mirror of
https://github.com/Lsmoisu/sing-box-shell.git
synced 2025-06-08 12:14:14 +08:00
Add files via upload
This commit is contained in:
Lsmoisu
GitHub
parent
02214a6310
commit
c3045a11af
211
install.sh
Normal file
211
install.sh
Normal file
@ -0,0 +1,211 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# 检查是否以 root 权限运行
|
||||||
|
if [ "$EUID" -ne 0 ]; then
|
||||||
|
echo "错误：请以 root 权限运行此脚本（使用 sudo）"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 检查网络连接
|
||||||
|
echo "检查网络连接..."
|
||||||
|
if ! ping -c 3 8.8.8.8 > /dev/null 2>&1; then
|
||||||
|
echo "错误：无法连接到网络，请检查网络状态后重试"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 更新系统并安装必要的工具
|
||||||
|
echo "更新系统并安装必要工具..."
|
||||||
|
if ! apt update; then
|
||||||
|
echo "错误：apt update 失败，请检查网络或软件源配置"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
if ! apt upgrade -y; then
|
||||||
|
echo "警告：apt upgrade 失败，继续执行后续步骤..."
|
||||||
|
fi
|
||||||
|
if ! apt install -y wget tar iptables; then
|
||||||
|
echo "错误：安装 wget、tar 或 iptables 失败"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 检测系统架构
|
||||||
|
echo "检测系统架构..."
|
||||||
|
ARCH=$(uname -m)
|
||||||
|
OS=$(uname -s | tr '[:upper:]' '[:lower:]')
|
||||||
|
case "$ARCH" in
|
||||||
|
x86_64)
|
||||||
|
ARCH="amd64"
|
||||||
|
;;
|
||||||
|
aarch64)
|
||||||
|
ARCH="arm64"
|
||||||
|
;;
|
||||||
|
armv7l)
|
||||||
|
ARCH="armv7"
|
||||||
|
;;
|
||||||
|
i386|i686)
|
||||||
|
ARCH="386"
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "错误：不支持的系统架构：$ARCH"
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
echo "检测到系统架构：$OS-$ARCH"
|
||||||
|
|
||||||
|
# 设置 sing-box 版本和下载地址
|
||||||
|
SINGBOX_VERSION="1.11.4"
|
||||||
|
SINGBOX_BASE_URL="https://gh.sageer.me/github.com/SagerNet/sing-box/releases/download"
|
||||||
|
SINGBOX_URL="${SINGBOX_BASE_URL}/v${SINGBOX_VERSION}/sing-box-${SINGBOX_VERSION}-${OS}-${ARCH}.tar.gz"
|
||||||
|
echo "sing-box 下载地址：$SINGBOX_URL"
|
||||||
|
|
||||||
|
# 下载并安装 sing-box
|
||||||
|
echo "下载并安装 sing-box..."
|
||||||
|
if ! wget -O sing-box.tar.gz "$SINGBOX_URL"; then
|
||||||
|
echo "错误：下载 sing-box 失败，请检查网络或 URL 是否有效"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
if ! tar -xzf sing-box.tar.gz; then
|
||||||
|
echo "错误：解压 sing-box.tar.gz 失败，文件可能损坏"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
if [ ! -f sing-box-${SINGBOX_VERSION}-${OS}-${ARCH}/sing-box ]; then
|
||||||
|
echo "错误：解压后未找到 sing-box 可执行文件"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
mv sing-box-${SINGBOX_VERSION}-${OS}-${ARCH}/sing-box /usr/local/bin/
|
||||||
|
chmod +x /usr/local/bin/sing-box
|
||||||
|
rm -rf sing-box.tar.gz sing-box-${SINGBOX_VERSION}-${OS}-${ARCH}
|
||||||
|
|
||||||
|
# 检查 sing-box 是否安装成功
|
||||||
|
if ! command -v sing-box > /dev/null 2>&1; then
|
||||||
|
echo "错误：sing-box 安装失败，无法找到可执行文件"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 下载 sing-box 配置文件
|
||||||
|
echo "下载 sing-box 配置文件..."
|
||||||
|
CONFIG_URL="https://sub.hechunyu.com/config-zz-realip-route"
|
||||||
|
mkdir -p /etc/sing-box
|
||||||
|
if ! wget -O /etc/sing-box/config.json "$CONFIG_URL"; then
|
||||||
|
echo "错误：下载配置文件失败，请检查网络或 URL 是否有效"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 创建 sing-box systemd 服务文件
|
||||||
|
echo "配置 sing-box 为系统服务..."
|
||||||
|
cat << EOF > /etc/systemd/system/sing-box.service
|
||||||
|
[Unit]
|
||||||
|
Description=Sing-box Service
|
||||||
|
After=network.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=simple
|
||||||
|
ExecStart=/usr/local/bin/sing-box run -c /etc/sing-box/config.json
|
||||||
|
Restart=on-failure
|
||||||
|
User=root
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# 检查 systemd 是否可用并启用服务
|
||||||
|
if ! systemctl daemon-reload; then
|
||||||
|
echo "错误：systemctl daemon-reload 失败"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
if ! systemctl enable sing-box; then
|
||||||
|
echo "错误：启用 sing-box 服务失败"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
if ! systemctl start sing-box; then
|
||||||
|
echo "错误：启动 sing-box 服务失败，请检查配置文件"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 停止并禁用 systemd-resolved 服务
|
||||||
|
echo "停止并禁用 systemd-resolved 服务..."
