Shadowsocks一键安装脚本

发表于 2025-07-02 更新于 2025-07-03 分类于 Shell
Shadowsocks一键安装脚本
#!/bin/bash
# shadowsocks安装脚本
# 该脚本基于shadowsocks-rust
# shadowsocks-rust是Shadowsocks的Rust实现版本，相比原版Python实现，它在性能和资源占用上有所优化。
# https://github.com/shadowsocks/shadowsocks-rust

RED="\033[91m"      # Error message
GREEN="\033[92m"    # Success message
YELLOW="\033[93m"   # Warning message
BLUE="\033[94m"     # Info message
PLAIN='\033[0m'
# 自定义输出
colorEcho() {
    echo -e "${1}${@:2}${PLAIN}"
}

# v4 v6 IP
check_v4_v6(){
  v6=$(curl -s6m8 api64.ipify.org -k)
  v4=$(curl -s4m8 api64.ipify.org -k)
  if [[ $v4 = "" ]]; then
    colorEcho $RED " 检查到您的VPS不支持IPv4,请更换VPS"
    exit 1
  fi
  IP=$v4
}

colorEcho $YELLOW "正在检查VPS的IP配置环境, 请稍等..."
# 检查是否为IPv4,不支持IPv6
check_v4_v6

# 检查系统架构
archAffix(){
    case "$(uname -m)" in
        i686|i386)
            echo 'i686-unknown-linux-musl.tar.xz'
        ;;
        x86_64|amd64)
            echo 'x86_64-unknown-linux-gnu.tar.xz'
        ;;
        *armv7*)
            echo 'armv7-unknown-linux-gnueabihf.tar.xz'
        ;;
        *mips64el*)
            echo 'mips64el-unknown-linux-gnuabi64.tar.xz'
        ;;
        *mipsel*)
            echo 'mipsel-unknown-linux-gnu.tar.xz'
        ;;
        *mips*)
            echo 'mips-unknown-linux-gnu.tar.xz'
        ;;
        *)
            colorEcho $RED " 不支持的CPU架构！"
            exit 1
        ;;
    esac
    return 0
}

# shadowsocks版本
# 避免shadowsocks编译时的GLIBC版本比当前系统的GLIBC更高,固定一个版本号；需要新版本的可以修改版本号
SS_VERSION="v1.22.0"
SS_DOWNLOAD_LINK="https://github.com/shadowsocks/shadowsocks-rust/releases/download/$SS_VERSION/shadowsocks-$SS_VERSION.$(archAffix)"

SS_CONFIG_FILE="/etc/shadowsocks/config.json"
SS_SERVICE_FILE="/etc/systemd/system/shadowsocks-rust.service"
OS=$(hostnamectl | grep -i system | cut -d: -f2)

# 系统检查
check_system(){
  colorEcho $BLUE " 当前系统：$OS"
  if [[ $(id -u) -ne "0" ]]; then
      colorEcho $RED "请以root身份执行该脚本"
      exit 1
  fi
  # 系统服务管理器检测
  if ! res=$(which systemctl 2>/dev/null); then
      colorEcho $RED "系统版本过低，请升级到最新版本"
      exit 1
  fi
}

# 防火墙处理
setFirewall(){
    systemctl status firewalld > /dev/null 2>&1
    if [[ $? -eq 0 ]]; then
        firewall-cmd --permanent --add-port=${PORT}/tcp
        firewall-cmd --permanent --add-port=${PORT}/udp
        firewall-cmd --reload
    else
        nl=$(iptables -nL | nl | grep FORWARD | awk '{print $1}')
        if [[ "$nl" != "3" ]]; then
            iptables -I INPUT -p tcp --dport ${PORT} -j ACCEPT
            iptables -I INPUT -p udp --dport ${PORT} -j ACCEPT
        fi
    fi
}

# 获取用户输入
getData(){
    read -p " 请设置密码(不输入则随机生成): " PASSWORD
    # shellcheck disable=SC2002
    [[ -z "$PASSWORD" ]] && PASSWORD=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 16 | head -n 1)
    echo ""
    colorEcho $BLUE " 密码： $PASSWORD"
    echo ""

    while true
    do
        read -p " 请设置SS的端口号[1025-65535]: " PORT
        [[ -z $PORT ]] && PORT="12345"
        if [[ "${PORT:0:1}" = "0" ]]; then
            echo -e " ${RED}端口不能以0开头${PLAIN}"
            exit 1
        fi
        # shellcheck disable=SC2003
        expr $PORT + 0 &>/dev/null
        if [[ $? -eq 0 ]]; then
            if [[ $PORT -ge 1025 ]] && [[ $PORT -le 65535 ]]; then
                echo ""
                colorEcho $BLUE " 端口号： $PORT"
                echo ""
                break
            else
                colorEcho $RED " 输入错误，端口号为1025-65535的数字"
            fi
        else
            colorEcho $RED " 输入错误，端口号为1025-65535的数字"
        fi
    done

