update:folder

script/singbox.sh

@@ -0,0 +1,204 @@
+#!/usr/bin/env bash
+# install_singbox.sh
+set -euo pipefail
+
+# 颜色定义
+RED=$'\033[31m'
+GREEN=$'\033[32m'
+YELLOW=$'\033[33m'
+BLUE=$'\033[34m'
+CYAN=$'\033[36m'
+BOLD=$'\033[1m'
+NC=$'\033[0m'
+
+# 权限检查
+if [[ $EUID -ne 0 ]]; then
+  printf "${RED}错误：请以 root 用户或使用 sudo 运行此脚本${NC}\n" >&2
+  exit 1
+fi
+
+CONFIG_DIR=/etc/singbox
+STATE_FILE="$CONFIG_DIR/state.env"
+BIN_NAME=sing-box
+
+# 检查本地与远程版本，并提示
+check_update() {
+  if command -v curl &>/dev/null && command -v grep &>/dev/null; then
+    LOCAL_VER=$($BIN_NAME version 2>/dev/null | head -n1 | awk '{print $NF}') || LOCAL_VER="未安装"
+    LATEST_VER=$(curl -s https://api.github.com/repos/SagerNet/sing-box/releases/latest |
+      grep '"tag_name"' | head -n1 | cut -d '"' -f4 | sed 's/^v//') || LATEST_VER="未知"
+    if [[ "$LOCAL_VER" != "$LATEST_VER" ]]; then
+      printf "${YELLOW}检测到新版本：${LATEST_VER}，当前版本：${LOCAL_VER}。请选择 6) 升级 Sing-box 二进制。${NC}\n"
+    fi
+  fi
+}
+
+# 升级/安装 Sing-box 二进制
+update_singbox() {
+  printf "${CYAN}===== 升级/安装 Sing-box 二进制 =====${NC}\n"
+  if command -v apt-get &>/dev/null; then
+    bash <(curl -fsSL https://sing-box.app/deb-install.sh)
+  elif command -v dnf &>/dev/null || command -v yum &>/dev/null; then
+    bash <(curl -fsSL https://sing-box.app/rpm-install.sh)
+  elif command -v pacman &>/dev/null; then
+    bash <(curl -fsSL https://sing-box.app/arch-install.sh)
+  else
+    printf "${RED}无法识别发行版，请手动升级 Sing-box 二进制${NC}\n" >&2
+    return 1
+  fi
+  hash -r
+  NEW_VER=$($BIN_NAME version | head -n1 | awk '{print $NF}')
+  printf "${GREEN}Sing-box 已升级到版本：%s${NC}\n" "$NEW_VER"
+  printf "${CYAN}重启服务...${NC}\n"
+  if systemctl restart sing-box.service; then
+    printf "${GREEN}服务已重启。${NC}\n"
+  else
+    printf "${YELLOW}服务重启失败，请手动检查。${NC}\n"
+  fi
+}
+
+# 安装 Sing-box 并生成配置
+install_singbox() {
+  printf "${CYAN}===== 安装 Sing-box 并生成配置 =====${NC}\n"
+  printf "${YELLOW}请输入用户名称 (name 字段，例如 AK-JP-100G)：${NC}"
+  read -r NAME
+  [[ -z "$NAME" ]] && {
+    printf "${RED}名称不能为空，退出。${NC}\n" >&2
+    exit 1
+  }
+  printf "${YELLOW}请输入 SNI 域名 (默认: s0.awsstatic.com)：${NC}"
+  read -r SNI
+  SNI=${SNI:-s0.awsstatic.com}
+
+  update_singbox
+  hash -r
+  BIN_PATH=$(command -v $BIN_NAME || true)
+  [[ -z "$BIN_PATH" ]] && {
+    printf "${RED}未找到 $BIN_NAME，可执行文件路径异常，请检查安装${NC}\n" >&2
+    exit 1
+  }
+  VERSION=$($BIN_PATH version | head -n1 | awk '{print $NF}')
+  printf "${GREEN}已安装/更新 sing-box 版本：%s${NC}\n" "$VERSION"
+
+  # 生成参数
+  UUID=$($BIN_PATH generate uuid)
+  KEY_OUTPUT=$($BIN_PATH generate reality-keypair)
+  PRIVATE_KEY=$(echo "$KEY_OUTPUT" | awk -F': ' '/PrivateKey/ {print $2}')
+  PUB_KEY=$(echo "$KEY_OUTPUT" | awk -F': ' '/PublicKey/ {print $2}')
+  SHORT_ID=$(openssl rand -hex 8)
+  FP="chrome"
+  SERVER_IP=$(curl -s https://ifconfig.me)
+  PORT=443
+  SPX="/"
+
+  # 写入配置和状态
+  mkdir -p "$CONFIG_DIR"
+  cat >"$CONFIG_DIR/config.json" <<EOF
