840 lines
25 KiB
Bash
Executable File
840 lines
25 KiB
Bash
Executable File
#!/bin/sh
|
|
# shellcheck shell=dash
|
|
|
|
REPO_OWNER="ushan0v"
|
|
REPO_NAME="podkop-plus"
|
|
|
|
REQUIRED_SPACE_KB=15360
|
|
|
|
PKG_IS_APK=0
|
|
FETCHER=""
|
|
TMP_DIR=""
|
|
PODKOP_WAS_ENABLED=0
|
|
TARGET_ARCH=""
|
|
ZAPRET_ARCH=""
|
|
ZAPRET_ARCH_CANDIDATES=""
|
|
ZAPRET_ALREADY_PRESENT=0
|
|
ZAPRET_REQUESTED=0
|
|
ZAPRET_SKIPPED_REASON=""
|
|
|
|
PODKOP_PLUS_RELEASE_JSON=""
|
|
PODKOP_PLUS_RELEASE_TAG=""
|
|
PODKOP_PLUS_PACKAGE_URL=""
|
|
PODKOP_PLUS_PACKAGE_NAME=""
|
|
PODKOP_PLUS_PACKAGE_FILE=""
|
|
PODKOP_PLUS_I18N_URL=""
|
|
PODKOP_PLUS_I18N_NAME=""
|
|
PODKOP_PLUS_I18N_FILE=""
|
|
PODKOP_PLUS_PACKAGE_VERSION=""
|
|
|
|
ZAPRET_RELEASE_JSON=""
|
|
ZAPRET_RELEASE_TAG_RESOLVED=""
|
|
ZAPRET_BUNDLE_URL=""
|
|
ZAPRET_BUNDLE_NAME=""
|
|
ZAPRET_PACKAGE_NAME=""
|
|
ZAPRET_PACKAGE_FILE=""
|
|
ZAPRET_PACKAGE_VERSION=""
|
|
|
|
command -v apk >/dev/null 2>&1 && PKG_IS_APK=1
|
|
|
|
msg() {
|
|
printf '\033[32;1m%s\033[0m\n' "$1"
|
|
}
|
|
|
|
warn() {
|
|
printf '\033[33;1m%s\033[0m\n' "$1"
|
|
}
|
|
|
|
fail() {
|
|
printf '\033[31;1m%s\033[0m\n' "$1" >&2
|
|
exit 1
|
|
}
|
|
|
|
cleanup() {
|
|
[ -n "$TMP_DIR" ] && rm -rf "$TMP_DIR"
|
|
}
|
|
|
|
clear_zapret_download_state() {
|
|
ZAPRET_RELEASE_JSON=""
|
|
ZAPRET_RELEASE_TAG_RESOLVED=""
|
|
ZAPRET_BUNDLE_URL=""
|
|
ZAPRET_BUNDLE_NAME=""
|
|
ZAPRET_PACKAGE_NAME=""
|
|
ZAPRET_PACKAGE_FILE=""
|
|
ZAPRET_PACKAGE_VERSION=""
|
|
ZAPRET_ARCH=""
|
|
}
|
|
|
|
read_openwrt_release_value() {
|
|
key="$1"
|
|
|
|
[ -f /etc/openwrt_release ] || return 0
|
|
sed -n "s/^${key}='\(.*\)'/\1/p" /etc/openwrt_release 2>/dev/null | head -n 1
|
|
}
|
|
|
|
command_exists() {
|
|
command -v "$1" >/dev/null 2>&1
|
|
}
|
|
|
|
init_tmp_dir() {
|
|
TMP_DIR="$(mktemp -d /tmp/podkop-plus.XXXXXX 2>/dev/null || true)"
|
|
|
|
if [ -z "$TMP_DIR" ]; then
|
|
TMP_DIR="/tmp/podkop-plus.$$"
|
|
mkdir -p "$TMP_DIR" || fail "Failed to create temporary directory: $TMP_DIR"
|
|
fi
|
|
}
|
|
|
|
detect_fetcher() {
|
|
if command_exists wget; then
|
|
FETCHER="wget"
|
|
return 0
|
|
fi
|
|
|
|
if command_exists curl; then
|
|
FETCHER="curl"
|
|
return 0
|
|
fi
|
|
|
|
fail "wget or curl is required to download Podkop Plus"
|
|
}
|
|
|
|
http_get() {
|
|
case "$FETCHER" in
|
|
wget)
|
|
wget -qO- "$1"
|
|
;;
|
|
curl)
|
|
curl -fsSL "$1"
|
|
;;
|
|
*)
|
|
return 1
|
|
;;
|
|
esac
|
|
}
|
|
|
|
download_file_once() {
|
|
case "$FETCHER" in
|
|
wget)
|
|
wget -q -O "$2" "$1"
|
|
;;
|
|
curl)
|
|
curl -fsSL "$1" -o "$2"
|
|
;;
|
|
*)
|
|
return 1
|
|
;;
|
|
esac
|
|
}
|
|
|
|
download_with_retry() {
|
|
url="$1"
|
|
output_path="$2"
|
|
label="$3"
|
|
attempt=1
|
|
