using ProxySU_Core.Tools; using Renci.SshNet; using System; using System.Collections.Generic; using System.Collections.ObjectModel; using System.IO; using System.Linq; using System.Text; using System.Threading.Tasks; using System.Windows; namespace ProxySU_Core.ViewModels.Developers { public enum CmdType { None, Apt, Dnf, Yum } public abstract class Project : BaseModel where TParameters : IParameters { private SshClient _sshClient; protected Action WriteOutput; protected CmdType CmdType { get; set; } protected bool IsSELinux { get; set; } protected bool OnlyIpv6 { get; set; } protected string IPv4 { get; set; } protected string IPv6 { get; set; } protected TParameters Parameters { get; set; } public Project(SshClient sshClient, TParameters parameters, Action writeOutput) { _sshClient = sshClient; WriteOutput = writeOutput; Parameters = parameters; } protected string RunCmd(string cmdStr) { var cmd = _sshClient.CreateCommand(cmdStr); WriteOutput(cmdStr); var result = cmd.Execute(); WriteOutput(result); return result; } /// /// 执行安装命令 /// public abstract void Execute(); /// /// 配置系统基础环境 /// protected void EnsureSystemEnv() { string cmd; // 确认安装命令 if (CmdType == CmdType.None) { cmd = RunCmd("command -v apt-get"); if (!string.IsNullOrEmpty(cmd)) { CmdType = CmdType.Apt; } } if (CmdType == CmdType.None) { cmd = RunCmd("command -v dnf"); if (!string.IsNullOrEmpty(cmd)) { CmdType = CmdType.Dnf; } } if (CmdType == CmdType.None) { cmd = RunCmd("command -v yum"); if (!string.IsNullOrEmpty(cmd)) { CmdType = CmdType.Yum; } } // systemctl cmd = RunCmd("command -v systemctl"); var hasSystemCtl = !string.IsNullOrEmpty(cmd); // SELinux cmd = RunCmd("command -v getenforce"); IsSELinux = !string.IsNullOrEmpty(cmd); if (CmdType == CmdType.None || !hasSystemCtl) { throw new Exception("系统缺乏必要的安装组件如:apt-get||dnf||yum||Syetemd,主机系统推荐使用:CentOS 7/8,Debian 8/9/10,Ubuntu 16.04及以上版本"); } // 判断是否启用了SELinux,如果启用了,并且工作在Enforcing模式下,则改为Permissive模式 if (IsSELinux) { cmd = RunCmd("getenforce"); // 检测到系统启用SELinux,且工作在严格模式下,需改为宽松模式 if (cmd.Contains("Enforcing")) { RunCmd("setenforce 0"); RunCmd(@"sed -i 's/SELINUX=enforcing/SELINUX=permissive/' /etc/selinux/config"); } } } /// /// 确保Root账户登陆 /// protected void EnsureRootAuth() { // 禁止一些可能产生的干扰信息 RunCmd(@"sed -i 's/echo/#echo/g' ~/.bashrc"); RunCmd(@"sed -i 's/echo/#echo/g' ~/.profile"); // 检测是否运行在Root权限下 var cmd = RunCmd("id -u"); if (!cmd.Equals("0\n")) { throw new Exception("请使用Root账户登陆主机"); } } /// /// 配置IPV6环境 /// protected void ConfigureIPv6() { if (IsOnlyIpv6()) { SetNat64(); } } /// /// 配置必要的软件 /// protected void ConfigureSoftware() { // 安装curl,wget,unzip string cmd = RunCmd("command -v curl"); if (string.IsNullOrEmpty(cmd)) { RunCmd(GetInstallCmd("curl")); } cmd = RunCmd("command -v wget"); if (string.IsNullOrEmpty(cmd)) { RunCmd(GetInstallCmd("wget")); } cmd = RunCmd("command -v unzip"); if (string.IsNullOrEmpty(cmd)) { RunCmd(GetInstallCmd("unzip")); } // 安装dig cmd = RunCmd("command -v dig"); if (string.IsNullOrEmpty(cmd)) { if (CmdType == CmdType.Apt) { RunCmd(GetUpdateCmd()); RunCmd(GetInstallCmd("dnsutils")); } else if (CmdType == CmdType.Dnf) { RunCmd(GetUpdateCmd()); RunCmd(GetInstallCmd("bind-utils")); } else