mirror of
https://github.com/caiwx86/small-packages.git
synced 2026-10-29 15:35:13 +08:00
update 2026-09-21 02:26:10
This commit is contained in:
action committed
1 parent
d657bc36f5
commit
ef914bb2d7
1960 files changed
+1523609
-284
No files matched your search
@@ -1,246 +1,149 @@
|
||||
#!/bin/sh
|
||||
|
||||
sed -i "s/op.supes.top/dl.openwrt.ai/" /etc/opkg/distfeeds.conf
|
||||
|
||||
[ -x /bin/bash ] && grep -q "/bin/ash" /etc/passwd && {
|
||||
sed -i 's|/bin/ash|/bin/bash|g' "/etc/passwd"
|
||||
ln -sf /bin/bash /bin/sh
|
||||
touch /root/.bash_history
|
||||
ln -sf /root/.bash_history /tmp/.busybox_ash_history
|
||||
}
|
||||
# 1. 基础系统与组件链接修正
|
||||
sed -i 's|op.supes.top|dl.openwrt.ai|g' /etc/opkg/distfeeds.conf 2>/dev/null
|
||||
[ -x /bin/bash ] && sed -i 's|/bin/ash|/bin/bash|g' /etc/passwd 2>/dev/null && ln -sf /bin/bash /bin/sh 2>/dev/null
|
||||
[ -x /usr/bin/wget ] && [ ! -x /usr/bin/wget-ssl ] && ln -sf /usr/bin/wget /usr/bin/wget-ssl
|
||||
sed -i -e '/profile.d/d' /lib/upgrade/keep.d/base-files \
|
||||
-e 's/git-.*-\(.*\)/git-\1/g' /usr/lib/lua/luci/version.lua 2>/dev/null
|
||||
|
||||
# 2. 版本与环境参数提取
|
||||
version=$(uci -q get base_config.@status[0].version)
|
||||
case "$version" in ''|*[!0-9]*) version=0 ;; esac
|
||||
|
||||
hostname=$(uci -q get system.@system[0].hostname)
|
||||
[ -n "${hostname}" ] || hostname="Kwrt"
|
||||
for ip in $(uci -q get network.lan.ipaddr); do
|
||||
case "$ip" in *.*) lan_ip="${ip%%/*}"; break ;; esac
|
||||
done
|
||||
lan_ip="${lan_ip:-10.0.0.1}"
|
||||
|
||||
if [ "$(uci -q get dhcp.@dnsmasq[0].port)" != "53" ]; then
|
||||
uci -q set dhcp.@dnsmasq[0].port='53'
|
||||
uci commit dhcp
|
||||
fi
|
||||
[ -z "$(uci -q get system.@system[0].hostname)" ] && uci -q set system.@system[0].hostname='Kwrt'
|
||||
[ "$(uci -q get dropbear.main._direct)" != "1" ] && uci -q delete dropbear.main.Interface
|
||||
case "$(uci -q get uhttpd.main.index_page)" in *cgi-bin/luci*) ;; *) uci -q add_list uhttpd.main.index_page='cgi-bin/luci' ;; esac
|
||||
|
||||
sed -i '/profile.d/d' /lib/upgrade/keep.d/base-files
|
||||
proc=$(grep -c '^processor' /proc/cpuinfo 2>/dev/null)
|
||||
[ "${proc:-0}" -gt 0 ] 2>/dev/null || proc=3
|
||||
sed -i "s/^threads =.*/threads = $proc/" /etc/uwsgi/vassals/luci-webui.ini 2>/dev/null
|
||||
|
||||
if ! echo "$(uci -q get uhttpd.main.index_page)" | grep -q "cgi-bin/luci"; then
|
||||
uci -q add_list uhttpd.main.index_page='cgi-bin/luci'
|
||||
uci commit uhttpd
|
||||
fi
|
||||
# 3. 内存分级计算
|
||||
mem=0
|
||||
[ -r /proc/meminfo ] && read -r _ mem _ < /proc/meminfo
|
||||
case "$mem" in ''|*[!0-9]*) mem=0 ;; esac
|
||||
|
||||
if [ "$(uci -q get dropbear.main._direct)" != "1" ] && [ -n "$(uci -q get dropbear.main.Interface)" ]; then
|
||||
uci del dropbear.main.Interface
|
||||
uci commit dropbear
|
||||
fi
|
||||
c=1024; nf=16384
|
||||
[ "$mem" -ge 65536 ] && { c=2048; nf=32768; }
|
||||
[ "$mem" -ge 131072 ] && { c=4096; nf=65536; }
|
||||
[ "$mem" -ge 262144 ] && { c=8192; nf=65536; }
|
||||
[ "$mem" -ge 524288 ] && { c=10000; nf=131072; }
|
||||
[ "$mem" -ge 1048576 ] && { c=10000; nf=262144; }
|
||||
|
||||
[ -x /usr/bin/wget ] && [ ! -x /usr/bin/wget-ssl ] && \
