feat: add multi-distribution support for package management and system service managers in installation script

2026-09-05 23:56:55 +08:00 · 2026-05-29 13:29:09 +08:00
parent 09d1d6b02b
commit 320e454502
2 changed files with 167 additions and 132 deletions
@@ -11,67 +11,57 @@ Bilingual: [中文](#中文) | [English](#english)
 [![YouTube](https://img.shields.io/badge/视频教程-YouTube-red?style=flat-square&logo=youtube&logoColor=white)](https://www.youtube.com/watch?v=s-ATfXR8BpI)
 [![Email](https://img.shields.io/badge/Bug反馈-yaohunse7@gmail.com-red?style=flat-square&logo=gmail&logoColor=white)](mailto:yaohunse7@gmail.com)

+---
+
+**AimiliVPN** 是一个专为 Linux VPS 设计的智能 VPN 代理网关管理器。它能够自动采集 VPNGate 开放节点，进行多线程可用性测试与延迟过滤，利用 OpenVPN 隧道与策略路由（Policy Routing）实现出站网络，并在本地提供高性能的 HTTP/SOCKS5 代理网关服务，非常适合用作 3x-ui / Xray 的落地出站代理，解锁流媒体与锁区网站。

 ---

-**AimiliVPN** 是一个专为 Linux VPS（如 Ubuntu）设计的智能 VPN 代理网关管理器。它能够自动采集 VPNGate 开放节点，进行多线程可用性测试与延迟过滤，利用 OpenVPN 隧道与策略路由（Policy Routing）实现出站网络，并在本地提供高性能的 HTTP/SOCKS5 代理网关服务，适合用作 Xray 的落地出站代理。
+### 🚀 快速开始 (一键部署)

---
-
-### 🚀 快速开始
-
-在您的 **Ubuntu** VPS 机器上，复制并运行以下一行指令即可完成自动安装部署：
+只需一行命令，支持多种主流 Linux 发行版，自动识别并配置系统服务：

 ```bash
 bash <(curl -Ls https://raw.githubusercontent.com/baoweise-bot/aimili-vpngate/main/install.sh)
 ```

+> **支持的操作系统**：
+> - **Ubuntu / Debian** (Systemd)
+> - **Alpine Linux** (OpenRC)
+> - **CentOS / RHEL / Rocky Linux / AlmaLinux / Fedora** (Systemd)
+
 ---

-### 🛠️ 快捷命令行 (CLI)
+### 🛠️ 快捷命令行管理工具 `ml`

-安装成功后，系统会在全局注册 `ml` 快捷管理指令，直接运行 `ml` 可打开图形化交互终端，也可通过以下指令执行：
-* **`ml status`** 或 **`ml`**：查看当前运行状态（代理端口、活动 VPN 节点、直连延迟、网页后台登录地址等）。
-* **`ml start`**：启动 AimiliVPN 服务。
-* **`ml stop`**：停止 AimiliVPN 服务（并自动清理策略路由与 OpenVPN 进程）。
-* **`ml restart`**：重启服务。
-* **`ml logs`**：查看实时的 Systemd 服务运行日志。
-* **`ml web`**：切换网页绑定地址（127.0.0.1 仅本地，或 0.0.0.0 允许公网访问）与重置安全后缀。
-* **`ml port`**：修改网页管理控制台监听端口。
-* **`ml password`**：生成新的 12 位安全管理密码。
-* **`ml uninstall`**：完全卸载服务并清理相关环境。
+安装完成后，直接在终端输入 `ml`（或 `ml status`）即可打开交互式菜单，或直接使用以下子命令：

-#### 💡 首次安装与常见报错解决（小白必看）
+- **`ml`** 或 **`ml status`**：查看运行状态（代理端口、活动节点、延迟、网页登录后台等）。
+- **`ml start`** / **`ml stop`** / **`ml restart`**：启动/停止/重启服务。
+- **`ml logs`**：查看实时运行日志。
+- **`ml web`**：修改网页面板的绑定地址（如仅允许 127.0.0.1 本地或 0.0.0.0 公网访问）并随机重置安全后缀。
+- **`ml port`** / **`ml password`**：修改网页管理端口及重置管理密码。
+- **`ml update`**：一键检测并更新至远程最新源码。
+- **`ml uninstall`**：完全卸载 AimiliVPN 并清理环境。

