400 lines
22 KiB
Bash
400 lines
22 KiB
Bash
#!/bin/bash -e
|
|
|
|
### Core Settings ###
|
|
# Enable compiler optimizations at O2 level for enhanced performance and efficiency
|
|
sed -i 's/Os/O2/g' include/target.mk
|
|
|
|
# Rockchip - rkbin & u-boot
|
|
rm -rf package/boot/rkbin package/boot/uboot-rockchip package/boot/arm-trusted-firmware-rockchip
|
|
git clone -b openwrt-24.10 https://zhao:$git_password@$gitea/zhao/uboot-rockchip package/boot/uboot-rockchip
|
|
git clone -b openwrt-24.10 https://zhao:$git_password@$gitea/zhao/arm-trusted-firmware-rockchip package/boot/arm-trusted-firmware-rockchip
|
|
|
|
# Generic Patch
|
|
curl -s $mirror/openwrt/patch/generic-24.10/0001-kernel-update-Config-kernel.in-for-Linux-6.12-support.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/generic-24.10/0001-tools-add-upx-tools.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/generic-24.10/0002-rootfs-add-upx-compression-support.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/generic-24.10/0003-rootfs-add-r-w-permissions-for-UCI-configuration-fil.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/generic-24.10/0004-rootfs-Add-support-for-local-kmod-installation-sourc.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/generic-24.10/0013-kernel-add-olddefconfig-before-compilemodules.patch | patch -p1
|
|
|
|
# Dwarves 1.25
|
|
rm -rf tools/dwarves
|
|
git clone https://$github/sbwml/tools_dwarves tools/dwarves
|
|
|
|
# X86 - disable mitigations
|
|
sed -i 's/noinitrd/noinitrd mitigations=off/g' target/linux/x86/image/grub-efi.cfg
|
|
|
|
# Default LAN IP
|
|
sed -i "s/192.168.1.1/10.0.0.1/g" package/base-files/files/bin/config_generate
|
|
|
|
# Default Hostname
|
|
sed -i 's/OpenWrt/ZeroWrt/' package/base-files/files/bin/config_generate
|
|
|
|
# Default Password
|
|
default_password=$(openssl passwd -5 password)
|
|
sed -i "s|^root:[^:]*:|root:${default_password}:|" package/base-files/files/etc/shadow
|
|
|
|
# Use nginx instead of uhttpd
|
|
sed -i 's/+uhttpd /+luci-nginx /g' feeds/luci/collections/luci/Makefile
|
|
sed -i 's/+uhttpd-mod-ubus //' feeds/luci/collections/luci/Makefile
|
|
sed -i 's/+uhttpd /+luci-nginx /g' feeds/luci/collections/luci-light/Makefile
|
|
sed -i "s/+luci /+luci-nginx /g" feeds/luci/collections/luci-ssl-openssl/Makefile
|
|
sed -i "s/+luci /+luci-nginx /g" feeds/luci/collections/luci-ssl/Makefile
|
|
sed -i 's/+uhttpd +uhttpd-mod-ubus /+luci-nginx /g' feeds/packages/net/wg-installer/Makefile
|
|
sed -i '/uhttpd-mod-ubus/d' feeds/luci/collections/luci-light/Makefile
|
|
sed -i 's/+luci-nginx \\$/+luci-nginx/' feeds/luci/collections/luci-light/Makefile
