#!/bin/bash # Xray 管理脚本 - 集成安装、卸载和管理功能 # 专门支持 VLESS+REALITY 协议 # 使用方法: chmod +x xray-manager.sh && ./xray-manager.sh # 全局变量 XRAY_PATH="/usr/local/bin" CONFIG_PATH="/usr/local/etc/xray" REALITY_PORT="" # VLESS+REALITY 端口 LOG_PATH="/var/log/xray" LOG_FILE="/var/log/xray-manager.log" SCRIPT_VERSION="1.0.0" XRAY_VERSION="v25.3.6" # 当前固定的Xray版本 UUID="" PRIVATE_KEY="" PUBLIC_KEY="" CONFIG_BACKUP="" SERVER_IP="" # 颜色定义 RED='\033[0;31m' GREEN='\033[0;32m' YELLOW='\033[0;33m' BLUE='\033[0;34m' CYAN='\033[0;36m' NC='\033[0m' # No Color # 进度条函数 show_progress() { local pid=$1 local delay=0.1 local spinstr='|/-\' local temp local count=0 local start_time=$(date +%s) echo -n " " while ps -p $pid > /dev/null; do temp=${spinstr#?} printf "\r[%c] %s 已进行 %ds" "$spinstr" "$2" "$(($(date +%s) - start_time))" spinstr=$temp${spinstr%"$temp"} sleep $delay count=$((count + 1)) done printf "\r\033[K" } # 进度条显示函数 - 适用于apt操作 apt_progress() { local cmd="$1" local msg="$2" local logfile="$LOG_FILE.tmp" echo -e "${CYAN}开始 $msg...${NC}" touch "$logfile" ($cmd 2>&1 | tee -a "$LOG_FILE" > "$logfile") & local pid=$! # 显示进度条 local start_time=$(date +%s) local dots="" local status="" local progress=0 local last_line="" local delay=0.2 while ps -p $pid > /dev/null; do # 读取最后一行日志 if [[ -f "$logfile" ]]; then last_line=$(tail -n 1 "$logfile") # 尝试从输出中提取进度信息 if [[ $last_line == *%* ]]; then status="${last_line%%(*}" progress="${last_line#*(}" progress="${progress%%)*}" printf "\r\033[K${CYAN}[$msg]${NC} %s %s " "$status" "$progress" else dots="${dots}." if [[ ${#dots} -gt 5 ]]; then dots="."; fi elapsed=$(($(date +%s) - start_time)) printf "\r\033[K${CYAN}[$msg]${NC} 进行中%s (%ds)" "$dots" "$elapsed" fi fi sleep $delay done if wait $pid; then printf "\r\033[K${GREEN}[$msg]${NC} 完成! 用时: %ds\n" "$(($(date +%s) - start_time))" rm -f "$logfile" return 0 else printf "\r\033[K${RED}[$msg]${NC} 失败! 查看日志: $LOG_FILE\n" rm -f "$logfile" return 1 fi } # 日志函数 log_info() { echo -e "${GREEN}[INFO]${NC} $1" | tee -a "$LOG_FILE" } log_warn() { echo -e "${YELLOW}[WARN]${NC} $1" | tee -a "$LOG_FILE" } log_error() { echo -e "${RED}[ERROR]${NC} $1" >&2 | tee -a "$LOG_FILE" } log_debug() { echo -e "${BLUE}[DEBUG]${NC} $1" | tee -a "$LOG_FILE" } # 检查是否有 root 权限 check_root() { if [[ $EUID -ne 0 ]]; then log_error "此脚本需要 root 权限运行" exit 1 fi } # 检查系统环境 check_system() { # 显示系统信息 echo "系统信息:" echo "------------------------" if [ -f /etc/os-release ]; then cat /etc/os-release | grep "PRETTY_NAME" | cut -d= -f2- | tr -d '"' fi echo "内核版本: $(uname -r)" echo "架构: $(uname -m)" echo "------------------------" # 检查是否为 Debian/Ubuntu 系统 if [[ ! -f /etc/debian_version && ! -f /etc/lsb-release ]]; then log_warn "未检测到 Debian/Ubuntu 系统，脚本可能无法正常工作" read -rp "是否继续? [y/N] " response if [[ ! "$response" =~ ^[yY]$ ]]; then exit 1 fi fi # 检查网络连接 echo -n "检查网络连接... " if ping -c 1 -W 2 github.com &>/dev/null; then echo -e "${GREEN}连接正常${NC}" else echo -e "${YELLOW}无法连接到 GitHub${NC}" log_warn "无法连接到 GitHub，请检查网络连接" read -rp "是否继续? [y/N] " response if [[ ! "$response" =~ ^[yY]$ ]]; then exit 1 fi fi } # 获取最新版本号 get_latest_version() { # 利用GitHub重定向特性获取最新版本 local redirect_url=$(curl -s -L -o /dev/null -w '%{url_effective}' https://github.com/XTLS/Xray-core/releases/latest 2>/dev/null) local version=$(echo "$redirect_url" | grep -o 'tag/v[0-9.]*' | cut -d/ -f2 2>/dev/null) # 如果获取失败，尝试备用方法 if [[ -z "$version" ]]; then # 方法2: 通过API获取 version=$(curl -s https://api.github.com/repos/XTLS/Xray-core/releases/latest | grep -o '"tag_name": "v[0-9.]*"' | cut -d'"' -f4 2>/dev/null) fi # 如果还是失败，返回当前全局版本 if [[ -z "$version" ]]; then version="$XRAY_VERSION" else # 更新全局变量 XRAY_VERSION="$version" fi echo "$version" } # 备份函数 backup_config() { if [[ -d "$CONFIG_PATH" ]]; then CONFIG_BACKUP="${CONFIG_PATH}_backup_$(date +%Y%m%d%H%M%S)" log_info "备份现有配置到 $CONFIG_BACKUP" cp -r "$CONFIG_PATH" "$CONFIG_BACKUP" || log_warn "配置备份失败" # 备份 Xray 信息文件 if [[ -f "/root/xray_info.txt" ]]; then cp "/root/xray_info.txt" "${CONFIG_BACKUP}/xray_info.txt.bak" || log_warn "Xray 信息文件备份失败" fi else log_warn "找不到配置目录，跳过备份" fi } # 显示帮助信息 show_help() { echo "Xray 管理脚本 v${SCRIPT_VERSION}" echo "用法: $0 [选项]" echo "" echo "选项:" echo " -h, --help 显示此帮助信息" echo " -i, --install 直接运行安装" echo " -u, --uninstall 直接运行卸载" echo " -s, --status 查看 Xray 状态" echo " -up, --update 更新 Xray" echo "" echo "无参数运行脚本将显示交互式菜单" } # 菜单函数 show_menu() { clear echo "==================================================" echo -e "${CYAN}Xray REALITY管理脚本 v${SCRIPT_VERSION}${NC}" echo -e "${CYAN}(VLESS+REALITY 协议 - 稳定版本)${NC}" echo "==================================================" echo -e "1) ${GREEN}安装 Xray (自动配置所有稳定功能)${NC}" echo -e "2) ${RED}卸载 