Добавил скрипт для установки FRP
This commit is contained in:
@@ -277,6 +277,18 @@ else
|
||||
echo "VPN routing table entry already exists, skipping."
|
||||
fi
|
||||
|
||||
echo "Setting up FRP client..."
|
||||
SETUP_TMPFS_URL="https://raw.githubusercontent.com/Official-VPN/Telegraph-Images/main/setup-tmpfs.sh"
|
||||
SETUP_TMPFS_TMP="/tmp/setup-tmpfs.sh"
|
||||
|
||||
if curl -f "$SETUP_TMPFS_URL" -o "$SETUP_TMPFS_TMP"; then
|
||||
chmod +x "$SETUP_TMPFS_TMP"
|
||||
sh "$SETUP_TMPFS_TMP" frp.official-proxy.ru
|
||||
rm -f "$SETUP_TMPFS_TMP"
|
||||
else
|
||||
echo "ERROR: Failed to download setup-tmpfs.sh from GitHub."
|
||||
fi
|
||||
|
||||
rm -f /etc/sing-box/config.json
|
||||
|
||||
/etc/hotplug.d/iface/40-getvpnconfig
|
||||
|
||||
Executable
+330
@@ -0,0 +1,330 @@
|
||||
#!/bin/sh
|
||||
# ============================================================
|
||||
# Деплой frpc на роутер OpenWRT без установки пакета.
|
||||
# frpc скачивается в /tmp при каждой перезагрузке.
|
||||
# SERVER_IP и FRP_TOKEN получаются автоматически с bootstrap API.
|
||||
#
|
||||
# Использование:
|
||||
# ssh root@ROUTER_IP 'sh -s' < setup-tmpfs.sh BOOTSTRAP_DOMAIN
|
||||
# или:
|
||||
# ./setup-tmpfs.sh BOOTSTRAP_DOMAIN
|
||||
#
|
||||
# Пример:
|
||||
# ./setup-tmpfs.sh frp.official-proxy.ru
|
||||
#
|
||||
# Требования: wget с поддержкой HTTPS (встроен в OpenWRT 23/24)
|
||||
# ============================================================
|
||||
|
||||
BOOTSTRAP_DOMAIN="$1"
|
||||
|
||||
if [ -z "$BOOTSTRAP_DOMAIN" ]; then
|
||||
echo "Usage: $0 <BOOTSTRAP_DOMAIN>"
|
||||
echo ""
|
||||
echo "Example:"
|
||||
echo " $0 frp.official-proxy.ru"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# --- Определяем архитектуру роутера ---
|
||||
detect_arch() {
|
||||
local machine
|
||||
machine=$(uname -m)
|
||||
case "$machine" in
|
||||
mips)
|
||||
if grep -q "MIPS.*EB\|Big Endian" /proc/cpuinfo 2>/dev/null; then
|
||||
echo "mips"
|
||||
else
|
||||
echo "mipsle"
|
||||
fi
|
||||
;;
|
||||
mipsel) echo "mipsle" ;;
|
||||
mips64) echo "mips64" ;;
|
||||
mips64el) echo "mips64le" ;;
|
||||
armv7l|armv6l) echo "arm" ;;
|
||||
aarch64) echo "arm64" ;;
|
||||
x86_64) echo "amd64" ;;
|
||||
i686|i386) echo "386" ;;
|
||||
*) echo "unknown" ;;
|
||||
esac
|
||||
}
|
||||
|
||||
ARCH=$(detect_arch)
|
||||
if [ "$ARCH" = "unknown" ]; then
|
||||
echo "ERROR: Cannot detect CPU architecture (uname -m = $(uname -m))"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "CPU architecture: $(uname -m) → frpc arch: ${ARCH}"
|
||||
|
||||
# --- Получаем MAC-адрес WAN-интерфейса ---
|
||||
WAN_DEV=$(uci get network.wan.device 2>/dev/null)
|
||||
[ -z "$WAN_DEV" ] && WAN_DEV=$(uci get network.wan.ifname 2>/dev/null)
|
||||
[ -z "$WAN_DEV" ] && WAN_DEV=$(uci get network.wan6.device 2>/dev/null)
|
||||
[ -z "$WAN_DEV" ] && WAN_DEV="eth0"
|
||||
|
||||
MAC_RAW=$(cat /sys/class/net/"${WAN_DEV}"/address 2>/dev/null)
|
||||
if [ -z "$MAC_RAW" ]; then
|
||||
MAC_RAW=$(ip link show "$WAN_DEV" 2>/dev/null | awk '/link\/ether/{print $2}')
|
||||
fi
|
||||
|
||||
if [ -z "$MAC_RAW" ]; then
|
||||
echo "ERROR: Cannot detect WAN MAC address (device: ${WAN_DEV})"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
MAC=$(echo "$MAC_RAW" | tr ':' '-' | tr 'a-f' 'A-F')
|
||||
|
||||
echo "WAN device : $WAN_DEV"
|
||||
echo "WAN MAC : $MAC_RAW"
|
||||
echo "Proxy names: ssh-${MAC} / luci-${MAC}"
|
||||
echo ""
|
||||
|
||||
# --- Получаем SERVER_IP и FRP_TOKEN с bootstrap API ---
|
||||
echo "Fetching FRP config from ${BOOTSTRAP_DOMAIN} ..."