|
|
|
|
# Use specific optimizations
|
|
if [ "$arch" = "x86_64" ]; then
|
|
sed -i 's/O2/O2 -march=x86-64-v2/g' include/target.mk
|
|
sed -i 's,no-mips16 no-lto,no-mips16,g' feeds/packages/libs/libsodium/Makefile
|
|
echo '#!/bin/sh
|
|
# Put your custom commands here that should be executed once
|
|
# the system init finished. By default this file does nothing.
|
|
|
|
if ! grep "Default string" /tmp/sysinfo/model > /dev/null; then
|
|
echo should be fine
|
|
else
|
|
echo "Generic PC" > /tmp/sysinfo/model
|
|
fi
|
|
|
|
status=$(cat /sys/devices/system/cpu/intel_pstate/status)
|
|
|
|
if [ "$status" = "passive" ]; then
|
|
echo "active" | tee /sys/devices/system/cpu/intel_pstate/status
|
|
fi
|
|
|
|
exit 0
|
|
'> ./package/base-files/files/etc/rc.local
|
|
elif [ "$arch" = "rockchip" ]; then
|
|
sed -i 's,-mcpu=generic,-march=armv8-a+crc+crypto,g' include/target.mk
|
|
sed -i 's,kmod-r8168,kmod-r8169,g' target/linux/rockchip/image/armv8.mk
|
|
fi
|
|
|
|
# Libubox
|
|
sed -i '/TARGET_CFLAGS/ s/$/ -Os/' package/libs/libubox/Makefile
|
|
|
|
# Fstools
|
|
rm -rf package/system/fstools
|
|
git clone https://$github/sbwml/package_system_fstools -b openwrt-24.10 package/system/fstools
|
|
|
|
# Util-linux
|
|
rm -rf package/utils/util-linux
|
|
git clone https://$gitea/zhao/package_utils_util-linux -b openwrt-24.10 package/utils/util-linux
|
|
|
|
# Shortcut Forwarding Engine
|
|
git clone https://$gitea/zhao/shortcut-fe package/new/shortcut-fe
|
|
|
|
### Patch FireWall 4 ###
|
|
# firewall4
|
|
sed -i 's|$(PROJECT_GIT)/project|https://github.com/openwrt|g' package/network/config/firewall4/Makefile
|
|
mkdir -p package/network/config/firewall4/patches
|
|
# fix ct status dnat
|
|
curl -s $mirror/openwrt/patch/firewall4/firewall4_patches/990-unconditionally-allow-ct-status-dnat.patch > package/network/config/firewall4/patches/990-unconditionally-allow-ct-status-dnat.patch
|
|
# fullcone
|
|
curl -s $mirror/openwrt/patch/firewall4/firewall4_patches/999-01-firewall4-add-fullcone-support.patch > package/network/config/firewall4/patches/999-01-firewall4-add-fullcone-support.patch
|
|
# bcm fullcone
|
|
curl -s $mirror/openwrt/patch/firewall4/firewall4_patches/999-02-firewall4-add-bcm-fullconenat-support.patch > package/network/config/firewall4/patches/999-02-firewall4-add-bcm-fullconenat-support.patch
|
|
# kernel version
|
|
curl -s $mirror/openwrt/patch/firewall4/firewall4_patches/002-fix-fw4.uc-adept-kernel-version-type-of-x.x.patch > package/network/config/firewall4/patches/002-fix-fw4.uc-adept-kernel-version-type-of-x.x.patch
|
|
# fix flow offload
|
|
curl -s $mirror/openwrt/patch/firewall4/firewall4_patches/001-fix-fw4-flow-offload.patch > package/network/config/firewall4/patches/001-fix-fw4-flow-offload.patch
|
|
# add custom nft command support
|
|
curl -s $mirror/openwrt/patch/firewall4/100-openwrt-firewall4-add-custom-nft-command-support.patch | patch -p1
|
|
# libnftnl
|
|
mkdir -p package/libs/libnftnl/patches
|
|
curl -s $mirror/openwrt/patch/firewall4/libnftnl/0001-libnftnl-add-fullcone-expression-support.patch > package/libs/libnftnl/patches/0001-libnftnl-add-fullcone-expression-support.patch
|
|
curl -s $mirror/openwrt/patch/firewall4/libnftnl/0002-libnftnl-add-brcm-fullcone-support.patch > package/libs/libnftnl/patches/0002-libnftnl-add-brcm-fullcone-support.patch
|
|
# nftables
|
|
mkdir -p package/network/utils/nftables/patches
|
|
curl -s $mirror/openwrt/patch/firewall4/nftables/0001-nftables-add-fullcone-expression-support.patch > package/network/utils/nftables/patches/0001-nftables-add-fullcone-expression-support.patch