max_attempts=3
|
|
|
|
while [ "$attempt" -le "$max_attempts" ]; do
|
|
msg "Downloading $label ($attempt/$max_attempts)"
|
|
|
|
if download_file_once "$url" "$output_path" && [ -s "$output_path" ]; then
|
|
return 0
|
|
fi
|
|
|
|
rm -f "$output_path"
|
|
warn "Retrying $label"
|
|
attempt=$((attempt + 1))
|
|
done
|
|
|
|
return 1
|
|
}
|
|
|
|
pkg_list_installed_names() {
|
|
if [ "$PKG_IS_APK" -eq 1 ]; then
|
|
apk info 2>/dev/null
|
|
else
|
|
opkg list-installed 2>/dev/null | awk '{print $1}'
|
|
fi
|
|
}
|
|
|
|
pkg_is_installed() {
|
|
pkg_name="$1"
|
|
|
|
if [ "$PKG_IS_APK" -eq 1 ]; then
|
|
apk info -e "$pkg_name" >/dev/null 2>&1
|
|
else
|
|
opkg list-installed 2>/dev/null | grep -Eq "^${pkg_name}([[:space:]-]|$)"
|
|
fi
|
|
}
|
|
|
|
is_zapret_present() {
|
|
pkg_is_installed "zapret" || [ -x /opt/zapret/nfq/nfqws ]
|
|
}
|
|
|
|
pkg_list_update() {
|
|
if [ "$PKG_IS_APK" -eq 1 ]; then
|
|
apk update
|
|
else
|
|
opkg update
|
|
fi
|
|
}
|
|
|
|
pkg_install_name() {
|
|
pkg_name="$1"
|
|
|
|
if [ "$PKG_IS_APK" -eq 1 ]; then
|
|
apk add "$pkg_name"
|
|
else
|
|
opkg install "$pkg_name"
|
|
fi
|
|
}
|
|
|
|
pkg_remove_if_installed() {
|
|
pkg_name="$1"
|
|
|
|
if ! pkg_is_installed "$pkg_name"; then
|
|
return 0
|
|
fi
|
|
|
|
if [ "$PKG_IS_APK" -eq 1 ]; then
|
|
apk del "$pkg_name" >/dev/null 2>&1 || true
|
|
else
|
|
opkg remove --force-depends "$pkg_name" >/dev/null 2>&1 || true
|
|
fi
|
|
}
|
|
|
|
pkg_remove_matching_prefix() {
|
|
prefix="$1"
|
|
|
|
for pkg_name in $(pkg_list_installed_names | grep "^$prefix" 2>/dev/null); do
|
|
pkg_remove_if_installed "$pkg_name"
|
|
done
|
|
}
|
|
|
|
pkg_install_files() {
|
|
if [ "$PKG_IS_APK" -eq 1 ]; then
|
|
apk add --allow-untrusted "$@"
|
|
else
|
|
opkg install "$@"
|
|
fi
|
|
}
|
|
|
|
ensure_bootstrap_tool() {
|
|
tool_name="$1"
|
|
package_name="$2"
|
|
|
|
if command_exists "$tool_name"; then
|
|
return 0
|
|
fi
|
|
|
|
msg "Installing bootstrap dependency: $package_name"
|
|
pkg_install_name "$package_name" || fail "Failed to install $package_name"
|
|
}
|
|
|
|
sync_time() {
|
|
if ! command_exists ntpd; then
|
|
return 0
|
|
fi
|
|
|
|
ntpd -q \
|
|
-p 194.190.168.1 \
|
|
-p 216.239.35.0 \
|
|
-p 216.239.35.4 \
|
|
-p 162.159.200.1 \
|
|
-p 162.159.200.123 >/dev/null 2>&1 || true
|
|
}
|
|
|
|
check_root() {
|
|
if command_exists id && [ "$(id -u)" != "0" ]; then
|
|
fail "Please run this installer as root"
|
|
fi
|
|
}
|
|
|
|
check_system() {
|
|
release=""
|
|
major=""
|
|
model=""
|
|
available_space=""
|
|
|
|
[ -f /etc/openwrt_release ] || fail "This installer supports OpenWrt only"
|
|
|
|
model="$(cat /tmp/sysinfo/model 2>/dev/null || true)"
|
|
[ -n "$model" ] && msg "Router model: $model"
