Localized SSH-Manager bundle: remote-independent installer, unpacked udp-custom binaries

2026-09-14 15:48:06 +03:00
commit 9c91e9e266
13 changed files with 7527 additions and 0 deletions
@@ -0,0 +1,132 @@
+#!/bin/bash
+set -e
+
+# Must be root
+if [[ $EUID -ne 0 ]]; then
+   echo "Error: This script must be run as root."
+   exit 1
+fi
+
+echo "Installing TNS243-GLOBAL Manager (localized bundle)..."
+
+# Repo URI used when this script is executed piped (curl | bash) instead of from a local clone
+REPO_URL="http://146.19.208.111:3001/yasin/SSH-Manager.git"
+
+# Resolve the directory this script lives in (the cloned repo root).
+# Supports both:
+#   git clone $REPO_URL && cd SSH-Manager && bash install.sh
+#   bash <(curl -sL http://146.19.208.111:3001/yasin/SSH-Manager/raw/branch/main/install.sh)
+SCRIPT_DIR=""
+PIPED_CLONE_DIR=""
+if [[ -n "${BASH_SOURCE[0]}" && -f "${BASH_SOURCE[0]}" ]]; then
+    SCRIPT_DIR="$(cd "$(dirname "$(readlink -f "${BASH_SOURCE[0]}")")" && pwd)"
+fi
+if [[ -z "$SCRIPT_DIR" ]]; then
+    echo "Piped execution detected - fetching bundle via git..."
+    if ! command -v git &>/dev/null; then
+        echo "Error: git is required when running this script piped (curl | bash)."
+        echo "       Install git, or clone the repository manually and run: bash install.sh"
+        exit 1
+    fi
+    PIPED_CLONE_DIR=$(mktemp -d)
+    git clone -q --depth 1 "$REPO_URL" "$PIPED_CLONE_DIR/SSH-Manager"
+    SCRIPT_DIR="$PIPED_CLONE_DIR/SSH-Manager"
+fi
+
+BUNDLE_INSTALL_DIR="/opt/firewallfalcon-bundle"
+
+# Verify required bundle files exist locally
+for required in \
+    "$SCRIPT_DIR/menu.sh" \
+    "$SCRIPT_DIR/ssh" \
+    "$SCRIPT_DIR/panel/panel.py" \
+    "$SCRIPT_DIR/panel/index.html" \
+    "$SCRIPT_DIR/udp/udp-custom-linux-amd64" \
+    "$SCRIPT_DIR/udp/udp-custom-linux-arm" \
+    "$SCRIPT_DIR/release/falconproxy" \
+    "$SCRIPT_DIR/release/falconproxyarm" \
+    "$SCRIPT_DIR/udp/udpgw"
+do
+    if [[ ! -f "$required" ]]; then
+        echo "Error: Missing bundle file: $required"
+        exit 1
+    fi
+done
+
+# Stage the bundle on the server so the menu never needs to fetch from GitHub
+rm -rf "$BUNDLE_INSTALL_DIR"
+mkdir -p "$BUNDLE_INSTALL_DIR"
+cp -r "$SCRIPT_DIR/panel"  "$BUNDLE_INSTALL_DIR/panel"
+cp -r "$SCRIPT_DIR/udp"    "$BUNDLE_INSTALL_DIR/udp"
+cp -r "$SCRIPT_DIR/release" "$BUNDLE_INSTALL_DIR/release"
+# Drop UPX packed originals from the bundle (unpacked binaries are used)
+rm -f "$BUNDLE_INSTALL_DIR"/udp/*.upxbackup
+
+# Install menu from the local copy
+cp "$SCRIPT_DIR/menu.sh" /usr/local/bin/menu
+chmod +x /usr/local/bin/menu
+# Point the menu at the staged bundle (replaces the offline bundle path)
+sed -i "s|^FF_BUNDLE_DIR=.*|FF_BUNDLE_DIR=\"$BUNDLE_INSTALL_DIR\"|" /usr/local/bin/menu
+
+echo "Applying TNS243-GLOBAL SSH configuration..."
+
+SSHD_CONFIG="/etc/ssh/sshd_config"
+BACKUP="/etc/ssh/sshd_config.backup.$(date +%F-%H%M%S)"
+
+# Backup current SSH config
+cp "$SSHD_CONFIG" "$BACKUP"
+
+# Apply TNS243-GLOBAL SSH config from the local copy
+cp "$SCRIPT_DIR/ssh" "$SSHD_CONFIG"
+chmod 600 "$SSHD_CONFIG"
+
+# Validate SSH config (silent)
+if ! sshd -t 2>/dev/null; then
+    echo "ERROR: SSH configuration is invalid!"
+    echo "Restoring previous configuration..."
+    cp "$BACKUP" "$SSHD_CONFIG"
+    exit 1
+fi
+
+echo "SSH configuration validated."
+
+# Restart SSH quietly and safely
+restart_ssh() {
+    if command -v systemctl >/dev/null 2>&1; then
+        systemctl restart sshd 2>/dev/null \
+        || systemctl restart ssh 2>/dev/null \
+        || return 1
+    elif command -v service >/dev/null 2>&1; then
+        service sshd restart 2>/dev/null \
+        || service ssh restart 2>/dev/null \
+        || return 1
+    elif command -v rc-service >/dev/null 2>&1; then
+        rc-service sshd restart 2>/dev/null \
+        || rc-service ssh restart 2>/dev/null \
+        || return 1
+    elif [ -x /etc/init.d/sshd ]; then
+        /etc/init.d/sshd restart >/dev/null 2>&1
+    elif [ -x /etc/init.d/ssh ]; then
+        /etc/init.d/ssh restart >/dev/null 2>&1
+    else
+        return 1
+    fi
+}
+
+if restart_ssh; then
+    echo "SSH service restarted."
+else
+    echo "WARNING: SSH restart not supported on this system."
+    echo "SSH config applied but service was not restarted automatically."
+fi
+
+# Run TNS243-GLOBAL setup
+bash /usr/local/bin/menu --install-setup
+
+# Clean up temporary clone (piped execution only)
+if [[ -n "$PIPED_CLONE_DIR" ]]; then
+    rm -rf "$PIPED_CLONE_DIR"
+fi
+
+echo "Installation complete!"
+echo "Type 'menu' to start."