feat(arch): 完成 Master 端安装逻辑解耦。复用底层环境模块，引入 build_master 编排器与 master_setup 业务流，至此全系统部署逻辑彻底实现高内聚低耦合

2026-09-05 15:39:16 +08:00 · 2026-06-03 01:29:38 +00:00
parent 32ce648f6c
commit a7556692a5
3 changed files with 380 additions and 417 deletions
@@ -0,0 +1,40 @@
+#!/bin/bash
+# ==========================================================
+# 模块名称: build_master.sh (v4.3.0 Orchestrator)
+# 核心功能: Master 安装业务总指挥
+# ==========================================================
+
+MODULES=(
+    "env_setup.sh"
+    "master_setup.sh"
+)
+
+echo "⏳ 正在装载中枢底层设施依赖..."
+
+for mod in "${MODULES[@]}"; do
+    curl -fsSL --connect-timeout 10 --retry 3 "${REPO_RAW_URL}/install/${mod}" -o "${SECURE_TMP}/${mod}"
+    if [ ! -s "${SECURE_TMP}/${mod}" ]; then
+        echo -e "\033[31m❌ 致命错误：中枢依赖模块 [${mod}] 装载失败！\033[0m"
+        exit 1
+    fi
+    source "${SECURE_TMP}/${mod}"
+done
+
+echo -e "\033[32m✅ 中枢模块装载完毕，正在进入部署流程...\033[0m"
+
+# --- 核心业务编排流 ---
+
+# [复用模块: env_setup.sh]
+do_master_env_precheck   # 预检
+do_fetch_master_version  # 抓取版本
+do_master_handle_menu    # OTA 拦截与菜单选择
+do_install_deps          # 安装 sqlite3 等依赖
+
+# 如果选择卸载，模块内部会 exit
+
+# [专属模块: master_setup.sh]
+do_master_clean_env      # 验证环境与保护 DB
+do_master_config         # 交互获取 Token 并生成 conf
+do_master_init_db        # 初始化 SQLite 表结构
+do_master_deploy_core    # 覆写内核并注入守护进程
+do_master_summary        # 打印状态汇报与回执
@@ -0,0 +1,328 @@
+#!/bin/bash
+# ==========================================================
+# 模块名称: master_setup.sh
+# 核心功能: Master 环境清洗、令牌交互、SQLite 建库、守护进程注入与结果呈现
+# ==========================================================
+
+# ----------------------------------------------------------
+# [时序 M.1] 解析版本锚点 (复用/补充)
+# ----------------------------------------------------------
+do_fetch_master_version() {
+    TARGET_VERSION=$( (curl -fsSL --connect-timeout 5 --retry 2 "${REPO_RAW_URL}/version.txt" || curl -4 -fsSL --connect-timeout 5 --retry 2 "${REPO_RAW_URL}/version.txt") 2>/dev/null | grep "^MASTER_VERSION=" | cut -d'=' -f2 | tr -d '[:space:]')
+    TARGET_VERSION=${TARGET_VERSION:-"4.0.7"}
+    
+    MASTER_DIR="/opt/ip_sentinel_master"
+    DB_FILE="${MASTER_DIR}/sentinel.db"
+    
+    echo "========================================================"
+    echo "      🧠 欢迎使用 IP-Sentinel Master (控制中枢) v${TARGET_VERSION}"
+    echo "========================================================"
+}
+
+# ----------------------------------------------------------
+# [时序 M.2] 拦截交互菜单 / OTA 静默重载判定
+# ----------------------------------------------------------
+do_master_handle_menu() {
+    if [ "$SILENT_MASTER_OTA" == "true" ]; then
+        echo -e "\n⏳ [OTA] 中枢重构指令已确认，正在剥离控制台交互..."
