Create reality.sh
This commit is contained in:
NewName
358
reality.sh
Normal file
358
reality.sh
Normal file
@@ -0,0 +1,358 @@
|
||||
#!/bin/bash
|
||||
|
||||
RED="\033[31m"
|
||||
GREEN="\033[32m"
|
||||
YELLOW="\033[33m"
|
||||
PLAIN='\033[0m'
|
||||
|
||||
red() {
|
||||
echo -e "\033[31m\033[01m$1\033[0m"
|
||||
}
|
||||
|
||||
green() {
|
||||
echo -e "\033[32m\033[01m$1\033[0m"
|
||||
}
|
||||
|
||||
yellow() {
|
||||
echo -e "\033[33m\033[01m$1\033[0m"
|
||||
}
|
||||
|
||||
REGEX=("debian" "ubuntu" "centos|red hat|kernel|oracle linux|alma|rocky" "'amazon linux'" "fedora" "alpine")
|
||||
RELEASE=("Debian" "Ubuntu" "CentOS" "CentOS" "Fedora" "Alpine")
|
||||
PACKAGE_UPDATE=("apt-get update" "apt-get update" "yum -y update" "yum -y update" "yum -y update" "apk update -f")
|
||||
PACKAGE_INSTALL=("apt -y install" "apt -y install" "yum -y install" "yum -y install" "yum -y install" "apk add -f")
|
||||
PACKAGE_UNINSTALL=("apt -y autoremove" "apt -y autoremove" "yum -y autoremove" "yum -y autoremove" "yum -y autoremove" "apk del -f")
|
||||
|
||||
[[ $EUID -ne 0 ]] && red "注意：请在root用户下运行脚本" && exit 1
|
||||
|
||||
CMD=("$(grep -i pretty_name /etc/os-release 2>/dev/null | cut -d \" -f2)" "$(hostnamectl 2>/dev/null | grep -i system | cut -d : -f2)" "$(lsb_release -sd 2>/dev/null)" "$(grep -i description /etc/lsb-release 2>/dev/null | cut -d \" -f2)" "$(grep . /etc/redhat-release 2>/dev/null)" "$(grep . /etc/issue 2>/dev/null | cut -d \\ -f1 | sed '/^[ ]*$/d')")
|
||||
|
||||
for i in "${CMD[@]}"; do
|
||||
SYS="$i" && [[ -n $SYS ]] && break
|
||||
done
|
||||
|
||||
for ((int = 0; int < ${#REGEX[@]}; int++)); do
|
||||
if [[ $(echo "$SYS" | tr '[:upper:]' '[:lower:]') =~ ${REGEX[int]} ]]; then
|
||||
SYSTEM="${RELEASE[int]}" && [[ -n $SYSTEM ]] && break
|
||||
fi
|
||||
done
|
||||
|
||||
[[ -z $SYSTEM ]] && red "不支持当前VPS系统, 请使用主流的操作系统" && exit 1
|
||||
|
||||
# 检测 VPS 处理器架构
|
||||
archAffix() {
|
||||
case "$(uname -m)" in
|
||||
x86_64 | amd64) echo 'amd64' ;;
|
||||
armv8 | arm64 | aarch64) echo 'arm64' ;;
|
||||
s390x) echo 's390x' ;;
|
||||
*) red "不支持的CPU架构!" && exit 1 ;;
|
||||
esac
|
||||
}
|
||||
|
||||
install_base(){
|
||||
if [[ ! $SYSTEM == "CentOS" ]]; then
|
||||
${PACKAGE_UPDATE[int]}
|
||||
fi
|
||||
${PACKAGE_INSTALL[int]} curl wget sudo tar openssl
|
||||
}
|
||||
|
||||
install_singbox(){
|
||||
install_base
|
||||
|
||||
last_version=$(curl -s https://data.jsdelivr.com/v1/package/gh/SagerNet/sing-box | sed -n 4p | tr -d ',"' | awk '{print $1}')
|
||||
if [[ -z $last_version ]]; then
|
||||
red "获取版本信息失败，请检查VPS的网络状态！"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [[ $SYSTEM == "CentOS" ]]; then
|
||||
wget https://github.com/SagerNet/sing-box/releases/download/v"$last_version"/sing-box_"$last_version"_linux_$(archAffix).rpm -O sing-box.rpm
|
||||
rpm -ivh sing-box.rpm
|
||||
rm -f sing-box.rpm
|
||||
else
|
||||
wget https://github.com/SagerNet/sing-box/releases/download/v"$last_version"/sing-box_"$last_version"_linux_$(archAffix).deb -O sing-box.deb