-##### 1. 极简系统缺少依赖（Ubuntu 18-26 / Debian 首次安装）
-如果系统是全新纯净版，可能会因为缺少 `curl` 或 `ca-certificates` 导致一键安装脚本下载失败。请在安装前执行以下命令补充依赖：
+---
+
+### 💡 小白避坑指南（常见问题解决）
+
+#### 1. 极简系统缺少基础命令导致一键脚本报错
+如果您的 VPS 是纯净版系统，可能会缺少 `curl`。请根据系统类型先运行以下命令安装：
+- **Ubuntu/Debian**: `apt-get update && apt-get install -y curl ca-certificates`
+- **Alpine**: `apk add curl ca-certificates`
+- **CentOS/Rocky/Alma/Fedora**: `yum install -y curl ca-certificates`
+
+#### 2. Ubuntu/Debian 系统提示包管理器被占用 (Apt Lock)
+若安装时提示 `Could not get lock /var/lib/dpkg/lock-frontend` 等错误，可运行以下指令一键解锁后重新安装：
 ```bash
-sudo apt-get update && sudo apt-get install -y curl ca-certificates
-```
-
-##### 2. Debian 系统兼容运行方法
-本脚本一键包默认限制在 Ubuntu 系统运行。Debian 用户如需运行，可先下载并用 `sed` 临时将系统类型限制替换为 `"ubuntu"` 后再执行安装：
-```bash
-curl -Ls https://raw.githubusercontent.com/baoweise-bot/aimili-vpngate/main/install.sh -o install.sh
-sed -i 's/"${ID:-}"/"ubuntu"/g' install.sh
-sudo bash install.sh
-```
-
-##### 3. 包管理器被占用（Apt 锁冲突报错解决）
-若一键安装提示 `Could not get lock /var/lib/dpkg/lock-frontend` 等“无法获得锁”的报错，可运行以下命令解除占用并重新安装：
-```bash
-# 1. 停止自动更新服务并终止相关进程
 sudo systemctl stop unattended-upgrades 2>/dev/null
 sudo killall apt apt-get dpkg 2>/dev/null
-
-# 2. 清理残留锁文件
 sudo rm -f /var/lib/dpkg/lock* /var/lib/apt/lists/lock /var/cache/apt/archives/lock
-
-# 3. 修复受损包并重新更新源
-sudo dpkg --configure -a
-sudo apt-get update
+sudo dpkg --configure -a && sudo apt-get update
 ```
-执行完毕后，重新运行一键安装脚本即可。

