99 lines
4.6 KiB
Bash
Executable File
99 lines
4.6 KiB
Bash
Executable File
#!/bin/bash
|
||
|
||
# 脚本名称: uninstall.sh (IP-Sentinel 一键卸载脚本 - 动态锚点版)
|
||
# 核心功能: 无痕清理守护进程、定时任务、运行目录及临时缓存
|
||
# ==========================================================
|
||
|
||
# ==========================================================
|
||
# 🛑 核心权限防线: 检查是否以 root 权限运行
|
||
# ==========================================================
|
||
if [ "$EUID" -ne 0 ]; then
|
||
echo -e "\033[31m❌ 权限被拒绝: 卸载 IP-Sentinel 需要最高系统权限。\033[0m"
|
||
echo -e "💡 请切换到 root 用户 (执行 su root 或 sudo -i) 后重新运行指令。"
|
||
exit 1
|
||
fi
|
||
|
||
INSTALL_DIR="/opt/ip_sentinel"
|
||
|
||
echo "========================================================"
|
||
echo " 🗑️ 准备卸载 IP-Sentinel (边缘节点 Edge Agent)"
|
||
|
||
# [核心: 动态读取并播报即将销毁的本地版本号]
|
||
CONFIG_FILE="${INSTALL_DIR}/config.conf"
|
||
if [ -f "$CONFIG_FILE" ]; then
|
||
CURRENT_VER=$(grep "^AGENT_VERSION=" "$CONFIG_FILE" | cut -d'"' -f2)
|
||
[ -n "$CURRENT_VER" ] && echo " 📍 目标版本: v${CURRENT_VER}"
|
||
fi
|
||
echo "========================================================"
|
||
|
||
# 1. 停止并删除 Systemd 服务 (适配新架构)
|
||
echo "[1/4] 正在停止并删除 Systemd 服务..."
|
||
if command -v systemctl >/dev/null 2>&1; then
|
||
echo "💡 检测到 Systemd 环境，正在抹除 Systemd 服务单元..."
|
||
# [防死锁与走火修复] 先发送 SIGKILL 瞬间抹杀常驻守护进程，防止卡死或触发遗言
|
||
systemctl kill --signal=SIGKILL ip-sentinel-agent-daemon.service >/dev/null 2>&1 || true
|
||
systemctl disable --now ip-sentinel-runner.service ip-sentinel-runner.timer \
|
||
ip-sentinel-updater.service ip-sentinel-updater.timer \
|
||
ip-sentinel-report.service ip-sentinel-report.timer \
|
||
ip-sentinel-agent-daemon.service >/dev/null 2>&1
|
||
rm -f /etc/systemd/system/ip-sentinel-runner.service
|
||
rm -f /etc/systemd/system/ip-sentinel-runner.timer
|
||
rm -f /etc/systemd/system/ip-sentinel-updater.service
|
||
rm -f /etc/systemd/system/ip-sentinel-updater.timer
|
||
rm -f /etc/systemd/system/ip-sentinel-report.service
|
||
rm -f /etc/systemd/system/ip-sentinel-report.timer
|
||
rm -f /etc/systemd/system/ip-sentinel-agent-daemon.service
|
||
systemctl daemon-reload
|
||
systemctl reset-failed
|
||
else
|
||
echo "💡 未检测到 Systemd，跳过此步骤..."
|
||
fi
|
||
|
||
# 2. 停止运行中的守护进程与主控模块 (兜底清理老版进程)
|
||
echo "[2/4] 正在终止后台守护进程与所有养护任务..."
|
||
pkill -9 -f "tg_daemon.sh" >/dev/null 2>&1
|
||
pkill -9 -f "agent_daemon.sh" >/dev/null 2>&1
|
||
pkill -9 -f "python3.*webhook.py" >/dev/null 2>&1
|
||
pkill -9 -f "webhook.py" >/dev/null 2>&1
|
||
pkill -9 -f "runner.sh" >/dev/null 2>&1
|
||
pkill -9 -f "updater.sh" >/dev/null 2>&1
|
||
pkill -9 -f "tg_report.sh" >/dev/null 2>&1
|
||
pkill -9 -f "mod_google.sh" >/dev/null 2>&1
|
||
pkill -9 -f "mod_trust.sh" >/dev/null 2>&1
|
||
pkill -9 -f "sentinel_scheduler.sh" >/dev/null 2>&1
|
||
|
||
# 3. 清除系统定时任务 (Cron)
|
||
echo "[3/4] 正在清理系统定时任务 (Cron)..."
|
||
# [终极安全防御] 直接使用管道流过滤并覆盖，不产生任何 /tmp 落地文件，杜绝劫持提权
|
||
crontab -l 2>/dev/null | grep -v "ip_sentinel" | crontab - >/dev/null 2>&1 || true
|
||
|
||
# ==========================================
|
||
# 🛑 [物理抹除] 彻底扫除 Alpine 系统的底层残留与双路径文件
|
||
# ==========================================
|
||
for CRON_FILE in "/var/spool/cron/crontabs/root" "/etc/crontabs/root"; do
|
||
if [ -f "$CRON_FILE" ]; then
|
||
grep -v "ip_sentinel" "$CRON_FILE" > "${CRON_FILE}.tmp" 2>/dev/null || true
|
||
cat "${CRON_FILE}.tmp" > "$CRON_FILE" 2>/dev/null || true
|
||
rm -f "${CRON_FILE}.tmp" 2>/dev/null
|
||
fi
|
||
done
|
||
# 清理 OpenRC 开机启动项
|
||
rm -f /etc/local.d/ip_sentinel.start 2>/dev/null
|
||
rm -f /etc/local.d/ip_sentinel_scheduler.start 2>/dev/null
|
||
|
||
# 清理极端环境写在 /etc/profile 里的兜底启动项
|
||
if grep -q "sentinel_scheduler.sh" /etc/profile 2>/dev/null; then
|
||
sed -i '/sentinel_scheduler\.sh/d' /etc/profile 2>/dev/null || true
|
||
fi
|
||
|
||
# 4. 删除所有文件、日志与临时缓存
|
||
echo "[4/4] 正在抹除核心程序、配置文件与系统痕迹..."
|
||
if [ -d "$INSTALL_DIR" ]; then
|
||
rm -rf "$INSTALL_DIR"
|
||
fi
|
||
|
||
echo "========================================================"
|
||
echo "✅ 卸载彻底完成！IP-Sentinel 已从您的系统中无痕移除。"
|
||
echo "💡 提示：如果安装时在防火墙放行了 Webhook 随机端口，请您按需手动关闭。"
|
||
echo "👋 感谢您的使用，期待未来再次为您守护资产！"
|
||
echo "========================================================" |