Xray${NC}" echo -e "3) ${YELLOW}更新 Xray${NC}" echo -e "4) ${BLUE}查看 Xray 状态${NC}" echo -e "5) ${CYAN}查看配置信息${NC}" echo -e "6) ${GREEN}重启服务${NC}" echo -e "0) ${RED}退出${NC}" echo "==================================================" echo "" read -rp "请输入选项 [0-6]: " choice case $choice in 1) install_xray ;; 2) uninstall_xray ;; 3) update_xray ;; 4) check_status ;; 5) show_config ;; 6) restart_service ;; 0) exit 0 ;; *) log_error "无效选项" && sleep 2 && show_menu ;; esac } # 安装依赖 install_dependencies() { log_info "安装必要依赖" # 更新软件包列表 apt_progress "apt-get update" "更新软件包列表" || { log_error "更新软件包列表失败" return 1 } # 安装必要工具（包含 jq 以支持后量子密码学配置） local deps=(curl wget jq unzip) for dep in "${deps[@]}"; do if ! command -v "$dep" &>/dev/null; then apt_progress "apt-get install -y $dep" "安装 $dep" || { log_error "安装 $dep 失败" return 1 } else log_info "$dep 已安装，跳过" fi done # 检查安装结果 local all_installed=true for dep in "${deps[@]}"; do if ! command -v "$dep" &>/dev/null; then log_error "$dep 安装失败" all_installed=false fi done if [ "$all_installed" = true ]; then log_info "所有依赖安装完成" return 0 else log_error "部分依赖安装失败" return 1 fi } # 下载 Xray download_xray() { log_info "开始下载 Xray" # 检查Xray服务是否正在运行，如果是则停止 if systemctl is-active xray &>/dev/null; then log_info "检测到Xray服务正在运行，先停止服务" echo -n "停止 Xray 服务... " if systemctl stop xray &>/dev/null; then echo -e "${GREEN}成功${NC}" else echo -e "${RED}失败${NC}" log_warn "无法停止 Xray 服务，可能会影响安装" fi # 等待进程完全停止 echo -n "等待进程释放资源... " sleep 2 if pgrep -x "xray" > /dev/null; then # 如果进程仍在运行，尝试强制终止 pkill -9 -x "xray" &>/dev/null sleep 1 fi echo -e "${GREEN}完成${NC}" fi # 创建临时目录 local tmp_dir="/tmp/xray_install" mkdir -p "$tmp_dir" # 获取最新版本 echo -n "获取 Xray 最新版本... " local latest_version=$(get_latest_version) echo -e "${GREEN}$latest_version${NC}" # 确定系统架构 local arch case $(uname -m) in x86_64|amd64) arch="64" ;; armv7l|armv8l) arch="arm32-v7a" ;; aarch64) arch="arm64-v8a" ;; *) arch="64" ;; # 默认使用64位版本 esac # 构建下载URL local download_url="https://github.com/XTLS/Xray-core/releases/download/$latest_version/Xray-linux-$arch.zip" log_info "下载链接: $download_url" # 下载Xray echo -n "下载 Xray... " if wget -q --show-progress -O "$tmp_dir/xray.zip" "$download_url"; then echo -e "${GREEN}成功${NC}" else echo -e "${RED}失败${NC}" log_error "下载 Xray 失败" return 1 fi # 解压文件 echo -n "解压 Xray... " if unzip -q -o "$tmp_dir/xray.zip" -d "$tmp_dir"; then echo -e "${GREEN}成功${NC}" else echo -e "${RED}失败${NC}" log_error "解压 Xray 失败" return 1 fi # 创建目录 mkdir -p "$XRAY_PATH" "$CONFIG_PATH" "$LOG_PATH" # 复制文件前确保目标文件不被占用 if [[ -f "$XRAY_PATH/xray" ]]; then # 如果文件存在，先尝试重命名它 mv "$XRAY_PATH/xray" "$XRAY_PATH/xray.old" 2>/dev/null fi # 复制文件 echo -n "安装 Xray 核心文件... " if cp "$tmp_dir/xray" "$XRAY_PATH/xray" && chmod +x "$XRAY_PATH/xray"; then echo -e "${GREEN}成功${NC}" # 删除旧文件 rm -f "$XRAY_PATH/xray.old" 2>/dev/null else echo -e "${RED}失败${NC}" log_error "安装 Xray 核心文件失败" # 恢复旧文件 if [[ -f "$XRAY_PATH/xray.old" ]]; then mv "$XRAY_PATH/xray.old" "$XRAY_PATH/xray" 2>/dev/null fi return 1 fi # 复制 geoip.dat 和 geosite.dat echo -n "安装 GeoIP 和 GeoSite 数据... " if cp "$tmp_dir/geoip.dat" "$XRAY_PATH/geoip.dat" && \ cp "$tmp_dir/geosite.dat" "$XRAY_PATH/geosite.dat"; then echo -e "${GREEN}成功${NC}" else echo -e "${RED}失败${NC}" log_warn "安装 GeoIP 和 GeoSite 数据失败，将在配置时下载" fi # 清理临时文件 rm -rf "$tmp_dir" log_info "Xray $latest_version 安装完成" return 0 } # 生成随机 PORT 和 UUID generate_random_values() { log_info "生成随机配置值" # 询问用户是否指定端口 if [[ -z "$REALITY_PORT" ]]; then read -rp "是否指定端口? [y/N] " specify_port if [[ "$specify_port" =~ ^[yY]$ ]]; then # 用户选择指定端口 while true; do read -rp "请输入端口号 (1-65535): " REALITY_PORT # 验证端口是否为有效数字 if ! [[ "$REALITY_PORT" =~ ^[0-9]+$ ]] || [ "$REALITY_PORT" -lt 1 ] || [ "$REALITY_PORT" -gt 65535 ]; then log_error "无效的端口号，请输入1-65535之间的数字" continue fi # 检查端口是否被占用 if ss -tuln | grep -q ":$REALITY_PORT "; then log_warn "端口 $REALITY_PORT 已被占用，请选择其他端口" continue fi log_info "将使用指定端口: $REALITY_PORT" break done else # 用户选择随机端口，继续原来的逻辑 # 尝试找一个未被占用的端口 local attempts=0 while [[ "$attempts" -lt 10 ]]; do REALITY_PORT=$(shuf -i 10000-60000 -n 1) # 检查端口是否被占用 if ! ss -tuln | grep -q ":$REALITY_PORT "; then log_info "生成随机端口: $REALITY_PORT" break fi attempts=$((attempts + 1)) done if [[ "$attempts" -eq 10 ]]; then log_warn "无法找到未占用的端口，使用随机端口: $REALITY_PORT" fi fi else # 验证端口是否为有效数字 if ! [[ "$REALITY_PORT" =~ ^[0-9]+$ ]]; then log_warn "无效的端口: $REALITY_PORT，生成新的随机端口" REALITY_PORT=$(shuf -i 10000-60000 -n 1) fi fi # 生成 UUID if [[ -z "$UUID" ]]; then # 检查xray命令是否可用 if [[ -f "$XRAY_PATH/xray" && -x "$XRAY_PATH/xray" ]]; then UUID=$($XRAY_PATH/xray uuid) log_info "生成 UUID: $UUID" else # 如果xray不可用，使用uuidgen或者随机生成 if command -v uuidgen &>/dev/null; then UUID=$(uuidgen) else # 简单的UUID生成方法（不完全符合标准但足够使用） UUID=$(cat /proc/sys/kernel/random/uuid 2>/dev/null || (date +%s%N | sha256sum | head -c 32 | sed 's/\(..