+        ACTION_CHOICE=1
+        UPGRADE_MODE="true"
+        KEEP_DB="true"
+        
+        if [ -f "${MASTER_DIR}/master.conf" ]; then
+            source "${MASTER_DIR}/master.conf"
+            
+            if grep -q "^MASTER_VERSION=" "${MASTER_DIR}/master.conf"; then
+                sed -i "s/^MASTER_VERSION=.*/MASTER_VERSION=\"$TARGET_VERSION\"/" "${MASTER_DIR}/master.conf"
+            else
+                echo "MASTER_VERSION=\"$TARGET_VERSION\"" >> "${MASTER_DIR}/master.conf"
+            fi
+        fi
+        echo -e "\033[32m✅ 已激活 [中枢静默重构模式]，即将无损覆写内核...\033[0m"
+    else
+        echo -e "\n请选择操作:"
+        echo "  1) 🚀 部署 Master 控制中枢"
+        echo "  2) 🗑️ 一键卸载 Master 中枢"
+        read -p "请输入选择 [1-2] (默认1): " ACTION_CHOICE
+
+        ACTION_CHOICE=${ACTION_CHOICE:-1}
+
+        if [ "$ACTION_CHOICE" == "2" ]; then
+            echo -e "\n⏳ 正在拉取卸载程序..."
+            curl -fsSL --connect-timeout 10 --retry 3 "${REPO_RAW_URL}/master/uninstall_master.sh" -o "${SECURE_TMP}/uninstall_master.sh"
+            chmod +x "${SECURE_TMP}/uninstall_master.sh"
+            bash "${SECURE_TMP}/uninstall_master.sh"
+            rm -f "/tmp/uninstall_master.sh"
+            exit 0
+        fi
+
+        # [态势传承] 平滑接管探查并保护库文件
+        UPGRADE_MODE="false"
+        KEEP_DB="true"
+
+        if [ "$ACTION_CHOICE" == "1" ] && [ -f "${MASTER_DIR}/master.conf" ]; then
+            echo -e "\n\033[33m💡 司令部雷达提示：检测到本机已部署过 Master 中枢。\033[0m"
+            read -p "👉 是否按原配置直接进行平滑升级？(y/n, 默认y): " UPGRADE_CHOICE
+            if [[ -z "$UPGRADE_CHOICE" || "$UPGRADE_CHOICE" =~ ^[Yy]$ ]]; then
+                UPGRADE_MODE="true"
+                read -p "👉 是否保留历史节点数据库 (SQLite)？(y/n, 默认y): " DB_CHOICE
+                if [[ "$DB_CHOICE" =~ ^[Nn]$ ]]; then
+                    KEEP_DB="false"
+                fi
+                
+                source "${MASTER_DIR}/master.conf"
+                
+                if grep -q "^MASTER_VERSION=" "${MASTER_DIR}/master.conf"; then
+                    sed -i "s/^MASTER_VERSION=.*/MASTER_VERSION=\"$TARGET_VERSION\"/" "${MASTER_DIR}/master.conf"
+                else
+                    echo "MASTER_VERSION=\"$TARGET_VERSION\"" >> "${MASTER_DIR}/master.conf"
+                fi
+                
+                echo -e "\033[32m✅ 已激活 [平滑升级模式]，版本已锚定为 v${TARGET_VERSION}...\033[0m"
+            else
+                echo -e "\033[33m🔄 您选择了重新配置，旧的中枢数据将被彻底抹除。\033[0m"
+            fi
+        fi
+    fi
+}
+
+# ----------------------------------------------------------
+# [时序 M.3] 环境清洗
+# ----------------------------------------------------------
+do_master_clean_env() {
+    echo -e "\n⏳ 正在验证本地环境与数据..."