+{
+  "log": {"level": "info"},
+  "dns": {"servers": [{"address": "tls://8.8.8.8"}]},
+  "inbounds": [{
+    "type": "vless",
+    "tag": "VLESSReality",
+    "listen": "::",
+    "listen_port": 443,
+    "users": [{"name":"$NAME","uuid":"$UUID","flow":"xtls-rprx-vision"}],
+    "tls": {"enabled":true,"server_name":"$SNI","reality":{
+      "enabled":true,
+      "handshake": {"server":"$SNI","server_port":443},
+      "private_key":"$PRIVATE_KEY",
+      "short_id":["$SHORT_ID"]
+    }}
+  }],
+  "outbounds": [{"type":"direct"},{"type":"dns","tag":"dns-out"}],
+  "route": {"rules": [{"protocol":"dns","outbound":"dns-out"}]}
+}
+EOF
+
+  cat >"$STATE_FILE" <<EOF
+NAME="$NAME"
+SNI="$SNI"
+UUID="$UUID"
+PUB_KEY="$PUB_KEY"
+SHORT_ID="$SHORT_ID"
+FP="$FP"
+SERVER_IP="$SERVER_IP"
+PORT="$PORT"
+SPX="$SPX"
+EOF
+
+  systemctl enable sing-box.service
+  systemctl restart sing-box.service
+  printf "${GREEN}安装并启动完成。${NC}\n"
+}
+
+# 查看服务状态
+status_singbox() {
+  printf "${CYAN}===== Sing-box 服务状态 =====${NC}\n"
+  if systemctl status sing-box.service &>/dev/null; then
+    systemctl status sing-box.service --no-pager
+  else
+    printf "${YELLOW}服务未安装。${NC}\n"
+  fi
+}
+
+# 显示 VLESS Reality 链接
+show_link() {
+  printf "${CYAN}===== 您的 VLESS Reality 链接 =====${NC}\n"
+  [[ -f "$STATE_FILE" ]] || {
+    printf "${RED}未找到状态文件，请先安装。${NC}\n"
+    return
+  }
+  source "$STATE_FILE"
+  LINK="vless://${UUID}@${SERVER_IP}:${PORT}?security=reality&sni=${SNI}&fp=${FP}&pbk=${PUB_KEY}&sid=${SHORT_ID}&spx=${SPX}&type=tcp&flow=xtls-rprx-vision&encryption=none#${NAME}"
+  printf "${GREEN}%s${NC}\n\n" "$LINK"
+}
+
+# 卸载 Sing-box
+uninstall_singbox() {
+  printf "${CYAN}===== 卸载 Sing-box =====${NC}\n"
+  systemctl stop sing-box.service 2>/dev/null || true
+  systemctl disable sing-box.service 2>/dev/null || true
+  rm -rf "$CONFIG_DIR"
+  if command -v apt-get &>/dev/null; then
+    apt-get remove -y sing-box
+  elif command -v yum &>/dev/null; then
+    yum remove -y sing-box
+  elif command -v pacman &>/dev/null; then
+    pacman -Rss --noconfirm sing-box
+  fi
+  printf "${GREEN}卸载完成。${NC}\n"
+}
+
+# 重新安装
+reinstall_singbox() {
+  uninstall_singbox
+  install_singbox
+}
+
+# 菜单主循环
+check_update
+while true; do
+  printf "${BOLD}${BLUE}请选择操作：${NC}\n"
+  printf "  ${YELLOW}1)${NC} 安装 Sing-box 并生成配置\n"
+  printf "  ${YELLOW}2)${NC} 查看服务状态\n"
+  printf "  ${YELLOW}3)${NC} 显示 VLESS Reality 链接\n"
+  printf "  ${YELLOW}4)${NC} 卸载 Sing-box\n"
+  printf "  ${YELLOW}5)${NC} 重新安装 Sing-box\n"
+  printf "  ${YELLOW}6)${NC} 升级 Sing-box 二进制\n"
+  printf "  ${YELLOW}7)${NC} 退出\n"
+  printf "${BOLD}输入数字 [1-7]: ${NC}"
+  read -r choice
+  case "$choice" in
+  1) install_singbox ;; 2) status_singbox ;; 3)
+    show_link
+    ;;
+  4) uninstall_singbox ;; 5) reinstall_singbox ;; 6) update_singbox ;;
+  7)
+    printf "${GREEN}退出。${NC}\n"
+    exit 0
+    ;;
+  *) printf "${RED}无效选项，请重试。${NC}\n" ;;
+  esac
+  echo
+done