|
||||
dpkg -i sing-box.deb
|
||||
rm -f sing-box.deb
|
||||
fi
|
||||
|
||||
if [[ -f "/etc/systemd/system/sing-box.service" ]]; then
|
||||
green "Sing-box 安装成功！"
|
||||
else
|
||||
red "Sing-box 安装失败！"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# 询问用户有关 Reality 端口、UUID 和回落域名
|
||||
read -p "设置 Sing-box 端口 [1-65535]（回车则随机分配端口）：" port
|
||||
[[ -z $port ]] && port=$(shuf -i 2000-65535 -n 1)
|
||||
until [[ -z $(ss -ntlp | awk '{print $4}' | sed 's/.*://g' | grep -w "$port") ]]; do
|
||||
if [[ -n $(ss -ntlp | awk '{print $4}' | sed 's/.*://g' | grep -w "$port") ]]; then
|
||||
echo -e "${RED} $port ${PLAIN} 端口已经被其他程序占用，请更换端口重试！"
|
||||
read -p "设置 Sing-box 端口 [1-65535]（回车则随机分配端口）：" port
|
||||
[[ -z $port ]] && port=$(shuf -i 2000-65535 -n 1)
|
||||
fi
|
||||
done
|
||||
read -rp "请输入 UUID [可留空待脚本生成]: " UUID
|
||||
[[ -z $UUID ]] && UUID=$(sing-box generate uuid)
|
||||
read -rp "请输入配置回落的域名 [默认世嘉官网]: " dest_server
|
||||
[[ -z $dest_server ]] && dest_server="www.sega.com"
|
||||
|
||||
# Reality short-id
|
||||
short_id=$(openssl rand -hex 8)
|
||||
|
||||
# Reality 公私钥
|
||||
keys=$(sing-box generate reality-keypair)
|
||||
private_key=$(echo $keys | awk -F " " '{print $2}')
|
||||
public_key=$(echo $keys | awk -F " " '{print $4}')
|
||||
|
||||
# 将默认的配置文件删除，并写入 Reality 配置
|
||||
rm -f /etc/sing-box/config.json
|
||||
cat << EOF > /etc/sing-box/config.json
|
||||
{
|
||||
"log": {
|
||||
"level": "trace",
|
||||
"timestamp": true
|
||||
},
|
||||
"inbounds": [
|
||||
{
|
||||
"type": "vless",
|
||||
"tag": "vless-in",
|
||||
"listen": "::",
|
||||
"listen_port": $port,
|
||||
"sniff": true,
|
||||
"sniff_override_destination": true,
|
||||
"users": [
|
||||
{
|
||||
"uuid": "$UUID",
|
||||
"flow": "xtls-rprx-vision"
|
||||
}
|
||||
],
|
||||
"tls": {
|
||||
"enabled": true,
|
||||
"server_name": "$dest_server",
|
||||
"reality": {
|
||||
"enabled": true,
|
||||
"handshake": {
|
||||
"server": "$dest_server",
|
||||
"server_port": 443
|
||||
},
|
||||
"private_key": "$private_key",
|
||||
"short_id": [
|
||||
"$short_id"
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"outbounds": [
|
||||
{
|
||||
"type": "direct",
|
||||
"tag": "direct"
|
||||
},
|
||||
{
|
||||
"type": "block",
|
||||
"tag": "block"
|
||||
}
|
||||
],
|
||||
"route": {
|
||||
"rules": [
|
||||
{
|
||||
"geoip": "cn",
|
||||
"outbound": "block"
|
||||
},
|
||||
{
|
||||
"geosite": "category-ads-all",
|
||||
"outbound": "block"
|
||||
}
|
||||
],
|
||||
"final": "direct"
|
||||
}
|
||||
}
|
||||
EOF
|
||||
|
||||
warp_v4=$(curl -s4m8 https://www.cloudflare.com/cdn-cgi/trace -k | grep warp | cut -d= -f2)
|
||||
warp_v6=$(curl -s6m8 https://www.cloudflare.com/cdn-cgi/trace -k | grep warp | cut -d= -f2)
|
||||
if [[ $warp_v4 =~ on|plus ]] || [[ $warp_v6 =~ on|plus ]]; then
|
||||
systemctl stop warp-go >/dev/null 2>&1
|
||||
systemctl disable warp-go >/dev/null 2>&1
|
||||
wg-quick down wgcf >/dev/null 2>&1
|
||||
systemctl disable wg-quick@wgcf >/dev/null 2>&1
|
||||