+
+    if [ "$UPGRADE_MODE" == "true" ]; then
+        if [ "$KEEP_DB" == "false" ]; then
+            rm -f "$DB_FILE" 2>/dev/null
+            echo -e "🗑️ 历史节点数据库已按指令清空。"
+        else
+            echo -e "📦 历史节点数据库 (SQLite) 已绝密保留。"
+        fi
+    else
+        rm -rf "$MASTER_DIR" 2>/dev/null
+    fi
+    mkdir -p "$MASTER_DIR"
+}
+
+# ----------------------------------------------------------
+# [时序 M.4] 配置总线与交互
+# ----------------------------------------------------------
+do_master_config() {
+    if [ "$UPGRADE_MODE" == "false" ]; then
+        echo -e "\n[2/4] 配置控制中枢机器人:"
+        read -p "请输入 Telegram Bot Token: " TG_TOKEN
+        
+        echo -e "\n请选择您的部署环境身份:"
+        echo "  1) 🛡️ 私有独立中枢 (默认推荐，保留完整 OTA 遥控权限)"
+        echo "  2) ☁️ 官方公共网关 (面向大众服务，将强制物理隐藏全局 OTA 按钮防滥用)"
+        read -p "请输入选择 [1-2] (默认1): " GATEWAY_TYPE
+        GATEWAY_TYPE=${GATEWAY_TYPE:-1}
+        
+        IS_OFFICIAL_GATEWAY="false"
+        ENABLE_MASTER_OTA="false"
+        if [ "$GATEWAY_TYPE" == "2" ]; then
+            IS_OFFICIAL_GATEWAY="true"
+            echo -e "\033[33m⚠️ 已开启官方公共网关模式，全舰队与司令部的 OTA 将被强制屏蔽。\033[0m"
+        else
+            echo -e "\n[2.1/4] 司令部自我进化授权"
+            echo -e "💡 开启后，您可以在 TG 菜单一键将中枢核心系统热更新至最新版本。"
+            read -p "是否允许司令部接收 OTA 重构指令？(y/n, 默认y): " M_OTA_CHOICE
+            if [[ "$M_OTA_CHOICE" =~ ^[Nn]$ ]]; then
+                ENABLE_MASTER_OTA="false"
+                echo -e "🛡️ \033[33m已关闭司令部 OTA 权限，中枢内核未来仅支持 SSH 升级。\033[0m"
+            else
+                ENABLE_MASTER_OTA="true"
+                echo -e "✅ \033[32m已开启司令部 OTA 权限，金蝉脱壳引信已挂载。\033[0m"
+            fi
+        fi
+
+        # [中枢身份生成] 提取宿主特征生成全局唯一标识
+        MASTER_IP=$( (curl -4 -s -m 3 api.ip.sb/ip || curl -4 -s -m 3 ifconfig.me) 2>/dev/null | tr -d '[:space:]' )
+        MASTER_HASH=$(echo "${MASTER_IP:-127.0.0.1}" | md5sum | cut -c 1-4 | tr 'a-z' 'A-Z')
+        MASTER_NODE="$(hostname | tr -cd 'a-zA-Z0-9' | cut -c 1-10)-${MASTER_HASH}"
+        
+        echo -e "\n[2.2/4] 司令部展示别名设定 (用于面板区分多台 VPS)"
+        echo -e "💡 系统底层的不可变主键为: \033[33m${MASTER_NODE}\033[0m"
+        read -p "请输入中枢展示别名 (如'美西主控机', 回车使用默认): " CUSTOM_MASTER_ALIAS
+
+        if [ -n "$CUSTOM_MASTER_ALIAS" ]; then
+            MASTER_NODE_NAME=$(echo "$CUSTOM_MASTER_ALIAS" | tr -d '"'\''\`\$\|&;<>\n\r' | cut -c 1-20)
+            [ -z "$MASTER_NODE_NAME" ] && MASTER_NODE_NAME="$MASTER_NODE"
+        else
+            MASTER_NODE_NAME="$MASTER_NODE"
+        fi
+        echo -e "✅ 已锁定司令部展示别名: \033[32m$MASTER_NODE_NAME\033[0m"
+
+        cat > "${MASTER_DIR}/master.conf" << EOF
+# IP-Sentinel Master 本地固化配置 (v${TARGET_VERSION})
+MASTER_VERSION="$TARGET_VERSION"
+MASTER_NODE_NAME="$MASTER_NODE_NAME"
+TG_TOKEN="$TG_TOKEN"
+DB_FILE="$DB_FILE"
+MASTER_DIR="$MASTER_DIR"
+IS_OFFICIAL_GATEWAY="$IS_OFFICIAL_GATEWAY"
+ENABLE_MASTER_OTA="$ENABLE_MASTER_OTA"
+EOF
+    fi
+
+    if [ "$UPGRADE_MODE" == "true" ]; then
+        if ! grep -q "^IS_OFFICIAL_GATEWAY=" "${MASTER_DIR}/master.conf"; then
+            echo "IS_OFFICIAL_GATEWAY=\"false\"" >> "${MASTER_DIR}/master.conf"
+        fi
+        if ! grep -q "^ENABLE_MASTER_OTA=" "${MASTER_DIR}/master.conf"; then
+            echo "ENABLE_MASTER_OTA=\"false\"" >> "${MASTER_DIR}/master.conf"
+        fi
+        # [热修复] 为老版本司令部平滑补齐中枢标识
+        if ! grep -q "^MASTER_NODE_NAME=" "${MASTER_DIR}/master.conf"; then
+            MASTER_IP=$( (curl -4 -s -m 3 api.ip.sb/ip || curl -4 -s -m 3 ifconfig.me) 2>/dev/null | tr -d '[:space:]' )
+            MASTER_HASH=$(echo "${MASTER_IP:-127.0.0.1}" | md5sum | cut -c 1-4 | tr 'a-z' 'A-Z')
+            MASTER_NODE_NAME="$(hostname | tr -cd 'a-zA-Z0-9' | cut -c 1-10)-${MASTER_HASH}"
+            echo "MASTER_NODE_NAME=\"$MASTER_NODE_NAME\"" >> "${MASTER_DIR}/master.conf"
+        fi
+    fi
+}
+
+# ----------------------------------------------------------
+# [时序 M.5] 初始化 SQLite
+# ----------------------------------------------------------
+do_master_init_db() {
+    echo -e "\n[3/4] 正在初始化 SQLite 数据库表结构..."
