op-packages/.github/diy/patches/tailscale.patch

--- a/luci-app-tailscale/Makefile
+++ b/luci-app-tailscale/Makefile
@@ -14,100 +14,39 @@ PKG_VERSION:=1.2.17
 # existing configuration before extraction; the UCI-defaults script restores it
 # afterwards. Declaring the same files as opkg conffiles conflicts with this
 # lifecycle and creates inactive *-opkg files during upgrades.
-define Package/luci-app-tailscale/preinst
-#!/bin/sh
-state_dir=/etc/.luci-app-tailscale-upgrade
-state_pending="$${state_dir}.pending"
-legacy_hotplug=/etc/hotplug.d/iface/40-tailscale
-legacy_backup_dir=/etc/tailscale/luci-app-tailscale-legacy
-
-[ -n "$${IPKG_INSTROOT}" ] && exit 0
-
-disable_legacy_hotplug() {
-	local backup_file
-
-	[ -e "$${legacy_hotplug}" ] || [ -L "$${legacy_hotplug}" ] || return 0
-	backup_file="$${legacy_backup_dir}/40-tailscale.disabled.$$(date +%Y%m%d%H%M%S).$$$$"
-	if mkdir -p "$${legacy_backup_dir}" 2>/dev/null && cp -p "$${legacy_hotplug}" "$${backup_file}"; then
-		:
-	else
-		rm -f "$${backup_file}" 2>/dev/null || true
-	fi
 
-	# Disabling the duplicate starter is mandatory even when its backup fails.
-	# chmod is a last-resort guard for a transient remove failure; package
-	# extraction will subsequently remove the obsolete package-owned path.
-	rm -f "$${legacy_hotplug}" || chmod 000 "$${legacy_hotplug}" || return 1
-}
-
-disable_legacy_hotplug || exit 1
-
-[ -f /etc/config/tailscale ] || exit 0
-[ -f "$${state_dir}/.complete" ] && exit 0
-
-clear_state_dir() {
-	rm -f "$${1}/tailscale" "$${1}/tailscale_openclash" \
-		"$${1}/tailscale_openclash.absent" "$${1}/tailscale_policy_routing" \
-		"$${1}/.complete"
-	rmdir "$${1}" 2>/dev/null || [ ! -e "$${1}" ]
-}
-
-clear_state_dir "$${state_dir}" || exit 1
-clear_state_dir "$${state_pending}" || exit 1
-umask 077
-mkdir "$${state_pending}" || exit 1
-chmod 700 "$${state_pending}" || exit 1
-cp /etc/config/tailscale "$${state_pending}/tailscale" || exit 1
-if [ -f /etc/config/tailscale_openclash ]; then
-	cp /etc/config/tailscale_openclash "$${state_pending}/tailscale_openclash" || exit 1
-else
-	: >"$${state_pending}/tailscale_openclash.absent" || exit 1
-fi
-if [ -f /etc/config/tailscale_policy_routing ]; then
-	cp /etc/config/tailscale_policy_routing "$${state_pending}/tailscale_policy_routing" || exit 1
-fi
-: >"$${state_pending}/.complete" || exit 1
-mv "$${state_pending}" "$${state_dir}" || exit 1
-exit 0
+define Package/luci-app-tailscale/conffiles
+/etc/config/tailscale
+/etc/config/tailscale_openclash
+/etc/config/tailscale_policy_routing
 endef
 
 define Package/luci-app-tailscale/prerm
 #!/bin/sh
-state_dir=/etc/.luci-app-tailscale-upgrade
-
-case "$${2:-}" in
-	remove|[0-9]*) ;;
-	*)
-		# default_prerm sources this script for opkg, while OpenWrt 24.10
-		# apk runs pre-deinstall directly with the old package version in $1.
-		case "$${1:-}" in
-			[0-9]*) ;;
-			*) exit 0 ;;
-		esac
-		;;
-esac
+[ -n "$${IPKG_INSTROOT}" ] && exit 0
 