IP=$(expr "$(curl -ks4m8 -A Mozilla https://api.ip.sb/geoip)" : '.*ip\":[ ]*\"\([^"]*\).*') || IP=$(expr "$(curl -ks6m8 -A Mozilla https://api.ip.sb/geoip)" : '.*ip\":[ ]*\"\([^"]*\).*')
|
||||
systemctl start warp-go >/dev/null 2>&1
|
||||
systemctl enable warp-go >/dev/null 2>&1
|
||||
wg-quick start wgcf >/dev/null 2>&1
|
||||
systemctl enable wg-quick@wgcf >/dev/null 2>&1
|
||||
else
|
||||
IP=$(expr "$(curl -ks4m8 -A Mozilla https://api.ip.sb/geoip)" : '.*ip\":[ ]*\"\([^"]*\).*') || IP=$(expr "$(curl -ks6m8 -A Mozilla https://api.ip.sb/geoip)" : '.*ip\":[ ]*\"\([^"]*\).*')
|
||||
fi
|
||||
|
||||
mkdir /root/sing-box >/dev/null 2>&1
|
||||
|
||||
# 生成 vless 分享链接及 Clash Meta 配置文件
|
||||
share_link="vless://$UUID@$IP:$port?encryption=none&flow=xtls-rprx-vision&security=reality&sni=$dest_server&fp=chrome&pbk=$public_key&sid=$short_id&type=tcp&headerType=none#vless-Reality"
|
||||
echo ${share_link} > /root/sing-box/share-link.txt
|
||||
cat << EOF > /root/sing-box/clash-meta.yaml
|
||||
mixed-port: 7890
|
||||
external-controller: 127.0.0.1:9090
|
||||
allow-lan: false
|
||||
mode: rule
|
||||
log-level: debug
|
||||
ipv6: true
|
||||
|
||||
dns:
|
||||
enable: true
|
||||
listen: 0.0.0.0:53
|
||||
enhanced-mode: fake-ip
|
||||
nameserver:
|
||||
- 8.8.8.8
|
||||
- 1.1.1.1
|
||||
- 114.114.114.114
|
||||
|
||||
proxies:
|
||||
- name: vless-Reality
|
||||
type: vless
|
||||
server: $IP
|
||||
port: $port
|
||||
uuid: $UUID
|
||||
network: tcp
|
||||
tls: true
|
||||
udp: true
|
||||
xudp: true
|
||||
flow: xtls-rprx-vision
|
||||
servername: $dest_server
|
||||
reality-opts:
|
||||
public-key: "$public_key"
|
||||
short-id: "$short_id"
|
||||
client-fingerprint: chrome
|
||||
|
||||
proxy-groups:
|
||||
- name: Proxy
|
||||
type: select
|
||||
proxies:
|
||||
- vless-Reality
|
||||
|
||||
rules:
|
||||
- GEOIP,CN,DIRECT
|
||||
- MATCH,Proxy
|
||||
EOF
|
||||
|
||||
systemctl start sing-box >/dev/null 2>&1
|
||||
systemctl enable sing-box >/dev/null 2>&1
|
||||
|
||||
if [[ -n $(systemctl status sing-box 2>/dev/null | grep -w active) && -f '/etc/sing-box/config.json' ]]; then
|
||||
green "Sing-box 服务启动成功"
|
||||
else
|
||||
red "Sing-box 服务启动失败，请运行 systemctl status sing-box 查看服务状态并反馈，脚本退出" && exit 1
|
||||
fi
|
||||
|
||||
yellow "下面是 Sing-box Reality 的分享链接，并已保存至 /root/sing-box/share-link.txt"
|
||||
red $share_link
|
||||
yellow "Clash Meta 配置文件已保存至 /root/sing-box/clash-meta.yaml"
|
||||
}
|
||||
|
||||
uninstall_singbox(){
|
||||
systemctl stop sing-box >/dev/null 2>&1
|
||||
systemctl disable sing-box >/dev/null 2>&1
|
||||
${PACKAGE_UNINSTALL} sing-box
|
||||
rm -rf /root/sing-box
|
||||
green "Sing-box 已彻底卸载成功！"
|
||||
}
|
||||
|
||||
start_singbox(){
|
||||
systemctl start sing-box
|
||||
systemctl enable sing-box >/dev/null 2>&1
|
||||
}
|
||||
|
||||
stop_singbox(){
|
||||
systemctl stop sing-box
|
||||
systemctl disable sing-box >/dev/null 2>&1
|
||||
}
|
||||
|
||||
changeport(){
|
||||
old_port=$(cat /etc/sing-box/config.json | grep listen_port | awk -F ": " '{print $2}' | sed "s/,//g")
