mirror of
https://github.com/tnb-labs/panel.git
synced 2026-08-31 01:12:17 +08:00
耗子
379 lines
15 KiB
Bash
379 lines
15 KiB
Bash
#!/bin/bash
|
|
export PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:$PATH
|
|
|
|
: '
|
|
Copyright (C) 2022 - now HaoZi Technology Co., Ltd.
|
|
|
|
This program is free software: you can redistribute it and/or modify
|
|
it under the terms of the GNU Affero General Public License as published
|
|
by the Free Software Foundation, either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU Affero General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Affero General Public License
|
|
along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
'
|
|
|
|
LOGO="+----------------------------------------------------\n| 耗子面板安装脚本\n+----------------------------------------------------\n| Copyright © 2022-"$(date +%Y)" 耗子科技 All rights reserved.\n+----------------------------------------------------"
|
|
HR="+----------------------------------------------------"
|
|
setup_Path="/www"
|
|
current_Path=$(pwd)
|
|
sshPort=$(cat /etc/ssh/sshd_config | grep 'Port ' | awk '{print $2}')
|
|
inChina=$(curl --retry 2 -m 10 -L https://www.cloudflare-cn.com/cdn-cgi/trace 2> /dev/null | grep -qx 'loc=CN' && echo "true" || echo "false")
|
|
|
|
Prepare_System() {
|
|
if [ $(whoami) != "root" ]; then
|
|
echo -e $HR
|
|
echo "错误：请使用 root 用户运行安装命令。"
|
|
exit 1
|
|
fi
|
|
|
|
ARCH=$(uname -m)
|
|
OS=$(source /etc/os-release && { [[ "$ID" == "debian" ]] && echo "debian"; } || { [[ "$ID" == "centos" ]] || [[ "$ID" == "rhel" ]] || [[ "$ID" == "rocky" ]] || [[ "$ID" == "almalinux" ]] && echo "centos"; } || echo "unknown")
|
|
if [ "${OS}" == "unknown" ]; then
|
|
echo -e $HR
|
|
echo "错误：该系统不支持安装耗子面板，请更换 Debian 12.x / RHEL 9.x 安装。"
|
|
exit 1
|
|
fi
|
|
if [ "${ARCH}" != "x86_64" ] && [ "${ARCH}" != "aarch64" ]; then
|
|
echo -e $HR
|
|
echo "错误：该系统架构不支持安装耗子面板，请更换 x86_64 / aarch64 架构安装。"
|
|
exit 1
|
|
fi
|
|
|
|
if [ "${ARCH}" == "x86_64" ]; then
|
|
if [ "$(cat /proc/cpuinfo | grep -c ssse3)" -lt "1" ]; then
|
|
echo -e $HR
|
|
echo "错误：至少需运行在支持 x86-64-v2 的 CPU 上，请开启对应 CPU 指令集后重试。"
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
kernelVersion=$(uname -r | awk -F '.' '{print $1}')
|
|
if [ "${kernelVersion}" != "5" ] && [ "${kernelVersion}" != "6" ]; then
|
|
echo -e $HR
|
|
echo "错误：该系统内核版本太低，不支持安装耗子面板，请更换 Debian 12 / RHEL 9.x 安装。"
|
|
exit 1
|
|
fi
|
|
|
|
is64bit=$(getconf LONG_BIT)
|
|
if [ "${is64bit}" != '64' ]; then
|
|
echo -e $HR
|
|
echo "错误：32 位系统不支持安装耗子面板，请更换 64 位系统安装。"
|
|
exit 1
|
|
fi
|
|
|
|
isInstalled=$(systemctl status panel 2>&1 | grep "Active")
|
|
if [ "${isInstalled}" != "" ]; then
|
|
echo -e $HR
|
|
echo "错误：耗子面板已安装，请勿重复安装。"
|
|
exit 1
|
|
fi
|
|
|
|
if ! id -u "www" > /dev/null 2>&1; then
