feat(remote): 升级远程协助脚本到 v3
- 添加运行前安全确认提示（y/N） - 验证 SSH 真正在监听，失败时给出具体修复建议 - 检测并修复密码认证被禁用的情况（macOS Ventura+） - 检测局域网 IP，同 WiFi 下支持直连（无需 FRP 中转） - 扩大端口范围到 20000-21000，减少冲突 - 2 小时自动超时断开，防止忘关 - 退出时自动清理配置文件 - guide.html 安全说明同步更新
This commit is contained in:
dongsheng123132
@@ -1,34 +1,87 @@
|
||||
#!/bin/bash
|
||||
# ============================================================
|
||||
# U-Claw 远程协助 v2（Mac/Linux）— 稳定版
|
||||
# U-Claw 远程协助 v3（Mac/Linux）
|
||||
# 用法: curl -fsSL https://u-claw.org/remote.sh | bash
|
||||
# 改进: SSH 验证、同局域网直连、安全增强、自动超时
|
||||
# ============================================================
|
||||
|
||||
set -e
|
||||
GREEN='\033[0;32m'; CYAN='\033[0;36m'; RED='\033[0;31m'; YELLOW='\033[1;33m'; DIM='\033[2m'; NC='\033[0m'
|
||||
GREEN='\033[0;32m'; CYAN='\033[0;36m'; RED='\033[0;31m'; YELLOW='\033[1;33m'; DIM='\033[2m'; BOLD='\033[1m'; NC='\033[0m'
|
||||
|
||||
clear
|
||||
echo ""
|
||||
echo -e "${CYAN} ===========================================${NC}"
|
||||
echo -e "${CYAN} U-Claw 远程协助 v2（稳定连接）${NC}"
|
||||
echo -e "${CYAN} U-Claw 远程协助 v3${NC}"
|
||||
echo -e "${CYAN} ===========================================${NC}"
|
||||
echo ""
|
||||
|
||||
# ---- 安全提示 ----
|
||||
echo -e "${YELLOW} ⚠ 本脚本将执行以下操作：${NC}"
|
||||
echo -e "${DIM} 1. 开启 SSH 远程登录${NC}"
|
||||
echo -e "${DIM} 2. 建立加密隧道到 U-Claw 中转服务器${NC}"
|
||||
echo -e "${DIM} 3. 技术支持可通过 SSH 连接你的电脑${NC}"
|
||||
echo -e "${DIM} 4. 关闭终端或 Ctrl+C 即可断开${NC}"
|
||||
echo ""
|
||||
echo -e -n "${YELLOW} 是否继续？(y/N): ${NC}"
|
||||
read -r CONFIRM
|
||||
if [[ "$CONFIRM" != "y" && "$CONFIRM" != "Y" ]]; then
|
||||
echo -e "${RED} 已取消${NC}"
|
||||
exit 0
|
||||
fi
|
||||
echo ""
|
||||
|
||||
# ---- Step 1: SSH ----
|
||||
echo -e " [1/3] 检查 SSH ..."
|
||||
echo -e " [1/4] 检查 SSH ..."
|
||||
if [[ "$(uname)" == "Darwin" ]]; then
|
||||
# macOS: 开启远程登录
|
||||
sudo systemsetup -setremotelogin on 2>/dev/null || true
|
||||
# 确保密码认证开启（macOS Ventura+ 可能默认关闭）
|
||||
SSHD_CONFIG="/etc/ssh/sshd_config"
|
||||
if grep -q "^PasswordAuthentication no" "$SSHD_CONFIG" 2>/dev/null; then
|
||||
echo -e "${YELLOW} 检测到 SSH 密码登录被禁用，正在开启...${NC}"
|
||||
sudo sed -i '' 's/^PasswordAuthentication no/PasswordAuthentication yes/' "$SSHD_CONFIG"
|
||||
sudo launchctl stop com.openssh.sshd 2>/dev/null || true
|
||||
sudo launchctl start com.openssh.sshd 2>/dev/null || true
|
||||
fi
|
||||
else
|
||||
sudo systemctl start sshd 2>/dev/null || sudo systemctl start ssh 2>/dev/null || {
|
||||
sudo apt-get install -y openssh-server 2>/dev/null || sudo yum install -y openssh-server 2>/dev/null
|
||||
sudo systemctl start sshd 2>/dev/null || sudo systemctl start ssh
|
||||
}
|
||||
fi
|
||||
echo -e "${GREEN} [OK] SSH 已启动${NC}"
|
||||
|
||||
# ---- Step 2: frpc ----
|
||||
# 验证 SSH 真正在监听
|
||||
if ss -tlnp 2>/dev/null | grep -q ':22 ' || netstat -an 2>/dev/null | grep -q '\.22 .*LISTEN'; then
|
||||
echo -e "${GREEN} [OK] SSH 已启动并在监听端口 22${NC}"
|
||||
else
|
||||
echo -e "${RED} [!] SSH 未能成功启动${NC}"
|
||||
if [[ "$(uname)" == "Darwin" ]]; then
|
||||
echo -e "${YELLOW} 请手动开启: 系统设置 → 通用 → 共享 → 远程登录${NC}"
|
||||
fi
|
||||
echo -e "${YELLOW} 开启后重新运行本脚本${NC}"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# ---- Step 2: 检测本地 IP（局域网直连用）----
|
||||
echo ""
|
||||
echo -e " [2/3] 准备远程通道 ..."
