diff --git a/entrypoint.sh b/entrypoint.sh
new file mode 100644
index 0000000..b3e4199
--- /dev/null
+++ b/entrypoint.sh
@@ -0,0 +1,54 @@
+#!/bin/sh
+set -e
+
+WG_CONF="/etc/wireguard/wg0.conf"
+mkdir -p /etc/wireguard
+
+if [ ! -f "$WG_CONF" ]; then
+    echo "==> [MicroWARP] 未检测到配置，正在全自动初始化 Cloudflare WARP..."
+    
+    ARCH=$(uname -m)
+    case "$ARCH" in
+        x86_64) WGCF_ARCH="amd64" ;;
+        aarch64) WGCF_ARCH="arm64" ;;
+        *) echo "==> [ERROR] 不支持的架构: $ARCH"; exit 1 ;;
+    esac
+    
+    wget -qO wgcf "https://github.com/ViRb3/wgcf/releases/download/v2.2.22/wgcf_2.2.22_linux_${WGCF_ARCH}"
+    chmod +x wgcf
+    
+    echo "==> [MicroWARP] 正在向 CF 注册设备..."
+    ./wgcf register --accept-tos > /dev/null
+    
+    echo "==> [MicroWARP] 正在生成 WireGuard 配置文件..."
+    ./wgcf generate > /dev/null
+    
+    mv wgcf-profile.conf "$WG_CONF"
+    rm -f wgcf wgcf-account.toml
+    echo "==> [MicroWARP] 节点配置生成成功！"
+else
+    echo "==> [MicroWARP] 检测到已有持久化配置，跳过注册。"
+fi
+
+# ==========================================
+# 强力洗白与内核兼容性处理
+# ==========================================
+sed -i 's/^AllowedIPs.*/AllowedIPs = 0.0.0.0\/0/g' "$WG_CONF"
+sed -i '/Address.*:/d' "$WG_CONF" 
+sed -i '/^DNS.*/d' "$WG_CONF"
+sed -i '/src_valid_mark/d' /usr/bin/wg-quick
+
+# ==========================================
+# 拉起内核网卡
+# ==========================================
+echo "==> [MicroWARP] 正在启动 Linux 内核级 wg0 网卡..."
+wg-quick up wg0 > /dev/null 2>&1
+
+echo "==> [MicroWARP] 当前出口 IP 已成功变更为："
+curl -s https://1.1.1.1/cdn-cgi/trace | grep ip=
+
+# ==========================================
+# 启动 SOCKS5 代理服务
+# ==========================================
+echo "==>[MicroWARP] 🚀 MicroSOCKS 引擎已启动，正在监听 0.0.0.0:1080"
+exec microsocks -i 0.0.0.0 -p 1080