|
|
curl -s $mirror/openwrt/patch/firewall4/nftables/0002-nftables-add-brcm-fullconenat-support.patch > package/network/utils/nftables/patches/0002-nftables-add-brcm-fullconenat-support.patch
|
|
curl -s $mirror/openwrt/patch/firewall4/nftables/0003-drop-rej-file.patch > package/network/utils/nftables/patches/0003-drop-rej-file.patch
|
|
|
|
# FullCone module
|
|
git clone https://$gitea/zhao/nft-fullcone package/new/nft-fullcone
|
|
|
|
# IPv6 NAT
|
|
git clone https://$github/sbwml/packages_new_nat6 package/new/nat6
|
|
|
|
# natflow
|
|
git clone https://$github/sbwml/package_new_natflow package/new/natflow
|
|
|
|
# Patch Luci add nft_fullcone/bcm_fullcone & shortcut-fe & natflow & ipv6-nat & custom nft command option
|
|
pushd feeds/luci
|
|
curl -s $mirror/openwrt/patch/firewall4/luci-24.10/0001-luci-app-firewall-add-nft-fullcone-and-bcm-fullcone-.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/firewall4/luci-24.10/0002-luci-app-firewall-add-shortcut-fe-option.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/firewall4/luci-24.10/0003-luci-app-firewall-add-ipv6-nat-option.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/firewall4/luci-24.10/0004-luci-add-firewall-add-custom-nft-rule-support.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/firewall4/luci-24.10/0005-luci-app-firewall-add-natflow-offload-support.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/firewall4/luci-24.10/0006-luci-app-firewall-enable-hardware-offload-only-on-de.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/firewall4/luci-24.10/0007-luci-app-firewall-add-fullcone6-option-for-nftables-.patch | patch -p1
|
|
popd
|
|
|
|
# openssl
|
|
OPENSSL_VERSION=3.0.17
|
|
OPENSSL_HASH=dfdd77e4ea1b57ff3a6dbde6b0bdc3f31db5ac99e7fdd4eaf9e1fbb6ec2db8ce
|
|
sed -ri "s/(PKG_VERSION:=)[^\"]*/\1$OPENSSL_VERSION/;s/(PKG_HASH:=)[^\"]*/\1$OPENSSL_HASH/" package/libs/openssl/Makefile
|
|
|
|
# openssl - quictls
|
|
pushd package/libs/openssl/patches
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0001-QUIC-Add-support-for-BoringSSL-QUIC-APIs.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0002-QUIC-New-method-to-get-QUIC-secret-length.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0003-QUIC-Make-temp-secret-names-less-confusing.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0004-QUIC-Move-QUIC-transport-params-to-encrypted-extensi.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0005-QUIC-Use-proper-secrets-for-handshake.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0006-QUIC-Handle-partial-handshake-messages.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0007-QUIC-Fix-quic_transport-constructors-parsers.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0008-QUIC-Reset-init-state-in-SSL_process_quic_post_hands.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0009-QUIC-Don-t-process-an-incomplete-message.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0010-QUIC-Quick-fix-s2c-to-c2s-for-early-secret.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0011-QUIC-Add-client-early-traffic-secret-storage.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0012-QUIC-Add-OPENSSL_NO_QUIC-wrapper.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0013-QUIC-Correctly-disable-middlebox-compat.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0014-QUIC-Move-QUIC-code-out-of-tls13_change_cipher_state.