|
|
groupadd www
|
|
useradd -s /sbin/nologin -g www www
|
|
fi
|
|
|
|
if [ ! -d ${setup_Path} ]; then
|
|
mkdir ${setup_Path}
|
|
fi
|
|
|
|
timedatectl set-timezone Asia/Shanghai
|
|
|
|
[ -s /etc/selinux/config ] && sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config
|
|
setenforce 0 > /dev/null 2>&1
|
|
|
|
ulimit -n 1048576
|
|
echo 2147483584 > /proc/sys/fs/file-max
|
|
checkSoftNofile=$(cat /etc/security/limits.conf | grep '^* soft nofile .*$')
|
|
checkHardNofile=$(cat /etc/security/limits.conf | grep '^* hard nofile .*$')
|
|
checkSoftNproc=$(cat /etc/security/limits.conf | grep '^* soft nproc .*$')
|
|
checkHardNproc=$(cat /etc/security/limits.conf | grep '^* hard nproc .*$')
|
|
checkFsFileMax=$(cat /etc/sysctl.conf | grep '^fs.file-max.*$')
|
|
if [ "${checkSoftNofile}" == "" ]; then
|
|
echo "* soft nofile 1048576" >> /etc/security/limits.conf
|
|
fi
|
|
if [ "${checkHardNofile}" == "" ]; then
|
|
echo "* hard nofile 1048576" >> /etc/security/limits.conf
|
|
fi
|
|
if [ "${checkSoftNproc}" == "" ]; then
|
|
echo "* soft nproc 1048576" >> /etc/security/limits.conf
|
|
fi
|
|
if [ "${checkHardNproc}" == "" ]; then
|
|
echo "* hard nproc 1048576" >> /etc/security/limits.conf
|
|
fi
|
|
if [ "${checkFsFileMax}" == "" ]; then
|
|
echo fs.file-max = 2147483584 >> /etc/sysctl.conf
|
|
fi
|
|
|
|
# 自动开启 BBR
|
|
isBBRSupported=$(ls -l /lib/modules/*/kernel/net/ipv4 | grep -c tcp_bbr)
|
|
if [ "${isBBRSupported}" != "0" ]; then
|
|
qdisc=$(sysctl net.core.default_qdisc | awk '{print $3}')
|
|
echo "net.core.default_qdisc=${qdisc}" >> /etc/sysctl.conf
|
|
echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf
|
|
sysctl -p
|
|
fi
|
|
|
|
if [ "${OS}" == "centos" ]; then
|
|
if ${inChina}; then
|
|
sed -e 's|^mirrorlist=|#mirrorlist=|g' \
|
|
-e 's|^#baseurl=http://dl.rockylinux.org/$contentdir|baseurl=https://mirrors.tencent.com/rocky|g' \
|
|
-e 's|^# baseurl=http://dl.rockylinux.org/$contentdir|baseurl=https://mirrors.tencent.com/rocky|g' \
|
|
-i.bak \
|
|
/etc/yum.repos.d/[Rr]ocky*.repo
|
|
sed -e 's|^mirrorlist=|#mirrorlist=|g' \
|
|
-e 's|^#baseurl=https://repo.almalinux.org|baseurl=https://mirrors.tencent.com|g' \
|
|
-e 's|^# baseurl=https://repo.almalinux.org|baseurl=https://mirrors.tencent.com|g' \
|
|
-i.bak \
|
|
/etc/yum.repos.d/[Aa]lmalinux*.repo
|
|
|
|
dnf makecache -y
|
|
fi
|
|
dnf install dnf-plugins-core -y
|
|
dnf install epel-release -y
|
|
dnf config-manager --set-enabled epel
|
|
if ${inChina}; then
|
|
sed -i 's|^#baseurl=https://download.example/pub|baseurl=https://mirrors.tencent.com|' /etc/yum.repos.d/epel*
|
|
sed -i 's|^# baseurl=https://download.example/pub|baseurl=https://mirrors.tencent.com|' /etc/yum.repos.d/epel*
|
|
sed -i 's|^metalink|#metalink|' /etc/yum.repos.d/epel*
|
|
