Dushnilin
2019ddd12a
- Fix #52: Watchdog proxy restart on single URL failure: * Validate failure against secondary independent probe URL before declaring proxy down * Skip restart when direct WAN is also degraded or down (!direct_ok) * Implement 120s cooldown between automated proxy restarts * Fix Telegram notification to accurately state 'Перезапуск sing-box' instead of 'Перезапуск роутера' - Fix #51: Telegram bot spamming WAN up/down notifications: * Filter hotplug events strictly by badwan_monitored_interfaces (defaults to wan) * Add atomic directory lock with debounce delay and real ubus state query * Prevent repeated notifications when interface state has not transitioned - Feat: 2-VPN deadlock elimination & self-download subscription proxy: * Isolate unbootstrapped dependent subscription sections on initial boot (deferred_sections) * Allow self-download proxy target for subscriptions with explicit UI hint '(текущее правило при активности)' * Enable automatic local proxy fallback for subscription refresh when direct WAN download fails while sing-box is active * Add regression test in tests/subscription_bootstrap_deadlock.sh - Fix: Parental control quota enforcement: * Correct route rule filtering when daily quota minutes are exhausted without a fixed time interval - i18n & Version bump: * Bump fe-app-tachyon to 1.3.26 and update Russian PO/POT translations
222 lines
7.4 KiB
Bash
222 lines
7.4 KiB
Bash
#!/usr/bin/env bash
|
|
set -eo pipefail
|
|
|
|
TEST_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
ROOT_DIR="$(cd "$TEST_DIR/.." && pwd)"
|
|
TACHYON_LIB="$ROOT_DIR/tachyon/files/usr/lib"
|
|
GENERATOR_UC="$TACHYON_LIB/singbox/generator.uc"
|
|
|
|
WORK_DIR="$(mktemp -d)"
|
|
trap 'rm -rf "$WORK_DIR"' EXIT
|
|
|
|
fail() {
|
|
echo "FAIL: $*" >&2
|
|
exit 1
|
|
}
|
|
|
|
# 1. Verify remote rule_set gets download_detour assigned to section's proxy outbound
|
|
cat >"$WORK_DIR/fixture.json" <<'JSON'
|
|
{
|
|
"settings": {
|
|
".name": "settings",
|
|
".type": "settings",
|
|
"enabled": "1",
|
|
"dns_type": "udp",
|
|
"dns_server": "1.1.1.1",
|
|
"service_listen_address": "127.0.0.1"
|
|
},
|
|
"section": [
|
|
{
|
|
".name": "myproxy",
|
|
".type": "section",
|
|
"enabled": "1",
|
|
"action": "connection",
|
|
"outbound_jsons": [ "{\"type\":\"direct\"}" ],
|
|
"community_lists": [ "google_ai" ]
|
|
}
|
|
]
|
|
}
|
|
JSON
|
|
|
|
output="$WORK_DIR/out.json"
|
|
mkdir -p "$output.section-cache" "$output.rulesets"
|
|
ucode -L "$TACHYON_LIB" "$GENERATOR_UC" generate-config-fixture \
|
|
"$WORK_DIR/fixture.json" "$output" "127.0.0.1" "0" "1"
|
|
|
|
grep -Fq '"download_detour": "myproxy-out"' "$output" || \
|
|
fail "remote community ruleset must automatically get download_detour set to section outbound"
|
|
|
|
# 2. Verify download_via_proxy fallback selects first enabled proxy section
|
|
cat >"$WORK_DIR/fixture-detour-enabled.json" <<'JSON'
|
|
{
|
|
"settings": {
|
|
".name": "settings",
|
|
".type": "settings",
|
|
"enabled": "1",
|
|
"dns_type": "udp",
|
|
"dns_server": "1.1.1.1",
|
|
"download_lists_via_proxy": "1",
|
|
"service_listen_address": "127.0.0.1"
|
|
},
|
|
"section": [
|
|
{