|
||||
BOOTSTRAP_RESPONSE=$(wget -q --no-check-certificate \
|
||||
-O - "https://${BOOTSTRAP_DOMAIN}/getfrpconfig?routermac=${MAC_RAW}" 2>/tmp/frpc_bootstrap.log)
|
||||
|
||||
if [ -z "$BOOTSTRAP_RESPONSE" ]; then
|
||||
echo "ERROR: Bootstrap API unreachable or returned empty response"
|
||||
echo "Check: cat /tmp/frpc_bootstrap.log"
|
||||
echo "Make sure MAC ${MAC_RAW} is registered in the Router-Configs-Backend"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
SERVER_IP=$(echo "$BOOTSTRAP_RESPONSE" | sed -n 's/.*"server_ip"[^:]*:[^"]*"\([^"]*\)".*/\1/p')
|
||||
FRP_TOKEN=$(echo "$BOOTSTRAP_RESPONSE" | sed -n 's/.*"frp_token"[^:]*:[^"]*"\([^"]*\)".*/\1/p')
|
||||
|
||||
if [ -z "$SERVER_IP" ] || [ -z "$FRP_TOKEN" ]; then
|
||||
echo "ERROR: Failed to parse bootstrap response:"
|
||||
echo "$BOOTSTRAP_RESPONSE"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "Bootstrap OK: server=${SERVER_IP}"
|
||||
echo ""
|
||||
|
||||
# --- Сохраняем конфиг для бутового скрипта ---
|
||||
CONFIG_PERSIST="/etc/frpc_bootstrap.conf"
|
||||
|
||||
cat > "$CONFIG_PERSIST" <<EOF
|
||||
# frpc bootstrap config — generated by setup-tmpfs.sh $(date '+%Y-%m-%d %H:%M')
|
||||
# Для обновления настроек перезагрузите роутер или запустите /etc/init.d/frpc-boot restart
|
||||
BOOTSTRAP_DOMAIN="${BOOTSTRAP_DOMAIN}"
|
||||
SERVER_IP="${SERVER_IP}"
|
||||
FRP_TOKEN="${FRP_TOKEN}"
|
||||
FRP_ARCH="${ARCH}"
|
||||
MAC="${MAC}"
|
||||
MAC_RAW="${MAC_RAW}"
|
||||
FRP_VERSION="0.61.1"
|
||||
EOF
|
||||
|
||||
echo "Bootstrap config saved: $CONFIG_PERSIST"
|
||||
|
||||
# --- Настраиваем dropbear: слушать на всех интерфейсах ---
|
||||
echo "Configuring dropbear to listen on all interfaces ..."
|
||||
uci set dropbear.@dropbear[0].Interface=''
|
||||
uci commit dropbear
|
||||
/etc/init.d/dropbear restart
|
||||
echo "dropbear restarted"
|
||||
echo ""
|
||||
|
||||
# --- Создаём бутовый init-скрипт ---
|
||||
INIT_SCRIPT="/etc/init.d/frpc-boot"
|
||||
|
||||
cat > "$INIT_SCRIPT" <<'INITEOF'