+    sqlite3 "$DB_FILE" <<EOF
+CREATE TABLE IF NOT EXISTS nodes (
+    chat_id TEXT,
+    node_name TEXT,
+    agent_ip TEXT,
+    agent_port TEXT,
+    last_seen DATETIME DEFAULT CURRENT_TIMESTAMP,
+    region TEXT DEFAULT 'UNKNOWN',
+    node_alias TEXT,
+    enable_google TEXT DEFAULT 'true',
+    enable_trust TEXT DEFAULT 'true',
+    enable_ota TEXT DEFAULT 'false',
+    PRIMARY KEY(chat_id, node_name)
+);
+
+CREATE TABLE IF NOT EXISTS ip_trend_log (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_name TEXT,
+    check_time DATETIME DEFAULT CURRENT_TIMESTAMP,
+    scam_score INTEGER,
+    goog_status TEXT,
+    nf_status TEXT,
+    gpt_status TEXT
+);
+EOF
+    echo "✅ 数据库创建成功: $DB_FILE"
+
+    chmod 600 "${MASTER_DIR}/master.conf"
+    chmod 600 "$DB_FILE"
+}
+
+# ----------------------------------------------------------
+# [时序 M.6] 防变砖双缓冲下载与守护进程注入
+# ----------------------------------------------------------
+do_master_deploy_core() {
+    echo -e "\n[4/4] 正在拉取新版司令部核心引擎..."
+
+    TMP_MASTER="${SECURE_TMP}/tg_master.sh"
+    curl -fsSL --connect-timeout 10 --retry 3 "${REPO_RAW_URL}/master/tg_master.sh" -o "$TMP_MASTER"
+
+    if [ ! -s "$TMP_MASTER" ]; then
+        echo -e "\033[31m❌ 致命错误：中枢核心代码拉取失败！网络阻断或 GitHub Raw 异常。\033[0m"
+        echo "🛡️ 防砖机制触发：已中止覆盖，旧版司令部仍在安全运行中。"
+        rm -f "$TMP_MASTER"
+        exit 1
+    fi
+
+    echo "⏳ 新引擎校验通过，正在抹杀旧版守护进程..."
+    if is_systemd; then
+        systemctl kill --signal=SIGKILL ip-sentinel-master.service >/dev/null 2>&1 || true
+        systemctl stop ip-sentinel-master.service >/dev/null 2>&1 || true
+    fi
+    pkill -9 -f "tg_master.sh" >/dev/null 2>&1 || true
+
+    mv "$TMP_MASTER" "${MASTER_DIR}/tg_master.sh"
+    chmod +x "${MASTER_DIR}/tg_master.sh"
+
+    if is_systemd; then
+        echo "💡 检测到 Systemd 环境，正在部署原生守护服务..."
