Create cf-tunnel-mac
This commit is contained in:
antcorp
257
dev/cf-tunnel-mac
Normal file
257
dev/cf-tunnel-mac
Normal file
@@ -0,0 +1,257 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
# https://github.com/sky22333/shell
|
||||||
|
# macOS 兼容版本 - 修复了 BSD grep 和 launchctl 兼容性问题
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
# === 颜色定义 ===
|
||||||
|
RED='\033[0;31m'
|
||||||
|
GREEN='\033[0;32m'
|
||||||
|
YELLOW='\033[1;33m'
|
||||||
|
BLUE='\033[1;34m'
|
||||||
|
NC='\033[0m' # 清除颜色
|
||||||
|
|
||||||
|
# 检测操作系统与架构
|
||||||
|
OS_TYPE=$(uname -s)
|
||||||
|
ARCH=$(uname -m)
|
||||||
|
if [[ "$OS_TYPE" == "Darwin" ]]; then
|
||||||
|
# macOS 配置
|
||||||
|
if [[ "$ARCH" == "arm64" ]]; then
|
||||||
|
CLOUDFLARED_URL="https://github.com/cloudflare/cloudflared/releases/download/2025.8.0/cloudflared-darwin-arm64.tgz"
|
||||||
|
else
|
||||||
|
CLOUDFLARED_URL="https://github.com/cloudflare/cloudflared/releases/download/2025.8.0/cloudflared-darwin-amd64.tgz"
|
||||||
|
fi
|
||||||
|
CLOUDFLARED_BIN="/usr/local/bin/cloudflared"
|
||||||
|
SERVICE_PATH="$HOME/Library/LaunchAgents/com.cloudflare.cloudflared.plist"
|
||||||
|
LOG_PATH="$HOME/Library/Logs/cloudflared.log"
|
||||||
|
USE_LAUNCHCTL=true
|
||||||
|
else
|
||||||
|
# Linux 配置
|
||||||
|
if [[ "$ARCH" == "aarch64" || "$ARCH" == "arm64" ]]; then
|
||||||
|
CLOUDFLARED_URL="https://github.com/cloudflare/cloudflared/releases/download/2025.8.0/cloudflared-linux-arm64"
|
||||||
|
else
|
||||||
|
CLOUDFLARED_URL="https://github.com/cloudflare/cloudflared/releases/download/2025.8.0/cloudflared-linux-amd64"
|
||||||
|
fi
|
||||||
|
CLOUDFLARED_BIN="/usr/local/bin/cloudflared"
|
||||||
|
SERVICE_PATH="/etc/systemd/system/cloudflared-tunnel.service"
|
||||||
|
LOG_PATH="/var/log/cloudflared.log"
|
||||||
|
USE_LAUNCHCTL=false
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 检查 cloudflared 是否已存在
|
||||||
|
if [[ -f "$CLOUDFLARED_BIN" ]]; then
|
||||||
|
echo -e "${GREEN}已存在文件，跳过下载。${NC}"
|
||||||
|
else
|
||||||
|
echo -e "${BLUE}正在下载 cloudflared...${NC}"
|
||||||
|
if [[ "$OS_TYPE" == "Darwin" ]]; then
|
||||||
|
# macOS: 下载 tgz 包并解压出可执行文件
|
||||||
|
TMP_TGZ=$(mktemp /tmp/cloudflared.XXXXXX.tgz)
|
||||||
|
if ! curl -L "$CLOUDFLARED_URL" -o "$TMP_TGZ"; then
|
||||||
|
echo -e "${RED}下载失败，请检查网络连接或 URL。${NC}"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
tar -xzf "$TMP_TGZ" -C /tmp
|
||||||
|
# 解压后通常得到 cloudflared 可执行文件
|
||||||
|
if [[ -f "/tmp/cloudflared" ]]; then
|
||||||
|
sudo mv /tmp/cloudflared "$CLOUDFLARED_BIN"
|
||||||
|
else
|
||||||
|
# 有些发布包会包含子目录
|
||||||
|
FOUND=$(find /tmp -maxdepth 2 -type f -name cloudflared 2>/dev/null | head -n1)
|
||||||
|
if [[ -n "$FOUND" ]]; then
|
||||||
|
sudo mv "$FOUND" "$CLOUDFLARED_BIN"
|
