mirror of
https://github.com/remittor/zapret-openwrt.git
synced 2026-01-27 12:50:35 +03:00
320 lines
12 KiB
Makefile
320 lines
12 KiB
Makefile
#
|
|
# Copyright (c) 2024 remittor
|
|
#
|
|
|
|
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=zapret
|
|
PKG_VERSION:=72.20260114
|
|
PKG_RELEASE:=1
|
|
|
|
PKG_MAINTAINER:=bol-van
|
|
PKG_LICENSE:=MIT
|
|
PKG_LICENSE_FILES:=docs/LICENSE.txt
|
|
|
|
PKG_SOURCE_URL:=https://github.com/bol-van/zapret.git
|
|
PKG_SOURCE_PROTO:=git
|
|
PKG_SOURCE_VERSION:=76764ad6b0ee7d3991c97e7b8c24d53189d25c28
|
|
PKG_SOURCE_DATE:=2026-01-14
|
|
|
|
#PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
|
|
#PKG_SOURCE_URL:=https://github.com/bol-van/zapret/archive/refs/tags/v$(PKG_VERSION).tar.gz?
|
|
#PKG_HASH:=skip
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
|
|
#TAR_OPTIONS:=--strip-components 1 $(TAR_OPTIONS)
|
|
#TAR_CMD=$(HOST_TAR) -C $(1) $(TAR_OPTIONS)
|
|
|
|
MAKE_PATH:=nfq
|
|
|
|
define Package/$(PKG_NAME)
|
|
SECTION:=net
|
|
CATEGORY:=Network
|
|
TITLE:=$(PKG_NAME)
|
|
SUBMENU:=Zapret
|
|
URL:=https://github.com/bol-van/zapret
|
|
DEPENDS:= +nftables +curl +gzip
|
|
DEPENDS+= +coreutils +coreutils-sort +coreutils-sleep
|
|
DEPENDS+= +kmod-nft-nat +kmod-nft-offload +kmod-nft-queue
|
|
DEPENDS+= +libnetfilter-queue +libcap +zlib
|
|
endef
|
|
|
|
define Build/Prepare
|
|
$(Build/Prepare/Default)
|
|
rm -f $(PKG_BUILD_DIR)/$(MAKE_PATH)/nfqws
|
|
rm -f $(PKG_BUILD_DIR)/ip2net/ip2net
|
|
rm -f $(PKG_BUILD_DIR)/mdig/mdig
|
|
endef
|
|
|
|
#define Build/Configure
|
|
#endef
|
|
|
|
define Build/Compile
|
|
$(MAKE) -C $(PKG_BUILD_DIR)/$(MAKE_PATH) $(TARGET_CONFIGURE_OPTS)
|
|
$(MAKE) -C $(PKG_BUILD_DIR)/ip2net $(TARGET_CONFIGURE_OPTS)
|
|
$(MAKE) -C $(PKG_BUILD_DIR)/mdig $(TARGET_CONFIGURE_OPTS)
|
|
endef
|
|
|
|
define Package/$(PKG_NAME)/conffiles
|
|
/opt/zapret/config
|
|
/opt/zapret/ipset/zapret-hosts-google.txt
|
|
/opt/zapret/ipset/zapret-hosts-user.txt
|
|
/opt/zapret/ipset/zapret-hosts-user-exclude.txt
|
|
/opt/zapret/ipset/zapret-ip-exclude.txt
|
|
/opt/zapret/ipset/zapret-hosts-auto.txt
|
|
/opt/zapret/init.d/openwrt/custom.d/10-script.sh
|
|
/opt/zapret/init.d/openwrt/custom.d/20-script.sh
|
|
/opt/zapret/init.d/openwrt/custom.d/50-script.sh
|
|
/opt/zapret/init.d/openwrt/custom.d/60-script.sh
|
|
/opt/zapret/init.d/openwrt/custom.d/90-script.sh
|
|
endef
|
|
|
|
define Package/$(PKG_NAME)/install
|
|
$(INSTALL_DIR) $(1)/opt/zapret
|
|
$(INSTALL_DIR) $(1)/opt/zapret/$(MAKE_PATH)
|
|
$(INSTALL_BIN) $(PKG_BUILD_DIR)/$(MAKE_PATH)/nfqws $(1)/opt/zapret/$(MAKE_PATH)/
|
|
$(INSTALL_DIR) $(1)/opt/zapret/ip2net
|
|
$(INSTALL_BIN) $(PKG_BUILD_DIR)/ip2net/ip2net $(1)/opt/zapret/ip2net/
