mirror of
https://github.com/kiddin9/op-packages.git
synced 2026-08-02 07:29:28 +08:00
801 lines
21 KiB
Bash
Executable File
801 lines
21 KiB
Bash
Executable File
#!/bin/bash
|
|
. /lib/functions.sh
|
|
. /usr/share/openclash/ruby.sh
|
|
. /usr/share/openclash/uci.sh
|
|
|
|
set_lock() {
|
|
exec 885>"/tmp/lock/openclash_debug.lock" 2>/dev/null
|
|
flock -x 885 2>/dev/null
|
|
}
|
|
|
|
del_lock() {
|
|
flock -u 885 2>/dev/null
|
|
rm -rf "/tmp/lock/openclash_debug.lock" 2>/dev/null
|
|
}
|
|
|
|
ipk_v()
|
|
{
|
|
if [ -x "/bin/opkg" ]; then
|
|
echo $(rm -f /var/lock/opkg.lock && opkg status "$1" 2>/dev/null |grep 'Version' |awk -F ': ' '{print $2}' 2>/dev/null)
|
|
elif [ -x "/usr/bin/apk" ]; then
|
|
echo $(rm -f /lib/apk/db/lock && apk list "$1" 2>/dev/null |grep 'installed' | grep -oE '\d+(\.\d+)*' | head -1)
|
|
fi
|
|
}
|
|
|
|
set_lock
|
|
|
|
DEBUG_LOG="/tmp/openclash_debug.log"
|
|
LOGTIME=$(echo $(date "+%Y-%m-%d %H:%M:%S"))
|
|
log_level=$(uci_get_config "log_level")
|
|
enable_custom_dns=$(uci_get_config "enable_custom_dns")
|
|
enable_custom_clash_rules=$(uci_get_config "enable_custom_clash_rules")
|
|
ipv6_enable=$(uci_get_config "ipv6_enable")
|
|
ipv6_dns=$(uci_get_config "ipv6_dns")
|
|
enable_redirect_dns=$(uci_get_config "enable_redirect_dns")
|
|
disable_masq_cache=$(uci_get_config "disable_masq_cache")
|
|
proxy_mode=$(uci_get_config "proxy_mode")
|
|
intranet_allowed=$(uci_get_config "intranet_allowed")
|
|
enable_udp_proxy=$(uci_get_config "enable_udp_proxy")
|
|
enable_rule_proxy=$(uci_get_config "enable_rule_proxy")
|
|
en_mode=$(uci_get_config "en_mode")
|
|
RAW_CONFIG_FILE=$(uci_get_config "config_path")
|
|
CONFIG_FILE="/etc/openclash/$(uci_get_config "config_path" |awk -F '/' '{print $5}' 2>/dev/null)"
|
|
core_model=$(uci_get_config "core_version")
|
|
if [ -x "/bin/opkg" ]; then
|
|
cpu_model=$(rm -f /var/lock/opkg.lock && opkg status libc 2>/dev/null |grep 'Architecture' |awk -F ': ' '{print $2}' 2>/dev/null)
|
|
elif [ -x "/usr/bin/apk" ]; then
|
|
cpu_model=$(rm -f /lib/apk/db/lock && apk list libc 2>/dev/null|awk '{print $2}')
|
|
fi
|
|
core_meta_version=$(/etc/openclash/core/clash_meta -v 2>/dev/null |awk -F ' ' '{print $3}' |head -1 2>/dev/null)
|
|
op_version=$(ipk_v "luci-app-openclash")
|
|
china_ip_route=$(uci_get_config "china_ip_route")
|
|
common_ports=$(uci_get_config "common_ports")
|
|
router_self_proxy=$(uci_get_config "router_self_proxy")
|
|
core_type=$(uci_get_config "core_type" || echo "Dev")
|
|
da_password=$(uci_get_config "dashboard_password")
|
|
cn_port=$(uci_get_config "cn_port")
|
|
stack_type=$(uci_get_config "stack_type")
|
|
delay_start=$(uci_get_config "delay_start")
|
|
log_size=$(uci_get_config "log_size")
|
|
bypass_gateway_compatible=$(uci_get_config "bypass_gateway_compatible")
|
|
disable_quic_go_gso=$(uci_get_config "disable_quic_go_gso")
|
|