|
|
|
|
release="$(read_openwrt_release_value "DISTRIB_RELEASE")"
|
|
major="$(printf '%s' "$release" | sed 's/[^0-9].*$//' | cut -d. -f1)"
|
|
|
|
if [ -n "$major" ] && [ "$major" -lt 24 ]; then
|
|
fail "Podkop Plus requires OpenWrt 24.10 or newer"
|
|
fi
|
|
|
|
available_space="$(df /overlay 2>/dev/null | awk 'NR==2 {print $4}')"
|
|
[ -n "$available_space" ] || available_space="$(df / 2>/dev/null | awk 'NR==2 {print $4}')"
|
|
|
|
if [ -n "$available_space" ] && [ "$available_space" -lt "$REQUIRED_SPACE_KB" ]; then
|
|
fail "Not enough free flash space. Available: $((available_space / 1024)) MB, required: $((REQUIRED_SPACE_KB / 1024)) MB"
|
|
fi
|
|
}
|
|
|
|
confirm_prompt() {
|
|
prompt_text="$1"
|
|
answer=""
|
|
|
|
printf '%s [y/N]: ' "$prompt_text"
|
|
read -r answer || return 1
|
|
|
|
case "$answer" in
|
|
y|Y|yes|YES|Yes)
|
|
return 0
|
|
;;
|
|
*)
|
|
return 1
|
|
;;
|
|
esac
|
|
}
|
|
|
|
sanitize_semver() {
|
|
printf '%s\n' "$1" | sed 's/^v//;s/-.*$//;s/[^0-9.].*$//'
|
|
}
|
|
|
|
version_ge() {
|
|
awk \
|
|
-v lhs="$(sanitize_semver "$1")" \
|
|
-v rhs="$(sanitize_semver "$2")" \
|
|
'
|
|
function fill(version, out, parts, count, i) {
|
|
count = split(version, parts, ".")
|
|
for (i = 1; i <= 3; i++) {
|
|
out[i] = (i <= count && parts[i] ~ /^[0-9]+$/) ? parts[i] + 0 : 0
|
|
}
|
|
}
|
|
|
|
BEGIN {
|
|
fill(lhs, a)
|
|
fill(rhs, b)
|
|
|
|
if (
|
|
a[1] > b[1] ||
|
|
(a[1] == b[1] && a[2] > b[2]) ||
|
|
(a[1] == b[1] && a[2] == b[2] && a[3] >= b[3])
|
|
) {
|
|
exit 0
|
|
}
|
|
|
|
exit 1
|
|
}
|
|
'
|
|
}
|
|
|
|
extract_package_version() {
|
|
package_name="$1"
|
|
|
|
case "$package_name" in
|
|
luci-app-podkop-plus_*.ipk|luci-app-podkop-plus_*.apk)
|
|
printf '%s\n' "$package_name" | sed 's/^luci-app-podkop-plus_//;s/\.\(ipk\|apk\)$//'
|
|
;;
|
|
zapret_*.ipk)
|
|
printf '%s\n' "$package_name" | sed 's/^zapret_//;s/_[^_]*\.ipk$//'
|
|
;;
|
|
zapret-*.apk)
|
|
printf '%s\n' "$package_name" | sed 's/^zapret-//;s/\.apk$//'
|
|
;;
|
|
*)
|
|
printf '%s\n' "$package_name"
|
|
;;
|
|
esac
|
|
}
|
|
|
|
fetch_github_release_json() {
|
|
owner="$1"
|
|
repo="$2"
|
|
response=""
|
|
message=""
|
|
url="https://api.github.com/repos/${owner}/${repo}/releases/latest"
|
|
|
|
response="$(http_get "$url" 2>/dev/null || true)"
|
|
[ -n "$response" ] || fail "Failed to query GitHub release metadata for ${owner}/${repo}"
|
|
|
|
printf '%s' "$response" | jq -e . >/dev/null 2>&1 || fail "GitHub returned an invalid response for ${owner}/${repo}"
|
|
|
|
message="$(printf '%s' "$response" | jq -r '.message // empty')"
|
|
case "$message" in
|
|
*"API rate limit"*|*"rate limit exceeded"*)
|
|
fail "GitHub API rate limit reached. Try again later."