|
||||
ln -s /usr/bin/wget /usr/bin/wget-ssl
|
||||
# 4. 首次开机参数统一批量预设
|
||||
if [ "$version" -lt 1 ]; then
|
||||
uci -q batch <<-EOF
|
||||
set luci.main.lang='auto'
|
||||
set uhttpd.main.rfc1918_filter='0'
|
||||
set uhttpd.main.redirect_https='0'
|
||||
set uhttpd.main.script_timeout='120'
|
||||
set upnpd.config.enabled='1'
|
||||
set firewall.@defaults[0].flow_offloading='1'
|
||||
set firewall.@defaults[0].flow_offloading_hw='1'
|
||||
set fstab.@global[0].anon_mount='1'
|
||||
set network.globals.packet_steering='1'
|
||||
set nft-qos.default.limit_enable='0'
|
||||
set system.@system[0].zonename='Asia/Shanghai'
|
||||
set system.@system[0].timezone='CST-8'
|
||||
set system.@system[0].ttylogin='1'
|
||||
set system.@system[0].zram_size_mb='$((mem / 1024 / 3))'
|
||||
del system.ntp.server
|
||||
add_list system.ntp.server='ntp.aliyun.com'
|
||||
add_list system.ntp.server='0.openwrt.pool.ntp.org'
|
||||
set dhcp.@dnsmasq[0].port='53'
|
||||
set dhcp.@dnsmasq[0].dns_redirect='1'
|
||||
set dhcp.@dnsmasq[0].allservers='1'
|
||||
del dhcp.@dnsmasq[0].noresolv
|
||||
set dhcp.@dnsmasq[0].cachesize='$c'
|
||||
set dhcp.@dnsmasq[0].dnsforwardmax='$c'
|
||||
set dhcp.@dnsmasq[0].min_ttl='3600'
|
||||
set dhcp.lan.force='1'
|
||||
set dhcp._ta=domain
|
||||
set dhcp._ta.name='time.android.com'
|
||||
set dhcp._ta.ip='203.107.6.88'
|
||||
set dhcp._ta.comments='time.android'
|
||||
EOF
|
||||
|
||||
sed -i "s/git-.*-\(.*\)/git-\1/g" /usr/lib/lua/luci/version.lua
|
||||
(echo root; echo root) | passwd root >/dev/null 2>&1
|
||||
[ -f /usr/share/rpcd/acl.d/luci-theme-argon.json ] && uci -q set luci.main.mediaurlbase='/luci-static/argon'
|
||||
grep -q 'log-facility' /etc/dnsmasq.conf 2>/dev/null || echo "log-facility=/dev/null" >> /etc/dnsmasq.conf
|
||||
|
||||
if [ -f /etc/uwsgi/vassals/luci-webui.ini ]; then
|
||||
processor=$(grep -c 'processor' /proc/cpuinfo)
|
||||
[ -n "$processor" ] && [ "$processor" -gt 0 ] || processor=3
|
||||
sed -i "/^threads =/c\threads = $processor" /etc/uwsgi/vassals/luci-webui.ini
|
||||
fi
|
||||
|
||||
if [ -f /etc/config/attendedsysupgrade ]; then
|
||||
uci -q set attendedsysupgrade.server.url='https://openwrt.ai'
|
||||
uci commit attendedsysupgrade
|
||||
fi
|
||||
|
||||
if [ -z "$version" ] || [ "$version" -lt 1 ]; then
|
||||
uci -q set luci.main.lang='auto'
|
||||
if [ -f /usr/share/rpcd/acl.d/luci-theme-footstrap.json ]; then
|
||||
uci -q set luci.main.mediaurlbase=/luci-static/footstrap
|
||||
fi
|
||||
uci commit luci
|
||||
|
||||
if uci -q get system.@system[0] >/dev/null; then
|
||||
uci -q set system.@system[0].zonename='Asia/Shanghai'
|
||||
uci -q set system.@system[0].timezone='CST-8'
|
||||
uci -q set system.@system[0].conloglevel='4'
|
||||
uci -q set system.@system[0].cronloglevel='8'
|
||||
uci -q set system.@system[0].ttylogin='1'
|
||||
uci -q del system.ntp.server
|
||||
uci -q add_list system.ntp.server='ntp.aliyun.com'
|
||||
uci -q add_list system.ntp.server='0.openwrt.pool.ntp.org'
|
||||
uci commit system
|
||||
fi
|
||||
|
||||
uci -q set uhttpd.main.rfc1918_filter=0
|
||||
uci -q set uhttpd.main.redirect_https=0
|
||||