|
|
$(INSTALL_DIR) $(1)/opt/zapret/mdig
|
|
$(INSTALL_BIN) $(PKG_BUILD_DIR)/mdig/mdig $(1)/opt/zapret/mdig/
|
|
$(INSTALL_DIR) $(1)/opt/zapret/common
|
|
$(CP) $(PKG_BUILD_DIR)/common/* $(1)/opt/zapret/common/
|
|
#$(INSTALL_DIR) $(1)/opt/zapret/docs
|
|
#$(CP) $(PKG_BUILD_DIR)/docs/* $(1)/opt/zapret/docs/
|
|
$(INSTALL_DIR) $(1)/opt/zapret/files
|
|
$(CP) $(PKG_BUILD_DIR)/files/* $(1)/opt/zapret/files/
|
|
$(CP) ./files/* $(1)/opt/zapret/files/
|
|
$(INSTALL_DIR) $(1)/opt/zapret/ipset
|
|
$(CP) $(PKG_BUILD_DIR)/ipset/* $(1)/opt/zapret/ipset/
|
|
$(INSTALL_BIN) $(PKG_BUILD_DIR)/blockcheck.sh $(1)/opt/zapret/blockcheck.sh
|
|
#$(INSTALL_DATA) $(PKG_BUILD_DIR)/config.default $(1)/opt/zapret/config.default
|
|
$(INSTALL_DIR) $(1)/opt/zapret/tmp
|
|
$(INSTALL_DIR) $(1)/opt/zapret/init.d/openwrt
|
|
$(CP) $(PKG_BUILD_DIR)/init.d/openwrt/* $(1)/opt/zapret/init.d/openwrt/
|
|
$(INSTALL_DIR) $(1)/etc/hotplug.d/iface
|
|
$(INSTALL_BIN) $(PKG_BUILD_DIR)/init.d/openwrt/90-zapret $(1)/etc/hotplug.d/iface/90-zapret
|
|
$(INSTALL_DIR) $(1)/etc/init.d
|
|
$(INSTALL_BIN) ./init.d.sh $(1)/etc/init.d/zapret
|
|
$(INSTALL_DATA) ./config.default $(1)/opt/zapret/config.default
|
|
$(INSTALL_DATA) ./config.default $(1)/opt/zapret/config
|
|
$(INSTALL_DATA) ./ipset/zapret-hosts-google.txt $(1)/opt/zapret/ipset/zapret-hosts-google.txt
|
|
$(INSTALL_DATA) ./ipset/zapret-hosts-user.txt $(1)/opt/zapret/ipset/zapret-hosts-user.txt
|
|
$(INSTALL_DATA) ./ipset/zapret-hosts-user-exclude.txt $(1)/opt/zapret/ipset/zapret-hosts-user-exclude.txt
|
|
$(INSTALL_DATA) ./ipset/zapret-ip-exclude.txt $(1)/opt/zapret/ipset/zapret-ip-exclude.txt
|
|
$(INSTALL_DIR) $(1)/opt/zapret/ipset_def
|
|
$(INSTALL_DATA) ./ipset/zapret-hosts-google.txt $(1)/opt/zapret/ipset_def/zapret-hosts-google.txt
|
|
$(INSTALL_DATA) ./ipset/zapret-hosts-user.txt $(1)/opt/zapret/ipset_def/zapret-hosts-user.txt
|
|
$(INSTALL_DATA) ./ipset/zapret-hosts-user-exclude.txt $(1)/opt/zapret/ipset_def/zapret-hosts-user-exclude.txt
|
|
$(INSTALL_DATA) ./ipset/zapret-ip-exclude.txt $(1)/opt/zapret/ipset_def/zapret-ip-exclude.txt
|
|
$(INSTALL_DIR) $(1)/opt/zapret/init.d
|
|
$(INSTALL_DIR) $(1)/opt/zapret/init.d/openwrt
|
|
$(INSTALL_DIR) $(1)/opt/zapret/init.d/openwrt/custom.d
|
|
$(CP) ./custom.d/* $(1)/opt/zapret/init.d/openwrt/custom.d/
|
|
$(INSTALL_DIR) $(1)/etc/uci-defaults
|
|
$(INSTALL_BIN) ./uci-def-cfg.sh $(1)/etc/uci-defaults/zapret-uci-def-cfg.sh
|
|
# install all sh-scripts
|
|
$(CP) ./*.sh $(1)/opt/zapret/
|
|
rm -f $(1)/opt/zapret/init.d.sh
|
|
# Create empty conf files
|
|
$(INSTALL_DATA) /dev/null $(1)/opt/zapret/ipset/zapret-hosts-auto.txt