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0015-QUIC-Tweeks-to-quic_change_cipher_state.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0016-QUIC-Add-support-for-more-secrets.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0017-QUIC-Fix-resumption-secret.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0018-QUIC-Handle-EndOfEarlyData-and-MaxEarlyData.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0019-QUIC-Fall-through-for-0RTT.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0020-QUIC-Some-cleanup-for-the-main-QUIC-changes.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0021-QUIC-Prevent-KeyUpdate-for-QUIC.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0022-QUIC-Test-KeyUpdate-rejection.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0023-QUIC-Buffer-all-provided-quic-data.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0024-QUIC-Enforce-consistent-encryption-level-for-handsha.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0025-QUIC-add-v1-quic_transport_parameters.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0026-QUIC-return-success-when-no-post-handshake-data.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0027-QUIC-__owur-makes-no-sense-for-void-return-values.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0028-QUIC-remove-SSL_R_BAD_DATA_LENGTH-unused.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0029-QUIC-SSLerr-ERR_raise-ERR_LIB_SSL.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0030-QUIC-Add-compile-run-time-checking-for-QUIC.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0031-QUIC-Add-early-data-support.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0032-QUIC-Make-SSL_provide_quic_data-accept-0-length-data.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0033-QUIC-Process-multiple-post-handshake-messages-in-a-s.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0034-QUIC-Fix-CI.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0035-QUIC-Break-up-header-body-processing.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0036-QUIC-Don-t-muck-with-FIPS-checksums.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0037-QUIC-Update-RFC-references.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0038-QUIC-revert-white-space-change.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0039-QUIC-use-SSL_IS_QUIC-in-more-places.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0040-QUIC-Error-when-non-empty-session_id-in-CH.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0041-QUIC-Update-SSL_clear-to-clear-quic-data.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0042-QUIC-Better-SSL_clear.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0043-QUIC-Fix-extension-test.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/quic/0044-QUIC-Update-metadata-version.patch
|
|
popd
|
|
|
|
# openssl benchmarks
|
|
pushd package/libs/openssl/patches
|
|
curl -sO $mirror/openwrt/patch/openssl/901-Revert-speed-Pass-IV-to-EVP_CipherInit_ex-for-evp-ru.patch
|
|
curl -sO $mirror/openwrt/patch/openssl/902-Revert-apps-speed.c-Fix-the-benchmarking-for-AEAD-ci.patch
|
|
popd
|
|
|
|
# openssl urandom
|
|
sed -i "/-openwrt/iOPENSSL_OPTIONS += enable-ktls '-DDEVRANDOM=\"\\\\\"/dev/urandom\\\\\"\"\'\n" package/libs/openssl/Makefile
|
|
|
|
# nghttp3
|
|
rm -rf feeds/packages/libs/nghttp3
|
|
git clone https://$github/sbwml/package_libs_nghttp3 package/libs/nghttp3
|
|
|
|
# ngtcp2
|
|
rm -rf feeds/packages/libs/ngtcp2
|
|
git clone https://$github/sbwml/package_libs_ngtcp2 package/libs/ngtcp2