small_flash_memory=$(uci_get_config "small_flash_memory")
|
|
enable_meta_sniffer=$(uci_get_config "enable_meta_sniffer")
|
|
enable_respect_rules=$(uci_get_config "enable_respect_rules")
|
|
skip_proxy_address=$(uci_get_config "skip_proxy_address")
|
|
disable_udp_quic=$(uci_get_config "disable_udp_quic")
|
|
lan_ac_mode=$(uci_get_config "lan_ac_mode")
|
|
ipv6_mode=$(uci_get_config "ipv6_mode")
|
|
china_ip6_route=$(uci_get_config "china_ip6_route")
|
|
lan_interface_name=$(uci_get_config "lan_interface_name" || echo "0")
|
|
if [ "$lan_interface_name" = "0" ]; then
|
|
lan_ip=$(uci -q get network.lan.ipaddr |awk -F '/' '{print $1}' 2>/dev/null || ip address show $(uci -q -p /tmp/state get network.lan.device || uci -q -p /tmp/state get network.lan.device) | grep -w "inet" 2>/dev/null |grep -Eo 'inet [0-9\.]+' | awk '{print $2}' |head -1 || ip addr show 2>/dev/null | grep -w 'inet' | grep 'global' | grep 'brd' | grep -Eo 'inet [0-9\.]+' | awk '{print $2}' | head -n 1)
|
|
else
|
|
lan_ip=$(ip address show $lan_interface_name | grep -w "inet" 2>/dev/null |grep -Eo 'inet [0-9\.]+' | awk '{print $2}' |head -1)
|
|
fi
|
|
dnsmasq_default_resolvfile=$(uci_get_config "default_resolvfile")
|
|
|
|
if [ -z "$RAW_CONFIG_FILE" ] || [ ! -f "$RAW_CONFIG_FILE" ]; then
|
|
for file_name in /etc/openclash/config/*
|
|
do
|
|
if [ -f "$file_name" ]; then
|
|
RAW_CONFIG_FILE=$file_name
|
|
CONFIG_NAME=$(echo "$RAW_CONFIG_FILE" |awk -F '/' '{print $5}' 2>/dev/null)
|
|
CONFIG_FILE="/etc/openclash/$CONFIG_NAME"
|
|
break
|
|
fi
|
|
done
|
|
fi
|
|
|
|
ts_cf()
|
|
{
|
|
if [ "$1" = "0" ] || [ -z "$1" ]; then
|
|
echo "停用"
|
|
else
|
|
echo "启用"
|
|
fi
|
|
}
|
|
|
|
ts_re()
|
|
{
|
|
if [ -z "$1" ]; then
|
|
echo "未安装"
|
|
else
|
|
echo "已安装 ($1)"
|
|
fi
|
|
}
|
|
|
|
dns_re()
|
|
{
|
|
if [ "$1" = "1" ]; then
|
|
echo "Dnsmasq 转发"
|
|
elif [ "$1" = "2" ]; then
|
|
echo "Firewall 转发"
|
|
else
|
|
echo "停用"
|
|
fi
|
|
}
|
|
|
|
ipv6_mode_name()
|
|
{
|
|
case "$1" in
|
|
0) echo "TProxy 模式" ;;
|
|
1) echo "Redirect 模式" ;;
|
|
2) echo "TUN 模式" ;;
|
|
3) echo "Mix 混合模式" ;;
|
|
*) echo "未知" ;;
|
|
esac
|
|
}
|
|
|
|
cat > "$DEBUG_LOG" <<-EOF
|
|
# OpenClash 调试日志
|
|
|
|
> 生成时间: $LOGTIME
|
|
> 插件版本: ${op_version:-未知}
|
|
> 隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息
|
|
|
|
## 系统信息
|
|
|
|
| 项目 | 值 |
|
|
|------|----|
|
|
| 主机型号 | $(cat /tmp/sysinfo/model 2>/dev/null) |
|
|
| 固件版本 | $(cat /usr/lib/os-release 2>/dev/null |grep OPENWRT_RELEASE 2>/dev/null |awk -F '"' '{print $2}' 2>/dev/null) |
|
|
| LuCI版本 | $(ipk_v "luci") |
|
|
| 内核版本 | $(uname -r 2>/dev/null) |
|
|
| 处理器架构 | $cpu_model |
|
|
| 系统运行时间 | $(uptime 2>/dev/null) |
|
|
| IPV6-DHCP | $(uci -q get dhcp.lan.dhcpv6 || echo "未配置") |
|
|
| DNS劫持 | $(dns_re "$enable_redirect_dns") |
|
|
|
|
### 磁盘与内存
|
|
|
|
\`\`\`bash
|
|
# df -h / /tmp /etc/openclash
|
|
$(df -h / /tmp /etc/openclash 2>/dev/null)