uci -q set uhttpd.main.script_timeout='120'
|
||||
uci commit uhttpd
|
||||
|
||||
uci -q set upnpd.config.enabled='1'
|
||||
uci commit upnpd
|
||||
|
||||
(echo "root"; sleep 1; echo "root") | /bin/busybox passwd root >/dev/null 2>&1 &
|
||||
|
||||
uci -q set firewall.@defaults[0].flow_offloading='1'
|
||||
uci -q set firewall.@defaults[0].flow_offloading_hw='1'
|
||||
uci commit firewall
|
||||
|
||||
uci -q set upnpd.config.enabled='1'
|
||||
uci commit upnpd
|
||||
|
||||
grep -q log-facility /etc/dnsmasq.conf || \
|
||||
echo "log-facility=/dev/null" >> /etc/dnsmasq.conf
|
||||
|
||||
#kernel_version=$(uname -r)
|
||||
#if [ -f "/lib/modules/$kernel_version/xt_FULLCONENAT.ko" ] || [ -f "/lib/modules/$kernel_version/nft_fullcone.ko" ]; then
|
||||
# uci -q set firewall.@defaults[0].fullcone='1'
|
||||
# uci commit firewall
|
||||
#fi
|
||||
|
||||
uci -q set fstab.@global[0].anon_mount=1
|
||||
uci commit fstab
|
||||
|
||||
uci -q set network.globals.packet_steering=1
|
||||
uci -q set network.@device[0].promisc=1
|
||||
uci commit network
|
||||
|
||||
uci -q set dhcp.@dnsmasq[0].dns_redirect='1'
|
||||
uci -q set dhcp.@dnsmasq[0].allservers='1'
|
||||
uci -q del dhcp.@dnsmasq[0].noresolv
|
||||
uci -q set dhcp.@dnsmasq[0].cachesize='1500'
|
||||
uci -q set dhcp.@dnsmasq[0].min_ttl='3600'
|
||||
uci -q set dhcp.lan.force='1'
|
||||
uci -q set dhcp.lan.ra='hybrid'
|
||||
uci -q set dhcp.lan.ndp='hybrid'
|
||||
uci -q set dhcp.lan.dhcpv6='hybrid'
|
||||
uci commit dhcp
|
||||
|
||||
uci -q set nft-qos.default.limit_enable='0'
|
||||
uci commit nft-qos
|
||||
fi
|
||||
|
||||
# kB
|
||||
memtotal=$(grep MemTotal /proc/meminfo | awk '{print $2}')
|
||||
if [ "$memtotal" -ge 1048576 ]; then
|
||||
# > 1024M
|
||||
cachesize=10000
|
||||
dnsforwardmax=10000
|
||||
nf_conntrack_max=262144
|
||||
elif [ "$memtotal" -ge 524288 ]; then
|
||||
# <= 1024M
|
||||
cachesize=10000
|
||||
dnsforwardmax=10000
|
||||
nf_conntrack_max=131072
|
||||
elif [ "$memtotal" -ge 262144 ]; then
|
||||
# <= 512M
|
||||
cachesize=8192
|
||||
dnsforwardmax=8192
|
||||
nf_conntrack_max=65536
|
||||
elif [ "$memtotal" -ge 131072 ]; then
|
||||
# <= 256M
|
||||
cachesize=4096
|
||||
dnsforwardmax=4096
|
||||
nf_conntrack_max=65536
|
||||
elif [ "$memtotal" -ge 65536 ]; then
|
||||
# <= 128M
|
||||
cachesize=2048
|
||||
dnsforwardmax=2048
|
||||
nf_conntrack_max=32768
|
||||
else
|
||||
# < 64M
|
||||
cachesize=1024
|
||||
dnsforwardmax=1024
|
||||
nf_conntrack_max=16384
|
||||
fi
|
||||
|
||||
if [ -z "$version" ] || [ "$version" -lt 1 ]; then
|
||||
uci -q get dhcp.@dnsmasq[0] || uci -q add dhcp dnsmasq
|
||||
uci -q set dhcp.@dnsmasq[0].cachesize="$cachesize"
|
||||
uci -q set dhcp.@dnsmasq[0].dnsforwardmax="$dnsforwardmax"
|
||||
uci -q set dhcp.@dnsmasq[0].localservice='0'
|
||||
uci -q set dhcp.@dnsmasq[0].localise_queries='1'
|
||||
uci -q set dhcp.@dnsmasq[0].rebind_protection='0'
|
||||
uci -q set dhcp.@dnsmasq[0].rebind_localhost='1'
|
||||
uci commit dhcp
|
||||
|
||||
uci -q set system.@system[0].zram_size_mb="$((memtotal / 1024 / 3))"
|
||||
uci commit system
|
||||
|
||||
# sysctl overwrite
|
||||
SYSCTL_LOCAL=/etc/sysctl.d/50-local.conf
|
||||