|
|
|
|
# curl - fix passwall `time_pretransfer` check
|
|
rm -rf feeds/packages/net/curl
|
|
git clone https://$github/sbwml/feeds_packages_net_curl feeds/packages/net/curl
|
|
|
|
# Docker
|
|
rm -rf feeds/luci/applications/luci-app-dockerman
|
|
git clone https://$gitea/zhao/luci-app-dockerman -b openwrt-24.10 feeds/luci/applications/luci-app-dockerman
|
|
rm -rf feeds/packages/utils/{docker,dockerd,containerd,runc}
|
|
git clone https://$github/sbwml/packages_utils_docker feeds/packages/utils/docker
|
|
git clone https://$github/sbwml/packages_utils_dockerd feeds/packages/utils/dockerd
|
|
git clone https://$github/sbwml/packages_utils_containerd feeds/packages/utils/containerd
|
|
git clone https://$github/sbwml/packages_utils_runc feeds/packages/utils/runc
|
|
|
|
# cgroupfs-mount
|
|
# fix unmount hierarchical mount
|
|
pushd feeds/packages
|
|
curl -s $mirror/openwrt/patch/cgroupfs-mount/0001-fix-cgroupfs-mount.patch | patch -p1
|
|
popd
|
|
# mount cgroup v2 hierarchy to /sys/fs/cgroup/cgroup2
|
|
mkdir -p feeds/packages/utils/cgroupfs-mount/patches
|
|
curl -s $mirror/openwrt/patch/cgroupfs-mount/900-mount-cgroup-v2-hierarchy-to-sys-fs-cgroup-cgroup2.patch > feeds/packages/utils/cgroupfs-mount/patches/900-mount-cgroup-v2-hierarchy-to-sys-fs-cgroup-cgroup2.patch
|
|
curl -s $mirror/openwrt/patch/cgroupfs-mount/901-fix-cgroupfs-umount.patch > feeds/packages/utils/cgroupfs-mount/patches/901-fix-cgroupfs-umount.patch
|
|
# docker systemd support
|
|
curl -s $mirror/openwrt/patch/cgroupfs-mount/902-mount-sys-fs-cgroup-systemd-for-docker-systemd-suppo.patch > feeds/packages/utils/cgroupfs-mount/patches/902-mount-sys-fs-cgroup-systemd-for-docker-systemd-suppo.patch
|
|
|
|
# procps-ng - top
|
|
sed -i 's/enable-skill/enable-skill --disable-modern-top/g' feeds/packages/utils/procps-ng/Makefile
|
|
|
|
# TTYD
|
|
sed -i 's/services/system/g' feeds/luci/applications/luci-app-ttyd/root/usr/share/luci/menu.d/luci-app-ttyd.json
|
|
sed -i '3 a\\t\t"order": 50,' feeds/luci/applications/luci-app-ttyd/root/usr/share/luci/menu.d/luci-app-ttyd.json
|
|
sed -i 's/procd_set_param stdout 1/procd_set_param stdout 0/g' feeds/packages/utils/ttyd/files/ttyd.init
|
|
sed -i 's/procd_set_param stderr 1/procd_set_param stderr 0/g' feeds/packages/utils/ttyd/files/ttyd.init
|
|
|
|
# UPnP
|
|
rm -rf feeds/{packages/net/miniupnpd,luci/applications/luci-app-upnp}
|
|
git clone https://$gitea/zhao/miniupnpd feeds/packages/net/miniupnpd -b v2.3.9
|
|
git clone https://$gitea/zhao/luci-app-upnp feeds/luci/applications/luci-app-upnp -b openwrt-24.10
|
|
|
|
# nginx - latest version
|
|
rm -rf feeds/packages/net/nginx
|
|
git clone https://$github/sbwml/feeds_packages_net_nginx feeds/packages/net/nginx -b openwrt-24.10
|
|
sed -i 's/procd_set_param stdout 1/procd_set_param stdout 0/g;s/procd_set_param stderr 1/procd_set_param stderr 0/g' feeds/packages/net/nginx/files/nginx.init
|
|
|
|
# nginx - ubus
|
|
sed -i 's/ubus_parallel_req 2/ubus_parallel_req 6/g' feeds/packages/net/nginx/files-luci-support/60_nginx-luci-support
|
|
sed -i '/ubus_parallel_req/a\ ubus_script_timeout 300;' feeds/packages/net/nginx/files-luci-support/60_nginx-luci-support
|
|
|
|
# nginx - config
|
|
curl -s $mirror/openwrt/nginx/luci.locations > feeds/packages/net/nginx/files-luci-support/luci.locations
|
|
curl -s $mirror/openwrt/nginx/uci.conf.template > feeds/packages/net/nginx-util/files/uci.conf.template
|
|
|
|
# opkg
|
|
mkdir -p package/system/opkg/patches
|
|