|
|
".name": "first_proxy",
|
|
".type": "section",
|
|
"enabled": "1",
|
|
"action": "connection",
|
|
"outbound_jsons": [ "{\"type\":\"direct\"}" ]
|
|
},
|
|
{
|
|
".name": "other_sec",
|
|
".type": "section",
|
|
"enabled": "1",
|
|
"action": "connection",
|
|
"outbound_jsons": [ "{\"type\":\"direct\"}" ],
|
|
"community_lists": [ "google_ai" ]
|
|
}
|
|
]
|
|
}
|
|
JSON
|
|
|
|
output2="$WORK_DIR/out2.json"
|
|
mkdir -p "$output2.section-cache" "$output2.rulesets"
|
|
ucode -L "$TACHYON_LIB" "$GENERATOR_UC" generate-config-fixture \
|
|
"$WORK_DIR/fixture-detour-enabled.json" "$output2" "127.0.0.1" "0" "1"
|
|
|
|
grep -Fq '"download_detour": "first_proxy-out"' "$output2" || \
|
|
fail "global download_lists_via_proxy without explicit section must default to first enabled proxy section"
|
|
|
|
# 3. Verify http_clients and default_http_client handling:
|
|
# Omitted on sing-box < 1.14 (1.12, 1.13, Leadaxe, Extended) to avoid unknown field crash
|
|
output_v13="$WORK_DIR/out_v13.json"
|
|
mkdir -p "$output_v13.section-cache" "$output_v13.rulesets"
|
|
printf 'v1.13.5\n' > "$WORK_DIR/sb_v13"
|
|
SB_VERSION_STATE_FILE="$WORK_DIR/sb_v13" \
|
|
ucode -L "$TACHYON_LIB" "$GENERATOR_UC" generate-config-fixture \
|
|
"$WORK_DIR/fixture.json" "$output_v13" "127.0.0.1" "0" "1"
|
|
|
|
if grep -q '"http_clients"' "$output_v13"; then
|
|
fail "sing-box < 1.14 must not have http_clients (causes fatal unknown field crash)"
|
|
fi
|
|
if grep -q '"default_http_client"' "$output_v13"; then
|
|
fail "sing-box < 1.14 must not have default_http_client (causes fatal unknown field crash)"
|
|
fi
|
|
|
|
# Included on sing-box 1.14+
|
|
output_v14="$WORK_DIR/out_v14.json"
|
|
mkdir -p "$output_v14.section-cache" "$output_v14.rulesets"
|
|
printf 'v1.14.0\n' > "$WORK_DIR/sb_v14"
|
|
SB_VERSION_STATE_FILE="$WORK_DIR/sb_v14" \
|
|
ucode -L "$TACHYON_LIB" "$GENERATOR_UC" generate-config-fixture \
|
|
"$WORK_DIR/fixture.json" "$output_v14" "127.0.0.1" "0" "1"
|
|
|
|
grep -q '"http_clients"' "$output_v14" || \
|
|
fail "sing-box 1.14+ must include http_clients"
|
|
grep -q '"default_http_client": "ruleset-http"' "$output_v14" || \
|
|
fail "sing-box 1.14+ must configure default_http_client"
|
|
if grep -q '"dial_detour"' "$output_v14"; then
|
|
fail "sing-box 1.14+ must NEVER contain 'dial_detour' in http_clients (causes fatal unknown field crash)"
|
|
fi
|
|
if command -v sing-box >/dev/null 2>&1; then
|
|
INSTALLED_SB_VER="$(sing-box version 2>/dev/null | head -n1 | grep -oE '[0-9]+\.[0-9]+' | head -n1 || echo '0.0')"
|
|
if [ "$(printf '%s\n1.14\n' "$INSTALLED_SB_VER" | sort -V | head -n1)" = "1.14" ]; then
|
|
sing-box check -c "$output_v14" || fail "sing-box 1.14+ config check failed"
|
|
fi
|
|
fi
|
|
|
|
output_detour_v14="$WORK_DIR/out_detour_v14.json"
|
|
mkdir -p "$output_detour_v14.section-cache" "$output_detour_v14.rulesets"
|
|
SB_VERSION_STATE_FILE="$WORK_DIR/sb_v14" \
|
|
ucode -L "$TACHYON_LIB" "$GENERATOR_UC" generate-config-fixture \
|
|
"$WORK_DIR/fixture-detour-enabled.json" "$output_detour_v14" "127.0.0.1" "0" "1"
|
|
|
|
if grep -q '"dial_detour"' "$output_detour_v14"; then
|
|