||||||
|
else
|
||||||
|
echo -e "${RED}未能在压缩包中找到 cloudflared 可执行文件${NC}"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
rm -f "$TMP_TGZ"
|
||||||
|
else
|
||||||
|
# Linux: 直接下载二进制
|
||||||
|
if ! curl -L "$CLOUDFLARED_URL" -o "$CLOUDFLARED_BIN"; then
|
||||||
|
echo -e "${RED}下载失败，请检查网络连接或 URL。${NC}"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
chmod +x "$CLOUDFLARED_BIN"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 检查服务是否存在（根据系统选择 launchctl 或 systemd）
|
||||||
|
SERVICE_EXISTS=false
|
||||||
|
if [[ "$USE_LAUNCHCTL" == true ]]; then
|
||||||
|
if launchctl list | grep -q 'com.cloudflare.cloudflared'; then
|
||||||
|
SERVICE_EXISTS=true
|
||||||
|
echo -e "${YELLOW}已检测到 cloudflared launchctl 服务${NC}"
|
||||||
|
read -p "是否要卸载旧服务？(y/n): " UNINSTALL
|
||||||
|
if [[ "$UNINSTALL" == "y" || "$UNINSTALL" == "Y" ]]; then
|
||||||
|
echo -e "${BLUE}正在卸载旧服务...${NC}"
|
||||||
|
launchctl unload "$SERVICE_PATH" 2>/dev/null || true
|
||||||
|
rm -f "$SERVICE_PATH"
|
||||||
|
rm -f "$LOG_PATH"
|
||||||
|
SERVICE_EXISTS=false
|
||||||
|
echo -e "${GREEN}服务卸载完成${NC}"
|
||||||
|
else
|
||||||
|
echo -e "${YELLOW}将保留旧服务配置，仅修改穿透地址${NC}"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
if sudo systemctl list-units --full --all | grep -q 'cloudflared-tunnel.service'; then
|
||||||
|
SERVICE_EXISTS=true
|
||||||
|
echo -e "${YELLOW}已检测到 cloudflared-tunnel systemd 服务${NC}"
|
||||||
|
read -p "是否要卸载旧服务？(y/n): " UNINSTALL
|
||||||
|
if [[ "$UNINSTALL" == "y" || "$UNINSTALL" == "Y" ]]; then
|
||||||
|
echo -e "${BLUE}正在卸载旧服务...${NC}"
|
||||||
|
sudo systemctl stop cloudflared-tunnel || true
|
||||||
|
sudo systemctl disable cloudflared-tunnel || true
|
||||||
|
sudo rm -f "$SERVICE_PATH"
|
||||||
|
sudo rm -f "$LOG_PATH"
|
||||||
|
sudo systemctl daemon-reload
|
||||||
|
SERVICE_EXISTS=false
|
||||||
|
echo -e "${GREEN}服务卸载完成${NC}"
|
||||||
|
else
|
||||||
|
echo -e "${YELLOW}将保留旧服务配置，仅修改穿透地址${NC}"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 用户选择运行模式
|
||||||
|
echo ""
|
||||||
|
echo -e "${YELLOW}请选择运行模式：${NC}"
|
||||||
|
echo "1) 临时运行（前台运行并显示临时访问域名）"
|
||||||
|
echo "2) 后台运行（自动配置后台服务并显示访问域名）"
|
||||||
|
read -p "请输入 1 或 2: " MODE
|
||||||
|
|
||||||
|
# 输入内网地址
|
||||||
|
read -p "请输入要穿透的本地地址（例如 127.0.0.1:8080）: " LOCAL_ADDR
|
||||||
|
|
||||||
|
if [[ "$MODE" == "1" ]]; then
|
||||||
|
echo -e "${BLUE}正在前台运行 cloudflared...${NC}"
|
||||||
|
|
||||||
|
LOGFILE=$(mktemp)
|
||||||
|
# macOS 无 stdbuf，用 script 捕获输出（同时兼容 Linux）
|
||||||
|
if command -v stdbuf >/dev/null 2>&1; then
|
||||||
|
stdbuf -oL "$CLOUDFLARED_BIN" tunnel --url "$LOCAL_ADDR" 2>&1 | tee "$LOGFILE" &
|
||||||
|
else
|
||||||
|
"$CLOUDFLARED_BIN" tunnel --url "$LOCAL_ADDR" 2>&1 | tee "$LOGFILE" &
|
||||||
|
fi
|
||||||
|
PID=$!