curl -s $mirror/openwrt/patch/opkg/900-opkg-download-disable-hsts.patch > package/system/opkg/patches/900-opkg-download-disable-hsts.patch
|
|
curl -s $mirror/openwrt/patch/opkg/901-libopkg-opkg_install-copy-conffiles-to-the-system-co.patch > package/system/opkg/patches/901-libopkg-opkg_install-copy-conffiles-to-the-system-co.patch
|
|
|
|
# uwsgi - fix timeout
|
|
sed -i '$a cgi-timeout = 600' feeds/packages/net/uwsgi/files-luci-support/luci-*.ini
|
|
sed -i '/limit-as/c\limit-as = 5000' feeds/packages/net/uwsgi/files-luci-support/luci-webui.ini
|
|
# disable error log
|
|
sed -i "s/procd_set_param stderr 1/procd_set_param stderr 0/g" feeds/packages/net/uwsgi/files/uwsgi.init
|
|
|
|
# uwsgi - performance
|
|
sed -i 's/threads = 1/threads = 2/g' feeds/packages/net/uwsgi/files-luci-support/luci-webui.ini
|
|
sed -i 's/processes = 3/processes = 4/g' feeds/packages/net/uwsgi/files-luci-support/luci-webui.ini
|
|
sed -i 's/cheaper = 1/cheaper = 2/g' feeds/packages/net/uwsgi/files-luci-support/luci-webui.ini
|
|
|
|
# rpcd - fix timeout
|
|
sed -i 's/option timeout 30/option timeout 60/g' package/system/rpcd/files/rpcd.config
|
|
sed -i 's#20) \* 1000#60) \* 1000#g' feeds/luci/modules/luci-base/htdocs/luci-static/resources/rpc.js
|
|
|
|
# luci-mod extra
|
|
pushd feeds/luci
|
|
curl -s $mirror/openwrt/patch/luci/0001-luci-mod-system-add-modal-overlay-dialog-to-reboot.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/luci/0002-luci-mod-status-displays-actual-process-memory-usage.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/luci/0003-luci-mod-status-storage-index-applicable-only-to-val.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/luci/0004-luci-mod-status-firewall-disable-legacy-firewall-rul.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/luci/0005-luci-mod-system-add-refresh-interval-setting.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/luci/0006-luci-mod-system-mounts-add-docker-directory-mount-po.patch | patch -p1
|
|
curl -s $mirror/openwrt/patch/luci/0007-luci-mod-system-add-ucitrack-luci-mod-system-zram.js.patch | patch -p1
|
|
popd
|
|
|
|
# Luci diagnostics.js
|
|
sed -i "s/openwrt.org/www.qq.com/g" feeds/luci/modules/luci-mod-network/htdocs/luci-static/resources/view/network/diagnostics.js
|
|
|
|
# luci-compat - remove extra line breaks from description
|
|
sed -i '/<br \/>/d' feeds/luci/modules/luci-compat/luasrc/view/cbi/full_valuefooter.htm
|
|
|
|
# urngd - 2020-01-21
|
|
rm -rf package/system/urngd
|
|
git clone https://$github/sbwml/package_system_urngd package/system/urngd
|
|
|
|
# zlib - 1.3
|
|
ZLIB_VERSION=1.3.1
|
|
ZLIB_HASH=38ef96b8dfe510d42707d9c781877914792541133e1870841463bfa73f883e32
|
|
sed -ri "s/(PKG_VERSION:=)[^\"]*/\1$ZLIB_VERSION/;s/(PKG_HASH:=)[^\"]*/\1$ZLIB_HASH/" package/libs/zlib/Makefile
|
|
|
|
# profile
|
|
sed -i 's#\\u@\\h:\\w\\\$#\\[\\e[32;1m\\][\\u@\\h\\[\\e[0m\\] \\[\\033[01;34m\\]\\W\\[\\033[00m\\]\\[\\e[32;1m\\]]\\[\\e[0m\\]\\\$#g' package/base-files/files/etc/profile
|
|
sed -ri 's/(export PATH=")[^"]*/\1%PATH%:\/opt\/bin:\/opt\/sbin:\/opt\/usr\/bin:\/opt\/usr\/sbin/' package/base-files/files/etc/profile
|
|
sed -i '/ENV/i\export TERM=xterm-color' package/base-files/files/etc/profile
|
|
|
|
# bash
|
|
sed -i 's#ash#bash#g' package/base-files/files/etc/passwd
|
|
sed -i '\#export ENV=/etc/shinit#a export HISTCONTROL=ignoredups' package/base-files/files/etc/profile
|
|
mkdir -p files/root
|
|
curl -so files/root/.bash_profile $mirror/openwrt/files/root/.bash_profile
|
|
curl -so files/root/.bashrc $mirror/openwrt/files/root/.bashrc
