mirror of
https://github.com/proxysu/ProxySU.git
synced 2024-11-26 23:26:08 +03:00
439 lines
16 KiB
C#
439 lines
16 KiB
C#
using Renci.SshNet;
|
||
using System;
|
||
using System.Collections.Generic;
|
||
using System.IO;
|
||
using System.Text;
|
||
using System.Windows;
|
||
using Newtonsoft.Json;
|
||
using Newtonsoft.Json.Linq;
|
||
using ProxySU_Core.Models;
|
||
|
||
namespace ProxySU_Core.Models.Developers
|
||
{
|
||
public class XrayProject : Project<XraySettings>
|
||
{
|
||
|
||
private const string ServerLogDir = @"Templates\xray\server\00_log";
|
||
private const string ServerApiDir = @"Templates\xray\server\01_api";
|
||
private const string ServerDnsDir = @"Templates\xray\server\02_dns";
|
||
private const string ServerRoutingDir = @"Templates\xray\server\03_routing";
|
||
private const string ServerPolicyDir = @"Templates\xray\server\04_policy";
|
||
private const string ServerInboundsDir = @"Templates\xray\server\05_inbounds";
|
||
private const string ServerOutboundsDir = @"Templates\xray\server\06_outbounds";
|
||
private const string ServerTransportDir = @"Templates\xray\server\07_transport";
|
||
private const string ServerStatsDir = @"Templates\xray\server\08_stats";
|
||
private const string ServerReverseDir = @"Templates\xray\server\09_reverse";
|
||
private const string CaddyFileDir = @"Templates\xray\caddy";
|
||
|
||
public XrayProject(SshClient sshClient, XraySettings parameters, Action<string> writeOutput) : base(sshClient, parameters, writeOutput)
|
||
{
|
||
}
|
||
|
||
|
||
/// <summary>
|
||
/// 安装Xray
|
||
/// </summary>
|
||
public override void Install()
|
||
{
|
||
try
|
||
{
|
||
EnsureRootAuth();
|
||
|
||
if (FileExists("/usr/local/bin/xray"))
|
||
{
|
||
var btnResult = MessageBox.Show("已经安装Xray，是否需要重装？", "提示", MessageBoxButton.YesNo);
|
||
if (btnResult == MessageBoxResult.No)
|
||
{
|
||
MessageBox.Show("安装终止", "提示");
|
||
return;
|
||
}
|
||
}
|
||
|
||
WriteOutput("检测安装系统环境...");
|
||
EnsureSystemEnv();
|
||
WriteOutput("检测安装系统环境完成");
|
||
|
||
WriteOutput("配置服务器端口...");
|
||
ConfigurePort();
|
||
WriteOutput("端口配置完成");
|
||
|
||
WriteOutput("安装必要的系统工具...");
|
||
ConfigureSoftware();
|
||
WriteOutput("系统工具安装完成");
|
||
|
||
WriteOutput("检测IP6...");
|
||
ConfigureIPv6();
|
||
WriteOutput("检测IP6完成");
|
||
|
||
WriteOutput("配置防火墙...");
|
||
ConfigureFirewall();
|
||
WriteOutput("防火墙配置完成");
|
||
|
||
WriteOutput("同步系统和本地时间...");
|
||
SyncTimeDiff();
|
||
WriteOutput("时间同步完成");
|
||
|
||
WriteOutput("检测域名是否绑定本机IP...");
|
||
ValidateDomain();
|
||
WriteOutput("域名检测完成");
|
||
|
||
WriteOutput("安装Xray-Core...");
|
||
InstallXrayWithCert();
|
||
WriteOutput("Xray-Core安装完成");
|
||
|
||
WriteOutput("安装Caddy...");
|
||
InstallCaddy();
|
||
WriteOutput("Caddy安装完成");
|
||
|
||
WriteOutput("启动BBR");
|
||
EnableBBR();
|
||
|
||
UploadCaddyFile();
|
||
WriteOutput("************");
|
||
WriteOutput("安装完成，尽情享用吧......");
|
||
WriteOutput("************");
|
||
}
|
||
catch (Exception ex)
|
||
{
|
||
var errorLog = "安装终止，" + ex.Message;
|
||
WriteOutput(errorLog);
|
||
MessageBox.Show(errorLog);
|
||
}
|
||
}
|
||
|
||
public void Uninstall()
|
||
{
|
||
EnsureRootAuth();
|
||
WriteOutput("卸载Caddy");
|
||
UninstallCaddy();
|
||
WriteOutput("卸载Xray");