dnf makecache -y
|
|
fi
|
|
# EL 8
|
|
dnf config-manager --set-enabled powertools
|
|
# EL 9
|
|
dnf config-manager --set-enabled crb
|
|
# Rocky Linux
|
|
/usr/bin/crb enable
|
|
dnf makecache -y
|
|
dnf install -y curl wget zip unzip tar p7zip p7zip-plugins git jq git-core dos2unix rsyslog
|
|
elif [ "${OS}" == "debian" ]; then
|
|
if ${inChina}; then
|
|
sed -i 's/deb.debian.org/mirrors.tencent.com/g' /etc/apt/sources.list
|
|
sed -i 's/security.debian.org/mirrors.tencent.com/g' /etc/apt/sources.list
|
|
fi
|
|
apt-get update -y
|
|
apt-get install -y curl wget zip unzip tar p7zip p7zip-full git jq git dos2unix rsyslog
|
|
fi
|
|
if [ "$?" != "0" ]; then
|
|
echo -e $HR
|
|
echo "错误：安装面板依赖软件失败，请截图错误信息寻求帮助。"
|
|
exit 1
|
|
fi
|
|
|
|
systemctl enable rsyslog
|
|
systemctl start rsyslog
|
|
if [ "$?" != "0" ]; then
|
|
echo -e $HR
|
|
echo "错误：安装面板依赖软件失败，请截图错误信息寻求帮助。"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
Auto_Swap() {
|
|
# 判断是否有swap
|
|
swap=$(LC_ALL=C free | grep Swap | awk '{print $2}')
|
|
if [ "${swap}" -gt 1 ]; then
|
|
return
|
|
fi
|
|
|
|
# 设置swap
|
|
swapFile="${setup_Path}/swap"
|
|
btrfsCheck=$(df -T /www | awk '{print $2}' | tail -n 1)
|
|
if [ "${btrfsCheck}" == "btrfs" ]; then
|
|
btrfs filesystem mkswapfile --size 4G --uuid clear ${swapFile}
|
|
else
|
|
dd if=/dev/zero of=$swapFile bs=1M count=4096
|
|
fi
|
|
chmod 600 $swapFile
|
|
mkswap -f $swapFile
|
|
swapon $swapFile
|
|
echo "$swapFile swap swap defaults 0 0" >> /etc/fstab
|
|
|
|
mount -a
|
|
if [ "$?" != "0" ]; then
|
|
echo -e $HR
|
|
echo "错误：检测到系统的 /etc/fstab 文件配置有误，请检查排除后重试，问题解决前勿重启系统。"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
Init_Panel() {
|
|
systemctl stop panel
|
|
systemctl disable panel
|
|
rm -f /etc/systemd/system/panel.service
|
|
rm -rf ${setup_Path}/panel
|
|
mkdir ${setup_Path}/server
|
|
mkdir ${setup_Path}/server/cron
|
|
mkdir ${setup_Path}/server/cron/logs
|
|
chmod -R 755 ${setup_Path}/server
|
|
mkdir ${setup_Path}/panel
|
|
# 下载面板zip包并解压
|
|
if [ "${ARCH}" == "x86_64" ]; then
|
|
if ${inChina}; then
|
|
panelZip=$(curl -sSL "https://git.haozi.net/api/v4/projects/opensource%2Fpanel/releases/permalink/latest" | jq -r '.assets.links[] | select(.name | contains("amd64v2")) | .direct_asset_url')
|
|
panelZipName=$(curl -sSL "https://git.haozi.net/api/v4/projects/opensource%2Fpanel/releases/permalink/latest" | jq -r '.assets.links[] | select(.name | contains("amd64v2")) | .name')
|
|
else
|
|
panelZip=$(curl -sSL "https://api.github.com/repos/TheTNB/panel/releases/latest" | jq -r '.assets[] | select(.name | contains("amd64v2")) | .browser_download_url')
|
|
panelZipName=$(curl -sSL "https://api.github.com/repos/TheTNB/panel/releases/latest" | jq -r '.assets[] | select(.name | contains("amd64v2")) | .name')
|
|
fi
