test

deployments/openvpn/entrypoint.sh

@@ -0,0 +1,69 @@
+#!/bin/bash
+# OpenVPN 连通后拉起 SOCKS5；仅服务戎行内网代理。
+set -euo pipefail
+
+VPN_DIR="${VPN_DIR:-/vpn}"
+SOCKS_HOST="${SOCKS_HOST:-0.0.0.0}"
+SOCKS_PORT="${SOCKS_PORT:-1080}"
+RONGXING_HOST="${RONGXING_HOST:-192.168.3.43}"
+
+cd "$VPN_DIR"
+
+CONF=""
+for f in *.conf *.ovpn; do
+  if [ -f "$f" ]; then
+    CONF="$f"
+    break
+  fi
+done
+
+if [ -z "$CONF" ]; then
+  echo "[rongxing-vpn] 未在 ${VPN_DIR} 找到 .ovpn/.conf，请挂载证书目录"
+  exit 1
+fi
+
+echo "[rongxing-vpn] 使用配置: ${CONF}"
+echo "[rongxing-vpn] 仅路由 ${RONGXING_HOST}/32，SOCKS5 ${SOCKS_HOST}:${SOCKS_PORT}"
+
+openvpn \
+  --config "$CONF" \
+  --cd "$VPN_DIR" \
+  --route-nopull \
+  --route "$RONGXING_HOST" 255.255.255.255 \
+  --daemon \
+  --writepid /var/run/openvpn.pid \
+  --log /var/log/openvpn.log \
+  --verb 3
+
+for i in $(seq 1 90); do
+  if ip link show tun0 >/dev/null 2>&1; then
+    echo "[rongxing-vpn] tun0 已就绪 (${i}s)"
+    break
+  fi
+  if [ "$i" -eq 90 ]; then
+    echo "[rongxing-vpn] 等待 tun0 超时，OpenVPN 日志："
+    cat /var/log/openvpn.log || true
+    exit 1
+  fi
+  sleep 1
+done
+
+# 前台跑 microsocks，进程退出则容器退出；同时监控 openvpn
+microsocks -i "$SOCKS_HOST" -p "$SOCKS_PORT" &
+SOCKS_PID=$!
+
+cleanup() {
+  kill "$SOCKS_PID" 2>/dev/null || true
+  if [ -f /var/run/openvpn.pid ]; then
+    kill "$(cat /var/run/openvpn.pid)" 2>/dev/null || true
+  fi
+}
+trap cleanup EXIT INT TERM
+
+while kill -0 "$(cat /var/run/openvpn.pid)" 2>/dev/null && kill -0 "$SOCKS_PID" 2>/dev/null; do
+  sleep 5
+done
+
+echo "[rongxing-vpn] OpenVPN 或 SOCKS 已退出"
+cat /var/log/openvpn.log || true
+exit 1