|
|
|
|
# rootfs files
|
|
mkdir -p files/etc/sysctl.d
|
|
curl -so files/etc/banner $mirror/openwrt/files/etc/banner
|
|
curl -so files/etc/sysctl.d/10-default.conf $mirror/openwrt/files/etc/sysctl.d/10-default.conf
|
|
curl -so files/etc/sysctl.d/15-vm-swappiness.conf $mirror/openwrt/files/etc/sysctl.d/15-vm-swappiness.conf
|
|
curl -so files/etc/sysctl.d/16-udp-buffer-size.conf $mirror/openwrt/files/etc/sysctl.d/16-udp-buffer-size.conf
|
|
|
|
# NTP
|
|
sed -i 's/0.openwrt.pool.ntp.org/ntp1.aliyun.com/g' package/base-files/files/bin/config_generate
|
|
sed -i 's/1.openwrt.pool.ntp.org/ntp2.aliyun.com/g' package/base-files/files/bin/config_generate
|
|
sed -i 's/2.openwrt.pool.ntp.org/time1.cloud.tencent.com/g' package/base-files/files/bin/config_generate
|
|
sed -i 's/3.openwrt.pool.ntp.org/time2.cloud.tencent.com/g' package/base-files/files/bin/config_generate
|
|
|
|
# luci-theme-bootstrap
|
|
sed -i 's/font-size: 13px/font-size: 14px/g' feeds/luci/themes/luci-theme-bootstrap/htdocs/luci-static/bootstrap/cascade.css
|
|
sed -i 's/9.75px/10.75px/g' feeds/luci/themes/luci-theme-bootstrap/htdocs/luci-static/bootstrap/cascade.css
|
|
|
|
# Status page enhancement: add social and firmware links
|
|
cat << 'EOF' >> feeds/luci/modules/luci-mod-status/ucode/template/admin_status/index.ut
|
|
<script>
|
|
function addLinks() {
|
|
var section = document.querySelector(".cbi-section");
|
|
if (section) {
|
|
// 创建表格容器
|
|
var table = document.createElement('div');
|
|
table.className = 'table';
|
|
|
|
// 创建行
|
|
var row = document.createElement('div');
|
|
row.className = 'tr';
|
|
|
|
// 左列：帮助与反馈
|
|
var leftCell = document.createElement('div');
|
|
leftCell.className = 'td left';
|
|
leftCell.style.width = '33%';
|
|
leftCell.textContent = '帮助与反馈';
|
|
|
|
// 右列：三个按钮
|
|
var rightCell = document.createElement('div');
|
|
rightCell.className = 'td left';
|
|
|
|
// 创建QQ交流群按钮
|
|
var qqLink = document.createElement('a');
|
|
qqLink.href = 'https://qm.qq.com/q/JbBVnkjzKa';
|
|
qqLink.target = '_blank';
|
|
qqLink.className = 'cbi-button';
|
|
qqLink.style.marginRight = '10px';
|
|
qqLink.textContent = 'QQ交流群';
|
|
|
|
// 创建TG交流群按钮
|
|
var tgLink = document.createElement('a');
|
|
tgLink.href = 'https://t.me/kejizero';
|
|
tgLink.target = '_blank';
|
|
tgLink.className = 'cbi-button';
|
|
tgLink.style.marginRight = '10px';
|
|
tgLink.textContent = 'TG交流群';
|
|
|
|
// 创建固件地址按钮
|
|
var firmwareLink = document.createElement('a');
|
|
firmwareLink.href = 'https://openwrt.kejizero.online';
|
|
firmwareLink.target = '_blank';
|
|
firmwareLink.className = 'cbi-button';
|
|
firmwareLink.textContent = '固件地址';
|
|
|
|
// 组装元素
|
|
rightCell.appendChild(qqLink);
|
|
rightCell.appendChild(tgLink);
|
|
rightCell.appendChild(firmwareLink);
|
|
|
|
row.appendChild(leftCell);
|
|
row.appendChild(rightCell);
|
|
table.appendChild(row);
|
|
section.appendChild(table);
|
|
} else {
|
|
setTimeout(addLinks, 100);
|
|
}
|
|
}
|
|
|
|
document.addEventListener("DOMContentLoaded", addLinks);
|
|
</script>
|
|
EOF
|
|
|
|
# Custom firmware version and author metadata
|
|
sed -i "s/DISTRIB_DESCRIPTION='*.*'/DISTRIB_DESCRIPTION='ZeroWrt-$(date +%Y%m%d)'/g" package/base-files/files/etc/openwrt_release
|
|
sed -i "s/DISTRIB_REVISION='*.*'/DISTRIB_REVISION=' By OPPEN321'/g" package/base-files/files/etc/openwrt_release
|
|
sed -i "s|^OPENWRT_RELEASE=\".*\"|OPENWRT_RELEASE=\"ZeroWrt 标准版 @R$(date +%Y%m%d) BY OPPEN321\"|" package/base-files/files/usr/lib/os-release
|