 ---

@@ -101,81 +91,52 @@ sudo apt-get update

 ---

-**AimiliVPN** is an intelligent VPN proxy gateway manager designed specifically for Linux VPS (e.g. Ubuntu). It automatically collects open VPNGate nodes, conducts multi-threaded availability testing and latency filtering, establishes secure out-of-band routing via OpenVPN and policy routing to **prevent VPS lockouts**, and hosts a high-performance local SOCKS5/HTTP proxy gateway. It is highly optimized to serve as a residential/unlocked egress node for upstream proxies like 3x-ui / Xray.
-
-### ✨ Key Features
-
-1. ⚡ **Auto-Collection & Multi-Threaded Probing**:
-   * Periodically fetches candidate nodes from VPNGate.
-   * Performs concurrent ping latency and handshake tests to maintain a pool of high-quality nodes.
-2. 🔒 **Anti-Lockout Routing (Policy Routing)**:
-   * Directs traffic from the virtual adapter `tun0` to a customized routing table (Table 100) without altering the system's default gateway.
-   * Keeps SSH sessions and server administration panels unaffected by the active VPN.
-3. 🚫 **Fail-Safe Leak Protection**:
-   * Outbound socket connections inside the local proxy server are strictly bound to `tun0` via `SO_BINDTODEVICE`.
-   * If the VPN disconnects, proxy requests are instantly blocked with a `502 Bad Gateway` instead of falling back to the VPS physical IP address.
-4. 🖥️ **Modern Web UI Panel**:
-   * Sleek dark/light responsive console (default port `8787`).
-   * Provides real-time geolocation, ISP, ASN, latency, and IP-type (residential/datacenter) detection.
-   * Enables manual node selection, blacklist resets, proxy speed-testing, and logs query.
-   * Secured by a random secret path suffix (e.g., `/EJsW2EeBo9lY/`) and password authentication.
-5. 🛠️ **CLI Utility (ml)**:
-   * Command-line helper tool `ml` with a menu-driven interface.
-   * Provides quick statuses, starts/stops the daemon, resets passwords, and changes bind hosts.
+**AimiliVPN** is an intelligent VPN proxy gateway manager designed specifically for Linux VPS. It automatically collects open VPNGate nodes, conducts multi-threaded availability testing and latency filtering, establishes secure tunnels via OpenVPN and policy routing (to **prevent VPS lockout**), and hosts a high-performance local SOCKS5/HTTP proxy gateway. It is highly optimized to serve as a residential/unlocked egress node for upstream proxies like 3x-ui / Xray.

 ---

-### 🚀 Quick Start
+### 🚀 Quick Start (One-Click Deployment)

-To install and deploy AimiliVPN on your **Ubuntu** server, copy and paste the following command:
+Copy and paste the command below to deploy AimiliVPN. The script will automatically detect your OS, install dependencies, and configure the background service:

 ```bash
 bash <(curl -Ls https://raw.githubusercontent.com/baoweise-bot/aimili-vpngate/main/install.sh)
 ```

+> **Supported Operating Systems**:
+> - **Ubuntu / Debian** (Systemd)
+> - **Alpine Linux** (OpenRC)
+> - **CentOS / RHEL / Rocky Linux / AlmaLinux / Fedora** (Systemd)
+
 ---

-### 🛠️ CLI Helper Commands
+### 🛠️ CLI Helper Commands (`ml`)

 Once installed, use the global command `ml` to launch the interactive helper menu, or use the shortcuts below:
-* **`ml status`** or **`ml`**: Check running system status (active nodes, proxy ports, latency, URLs).
-* **`ml start`**: Start the gateway service.
-* **`ml stop`**: Stop the gateway service (and clean routing tables).
-* **`ml restart`**: Restart the service.
-* **`ml logs`**: View real-time Systemd output logs.
-* **`ml web`**: Toggle Web UI accessibility (127.0.0.1 or 0.0.0.0) and reset suffix paths.
-* **`ml port`**: Update the Web Console port.
-* **`ml password`**: Regenerate a secure 12-character administration password.
-* **`ml uninstall`**: Completely remove the service and repository files from your VPS.

-#### 💡 Troubleshooting & First-Time Installation Tips
+- **`ml`** or **`ml status`**: Check system running status (active nodes, proxy ports, latency, URLs).
+- **`ml start`** / **`ml stop`** / **`ml restart`**: Start/Stop/Restart the gateway service.
+- **`ml logs`**: View real-time service logs.
+- **`ml web`**: Toggle Web UI accessibility (127.0.0.1 or 0.0.0.0) and random-reset suffix paths.
+- **`ml port`** / **`ml password`**: Update Web Console port and admin credentials.
+- **`ml update`**: One-click check and update to the latest codebase.
+- **`ml uninstall`**: Completely remove the service and repository files from your VPS.