|
||
UninstallXray();
|
||
WriteOutput("卸载证书");
|
||
UninstallAcme();
|
||
WriteOutput("关闭端口");
|
||
ClosePort(Parameters.ShadowSocksPort, Parameters.KcpPort);
|
||
|
||
WriteOutput("************ 卸载完成 ************");
|
||
}
|
||
|
||
/// <summary>
|
||
/// 更新xray内核
|
||
/// </summary>
|
||
public void UpdateXrayCore()
|
||
{
|
||
EnsureRootAuth();
|
||
EnsureSystemEnv();
|
||
RunCmd("bash -c \"$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)\" @ install");
|
||
RunCmd("systemctl restart xray");
|
||
WriteOutput("************ 更新xray内核完成 ************");
|
||
}
|
||
|
||
/// <summary>
|
||
/// 更新xray配置
|
||
/// </summary>
|
||
public void UpdateXraySettings()
|
||
{
|
||
EnsureRootAuth();
|
||
EnsureSystemEnv();
|
||
ConfigureFirewall();
|
||
var configJson = ConfigBuilder.BuildXrayConfig(Parameters);
|
||
var stream = new MemoryStream(Encoding.UTF8.GetBytes(configJson));
|
||
RunCmd("rm -rf /usr/local/etc/xray/config.json");
|
||
UploadFile(stream, "/usr/local/etc/xray/config.json");
|
||
ConfigurePort();
|
||
UploadCaddyFile(string.IsNullOrEmpty(Parameters.MaskDomain));
|
||
RunCmd("systemctl restart xray");
|
||
WriteOutput("************ 更新Xray配置成功，更新配置不包含域名，如果域名更换请重新安装。 ************");
|
||
}
|
||
|
||
/// <summary>
|
||
/// 重装Caddy
|
||
/// </summary>
|
||
public void ReinstallCaddy()
|
||
{
|
||
EnsureRootAuth();
|
||
EnsureSystemEnv();
|
||
InstallCaddy();
|
||
UploadCaddyFile();
|
||
WriteOutput("************ 重装Caddy完成 ************");
|
||
}
|
||
|
||
/// <summary>
|
||
/// 安装证书
|
||
/// </summary>
|
||
public void InstallCert()
|
||
{
|
||
EnsureRootAuth();
|
||
EnsureSystemEnv();
|
||
this.InstallCertToXray();
|
||
RunCmd("systemctl restart xray");
|
||
WriteOutput("************ 安装证书完成 ************");
|
||
}
|
||
|
||
/// <summary>
|
||
/// 上传证书
|
||
/// </summary>
|
||
/// <param name="keyStrem"></param>
|
||
/// <param name="crtStream"></param>
|
||
public void UploadCert(Stream stream)
|
||
{
|
||
EnsureRootAuth();
|
||
EnsureSystemEnv();
|
||
|
||
// 转移旧文件
|
||
var oldFileName = $"ssl_{DateTime.Now.Ticks}";
|
||
RunCmd($"mv /usr/local/etc/xray/ssl /usr/local/etc/xray/{oldFileName}");
|
||
|
||
// 上传新文件
|
||
RunCmd("mkdir /usr/local/etc/xray/ssl");
|
||
UploadFile(stream, "/usr/local/etc/xray/ssl/ssl.zip");
|
||
RunCmd("unzip /usr/local/etc/xray/ssl/ssl.zip -d /usr/local/etc/xray/ssl");
|
||
|
||
// 改名
|
||
var crtFiles = RunCmd("find /usr/local/etc/xray/ssl/*.crt").Split("\n".ToCharArray(), StringSplitOptions.RemoveEmptyEntries);
|
||
if (crtFiles.Length > 0)
|
||
{
|
||
RunCmd($"mv {crtFiles[0]} /usr/local/etc/xray/ssl/xray_ssl.crt");
|
||
}
|
||
else
|
||
{
|
||
WriteOutput("************ 上传证书失败，请联系开发者 ************");
|
||
RunCmd("rm -rf /usr/local/etc/xray/ssl");
|
||
RunCmd($"mv /usr/local/etc/xray/ssl{oldFileName} /usr/local/etc/xray/ssl");
|
||
WriteOutput("操作已回滚");
|
||
return;
|
||
}
|
||
|
||
var keyFiles = RunCmd("find /usr/local/etc/xray/ssl/*.key").Split("\n".ToCharArray(), StringSplitOptions.RemoveEmptyEntries);
|
||
if (keyFiles.Length > 0)
|
||
{
|
||
RunCmd($"mv {keyFiles[0]} /usr/local/etc/xray/ssl/xray_ssl.key");
|
||
}
|
||
else
|
||
{
|
||
WriteOutput("************ 上传证书失败，请联系开发者 ************");
|
||
RunCmd("rm -rf /usr/local/etc/xray/ssl");