mkdir -p /etc/sysctl.d
|
||||
> "$SYSCTL_LOCAL"
|
||||
echo "net.nf_conntrack_max=$nf_conntrack_max" >> "$SYSCTL_LOCAL"
|
||||
echo "net.core.rmem_max=$nf_conntrack_max" >> "$SYSCTL_LOCAL"
|
||||
printf "net.nf_conntrack_max=%s\nnet.core.rmem_max=%s\n" "$nf" "$nf" > /etc/sysctl.d/50-local.conf
|
||||
|
||||
if [ -n "$(command -v nginx)" ]; then
|
||||
uci add wizard shortcuts
|
||||
uci set wizard.@shortcuts[-1].shortcut='pw'
|
||||
uci set wizard.@shortcuts[-1].to_url='http://10.0.0.1/cgi-bin/luci/admin/services/passwall'
|
||||
uci set wizard.@shortcuts[-1].comments='passwall'
|
||||
uci commit wizard
|
||||
|
||||
uci -q set nginx._sc_pw=server
|
||||
uci -q set nginx._sc_pw.server_name="pw"
|
||||
uci -q add_list nginx._sc_pw.listen="80"
|
||||
uci -q add_list nginx._sc_pw.listen="443"
|
||||
uci -q set nginx._sc_pw.return="302 http://10.0.0.1/cgi-bin/luci/admin/services/passwall"
|
||||
|
||||
uci -q set dhcp._sc_pw=domain
|
||||
uci -q set dhcp._sc_pw.name="pw"
|
||||
uci -q set dhcp._sc_pw.ip="10.0.0.1"
|
||||
uci -q set dhcp._sc_pw.comments="PassWall"
|
||||
uci commit dhcp
|
||||
fi
|
||||
|
||||
if [ -z "$(uci -q get dhcp._ta)" ]; then
|
||||
uci -q set dhcp._ta=domain
|
||||
uci -q set dhcp._ta.name="time.android.com"
|
||||
uci -q set dhcp._ta.ip="203.107.6.88"
|
||||
uci -q set dhcp._ta.comments="time.android"
|
||||
uci commit dhcp
|
||||
if command -v nginx >/dev/null 2>&1 && [ -z "$(uci -q get wizard.pw)" ]; then
|
||||
uci -q batch <<-EOF
|
||||
set wizard.pw=shortcuts
|
||||
set wizard.pw.shortcut='pw'
|
||||
set wizard.pw.to_url='http://${lan_ip}/cgi-bin/luci/admin/services/passwall'
|
||||
set wizard.pw.comments='passwall'
|
||||
set nginx._sc_pw=server
|
||||
set nginx._sc_pw.server_name='pw'
|
||||
add_list nginx._sc_pw.listen='80'
|
||||
add_list nginx._sc_pw.listen='443'
|
||||
set nginx._sc_pw.return='302 http://${lan_ip}/cgi-bin/luci/admin/services/passwall'
|
||||
set dhcp._sc_pw=domain
|
||||
set dhcp._sc_pw.name='pw'
|
||||
set dhcp._sc_pw.ip='${lan_ip}'
|
||||
set dhcp._sc_pw.comments='PassWall'
|
||||
EOF
|
||||
fi
|
||||
version=1
|
||||
fi
|
||||
|
||||
if [ -z "$(uci -q get dhcp.default_server)" ]; then
|
||||
uci -q set dhcp.default_server=domain
|
||||
uci -q set dhcp.default_server.name='kwrt'
|
||||
uci -q set dhcp.default_server.ip='10.0.0.1'
|
||||
uci -q set dhcp.default_server.comments='后台地址'
|
||||
uci commit dhcp
|
||||
# 5. 默认后台域名映射与 Nginx 规则
|
||||
[ -z "$(uci -q get dhcp.default_server)" ] && uci -q batch <<-EOF
|
||||
set dhcp.default_server=domain
|
||||
set dhcp.default_server.name='kwrt'
|
||||
set dhcp.default_server.ip='${lan_ip}'
|
||||
set dhcp.default_server.comments='后台地址'
|
||||
EOF
|
||||
|
||||
if command -v nginx >/dev/null 2>&1; then
|
||||
[ -z "$(uci -q get nginx.default_server)" ] && uci -q batch <<-EOF
|
||||
set nginx.default_server=server
|
||||
set nginx.default_server.server_name='kwrt'
|
||||
add_list nginx.default_server.listen='80 default_server'
|
||||
add_list nginx.default_server.listen='[::]:80 default_server'
|
||||
add_list nginx.default_server.include='conf.d/*.locations'
|
||||
set nginx.default_server.access_log='off; # logd openwrt'
|
||||
EOF
|