-##### 1. Missing Dependencies on Minimal OS (Ubuntu / Debian)
-If you are using a brand new minimal OS, the installation might fail due to missing `curl` or `ca-certificates`. Run the following command to pre-install dependencies:
+---
+
+### 💡 Troubleshooting & Pre-installation Guide
+
+#### 1. Missing `curl` on Brand New Minimal OS
+If the install command fails due to a missing `curl` utility, install it manually according to your OS:
+- **Ubuntu/Debian**: `apt-get update && apt-get install -y curl ca-certificates`
+- **Alpine**: `apk add curl ca-certificates`
+- **CentOS/Rocky/Alma/Fedora**: `yum install -y curl ca-certificates`
+
+#### 2. Package Manager Locked (`apt`/`dpkg` lock errors on Ubuntu/Debian)
+If you see `Could not get lock /var/lib/dpkg/lock-frontend` error, run the following commands to unlock and retry:
 ```bash
-sudo apt-get update && sudo apt-get install -y curl ca-certificates
-```
-
-##### 2. Bypass OS Restrictions for Debian
-The script is restricted to Ubuntu by default. For Debian systems, run the following commands to download, patch, and install:
-```bash
-curl -Ls https://raw.githubusercontent.com/baoweise-bot/aimili-vpngate/main/install.sh -o install.sh
-sed -i 's/"${ID:-}"/"ubuntu"/g' install.sh
-sudo bash install.sh
-```
-
-##### 3. Package Manager Locked (`apt`/`dpkg` Lock Errors)
-If you see `Could not get lock /var/lib/dpkg/lock-frontend` or similar busy errors, run these commands to unlock and retry:
-```bash
-# 1. Stop automatic upgrades & kill active processes
 sudo systemctl stop unattended-upgrades 2>/dev/null
 sudo killall apt apt-get dpkg 2>/dev/null
-
-# 2. Remove lock files
 sudo rm -f /var/lib/dpkg/lock* /var/lib/apt/lists/lock /var/cache/apt/archives/lock
-
-# 3. Repair package states & update
-sudo dpkg --configure -a
-sudo apt-get update
+sudo dpkg --configure -a && sudo apt-get update
 ```
-Once done, re-run the installation script.
@@ -1,6 +1,5 @@
 #!/usr/bin/env bash
 set -e
-export DEBIAN_FRONTEND=noninteractive

 RED='\033[0;31m'
 GREEN='\033[0;32m'
@@ -9,23 +8,40 @@ BLUE='\033[0;36m'
 PLAIN='\033[0m'

 # 1. Check root permissions
-if [[ "$(id -u)" != "0" ]]; then
+if [ "$(id -u)" != "0" ]; then
    echo -e "${RED}错误: 必须以 root 权限运行此脚本。请使用: sudo bash $0${PLAIN}"
    exit 1
 fi

-# 2. Check OS distribution (Ubuntu only)
+# 2. Check OS distribution and set package manager
+OS_TYPE=""
+PKG_MGR=""
 if [ -f /etc/os-release ]; then
    . /etc/os-release
-    if [[ "${ID:-}" != "ubuntu" ]]; then
-        echo -e "${RED}错误: 本系统不是 Ubuntu！目前 AimiliVPN 仅支持 Ubuntu 系统。${PLAIN}"
-        exit 1
-    fi
-else
-    echo -e "${RED}错误: 无法确定操作系统版本，缺少 /etc/os-release 文件。${PLAIN}"
-    exit 1
+    OS_TYPE=$ID
 fi

+case "$OS_TYPE" in
+    ubuntu|debian)
+        PKG_MGR="apt-get"
+        export DEBIAN_FRONTEND=noninteractive
+        ;;
+    alpine)
+        PKG_MGR="apk"
+        ;;
+    centos|rhel|rocky|almalinux|fedora)
+        if command -v dnf >/dev/null 2>&1; then
+            PKG_MGR="dnf"
+        else
+            PKG_MGR="yum"
+        fi
+        ;;
+    *)
+        echo -e "${RED}错误: 不支持的操作系统 ($OS_TYPE)！目前仅支持 Ubuntu/Debian/Alpine/CentOS/RHEL/Rocky/AlmaLinux/Fedora。${PLAIN}"
+        exit 1
+        ;;
+esac
+
 echo -e "${BLUE}==========================================================${PLAIN}"
 echo -e "${BLUE}        欢迎使用 AimiliVPN 一键源码部署与管理脚本${PLAIN}"
 echo -e "${BLUE}==========================================================${PLAIN}"
@@ -42,10 +58,27 @@ GITHUB_REPO="${2:-${DEFAULT_REPO}}"
 GITHUB_URL="https://github.com/${GITHUB_USER}/${GITHUB_REPO}.git"