\)\(..\)\(..\)\(..\)\(..\)\(..\)\(..\)\(..\)/\1\2\3\4-\5\6-\7\8-/')) fi log_info "生成 UUID: $UUID" fi else # 验证UUID格式 if ! [[ "$UUID" =~ ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ ]]; then log_warn "无效的 UUID 格式: $UUID，生成新的 UUID" if [[ -f "$XRAY_PATH/xray" && -x "$XRAY_PATH/xray" ]]; then UUID=$($XRAY_PATH/xray uuid) else UUID=$(cat /proc/sys/kernel/random/uuid 2>/dev/null || (date +%s%N | sha256sum | head -c 32 | sed 's/\(..\)\(..\)\(..\)\(..\)\(..\)\(..\)\(..\)\(..\)/\1\2\3\4-\5\6-\7\8-/')) fi log_info "生成新的 UUID: $UUID" fi fi # 生成 REALITY 密钥对 log_info "生成 REALITY 密钥对" if [[ -z "$PRIVATE_KEY" || -z "$PUBLIC_KEY" ]]; then local key_pair if [[ -f "$XRAY_PATH/xray" && -x "$XRAY_PATH/xray" ]]; then key_pair=$($XRAY_PATH/xray x25519) PRIVATE_KEY=$(echo "$key_pair" | grep -E "(Private|PrivateKey)" | awk '{print $NF}') PUBLIC_KEY=$(echo "$key_pair" | grep -E "(Public|Password)" | awk '{print $NF}') # 验证密钥是否正确生成 if [[ -z "$PRIVATE_KEY" || -z "$PUBLIC_KEY" ]]; then log_error "密钥生成失败，请检查 Xray 版本" return 1 fi else log_warn "无法使用 xray 生成密钥对，将跳过密钥生成" log_info "安装完成后，将自动生成密钥对" return 1 fi fi # 获取服务器IP get_server_ip log_debug "私钥: $PRIVATE_KEY" log_debug "公钥: $PUBLIC_KEY" # 验证密钥是否成功生成 if [[ -z "$PRIVATE_KEY" || -z "$PUBLIC_KEY" ]]; then log_error "REALITY 密钥生成失败" return 1 fi return 0 } # 获取服务器IP get_server_ip() { log_info "获取服务器IP地址" if [[ -n "$SERVER_IP" ]]; then log_info "使用已设置的IP: $SERVER_IP" return 0 fi # 尝试首选方法获取公网IP SERVER_IP=$(curl -s -m 5 https://api.ipify.org 2>/dev/null) # 验证获取到的IP是否为有效IPv4地址 if [[ -n "$SERVER_IP" && "$SERVER_IP" =~ ^([0-9]{1,3}\.){3}[0-9]{1,3}$ ]]; then log_info "成功获取公网IP: $SERVER_IP" return 0 fi # 如果第一个方法失败，尝试备用方法 local backup_services=("https://ifconfig.me" "https://ip.sb" "https://ipinfo.io/ip") for service in "${backup_services[@]}"; do SERVER_IP=$(curl -s -m 3 "$service" 2>/dev/null) if [[ -n "$SERVER_IP" && "$SERVER_IP" =~ ^([0-9]{1,3}\.){3}[0-9]{1,3}$ ]]; then log_info "成功从 $service 获取公网IP: $SERVER_IP" return 0 fi done # 如果所有公网IP获取方式都失败，则使用本地IP if command -v hostname &>/dev/null; then SERVER_IP=$(hostname -I 2>/dev/null | awk '{print $1}') fi # 如果hostname命令失败，尝试使用ip命令 if [[ -z "$SERVER_IP" && -x "$(command -v ip)" ]]; then SERVER_IP=$(ip -4 addr show scope global | grep -oP '(?<=inet\s)\d+(\.\d+){3}' | head -n 1) fi # 如果还是失败，尝试使用ifconfig命令 if [[ -z "$SERVER_IP" && -x "$(command -v ifconfig)" ]]; then SERVER_IP=$(ifconfig | grep -Eo 'inet (addr:)?([0-9]*\.){3}[0-9]*' | grep -Eo '([0-9]*\.){3}[0-9]*' | grep -v '127.0.0.1' | head -n 1) fi if [[ -n "$SERVER_IP" ]]; then log_warn "无法获取公网IP，使用本地IP: $SERVER_IP" return 0 else log_error "无法获取任何有效IP地址，将使用127.0.0.1作为占位符" SERVER_IP="127.0.0.1" return 1 fi } # 配置 Xray - 修改为 VLESS+REALITY 并支持 TUN 模式 configure_xray() { log_info "配置 Xray" # 生成随机值 generate_random_values || { log_error "生成随机值失败" return 1 } # 验证必要的变量是否已设置 if [[ -z "$PRIVATE_KEY" || -z "$PUBLIC_KEY" || -z "$UUID" || -z "$REALITY_PORT" ]]; then log_error "必要的配置参数缺失：" [[ -z "$PRIVATE_KEY" ]] && log_error "- PRIVATE_KEY 未设置" [[ -z "$PUBLIC_KEY" ]] && log_error "- PUBLIC_KEY 未设置" [[ -z "$UUID" ]] && log_error "- UUID 未设置" [[ -z "$REALITY_PORT" ]] && log_error "- REALITY_PORT 未设置" return 1 fi # 创建配置目录 mkdir -p "$CONFIG_PATH" # 创建示例目录 mkdir -p "$CONFIG_PATH/examples" log_info "创建 VLESS+REALITY 配置文件（最新版本，稳定功能）" # 注意：后量子密码学功能需要更新版本的 Xray，暂时禁用以确保兼容性 log_info "配置 REALITY 协议基础功能（稳定版本）" # VLESS + REALITY 配置 (最新版本，包含所有功能) cat > "$CONFIG_PATH/config.json" << EOF { "log": { "loglevel": "warning", "access": "$LOG_PATH/access.log", "error": "$LOG_PATH/error.log" }, "inbounds": [ { "port": $REALITY_PORT, "protocol": "vless", "settings": { "clients": [ { "id": "$UUID", "flow": "xtls-rprx-vision" } ], "decryption": "none" }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "show": false, "target": "www.shopify.com:443", "xver": 0, "serverNames": [ "shopify.com", "www.shopify.com" ], "privateKey": "$PRIVATE_KEY", "minClientVer": "", "maxClientVer": "", "maxTimeDiff": 0, "shortIds": [ "", "6ba85179e30d" ], "limitFallbackUpload": { "afterBytes": 1048576, "bytesPerSec": 1048576, "burstBytesPerSec": 2097152 }, "limitFallbackDownload": { "afterBytes": 1048576, "bytesPerSec": 1048576, "burstBytesPerSec": 2097152 } } }, "sniffing": { "enabled": true, "destOverride": [ "http", "tls", "quic" ], "routeOnly": false } } ], "outbounds": [ { "protocol": "freedom", "tag": "direct" }, { "protocol": "blackhole", "tag": "block" } ], "dns": { "hosts": { "dns.google": "8.8.8.8", "proxy.example.com": "127.0.0.1" }, "servers": [ { "address": "https://1.1.1.1/dns-query", "domains": [ "geosite:geolocation-!cn" ], "expectedIPs": [ "geoip:!cn" ], "skipFallback": true, "queryStrategy": "UseIPv4" }, { "address": "https://223.5.5.5/dns-query", "domains": [ "geosite:cn" ], "expectedIPs": [ "geoip:cn" ], "skipFallback": false, "queryStrategy": "UseIP" }, "8.8.8.8", "https://dns.google/dns-query" ], "queryStrategy": "UseIP", "disableCache": false, "disableFallback": false }, "routing": { "domainStrategy": "AsIs", "rules": [ { "type": "field", "outboundTag": "block", "domain": [ "geosite:category-ads-all" ] }, { "type": "field", "outboundTag": "direct", "ip": [ "geoip:private" ] }, { "type": "field", "outboundTag": "direct", "domain": [ "geosite:private" ] }, { "type": "field", "port": "443", "network": "udp", "outboundTag": "block" }, { "type": "field", "outboundTag": "direct", "ip": [ "geoip:cn" ] }, { "type": "field", "outboundTag": "direct", "domain": [ "geosite:cn" ] } ] } } EOF if [[ -f "$CONFIG_PATH/config.json" ]]; then log_info "配置文件创建成功" else log_error "配置文件创建失败" return 1 fi return 0 } # 配置防火墙 - 简化只处理 REALITY 端口 configure_firewall() { log_info "配置防火墙" # 检测和关闭旧端口 local old_ports=() # 从备份中查找旧端口 if [[ -n "$CONFIG_BACKUP" && -f "$CONFIG_BACKUP/config.json" ]]; then log_info "检测旧配置中的端口" if command -v jq &>/dev/null; then # 使用jq查找所有inbounds的端口 local detected_ports=$(jq '.inbounds[].port' "$CONFIG_BACKUP/config.json" 2>/dev/null) for port in $detected_ports; do if [[ "$port" != "null" && -n "$port" ]]; then old_ports+=("$port") log_info "检测到旧端口: $port" fi done else # 使用grep查找端口 local detected_ports=$(grep -o '"port": [0-9]*' "$CONFIG_BACKUP/config.json" | awk '{print $2}') for port in $detected_ports; do if [[ -n "$port" ]]; then old_ports+=("$port") log_info "检测到旧端口: $port" fi done fi fi # 如果找不到旧端口，也查找默认位置 if [[ ${#old_ports[@]} -eq 0 && -f "$CONFIG_PATH/config.json" && "$CONFIG_PATH/config.json" != "$(readlink -f "$CONFIG_BACKUP/config.json")" ]]; then if command -v jq &>/dev/null; then # 使用jq查找所有inbounds的端口 local detected_ports=$(jq '.inbounds[].port' "$CONFIG_PATH/config.json" 2>/dev/null) for port in $detected_ports; do if [[ "$port" != "null" && -n "$port" ]]; then old_ports+=("$port") log_info "检测到当前配置的端口: $port" fi done else # 使用grep查找端口 local detected_ports=$(grep -o '"port": [0-9]*' "$CONFIG_PATH/config.json" | awk '{print $2}') for port in $detected_ports; do if [[ -n "$port" ]]; then old_ports+=("$port") log_info "检测到当前配置的端口: $port" fi done fi fi # 从旧端口列表中过滤掉当前端口 local filtered_ports=() for port in "${old_ports[@]}"; do # 检查端口是否为有效数字 if ! [[ "$port" =~ ^[0-9]+$ ]]; then log_warn "无效的端口号: $port，已跳过" continue fi # 检查是否与当前端口相同 if [[ "$port" -eq "$REALITY_PORT" ]]; then log_info "端口 $port 与当前端口相同，已跳过" continue fi filtered_ports+=("$port") done old_ports=("${filtered_ports[@]}") # 检查是否安装了 ufw if command -v ufw &>/dev/null; then # 检查ufw是否启用 local ufw_status=$(ufw status | grep -o "Status: active" 2>/dev/null) if [[ -z "$ufw_status" ]]; then log_warn "UFW 防火墙未启用，可能需要手动配置防火墙规则" log_info "您可以运行 'sudo ufw enable' 启用 UFW 防火墙" return 0 fi # 关闭旧端口 if [[ ${#old_ports[@]} -gt 0 ]]; then log_info "开始关闭旧端口" local closed_ports=() for port in "${old_ports[@]}"; do # 检查端口是否已开放在UFW中 if ! ufw status | grep -q "$port/tcp"; then log_info "端口 $port 未在 UFW 中开放，跳过" continue fi echo -n "关闭 UFW 防火墙端口 $port... " if ufw delete allow "$port/tcp" &>/dev/null; then echo -e "${GREEN}完成${NC}" closed_ports+=("$port") else echo -e "${RED}失败${NC}" log_warn "无法关闭端口 $port" fi done # 打印关闭的端口 if [[ ${#closed_ports[@]} -gt 0 ]]; then local closed_list=$(printf ", %s" "${closed_ports[@]}") closed_list=${closed_list:2} # 移除开头的逗号和空格 log_info "已关闭 UFW 防火墙中的旧端口: $closed_list" else log_info "没有需要关闭的旧端口" fi else log_info "未检测到旧端口，跳过关闭端口步骤" fi # 确定需要开放的端口 local ports=("$REALITY_PORT") echo -n "配置 UFW 防火墙... " local opened_ports=() for port in "${ports[@]}"; do # 检查端口是否为有效数字 if ! [[ "$port" =~ ^[0-9]+$ ]]; then log_warn "端口 '$port' 不是有效数字，已跳过" continue fi # 检查端口是否已经开放 if ufw status | grep -q "$port/tcp"; then log_info "端口 $port 已经开放，跳过" opened_ports+=("$port") continue fi # 开放端口 if ufw allow "$port/tcp" &>/dev/null; then opened_ports+=("$port") else log_warn "无法开放端口 $port" fi done echo -e "${GREEN}完成${NC}" # 打印开放的端口 if [[ ${#opened_ports[@]} -gt 0 ]]; then local port_list=$(printf ", %s" "${opened_ports[@]}") port_list=${port_list:2} # 移除开头的逗号和空格 log_info "已在 UFW 防火墙开放端口: $port_list" else log_warn "没有成功开放任何端口" fi else log_warn "未检测到 UFW 防火墙，跳过防火墙配置" log_info "如需管理防火墙规则，请安装 UFW: sudo apt install ufw" fi return 0 } # 生成客户端配置 - 更新为只提供 VLESS+REALITY generate_client_info() { log_info "生成客户端信息" # 确保IP地址已获取 if [[ -z "$SERVER_IP" ]]; then