||||
|
||||
if [ -f /etc/nginx/conf.d/luci.locations ]; then
|
||||
grep -q 'uwsgi_read_timeout' /etc/nginx/conf.d/luci.locations || sed -i '/include uwsgi_params;/a\\t\tuwsgi_read_timeout 300s;' /etc/nginx/conf.d/luci.locations
|
||||
grep -q 'ubus_script_timeout' /etc/nginx/conf.d/luci.locations || sed -i '/ubus_parallel_req/a\ ubus_script_timeout 600;' /etc/nginx/conf.d/luci.locations
|
||||
fi
|
||||
|
||||
if [ -f /etc/nginx/uci.conf.template ]; then
|
||||
sed -i -e 's/128M/3072M/' -e 's/2 1k/4 512k/' /etc/nginx/uci.conf.template
|
||||
grep -q 'client_body_buffer_size' /etc/nginx/uci.conf.template || sed -i '/large_client_header_buffers/a\\tclient_body_buffer_size 128K;' /etc/nginx/uci.conf.template
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ -n "$(command -v nginx)" ]; then
|
||||
if [ -z "$(uci -q get nginx.default_server)" ]; then
|
||||
uci -q set nginx.default_server=server
|
||||
uci -q set nginx.default_server.server_name='kwrt'
|
||||
uci -q add_list nginx.default_server.listen='80 default_server'
|
||||
uci -q add_list nginx.default_server.listen='[::]:80 default_server'
|
||||
uci -q add_list nginx.default_server.include='conf.d/*.locations'
|
||||
uci -q set nginx.default_server.access_log='off; # logd openwrt'
|
||||
uci commit nginx
|
||||
fi
|
||||
|
||||
grep -q "uwsgi_read_timeout" /etc/nginx/conf.d/luci.locations 2>/dev/null || {
|
||||
sed -i "s/include uwsgi_params;/include uwsgi_params;\n\t\tuwsgi_read_timeout 300s;/" /etc/nginx/conf.d/luci.locations
|
||||
sed -i '/ubus_parallel_req/a\ ubus_script_timeout 600;' /etc/nginx/conf.d/luci.locations
|
||||
}
|
||||
# 6. uWSGI 超时与 FullCone 探测（兼容 fw3/fw4）
|
||||
for ini in /etc/uwsgi/vassals/luci-*.ini; do
|
||||
[ -f "$ini" ] && ! grep -q 'cgi-timeout' "$ini" && echo "cgi-timeout = 500" >> "$ini"
|
||||
done
|
||||
sed -i 's/limit-as = 1000/limit-as = 5000/g' /etc/uwsgi/vassals/luci-webui.ini 2>/dev/null
|
||||
|
||||
sed -i \
|
||||
-e "s/client_max_body_size 128M/client_max_body_size 3072M/" \
|
||||
-e "s/large_client_header_buffers 2 1k/large_client_header_buffers 4 512k/" \
|
||||
/etc/nginx/uci.conf.template
|
||||
|
||||
grep -q "client_body_buffer_size" /etc/nginx/uci.conf.template || \
|
||||
sed -i "/large_client_header_buffers/a\ client_body_buffer_size 128K;" /etc/nginx/uci.conf.template
|
||||
fi
|
||||
|
||||
rm -rf /tmp/luci-*
|
||||
uci -q set base_config.@status[0].version="$version"
|
||||
uci commit base_config
|
||||
|
||||
grep -q "cgi-timeout" /etc/uwsgi/vassals/luci-*.ini 2>/dev/null || sed -i '$a cgi-timeout = 500' /etc/uwsgi/vassals/luci-*.ini
|
||||
sed -i "s/limit-as = 1000/limit-as = 5000/g" /etc/uwsgi/vassals/luci-webui.ini
|
||||
|
||||
modprobe xt_FULLCONENAT || {
|
||||
if ! iptables -L -t nat 2>/dev/null | grep -q "FULLCONENAT"; then
|
||||
uci -q set firewall.@defaults[0].fullcone='0'
|
||||
uci commit firewall
|
||||
fi
|
||||
modprobe xt_FULLCONENAT >/dev/null 2>&1 || modprobe nft_fullcone >/dev/null 2>&1 || {
|
||||
iptables -L -t nat 2>/dev/null | grep -q 'FULLCONENAT' || \
|
||||
nft list ruleset 2>/dev/null | grep -q 'fullcone' || \
|
||||
uci -q set firewall.@defaults[0].fullcone='0'
|
||||
}
|
||||
|