|
|
\`\`\`
|
|
|
|
\`\`\`bash
|
|
# free -m
|
|
$(free -m 2>/dev/null)
|
|
\`\`\`
|
|
|
|
\`\`\`bash
|
|
# cat /proc/meminfo | grep -E '^(MemTotal|MemAvailable|SwapTotal|SwapFree)'
|
|
$(cat /proc/meminfo 2>/dev/null | grep -E '^(MemTotal|MemAvailable|SwapTotal|SwapFree)')
|
|
\`\`\`
|
|
|
|
### Dnsmasq 配置
|
|
|
|
\`\`\`bash
|
|
# uci show dhcp.@dnsmasq[0]
|
|
$(uci show dhcp.@dnsmasq[0] 2>/dev/null)
|
|
\`\`\`
|
|
EOF
|
|
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## 依赖检查
|
|
|
|
| 依赖 | 状态 |
|
|
|------|------|
|
|
| dnsmasq-full | $(ts_re "$(ipk_v "dnsmasq-full")") |
|
|
| dnsmasq-full(ipset) | $(ts_re "$(dnsmasq --version |grep -v no-ipset |grep ipset)") |
|
|
| dnsmasq-full(nftset) | $(ts_re "$(dnsmasq --version |grep nftset)") |
|
|
| bash | $(ts_re "$(ipk_v "bash")") |
|
|
| curl | $(ts_re "$(ipk_v "curl")") |
|
|
| ca-bundle | $(ts_re "$(ipk_v "ca-bundle")") |
|
|
| ipset | $(ts_re "$(ipk_v "ipset")") |
|
|
| ip-full | $(ts_re "$(ipk_v "ip-full")") |
|
|
| ruby | $(ts_re "$(ipk_v "ruby")") |
|
|
| ruby-yaml | $(ts_re "$(ipk_v "ruby-yaml")") |
|
|
| ruby-psych | $(ts_re "$(ipk_v "ruby-psych")") |
|
|
| ruby-pstore | $(ts_re "$(ipk_v "ruby-pstore")") |
|
|
| ruby功能测试 | $(ruby -e "require 'yaml'; YAML.load('test: ok'); puts '正常'" 2>/dev/null || echo "异常") |
|
|
| kmod-tun(TUN模式) | $(ts_re "$(ipk_v "kmod-tun")") |
|
|
| luci-compat | $(ts_re "$(ipk_v "luci-compat")") |
|
|
| kmod-inet-diag | $(ts_re "$(ipk_v "kmod-inet-diag")") |
|
|
| unzip | $(ts_re "$(ipk_v "unzip")") |
|
|
EOF
|
|
if [ -n "$(command -v fw4)" ]; then
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
| kmod-nft-tproxy | $(ts_re "$(ipk_v kmod-nft-tproxy)") |
|
|
EOF
|
|
else
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
| iptables-mod-tproxy | $(ts_re "$(ipk_v "iptables-mod-tproxy")") |
|
|
| kmod-ipt-tproxy | $(ts_re "$(ipk_v "kmod-ipt-tproxy")") |
|
|
| iptables-mod-extra | $(ts_re "$(ipk_v "iptables-mod-extra")") |
|
|
| kmod-ipt-extra | $(ts_re "$(ipk_v "kmod-ipt-extra")") |
|
|
| kmod-ipt-nat | $(ts_re "$(ipk_v "kmod-ipt-nat")") |
|
|
EOF
|
|
fi
|
|
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
### 内核模块加载状态
|
|
|
|
\`\`\`bash
|
|
# lsmod | grep -E 'tun|tproxy|inet_diag'
|
|
$(lsmod | grep -E 'tun|tproxy|inet_diag' 2>/dev/null || echo "无相关模块")
|
|
\`\`\`
|
|
EOF
|
|
|
|
#core
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## 内核检查
|
|
|
|
| 项目 | 值 |
|
|
|------|----|
|
|
EOF
|
|
if pidof clash >/dev/null; then
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
| 运行状态 | 运行中 |
|
|
| 运行内核 | $core_type |
|
|
| 进程pid | $(pidof clash) |
|
|
| 运行用户 | $(ps |grep "/etc/openclash/clash" |grep -v grep |awk '{print $2}' 2>/dev/null) |
|
|
EOF
|
|
else
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
| 运行状态 | 未运行 |
|
|
EOF
|
|
fi
|
|
if [ "$core_model" = "0" ]; then
|
|
core_model="未选择架构"
|
|
fi