if (CmdType == CmdType.Yum) { RunCmd(GetUpdateCmd()); RunCmd(GetInstallCmd("bind-utils")); } } // 处理极其少见的xz-utils未安装的情况 if (CmdType == CmdType.Apt) { RunCmd(GetInstallCmd("xz-utils")); } else { RunCmd(GetInstallCmd("xz-devel")); } // 检测是否安装lsof cmd = RunCmd("command -v lsof"); if (string.IsNullOrEmpty(cmd)) { RunCmd(GetInstallCmd("lsof")); } } /// /// 配置防火墙 /// protected void ConfigureFirewall() { string cmd; cmd = RunCmd("command -v firewall-cmd"); if (!string.IsNullOrEmpty(cmd)) { //有很奇怪的vps主机,在firewalld未运行时,端口是关闭的,无法访问。所以要先启动firewalld //用于保证acme.sh申请证书成功 cmd = RunCmd("firewall-cmd --state"); if (cmd.Trim() != "running") { RunCmd("systemctl restart firewalld"); } if (Parameters.Port == 443) { RunCmd("firewall-cmd --zone=public --add-port=80/tcp --permanent"); RunCmd("firewall-cmd --zone=public --add-port=443/tcp --permanent"); RunCmd("firewall-cmd --zone=public --add-port=80/udp --permanent"); RunCmd("firewall-cmd --zone=public --add-port=443/udp --permanent"); RunCmd("yes | firewall-cmd --reload"); } else { RunCmd($"firewall-cmd --zone=public --add-port={Parameters.Port}/tcp --permanent"); RunCmd($"firewall-cmd --zone=public --add-port={Parameters.Port}/udp --permanent"); RunCmd("yes | firewall-cmd --reload"); } return; } cmd = RunCmd("command -v ufw"); if (!string.IsNullOrEmpty(cmd)) { if (Parameters.Port == 443) { RunCmd("ufw allow 80/tcp"); RunCmd("ufw allow 443/tcp"); RunCmd("ufw allow 80/udp"); RunCmd("ufw allow 443/udp"); RunCmd("yes | ufw reload"); } else { RunCmd($"ufw allow {Parameters.Port}/tcp"); RunCmd($"ufw allow {Parameters.Port}/udp"); RunCmd("yes | ufw reload"); } } } /// /// 配置同步时间差 /// protected void SyncTimeDiff() { RunCmd("rm -f /etc/localtime"); RunCmd("ln -s /usr/share/zoneinfo/UTC /etc/localtime"); var result = RunCmd("date +%s"); var vpsSeconds = Convert.ToInt64(result); var localSeconds = (int)(DateTime.Now.ToUniversalTime() - DateTime.Parse("1970-01-01")).TotalSeconds; if (Math.Abs(vpsSeconds - localSeconds) >= 90) { // 同步本地时间 var netUtcTime = DateTimeUtils.GetUTCTime(); DateTimeUtils.SetDate(netUtcTime.ToLocalTime()); // 同步VPS时间 var utcTS = DateTimeUtils.GetUTCTime() - new DateTime(1970, 1, 1, 0, 0, 0, 0); long timeStampVPS = Convert.ToInt64(utcTS.TotalSeconds); RunCmd($"date --set=\"$(date \"+%Y-%m-%d %H:%M:%S\" -d @{timeStampVPS.ToString()})\""); } } /// /// 验证域名是否绑定了主机 /// protected void ValidateDomain() { if (OnlyIpv6) { string cmdFilter = @"| grep -oE '(([0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))' | head -n 1"; var cmd = $"dig @resolver1.opendns.com AAAA {Parameters.Domain} +short -6 {cmdFilter}"; var result = RunCmd(cmd).TrimEnd('\r', '\n'); if (result != IPv6) { } } else { string cmdFilter = @"| grep -oE '[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+' | head -n 1"; var cmd = $"dig @resolver1.opendns.com A {Parameters.Domain} +short -4 {cmdFilter}"; var result = RunCmd(cmd).TrimEnd('\r', '\n'); if (result != IPv4) { throw new Exception("域名未能解析到服务器IP,请检查域名配置"); } } } /// /// 判断是否安装某个软件 /// /// /// protected bool FileExists(string path) { var cmdStr = $"if [[ -f {path} ]];then echo '1';else echo '0'; fi"; var cmd = RunCmd(cmdStr); return cmd.Trim() == "1"; } #region 检测系统环境 