|
||||||
|
|
||||||
|
echo -e "${YELLOW}等待 cloudflared 输出访问域名...${NC}"
|
||||||
|
|
||||||
|
for i in {1..30}; do
|
||||||
|
# BSD grep 无 -P，用 -E 实现扩展正则
|
||||||
|
DOMAIN=$(grep -Eo 'https://[A-Za-z0-9-]+\.trycloudflare\.com' "$LOGFILE" | head -n1)
|
||||||
|
if [[ -n "$DOMAIN" ]]; then
|
||||||
|
echo ""
|
||||||
|
echo -e "${GREEN}成功获取公网临时访问域名：$DOMAIN${NC}"
|
||||||
|
echo ""
|
||||||
|
wait $PID
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
sleep 1
|
||||||
|
done
|
||||||
|
|
||||||
|
echo -e "${RED}超时未能获取临时域名，日志保存在：$LOGFILE${NC}"
|
||||||
|
kill $PID 2>/dev/null || true
|
||||||
|
exit 1
|
||||||
|
|
||||||
|
elif [[ "$MODE" == "2" ]]; then
|
||||||
|
if [[ "$USE_LAUNCHCTL" == true ]]; then
|
||||||
|
echo -e "${BLUE}正在配置 launchctl 服务...${NC}"
|
||||||
|
mkdir -p "$(dirname "$SERVICE_PATH")" "$(dirname "$LOG_PATH")"
|
||||||
|
cat > "$SERVICE_PATH" <<EOF
|
||||||
|
<?xml version="1.0" encoding="UTF-8"?>
|
||||||
|
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
||||||
|
<plist version="1.0">
|
||||||
|
<dict>
|
||||||
|
<key>Label</key>
|
||||||
|
<string>com.cloudflare.cloudflared</string>
|
||||||
|
<key>ProgramArguments</key>
|
||||||
|
<array>
|
||||||
|
<string>$CLOUDFLARED_BIN</string>
|
||||||
|
<string>tunnel</string>
|
||||||
|
<string>--url</string>
|
||||||
|
<string>$LOCAL_ADDR</string>
|
||||||
|
</array>
|
||||||
|
<key>RunAtLoad</key>
|
||||||
|
<true/>
|
||||||
|
<key>StandardOutPath</key>
|
||||||
|
<string>$LOG_PATH</string>
|
||||||
|
<key>StandardErrorPath</key>
|
||||||
|
<string>$LOG_PATH</string>
|
||||||
|
</dict>
|
||||||
|
</plist>
|
||||||
|
EOF
|
||||||
|
launchctl unload "$SERVICE_PATH" 2>/dev/null || true
|
||||||
|
launchctl load "$SERVICE_PATH"
|
||||||
|
launchctl start com.cloudflare.cloudflared || true
|
||||||
|
else
|
||||||
|
echo -e "${BLUE}正在配置 systemd 服务...${NC}"
|
||||||
|
|
||||||
|
if [[ "$SERVICE_EXISTS" == false ]]; then
|
||||||
|
sudo bash -c "cat > $SERVICE_PATH" <<EOF
|
||||||
|
[Unit]
|
||||||
|
Description=Cloudflared Tunnel Service
|
||||||
|
After=network.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
ExecStart=$CLOUDFLARED_BIN tunnel --url $LOCAL_ADDR
|
||||||
|
Restart=always
|
||||||
|
StandardOutput=append:$LOG_PATH
|
||||||
|
StandardError=append:$LOG_PATH
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
EOF
|
||||||
|
sudo systemctl daemon-reload
|
||||||
|
sudo systemctl enable --now cloudflared-tunnel
|
||||||
|
else
|
||||||
|
echo -e "${YELLOW}更新 systemd 服务配置中的穿透地址...${NC}"
|
||||||
|
sudo truncate -s 0 "$LOG_PATH" || sudo bash -c "> $LOG_PATH"
|
||||||
|
sudo sed -i "s|ExecStart=.*|ExecStart=$CLOUDFLARED_BIN tunnel --url $LOCAL_ADDR|" "$SERVICE_PATH"
|
||||||
|
sudo systemctl daemon-reload
|
||||||
|
sudo systemctl restart cloudflared-tunnel
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo -e "${GREEN}服务已启动，日志保存在 $LOG_PATH${NC}"
|
||||||
|
echo -e "${YELLOW}等待 cloudflared 输出访问域名...${NC}"
|
||||||
|
|
||||||
|
# 等待日志文件创建
|
||||||
|
for i in {1..10}; do
|
||||||
|
if [[ -f "$LOG_PATH" ]]; then
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
sleep 1
|
||||||
|
done
|
||||||
|
|
||||||
|
# 如果日志文件仍不存在，尝试创建
|
||||||
|
if [[ ! -f "$LOG_PATH" ]]; then
|
||||||
|
mkdir -p "$(dirname "$LOG_PATH")"
|
||||||
|
touch "$LOG_PATH" 2>/dev/null || true
|
||||||
|
fi
|
||||||
|
|
||||||
|
for i in {1..30}; do
|
||||||
|
if [[ -f "$LOG_PATH" ]]; then
|
||||||
|
DOMAIN=$(grep -Eo 'https://[A-Za-z0-9-]+\.trycloudflare\.com' "$LOG_PATH" 2>/dev/null | head -n1)
|
||||||
|
if [[ -n "$DOMAIN" ]]; then
|
||||||
|
echo ""
|
||||||
|
echo -e "${GREEN}成功获取公网访问域名：$DOMAIN${NC}"
|
||||||
|
echo ""
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
sleep 1
|
||||||
|
done
|
||||||
|
|
||||||
|
echo -e "${RED}超时未能获取公网访问域名，请稍后手动查看：$LOG_PATH${NC}"
|
||||||
|
if [[ "$USE_LAUNCHCTL" == true ]]; then
|
||||||
|
echo -e "${YELLOW}您也可以使用以下命令查看服务状态：${NC}"
|
||||||
|
echo "launchctl list | grep cloudflared"
|
||||||
|
echo "tail -f $LOG_PATH"
|
||||||
|
fi
|
||||||
|
exit 1
|
||||||
|
|
||||||
|
else
|
||||||
|
echo -e "${RED}无效输入，请输入 1 或 2${NC}"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
Reference in New Issue
Block a user