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
| 已选择的架构 | $core_model |
|
|
| Meta 内核版本 | $core_meta_version |
|
|
EOF
|
|
|
|
if [ ! -f "/etc/openclash/core/clash_meta" ]; then
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
| Meta 内核文件 | 不存在 |
|
|
EOF
|
|
else
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
| Meta 内核文件 | 存在 |
|
|
EOF
|
|
fi
|
|
if [ ! -x "/etc/openclash/core/clash_meta" ]; then
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
| Meta 内核运行权限 | 否 |
|
|
EOF
|
|
else
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
| Meta 内核运行权限 | 正常 |
|
|
EOF
|
|
fi
|
|
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## GEO 数据文件
|
|
|
|
\`\`\`bash
|
|
# ls -lh /etc/openclash/Country.mmdb /etc/openclash/GeoIP.dat /etc/openclash/GeoSite.dat /etc/openclash/ASN.mmdb
|
|
$(ls -lh /etc/openclash/Country.mmdb /etc/openclash/GeoIP.dat /etc/openclash/GeoSite.dat /etc/openclash/ASN.mmdb 2>/dev/null)
|
|
\`\`\`
|
|
|
|
## 模型、缓存文件状态
|
|
|
|
| 文件 | 状态 |
|
|
|------|------|
|
|
| Model.bin | $(ls -lh /etc/openclash/Model.bin 2>/dev/null || echo "不存在") |
|
|
| cache.db | $(ls -lh /etc/openclash/cache.db 2>/dev/null || echo "不存在") |
|
|
|
|
## 冲突插件检测
|
|
|
|
\`\`\`bash
|
|
# ps | grep -E 'passwall|ssr-plus|bypass|helloworld'
|
|
$(ps | grep -E 'passwall|ssr-plus|bypass|helloworld' | grep -v grep 2>/dev/null || echo "未检测到冲突插件")
|
|
\`\`\`
|
|
EOF
|
|
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## 插件设置
|
|
|
|
| 设置项 | 值 |
|
|
|--------|----|
|
|
| 当前配置文件 | $RAW_CONFIG_FILE |
|
|
| 启动配置文件 | $CONFIG_FILE |
|
|
| 运行模式 | $en_mode |
|
|
| 默认代理模式 | $proxy_mode |
|
|
| UDP流量转发 | $(ts_cf "$enable_udp_proxy") |
|
|
| 自定义DNS | $(ts_cf "$enable_custom_dns") |
|
|
| IPV6代理 | $(ts_cf "$ipv6_enable") |
|
|
| IPV6-DNS解析 | $(ts_cf "$ipv6_dns") |
|
|
| 禁用Dnsmasq缓存 | $(ts_cf "$disable_masq_cache") |
|
|
| 自定义规则 | $(ts_cf "$enable_custom_clash_rules") |
|
|
| 仅允许内网 | $(ts_cf "$intranet_allowed") |
|
|
| 仅代理命中规则流量 | $(ts_cf "$enable_rule_proxy") |
|
|
| 仅允许常用端口流量 | $(ts_cf "$common_ports") |
|
|
| 绕过中国大陆IP | $(ts_cf "$china_ip_route") |
|
|
| 路由本机代理 | $(ts_cf "$router_self_proxy") |
|
|
| TUN堆栈类型 | ${stack_type:-system} |
|
|
| 启动延迟 | ${delay_start:-0}秒 |
|
|
| 日志大小 | ${log_size:-1024}KB |
|
|
| 旁路由兼容 | $(ts_cf "$bypass_gateway_compatible") |
|
|
| 禁用quic-go GSO | $(ts_cf "$disable_quic_go_gso") |
|
|
| 小闪存模式 | $(ts_cf "$small_flash_memory") |
|
|
| 域名嗅探 | $(ts_cf "$enable_meta_sniffer") |
|
|
| DNS代理 | $(ts_cf "$enable_respect_rules") |
|
|
| 绕过服务器地址 | $(ts_cf "$skip_proxy_address") |
|
|
| 禁用QUIC | $(ts_cf "$disable_udp_quic") |
|
|
| 访问控制模式 | $([ "$lan_ac_mode" = "1" ] && echo "White" || echo "Black") |
|
|
| IPv6模式 | $(ipv6_mode_name "$ipv6_mode") |
|
|
| 绕过IPv6区域 | $(ts_cf "$china_ip6_route") |
|
|
|
|
EOF
|
|
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## Cron 定时任务
|
|
|
|
\`\`\`bash
|
|
# crontab -l | grep -i openclash
|
|