    colorEcho $RED " 请选择加密方式: "
    echo "  1)aes-256-gcm"
    echo "  2)aes-192-gcm"
    echo "  3)aes-128-gcm"
    echo "  4)chacha20-ietf"
    echo "  5)chacha20-ietf-poly1305"
    echo "  6)xchacha20-ietf-poly1305"
    read -p " 请选择(默认aes-256-gcm): " answer
    if [[ -z $answer ]]; then
        METHOD="aes-256-gcm"
    else
        case $answer in
            1)
                METHOD="aes-256-gcm"
                ;;
            2)
                METHOD="aes-192-gcm"
                ;;
            3)
                METHOD="aes-128-gcm"
                ;;
            4)
                METHOD="chacha20-ietf"
                ;;
            5)
                METHOD="chacha20-ietf-poly1305"
                ;;
            6)
                METHOD="xchacha20-ietf-poly1305"
                ;;
            *)
                colorEcho $RED " 无效的选择，使用默认的aes-256-gcm"
                METHOD="aes-256-gcm"
                ;;
        esac
    fi
    echo ""
    colorEcho $BLUE "加密方式： $METHOD"
    echo ""
}

# 安装shadowsocks-rust
install(){
  getData
  rm -rf /tmp/shadowsocks-rust
  mkdir -p /tmp/shadowsocks-rust
  colorEcho $BLUE " 下载shadowsocks-rust： $SS_DOWNLOAD_LINK"
  curl -sSL -H "Cache-Control: no-cache" -o /tmp/shadowsocks-rust/shadowsocks.tar.xz $SS_DOWNLOAD_LINK
  if [[ $? -ne 0 ]]; then
    colorEcho $RED " 下载shadowsocks-rust失败，请检查服务器网络设置"
    exit 1
  fi

  # 解压
  colorEcho $BLUE " 安装shadowsocks-rust"
  mkdir -p '/usr/bin/shadowsocks' '/etc/shadowsocks' && \
  tar xf /tmp/shadowsocks-rust/shadowsocks.tar.xz -C /usr/bin/shadowsocks
  chmod +x '/usr/bin/shadowsocks/ssserver' || {
      colorEcho $RED " ssserver可执行文件安装失败，请检查权限设置"
      exit 1
  }

  # 配置文件
  colorEcho $BLUE " 配置${SS_CONFIG_FILE}"
  cat > $SS_CONFIG_FILE <<EOF
{
	"servers": [
		{
			"server": "0.0.0.0",
			"server_port": ${PORT},
			"password": "${PASSWORD}",
			"method": "${METHOD}",
			"nameserver": "8.8.8.8",
			"mode": "tcp_and_udp",
			"timeout": 300,
			"fast_open": false
		}
	]
}
EOF

  # 配置服务文件
  colorEcho $BLUE " 配置${SS_SERVICE_FILE}"
  cat > $SS_SERVICE_FILE <<-EOF
[Unit]
Description=Shadowsocks-Rust Server
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
ExecStart=/usr/bin/shadowsocks/ssserver -c /etc/shadowsocks/config.json
StandardOutput=journal
StandardError=journal
SyslogIdentifier=ssserver
Restart=always
RestartSec=5s
StartLimitInterval=100
StartLimitBurst=10

[Install]
WantedBy=multi-user.target
EOF

    # 防火墙处理
    setFirewall
    # 启动服务
    colorEcho $BLUE " 启动Shadowsocks服务..."
    systemctl daemon-reload
    systemctl enable shadowsocks-rust
    systemctl restart shadowsocks-rust
    sleep 2
    res=$(netstat -tupln | grep -v grep | grep 'ssserver')
    if [[ $res = "" ]]; then
          colorEcho $RED " 启动失败，请检查端口是否被占用！"
          exit 1
    else
          colorEcho $GREEN " 启动成功"
          info
    fi
}

# 卸载
uninstall(){
    echo ""
    read -p " 确定卸载吗？ (y/n) " answer
    [[ -z $answer ]] && answer="n"

    if [[ $answer == "y" ]] || [[ $answer == "Y" ]]; then
        systemctl stop shadowsocks-rust && systemctl disable shadowsocks-rust
        rm -rf $SS_SERVICE_FILE
        rm -rf /usr/bin/shadowsocks
        rm -rf /etc/shadowsocks
        colorEcho $GREEN " 卸载成功"
    fi
}

# ss状态检查
ss_status(){
  if [[ ! -f /usr/bin/shadowsocks/ssserver ]]; then
    echo 0
    return
  fi
  if [[  ! -f $SS_SERVICE_FILE ]]; then
    echo 0
    return
  fi
  res=$(netstat -tupln | grep -v grep | grep 'ssserver')
  if [[ $res = "" ]]; then
    echo 1
  else
    echo 2
  fi
}