|
||||||
|
if systemctl is-active systemd-resolved > /dev/null 2>&1; then
|
||||||
|
systemctl stop systemd-resolved
|
||||||
|
systemctl disable systemd-resolved
|
||||||
|
else
|
||||||
|
echo "警告：systemd-resolved 服务未运行，跳过此步骤"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 检查并处理 /etc/resolv.conf
|
||||||
|
echo "检查并配置 /etc/resolv.conf..."
|
||||||
|
if [ -L /etc/resolv.conf ]; then
|
||||||
|
echo "/etc/resolv.conf 是一个软连接，正在删除并重建..."
|
||||||
|
rm -f /etc/resolv.conf
|
||||||
|
echo "nameserver 127.0.0.1" > /etc/resolv.conf
|
||||||
|
elif [ -f /etc/resolv.conf ]; then
|
||||||
|
echo "/etc/resolv.conf 不是软连接，直接覆盖内容..."
|
||||||
|
echo "nameserver 127.0.0.1" > /etc/resolv.conf
|
||||||
|
else
|
||||||
|
echo "/etc/resolv.conf 不存在，正在创建..."
|
||||||
|
echo "nameserver 127.0.0.1" > /etc/resolv.conf
|
||||||
|
fi
|
||||||
|
if ! chattr +i /etc/resolv.conf; then
|
||||||
|
echo "警告：无法锁定 /etc/resolv.conf，可能被其他程序覆盖"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 启用 IP 转发
|
||||||
|
echo "启用 IP 转发..."
|
||||||
|
if ! sysctl -w net.ipv4.ip_forward=1 || ! sysctl -w net.ipv6.conf.all.forwarding=1; then
|
||||||
|
echo "错误：启用 IP 转发失败"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf
|
||||||
|
echo "net.ipv6.conf.all.forwarding=1" >> /etc/sysctl.conf
|
||||||
|
|
||||||
|
# 配置 iptables 规则
|
||||||
|
echo "配置 iptables 规则..."
|
||||||
|
if ! iptables -F || ! iptables -t nat -F; then
|
||||||
|
echo "错误：清理 iptables 规则失败"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
iptables -A INPUT -p udp --dport 53 -j ACCEPT
|
||||||
|
iptables -A FORWARD -i end0 -j ACCEPT
|
||||||
|
iptables -t nat -A POSTROUTING -o end0 -j MASQUERADE
|
||||||
|
|
||||||
|
# 检查并保存 iptables 规则
|
||||||
|
echo "检查并保存 iptables 规则..."
|
||||||
|
if [ -d /etc/iptables ]; then
|
||||||
|
if [ -f /etc/iptables/rules.v4 ]; then
|
||||||
|
echo "/etc/iptables/rules.v4 已存在，正在备份..."
|
||||||
|
mv /etc/iptables/rules.v4 /etc/iptables/rules.v4.bak-$(date +%F-%T)
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo "/etc/iptables 目录不存在，正在创建..."
|
||||||
|
mkdir -p /etc/iptables
|
||||||
|
fi
|
||||||
|
if ! iptables-save > /etc/iptables/rules.v4; then
|
||||||
|
echo "错误：保存 iptables 规则失败"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 配置 iptables 持久化
|
||||||
|
echo "安装 iptables-persistent 并保存规则..."
|
||||||
|
if ! echo "iptables-persistent iptables-persistent/autosave_v4 boolean true" | debconf-set-selections || \
|
||||||
|
! echo "iptables-persistent iptables-persistent/autosave_v6 boolean true" | debconf-set-selections || \
|
||||||
|
! apt install -y iptables-persistent; then
|
||||||
|
echo "错误：安装 iptables-persistent 失败"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 重启网络服务以应用更改
|
||||||
|
echo "重启网络服务..."
|
||||||
|
if ! systemctl restart networking; then
|
||||||
|
echo "警告：重启网络服务失败，可能需要手动重启"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 检查服务状态
|
||||||
|
echo "检查服务状态..."
|
||||||
|
if systemctl status sing-box > /dev/null 2>&1; then
|
||||||
|
echo "sing-box 服务运行正常"
|
||||||
|
else
|
||||||
|
echo "错误：sing-box 服务未正常运行"
|
||||||
|
fi
|
||||||
|
iptables -L -v -n
|
||||||
|
iptables -t nat -L -v -n
|
||||||
|
|
||||||
|
echo "部署完成！请将其他设备的网关和 DNS 指向此设备的 IP（192.168.1.3）。"
|
||||||
|
|
||||||
Loading…
x
Reference in New Issue
Block a user