||||
# 7. 更新版本状态、一次性提交所有 UCI 配置并安全退出
|
||||
[ -f /etc/config/base_config ] && {
|
||||
uci -q get base_config.@status[0] >/dev/null || uci -q add base_config status >/dev/null
|
||||
uci -q set base_config.@status[0].version="$version"
|
||||
}
|
||||
|
||||
uci -q commit
|
||||
rm -rf /tmp/luci-*
|
||||
exit 0
|
||||
@@ -1,55 +1,232 @@
|
||||
#!/bin/sh
|
||||
#
|
||||
# Optimized & Refactored OpenWrt WiFi Configuration Script
|
||||
# Source Reference: https://github.com/kiddin9/my-packages/blob/master/my-default-settings/files/sbin/mywifi
|
||||
#
|
||||
|
||||
board_name() {
|
||||
[ -e /tmp/sysinfo/board_name ] && cat /tmp/sysinfo/board_name || echo "generic"
|
||||
show_help() {
|
||||
cat << 'EOF_HELP'
|
||||
用法:
|
||||
mywifi [选项] [WiFi名称] [WiFi密码]
|
||||
|
||||
参数:
|
||||
WiFi名称 基础SSID名称（缺省时自动使用系统 hostname）
|
||||
WiFi密码 无线密码（缺省或未指定时默认无密码，指定时需 8-63 位）
|
||||
|
||||
选项:
|
||||
-s, --ssid <名称> 指定基础WiFi名称
|
||||
-p, --password <密码> 指定WiFi密码
|
||||
-h, --help 查看帮助信息
|
||||
|
||||
WiFi命名规范:
|
||||
2.4 GHz -> <WiFi名>_2.4G
|
||||
5 GHz -> <WiFi名>_5G
|
||||
6 GHz -> <WiFi名>_6G
|
||||
|
||||
使用示例:
|
||||
mywifi # 默认使用 hostname，无密码
|
||||
mywifi "HomeWiFi" # HomeWiFi_2.4G / HomeWiFi_5G，无密码
|
||||
mywifi "HomeWiFi" "12345678" # HomeWiFi_2.4G / HomeWiFi_5G，密码 12345678
|
||||
mywifi -s "HomeWiFi" -p "12345678" # 选项传参
|
||||
EOF_HELP
|
||||
}
|
||||
|
||||
wifi_setup_radio(){
|
||||
local radio=$1
|
||||
htmode="$(uci -q get wireless.${radio}.htmode)"
|
||||
if uci -q get wireless.${radio} >/dev/null; then
|
||||
uci -q del wireless.${radio}.disabled
|
||||
uci -q set wireless.${radio}.country='CN'
|
||||
|
||||
if [ "$(uci -q get wireless.${radio}.band)" = "5g" ]; then
|
||||
uci -q set wireless.default_${radio}.ssid="${SSID}_5G"
|
||||
if [[ "$DISTRIB_TARGET" == *ipq60xx ]]; then
|
||||
uci set wireless.${radio}.htmode='HE80'
|
||||
fi
|
||||
elif [ "$(uci -q get wireless.${radio}.band)" = "2g" ]; then
|
||||
uci -q set wireless.default_${radio}.ssid="${SSID}_2.4G"
|
||||
fi
|
||||
uci -q set wireless.default_${radio}.device="${radio}"
|
||||
SSID_PASSWD="${SSID_PASSWD:-$(uci -q get wireless.default_${radio}.key)}"
|
||||
if [ "${SSID_PASSWD}" ]; then
|
||||
uci -q set wireless.default_${radio}.encryption='psk2'
|
||||
uci -q set wireless.default_${radio}.key="${SSID_PASSWD}"
|
||||
else
|
||||
uci -q set wireless.default_${radio}.encryption='none'
|
||||
fi
|
||||
fi
|
||||
}
|
||||
# 1. 解析命令行参数（同时兼顾位置参数与选项参数）
|
||||
CUSTOM_SSID=""
|
||||
CUSTOM_PASSWD=""
|
||||
HAS_PASSWD=0
|
||||
|
||||
for i in $(seq 1 10); do
|
||||
[[ "$(uci -q get base_config.@status[0].inited)" == 1 && "$(cat /etc/config/wireless)" ]] && break
|
||||
[ "$(cat /etc/config/wireless)" ] || /sbin/wifi config
|
||||
sleep 1s
|
||||
while [ $# -gt 0 ]; do
|
||||
case "$1" in
|
||||
-h|--help)
|
||||
show_help
|
||||
exit 0
|
||||
;;
|
||||
-s|--ssid)
|
||||
shift
|
||||
CUSTOM_SSID="$1"
|
||||
;;
|
||||
-p|--password)
|
||||
shift
|
||||
CUSTOM_PASSWD="$1"
|
||||
HAS_PASSWD=1
|
||||
;;
|
||||
*)
|
||||
if [ -z "$CUSTOM_SSID" ]; then
|
||||
CUSTOM_SSID="$1"
|
||||
elif [ $HAS_PASSWD -eq 0 ]; then
|
||||
CUSTOM_PASSWD="$1"
|
||||
HAS_PASSWD=1
|
||||
fi
|
||||