private bool IsOnlyIpv6() { string cmd; cmd = RunCmd(@"curl -s https://api.ip.sb/ip --ipv4 --max-time 8"); IPv4 = cmd.TrimEnd('\r', '\n'); if (!string.IsNullOrEmpty(IPv4)) { OnlyIpv6 = false; return false; } cmd = RunCmd(@"curl -s https://api.ip.sb/ip --ipv6 --max-time 8"); IPv6 = cmd.TrimEnd('\r', '\n'); if (string.IsNullOrEmpty(IPv6)) { throw new Exception("未检测可用的的IP地址"); } OnlyIpv6 = true; return OnlyIpv6; } private bool SetPortFree(int port, bool force = true) { string result = RunCmd($"lsof -n -P -i :{port} | grep LISTEN"); if (!string.IsNullOrEmpty(result)) { if (force) { var btnResult = MessageBox.Show("80/443端口之一,或全部被占用,将强制停止占用80/443端口的程序?", "提示", MessageBoxButton.YesNo); if (btnResult == MessageBoxResult.No) { throw new Exception($"{port}端口被占用,安装停止!"); } string[] process = result.Split(' '); RunCmd($"systemctl stop {process[0]}"); RunCmd($"systemctl disable {process[0]}"); RunCmd($"pkill {process[0]}"); return SetPortFree(port, force: false); } else { return false; } } return true; } private void ConfigurePort(bool force = true) { if (Parameters.Port == 80 || Parameters.Port == 443) { SetPortFree(80); SetPortFree(443); } else { SetPortFree(Parameters.Port); } } private void SetNat64() { var dns64List = FilterFastestIP(); if (dns64List.Count == 0) { throw new Exception("未找到有效的Nat64网关"); } var exists = FileExists("/etc/resolv.conf.proxysu"); if (!exists) { var cmdStr = @"mv /etc/resolv.conf /etc/resolv.conf.proxysu"; RunCmd(cmdStr); } foreach (var gateip in dns64List) { RunCmd($"echo \"nameserver {gateip}\" > /etc/resolv.conf"); } } private void RemoveNat64() { RunCmd("rm /etc/resolv.conf"); RunCmd("mv /etc/resolv.conf.proxysu /etc/resolv.conf"); } private List FilterFastestIP() { string[] gateNat64 = { "2a01:4f9:c010:3f02::1", "2001:67c:2b0::4", "2001:67c:2b0::6", "2a09:11c0:f1:bbf0::70", "2a01:4f8:c2c:123f::1", "2001:67c:27e4:15::6411", "2001:67c:27e4::64", "2001:67c:27e4:15::64", "2001:67c:27e4::60", "2a00:1098:2b::1", "2a03:7900:2:0:31:3:104:161", "2a00:1098:2c::1", "2a09:11c0:100::53", }; Dictionary dns64List = new Dictionary(); foreach (var gateip in gateNat64) { var cmdStr = $"ping6 -c4 {gateip} | grep avg | awk '{{print $4}}'|cut -d/ -f2"; var cmd = RunCmd(cmdStr); if (!string.IsNullOrEmpty(cmd)) { if (float.TryParse(cmd, out float delay)) { dns64List.Add(gateip, delay); } } } return dns64List.Keys.ToList(); } #endregion protected void UploadFile(Stream stream, string path) { using (var sftp = new SftpClient(_sshClient.ConnectionInfo)) { sftp.Connect(); sftp.UploadFile(stream, path, true); sftp.Disconnect(); } } /// /// 根据系统环境匹配更新命令 /// /// protected string GetUpdateCmd() { if (CmdType == CmdType.Apt) { return "apt-get update "; } else if (CmdType == CmdType.Dnf) { return "dnf clean all;dnf makecache"; } else if (CmdType == CmdType.Yum) { return "yum clean all;yum makecache"; } throw new Exception("未识别的系统"); } /// /// 根据系统匹配安装命令 /// /// /// protected string GetInstallCmd(string soft) { if (CmdType == CmdType.Apt) { return "apt-get install " + soft; } else if (CmdType == CmdType.Dnf) { return "dnf -y install " + soft; } else if (CmdType == CmdType.Yum) { return "yum -y install " + soft; } throw new Exception("未识别的系统"); } } }