|
|
;;
|
|
"Not Found")
|
|
fail "No published releases found for ${owner}/${repo}"
|
|
;;
|
|
esac
|
|
|
|
printf '%s' "$response"
|
|
}
|
|
|
|
resolve_podkop_plus_release() {
|
|
asset_ext="ipk"
|
|
|
|
[ "$PKG_IS_APK" -eq 1 ] && asset_ext="apk"
|
|
|
|
PODKOP_PLUS_RELEASE_JSON="$(fetch_github_release_json "$REPO_OWNER" "$REPO_NAME")"
|
|
PODKOP_PLUS_RELEASE_TAG="$(printf '%s' "$PODKOP_PLUS_RELEASE_JSON" | jq -r '.tag_name // empty')"
|
|
[ -n "$PODKOP_PLUS_RELEASE_TAG" ] || fail "Failed to detect the Podkop Plus release tag"
|
|
|
|
PODKOP_PLUS_PACKAGE_URL="$(printf '%s' "$PODKOP_PLUS_RELEASE_JSON" | jq -r --arg ext "$asset_ext" '.assets[] | select((.name | startswith("luci-app-podkop-plus_")) and (.name | endswith("." + $ext))) | .browser_download_url' | sed -n '1p')"
|
|
PODKOP_PLUS_I18N_URL="$(printf '%s' "$PODKOP_PLUS_RELEASE_JSON" | jq -r --arg ext "$asset_ext" '.assets[] | select((.name | startswith("luci-i18n-podkop-plus-ru_")) and (.name | endswith("." + $ext))) | .browser_download_url' | sed -n '1p')"
|
|
|
|
[ -n "$PODKOP_PLUS_PACKAGE_URL" ] || fail "The Podkop Plus release does not contain a luci-app-podkop-plus .$asset_ext package"
|
|
[ -n "$PODKOP_PLUS_I18N_URL" ] || fail "The Podkop Plus release does not contain a luci-i18n-podkop-plus-ru .$asset_ext package"
|
|
|
|
PODKOP_PLUS_PACKAGE_NAME="$(basename "$PODKOP_PLUS_PACKAGE_URL")"
|
|
PODKOP_PLUS_I18N_NAME="$(basename "$PODKOP_PLUS_I18N_URL")"
|
|
PODKOP_PLUS_PACKAGE_VERSION="$(extract_package_version "$PODKOP_PLUS_PACKAGE_NAME")"
|
|
}
|
|
|
|
detect_installed_podkop_version() {
|
|
version=""
|
|
|
|
if command_exists podkop-plus; then
|
|
version="$(podkop-plus show_version 2>/dev/null | head -n 1)"
|
|
fi
|
|
|
|
if [ -z "$version" ] && command_exists podkop; then
|
|
version="$(podkop show_version 2>/dev/null | head -n 1)"
|
|
fi
|
|
|
|
printf '%s' "$version"
|
|
}
|
|
|
|
reset_legacy_config_if_needed() {
|
|
current_version=""
|
|
backup_path=""
|
|
default_config_url=""
|
|
default_config_tmp=""
|
|
|
|
[ -f /etc/config/podkop ] || return 0
|
|
|
|
current_version="$(detect_installed_podkop_version)"
|
|
|
|
if [ -n "$current_version" ] && version_ge "$current_version" "0.7.0"; then
|
|
return 0
|
|
fi
|
|
|
|
if ! pkg_is_installed "podkop" && ! pkg_is_installed "luci-app-podkop" && [ ! -x /etc/init.d/podkop ]; then
|
|
return 0
|
|
fi
|
|
|
|
warn "Detected a legacy podkop installation."
|
|
warn "The current config will be backed up to /etc/config/podkop-070.<timestamp> and replaced with the Podkop Plus default config."
|
|
|
|
confirm_prompt "Continue and reset /etc/config/podkop?" || fail "Installation cancelled by user"
|
|
|
|
backup_path="/etc/config/podkop-070.$(date +%Y%m%d%H%M%S 2>/dev/null || echo "$$")"
|
|
mv /etc/config/podkop "$backup_path" || fail "Failed to back up /etc/config/podkop"
|
|
|
|
default_config_url="https://raw.githubusercontent.com/${REPO_OWNER}/${REPO_NAME}/${PODKOP_PLUS_RELEASE_TAG}/podkop/files/etc/config/podkop"
|
|
default_config_tmp="$TMP_DIR/default-podkop-config"
|
|
|
|
download_with_retry "$default_config_url" "$default_config_tmp" "default Podkop Plus config" || fail "Failed to download the default Podkop Plus config"
|
|
cp "$default_config_tmp" /etc/config/podkop || fail "Failed to restore /etc/config/podkop"
|
|
chmod 0644 /etc/config/podkop || true
|
|
|
|
msg "A fresh Podkop Plus config was installed. Backup saved to $backup_path"
|
|
}
|
|
|
|
remove_conflicting_dns_proxy() {
|
|
if ! pkg_is_installed "https-dns-proxy"; then
|
|
return 0
|
|
fi
|
|
|
|
warn "Detected conflicting package: https-dns-proxy"
|
|
confirm_prompt "Remove https-dns-proxy and continue?" || fail "Please remove https-dns-proxy manually and run the installer again"
|
|
|
|
pkg_remove_if_installed "luci-app-https-dns-proxy"
|
|
pkg_remove_if_installed "https-dns-proxy"
|
|
pkg_remove_matching_prefix "luci-i18n-https-dns-proxy"
|
|
}
|
|
|
|
remove_old_sing_box_if_needed() {
|
|
installed_version=""
|
|
required_version="1.12.4"
|
|
|
|
pkg_is_installed "sing-box" || return 0
|
|
command_exists sing-box || return 0
|
|
|
|
installed_version="$(sing-box version 2>/dev/null | head -n 1 | awk '{print $3}')"
|
|
[ -n "$installed_version" ] || return 0
|
|
|
|
if version_ge "$installed_version" "$required_version"; then
|
|
return 0
|
|
fi
|
|
|
|
warn "sing-box $installed_version is older than the required version $required_version. Removing the old package first."