$(crontab -l 2>/dev/null | grep -i openclash || echo "无 OpenClash 相关 cron 任务")
|
|
\`\`\`
|
|
|
|
## 覆写模块设置
|
|
|
|
\`\`\`bash
|
|
# uci show openclash.@overwrite[0]
|
|
$(uci -q show openclash.@overwrite[0])
|
|
\`\`\`
|
|
|
|
EOF
|
|
|
|
if [ "$enable_custom_clash_rules" -eq 1 ]; then
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## 自定义规则 一 (优先匹配)
|
|
|
|
\`\`\`bash
|
|
# cat /etc/openclash/custom/openclash_custom_rules.list
|
|
EOF
|
|
cat /etc/openclash/custom/openclash_custom_rules.list >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
|
|
## 自定义规则 二 (扩展匹配)
|
|
|
|
\`\`\`bash
|
|
# cat /etc/openclash/custom/openclash_custom_rules_2.list
|
|
EOF
|
|
cat /etc/openclash/custom/openclash_custom_rules_2.list >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
fi
|
|
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## 配置文件
|
|
|
|
\`\`\`yaml
|
|
# ruby_read [config] (filtered: without proxies/proxy-providers)
|
|
EOF
|
|
if [ -f "$CONFIG_FILE" ]; then
|
|
ruby_read "$CONFIG_FILE" ".select {|x| 'proxies' != x and 'proxy-providers' != x }.to_yaml" 2>/dev/null >> "$DEBUG_LOG"
|
|
else
|
|
ruby_read "$RAW_CONFIG_FILE" ".select {|x| 'proxies' != x and 'proxy-providers' != x }.to_yaml" 2>/dev/null >> "$DEBUG_LOG"
|
|
fi
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
|
|
sed -i '/^ \{0,\}secret:/d' "$DEBUG_LOG" 2>/dev/null
|
|
|
|
#custom overwrite
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## 自定义覆写设置
|
|
|
|
\`\`\`bash
|
|
# cat /etc/openclash/custom/openclash_custom_overwrite.sh
|
|
EOF
|
|
cat /etc/openclash/custom/openclash_custom_overwrite.sh >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
|
|
#firewall
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## 自定义防火墙设置
|
|
|
|
\`\`\`bash
|
|
# cat /etc/openclash/custom/openclash_custom_firewall_rules.sh
|
|
EOF
|
|
cat /etc/openclash/custom/openclash_custom_firewall_rules.sh >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
|
|
if [ -n "$(command -v fw4)" ]; then
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## NFTABLES 防火墙设置
|
|
|
|
\`\`\`bash
|
|
# nft list chain inet fw4 (all chains)
|
|
EOF
|
|
for nft in "input" "forward" "dstnat" "srcnat" "nat_output" "mangle_prerouting" "mangle_output"; do
|
|
nft list chain inet fw4 "$nft" >> "$DEBUG_LOG" 2>/dev/null && echo "" >> "$DEBUG_LOG"
|
|
done >/dev/null 2>&1
|
|
for nft in "openclash" "openclash_mangle" "openclash_mangle_output" "openclash_output" "openclash_post" "openclash_wan_input" "openclash_dns_hijack" "openclash_dns_redirect" "openclash_v6" "openclash_mangle_v6" "openclash_mangle_output_v6" "openclash_output_v6" "openclash_post_v6" "openclash_wan6_input"; do
|
|
nft list chain inet fw4 "$nft" >> "$DEBUG_LOG" 2>/dev/null && echo "" >> "$DEBUG_LOG"
|
|
done >/dev/null 2>&1
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
else
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## IPTABLES 防火墙设置