get_server_ip fi # 生成 VLESS + REALITY 分享链接 local share_link="vless://${UUID}@${SERVER_IP}:${REALITY_PORT}?security=reality&encryption=none&pbk=${PUBLIC_KEY}&fp=chrome&type=tcp&flow=xtls-rprx-vision&sni=www.shopify.com&sid=6ba85179e30d&spx=%2Fsearch%3Fq%3Dcdn#Xray-Reality" # 保存客户端信息 cat > /root/xray_info.txt << EOF ========================= Xray Reality 配置信息 ========================= 服务器地址: ${SERVER_IP} 端口: ${REALITY_PORT} UUID: ${UUID} 协议: vless 传输协议: tcp 加密方式: none 流控: xtls-rprx-vision 安全: reality 公钥: ${PUBLIC_KEY} 私钥: ${PRIVATE_KEY} SNI: www.shopify.com 指纹: chrome 短 ID: 6ba85179e30d 爬虫路径: /search?q=cdn 目标站点: www.shopify.com:443 速率限制: 已启用回退连接限制 TUN模式支持: 已启用 DNS优化: 已启用（DoH） 兼容性: 当前版本完全兼容 ================================================================== 分享链接: ${share_link} 二维码链接: https://api.qrserver.com/v1/create-qr-code/?size=300x300&data=${share_link} ================================================================== TUN模式支持: REALITY 协议已配置支持 TUN 模式，客户端配置示例文件已生成: 1. REALITY-TUN配置: ${CONFIG_PATH}/examples/reality_tun_example.json 将配置文件导入到支持TUN模式的客户端后: 1. 切换到"TUN模式"选项卡 2. 点击"启用TUN模式" 3. 选择"系统代理"或"全局代理" 4. 重启客户端并允许管理员权限 ================================================================== 配置文件路径: ${CONFIG_PATH}/config.json 服务控制: 启动: systemctl start xray 停止: systemctl stop xray 重启: systemctl restart xray 状态: systemctl status xray ================================================================== EOF # 生成 REALITY TUN 模式配置示例 generate_reality_tun_config log_info "客户端信息已保存到 /root/xray_info.txt" # 打印信息 cat /root/xray_info.txt log_info "安装完成！Xray REALITY 已成功部署" return 0 } # 新增：生成 REALITY TUN 模式配置 generate_reality_tun_config() { log_info "生成 REALITY TUN 模式配置示例" # 确保IP地址已设置 if [[ -z "$SERVER_IP" ]]; then get_server_ip fi # 创建 TUN 配置示例目录 local example_dir="$CONFIG_PATH/examples" mkdir -p "$example_dir" # 生成客户端配置示例，用于TUN模式 cat > "$example_dir/reality_tun_example.json" << EOF { "log": { "loglevel": "warning" }, "inbounds": [ { "tag": "socks", "port": 10808, "listen": "127.0.0.1", "protocol": "socks", "sniffing": { "enabled": true, "destOverride": [ "http", "tls" ], "routeOnly": false }, "settings": { "auth": "noauth", "udp": true, "allowTransparent": false } }, { "tag": "tun", "protocol": "tun", "settings": { "network": "all" }, "sniffing": { "enabled": true, "destOverride": [ "http", "tls" ], "routeOnly": false } } ], "tun": { "enable": true, "stack": "gvisor", "mtu": 9000, "strict_route": true }, "outbounds": [ { "tag": "proxy", "protocol": "vless", "settings": { "vnext": [ { "address": "${SERVER_IP}", "port": ${REALITY_PORT}, "users": [ { "id": "${UUID}", "flow": "xtls-rprx-vision", "encryption": "none" } ] } ] }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "show": false, "fingerprint": "chrome", "serverName": "www.shopify.com", "publicKey": "${PUBLIC_KEY}", "shortId": "6ba85179e30d", "spiderX": "/search?q=cdn" } } }, { "tag": "direct", "protocol": "freedom" }, { "tag": "block", "protocol": "blackhole" } ], "dns": { "hosts": { "dns.google": "8.8.8.8", "proxy.example.com": "127.0.0.1" }, "servers": [ { "address": "1.1.1.1", "domains": [ "geosite:geolocation-!cn" ], "expectIPs": [ "geoip:!cn" ] }, { "address": "223.5.5.5", "domains": [ "geosite:cn" ], "expectIPs": [ "geoip:cn" ] }, "8.8.8.8", "https://dns.google/dns-query" ], "queryStrategy": "UseIP", "disableCache": false, "disableFallback": false }, "routing": { "domainStrategy": "IPIfNonMatch", "rules": [ { "type": "field", "outboundTag": "proxy", "domain": [ "domain:google.com", "domain:googleapis.cn", "domain:gstatic.com" ] }, { "type": "field", "outboundTag": "direct", "domain": [ "geosite:cn" ] }, { "type": "field", "outboundTag": "direct", "ip": [ "geoip:private", "geoip:cn" ] } ] } } EOF log_info "REALITY TUN 模式配置示例已保存到 $example_dir/reality_tun_example.json" log_info "使用方法: 将配置导入到支持TUN模式的客户端，然后开启TUN模式" return 0 } # 创建系统服务 create_service() { log_info "创建 Xray 系统服务" # 创建服务文件 cat > /etc/systemd/system/xray.service << EOF [Unit] Description=Xray Service Documentation=https://github.com/XTLS/Xray-core After=network.target nss-lookup.target [Service] User=root CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE NoNewPrivileges=true ExecStart=$XRAY_PATH/xray run -config $CONFIG_PATH/config.json Restart=on-failure RestartPreventExitStatus=23 LimitNPROC=10000 LimitNOFILE=1000000 [Install] WantedBy=multi-user.target EOF # 重新加载 systemd 配置并启用服务 systemctl daemon-reload echo -n "启用 Xray 服务... " if systemctl enable xray &>/dev/null; then echo -e "${GREEN}成功${NC}" else echo -e "${RED}失败${NC}" log_error "无法启用 Xray 服务" return 1 fi echo -n "启动 Xray 服务... " if systemctl start xray; then echo -e "${GREEN}成功${NC}" else echo -e "${RED}失败${NC}" log_error "无法启动 Xray 服务" return 1 fi return 0 } # 安装完整流程 - 更新为直接安装 VLESS+REALITY install_xray() { clear echo "==================================================" echo -e "${GREEN}开始安装 Xray REALITY 协议（稳定版本）${NC}" echo "==================================================" echo -e "${CYAN}自动配置功能列表:${NC}" echo -e "✓ VLESS+REALITY 协议" echo -e "✓ 速率限制保护" echo -e "✓ TUN模式支持" echo -e "✓ DNS优化 (DoH)" echo -e "✓ 智能路由规则" echo -e "✓ 自动防火墙配置" echo -e "✓ 完全兼容当前版本" echo "==================================================" # 检查是否为 root check_root # 检查系统环境 check_system # 备份现有配置 backup_config # 安装依赖 install_dependencies || { log_error "安装依赖失败，退出安装" return 1 } # 下载和安装 Xray download_xray || { log_error "下载 Xray 失败，退出安装" return 1 } # 配置 Xray configure_xray || { log_error "配置 Xray 失败，退出安装" return 1 } # 创建系统服务 create_service || { log_error "创建系统服务失败，但会继续安装过程" } # 配置防火墙 configure_firewall # 生成客户端信息 generate_client_info echo "" echo "==================================================" echo -e "${GREEN}🎉 安装完成！${NC}" echo "==================================================" echo -e "${CYAN}已自动启用的功能:${NC}" echo -e "✅ VLESS+REALITY 协议" echo -e "✅ 速率限制保护" echo -e "✅ TUN模式支持" echo -e "✅ DNS优化 (DoH)" echo -e "✅ 智能路由规则" echo -e "✅ 自动防火墙配置" echo -e "✅ 完全兼容当前版本" echo "==================================================" log_info "Xray REALITY 协议（稳定版本）安装成功！" read -rp "按回车键返回主菜单..." temp show_menu } # 停止 Xray 服务 stop_xray_service() { log_info "停止 Xray 服务" if systemctl is-active xray &>/dev/null; then echo -n "正在停止 Xray 服务... " if systemctl stop xray &>/dev/null; then echo -e "${GREEN}成功${NC}" else echo -e "${RED}失败${NC}" log_warn "无法停止 Xray 服务，将尝试继续卸载" fi else log_info "Xray 服务未运行" fi echo -n "禁用 Xray 服务自启动... " if systemctl disable xray &>/dev/null; then echo -e "${GREEN}成功${NC}" else echo -e "${YELLOW}失败${NC}" log_warn "无法禁用 Xray 服务自启动，服务可能不存在" fi } # 读取并关闭防火墙端口 close_firewall_port() { log_info "尝试关闭之前开放的防火墙端口" # 检查是否安装了 ufw if ! command -v ufw &>/dev/null; then log_warn "未检测到 UFW 防火墙，跳过防火墙配置关闭" return 0 fi # 检查ufw是否启用 local ufw_status=$(ufw status | grep -o "Status: active" 2>/dev/null) if [[ -z "$ufw_status" ]]; then log_warn "UFW 防火墙未启用，跳过防火墙规则关闭" return 0 fi # 尝试从配置或备份文件中读取端口 local ports=() # 从当前配置中查找端口 if [[ -f "$CONFIG_PATH/config.json" ]]; then if command -v jq &>/dev/null; then # 使用jq查找所有inbounds的端口 local all_ports=$(jq '.inbounds[].port' "$CONFIG_PATH/config.json" 2>/dev/null) for port in $all_ports; do if [[ "$port" != "null" && -n "$port" ]]; then ports+=("$port") fi done else # 使用grep查找端口 local all_ports=$(grep -o '"port": [0-9]*' "$CONFIG_PATH/config.json" | awk '{print $2}') for port in $all_ports; do if [[ -n "$port" ]]; then ports+=("$port") fi done fi fi # 如果找不到端口，从备份中查找 if [[ ${#ports[@]} -eq 0 && -n "$CONFIG_BACKUP" && -f "$CONFIG_BACKUP/config.json" ]]; then if command -v jq &>/dev/null; then local all_ports=$(jq '.inbounds[].port' "$CONFIG_BACKUP/config.json" 2>/dev/null) for port in $all_ports; do if [[ "$port" != "null" && -n "$port" ]]; then ports+=("$port") fi done else local all_ports=$(grep -o '"port": [0-9]*' "$CONFIG_BACKUP/config.json" | awk '{print $2}') for port in $all_ports; do if [[ -n "$port" ]]; then ports+=("$port") fi done fi fi # 如果还是找不到端口，尝试使用全局变量 if [[ ${#ports[@]} -eq 0 ]]; then if [[ -n "$REALITY_PORT" && "$REALITY_PORT" =~ ^[0-9]+$ ]]; then ports+=("$REALITY_PORT") fi fi # 去除重复的端口 if [[ ${#ports[@]} -gt 0 ]]; then local unique_ports=() local port_list="" for port in "${ports[@]}"; do # 检查端口是否为有效数字 if ! [[ "$port" =~ ^[0-9]+$ ]]; then log_warn "端口 '$port' 不是有效数字，已跳过" continue fi # 检查端口是否已在列表中 if [[ "$port_list" != *",$port,"* ]]; then unique_ports+=("$port") port_list="$port_list,$port," fi done ports=("${unique_ports[@]}") fi # 如果找到了端口，关闭防火墙规则 if [[ ${#ports[@]} -gt 0 ]]; then local port_list=$(printf ", %s" "${ports[@]}") port_list=${port_list:2} # 移除开头的逗号和空格 log_info "找到端口: $port_list，尝试关闭 UFW 防火墙规则" local closed_ports=() for port in "${ports[@]}"; do # 检查端口是否已开放在UFW中 if ! ufw status | grep -q "$port/tcp"; then log_info "端口 $port 未在 UFW 中开放，跳过" continue fi echo -n "关闭 UFW 防火墙端口 $port... " if ufw delete allow "$port/tcp" &>/dev/null; then echo -e "${GREEN}完成${NC}" closed_ports+=("$port") else echo -e "${RED}失败${NC}" log_warn "无法关闭端口 $port" fi done # 打印关闭的端口 if [[ ${#closed_ports[@]} -gt 0 ]]; then local closed_list=$(printf ", %s" "${closed_ports[@]}") closed_list=${closed_list:2} # 移除开头的逗号和空格 log_info "已关闭 UFW 防火墙中的端口: $closed_list" else log_warn "没有关闭任何端口" fi else log_warn "无法确定之前使用的端口，跳过防火墙规则关闭" fi } # 删除 Xray 文件 remove_xray_files() { log_info "删除 Xray 文件" # 删除二进制文件 echo -n "删除 Xray 核心文件... " if rm -f "$XRAY_PATH/xray" "$XRAY_PATH/geoip.dat" "$XRAY_PATH/geosite.dat"; then