fix: 修复 WARP 隧道无法正常工作的问题
- 升级 wgcf 至 v2.2.30 - 移除错误的 sed 规则(仅删 DNS,保留 AllowedIPs 和 IPv6 Address) - 移除多余的 EXPOSE 1080 - IP 检测改为后台执行避免阻塞启动
This commit is contained in:
1 parent
6521ab545a
commit
1ce798ecb3
2 files changed
+10
-15
No files matched your search
+1
-4
@@ -16,15 +16,12 @@ FROM alpine:latest
|
||||
# 仅安装必要的内核级 WireGuard 和网络控制工具
|
||||
RUN apk add --no-cache wireguard-tools iptables iproute2 wget curl
|
||||
|
||||
# 把刚才编译好的二进制可执行文件“偷”过来
|
||||
# 打包microsocks
|
||||
COPY --from=builder /src/microsocks /usr/local/bin/microsocks
|
||||
|
||||
WORKDIR /app
|
||||
COPY entrypoint.sh .
|
||||
RUN chmod +x entrypoint.sh
|
||||
|
||||
# 暴露标准 SOCKS5 端口
|
||||
EXPOSE 1080
|
||||
|
||||
# 启动引擎
|
||||
CMD ["./entrypoint.sh"]
|
||||
+9
-11
@@ -9,25 +9,25 @@ mkdir -p /etc/wireguard
|
||||
# ==========================================
|
||||
if [ ! -f "$WG_CONF" ]; then
|
||||
echo "==> [MicroWARP] 未检测到配置,正在全自动初始化 Cloudflare WARP..."
|
||||
|
||||
|
||||
ARCH=$(uname -m)
|
||||
case "$ARCH" in
|
||||
x86_64) WGCF_ARCH="amd64" ;;
|
||||
aarch64) WGCF_ARCH="arm64" ;;
|
||||
*) echo "==> [ERROR] 不支持的架构: $ARCH"; exit 1 ;;
|
||||
esac
|
||||
|
||||
wget -qO wgcf "https://github.com/ViRb3/wgcf/releases/download/v2.2.22/wgcf_2.2.22_linux_${WGCF_ARCH}"
|
||||
|
||||
wget -qO wgcf "https://github.com/ViRb3/wgcf/releases/download/v2.2.30/wgcf_2.2.30_linux_${WGCF_ARCH}"
|
||||
chmod +x wgcf
|
||||
|
||||
|
||||
echo "==> [MicroWARP] 正在向 CF 注册设备..."
|
||||
./wgcf register --accept-tos > /dev/null
|
||||
|
||||
|
||||
echo "==> [MicroWARP] 正在生成 WireGuard 配置文件..."
|
||||
./wgcf generate > /dev/null
|
||||
|
||||
|
||||
mv wgcf-profile.conf "$WG_CONF"
|
||||
|
||||
|
||||
# 【核心安全】阅后即焚:删除注册工具和生成的账号明文文件
|
||||
rm -f wgcf wgcf-account.toml
|
||||
echo "==> [MicroWARP] 节点配置生成成功!"
|
||||
@@ -38,9 +38,7 @@ fi
|
||||
# ==========================================
|
||||
# 2. 强力洗白与内核兼容性处理 (魔改 wg0.conf)
|
||||
# ==========================================
|
||||
# 删除多余的内网 IP 路由和 DNS,让全局流量通过 wg0
|
||||
sed -i 's/^AllowedIPs.*/AllowedIPs = 0.0.0.0\/0/g' "$WG_CONF"
|
||||
sed -i '/Address.*:/d' "$WG_CONF"
|
||||
# 删 DNS 就足够了,删多了跑不了了
|
||||
sed -i '/^DNS.*/d' "$WG_CONF"
|
||||
|
||||
# 删除 Alpine 系统自带 wg-quick 中不兼容的路由标记
|
||||
@@ -67,7 +65,7 @@ wg-quick up wg0 > /dev/null 2>&1
|
||||
|
||||
echo "==> [MicroWARP] 当前出口 IP 已成功变更为:"
|
||||
# 获取最新的 CF 溯源 IP (加入 || true 防止网络波动导致脚本退出)
|
||||
curl -s https://1.1.1.1/cdn-cgi/trace | grep ip= || true
|
||||
(curl -s https://1.1.1.1/cdn-cgi/trace | grep ip= || true) &
|
||||
|
||||
# ==========================================
|
||||
# 4. 启动 C 语言 SOCKS5 代理服务 (带高级参数绑定)
|
||||
|
||||
Reference in new issue
Block a user