 echo -e "\n${YELLOW}[1/4] 正在安装系统基础依赖...${PLAIN}"
-echo -e "  -> 正在运行 apt-get update 更新软件源清单..."
-apt-get update -q || true
-echo -e "  -> 正在运行 apt-get install 安装基础依赖包 (openvpn, curl, git, iptables, iproute2, psmisc, python3)..."
-apt-get install -y openvpn curl git ca-certificates iptables iproute2 psmisc python3
+if [ "$PKG_MGR" = "apt-get" ]; then
+    echo -e "  -> 正在运行 apt-get update 更新软件源清单..."
+    apt-get update -q || true
+    echo -e "  -> 正在运行 apt-get install 安装基础依赖包..."
+    apt-get install -y openvpn curl git ca-certificates iptables iproute2 psmisc python3
+elif [ "$PKG_MGR" = "apk" ]; then
+    echo -e "  -> 正在运行 apk update 更新软件源清单..."
+    apk update || true
+    echo -e "  -> 正在运行 apk add 安装基础依赖包..."
+    # bash is required for this script itself and some internal logic
+    apk add openvpn curl git ca-certificates iptables iproute2 psmisc python3 bash
+elif [ "$PKG_MGR" = "dnf" ] || [ "$PKG_MGR" = "yum" ]; then
+    echo -e "  -> 正在运行 $PKG_MGR 安装基础依赖包..."
+    if [ "$OS_TYPE" != "fedora" ]; then
+        echo -e "     -> 正在安装 EPEL 软件源 (以支持 openvpn)..."
+        $PKG_MGR install -y epel-release || true
+    fi
+    # Try installing packages. Note: iproute or iproute2
+    $PKG_MGR install -y openvpn curl git ca-certificates iptables iproute psmisc python3 || \
+    $PKG_MGR install -y openvpn curl git ca-certificates iptables iproute2 psmisc python3
+fi

 # 4. Clone or pull the repository
 INSTALL_DIR="/opt/aimilivpn"
@@ -84,10 +117,11 @@ else
    fi
 fi

-# 5. Configure Systemd Service (direct python3 run)
-echo -e "\n${YELLOW}[3/4] 正在配置 systemd 系统服务...${PLAIN}"
-echo -e "  -> 正在创建服务配置 /lib/systemd/system/aimilivpn.service ..."
-cat > /lib/systemd/system/aimilivpn.service <<EOF
+# 5. Configure Service
+echo -e "\n${YELLOW}[3/4] 正在配置系统服务...${PLAIN}"
+if command -v systemctl >/dev/null 2>&1; then
+    echo -e "  -> 检测到 systemd，正在创建服务配置 /lib/systemd/system/aimilivpn.service ..."
+    cat > /lib/systemd/system/aimilivpn.service <<EOF
 [Unit]
 Description=AimiliVPN OpenVPN Manager with HTTP/SOCKS5 Proxy
 After=network.target
@@ -103,10 +137,30 @@ EnvironmentFile=-/etc/default/aimilivpn
 [Install]
 WantedBy=multi-user.target
 EOF
+    systemctl daemon-reload
+    systemctl enable aimilivpn.service
+elif command -v rc-service >/dev/null 2>&1; then
+    echo -e "  -> 检测到 OpenRC，正在创建服务配置 /etc/init.d/aimilivpn ..."
+    cat > /etc/init.d/aimilivpn <<EOF
+#!/sbin/openrc-run

-echo -e "  -> 正在重新加载 systemd 系统服务列表并启用开机自启..."
-systemctl daemon-reload
-systemctl enable aimilivpn.service
+description="AimiliVPN OpenVPN Manager with HTTP/SOCKS5 Proxy"
+command="/usr/bin/python3"
+command_args="${INSTALL_DIR}/vpngate_manager.py"
+command_background="yes"
+directory="${INSTALL_DIR}"
+pidfile="/run/aimilivpn.pid"
+
+depend() {
+    need net
+    after firewall
+}
+EOF
+    chmod +x /etc/init.d/aimilivpn
+    rc-update add aimilivpn default
+else
+    echo -e "${YELLOW}警告: 未能检测到 systemd 或 OpenRC，请手动管理服务。${PLAIN}"
+fi

