mirror of
https://github.com/juewuy/ShellCrash.git
synced 2026-03-10 23:41:22 +00:00
112 lines
3.7 KiB
Bash
112 lines
3.7 KiB
Bash
#!/bin/sh
|
|
# Copyright (C) Juewuy
|
|
|
|
CRASHDIR="$(uci get firewall.ShellCrash.path | sed 's/\/starts.*//')"
|
|
#防止提前自启
|
|
/etc/init.d/shellcrash disable
|
|
crontab -l | grep -v 'start_legacy_wd.sh shellcrash' | crontab -
|
|
#防止usb未加载
|
|
i=0
|
|
while [ ! -f "$CRASHDIR/configs/ShellCrash.cfg" ]; do
|
|
[ $i -gt 20 ] && exit 1
|
|
i=$((i + 1))
|
|
sleep 3
|
|
done
|
|
. "$CRASHDIR"/configs/ShellCrash.cfg
|
|
|
|
autoSSH(){
|
|
#自动开启SSH
|
|
[ "`uci -c /usr/share/xiaoqiang get xiaoqiang_version.version.CHANNEL`" != 'stable' ] && {
|
|
uci -c /usr/share/xiaoqiang set xiaoqiang_version.version.CHANNEL='stable'
|
|
uci -c /usr/share/xiaoqiang commit xiaoqiang_version.version
|
|
}
|
|
[ -z "$(pidof dropbear)" -o -z "$(netstat -ntul | grep :22)" ] && {
|
|
sed -i 's/channel=.*/channel="debug"/g' /etc/init.d/dropbear
|
|
/etc/init.d/dropbear restart
|
|
[ -n "$mi_autoSSH_pwd" ] && echo -e "$mi_autoSSH_pwd\n$mi_autoSSH_pwd" | passwd root
|
|
}
|
|
#配置nvram
|
|
[ "$(nvram get ssh_en)" = 0 ] && nvram set ssh_en=1
|
|
[ "$(nvram get telnet_en)" = 0 ] && nvram set telnet_en=1
|
|
nvram commit &> /dev/null
|
|
#备份还原SSH秘钥
|
|
[ -f "$CRASHDIR"/configs/dropbear_rsa_host_key ] && ln -sf "$CRASHDIR"/configs/dropbear_rsa_host_key /etc/dropbear/dropbear_rsa_host_key
|
|
[ -f "$CRASHDIR"/configs/authorized_keys ] && ln -sf "$CRASHDIR"/configs/authorized_keys /etc/dropbear/authorized_keys
|
|
}
|
|
tunfix(){
|
|
ko_dir=$(modinfo ip_tables | grep -Eo '/lib/modules.*/ip_tables.ko' | sed 's|/ip_tables.ko||' )
|
|
#在/tmp创建并挂载overlay
|
|
mkdir -p /tmp/overlay
|
|
mkdir -p /tmp/overlay/upper
|
|
mkdir -p /tmp/overlay/work
|
|
mount -o noatime,lowerdir="$ko_dir",upperdir=/tmp/overlay/upper,workdir=/tmp/overlay/work -t overlay "overlay_mods_only" "$ko_dir"
|
|
#将tun.ko链接到lib
|
|
ln -sf "$CRASHDIR"/tools/tun.ko "$ko_dir"/tun.ko
|
|
}
|
|
tproxyfix(){
|
|
sed -i 's/sysctl -w net.bridge.bridge-nf-call-ip/#sysctl -w net.bridge.bridge-nf-call-ip/g' /etc/init.d/qca-nss-ecm
|
|
sysctl -w net.bridge.bridge-nf-call-iptables=0
|
|
sysctl -w net.bridge.bridge-nf-call-ip6tables=0
|
|
}
|
|
auto_clean(){
|
|
#自动清理升级备份文件夹
|
|
rm -rf /data/etc_bak
|
|
#自动清理被写入闪存的系统日志并禁止服务
|
|
/etc/init.d/stat_points stop 2>/dev/null
|
|
/etc/init.d/stat_points disable 2>/dev/null
|
|
sed -i '\#/logrotate#{ /^[[:space:]]*#/!s/^/#ShellCrash自动注释 / }' /etc/crontabs/root
|
|
sed -i '\#/sec_cfg_bak#{ /^[[:space:]]*#/!s/^/#ShellCrash自动注释 / }' /etc/crontabs/root
|
|
rm -rf /data/usr/log /data/usr/sec_cfg
|
|
|
|
}
|
|
auto_start(){
|
|
#设置init.d服务
|
|
[ ! -x /etc/init.d/shellcrash ] && {
|
|
cp -f "$CRASHDIR"/starts/shellcrash.procd /etc/init.d/shellcrash
|
|
chmod 755 /etc/init.d/shellcrash
|
|
}
|
|
#初始化环境变量
|
|
grep -q '^export CRASHDIR=' '/etc/profile' || {
|
|
. "$CRASHDIR"/libs/set_profile.sh
|
|
set_profile '/etc/profile'
|
|
}
|
|
#启动服务
|
|
if [ ! -f "$CRASHDIR"/.dis_startup ]; then
|
|
#AX6S/AX6000修复tun功能
|
|
[ -s "$CRASHDIR"/tools/tun.ko ] && tunfix
|
|
#小米7000/小米万兆修复tproxy
|
|
[ -f /etc/init.d/qca-nss-ecm ] && [ "$redir_mod" = 'Tproxy' ] && tproxyfix
|
|
#自动覆盖根证书文件
|
|
[ -s "$CRASHDIR"/tools/ca-certificates.crt ] && cp -f "$CRASHDIR"/tools/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
|
|
#启动服务
|
|
"$CRASHDIR"/start.sh stop
|
|
/etc/init.d/shellcrash start && /etc/init.d/shellcrash enable
|
|
fi
|
|
}
|
|
init(){
|
|
#等待启动完成
|
|
while ! ip a| grep -q lan; do
|
|
sleep 10
|
|
done
|
|
autoSSH #软固化功能
|
|
auto_clean #自动清理
|
|
auto_start
|
|
#启动自定义服务
|
|
[ -s /data/auto_start.sh ] && /bin/sh /data/auto_start.sh &
|
|
#兼容auto_ssh脚本
|
|
[ -s /data/auto_ssh/auto_ssh.sh ] && /bin/sh /data/auto_ssh/auto_ssh.sh &
|
|
}
|
|
|
|
case "$1" in
|
|
tunfix) tunfix ;;
|
|
tproxyfix) tproxyfix ;;
|
|
auto_clean) auto_clean ;;
|
|
init) init ;;
|
|
*)
|
|
if [ -z "$(pidof CrashCore)" ];then
|
|
init &
|
|
fi
|
|
;;
|
|
esac
|
|
|