|
|
[ -x /etc/init.d/podkop-plus ] && /etc/init.d/podkop-plus stop >/dev/null 2>&1 || true
|
|
[ -x /etc/init.d/podkop ] && /etc/init.d/podkop stop >/dev/null 2>&1 || true
|
|
pkg_remove_if_installed "sing-box"
|
|
}
|
|
|
|
remember_autostart_state() {
|
|
if [ -x /etc/init.d/podkop-plus ] && /etc/init.d/podkop-plus enabled >/dev/null 2>&1; then
|
|
PODKOP_WAS_ENABLED=1
|
|
return 0
|
|
fi
|
|
|
|
if [ -x /etc/init.d/podkop ] && /etc/init.d/podkop enabled >/dev/null 2>&1; then
|
|
PODKOP_WAS_ENABLED=1
|
|
fi
|
|
}
|
|
|
|
stop_conflicting_services() {
|
|
[ -x /etc/init.d/podkop-plus ] && /etc/init.d/podkop-plus stop >/dev/null 2>&1 || true
|
|
[ -x /etc/init.d/podkop-plus ] && /etc/init.d/podkop-plus disable >/dev/null 2>&1 || true
|
|
[ -x /etc/init.d/podkop ] && /etc/init.d/podkop stop >/dev/null 2>&1 || true
|
|
[ -x /etc/init.d/podkop ] && /etc/init.d/podkop disable >/dev/null 2>&1 || true
|
|
}
|
|
|
|
cleanup_legacy_installation() {
|
|
remember_autostart_state
|
|
stop_conflicting_services
|
|
|
|
pkg_remove_matching_prefix "luci-i18n-podkop-plus"
|
|
pkg_remove_matching_prefix "luci-i18n-podkop-"
|
|
pkg_remove_if_installed "luci-app-podkop-plus"
|
|
pkg_remove_if_installed "luci-app-podkop"
|
|
pkg_remove_if_installed "podkop"
|
|
|
|
rm -rf /usr/lib/podkop-plus /usr/lib/podkop /www/luci-static/resources/view/podkop
|
|
rm -f /etc/init.d/podkop-plus /etc/init.d/podkop
|
|
rm -f /usr/bin/podkop-plus /usr/bin/podkop
|
|
rm -f /usr/share/luci/menu.d/luci-app-podkop-plus.json
|
|
rm -f /usr/share/rpcd/acl.d/luci-app-podkop-plus.json
|
|
rm -f /usr/share/luci/menu.d/luci-app-podkop.json
|
|
rm -f /usr/share/rpcd/acl.d/luci-app-podkop.json
|
|
rm -f /etc/uci-defaults/50_luci-podkop-plus /etc/uci-defaults/50_luci-podkop
|
|
}
|
|
|
|
append_arch_candidate() {
|
|
candidate="$1"
|
|
|
|
[ -n "$candidate" ] || return 0
|
|
|
|
case "$candidate" in
|
|
all|noarch)
|
|
return 0
|
|
;;
|
|
esac
|
|
|
|
case " $ZAPRET_ARCH_CANDIDATES " in
|
|
*" $candidate "*)
|
|
return 0
|
|
;;
|
|
esac
|
|
|
|
if [ -n "$ZAPRET_ARCH_CANDIDATES" ]; then
|
|
ZAPRET_ARCH_CANDIDATES="$ZAPRET_ARCH_CANDIDATES $candidate"
|
|
else
|
|
ZAPRET_ARCH_CANDIDATES="$candidate"
|
|
fi
|
|
}
|
|
|
|
append_arch_candidate_variants() {
|
|
candidate="$1"
|
|
base_candidate=""
|
|
|
|
[ -n "$candidate" ] || return 0
|
|
|
|
append_arch_candidate "$candidate"
|
|
|
|
case "$candidate" in
|
|
*+*)
|
|
append_arch_candidate "${candidate%%+*}"
|
|
;;
|
|
esac
|
|
|
|
for suffix in _musl _uclibc _glibc -musl -uclibc -glibc .musl .uclibc .glibc; do
|
|
case "$candidate" in
|
|
*"$suffix")
|
|
base_candidate="${candidate%"$suffix"}"
|
|
append_arch_candidate "$base_candidate"
|
|
;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
add_arch_family_fallbacks() {
|
|
arch="$1"
|
|
|
|
append_arch_candidate_variants "$arch"
|
|
|
|
case "$arch" in
|
|
aarch64_*)
|
|
append_arch_candidate_variants "aarch64_generic"
|
|
;;
|
|
riscv64_*)
|
|
append_arch_candidate_variants "riscv64_generic"
|
|
;;
|
|
arm_cortex-a7_neon-vfpv4)
|
|
append_arch_candidate_variants "arm_cortex-a7_vfpv4"
|
|
