From fade14bb7c5bbce93b9ed1e665d3118b38bc9590 Mon Sep 17 00:00:00 2001 From: CN-JS-HuiBai Date: Sun, 7 Jan 2024 10:55:05 +0800 Subject: [PATCH] add wireguard-config shell remove jellyfin-mpp docker shell fix nyanmisaka-jelly-CN-Special version shell --- run-almalinux.sh | 4 +- run-jellyfin-mpp.sh | 15 -- ...n-special.sh => run-jellyfin-nyanmisaka.sh | 0 run-wireguard.sh | 206 ++++++++++++++++++ 4 files changed, 207 insertions(+), 18 deletions(-) delete mode 100644 run-jellyfin-mpp.sh rename run-jellyfin-special.sh => run-jellyfin-nyanmisaka.sh (100%) create mode 100644 run-wireguard.sh diff --git a/run-almalinux.sh b/run-almalinux.sh index 24db993..0b63b12 100644 --- a/run-almalinux.sh +++ b/run-almalinux.sh @@ -4,6 +4,4 @@ docker run -d \ --privileged=true \ --net=host \ docker.io/almalinux/9-init:latest \ - /usr/sbin/init - - + /usr/sbin/init \ No newline at end of file diff --git a/run-jellyfin-mpp.sh b/run-jellyfin-mpp.sh deleted file mode 100644 index 8227591..0000000 --- a/run-jellyfin-mpp.sh +++ /dev/null @@ -1,15 +0,0 @@ -#The Shell comes from https://github.com/jjm2473/ffmpeg-rk and fix podman problems -mkdir -p /jellyfin/config -docker run --name jellyfin \ - --security-opt systempaths=unconfined --security-opt apparmor=unconfined \ - --restart=unless-stopped -td \ - --device /dev/mpp_service \ - --device /dev/rga \ - --device /dev/dri \ - --pid=host \ - --dns=172.17.0.1 \ - -p 8096:8096 \ - -v /jellyfin/config:/config \ - -v /mnt:/mnt \ - -v /media:/media \ - jjm2473/jellyfin-mpp:latest \ No newline at end of file diff --git a/run-jellyfin-special.sh b/run-jellyfin-nyanmisaka.sh similarity index 100% rename from run-jellyfin-special.sh rename to run-jellyfin-nyanmisaka.sh diff --git a/run-wireguard.sh b/run-wireguard.sh new file mode 100644 index 0000000..0f6c09e --- /dev/null +++ b/run-wireguard.sh @@ -0,0 +1,206 @@ +#更新RHEL9.0内核 +update_kernel_el9(){ + + rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org + yum install -y https://www.elrepo.org/elrepo-release-9.el9.elrepo.noarch.rpm + dnf remove -y kernel-devel + yum --enablerepo=elrepo-kernel install -y kernel-ml + read -p "需要重启服务器，再次执行脚本选择安装wireguard，是否现在重启 ? [Y/n] :" yn + [ -z "${yn}" ] && yn="y" + if [[ $yn == [Yy] ]]; then + echo -e "服务器 重启中..." + reboot + fi +} +#升级Redhat Enterprise Linux 8.x操作系统内核 +update_kernel_el8(){ + + rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org + yum install -y https://www.elrepo.org/elrepo-release-8.el8.elrepo.noarch.rpm + yum install -y https://mirrors.aliyun.com/epel/epel-release-latest-8.noarch.rpm + sed -i 's|^#baseurl=https://download.example/pub|baseurl=https://mirrors.aliyun.com|' /etc/yum.repos.d/epel* + sed -i 's|^metalink|#metalink|' /etc/yum.repos.d/epel* + + dnf remove -y kernel-devel + yum --enablerepo=elrepo-kernel install -y kernel-ml + read -p "需要重启服务器，再次执行脚本选择安装wireguard，是否现在重启 ? [Y/n] :" yn + [ -z "${yn}" ] && yn="y" + if [[ $yn == [Yy] ]]; then + echo -e "服务器 重启中..." + reboot + fi +} + +#生成随机端口 +rand(){ + min=$1 + max=$(($2-$min+1)) + num=$(cat /dev/urandom | head -n 10 | cksum | awk -F ' ' '{print $1}') + echo $(($num%$max+$min)) +} + +wireguard_update(){ + dnf update -y wireguard-tools + echo "更新完成" +} + +wireguard_remove(){ + wg-quick down wg0 + dnf remove -y wireguard-dkms wireguard-tools + rm -rf /etc/wireguard/ + echo "卸载完成" +} + +config_client(){ +cat > /etc/wireguard/client.conf <<-EOF +[Interface] +PrivateKey = $c1 +Address = 10.192.64.2/32 +DNS = 8.8.8.8 +MTU = 1420 + +[Peer] +PublicKey = $s2 +Endpoint = $serverip:$port +AllowedIPs = 0.0.0.0/0, ::0/0 +PersistentKeepalive = 25 +EOF + +} + +#Redhat Enterprise Linux 9.2操作系统安装Wireguard +wireguard_install(){ + dnf install -y dkms gcc-c++ gcc-gfortran glibc-headers glibc-devel libquadmath-devel libtool systemtap systemtap-devel + dnf install -y wireguard-tools + dnf install -y wireguard-dkms + + systemctl enable --now systemd-resolved + systemctl start systemd-resolved + systemctl restart systemd-resolved + + dnf install -y qrencode + mkdir /etc/wireguard + cd /etc/wireguard + wg genkey | tee sprivatekey | wg pubkey > spublickey + wg genkey | tee cprivatekey | wg pubkey > cpublickey + s1=$(cat sprivatekey) + s2=$(cat spublickey) + c1=$(cat cprivatekey) + c2=$(cat cpublickey) + serverip=$(curl https://ddnsip.cn) + port=$(rand 10000 60000) + eth=$(ls /sys/class/net | grep e | head -1) + chmod 777 -R /etc/wireguard + systemctl stop firewalld + systemctl disable firewalld + dnf install -y iptables-services + systemctl enable iptables + systemctl start iptables + iptables -P INPUT ACCEPT + iptables -P OUTPUT ACCEPT + iptables -P FORWARD ACCEPT + iptables -F + service iptables save + service iptables restart + echo 1 > /proc/sys/net/ipv4/ip_forward + echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf + sysctl -p +cat > /etc/wireguard/wg0.conf <<-EOF +[Interface] +PrivateKey = $s1 +Address = 10.192.0.1/16 +PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT; iptables -I FORWARD -s 10.192.0.1/24 -d 10.192.0.1/24 -j DROP; iptables -t nat -A POSTROUTING -o $eth -j MASQUERADE +PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -D FORWARD -o wg0 -j ACCEPT; iptables -D FORWARD -s 10.192.0.1/24 -d 10.192.0.1/24 -j DROP; iptables -t nat -D POSTROUTING -o $eth -j MASQUERADE +ListenPort = $port +DNS = 8.8.8.8 +MTU = 1420 + +[Peer] +PublicKey = $c2 +AllowedIPs = 10.192.64.2/32 +EOF + + config_client + wg-quick up wg0 + systemctl enable wg-quick@wg0 + content=$(cat /etc/wireguard/client.conf) + echo "电脑端请下载client.conf，手机端可直接使用软件扫码" + echo "${content}" | qrencode -o - -t UTF8 +} +#添加用户 +add_user(){ + echo -e "\033[37;41m给新用户起个名字，不能和已有用户重复\033[0m" + read -p "请输入用户名：" newname + cd /etc/wireguard/ + cp client.conf $newname.conf + wg genkey | tee temprikey | wg pubkey > tempubkey + ipnum=$(grep Allowed /etc/wireguard/wg0.conf | tail -1 | awk -F '[ ./]' '{print $6}') + newnum=$((10#${ipnum}+1)) + sed -i 's%^PrivateKey.*$%'"PrivateKey = $(cat temprikey)"'%' $newname.conf + sed -i 's%^Address.*$%'"Address = 10.192.64.$newnum\/32"'%' $newname.conf + +cat >> /etc/wireguard/wg0.conf <<-EOF +[Peer] +PublicKey = $(cat tempubkey) +AllowedIPs = 10.192.64.$newnum/32 +EOF + wg set wg0 peer $(cat tempubkey) allowed-ips 10.192.64.$newnum/32 + echo -e "\033[37;41m添加完成，文件：/etc/wireguard/$newname.conf\033[0m" + rm -f temprikey tempubkey +} +#开始菜单 +start_menu(){ + clear + echo "=========================" + echo " Intruduction：The Shell-Script Fit Redhat Enterprise Linux 9 Operation-System" + echo " Auther：Huibai" + echo "=========================" + echo "1. Upgrade RHEL9 Linux System Kernel(Not Necessary)" + echo "2. Install Wireguard VPN" + echo "3. Upgrade Wireguard VPN" + echo "4. Uninstall Wireguard VPN" + echo "5. Show Code" + echo "6. Add User" + echo "7. Upgrade RHEL8 Linux System Kernel" + + echo "0. Exit Shell" + + echo + read -p "Please Enter The Number:" num +#数字对应程序 + case "$num" in + 1) + update_kernel_el9 + ;; + 2) + wireguard_install + ;; + 3) + wireguard_update + ;; + 4) + wireguard_remove + ;; + 5) + content=$(cat /etc/wireguard/client.conf) + echo "${content}" | qrencode -o - -t UTF8 + ;; + 6) + add_user + ;; + 7) + update_kernel_el8 + ;; + 0) + exit 1 + ;; + *) + clear + echo "请输入正确数字" + sleep 5s + start_menu + ;; + esac +} + + start_menu \ No newline at end of file