-if [ -z "$${IPKG_INSTROOT}" ] && [ -x /usr/sbin/tailscale_policy_routing ]; then
-	/usr/sbin/tailscale_policy_routing cleanup >/dev/null 2>&1 || exit 1
+if [ -x /usr/sbin/tailscale_policy_routing ]; then
+	/usr/sbin/tailscale_policy_routing cleanup >/dev/null 2>&1 || true
 fi
-if [ -z "$${IPKG_INSTROOT}" ] && [ -x /etc/init.d/tailscale-policy-routing ]; then
-	/etc/init.d/tailscale-policy-routing disable >/dev/null 2>&1 || exit 1
+
+if [ -x /etc/init.d/tailscale-policy-routing ]; then
+	/etc/init.d/tailscale-policy-routing stop >/dev/null 2>&1 || true
+	/etc/init.d/tailscale-policy-routing disable >/dev/null 2>&1 || true
 fi
-if [ -z "$${IPKG_INSTROOT}" ] && [ -x /usr/sbin/tailscale_openclash_bypass ]; then
+
+if [ -x /usr/sbin/tailscale_openclash_bypass ]; then
 	/usr/sbin/tailscale_openclash_bypass cleanup >/dev/null 2>&1 || true
 fi
-if [ -z "$${IPKG_INSTROOT}" ] && [ -x /etc/init.d/tailscale-openclash-bypass ]; then
+
+if [ -x /etc/init.d/tailscale-openclash-bypass ]; then
+	/etc/init.d/tailscale-openclash-bypass stop >/dev/null 2>&1 || true
 	/etc/init.d/tailscale-openclash-bypass disable >/dev/null 2>&1 || true
 fi
-if [ -z "$${IPKG_INSTROOT}" ] && [ -x /etc/init.d/tailscale ]; then
-	/etc/init.d/tailscale stop >/dev/null 2>&1 || exit 1
+
+if [ -x /etc/init.d/tailscale ]; then
+	/etc/init.d/tailscale stop >/dev/null 2>&1 || true
 fi
-for cleanup_dir in "$${state_dir}" "$${state_dir}.pending"; do
-	rm -f "$${cleanup_dir}/tailscale" "$${cleanup_dir}/tailscale_openclash" \
-		"$${cleanup_dir}/tailscale_openclash.absent" "$${cleanup_dir}/tailscale_policy_routing" \
-		"$${cleanup_dir}/.complete"
-	rmdir "$${cleanup_dir}" 2>/dev/null || true
-done
+
 exit 0
 endef
 

--- a/luci-app-tailscale/root/etc/uci-defaults/40_luci-tailscale
+++ b/luci-app-tailscale/root/etc/uci-defaults/40_luci-tailscale
@@ -1,86 +1,30 @@
 #!/bin/sh
 
-UPGRADE_STATE_DIR="${UPGRADE_STATE_DIR:-/etc/.luci-app-tailscale-upgrade}"
 TAILSCALE_SECRETS_BIN="${TAILSCALE_SECRETS_BIN:-/usr/sbin/tailscale_secrets}"
 UCI_BIN="${UCI_BIN:-uci}"
 OPENCLASH_BYPASS_INIT="${OPENCLASH_BYPASS_INIT:-/etc/init.d/tailscale-openclash-bypass}"
 POLICY_ROUTING_INIT="${POLICY_ROUTING_INIT:-/etc/init.d/tailscale-policy-routing}"
-LEGACY_ADGUARD_DNS_INIT="${LEGACY_ADGUARD_DNS_INIT:-/etc/init.d/tailscale-adguard-dns}"
-LEGACY_ADGUARD_DNS_RC_DIR="${LEGACY_ADGUARD_DNS_RC_DIR:-/etc/rc.d}"
-LEGACY_ADGUARD_DNS_BACKUP_DIR="${LEGACY_ADGUARD_DNS_BACKUP_DIR:-/etc/tailscale/luci-app-tailscale-legacy}"
 LUCI_INDEX_CACHE="${LUCI_INDEX_CACHE:-/tmp/luci-indexcache}"
 