append_arch_candidate_variants "arm_cortex-a7"
|
|
;;
|
|
arm_cortex-a7_*)
|
|
append_arch_candidate_variants "arm_cortex-a7"
|
|
;;
|
|
arm_cortex-a9_*)
|
|
append_arch_candidate_variants "arm_cortex-a9"
|
|
;;
|
|
mipsel_24kc_24kf)
|
|
append_arch_candidate_variants "mipsel_24kc"
|
|
;;
|
|
esac
|
|
}
|
|
|
|
resolve_arch_candidates() {
|
|
arch_list=""
|
|
apk_arch_list=""
|
|
release_arch=""
|
|
|
|
if [ "$PKG_IS_APK" -eq 1 ]; then
|
|
if [ -f /etc/apk/arch ]; then
|
|
apk_arch_list="$(tr '\r\n' ' ' </etc/apk/arch)"
|
|
[ -n "$apk_arch_list" ] && arch_list="$arch_list $apk_arch_list"
|
|
fi
|
|
|
|
apk_arch_list="$(apk --print-arch 2>/dev/null || true)"
|
|
[ -n "$apk_arch_list" ] && arch_list="$arch_list $apk_arch_list"
|
|
else
|
|
arch_list="$(opkg print-architecture 2>/dev/null | awk '$1 == "arch" && $2 !~ /^(all|noarch)$/ {print $2 " " $3}' | sort -k2,2nr | awk '{print $1}')"
|
|
fi
|
|
|
|
release_arch="$(read_openwrt_release_value "DISTRIB_ARCH")"
|
|
[ -n "$release_arch" ] && arch_list="$arch_list $release_arch"
|
|
|
|
if [ -z "$(printf '%s' "$arch_list" | tr -d '[:space:]')" ]; then
|
|
arch_list="$(uname -m 2>/dev/null || true)"
|
|
fi
|
|
|
|
for arch in $arch_list; do
|
|
case "$arch" in
|
|
all|noarch)
|
|
continue
|
|
;;
|
|
esac
|
|
|
|
[ -n "$TARGET_ARCH" ] || TARGET_ARCH="$arch"
|
|
add_arch_family_fallbacks "$arch"
|
|
done
|
|
|
|
[ -n "$TARGET_ARCH" ] || fail "Failed to detect the router package architecture"
|
|
msg "Detected zapret architecture candidates: $ZAPRET_ARCH_CANDIDATES"
|
|
}
|
|
|
|
resolve_zapret_release() {
|
|
candidate_name=""
|
|
message=""
|
|
url="https://api.github.com/repos/remittor/zapret-openwrt/releases/latest"
|
|
|
|
clear_zapret_download_state
|
|
|
|
[ "$ZAPRET_REQUESTED" -eq 1 ] || return 0
|
|
|
|
ZAPRET_RELEASE_JSON="$(http_get "$url" 2>/dev/null || true)"
|
|
if [ -z "$ZAPRET_RELEASE_JSON" ]; then
|
|
warn "Failed to query zapret release metadata. Continuing without zapret."
|
|
ZAPRET_SKIPPED_REASON="release metadata unavailable"
|
|
return 0
|
|
fi
|
|
|
|
if ! printf '%s' "$ZAPRET_RELEASE_JSON" | jq -e . >/dev/null 2>&1; then
|
|
warn "GitHub returned an invalid zapret release response. Continuing without zapret."
|
|
ZAPRET_SKIPPED_REASON="invalid release metadata"
|
|
clear_zapret_download_state
|
|
return 0
|
|
fi
|
|
|
|
message="$(printf '%s' "$ZAPRET_RELEASE_JSON" | jq -r '.message // empty')"
|
|
case "$message" in
|
|
*"API rate limit"*|*"rate limit exceeded"*)
|
|
warn "GitHub API rate limit reached while resolving zapret. Continuing without zapret."
|
|
ZAPRET_SKIPPED_REASON="GitHub API rate limit"
|
|
clear_zapret_download_state
|
|
return 0
|
|
;;
|
|
"Not Found")
|
|
warn "No published releases found for remittor/zapret-openwrt. Continuing without zapret."
|
|
ZAPRET_SKIPPED_REASON="release not found"
|
|
clear_zapret_download_state
|
|
return 0
|
|
;;
|
|
esac
|
|
|
|
ZAPRET_RELEASE_TAG_RESOLVED="$(printf '%s' "$ZAPRET_RELEASE_JSON" | jq -r '.tag_name // empty')"
|
|
if [ -z "$ZAPRET_RELEASE_TAG_RESOLVED" ]; then
|
|
warn "Failed to detect the zapret release tag. Continuing without zapret."