+        
+        cat > /etc/systemd/system/ip-sentinel-master.service << EOF
+[Unit]
+Description=IP-Sentinel Master Command Center Service
+After=network.target
+
+[Service]
+Environment="PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
+SyslogIdentifier=ip-sentinel
+Type=simple
+ExecStart=/bin/bash ${MASTER_DIR}/tg_master.sh
+Restart=always
+RestartSec=5
+User=root
+WorkingDirectory=${MASTER_DIR}
+CPUSchedulingPolicy=idle
+IOSchedulingClass=idle
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+        systemctl daemon-reload
+        systemctl enable --now ip-sentinel-master.service
+        systemctl restart ip-sentinel-master.service
+        
+        crontab -l 2>/dev/null | grep -v "tg_master.sh" | crontab - >/dev/null 2>&1 || true
+    else
+        echo "💡 未检测到 Systemd，回退到 Cron 看门狗调度模式..."
+        crontab -l 2>/dev/null | grep -v "tg_master.sh" > "${SECURE_TMP}/cron_master" || true
+        echo "* * * * * pgrep -f tg_master.sh >/dev/null || nohup bash ${MASTER_DIR}/tg_master.sh >/dev/null 2>&1 &" >> "${SECURE_TMP}/cron_master"
+        [ -f "${SECURE_TMP}/cron_master" ] && crontab "${SECURE_TMP}/cron_master" 2>/dev/null
+        
+        pgrep -f tg_master.sh >/dev/null || { nohup bash "${MASTER_DIR}/tg_master.sh" >/dev/null 2>&1 & disown 2>/dev/null; }
+    fi
+}
+
+# ----------------------------------------------------------
+# [时序 M.7] 结束横幅与回执
+# ----------------------------------------------------------
+do_master_summary() {
+    echo "========================================================"
+    if [ "$UPGRADE_MODE" == "true" ]; then
+        echo "🎉 Master 控制中枢平滑热更新完成！"
+        echo "🤖 新版中枢引擎已接管数据库，继续等待边缘节点汇报。"
+        
+        # 幽灵态静默 OTA 完毕后执行回叫汇报
+        if [ "$SILENT_MASTER_OTA" == "true" ] && [ -n "$OTA_CHAT_ID" ] && [ -n "$TG_TOKEN" ]; then
+            echo -e "\n📡 正在向指挥官发送司令部重构捷报..."
+            curl -s -X POST "https://api.telegram.org/bot${TG_TOKEN}/sendMessage" \
+                -d "chat_id=${OTA_CHAT_ID}" \
+                -d "parse_mode=Markdown" \
+                -d "text=✨ *司令部中枢热重载完成！*
+🚀 当前内核已跃升至：\`v${TARGET_VERSION}\`
+🤖 新版金蝉脱壳引擎已接管阵地，全舰队指控链路恢复正常。" > /dev/null
+        fi
+    else
+        echo "🎉 Master 控制中枢部署完成！"
+        echo "🤖 机器人现已开始全局接客，等待边缘节点注册。"
+    fi
+    echo "========================================================"
+
+    if [ "$UPGRADE_MODE" == "false" ]; then
+        echo -e "\n📡 正在向开源社区汇报装机量 (完全匿名，不收集IP)..."
+        MASTER_COUNT=$(curl -s -m 3 "https://ip-sentinel-count.samanthaestime296.workers.dev/ping/master" || echo "")
+
+        if [ -n "$MASTER_COUNT" ] && [[ "$MASTER_COUNT" =~ ^[0-9]+$ ]]; then
+            echo -e "\033[32m✅ 感谢您成为全球第 ${MASTER_COUNT} 名 IP-Sentinel 中枢管理者！\033[0m"
+        else
+            echo -e "\033[32m✅ 感谢您部署 IP-Sentinel 控制中枢！\033[0m"
+        fi
+    fi
+
+    echo -e "\n========================================================"
+    echo -e "⭐ \033[33m开源不易，如果 IP-Sentinel 极大简化了您的多节点管理，请赐予我们一枚星标！\033[0m"
+    echo -e "💡 \033[32m您的每一颗 Star 都是我们持续迭代架构、开发 Web 视窗化控制台的动力源泉。\033[0m"
+    echo -e "👉 \033[36m\033[4m\033]8;;https://github.com/hotyue/IP-Sentinel\033\\点击此处直达 GitHub 仓库点亮 Star 🌟\033[0m\033]8;;\033\\"
+    echo -e "========================================================\n"
+}