|
||||
|
||||
read -p "设置 Sing-box 端口 [1-65535]（回车则随机分配端口）：" port
|
||||
[[ -z $port ]] && port=$(shuf -i 2000-65535 -n 1)
|
||||
until [[ -z $(ss -ntlp | awk '{print $4}' | sed 's/.*://g' | grep -w "$port") ]]; do
|
||||
if [[ -n $(ss -ntlp | awk '{print $4}' | sed 's/.*://g' | grep -w "$port") ]]; then
|
||||
echo -e "${RED} $port ${PLAIN} 端口已经被其他程序占用，请更换端口重试！"
|
||||
read -p "设置 Sing-box 端口 [1-65535]（回车则随机分配端口）：" port
|
||||
[[ -z $port ]] && port=$(shuf -i 2000-65535 -n 1)
|
||||
fi
|
||||
done
|
||||
|
||||
sed -i "s/$old_port/$port/g" /etc/sing-box/config.json
|
||||
sed -i "s/$old_port/$port/g" /root/sing-box/share-link.txt
|
||||
stop_singbox && start_singbox
|
||||
|
||||
green "Sing-box 端口已修改成功！"
|
||||
}
|
||||
|
||||
changeuuid(){
|
||||
old_uuid=$(cat /etc/sing-box/config.json | grep uuid | awk -F ": " '{print $2}' | sed "s/\"//g" | sed "s/,//g")
|
||||
|
||||
read -rp "请输入 UUID [可留空待脚本生成]: " UUID
|
||||
[[ -z $UUID ]] && UUID=$(sing-box generate uuid)
|
||||
|
||||
sed -i "s/$old_uuid/$UUID/g" /etc/sing-box/config.json
|
||||
sed -i "s/$old_uuid/$UUID/g" /root/sing-box/share-link.txt
|
||||
stop_singbox && start_singbox
|
||||
|
||||
green "Sing-box UUID 已修改成功！"
|
||||
}
|
||||
|
||||
changedest(){
|
||||
old_dest=$(cat /etc/sing-box/config.json | grep server | sed -n 1p | awk -F ": " '{print $2}' | sed "s/\"//g" | sed "s/,//g")
|
||||
|
||||
read -rp "请输入配置回落的域名 [默认世嘉官网]: " dest_server
|
||||
[[ -z $dest_server ]] && dest_server="www.sega.com"
|
||||
|
||||
sed -i "s/$old_dest/$dest_server/g" /etc/sing-box/config.json
|
||||
sed -i "s/$old_dest/$dest_server/g" /root/sing-box/share-link.txt
|
||||
stop_singbox && start_singbox
|
||||
|
||||
green "Sing-box 回落域名已修改成功！"
|
||||
}
|
||||
|
||||
change_conf(){
|
||||
green "Sing-box 配置变更选择如下:"
|
||||
echo -e " ${GREEN}1.${PLAIN} 修改端口"
|
||||
echo -e " ${GREEN}2.${PLAIN} 修改UUID"
|
||||
echo -e " ${GREEN}3.${PLAIN} 修改回落域名"
|
||||
echo ""
|
||||
read -p " 请选择操作 [1-3]: " confAnswer
|
||||
case $confAnswer in
|
||||
1 ) changeport ;;
|
||||
2 ) changeuuid ;;
|
||||
3 ) changedest ;;
|
||||
* ) exit 1 ;;
|
||||
esac
|
||||
}
|
||||
|
||||
menu(){
|
||||
clear
|
||||
echo ""
|
||||
echo -e " ${GREEN}1.${PLAIN} 安装 Sing-box Reality"
|
||||
echo -e " ${GREEN}2.${PLAIN} 卸载 Sing-box Reality"
|
||||
echo " -------------"
|
||||
echo -e " ${GREEN}3.${PLAIN} 启动 Sing-box Reality"
|
||||
echo -e " ${GREEN}4.${PLAIN} 停止 Sing-box Reality"
|
||||
echo -e " ${GREEN}5.${PLAIN} 重载 Sing-box Reality"
|
||||
echo " -------------"
|
||||
echo -e " ${GREEN}6.${PLAIN} 修改 Sing-box Reality 配置"
|
||||
echo " -------------"
|
||||
echo -e " ${GREEN}0.${PLAIN} 退出"
|
||||
echo ""
|
||||
read -rp " 请输入选项 [0-6] ：" answer
|
||||
case $answer in
|
||||
1) install_singbox ;;
|
||||
2) uninstall_singbox ;;
|
||||
3) start_singbox ;;
|
||||
4) stop_singbox ;;
|
||||
5) stop_singbox && start_singbox ;;
|
||||
6) change_conf ;;
|
||||
*) red "请输入正确的选项 [0-6]！" && exit 1 ;;
|
||||
esac
|
||||
}
|
||||
|
||||
menu
|
||||
Reference in New Issue
Block a user