|
|
elif [ "${ARCH}" == "aarch64" ]; then
|
|
if ${inChina}; then
|
|
panelZip=$(curl -sSL "https://git.haozi.net/api/v4/projects/opensource%2Fpanel/releases/permalink/latest" | jq -r '.assets.links[] | select(.name | contains("arm64")) | .direct_asset_url')
|
|
panelZipName=$(curl -sSL "https://git.haozi.net/api/v4/projects/opensource%2Fpanel/releases/permalink/latest" | jq -r '.assets.links[] | select(.name | contains("arm64")) | .name')
|
|
else
|
|
panelZip=$(curl -sSL "https://api.github.com/repos/TheTNB/panel/releases/latest" | jq -r '.assets[] | select(.name | contains("arm64")) | .browser_download_url')
|
|
panelZipName=$(curl -sSL "https://api.github.com/repos/TheTNB/panel/releases/latest" | jq -r '.assets[] | select(.name | contains("arm64")) | .name')
|
|
fi
|
|
else
|
|
echo -e $HR
|
|
echo "错误：该系统架构不支持安装耗子面板，请更换 x86_64 / aarch64 架构安装。"
|
|
exit 1
|
|
fi
|
|
if [ "$?" != "0" ] || [ "${panelZip}" == "" ] || [ "${panelZipName}" == "" ]; then
|
|
echo -e $HR
|
|
echo "错误：获取面板下载链接失败，请截图错误信息寻求帮助。"
|
|
exit 1
|
|
fi
|
|
wget -T 120 -t 3 -O ${setup_Path}/panel/${panelZipName} "${panelZip}"
|
|
|
|
# 下载 checksums 文件
|
|
if ${inChina}; then
|
|
checksumsFile=$(curl -sSL "https://git.haozi.net/api/v4/projects/opensource%2Fpanel/releases/permalink/latest" | jq -r '.assets.links[] | select(.name | contains("checksums")) | .direct_asset_url')
|
|
checksumsFileName=$(curl -sSL "https://git.haozi.net/api/v4/projects/opensource%2Fpanel/releases/permalink/latest" | jq -r '.assets.links[] | select(.name | contains("checksums")) | .name')
|
|
else
|
|
checksumsFile=$(curl -sSL "https://api.github.com/repos/TheTNB/panel/releases/latest" | jq -r '.assets[] | select(.name | contains("checksums")) | .browser_download_url')
|
|
checksumsFileName=$(curl -sSL "https://api.github.com/repos/TheTNB/panel/releases/latest" | jq -r '.assets[] | select(.name | contains("checksums")) | .name')
|
|
fi
|
|
wget -T 20 -t 3 -O ${setup_Path}/panel/${checksumsFileName} "${checksumsFile}"
|
|
|
|
cd ${setup_Path}/panel
|
|
if ! sha256sum --status -c ${checksumsFileName} --ignore-missing; then
|
|
echo -e $HR
|
|
echo "错误：面板压缩包 checksum 校验失败，文件可能被篡改或不完整，已终止操作"
|
|
exit 1
|
|
fi
|
|
unzip -o ${panelZipName}
|
|
if [ "$?" != "0" ]; then
|
|
echo -e $HR
|
|
echo "错误：解压面板失败，请截图错误信息寻求帮助。"
|
|
exit 1
|
|
fi
|
|
rm -rf ${panelZipName}
|
|
rm -rf ${checksumsFileName}
|
|
cp panel-example.conf panel.conf
|
|
|
|
# 设置面板
|
|
entrance=$(cat /dev/urandom | head -n 16 | md5sum | head -c 6)
|
|
sed -i "s!APP_ENTRANCE=.*!APP_ENTRANCE=/${entrance}!g" panel.conf
|
|
${setup_Path}/panel/panel --env="panel.conf" artisan key:generate
|
|
${setup_Path}/panel/panel --env="panel.conf" artisan jwt:secret
|
|