|
|
|
|
### IPv4 NAT chain
|
|
|
|
\`\`\`bash
|
|
# iptables-save -t nat
|
|
EOF
|
|
iptables-save -t nat >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
|
|
### IPv4 Mangle chain
|
|
|
|
\`\`\`bash
|
|
# iptables-save -t mangle
|
|
EOF
|
|
iptables-save -t mangle >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
|
|
### IPv4 Filter chain
|
|
|
|
\`\`\`bash
|
|
# iptables-save -t filter
|
|
EOF
|
|
iptables-save -t filter >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
|
|
### IPv6 NAT chain
|
|
|
|
\`\`\`bash
|
|
# ip6tables-save -t nat
|
|
EOF
|
|
ip6tables-save -t nat >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
|
|
### IPv6 Mangle chain
|
|
|
|
\`\`\`bash
|
|
# ip6tables-save -t mangle
|
|
EOF
|
|
ip6tables-save -t mangle >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
|
|
### IPv6 Filter chain
|
|
|
|
\`\`\`bash
|
|
# ip6tables-save -t filter
|
|
EOF
|
|
ip6tables-save -t filter >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
fi
|
|
|
|
if [ -n "$(command -v fw4)" ]; then
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## NFT Sets 状态
|
|
|
|
\`\`\`bash
|
|
# nft list sets inet fw4
|
|
EOF
|
|
nft list sets inet fw4 2>/dev/null | sed -n '/^table inet fw4 {/,/^}/p' | awk '
|
|
/elements = \{/ { in_el=1; el=0; trunc=0; indent=""; elem_indent=$0; sub(/[^[:space:]].*/, "", elem_indent); print; if (/[[:space:]]+\}[[:space:]]*$/) in_el=0; next }
|
|
in_el && /\}/ { in_el=0; if (trunc) { print indent "..."; print elem_indent "}" } else print; next }
|
|
in_el {
|
|
if (!indent) { match($0, /^[[:space:]]*/); indent = substr($0, 1, RLENGTH) }
|
|
n = split($0, a, ","); el += n
|
|
if (el > 10 && !trunc) { trunc=1; next }
|
|
if (trunc) next
|
|
print
|
|
}
|
|
!in_el {
|
|
print
|
|
if (/^[[:space:]]+\}$/) print ""
|
|
}
|
|
' >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
else
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## IPSET状态
|
|
|
|
\`\`\`bash
|
|
# ipset list
|
|
EOF
|
|
for set in $(ipset list -n 2>/dev/null); do
|
|
ipset list "$set" 2>/dev/null | awk -v max=10 '
|
|
/^Members:/ { in_members=1; count=0; print; next }
|
|
in_members {
|
|
if (/^[[:space:]]*[^[:space:]]/) {
|
|
count++
|
|
if (count <= max) { print; next }
|
|
else if (count == max+1) { print "..."; next }
|
|
else { next }
|
|
}
|
|
}
|
|
{ print }
|
|
'
|
|
echo ""
|
|
done >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
fi
|
|
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## 路由表状态
|
|
|
|
EOF
|
|
echo "### IPv4" >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
echo "\`\`\`bash" >> "$DEBUG_LOG"
|
|
echo "# route -n" >> "$DEBUG_LOG"
|
|
route -n >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "\`\`\`" >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
echo "\`\`\`bash" >> "$DEBUG_LOG"
|
|
echo "# ip route list" >> "$DEBUG_LOG"
|
|