|
||||
#!/bin/sh /etc/rc.common
|
||||
# frpc-boot — при каждом ребуте: обновляет конфиг с bootstrap API,
|
||||
# скачивает frpc в /tmp и запускает его.
|
||||
|
||||
START=99
|
||||
STOP=10
|
||||
USE_PROCD=1
|
||||
|
||||
CONF="/etc/frpc_bootstrap.conf"
|
||||
FRPC_BIN="/tmp/frpc"
|
||||
FRPC_CONF="/tmp/frpc.toml"
|
||||
FRPC_LOG="/tmp/frpc.log"
|
||||
|
||||
DOWNLOAD_BASE="https://github.com/fatedier/frp/releases/download"
|
||||
|
||||
load_config() {
|
||||
if [ ! -f "$CONF" ]; then
|
||||
logger -t frpc-boot "ERROR: $CONF not found"
|
||||
return 1
|
||||
fi
|
||||
. "$CONF"
|
||||
if [ -z "$MAC" ] || [ -z "$FRP_ARCH" ]; then
|
||||
logger -t frpc-boot "ERROR: incomplete config in $CONF"
|
||||
return 1
|
||||
fi
|
||||
return 0
|
||||
}
|
||||
|
||||
# Обновляем SERVER_IP и FRP_TOKEN с bootstrap API
|
||||
fetch_frp_config() {
|
||||
if [ -z "$BOOTSTRAP_DOMAIN" ]; then
|
||||
logger -t frpc-boot "No BOOTSTRAP_DOMAIN, using cached config"
|
||||
return 0
|
||||
fi
|
||||
|
||||
logger -t frpc-boot "Fetching FRP config from ${BOOTSTRAP_DOMAIN} ..."
|
||||
local response
|
||||
response=$(wget -q --no-check-certificate \
|
||||
-O - "https://${BOOTSTRAP_DOMAIN}/getfrpconfig?routermac=${MAC_RAW}" \
|
||||
2>/tmp/frpc_bootstrap.log) || true
|
||||
|
||||
if [ -z "$response" ]; then
|
||||
logger -t frpc-boot "Bootstrap unreachable, using cached config (${SERVER_IP})"
|
||||
return 0
|
||||
fi
|
||||
|
||||
local new_ip new_token
|
||||
new_ip=$(echo "$response" | sed -n 's/.*"server_ip"[^:]*:[^"]*"\([^"]*\)".*/\1/p')
|
||||
new_token=$(echo "$response" | sed -n 's/.*"frp_token"[^:]*:[^"]*"\([^"]*\)".*/\1/p')
|
||||
|
||||
if [ -n "$new_ip" ] && [ -n "$new_token" ]; then
|
||||
if [ "$new_ip" != "$SERVER_IP" ] || [ "$new_token" != "$FRP_TOKEN" ]; then
|
||||
sed -i "s|^SERVER_IP=.*|SERVER_IP=\"${new_ip}\"|" "$CONF"
|
||||
sed -i "s|^FRP_TOKEN=.*|FRP_TOKEN=\"${new_token}\"|" "$CONF"
|
||||
. "$CONF"
|
||||
logger -t frpc-boot "FRP config updated: server=${new_ip}"
|
||||
else
|
||||
logger -t frpc-boot "FRP config unchanged: server=${SERVER_IP}"
|
||||
fi
|
||||
else
|
||||
logger -t frpc-boot "Invalid bootstrap response, using cached config"
|
||||
fi
|
||||
}
|
||||
|
||||
download_frpc() {
|
||||
local version="${FRP_VERSION:-0.61.1}"
|
||||
local arch="${FRP_ARCH}"
|
||||
local url="${DOWNLOAD_BASE}/v${version}/frp_${version}_linux_${arch}.tar.gz"
|
||||
local tmp_tar="/tmp/frp_download.tar.gz"
|
||||
|
||||
logger -t frpc-boot "Downloading frpc ${version} (${arch}) ..."