|
||
RunCmd($"mv /usr/local/etc/xray/ssl{oldFileName} /usr/local/etc/xray/ssl");
|
||
WriteOutput("操作已回滚");
|
||
return;
|
||
}
|
||
|
||
RunCmd("systemctl restart xray");
|
||
WriteOutput("************ 上传证书完成 ************");
|
||
}
|
||
|
||
/// <summary>
|
||
/// 上传静态网站
|
||
/// </summary>
|
||
/// <param name="stream"></param>
|
||
public void UploadWeb(Stream stream)
|
||
{
|
||
EnsureRootAuth();
|
||
EnsureSystemEnv();
|
||
if (!FileExists("/usr/share/caddy"))
|
||
{
|
||
RunCmd("mkdir /usr/share/caddy");
|
||
}
|
||
RunCmd("rm -rf /usr/share/caddy/*");
|
||
UploadFile(stream, "/usr/share/caddy/caddy.zip");
|
||
RunCmd("unzip /usr/share/caddy/caddy.zip -d /usr/share/caddy");
|
||
RunCmd("chmod -R 777 /usr/share/caddy");
|
||
UploadCaddyFile(useCustomWeb: true);
|
||
WriteOutput("************ 上传网站模板完成 ************");
|
||
}
|
||
|
||
|
||
private void UploadCaddyFile(bool useCustomWeb = false)
|
||
{
|
||
var configJson = ConfigBuilder.BuildCaddyConfig(Parameters, useCustomWeb);
|
||
var stream = new MemoryStream(Encoding.UTF8.GetBytes(configJson));
|
||
RunCmd("mv /etc/caddy/Caddyfile /etc/caddy/Caddyfile.back");
|
||
UploadFile(stream, "/etc/caddy/Caddyfile");
|
||
RunCmd("systemctl restart caddy");
|
||
}
|
||
|
||
private void EnableBBR()
|
||
{
|
||
var osVersion = RunCmd("uname -r");
|
||
var canInstallBBR = CheckKernelVersionBBR(osVersion.Split('-')[0]);
|
||
|
||
var bbrInfo = RunCmd("sysctl net.ipv4.tcp_congestion_control | grep bbr");
|
||
var installed = bbrInfo.Contains("bbr");
|
||
if (canInstallBBR && !installed)
|
||
{
|
||
RunCmd(@"bash -c 'echo ""net.core.default_qdisc=fq"" >> /etc/sysctl.conf'");
|
||
RunCmd(@"bash -c 'echo ""net.ipv4.tcp_congestion_control=bbr"" >> /etc/sysctl.conf'");
|
||
RunCmd(@"sysctl -p");
|
||
|
||
if (OnlyIpv6)
|
||
{
|
||
RemoveNat64();
|
||
}
|
||
WriteOutput("BBR启动成功");
|
||
}
|
||
|
||
if (!canInstallBBR)
|
||
{
|
||
WriteOutput("****** 系统不满足启用BBR条件，启动失败。 ******");
|
||
}
|
||
|
||
}
|
||
|
||
private bool CheckKernelVersionBBR(string kernelVer)
|
||
{
|
||
string[] linuxKernelCompared = kernelVer.Split('.');
|
||
if (int.Parse(linuxKernelCompared[0]) > 4)
|
||
{
|
||
return true;
|
||
}
|
||
else if (int.Parse(linuxKernelCompared[0]) < 4)
|
||
{
|
||
return false;
|
||
}
|
||
else if (int.Parse(linuxKernelCompared[0]) == 4)
|
||
{
|
||
if (int.Parse(linuxKernelCompared[1]) >= 9)
|
||
{
|
||
return true;
|
||
}
|
||
else if (int.Parse(linuxKernelCompared[1]) < 9)
|
||
{
|
||
return false;
|
||
}
|
||
|
||
}
|
||
return false;
|
||
|
||
}
|
||
|
||
private void UninstallXray()
|
||
{
|
||
RunCmd("bash -c \"$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)\" @ remove");
|
||
}
|
||
|
||
private void UninstallAcme()
|
||
{
|
||
RunCmd("acme.sh --uninstall");
|
||
RunCmd("rm -r ~/.acme.sh");
|
||
}
|
||
|
||
private void InstallXrayWithCert()
|
||
{
|
||
RunCmd("bash -c \"$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)\" @ install");
|
||
|
||
if (!FileExists("/usr/local/bin/xray"))
|
||
{
|
||
WriteOutput("Xray-Core安装失败，请联系开发者");
|
||
throw new Exception("Xray-Core安装失败，请联系开发者");
|
||
}
|
||
|
||
RunCmd($"sed -i 's/User=nobody/User=root/g' /etc/systemd/system/xray.service");
|
||