;;
|
||||
esac
|
||||
shift
|
||||
done
|
||||
|
||||
if [[ "$(cat /etc/config/wireless)" ]]; then
|
||||
. /etc/openwrt_release
|
||||
SSID="$(uci -q get wizard.default.wifi_ssid || uci -q get system.@system[0].hostname || echo Kwrt)"
|
||||
SSID_PASSWD="$(uci -q get wizard.default.wifi_key)"
|
||||
sed -i '/option disabled/d' /etc/config/wireless
|
||||
# 密码校验：如果传入了密码，校验其长度是否符合 WPA/WPA2/WPA3 规范（8~63位）
|
||||
if [ $HAS_PASSWD -eq 1 ] && [ -n "$CUSTOM_PASSWD" ]; then
|
||||
pwd_len=${#CUSTOM_PASSWD}
|
||||
if [ "$pwd_len" -lt 8 ] || [ "$pwd_len" -gt 63 ]; then
|
||||
echo "[ERROR] WiFi 密码长度必须在 8 到 63 个字符之间！" >&2
|
||||
exit 1
|
||||
fi
|
||||
SSID_PASSWD="$CUSTOM_PASSWD"
|
||||
else
|
||||
SSID_PASSWD=""
|
||||
fi
|
||||
|
||||
[ "$(uci -q get wireless.radio1.band)" == "5g" ] && uci -q set wireless.radio0.band="2g"
|
||||
widx=0
|
||||
while uci rename wireless.@wifi-iface[$widx]=default_radio$widx >/dev/null 2>&1; do widx=$((widx+1)); done
|
||||
for radio in radio0 radio1 radio2 radio3; do
|
||||
wifi_setup_radio ${radio}
|
||||
done
|
||||
uci commit wireless
|
||||
uci -q set base_config.@status[0].wifi=1
|
||||
uci commit base_config
|
||||
/sbin/wifi reload
|
||||
fi
|
||||
# 2. 识别射频频段函数 (2g, 5g, 6g)
|
||||
detect_band() {
|
||||
local radio="$1"
|
||||
local band="$(uci -q get wireless.${radio}.band 2>/dev/null | tr 'A-Z' 'a-z')"
|
||||
|
||||
case "$band" in
|
||||
*2g*|*2.4g*) echo "2g"; return ;;
|
||||
*5g*) echo "5g"; return ;;
|
||||
*6g*) echo "6g"; return ;;
|
||||
esac
|
||||
|
||||
# 若未定义 band 属性，根据 channel（信道）推断
|
||||
local channel="$(uci -q get wireless.${radio}.channel 2>/dev/null)"
|
||||
if [ -n "$channel" ] && [ "$channel" -eq "$channel" ] 2>/dev/null; then
|
||||
if [ "$channel" -ge 1 ] && [ "$channel" -le 14 ]; then
|
||||
echo "2g"; return
|
||||
elif [ "$channel" -ge 32 ] && [ "$channel" -le 177 ]; then
|
||||
echo "5g"; return
|
||||
elif [ "$channel" -ge 180 ]; then
|
||||
echo "6g"; return
|
||||
fi
|
||||
fi
|
||||
|
||||
# 根据 hwmode 模式推断
|
||||
local hwmode="$(uci -q get wireless.${radio}.hwmode 2>/dev/null | tr 'A-Z' 'a-z')"
|
||||
case "$hwmode" in
|
||||
*a*) echo "5g"; return ;;
|
||||
*b*|*g*) echo "2g"; return ;;
|
||||
esac
|
||||
|
||||
# 双频常规配对推断
|
||||
if [ "$radio" = "radio0" ]; then
|
||||
local r1_band="$(uci -q get wireless.radio1.band 2>/dev/null | tr 'A-Z' 'a-z')"
|
||||
[ "$r1_band" = "5g" ] && echo "2g" && return
|
||||
elif [ "$radio" = "radio1" ]; then
|
||||
local r0_band="$(uci -q get wireless.radio0.band 2>/dev/null | tr 'A-Z' 'a-z')"
|
||||
[ "$r0_band" = "2g" ] && echo "5g" && return
|
||||
fi
|
||||
|
||||
echo "2g"
|
||||
}
|
||||
|
||||
# 3. 检查并生成无线配置（非空探测，避免死等 10 秒）
|
||||
if [ ! -s /etc/config/wireless ]; then
|
||||
[ -x /sbin/wifi ] && /sbin/wifi config >/dev/null 2>&1
|
||||
for i in $(seq 1 10); do
|
||||
[ -s /etc/config/wireless ] && break
|
||||
sleep 1
|
||||
done
|
||||
fi
|
||||
|
||||
if [ ! -s /etc/config/wireless ]; then
|
||||
echo "[ERROR] 未检测到无线配置或无可用无线设备！" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# 4. 加载系统发行版信息（若存在）
|
||||
[ -f /etc/openwrt_release ] && . /etc/openwrt_release
|
||||
|
||||
# 5. 确定基础 WiFi 名称
|
||||
if [ -n "$CUSTOM_SSID" ]; then