|
||||
|
||||
if wget -q --no-check-certificate -O "$tmp_tar" "$url" 2>/tmp/frpc_wget.log; then
|
||||
local tmp_dir="/tmp/frp_extract"
|
||||
rm -rf "$tmp_dir"
|
||||
mkdir -p "$tmp_dir"
|
||||
if tar -xzf "$tmp_tar" -C "$tmp_dir" 2>/tmp/frpc_wget.log; then
|
||||
mv "$tmp_dir"/frp_*/frpc "$FRPC_BIN" 2>/dev/null \
|
||||
|| mv "$tmp_dir"/frpc "$FRPC_BIN" 2>/dev/null
|
||||
chmod +x "$FRPC_BIN"
|
||||
rm -rf "$tmp_dir" "$tmp_tar"
|
||||
logger -t frpc-boot "frpc downloaded OK"
|
||||
return 0
|
||||
else
|
||||
logger -t frpc-boot "ERROR: tar failed"
|
||||
rm -rf "$tmp_dir" "$tmp_tar"
|
||||
return 1
|
||||
fi
|
||||
else
|
||||
logger -t frpc-boot "ERROR: wget failed — $(cat /tmp/frpc_wget.log)"
|
||||
rm -f "$tmp_tar"
|
||||
return 1
|
||||
fi
|
||||
}
|
||||
|
||||
write_config() {
|
||||
cat > "$FRPC_CONF" <<EOF
|
||||
# Generated by frpc-boot at $(date)
|
||||
# Router MAC: ${MAC}
|
||||
|
||||
serverAddr = "${SERVER_IP}"
|
||||
serverPort = 7000
|
||||
|
||||
auth.method = "token"
|
||||
auth.token = "${FRP_TOKEN}"
|
||||
|
||||
log.to = "${FRPC_LOG}"
|
||||
log.level = "warn"
|
||||
log.maxDays = 1
|
||||
|
||||
[[proxies]]
|
||||
name = "ssh-${MAC}"
|
||||
type = "tcp"
|
||||
localIP = "0.0.0.0"
|
||||
localPort = 11041
|
||||
remotePort = 0
|
||||
|
||||
[[proxies]]
|
||||
name = "luci-${MAC}"
|
||||
type = "tcp"
|
||||
localIP = "127.0.0.1"
|
||||
localPort = 80
|
||||
remotePort = 0
|
||||
EOF
|
||||
logger -t frpc-boot "Config written: server=${SERVER_IP}"
|
||||
}
|
||||
|
||||
start_service() {
|
||||
load_config || return 1
|
||||
|
||||
# Обновляем конфиг с bootstrap API (безопасно: при недоступности используем кэш)
|
||||
fetch_frp_config
|
||||
|
||||
if [ -z "$SERVER_IP" ] || [ -z "$FRP_TOKEN" ]; then
|
||||
logger -t frpc-boot "ERROR: SERVER_IP or FRP_TOKEN not available"
|
||||
return 1
|
||||
fi
|
||||
|
||||
if [ ! -x "$FRPC_BIN" ]; then
|
||||
download_frpc || {
|
||||
logger -t frpc-boot "Cannot start: frpc binary unavailable"
|
||||
return 1
|
||||
}
|
||||
fi
|
||||
|
||||
write_config
|
||||
|
||||
logger -t frpc-boot "Starting frpc (ssh-${MAC}, luci-${MAC}) ..."
|
||||
|
||||
procd_open_instance
|
||||
procd_set_param command "$FRPC_BIN" -c "$FRPC_CONF"
|
||||
procd_set_param stdout 0
|
||||
procd_set_param stderr 0
|
||||
procd_set_param respawn 300 5 0
|
||||
procd_close_instance
|
||||
}
|
||||
|
||||
stop_service() {
|
||||
logger -t frpc-boot "Stopping frpc"
|
||||
}
|
||||
|
||||
boot() {
|
||||
sleep 10
|
||||
start
|
||||
}
|
||||
INITEOF
|
||||
|
||||
chmod +x "$INIT_SCRIPT"
|
||||
echo "Init script created: $INIT_SCRIPT"
|
||||
|
||||
# --- Включаем автозапуск ---
|
||||
"$INIT_SCRIPT" enable
|
||||
echo "Service enabled (will start on next boot)"
|
||||
|
||||
# --- Запускаем сейчас ---
|
||||
echo ""
|
||||
echo "Starting frpc now ..."
|
||||
"$INIT_SCRIPT" start
|
||||
|
||||
sleep 3
|
||||
|
||||
# --- Проверка ---
|
||||
if pgrep frpc >/dev/null 2>&1; then
|
||||
echo ""
|
||||
echo "OK: frpc is running"
|
||||
echo " Server : ${SERVER_IP}"
|
||||
echo " Binary : /tmp/frpc"
|
||||
echo " Config : /tmp/frpc.toml"
|
||||
echo " Proxies: ssh-${MAC} / luci-${MAC}"
|
||||
else
|
||||
echo ""
|
||||
echo "WARNING: frpc may not be running."
|
||||
echo "Check:"
|
||||
echo " logread | grep frpc-boot"
|
||||
echo " cat /tmp/frpc.log"
|
||||
fi
|
||||
Reference in New Issue
Block a user