|
|
$(INSTALL_DATA) /dev/null $(1)/opt/zapret/ipset/cust1.txt
|
|
$(INSTALL_DATA) /dev/null $(1)/opt/zapret/ipset/cust2.txt
|
|
$(INSTALL_DATA) /dev/null $(1)/opt/zapret/ipset/cust3.txt
|
|
$(INSTALL_DATA) /dev/null $(1)/opt/zapret/ipset/cust4.txt
|
|
$(INSTALL_DATA) /dev/null $(1)/opt/zapret/init.d/openwrt/custom.d/10-script.sh
|
|
$(INSTALL_DATA) /dev/null $(1)/opt/zapret/init.d/openwrt/custom.d/20-script.sh
|
|
$(INSTALL_DATA) /dev/null $(1)/opt/zapret/init.d/openwrt/custom.d/60-script.sh
|
|
$(INSTALL_DATA) /dev/null $(1)/opt/zapret/init.d/openwrt/custom.d/90-script.sh
|
|
# Fix permissions
|
|
chmod 644 $(1)/opt/zapret/ipset/*.txt
|
|
chmod 644 $(1)/opt/zapret/ipset_def/*.txt
|
|
chmod 644 $(1)/opt/zapret/init.d/openwrt/custom.d/*.sh
|
|
chmod 644 $(1)/opt/zapret/config*
|
|
chmod 755 $(1)/opt/zapret/*.sh
|
|
chmod 755 $(1)/opt/zapret/$(MAKE_PATH)/*
|
|
chmod 755 $(1)/opt/zapret/ip2net/*
|
|
chmod 755 $(1)/opt/zapret/mdig/*
|
|
# Disable TPWS in blockcheck
|
|
grep -q '^SKIP_TPWS=' $(1)/opt/zapret/blockcheck.sh || sed -i '/^NFT_TABLE=blockcheck$$$$/a SKIP_TPWS=$$$${SKIP_TPWS:-1}' $(1)/opt/zapret/blockcheck.sh
|
|
endef
|
|
|
|
define Package/$(PKG_NAME)/preinst
|
|
#!/bin/sh
|
|
# check if we are on real system
|
|
if [ -z "$${IPKG_INSTROOT}" ]; then
|
|
ZAPRET_DIR=/opt/zapret
|
|
ZAPRET_INITD=/etc/init.d/zapret
|
|
ZAPRET_CFG=/etc/config/zapret
|
|
if [ -f "$${ZAPRET_INITD}" ]; then
|
|
SCRIPT=$$( readlink "$${ZAPRET_INITD}" )
|
|
if [ -n "$${SCRIPT}" ]; then
|
|
echo "Please uninstall incompatible \"zapret\" service!"
|
|
exit 44
|
|
fi
|
|
fi
|
|
if command -v apk >/dev/null; then
|
|
PKG_MGR="apk"
|
|
PKG_CHECK="apk info -e "
|
|
PKG_REMOVE="apk del --force "
|
|
else
|
|
PKG_MGR="opkg"
|
|
PKG_CHECK="opkg status "
|
|
PKG_REMOVE="opkg remove --force-remove "
|
|
fi
|
|
if [ "$${PKG_UPGRADE}" = "1" ]; then
|
|
# stop service if PKG_UPGRADE
|
|
if [ -x "$${ZAPRET_INITD}" ]; then
|
|
$${ZAPRET_INITD} running && $${ZAPRET_INITD} stop >/dev/null 2>&1
|
|
fi
|
|
fi
|
|
if $${PKG_CHECK} zapret >/dev/null 2>&1; then
|
|
if [ ! -f "/opt/zapret/sync_config.sh" ]; then
|
|
echo "Please uninstall incompatible \"zapret\" package!"
|
|
exit 47
|
|
fi
|
|
if [ -f "$${ZAPRET_CFG}" ] && ! grep -q "run_on_boot" "$${ZAPRET_CFG}"; then
|
|
echo "Please uninstall incompatible \"zapret\" package!"
|
|
exit 48
|
|
fi
|
|
fi
|
|
if $${PKG_CHECK} luci-app-zapret >/dev/null 2>&1; then
|
|
SVC_FILE=/www/luci-static/resources/view/zapret/service.js
|
|
if [ ! -f "$${SVC_FILE}" ] || ! grep -Fq "/remittor/zapret-openwrt" "$${SVC_FILE}"; then
|
|
echo "Please uninstall incompatible \"luci-app-zapret\" package!"
