # pad_right "text" width
|
||
local s="$1" w="$2"
|
||
local cur
|
||
cur="$(vis_width "$s")"
|
||
local pad=$(( w - cur ))
|
||
(( pad < 0 )) && pad=0
|
||
printf "%s%*s" "$s" "$pad" ""
|
||
}
|
||
|
||
box_title() { # box_title "标题" width
|
||
local title="$1" width="$2"
|
||
local inner=$((width-2))
|
||
printf "┌%s┐\n" "$(printf '─%.0s' $(seq 1 $inner))"
|
||
# 标题居中（近似）
|
||
local t=" $title "
|
||
local tw; tw="$(vis_width "$t")"
|
||
local left=$(( (inner - tw)/2 )); ((left<0)) && left=0
|
||
local right=$(( inner - tw - left )); ((right<0)) && right=0
|
||
printf "│%*s%s%*s│\n" "$left" "" "$t" "$right" ""
|
||
printf "├%s┤\n" "$(printf '─%.0s' $(seq 1 $inner))"
|
||
}
|
||
|
||
box_row() { # box_row "key" "value" width keyw
|
||
local k="$1" v="$2" width="$3" keyw="$4"
|
||
local inner=$((width-2))
|
||
# 形如：│ key: value │
|
||
local left="$(pad_right "$k" "$keyw")"
|
||
local line=" ${left} ${v}"
|
||
local lw; lw="$(vis_width "$line")"
|
||
local pad=$(( inner - lw )); ((pad<0)) && pad=0
|
||
printf "│%s%*s│\n" "$line" "$pad" ""
|
||
}
|
||
|
||
box_end() { # box_end width
|
||
local width="$1" inner=$((width-2))
|
||
printf "└%s┘\n" "$(printf '─%.0s' $(seq 1 $inner))"
|
||
}
|
||
|
||
# 从 config.yaml 提取 secret（强韧：支持缩进/引号/CRLF/尾空格）
|
||
read_secret_from_config() {
|
||
local conf_file="$1"
|
||
[ -f "$conf_file" ] || return 1
|
||
|
||
# 1) 找到 secret 行 -> 2) 去掉 key 和空格 -> 3) 去掉首尾引号 -> 4) 去掉 CR
|
||
local s
|
||
s="$(
|
||
sed -nE 's/^[[:space:]]*secret:[[:space:]]*//p' "$conf_file" \
|
||
| head -n 1 \
|
||
| sed -E 's/^[[:space:]]*"(.*)"[[:space:]]*$/\1/; s/^[[:space:]]*'\''(.*)'\''[[:space:]]*$/\1/' \
|
||
| tr -d '\r'
|
||
)"
|
||
|
||
# 去掉纯空格
|
||
s="$(printf '%s' "$s" | sed -E 's/^[[:space:]]+//; s/[[:space:]]+$//')"
|
||
|
||
[ -n "$s" ] || return 1
|
||
printf '%s' "$s"
|
||
}
|
||
|
||
# =========================
|
||
# systemd 安装与启动
|
||
# =========================
|
||
Service_Enabled="unknown"
|
||
Service_Started="unknown"
|
||
|
||
if command -v systemctl >/dev/null 2>&1; then
|
||
CLASH_SERVICE_USER="$Service_User" CLASH_SERVICE_GROUP="$Service_Group" "$Install_Dir/scripts/install_systemd.sh"
|
||
|
||
if [ "${CLASH_ENABLE_SERVICE:-true}" = "true" ]; then
|
||
systemctl enable "${Service_Name}.service" >/dev/null 2>&1 || true
|
||
fi
|
||
if [ "${CLASH_START_SERVICE:-true}" = "true" ]; then
|
||
systemctl start "${Service_Name}.service" >/dev/null 2>&1 || true
|
||
fi
|
||
|
||
if systemctl is-enabled --quiet "${Service_Name}.service" 2>/dev/null; then
|
||
Service_Enabled="enabled"
|
||
else
|
||
Service_Enabled="disabled"
|
||
fi
|
||
|
||
if systemctl is-active --quiet "${Service_Name}.service" 2>/dev/null; then
|
||
Service_Started="active"
|
||
else
|
||
Service_Started="inactive"
|
||
fi
|
||
else
|
||
warn "未检测到 systemd，已跳过服务单元生成"
|
||
fi
|
||
|
||
# =========================
|
||
# 安装 clashctl 命令
|
||
# =========================
|
||
if [ -f "$Install_Dir/clashctl" ]; then
|
||
install -m 0755 "$Install_Dir/clashctl" /usr/local/bin/clashctl
|