ip route list >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "\`\`\`" >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
echo "\`\`\`bash" >> "$DEBUG_LOG"
|
|
echo "# ip route list table 354" >> "$DEBUG_LOG"
|
|
ip route list table 354 >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "\`\`\`" >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
echo "\`\`\`bash" >> "$DEBUG_LOG"
|
|
echo "# ip rule show" >> "$DEBUG_LOG"
|
|
ip rule show >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "\`\`\`" >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
echo "### IPv6" >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
echo "\`\`\`bash" >> "$DEBUG_LOG"
|
|
echo "# route -A inet6" >> "$DEBUG_LOG"
|
|
route -A inet6 >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "\`\`\`" >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
echo "\`\`\`bash" >> "$DEBUG_LOG"
|
|
echo "# ip -6 route list" >> "$DEBUG_LOG"
|
|
ip -6 route list >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "\`\`\`" >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
echo "\`\`\`bash" >> "$DEBUG_LOG"
|
|
echo "# ip -6 route list table 354" >> "$DEBUG_LOG"
|
|
ip -6 route list table 354 >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "\`\`\`" >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
echo "\`\`\`bash" >> "$DEBUG_LOG"
|
|
echo "# ip -6 rule show" >> "$DEBUG_LOG"
|
|
ip -6 rule show >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "\`\`\`" >> "$DEBUG_LOG"
|
|
|
|
if [ "$en_mode" != "fake-ip" ] && [ "$en_mode" != "redir-host" ]; then
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## Tun设备状态
|
|
|
|
\`\`\`bash
|
|
# ip tuntap list
|
|
EOF
|
|
ip tuntap list >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
fi
|
|
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## 端口占用状态
|
|
|
|
\`\`\`bash
|
|
# netstat -nlp | grep clash
|
|
EOF
|
|
netstat -nlp |grep clash >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
|
|
## 网络接口状态
|
|
|
|
\`\`\`bash
|
|
# ip link show && ip addr show | grep -E 'inet |utun'
|
|
EOF
|
|
ip link show >> "$DEBUG_LOG" 2>/dev/null
|
|
ip addr show | grep -E 'inet |utun' >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## 测试本机DNS查询(www.baidu.com)
|
|
|
|
\`\`\`bash
|
|
# nslookup www.baidu.com
|
|
EOF
|
|
nslookup www.baidu.com >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
|
|
## 测试内核DNS查询(www.instagram.com)
|
|
|
|
\`\`\`bash
|
|
# openclash_debug_dns.lua www.instagram.com
|
|
EOF
|
|
/usr/share/openclash/openclash_debug_dns.lua "www.instagram.com" >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## DNS 解析文件
|
|
|
|
### **Dnsmasq 当前默认 resolv 文件**
|
|
|
|
\`\`\`bash
|
|
EOF
|
|
echo $dnsmasq_default_resolvfile >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
|
|
if [ -s "/tmp/resolv.conf.auto" ]; then
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