fail "sing-box 1.14+ must NEVER contain 'dial_detour' with proxy enabled"
|
|
fi
|
|
grep -q '"detour": "first_proxy-out"' "$output_detour_v14" || \
|
|
fail "sing-box 1.14+ http_clients must configure 'detour' field when download_lists_via_proxy is enabled"
|
|
if command -v sing-box >/dev/null 2>&1; then
|
|
INSTALLED_SB_VER="$(sing-box version 2>/dev/null | head -n1 | grep -oE '[0-9]+\.[0-9]+' | head -n1 || echo '0.0')"
|
|
if [ "$(printf '%s\n1.14\n' "$INSTALLED_SB_VER" | sort -V | head -n1)" = "1.14" ]; then
|
|
sing-box check -c "$output_detour_v14" || fail "sing-box 1.14+ detour config check failed"
|
|
fi
|
|
fi
|
|
|
|
# 4. Verify zapret section with community_lists does NOT use zapret-out as download_detour
|
|
cat >"$WORK_DIR/fixture_zapret.json" <<'JSON'
|
|
{
|
|
"settings": {
|
|
".name": "settings",
|
|
".type": "settings",
|
|
"enabled": "1",
|
|
"dns_type": "udp",
|
|
"dns_server": "1.1.1.1",
|
|
"service_listen_address": "127.0.0.1"
|
|
},
|
|
"section": [
|
|
{
|
|
".name": "zapret_sec",
|
|
".type": "section",
|
|
"enabled": "1",
|
|
"action": "zapret",
|
|
"community_lists": [ "youtube" ]
|
|
}
|
|
]
|
|
}
|
|
JSON
|
|
|
|
output_zapret="$WORK_DIR/out_zapret.json"
|
|
mkdir -p "$output_zapret.section-cache" "$output_zapret.rulesets"
|
|
ucode -L "$TACHYON_LIB" "$GENERATOR_UC" generate-config-fixture \
|
|
"$WORK_DIR/fixture_zapret.json" "$output_zapret" "127.0.0.1" "0" "1"
|
|
|
|
if grep -q '"download_detour": "zapret_sec-out"' "$output_zapret"; then
|
|
fail "zapret-out must never be selected as download_detour due to routing_mark"
|
|
fi
|
|
|
|
# 5. Verify mieru outbound is rejected as download_detour and http_clients detour
|
|
cat >"$WORK_DIR/fixture_mieru.json" <<'JSON'
|
|
{
|
|
"settings": {
|
|
".name": "settings",
|
|
".type": "settings",
|
|
"enabled": "1",
|
|
"dns_type": "udp",
|
|
"dns_server": "1.1.1.1",
|
|
"service_listen_address": "127.0.0.1"
|
|
},
|
|
"section": [
|
|
{
|
|
".name": "mieru_sec",
|
|
".type": "section",
|
|
"enabled": "1",
|
|
"action": "connection",
|
|
"outbound_jsons": [ "{\"type\":\"mieru\",\"server\":\"1.2.3.4\",\"server_port\":443}" ],
|
|
"community_lists": [ "google_ai" ]
|
|
}
|
|
]
|
|
}
|
|
JSON
|
|
|
|
output_mieru="$WORK_DIR/out_mieru.json"
|
|
mkdir -p "$output_mieru.section-cache" "$output_mieru.rulesets"
|
|
ucode -L "$TACHYON_LIB" "$GENERATOR_UC" generate-config-fixture \
|
|
"$WORK_DIR/fixture_mieru.json" "$output_mieru" "127.0.0.1" "0" "1"
|
|
|
|
if grep -q '"download_detour": "mieru_sec-out"' "$output_mieru"; then
|
|
fail "mieru outbound must never be assigned to rule_set download_detour (early startup crash)"
|
|
fi
|
|
|
|
output_mieru_v14="$WORK_DIR/out_mieru_v14.json"
|
|
mkdir -p "$output_mieru_v14.section-cache" "$output_mieru_v14.rulesets"
|
|
SB_VERSION_STATE_FILE="$WORK_DIR/sb_v14" \
|
|
ucode -L "$TACHYON_LIB" "$GENERATOR_UC" generate-config-fixture \
|
|
"$WORK_DIR/fixture_mieru.json" "$output_mieru_v14" "127.0.0.1" "0" "1"
|
|
|
|
if grep -q '"detour": "mieru_sec-out"' "$output_mieru_v14"; then
|
|
fail "mieru outbound must never be assigned as http_clients detour"
|
|
fi
|
|
|
|
printf "ruleset download detour checks passed\n"
|
|
|