|
||||
echo -e " [2/4] 检测网络环境 ..."
|
||||
|
||||
LOCAL_IP=""
|
||||
if [[ "$(uname)" == "Darwin" ]]; then
|
||||
LOCAL_IP=$(ipconfig getifaddr en0 2>/dev/null || ipconfig getifaddr en1 2>/dev/null || echo "")
|
||||
else
|
||||
LOCAL_IP=$(hostname -I 2>/dev/null | awk '{print $1}' || echo "")
|
||||
fi
|
||||
|
||||
if [ -n "$LOCAL_IP" ]; then
|
||||
echo -e "${GREEN} [OK] 本机局域网 IP: ${CYAN}${LOCAL_IP}${NC}"
|
||||
else
|
||||
echo -e "${DIM} 未检测到局域网 IP${NC}"
|
||||
fi
|
||||
|
||||
# ---- Step 3: frpc ----
|
||||
echo ""
|
||||
echo -e " [3/4] 准备远程通道 ..."
|
||||
|
||||
FRP_DIR="/tmp/uclaw-frp"
|
||||
mkdir -p "$FRP_DIR"
|
||||
@@ -44,7 +97,11 @@ if [ ! -f "$FRPC" ]; then
|
||||
FRP_URL="https://github.com/fatedier/frp/releases/download/v0.61.1/frp_0.61.1_darwin_amd64.tar.gz"
|
||||
fi
|
||||
else
|
||||
FRP_URL="https://github.com/fatedier/frp/releases/download/v0.61.1/frp_0.61.1_linux_amd64.tar.gz"
|
||||
if [[ "$ARCH" == "aarch64" ]]; then
|
||||
FRP_URL="https://github.com/fatedier/frp/releases/download/v0.61.1/frp_0.61.1_linux_arm64.tar.gz"
|
||||
else
|
||||
FRP_URL="https://github.com/fatedier/frp/releases/download/v0.61.1/frp_0.61.1_linux_amd64.tar.gz"
|
||||
fi
|
||||
fi
|
||||
|
||||
echo -e "${DIM} 下载: $FRP_URL${NC}"
|
||||
@@ -57,14 +114,18 @@ fi
|
||||
chmod +x "$FRPC"
|
||||
echo -e "${GREEN} [OK] 远程通道工具就绪${NC}"
|
||||
|
||||
# ---- Step 3: 连接 ----
|
||||
# ---- Step 4: 连接 ----
|
||||
echo ""
|
||||
echo -e " [3/3] 建立连接 ..."
|
||||
echo -e " [4/4] 建立连接 ..."