### /tmp/resolv.conf.auto
|
|
|
|
\`\`\`bash
|
|
# cat /tmp/resolv.conf.auto
|
|
EOF
|
|
cat /tmp/resolv.conf.auto >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
fi
|
|
|
|
if [ -s "/tmp/resolv.conf.d/resolv.conf.auto" ]; then
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
### /tmp/resolv.conf.d/resolv.conf.auto
|
|
|
|
\`\`\`bash
|
|
# cat /tmp/resolv.conf.d/resolv.conf.auto
|
|
EOF
|
|
cat /tmp/resolv.conf.d/resolv.conf.auto >> "$DEBUG_LOG"
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
fi
|
|
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## 测试本机网络连接(www.baidu.com)
|
|
|
|
\`\`\`bash
|
|
# curl -SsI -m 5 www.baidu.com
|
|
EOF
|
|
curl -SsI -m 5 www.baidu.com >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
|
|
LICENSE_URL="https://raw.githubusercontent.com/vernesong/OpenClash/refs/heads/master/LICENSE"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## 测试本机网络下载([raw.githubusercontent.com]($LICENSE_URL))
|
|
|
|
\`\`\`bash
|
|
# curl -SsIL -m 3 --retry 2 $LICENSE_URL
|
|
EOF
|
|
curl -SsIL -m 3 --retry 2 "$LICENSE_URL" >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
|
|
if pidof clash >/dev/null; then
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## Mihomo API 健康检查
|
|
|
|
\`\`\`json
|
|
# curl -Ss -m 3 -H "Authorization: Bearer [password]" http://127.0.0.1:[cn_port]/version
|
|
EOF
|
|
curl -Ss -m 3 -H "Authorization: Bearer ${da_password}" http://127.0.0.1:${cn_port}/version >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
fi
|
|
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## 最近运行日志 (切换为Debug模式)
|
|
|
|
\`\`\`bash
|
|
# tail -n 100 /tmp/openclash.log
|
|
EOF
|
|
|
|
if pidof clash >/dev/null && [ "$log_level" != "debug" ]; then
|
|
curl -SsL -m 3 --retry 2 -H "Content-Type: application/json" -H "Authorization: Bearer ${da_password}" -XPATCH http://${lan_ip}:${cn_port}/configs -d '{"log-level": "debug"}' >/dev/null
|
|
sleep 10
|
|
fi
|
|
|
|
tail -n 100 "/tmp/openclash.log" >> "$DEBUG_LOG" 2>/dev/null
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
|
|
EOF
|
|
if pidof clash >/dev/null && [ "$log_level" != "debug" ]; then
|
|
curl -SsL -m 3 --retry 2 -H "Content-Type: application/json" -H "Authorization: Bearer ${da_password}" -XPATCH http://${lan_ip}:${cn_port}/configs -d '{"log-level": "'"$log_level"'"}' >/dev/null
|
|
fi
|
|
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
|
|
## 活动连接信息
|
|
|
|
\`\`\`bash
|
|
# openclash_debug_getcon.lua
|
|
EOF
|
|
/usr/share/openclash/openclash_debug_getcon.lua
|
|
echo "" >> "$DEBUG_LOG"
|
|
cat >> "$DEBUG_LOG" <<-EOF
|
|
\`\`\`
|
|
EOF
|
|
|
|
sed -i -E 's/(([0-9]{1,3}\.){2})[0-9]{1,3}\.[0-9]{1,3}/\1*\.*/g' "$DEBUG_LOG" 2>/dev/null
|
|
|
|
sed -i -E 's/(:[0-9a-fA-F]{1,4}){3}/:*:*:*/' "$DEBUG_LOG" 2>/dev/null
|
|
|
|
sed -i 's/Downloading URL【[^】]*】/Downloading URL【*】/g' "$DEBUG_LOG" 2>/dev/null
|
|
|
|
del_lock |