HH-690: add single-container Mihomo lifecycle
Docker image / Test (pull_request) Failing after 8m20s
Docker image / Build and publish (pull_request) Skipped

Co-authored-by: multica-agent <github@multica.ai>
This commit is contained in:
2026-08-26 13:19:22 +08:00
co-authored by multica-agent
parent 48f44a0004
commit 0814e80aa4
17 changed files with 714 additions and 1972 deletions
+14 -52
View File
@@ -6,7 +6,6 @@ import (
"log"
"os"
"os/signal"
"path/filepath"
"syscall"
"time"
@@ -14,12 +13,8 @@ import (
)
const (
defaultRoot = "/opt/clash"
defaultSSClashTemp = "/tmp/ssclash"
defaultCoreSource = "/usr/local/lib/ssclash/clash"
defaultConfigSource = "/usr/local/share/ssclash/config.yaml"
ssclashBinary = "/usr/local/bin/ssclash"
defaultRuntimeDir = "/dev/shm/mohomo"
defaultCoreSource = "/usr/local/bin/mihomo"
defaultConfigSource = "/usr/local/share/mihomo/config.yaml"
defaultSecretPath = "/run/secrets/subscription"
defaultDataDir = "/data"
)
@@ -43,56 +38,23 @@ func main() {
if len(os.Args) != 1 {
log.Fatal("bootstrap: usage: bootstrap [candidate]")
}
root := envOrDefault("SSCLASH_ROOT", defaultRoot)
log.Printf("bootstrap: preparing persistent runtime root=%s", root)
result, err := bootstrap.Prepare(bootstrap.Config{
Root: root,
SSClashTemp: envOrDefault("SSCLASH_TMP", defaultSSClashTemp),
CoreSource: defaultCoreSource,
ConfigSource: defaultConfigSource,
})
if err != nil {
log.Fatalf("bootstrap: runtime preparation failed: %v", err)
}
adminPasswordInitialized, err := bootstrap.EnsureAdminPassword(root, ssclashBinary, os.Getenv("SSCLASH_PASSWORD"))
if err != nil {
log.Fatalf("bootstrap: admin authentication setup failed: %v", err)
}
log.Printf(
"bootstrap: ready root=%s core_initialized=%t config_initialized=%t config_migrated=%t server_settings_changed=%t admin_password_initialized=%t",
root,
result.CoreInitialized,
result.ConfigInitialized,
result.ConfigMigrated,
result.ServerSettingsChanged,
adminPasswordInitialized,
)
subscriptionURL := os.Getenv("SUBSCRIPTION_URL")
if subscriptionURL == "" {
log.Fatal("bootstrap: SUBSCRIPTION_URL is required")
}
ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM)
defer stop()
err = bootstrap.Run(ctx, bootstrap.RuntimeConfig{
Root: root,
CoreBinary: filepath.Join(root, "bin", "clash"),
SSClashBinary: ssclashBinary,
ConfigSource: filepath.Join(root, "config.yaml"),
RuntimeDir: defaultRuntimeDir,
SubscriptionURL: subscriptionURL,
UpdateInterval: time.Hour,
trigger := make(chan os.Signal, 1)
signal.Notify(trigger, syscall.SIGHUP)
defer signal.Stop(trigger)
err := bootstrap.Run(ctx, bootstrap.LifecycleConfig{
Candidate: bootstrap.CandidateConfig{
SecretPath: defaultSecretPath,
DataDir: defaultDataDir,
TemplatePath: defaultConfigSource,
MihomoBinary: defaultCoreSource,
},
UpdateInterval: time.Hour,
Trigger: trigger,
})
if err != nil && !errors.Is(err, context.Canceled) {
log.Fatalf("bootstrap: service failed: %v", err)
}
}
func envOrDefault(key, fallback string) string {
if value := os.Getenv(key); value != "" {
return value
}
return fallback
}