openssl req -x509 -nodes -days 36500 -newkey ec:<(openssl ecparam -name secp384r1) -keyout ${setup_Path}/panel/storage/ssl.key -out ${setup_Path}/panel/storage/ssl.crt -subj "/C=CN/ST=Tianjin/L=Tianjin/O=HaoZi Technology Co., Ltd./OU=HaoZi Panel/CN=Panel"
|
|
chmod -R 700 ${setup_Path}/panel
|
|
cp -f scripts/panel.sh /usr/bin/panel
|
|
chmod -R 700 /usr/bin/panel
|
|
# 防火墙放行
|
|
if [ "${OS}" == "centos" ]; then
|
|
dnf install firewalld -y
|
|
systemctl enable firewalld
|
|
systemctl start firewalld
|
|
firewall-cmd --set-default-zone=public > /dev/null 2>&1
|
|
firewall-cmd --permanent --zone=public --add-port=22/tcp > /dev/null 2>&1
|
|
firewall-cmd --permanent --zone=public --add-port=80/tcp > /dev/null 2>&1
|
|
firewall-cmd --permanent --zone=public --add-port=443/tcp > /dev/null 2>&1
|
|
firewall-cmd --permanent --zone=public --add-port=443/udp > /dev/null 2>&1
|
|
firewall-cmd --permanent --zone=public --add-port=8888/tcp > /dev/null 2>&1
|
|
firewall-cmd --permanent --zone=public --add-port=${sshPort}/tcp > /dev/null 2>&1
|
|
firewall-cmd --reload
|
|
elif [ "${OS}" == "debian" ]; then
|
|
apt-get install ufw -y
|
|
echo y | ufw enable
|
|
systemctl enable ufw
|
|
systemctl start ufw
|
|
ufw allow 22/tcp
|
|
ufw allow 80/tcp
|
|
ufw allow 443/tcp
|
|
ufw allow 443/udp
|
|
ufw allow 8888/tcp
|
|
ufw allow ${sshPort}/tcp
|
|
ufw reload
|
|
fi
|
|
if [ "$?" != "0" ]; then
|
|
echo -e $HR
|
|
echo "错误：防火墙放行失败，请截图错误信息寻求帮助。"
|
|
exit 1
|
|
fi
|
|
# 写入服务文件
|
|
cat > /etc/systemd/system/panel.service << EOF
|
|
[Unit]
|
|
Description=HaoZi Panel
|
|
After=syslog.target network.target
|
|
Wants=network.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
WorkingDirectory=${setup_Path}/panel/
|
|
ExecStart=/www/panel/panel --env="/www/panel/panel.conf"
|
|
ExecReload=kill -s HUP \$MAINPID
|
|
ExecStop=kill -s QUIT \$MAINPID
|
|
User=root
|
|
Restart=always
|
|
RestartSec=5
|
|
LimitNOFILE=1048576
|
|
LimitNPROC=1048576
|
|
LimitCORE=1048576
|
|
Delegate=yes
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
systemctl daemon-reload
|
|
systemctl enable panel.service
|
|
systemctl start panel.service
|
|
if [ "$?" != "0" ]; then
|
|
echo -e $HR
|
|
echo "错误：面板启动失败，请截图错误信息寻求帮助。"
|
|
exit 1
|
|
fi
|
|
|
|
clear
|
|
echo -e $LOGO
|
|
echo '面板安装成功！'
|
|
echo -e $HR
|
|
panel init
|
|
panel getInfo
|
|
|
|
cd ${current_Path}
|
|
rm -f install_panel.sh
|
|
rm -f install_panel.sh.checksum.txt
|
|
}
|
|
|
|
clear
|
|
echo -e $LOGO
|
|
|
|
# 安装确认
|
|
read -p "面板将安装至 ${setup_Path} 目录，请输入 y 并回车以开始安装：" install
|
|
if [ "$install" != 'y' ]; then
|
|
echo "输入不正确，已退出安装。"
|
|
exit
|
|
fi
|
|
|
|
clear
|
|
echo -e $LOGO
|
|
echo '安装面板依赖软件（如报错请检查 APT/Yum 源是否正常）'
|
|
echo -e $HR
|
|
sleep 2s
|
|
Prepare_System
|
|
Auto_Swap
|
|
|
|
echo -e $LOGO
|
|
echo '安装面板运行环境（视网络情况可能需要较长时间）'
|
|
echo -e $HR
|
|
sleep 2s
|
|
Init_Panel
|