|
||||
SSID="$CUSTOM_SSID"
|
||||
else
|
||||
SSID="$(uci -q get system.@system[0].hostname 2>/dev/null)"
|
||||
[ -z "$SSID" ] && [ -r /proc/sys/kernel/hostname ] && SSID="$(cat /proc/sys/kernel/hostname)"
|
||||
[ -z "$SSID" ] && SSID="$(uci -q get wizard.default.wifi_ssid 2>/dev/null)"
|
||||
[ -z "$SSID" ] && SSID="OpenWrt"
|
||||
fi
|
||||
|
||||
# 移除禁用标记
|
||||
sed -i '/option disabled/d' /etc/config/wireless 2>/dev/null
|
||||
|
||||
# 修正双频标记
|
||||
if [ "$(uci -q get wireless.radio1.band 2>/dev/null)" = "5g" ]; then
|
||||
[ -z "$(uci -q get wireless.radio0.band 2>/dev/null)" ] && uci -q set wireless.radio0.band="2g"
|
||||
fi
|
||||
|
||||
# 重命名匿名接口 section 为 default_radioX
|
||||
widx=0
|
||||
while uci rename wireless.@wifi-iface[$widx]=default_radio$widx >/dev/null 2>&1; do
|
||||
widx=$((widx + 1))
|
||||
done
|
||||
|
||||
# 6. 配置各 Radio 参数
|
||||
wifi_setup_radio() {
|
||||
local radio="$1"
|
||||
|
||||
uci -q get wireless.${radio} >/dev/null 2>&1 || return 0
|
||||
|
||||
uci -q del wireless.${radio}.disabled
|
||||
uci -q set wireless.${radio}.country='CN'
|
||||
|
||||
local band="$(detect_band "$radio")"
|
||||
local ssid_suffix=""
|
||||
case "$band" in
|
||||
2g) ssid_suffix="_2.4G" ;;
|
||||
5g) ssid_suffix="_5G" ;;
|
||||
6g) ssid_suffix="_6G" ;;
|
||||
*) ssid_suffix="_${band}" ;;
|
||||
esac
|
||||
|
||||
local full_ssid="${SSID}${ssid_suffix}"
|
||||
|
||||
# 特定硬件架构适配（如高通 ipq60xx）
|
||||
if [ "$band" = "5g" ]; then
|
||||
case "$DISTRIB_TARGET" in
|
||||
*ipq60xx*)
|
||||
uci -q set wireless.${radio}.htmode='HE80'
|
||||
;;
|
||||
esac
|
||||
fi
|
||||
|
||||
local iface="default_${radio}"
|
||||
uci -q get wireless.${iface} >/dev/null 2>&1 || uci -q set wireless.${iface}=wifi-iface
|
||||
|
||||
uci -q set wireless.${iface}.device="${radio}"
|
||||
uci -q set wireless.${iface}.mode='ap'
|
||||
uci -q set wireless.${iface}.network='lan'
|
||||
uci -q set wireless.${iface}.ssid="${full_ssid}"
|
||||
|
||||
# 密码与加密策略配置
|
||||
if [ -n "$SSID_PASSWD" ]; then
|
||||
if [ "$band" = "6g" ]; then
|
||||
# 6GHz 频段按标准强制要求 WPA3-SAE
|
||||
uci -q set wireless.${iface}.encryption='sae'
|
||||
else
|
||||
uci -q set wireless.${iface}.encryption='psk2'
|
||||
fi
|
||||
uci -q set wireless.${iface}.key="${SSID_PASSWD}"
|
||||
echo "[INFO] ${radio} (${band}): SSID='${full_ssid}', 加密='$(uci -q get wireless.${iface}.encryption)'"
|
||||
else
|
||||
uci -q set wireless.${iface}.encryption='none'
|
||||
uci -q del wireless.${iface}.key
|
||||
echo "[INFO] ${radio} (${band}): SSID='${full_ssid}', 无密码 (开放网络)"
|
||||
fi
|
||||
}
|
||||
|
||||
# 7. 动态遍历所有射频设备并应用设置
|
||||
radios="$(uci -q show wireless 2>/dev/null | sed -n 's/^wireless\.\([^.]*\)=wifi-device/\1/p')"
|
||||
[ -z "$radios" ] && radios="radio0 radio1 radio2 radio3"
|
||||
|
||||
for radio in $radios; do
|
||||
wifi_setup_radio "$radio"
|
||||
done
|
||||
|
||||
# 提交配置
|
||||
uci commit wireless 2>/dev/null
|
||||
# 重载无线网络
|
||||
if command -v wifi >/dev/null 2>&1; then
|
||||
wifi reload
|
||||
elif [ -x /sbin/wifi ]; then
|
||||
/sbin/wifi reload
|
||||
fi
|
||||
|
||||
echo "[SUCCESS] 无线配置已更新并生效。"
|
||||
Reference in new issue
Block a user