||
fi
|
||
|
||
# =========================
|
||
# 友好收尾输出（闭环）
|
||
# =========================
|
||
|
||
section "安装完成"
|
||
ok "Clash for Linux 已安装至: $(path "${Install_Dir}")"
|
||
|
||
log "📦 安装目录：$(path "${Install_Dir}")"
|
||
log "👤 运行用户：${Service_User}:${Service_Group}"
|
||
log "🔧 服务名称：${Service_Name}.service"
|
||
|
||
if command -v systemctl >/dev/null 2>&1; then
|
||
section "服务状态"
|
||
|
||
se="${Service_Enabled:-unknown}"
|
||
ss="${Service_Started:-unknown}"
|
||
|
||
[[ "$se" == "enabled" ]] && se_colored="$(good "$se")" || se_colored="$(bad "$se")"
|
||
[[ "$ss" == "active" ]] && ss_colored="$(good "$ss")" || ss_colored="$(bad "$ss")"
|
||
|
||
log "🧷 开机自启：${se_colored}"
|
||
log "🟢 服务状态：${ss_colored}"
|
||
|
||
log ""
|
||
log "${C_BOLD}常用命令：${C_NC}"
|
||
log " $(cmd "sudo systemctl status ${Service_Name}.service")"
|
||
log " $(cmd "sudo systemctl restart ${Service_Name}.service")"
|
||
fi
|
||
|
||
# =========================
|
||
# Dashboard / Secret
|
||
# =========================
|
||
section "控制面板"
|
||
|
||
api_port="$(parse_port "${EXTERNAL_CONTROLLER}")"
|
||
api_host="${EXTERNAL_CONTROLLER%:*}"
|
||
|
||
if [[ -z "$api_host" ]] || [[ "$api_host" == "$EXTERNAL_CONTROLLER" ]]; then
|
||
api_host="127.0.0.1"
|
||
fi
|
||
|
||
CONF_DIR="$Install_Dir/conf"
|
||
CONF_FILE="$CONF_DIR/config.yaml"
|
||
|
||
SECRET_VAL=""
|
||
if wait_secret_ready "$CONF_FILE" 6; then
|
||
SECRET_VAL="$(read_secret_from_config "$CONF_FILE" || true)"
|
||
fi
|
||
|
||
dash="http://${api_host}:${api_port}/ui"
|
||
log "🌐 Dashboard：$(url "$dash")"
|
||
|
||
if [[ -n "$SECRET_VAL" ]]; then
|
||
MASKED="${SECRET_VAL:0:4}****${SECRET_VAL: -4}"
|
||
log "🔐 Secret：${C_YELLOW}${MASKED}${C_NC}"
|
||
log " 查看完整 Secret：$(cmd "sudo sed -nE 's/^[[:space:]]*secret:[[:space:]]*//p' \"$CONF_FILE\" | head -n 1")"
|
||
else
|
||
log "🔐 Secret：${C_YELLOW}启动中暂未读到（稍后再试）${C_NC}"
|
||
log " 稍后查看：$(cmd "sudo sed -nE 's/^[[:space:]]*secret:[[:space:]]*//p' \"$CONF_FILE\" | head -n 1")"
|
||
fi
|
||
|
||
# =========================
|
||
# 订阅配置（必须）
|
||
# =========================
|
||
section "订阅状态"
|
||
|
||
ENV_FILE="${Install_Dir}/.env"
|
||
|
||
if [[ -n "${CLASH_URL:-}" ]]; then
|
||
ok "订阅地址已配置（CLASH_URL 已写入 .env）"
|
||
else
|
||
warn "订阅地址未配置（必须）"
|
||
log ""
|
||
log "配置订阅地址："
|
||
log " $(cmd "sudo bash -c 'echo \"CLASH_URL=<订阅地址>\" > ${ENV_FILE}'")"
|
||
log ""
|
||
log "配置完成后重启服务："
|
||
log " $(cmd "sudo systemctl restart ${Service_Name}.service")"
|
||
fi
|
||
|
||
# =========================
|
||
# 下一步
|
||
# =========================
|
||
section "下一步开启代理（可选）"
|
||
log " $(cmd "source /etc/profile.d/clash-for-linux.sh")"
|
||
log " $(cmd "proxy_on")"
|
||
|
||
# =========================
|
||
# 启动后快速诊断
|
||
# =========================
|
||
sleep 1
|
||
if command -v journalctl >/dev/null 2>&1; then
|
||
if journalctl -u "${Service_Name}.service" -n 50 --no-pager 2>/dev/null \
|
||
| grep -q "Clash订阅地址不可访问"; then
|
||
warn "服务启动异常：订阅不可用，请检查 CLASH_URL（可能过期 / 404 / 被墙）。"
|
||
fi
|
||
fi |