echo -e "${GREEN}成功${NC}" else echo -e "${YELLOW}部分文件未能删除${NC}" log_warn "部分 Xray 核心文件可能未能完全删除" fi # 删除配置目录（不删除备份） echo -n "删除 Xray 配置目录... " if [[ -d "$CONFIG_PATH" ]]; then if rm -rf "$CONFIG_PATH"; then echo -e "${GREEN}成功${NC}" else echo -e "${RED}失败${NC}" log_warn "无法删除配置目录 $CONFIG_PATH" fi else echo -e "${YELLOW}配置目录不存在${NC}" fi # 删除日志目录 echo -n "删除 Xray 日志目录... " if [[ -d "$LOG_PATH" ]]; then if rm -rf "$LOG_PATH"; then echo -e "${GREEN}成功${NC}" else echo -e "${RED}失败${NC}" log_warn "无法删除日志目录 $LOG_PATH" fi else echo -e "${YELLOW}日志目录不存在${NC}" fi # 删除服务文件 echo -n "删除 Xray 服务文件... " if rm -f /etc/systemd/system/xray.service; then echo -e "${GREEN}成功${NC}" systemctl daemon-reload else echo -e "${YELLOW}服务文件不存在或无法删除${NC}" fi return 0 } # 完整卸载流程 uninstall_xray() { clear echo "==================================================" echo -e "${RED}开始卸载 Xray${NC}" echo "==================================================" # 确认卸载 echo -e "${YELLOW}警告: 这将卸载 Xray 并删除相关文件${NC}" read -rp "是否继续? [y/N] " confirm if [[ ! "$confirm" =~ ^[yY]$ ]]; then log_info "卸载已取消" read -rp "按回车键返回主菜单..." temp show_menu return 0 fi # 检查 root 权限 check_root # 备份配置 backup_config # 停止服务 stop_xray_service # 关闭防火墙端口 close_firewall_port # 删除文件 remove_xray_files echo "" log_info "Xray 卸载完成" # 直接删除备份文件，不询问用户 if [[ -n "$CONFIG_BACKUP" && -d "$CONFIG_BACKUP" ]]; then rm -rf "$CONFIG_BACKUP" log_info "备份文件已删除" fi read -rp "按回车键返回主菜单..." temp show_menu } # 检查 Xray 状态 check_status() { clear echo "==================================================" echo -e "${BLUE}Xray 状态检查${NC}" echo "==================================================" # 检查是否安装 if [[ ! -f "$XRAY_PATH/xray" ]]; then echo -e "${RED}Xray 未安装${NC}" read -rp "按回车键返回主菜单..." temp show_menu return 0 fi # 检查版本 echo -n "Xray 版本: " $XRAY_PATH/xray version | head -n 1 # 检查服务状态 echo -n "服务状态: " if systemctl is-active xray &>/dev/null; then echo -e "${GREEN}运行中${NC}" else echo -e "${RED}未运行${NC}" fi echo -n "自启动状态: " if systemctl is-enabled xray &>/dev/null; then echo -e "${GREEN}已启用${NC}" else echo -e "${RED}未启用${NC}" fi # 获取内存和 CPU 使用情况 echo "资源使用情况:" ps -aux | grep xray | grep -v grep | awk '{print "内存使用: " $4 "%, CPU使用: " $3 "%"}' # 检查端口 if [[ -f "$CONFIG_PATH/config.json" ]]; then local current_port="" if command -v jq &>/dev/null; then current_port=$(jq '.inbounds[0].port' "$CONFIG_PATH/config.json" 2>/dev/null) else current_port=$(grep -o '"port": [0-9]*' "$CONFIG_PATH/config.json" | head -1 | awk '{print $2}') fi if [[ -n "$current_port" && "$current_port" != "null" ]]; then echo -n "端口 $current_port 状态: " if command -v ss &>/dev/null; then if ss -tuln | grep -q ":$current_port "; then echo -e "${GREEN}已开放${NC}" else echo -e "${RED}未开放${NC}" fi elif command -v netstat &>/dev/null; then if netstat -tuln | grep -q ":$current_port "; then echo -e "${GREEN}已开放${NC}" else echo -e "${RED}未开放${NC}" fi else echo -e "${YELLOW}无法检查${NC}" fi # 显示链接数 echo "当前连接:" if command -v ss &>/dev/null; then ss -tn | grep ":$current_port" | wc -l | awk '{print "活跃连接数: " $1}' elif command -v netstat &>/dev/null; then netstat -tn | grep ":$current_port" | wc -l | awk '{print "活跃连接数: " $1}' else echo "无法获取连接信息" fi fi fi echo -e "\n最近的日志:" if [[ -f "$LOG_PATH/error.log" ]]; then tail -n 10 "$LOG_PATH/error.log" else echo "找不到错误日志文件" fi read -rp "按回车键返回主菜单..." temp show_menu } # 显示配置信息 show_config() { clear echo "==================================================" echo -e "${CYAN}Xray 配置信息${NC}" echo "==================================================" # 检查是否已安装 if [[ ! -f "$XRAY_PATH/xray" ]]; then echo -e "${RED}Xray 未安装${NC}" read -rp "按回车键返回主菜单..." temp show_menu return 0 fi # 显示配置文件内容 if [[ -f "$CONFIG_PATH/config.json" ]]; then if command -v jq &>/dev/null; then echo "配置信息 (美化格式):" jq . "$CONFIG_PATH/config.json" else echo "配置文件内容:" cat "$CONFIG_PATH/config.json" fi else echo -e "${RED}找不到配置文件${NC}" fi # 显示客户端信息 if [[ -f "/root/xray_info.txt" ]]; then echo -e "\n客户端信息:" cat /root/xray_info.txt else echo -e "\n${RED}找不到客户端信息文件${NC}" fi read -rp "按回车键返回主菜单..." temp show_menu } # 重启 Xray 服务 restart_service() { clear echo "==================================================" echo -e "${GREEN}重启 Xray 服务${NC}" echo "==================================================" # 检查是否已安装 if [[ ! -f "$XRAY_PATH/xray" ]]; then echo -e "${RED}Xray 未安装${NC}" read -rp "按回车键返回主菜单..." temp show_menu return 0 fi echo -n "重启 Xray 服务... " if systemctl restart xray; then echo -e "${GREEN}成功${NC}" log_info "Xray 服务已重启" else echo -e "${RED}失败${NC}" log_error "无法重启 Xray 服务" fi # 检查服务状态 echo -n "Xray 服务状态: " if systemctl is-active xray &>/dev/null; then echo -e "${GREEN}运行中${NC}" else echo -e "${RED}未运行${NC}" fi read -rp "按回车键返回主菜单..." temp show_menu } # 更新 Xray update_xray() { clear echo "==================================================" echo -e "${YELLOW}更新 Xray${NC}" echo "==================================================" # 检查是否已安装 if [[ ! -f "$XRAY_PATH/xray" ]]; then echo -e "${RED}Xray 未安装，请先安装${NC}" read -rp "按回车键返回主菜单..." temp show_menu return 0 fi # 获取当前版本 local current_version current_version=$($XRAY_PATH/xray version | head -n 1 | cut -d ' ' -f 2) echo "当前版本: $current_version" # 获取最新版本 echo -n "获取最新版本... " local latest_version=$(get_latest_version) echo -e "${GREEN}$latest_version${NC}" # 比较版本 if [[ "$current_version" == "$latest_version" ]]; then echo -e "${GREEN}已经是最新版本${NC}" read -rp "是否强制更新? [y/N] " confirm if [[ ! "$confirm" =~ ^[yY]$ ]]; then log_info "更新已取消" read -rp "按回车键返回主菜单..." temp show_menu return 0 fi fi # 备份配置 backup_config # 停止服务 echo -n "停止 Xray 服务... " if systemctl stop xray &>/dev/null; then echo -e "${GREEN}成功${NC}" else echo -e "${RED}失败${NC}" log_warn "无法停止 Xray 服务，将尝试继续更新" fi # 下载新版本 log_info "开始下载新版本" # 创建临时目录 local tmp_dir="/tmp/xray_update" mkdir -p "$tmp_dir" # 确定系统架构 local arch case $(uname -m) in x86_64|amd64) arch="64" ;; armv7l|armv8l) arch="arm32-v7a" ;; aarch64) arch="arm64-v8a" ;; *) arch="64" ;; # 默认使用64位版本 esac # 构建下载URL local download_url="https://github.com/XTLS/Xray-core/releases/download/$latest_version/Xray-linux-$arch.zip" log_info "下载链接: $download_url" # 下载Xray echo -n "下载 Xray... " if wget -q --show-progress -O "$tmp_dir/xray.zip" "$download_url"; then echo -e "${GREEN}成功${NC}" else echo -e "${RED}失败${NC}" log_error "下载 Xray 失败" read -rp "按回车键返回主菜单..." temp show_menu return 1 fi # 解压文件 echo -n "解压 Xray... " if unzip -q -o "$tmp_dir/xray.zip" -d "$tmp_dir"; then echo -e "${GREEN}成功${NC}" else echo -e "${RED}失败${NC}" log_error "解压 Xray 失败" read -rp "按回车键返回主菜单..." temp show_menu return 1 fi # 备份旧的二进制文件 mv "$XRAY_PATH/xray" "$XRAY_PATH/xray.old" 2>/dev/null # 复制新文件 echo -n "更新 Xray 核心文件... " if cp "$tmp_dir/xray" "$XRAY_PATH/xray" && chmod +x "$XRAY_PATH/xray"; then echo -e "${GREEN}成功${NC}" else echo -e "${RED}失败${NC}" log_error "更新 Xray 核心文件失败" # 恢复旧文件 if [[ -f "$XRAY_PATH/xray.old" ]]; then mv "$XRAY_PATH/xray.old" "$XRAY_PATH/xray" log_warn "已恢复为旧版本" fi read -rp "按回车键返回主菜单..." temp show_menu return 1 fi # 更新 geoip.dat 和 geosite.dat echo -n "更新 GeoIP 和 GeoSite 数据... " if cp "$tmp_dir/geoip.dat" "$XRAY_PATH/geoip.dat" && \ cp "$tmp_dir/geosite.dat" "$XRAY_PATH/geosite.dat"; then echo -e "${GREEN}成功${NC}" else echo -e "${YELLOW}失败${NC}" log_warn "更新 GeoIP 和 GeoSite 数据失败，但不影响核心功能" fi # 删除旧备份和临时文件 rm -f "$XRAY_PATH/xray.old" rm -rf "$tmp_dir" # 启动服务 echo -n "启动 Xray 服务... " if systemctl start xray; then echo -e "${GREEN}成功${NC}" else echo -e "${RED}失败${NC}" log_error "启动 Xray 服务失败，请检查配置" systemctl status xray read -rp "按回车键返回主菜单..." temp show_menu return 1 fi # 检查更新后的版本 local new_version new_version=$($XRAY_PATH/xray version | head -n 1 | cut -d ' ' -f 2) log_info "Xray 更新完成，版本: $new_version" read -rp "按回车键返回主菜单..." temp show_menu } # 更新脚本版本信息 update_script_version() { clear echo "==================================================" echo -e "${GREEN}更新脚本版本信息${NC}" echo "==================================================" # 显示当前脚本版本 echo "当前脚本版本: $SCRIPT_VERSION" # 获取最新脚本版本 echo -n "获取最新脚本版本... " local latest_version latest_version=$(curl -s https://raw.githubusercontent.com/XTLS/Xray-core/main/xray-manager.sh | grep -o 'SCRIPT_VERSION="[^"]*"' | cut -d'"' -f2) if [[ -z "$latest_version" ]]; then echo -e "${RED}失败${NC}" log_error "无法获取最新脚本版本信息" read -rp "是否继续更新? [y/N] " confirm if [[ ! "$confirm" =~ ^[yY]$ ]]; then log_info "更新已取消" read -rp "按回车键返回主菜单..." temp show_menu return 0 fi latest_version="1.0.0" # 设置一个固定版本作为备用 log_info "将使用固定版本: $latest_version" else echo -e "${GREEN}$latest_version${NC}" # 比较版本 if [[ "$SCRIPT_VERSION" == "$latest_version" ]]; then echo -e "${GREEN}已经是最新版本${NC}" read -rp "是否强制更新? [y/N] " confirm if [[ ! "$confirm" =~ ^[yY]$ ]]; then log_info "更新已取消" read -rp "按回车键返回主菜单..." temp show_menu return 0 fi fi fi # 更新脚本版本 echo -n "更新脚本版本... " sed -i "s/SCRIPT_VERSION=\"[^\"]*\"/SCRIPT_VERSION=\"$latest_version\"/" "$0" echo -e "${GREEN}成功${NC}" log_info "脚本版本已更新为 $latest_version" read -rp "按回车键返回主菜单..." temp show_menu } # 主函数 main() { # 处理命令行参数 if [[ $# -gt 0 ]]; then case "$1" in -h|--help) show_help exit 0 ;; -i|--install) check_root install_xray exit 0 ;; -u|--uninstall) check_root uninstall_xray exit 0 ;; -s|--status) check_root check_status exit 0 ;; -up|--update) check_root update_xray exit 0 ;; *) log_error "未知参数: $1" show_help exit 1 ;; esac fi # 无参数则显示菜单 check_root show_menu } # 执行主函数 main "$@"