RunCmd($"sed -i 's/CapabilityBoundingSet=/#CapabilityBoundingSet=/g' /etc/systemd/system/xray.service");
|
||
RunCmd($"sed -i 's/AmbientCapabilities=/#AmbientCapabilities=/g' /etc/systemd/system/xray.service");
|
||
RunCmd($"systemctl daemon-reload");
|
||
|
||
if (FileExists("/usr/local/etc/xray/config.json"))
|
||
{
|
||
RunCmd(@"mv /usr/local/etc/xray/config.json /usr/local/etc/xray/config.json.1");
|
||
}
|
||
|
||
WriteOutput("安装TLS证书");
|
||
InstallCertToXray();
|
||
WriteOutput("TLS证书安装完成");
|
||
|
||
|
||
var configJson = ConfigBuilder.BuildXrayConfig(Parameters);
|
||
var stream = new MemoryStream(Encoding.UTF8.GetBytes(configJson));
|
||
RunCmd("rm -rf /usr/local/etc/xray/config.json");
|
||
UploadFile(stream, "/usr/local/etc/xray/config.json");
|
||
RunCmd("systemctl restart xray");
|
||
}
|
||
|
||
private void InstallCertToXray()
|
||
{
|
||
// 安装依赖
|
||
RunCmd(GetInstallCmd("socat"));
|
||
|
||
// 解决搬瓦工CentOS缺少问题
|
||
RunCmd(GetInstallCmd("automake autoconf libtool"));
|
||
|
||
// 安装Acme
|
||
var result = RunCmd($"curl https://raw.githubusercontent.com/acmesh-official/acme.sh/master/acme.sh | sh -s -- --install-online -m {GetRandomEmail()}");
|
||
if (result.Contains("Install success"))
|
||
{
|
||
WriteOutput("安装 acme.sh 成功");
|
||
}
|
||
else
|
||
{
|
||
WriteOutput("安装 acme.sh 失败，请联系开发者！");
|
||
throw new Exception("安装 acme.sh 失败，请联系开发者！");
|
||
}
|
||
|
||
RunCmd("cd ~/.acme.sh/");
|
||
RunCmd("alias acme.sh=~/.acme.sh/acme.sh");
|
||
|
||
// 申请证书
|
||
if (OnlyIpv6)
|
||
{
|
||
var cmd = $"/root/.acme.sh/acme.sh --force --debug --issue --standalone -d {Parameters.Domain} --listen-v6";
|
||
result = RunCmd(cmd);
|
||
}
|
||
else
|
||
{
|
||
var cmd = $"/root/.acme.sh/acme.sh --force --debug --issue --standalone -d {Parameters.Domain}";
|
||
result = RunCmd(cmd);
|
||
}
|
||
|
||
if (result.Contains("success"))
|
||
{
|
||
WriteOutput("申请证书成功");
|
||
}
|
||
else
|
||
{
|
||
WriteOutput("申请证书失败，如果申请次数过多请更换二级域名，或联系开发者！");
|
||
throw new Exception("申请证书失败，如果申请次数过多请更换二级域名，或联系开发者！");
|
||
}
|
||
|
||
// 安装证书到xray
|
||
RunCmd("mkdir -p /usr/local/etc/xray/ssl");
|
||
RunCmd($"/root/.acme.sh/acme.sh --installcert -d {Parameters.Domain} --certpath /usr/local/etc/xray/ssl/xray_ssl.crt --keypath /usr/local/etc/xray/ssl/xray_ssl.key --capath /usr/local/etc/xray/ssl/xray_ssl.crt");
|
||
result = RunCmd(@"if [ ! -f ""/usr/local/etc/xray/ssl/xray_ssl.key"" ]; then echo ""0""; else echo ""1""; fi | head -n 1");
|
||
if (result.Contains("1"))
|
||
{
|
||
WriteOutput("安装证书成功");
|
||
}
|
||
else
|
||
{
|
||
WriteOutput("安装证书失败，请联系开发者！");
|
||
throw new Exception("安装证书失败，请联系开发者！");
|
||
}
|
||
|
||
RunCmd(@"chmod 755 /usr/local/etc/xray/ssl");
|
||
}
|
||
|
||
private string GetRandomEmail()
|
||
{
|
||
Random r = new Random();
|
||
var num = r.Next(200000000, 900000000);
|
||
return $"{num}@qq.com";
|
||
}
|
||
|
||
private int GetRandomPort()
|
||
{
|
||
var random = new Random();
|
||
return random.Next(10001, 60000);
|
||
}
|
||
|
||
private dynamic LoadJsonObj(string path)
|
||
{
|
||
if (File.Exists(path))
|
||
{
|
||
var jsonStr = File.ReadAllText(path, Encoding.UTF8);
|
||
return JsonConvert.DeserializeObject(jsonStr);
|
||
}
|
||
return null;
|
||
}
|
||
|
||
}
|
||
}
|