|
||||
|
||||
PORT=$((20000 + RANDOM % 100))
|
||||
# 更大的端口范围，减少冲突
|
||||
PORT=$((20000 + RANDOM % 1000))
|
||||
USERNAME=$(whoami)
|
||||
HOSTNAME_VAL=$(hostname)
|
||||
|
||||
# 会话 ID（用于标识本次连接）
|
||||
SESSION_ID=$(date +%s | tail -c 5)
|
||||
|
||||
cat > "$FRP_DIR/frpc.toml" << EOF
|
||||
serverAddr = "101.32.254.221"
|
||||
serverPort = 7000
|
||||
@@ -72,7 +133,7 @@ auth.method = "token"
|
||||
auth.token = "uclaw-remote-2026"
|
||||
|
||||
[[proxies]]
|
||||
name = "ssh-${USERNAME}-${PORT}"
|
||||
name = "ssh-${USERNAME}-${SESSION_ID}-${PORT}"
|
||||
type = "tcp"
|
||||
localIP = "127.0.0.1"
|
||||
localPort = 22
|
||||
@@ -81,22 +142,54 @@ EOF
|
||||
|
||||
echo ""
|
||||
echo -e "${GREEN} ===========================================${NC}"
|
||||
echo -e "${GREEN} 远程协助已就绪！${NC}"
|
||||
echo -e "${GREEN} ✅ 远程协助已就绪！${NC}"
|
||||
echo -e "${GREEN} ===========================================${NC}"
|
||||
echo ""
|
||||
echo -e "${YELLOW} +------------------------------------------+"
|
||||
echo -e " | 把下面这段发给技术支持（微信）： |"
|
||||
echo -e " | |"
|
||||
echo -e " | ${CYAN}端口: ${PORT}${YELLOW} |"
|
||||
echo -e " | ${CYAN}用户: ${USERNAME}${YELLOW} |"
|
||||
echo -e " | ${CYAN}电脑: ${HOSTNAME_VAL}${YELLOW} |"
|
||||
printf " | ${CYAN}端口: %-36s${YELLOW}|\n" "$PORT"
|
||||
printf " | ${CYAN}用户: %-36s${YELLOW}|\n" "$USERNAME"
|
||||
printf " | ${CYAN}电脑: %-36s${YELLOW}|\n" "$HOSTNAME_VAL"
|
||||
if [ -n "$LOCAL_IP" ]; then
|
||||
printf " | ${CYAN}局域网: %-34s${YELLOW}|\n" "$LOCAL_IP"
|
||||
fi
|
||||
echo -e " | |"
|
||||
echo -e " +------------------------------------------+${NC}"
|
||||
echo ""
|
||||
echo -e "${DIM} * 连接稳定，断线自动重连${NC}"
|
||||
echo -e "${DIM} * 按 Ctrl+C 断开远程${NC}"
|
||||
echo -e "${DIM} * 你的登录密码需要告知技术支持${NC}"
|
||||
|
||||
# 局域网直连提示
|
||||
if [ -n "$LOCAL_IP" ]; then
|
||||
echo -e "${CYAN} 💡 同一 WiFi 下可直连（更快）:${NC}"
|
||||
echo -e "${BOLD} ssh ${USERNAME}@${LOCAL_IP}${NC}"
|
||||
echo ""
|
||||
fi
|
||||
|
||||
echo -e "${DIM} * 远程通道连接中，断线自动重连${NC}"
|
||||
echo -e "${DIM} * 按 Ctrl+C 或关闭终端即断开${NC}"
|
||||
echo -e "${DIM} * 连接将在 2 小时后自动断开${NC}"
|
||||
echo ""
|
||||
|
||||
# 启动 frpc
|
||||
"$FRPC" -c "$FRP_DIR/frpc.toml"
|
||||
# 清理函数
|
||||
cleanup() {
|
||||
echo ""
|
||||
echo -e "${YELLOW} 正在断开远程连接...${NC}"
|
||||
kill $FRPC_PID 2>/dev/null || true
|
||||
rm -f "$FRP_DIR/frpc.toml"
|
||||
echo -e "${GREEN} 已安全断开${NC}"
|
||||
exit 0
|
||||
}
|
||||
trap cleanup INT TERM
|
||||
|
||||
# 启动 frpc（后台运行，便于超时控制）
|
||||
"$FRPC" -c "$FRP_DIR/frpc.toml" &
|
||||
FRPC_PID=$!
|
||||
|
||||
# 2 小时超时自动断开
|
||||
( sleep 7200 && kill $FRPC_PID 2>/dev/null && echo -e "\n${YELLOW} ⏰ 已达 2 小时，自动断开${NC}" ) &
|
||||
TIMEOUT_PID=$!
|
||||
|
||||
# 等待 frpc 退出
|
||||
wait $FRPC_PID 2>/dev/null
|
||||
kill $TIMEOUT_PID 2>/dev/null || true
|
||||
rm -f "$FRP_DIR/frpc.toml"
|
||||
|
||||
Reference in New Issue
Block a user