|
|
ZAPRET_SKIPPED_REASON="release tag unavailable"
|
|
clear_zapret_download_state
|
|
return 0
|
|
fi
|
|
|
|
for arch in $ZAPRET_ARCH_CANDIDATES; do
|
|
candidate_name="$(printf '%s' "$ZAPRET_RELEASE_JSON" | jq -r --arg arch "$arch" '.assets[] | select(.name | endswith("_" + $arch + ".zip")) | .name' | sed -n '1p')"
|
|
|
|
if [ -n "$candidate_name" ]; then
|
|
ZAPRET_ARCH="$arch"
|
|
ZAPRET_BUNDLE_NAME="$candidate_name"
|
|
break
|
|
fi
|
|
done
|
|
|
|
if [ -z "$ZAPRET_BUNDLE_NAME" ]; then
|
|
warn "No zapret package was found for architecture: $TARGET_ARCH. Tried: $ZAPRET_ARCH_CANDIDATES. Continuing without zapret."
|
|
ZAPRET_SKIPPED_REASON="package not found for architecture"
|
|
clear_zapret_download_state
|
|
return 0
|
|
fi
|
|
|
|
ZAPRET_BUNDLE_URL="$(printf '%s' "$ZAPRET_RELEASE_JSON" | jq -r --arg name "$ZAPRET_BUNDLE_NAME" '.assets[] | select(.name == $name) | .browser_download_url' | sed -n '1p')"
|
|
if [ -z "$ZAPRET_BUNDLE_URL" ]; then
|
|
warn "Failed to resolve the zapret download URL for $ZAPRET_BUNDLE_NAME. Continuing without zapret."
|
|
ZAPRET_SKIPPED_REASON="download URL unavailable"
|
|
clear_zapret_download_state
|
|
return 0
|
|
fi
|
|
}
|
|
|
|
decide_zapret_installation() {
|
|
if is_zapret_present; then
|
|
ZAPRET_ALREADY_PRESENT=1
|
|
msg "Detected an existing zapret installation. Skipping zapret installation."
|
|
return 0
|
|
fi
|
|
|
|
if confirm_prompt "Install optional zapret package?"; then
|
|
ZAPRET_REQUESTED=1
|
|
return 0
|
|
fi
|
|
|
|
ZAPRET_SKIPPED_REASON="installation declined by user"
|
|
warn "Continuing without zapret."
|
|
}
|
|
|
|
download_podkop_plus_packages() {
|
|
PODKOP_PLUS_PACKAGE_FILE="$TMP_DIR/$PODKOP_PLUS_PACKAGE_NAME"
|
|
PODKOP_PLUS_I18N_FILE="$TMP_DIR/$PODKOP_PLUS_I18N_NAME"
|
|
|
|
download_with_retry "$PODKOP_PLUS_PACKAGE_URL" "$PODKOP_PLUS_PACKAGE_FILE" "$PODKOP_PLUS_PACKAGE_NAME" || fail "Failed to download $PODKOP_PLUS_PACKAGE_NAME"
|
|
download_with_retry "$PODKOP_PLUS_I18N_URL" "$PODKOP_PLUS_I18N_FILE" "$PODKOP_PLUS_I18N_NAME" || fail "Failed to download $PODKOP_PLUS_I18N_NAME"
|
|
}
|
|
|
|
download_and_extract_zapret_package() {
|
|
bundle_file=""
|
|
inner_package_path=""
|
|
|
|
[ -n "$ZAPRET_BUNDLE_URL" ] || return 0
|
|
|
|
bundle_file="$TMP_DIR/$ZAPRET_BUNDLE_NAME"
|
|
if ! download_with_retry "$ZAPRET_BUNDLE_URL" "$bundle_file" "$ZAPRET_BUNDLE_NAME"; then
|
|
warn "Failed to download $ZAPRET_BUNDLE_NAME. Continuing without zapret."
|
|
ZAPRET_SKIPPED_REASON="download failed"
|
|
clear_zapret_download_state
|
|
return 0
|
|
fi
|
|
|
|
if [ "$PKG_IS_APK" -eq 1 ]; then
|
|
inner_package_path="$(unzip -l "$bundle_file" | awk '{print $4}' | grep -E '^apk/zapret-.*\.apk$' | sed -n '1p')"
|
|
else
|
|
inner_package_path="$(unzip -l "$bundle_file" | awk '{print $4}' | grep -E "^zapret_.*_${ZAPRET_ARCH}\.ipk$" | sed -n '1p')"
|
|
[ -n "$inner_package_path" ] || inner_package_path="$(unzip -l "$bundle_file" | awk '{print $4}' | grep -E '^zapret_.*\.ipk$' | sed -n '1p')"
|
|
fi
|
|
|
|
if [ -z "$inner_package_path" ]; then
|
|
warn "Failed to locate the zapret package inside $ZAPRET_BUNDLE_NAME. Continuing without zapret."