 # 6. Configure global command shortcut "ml"
 echo -e "\n${YELLOW}[4/4] 正在创建全局命令快捷接口 'ml'...${PLAIN}"
@@ -120,6 +174,7 @@ import subprocess
 import time
 import tty
 import termios
+import shutil

 INSTALL_DIR = "/opt/aimilivpn"
 LOG_FILE = "/opt/aimilivpn/vpngate_data/vpngate.log"
@@ -379,21 +434,29 @@ def print_status():
    print_line(f"  export https_proxy=socks5://127.0.0.1:7928")
    print_line("=======================================================")

+def run_service_cmd(cmd):
+    if shutil.which("systemctl"):
+        subprocess.run(["systemctl", cmd, "aimilivpn.service"])
+    elif shutil.which("rc-service"):
+        subprocess.run(["rc-service", "aimilivpn", cmd])
+    else:
+        print("未检测到支持的服务管理器 (systemd/OpenRC)")
+
 def start_service():
    print("正在启动 AimiliVPN 服务...", flush=True)
-    subprocess.run(["systemctl", "start", "aimilivpn.service"])
+    run_service_cmd("start")
    print("已发送启动指令。")
    time.sleep(1)

 def stop_service():
    print("正在停止 AimiliVPN 服务...", flush=True)
-    subprocess.run(["systemctl", "stop", "aimilivpn.service"])
+    run_service_cmd("stop")
    print("已发送停止指令。")
    time.sleep(1)

 def restart_service():
    print("正在重启 AimiliVPN 服务...", flush=True)
-    subprocess.run(["systemctl", "restart", "aimilivpn.service"])
+    run_service_cmd("restart")
    print("已发送重启指令。")
    time.sleep(1)

@@ -469,12 +532,19 @@ def uninstall_service():
    confirm = input("确定要完全卸载 AimiliVPN 吗？(y/N): ")
    if confirm.lower() == 'y':
        print("正在完全卸载 AimiliVPN...", flush=True)
-        subprocess.run(["systemctl", "stop", "aimilivpn.service"])
-        subprocess.run(["systemctl", "disable", "aimilivpn.service"])
-        try:
-            os.unlink("/lib/systemd/system/aimilivpn.service")
-        except Exception:
-            pass
+        stop_service()
+        if shutil.which("systemctl"):
+            subprocess.run(["systemctl", "disable", "aimilivpn.service"])
+            try:
+                os.unlink("/lib/systemd/system/aimilivpn.service")
+            except Exception:
+                pass
+        elif shutil.which("rc-service"):
+            subprocess.run(["rc-update", "del", "aimilivpn"])
+            try:
+                os.unlink("/etc/init.d/aimilivpn")
+            except Exception:
+                pass
        try:
            os.unlink("/usr/bin/ml")
        except Exception:
@@ -490,7 +560,7 @@ def ask_restart():
    ans = input("配置已保存。是否立即重启服务生效？(Y/n): ").strip().lower()
    if ans in ('', 'y', 'yes'):
        print("正在重启 AimiliVPN 服务...", flush=True)
-        subprocess.run(["systemctl", "restart", "aimilivpn.service"])
+        restart_service()
        print("服务已重启。")
        time.sleep(1.5)

@@ -905,7 +975,11 @@ fi

 # 8. Start service
 echo -e "\n正在启动 AimiliVPN 服务并初始化网络..."
-systemctl restart aimilivpn.service || true
+if command -v systemctl >/dev/null 2>&1; then
+    systemctl restart aimilivpn.service || true
+elif command -v rc-service >/dev/null 2>&1; then
+    rc-service aimilivpn restart || true
+fi

 # Wait and poll for node loading and active connection
 echo -e "\n正在等待 AimiliVPN 首次获取节点并建立加密通道 (此过程可能需要 5-30 秒)..."