|
|
exit 55
|
|
fi
|
|
fi
|
|
if [ -f "$${ZAPRET_CFG}" ] && ! grep -q "run_on_boot" "$${ZAPRET_CFG}"; then
|
|
if [ -x "$${ZAPRET_INITD}" ]; then
|
|
$${ZAPRET_INITD} running && $${ZAPRET_INITD} stop >/dev/null 2>&1
|
|
fi
|
|
rm -f $${ZAPRET_CFG}
|
|
rm -f $${ZAPRET_INITD}
|
|
[ -d "$${ZAPRET_DIR}" ] && rm -rf $${ZAPRET_DIR}
|
|
echo "All files of the previously installed package have been removed!"
|
|
fi
|
|
if $${PKG_CHECK} zapret-mdig >/dev/null 2>&1; then
|
|
$${PKG_REMOVE} zapret-mdig
|
|
fi
|
|
if $${PKG_CHECK} zapret-ip2net >/dev/null 2>&1; then
|
|
$${PKG_REMOVE} zapret-ip2net
|
|
fi
|
|
if [ ! -d "$${ZAPRET_DIR}" ]; then
|
|
mkdir -p $${ZAPRET_DIR}
|
|
fi
|
|
if [ ! -f "/opt/zapret/ipset/zapret-hosts-google.txt" ]; then
|
|
if [ -f "/opt/zapret/ipset/zapret-hosts-user.txt" ]; then
|
|
CFGLISTHASH=$$( md5sum "/opt/zapret/ipset/zapret-hosts-user.txt" | awk '{print $$1;}' )
|
|
if [ "$${CFGLISTHASH}" = "79e35df62b0d1ae455d0a7e04c4cecac" ]; then
|
|
rm -f "/opt/zapret/ipset/zapret-hosts-user.txt"
|
|
fi
|
|
fi
|
|
fi
|
|
fi
|
|
exit 0
|
|
endef
|
|
|
|
define Package/$(PKG_NAME)/postinst
|
|
#!/bin/sh
|
|
# check if we are on real system
|
|
if [ -z "$${IPKG_INSTROOT}" ]; then
|
|
ZAPRET_DIR=/opt/zapret
|
|
ZAPRET_INITD=/etc/init.d/zapret
|
|
ZAPRET_CFG=/etc/config/zapret
|
|
ZAPRET_CONFIG=/opt/zapret/config
|
|
ZAPRET_CONFIG_DEF="/opt/zapret/config.default"
|
|
# Fix permissions
|
|
chmod 644 $${ZAPRET_CFG} >/dev/null 2>&1
|
|
chmod 644 $${ZAPRET_DIR}/ipset/*.txt >/dev/null 2>&1
|
|
chmod 644 $${ZAPRET_DIR}/ipset_def/*.txt >/dev/null 2>&1
|
|
chmod 644 $${ZAPRET_DIR}/init.d/openwrt/custom.d/*.sh >/dev/null 2>&1
|
|
chmod 644 $${ZAPRET_DIR}/config* >/dev/null 2>&1
|
|
# creating main config if its not exists
|
|
if [ ! -f "$${ZAPRET_CONFIG}" ]; then
|
|
cp -f "$${ZAPRET_CONFIG_DEF}" "$${ZAPRET_CONFIG}"
|
|
fi
|
|
# check obsolete format for main config
|
|
if grep -qE "^NFQWS_OPT_DESYNC=|^MODE_HTTP=|^MODE_HTTPS=|^MODE_QUIC=|^MODE=" "$${ZAPRET_CONFIG}" ; then
|
|
echo "Detect obsolute format for main config!"