# ss状态结果
ss_status_result(){
  res=$(ss_status)
  case $res in
    0)
      colorEcho $RED " 未安装"
      ;;
    1)
      colorEcho $RED " 未启动"
      ;;
    2)
      colorEcho $GREEN " 已启动"
      ;;
    *)
      colorEcho $RED " 未知错误"
      ;;
  esac
}

# 查看信息
info(){
    res=$(ss_status)
    if [[ $res -eq 0 ]]; then
        colorEcho $RED " 未安装"
        exit 1
    fi

    status=$(ss_status_result)
    port=$(grep server_port $SS_CONFIG_FILE | cut -d: -f2 | tr -d \",' ')
    password=$(grep password $SS_CONFIG_FILE | cut -d: -f2 | tr -d \",' ')
    method=$(grep method $SS_CONFIG_FILE | cut -d: -f2 | tr -d \",' ')

    echo ""
    echo -e "  ${BLUE}运行状态${PLAIN}：${status}"
    echo -e "  ${BLUE}配置文件：${PLAIN}${RED}$SS_CONFIG_FILE${PLAIN}"
    echo ""
    echo -e "  ${RED}配置信息 ${PLAIN}"
    echo -e "  ${BLUE}IP(address): ${PLAIN}${RED}${IP}${PLAIN}"
    echo -e "  ${BLUE}端口(port): ${PLAIN}${RED}${port}${PLAIN}"
    echo -e "  ${BLUE}密码(password): ${PLAIN}${RED}${password}${PLAIN}"
    echo -e "  ${BLUE}加密方式(method): ${PLAIN}${RED}${method}${PLAIN}"
}

# 启动
start(){
    res=$(ss_status)
    if [[ $res -eq 0 ]]; then
        colorEcho $RED " Shadowsocks未安装，请先安装！"
        return
    fi
    systemctl restart shadowsocks-rust
    res=$(netstat -tupln | grep -v grep | grep 'ssserver')
    if [[ $res = "" ]]; then
          colorEcho $RED " 启动失败，请检查端口是否被占用！"
    else
          colorEcho $GREEN " 启动成功"
    fi
}

# 停止
stop(){
    res=$(ss_status)
    if [[ $res -eq 0 ]]; then
        colorEcho $RED " Shadowsocks未安装，请先安装！"
        return
    fi
    systemctl stop shadowsocks-rust
    colorEcho $GREEN " 停止成功"
}

# 重启
restart(){
    res=$(ss_status)
    if [[ $res -eq 0 ]]; then
        colorEcho $RED " Shadowsocks未安装，请先安装！"
        return
    fi
    stop
    start
}

# 查看日志
log(){
    res=$(ss_status)
    if [[ $res -eq 0 ]]; then
        colorEcho $RED " Shadowsocks未安装，请先安装！"
        return
    fi
    # -x: 显示日志条目的额外解释信息
    # -e: 跳转到日志的末尾
    # -n: 显示最新的日志条目（默认显示10条）
    # -u: 指定 unit 名称（即服务名称）
    # --no-pager: 不启用分页显示
    journalctl -xen -u shadowsocks-rust --no-pager
}

# 菜单
menu(){
    clear
    colorEcho $BLUE "=================================================="
    colorEcho $BLUE "             Shadowsocks一键安装                  "
    colorEcho $BLUE "           脚本基于shadowsocks-rust               "
    colorEcho $BLUE "=================================================="
    colorEcho $GREEN "               1.安装                           "
    colorEcho $GREEN "               2.卸载                           "
    colorEcho $BLUE "=================================================="
    colorEcho $GREEN "               3.启动                           "
    colorEcho $GREEN "               4.停止                           "
    colorEcho $GREEN "               5.重启                           "
    colorEcho $BLUE "=================================================="
    colorEcho $GREEN "               6.查看配置                         "
    colorEcho $GREEN "               7.查看日志                         "
    colorEcho $BLUE "=================================================="
    colorEcho $GREEN "               0.退出                             "
    colorEcho $BLUE "=================================================="
    echo -n " 当前状态："
    ss_status_result
    echo ""

    read -p " 请选择操作[0-7]: " answer
    case $answer in
        1)
          install
          ;;
        2)
          uninstall
          ;;
        3)
          start
          ;;
        4)
          stop
          ;;
        5)
          restart
          ;;
        6)
          info
          ;;
        7)
          log
          ;;
        0)
          exit 0
          ;;
        *)
          colorEcho $RED " 请输入正确的数字[0-3]"
          exit 1
          ;;
    esac
}

# 主流程
check_system
action=$1
[[ -z $1 ]] && action=menu
case "$action" in
    menu|install|uninstall|info|start|stop|restart|log)
        $action
        ;;
    *)
        colorEcho $RED " 参数错误！"
        colorEcho $BLUE " 用法：$(basename $0) [menu|install|uninstall|info|start|stop|restart|log]"
        ;;
esac