|
|
ZAPRET_SKIPPED_REASON="package archive layout is unsupported"
|
|
clear_zapret_download_state
|
|
return 0
|
|
fi
|
|
|
|
ZAPRET_PACKAGE_NAME="$(basename "$inner_package_path")"
|
|
ZAPRET_PACKAGE_FILE="$TMP_DIR/$ZAPRET_PACKAGE_NAME"
|
|
ZAPRET_PACKAGE_VERSION="$(extract_package_version "$ZAPRET_PACKAGE_NAME")"
|
|
|
|
if ! unzip -p "$bundle_file" "$inner_package_path" > "$ZAPRET_PACKAGE_FILE"; then
|
|
warn "Failed to extract $ZAPRET_PACKAGE_NAME. Continuing without zapret."
|
|
ZAPRET_SKIPPED_REASON="package extraction failed"
|
|
clear_zapret_download_state
|
|
return 0
|
|
fi
|
|
|
|
if [ ! -s "$ZAPRET_PACKAGE_FILE" ]; then
|
|
warn "The extracted zapret package is empty. Continuing without zapret."
|
|
ZAPRET_SKIPPED_REASON="empty package archive"
|
|
clear_zapret_download_state
|
|
return 0
|
|
fi
|
|
}
|
|
|
|
install_packages() {
|
|
set -- "$PODKOP_PLUS_PACKAGE_FILE" "$PODKOP_PLUS_I18N_FILE"
|
|
|
|
if [ -n "$ZAPRET_PACKAGE_FILE" ]; then
|
|
pkg_remove_if_installed "zapret"
|
|
set -- "$ZAPRET_PACKAGE_FILE" "$@"
|
|
fi
|
|
|
|
pkg_install_files "$@" || fail "Package installation failed"
|
|
}
|
|
|
|
post_install() {
|
|
rm -f /var/luci-indexcache* /tmp/luci-indexcache*
|
|
[ -x /etc/init.d/rpcd ] && /etc/init.d/rpcd reload >/dev/null 2>&1 || true
|
|
if [ -n "$ZAPRET_PACKAGE_FILE" ] && [ -x /usr/bin/podkop-plus ]; then
|
|
/usr/bin/podkop-plus neutralize_zapret_defaults >/dev/null 2>&1 ||
|
|
warn "Failed to neutralize the default standalone zapret profile after installation."
|
|
fi
|
|
|
|
if [ "$PODKOP_WAS_ENABLED" -eq 1 ] && [ -x /etc/init.d/podkop-plus ]; then
|
|
/etc/init.d/podkop-plus enable >/dev/null 2>&1 || true
|
|
fi
|
|
}
|
|
|
|
main() {
|
|
trap cleanup EXIT HUP INT TERM
|
|
|
|
check_root
|
|
init_tmp_dir
|
|
detect_fetcher
|
|
sync_time
|
|
check_system
|
|
|
|
pkg_list_update || fail "Failed to update package lists"
|
|
ensure_bootstrap_tool "jq" "jq"
|
|
ensure_bootstrap_tool "unzip" "unzip"
|
|
|
|
resolve_podkop_plus_release
|
|
reset_legacy_config_if_needed
|
|
remove_conflicting_dns_proxy
|
|
remove_old_sing_box_if_needed
|
|
resolve_arch_candidates
|
|
decide_zapret_installation
|
|
resolve_zapret_release
|
|
|
|
cleanup_legacy_installation
|
|
download_podkop_plus_packages
|
|
download_and_extract_zapret_package
|
|
install_packages
|
|
post_install
|
|
|
|
msg "Podkop Plus $PODKOP_PLUS_PACKAGE_VERSION has been installed successfully"
|
|
msg "Source release: ${REPO_OWNER}/${REPO_NAME}@${PODKOP_PLUS_RELEASE_TAG}"
|
|
|
|
if [ -n "$ZAPRET_PACKAGE_VERSION" ]; then
|
|
msg "zapret $ZAPRET_PACKAGE_VERSION installed for architecture $ZAPRET_ARCH"
|
|
msg "zapret source: remittor/zapret-openwrt@${ZAPRET_RELEASE_TAG_RESOLVED}"
|
|
elif [ "$ZAPRET_ALREADY_PRESENT" -eq 1 ]; then
|
|
msg "Using the existing zapret installation"
|
|
elif [ -n "$ZAPRET_SKIPPED_REASON" ]; then
|
|
warn "zapret was not installed: $ZAPRET_SKIPPED_REASON"
|
|
fi
|
|
|
|
warn "Open LuCI and review your rules before enabling Podkop Plus"
|
|
}
|
|
|
|
main
|