|
|
ZAPRET_CONFIG_BACKUP="$${ZAPRET_CONFIG}.backup"
|
|
cp -f "$${ZAPRET_CONFIG}" "$${ZAPRET_CONFIG_BACKUP}"
|
|
echo "Current file $${ZAPRET_CONFIG} backuped to $${ZAPRET_CONFIG_BACKUP}"
|
|
cp -f "$${ZAPRET_CONFIG_DEF}" "$${ZAPRET_CONFIG}"
|
|
fi
|
|
# remove fake uci-config
|
|
[ -f "$${ZAPRET_CFG}" ] && [ ! -s "$${ZAPRET_CFG}" ] && rm -f "$${ZAPRET_CFG}"
|
|
# check existing uci-config
|
|
[ -f "$${ZAPRET_CFG}" ] && ZAPRET_CFG_EXISTS=1 || ZAPRET_CFG_EXISTS=0
|
|
# create or merge uci-config
|
|
/opt/zapret/uci-def-cfg.sh
|
|
[ "$${ZAPRET_CFG_EXISTS}" = "1" ] && echo "Config /etc/config/zapret merged with default uci-config"
|
|
# remove uci-default script from system dir (used into /etc/init.d/boot)
|
|
rm -f /etc/uci-defaults/zapret-uci-def-cfg.sh
|
|
# copy (sync) all params from uci-config to main config
|
|
/opt/zapret/sync_config.sh
|
|
# check main config
|
|
sh -n "$${ZAPRET_CONFIG}" 2>/dev/null || cp -f "$${ZAPRET_CONFIG_DEF}" "$${ZAPRET_CONFIG}"
|
|
sh -n "$${ZAPRET_CONFIG}" 2>/dev/null || exit 58
|
|
# enable main service
|
|
$${ZAPRET_INITD} enable
|
|
# stop all
|
|
$${ZAPRET_INITD} stop_fw >/dev/null 2>&1
|
|
$${ZAPRET_INITD} stop_daemons >/dev/null 2>&1
|
|
ps w | grep '/opt/zapret/nfq/nfqws' | grep -v grep | awk '{print $$1}' | xargs -r kill -9
|
|
# start main service
|
|
$${ZAPRET_INITD} start
|
|
# restart firewall
|
|
[ -x /sbin/fw4 ] && fw4 -q restart || fw3 -q restart
|
|
fi
|
|
exit 0
|
|
endef
|
|
|
|
define Package/$(PKG_NAME)/prerm
|
|
#!/bin/sh
|
|
# check if we are on real system
|
|
if [ -z "$${IPKG_INSTROOT}" ]; then
|
|
ZAPRET_DIR=/opt/zapret
|
|
ZAPRET_BASE=/opt/zapret
|
|
ZAPRET_INITD=/etc/init.d/zapret
|
|
ZAPRET_CFG=/etc/config/zapret
|
|
ZAPRET_CONFIG=/opt/zapret/config
|
|
ZAPRET_CONFIG_DEF="/opt/zapret/config.default"
|
|
OPENWRT_FW_INCLUDE=/etc/firewall.zapret
|
|
# check main config
|
|
sh -n "$${ZAPRET_CONFIG}" 2>/dev/null || cp -f "$${ZAPRET_CONFIG_DEF}" "$${ZAPRET_CONFIG}"
|
|
if ! sh -n "$${ZAPRET_CONFIG}" 2>/dev/null ; then
|
|
ps w | grep '/opt/zapret/nfq/nfqws' | grep -v grep | awk '{print $$1}' | xargs -r kill -9
|
|
exit 0
|
|
fi
|
|
. "$${ZAPRET_CONFIG}"
|
|
. "$${ZAPRET_BASE}/common/base.sh"
|
|
. "$${ZAPRET_BASE}/common/fwtype.sh"
|
|
. "$${ZAPRET_BASE}/common/nft.sh"
|
|
. "$${ZAPRET_BASE}/common/installer.sh"
|
|
$${ZAPRET_INITD} running && $${ZAPRET_INITD} stop >/dev/null 2>&1
|
|
$${ZAPRET_INITD} disable >/dev/null 2>&1
|
|
ps w | grep '/opt/zapret/nfq/nfqws' | grep -v grep | awk '{print $$1}' | xargs -r kill -9
|
|
remove_openwrt_firewall
|
|
nft_del_table
|
|
restart_openwrt_firewall
|
|
fi
|
|
exit 0
|
|
endef
|
|
|
|
define Package/$(PKG_NAME)/postrm
|
|
#!/bin/sh
|
|
# check if we are on real system
|
|
if [ -z "$${IPKG_INSTROOT}" ]; then
|
|
rm -f /etc/config/zapret-opkg*
|
|
rm -f /etc/config/zapret.opkg*
|
|
rm -f /etc/config/zapret.apk*
|
|
[ -f "/opt/zapret/config" ] && cp -f /opt/zapret/config "/opt/zapret/config.backup"
|
|
#rm -rf /opt/zapret
|
|
#echo "Directory /opt/zapret removed!"
|
|
fi
|
|
exit 0
|
|
endef
|
|
|
|
$(eval $(call BuildPackage,$(PKG_NAME)))
|