-cleanup_upgrade_state() {
-	rm -f "$UPGRADE_STATE_DIR/tailscale" "$UPGRADE_STATE_DIR/tailscale_openclash" \
-		"$UPGRADE_STATE_DIR/tailscale_openclash.absent" "$UPGRADE_STATE_DIR/tailscale_policy_routing" \
-		"$UPGRADE_STATE_DIR/.complete"
-	rmdir "$UPGRADE_STATE_DIR" 2>/dev/null || true
-}
-
-restore_upgrade_config() {
-	local source_file="$1" target_file="$2" temporary_file
-
-	[ -f "$source_file" ] || return 0
-	temporary_file="$target_file.luci-app-tailscale-upgrade.$$"
-	cp "$source_file" "$temporary_file" || return 1
-	mv "$temporary_file" "$target_file" || {
-		rm -f "$temporary_file"
-		return 1
-	}
-}
-
-cleanup_legacy_adguard_dns_service() {
-	local backup_dir link
-
-	[ -e "$LEGACY_ADGUARD_DNS_INIT" ] || return 0
-	backup_dir="$LEGACY_ADGUARD_DNS_BACKUP_DIR/tailscale-adguard-dns.$(date +%Y%m%d%H%M%S).$$"
-	mkdir -p "$backup_dir" || return 1
-
-	for link in "$LEGACY_ADGUARD_DNS_RC_DIR"/*tailscale-adguard-dns; do
-		[ -e "$link" ] || [ -L "$link" ] || continue
-		printf '%s\t%s\n' "${link##*/}" "$(readlink "$link" 2>/dev/null || true)" >>"$backup_dir/rc-links"
-	done
-
-	if [ -x "$LEGACY_ADGUARD_DNS_INIT" ]; then
-		"$LEGACY_ADGUARD_DNS_INIT" stop || return 1
-		"$LEGACY_ADGUARD_DNS_INIT" disable || true
-	fi
-
-	cp -p "$LEGACY_ADGUARD_DNS_INIT" "$backup_dir/init" || return 1
-	for link in "$LEGACY_ADGUARD_DNS_RC_DIR"/*tailscale-adguard-dns; do
-		[ -e "$link" ] || [ -L "$link" ] || continue
-		rm -f "$link" || return 1
-	done
-	mv "$LEGACY_ADGUARD_DNS_INIT" "$backup_dir/tailscale-adguard-dns.disabled" || return 1
-}
-
-if [ -f "$UPGRADE_STATE_DIR/.complete" ]; then
-	restore_upgrade_config "$UPGRADE_STATE_DIR/tailscale" /etc/config/tailscale || exit 1
-	if [ -f "$UPGRADE_STATE_DIR/tailscale_openclash.absent" ]; then
-		rm -f /etc/config/tailscale_openclash
-	else
-		restore_upgrade_config "$UPGRADE_STATE_DIR/tailscale_openclash" /etc/config/tailscale_openclash || exit 1
-	fi
-	restore_upgrade_config "$UPGRADE_STATE_DIR/tailscale_policy_routing" /etc/config/tailscale_policy_routing || exit 1
-	cleanup_upgrade_state
-elif [ -d "$UPGRADE_STATE_DIR" ]; then
-	cleanup_upgrade_state
+# 初始化密钥存储
+if [ -x "$TAILSCALE_SECRETS_BIN" ]; then
+	"$TAILSCALE_SECRETS_BIN" migrate || exit 1
 fi
 
-cleanup_legacy_adguard_dns_service || exit 1
-
-"$TAILSCALE_SECRETS_BIN" migrate || exit 1
-
+# 根据配置启用 OpenClash 旁路分流服务
 openclash_bypass_enabled="$("$UCI_BIN" -q get tailscale_openclash.settings.enabled 2>/dev/null || true)"
 if [ "$openclash_bypass_enabled" = '1' ] && [ -x "$OPENCLASH_BYPASS_INIT" ]; then
 	"$OPENCLASH_BYPASS_INIT" enable
 	"$OPENCLASH_BYPASS_INIT" start
 fi
 
+# 启用策略路由服务
 if [ -x "$POLICY_ROUTING_INIT" ]; then
 	"$POLICY_ROUTING_INIT" enable
 	"$POLICY_ROUTING_INIT" start
 fi
 
+# 刷新 LuCI 缓存使菜单立即生效
 rm -f "$LUCI_INDEX_CACHE"
+
 exit 0