mirror of
https://github.com/clash-verge-rev/clash-verge-rev.git
synced 2026-11-06 00:32:13 +08:00
fix(macos): preserve DNS and proxy state across network changes
This commit is contained in:
Tunglies
+50
-17
@@ -32,7 +32,9 @@ function is_valid_ip() {
|
||||
|
||||
# Prints one value of a SystemConfiguration dictionary, or nothing when the key is absent.
|
||||
function sc_value() {
|
||||
printf 'show %s\nquit\n' "$1" | scutil | sed -n "s/^ *$2 : //p"
|
||||
local dictionary
|
||||
dictionary=$(printf 'show %s\nquit\n' "$1" | scutil) || return 1
|
||||
sed -n "s/^ *$2 : //p" <<<"$dictionary"
|
||||
}
|
||||
|
||||
# Prints the service's DNS servers, or "empty" when none is set; fails on any other answer.
|
||||
@@ -50,31 +52,62 @@ function dns_of() {
|
||||
echo "$dns"
|
||||
}
|
||||
|
||||
[ $# -lt 1 ] && echo "Usage: $0 <IP address>" && exit 1
|
||||
! is_valid_ip "$1" && echo "$1 is not a valid IP address." && exit 1
|
||||
[ $# -lt 1 ] && echo "Usage: $0 <newline-separated DNS servers> [legacy state directory]" >&2 && exit 1
|
||||
dns_servers=()
|
||||
while read -r server; do
|
||||
! is_valid_ip "$server" && echo "$server is not a valid IP address." >&2 && exit 1
|
||||
dns_servers+=("$server")
|
||||
done <<<"$1"
|
||||
|
||||
# Backups are keyed by service ID, which survives renaming the service and renumbering its interface.
|
||||
service_id=$(sc_value State:/Network/Global/IPv4 PrimaryService)
|
||||
hardware_port=$(sc_value "Setup:/Network/Service/$service_id" UserDefinedName)
|
||||
[ -z "$hardware_port" ] && echo "No primary network service." && exit 1
|
||||
service_id=$(sc_value State:/Network/Global/IPv4 PrimaryService) || exit 1
|
||||
hardware_port=$(sc_value "Setup:/Network/Service/$service_id" UserDefinedName) || exit 1
|
||||
[ -z "$hardware_port" ] && echo "No primary network service; waiting for the network." >&2 && exit 75
|
||||
|
||||
original_dns=$(dns_of "$hardware_port") || { echo "Cannot read DNS servers of $hardware_port." >&2; exit 1; }
|
||||
|
||||
backup=".original_dns/$service_id"
|
||||
mkdir -p .original_dns || exit 1
|
||||
# Older releases kept a single backup for whichever service was primary.
|
||||
if [ -f .original_dns.txt ]; then
|
||||
if [ -f "$backup" ]; then
|
||||
rm -f .original_dns.txt || exit 1
|
||||
else
|
||||
mv .original_dns.txt "$backup" || exit 1
|
||||
# Key old single-slot backups before import so a later network switch cannot reassign them.
|
||||
for state_dir in "$PWD" "${2:-$PWD}"; do
|
||||
if [ -f "$state_dir/.original_dns.txt" ]; then
|
||||
mkdir -p "$state_dir/.original_dns" || exit 1
|
||||
if [ -f "$state_dir/.original_dns/$service_id" ]; then
|
||||
rm -f "$state_dir/.original_dns.txt" || exit 1
|
||||
else
|
||||
mv "$state_dir/.original_dns.txt" "$state_dir/.original_dns/$service_id" || exit 1
|
||||
fi
|
||||
fi
|
||||
done
|
||||
if [ ! -f "$backup" ] && [ -n "$2" ] && [ -f "$2/$backup" ]; then
|
||||
cp "$2/$backup" ".original_dns/.$service_id" || exit 1
|
||||
mv ".original_dns/.$service_id" "$backup" || exit 1
|
||||
fi
|
||||
backup_header='# clash-verge-dns-managed'
|
||||
function save_backup() {
|
||||
printf '%s\n%s\n' "$backup_header" "$1" >".original_dns/.$service_id" &&
|
||||
mv ".original_dns/.$service_id" "$backup"
|
||||
}
|
||||
|
||||
saved_dns=
|
||||
legacy_backup=false
|
||||
if [ -f "$backup" ]; then
|
||||
saved_dns=$(cat "$backup") || exit 1
|
||||
case "$saved_dns" in
|
||||
"$backup_header"$'\n'*) saved_dns=${saved_dns#*$'\n'} ;;
|
||||
*) legacy_backup=true ;;
|
||||
esac
|
||||
fi
|
||||
# The placeholder is ours, not the user's: keep the backup taken before it was applied.
|
||||
if [ "$original_dns" != "$1" ]; then
|
||||
echo "$original_dns" >"$backup" || exit 1
|
||||
networksetup -setdnsservers "$hardware_port" "$1"
|
||||
# Only an unmarked historical backup owns the old single-address placeholder.
|
||||
if [ "$original_dns" != "114.114.114.114" ] || [ "$legacy_backup" != true ]; then
|
||||
save_backup "$original_dns" || exit 1
|
||||
legacy_backup=false
|
||||
fi
|
||||
networksetup -setdnsservers "$hardware_port" "${dns_servers[@]}"
|
||||
[ "$(dns_of "$hardware_port")" = "$1" ] || { echo "Failed to set DNS for $hardware_port." >&2; exit 1; }
|
||||
elif [ ! -f "$backup" ]; then
|
||||
echo "empty" >"$backup" || exit 1
|
||||
fi
|
||||
# Keep legacy ownership until the new list is verified, including a retry after a failed marker write.
|
||||
if [ "$legacy_backup" = true ]; then
|
||||
save_backup "$saved_dns" || exit 1
|
||||
fi
|
||||
|
||||
+64
-35
@@ -1,9 +1,11 @@
|
||||
#!/bin/bash
|
||||
[ $# -lt 1 ] && echo "Usage: $0 <placeholder IP address>" && exit 1
|
||||
[ $# -lt 1 ] && echo "Usage: $0 <newline-separated DNS servers> [legacy state directory]" >&2 && exit 1
|
||||
|
||||
# Prints one value of a SystemConfiguration dictionary, or nothing when the key is absent.
|
||||
function sc_value() {
|
||||
printf 'show %s\nquit\n' "$1" | scutil | sed -n "s/^ *$2 : //p"
|
||||
local dictionary
|
||||
dictionary=$(printf 'show %s\nquit\n' "$1" | scutil) || return 1
|
||||
sed -n "s/^ *$2 : //p" <<<"$dictionary"
|
||||
}
|
||||
|
||||
# Prints the service's DNS servers, or "empty" when none is set; fails on any other answer.
|
||||
@@ -21,42 +23,69 @@ function dns_of() {
|
||||
echo "$dns"
|
||||
}
|
||||
|
||||
result=0
|
||||
# Older releases kept a single backup for whichever service was primary.
|
||||
if [ -f .original_dns.txt ]; then
|
||||
service_id=$(sc_value State:/Network/Global/IPv4 PrimaryService)
|
||||
if [ -z "$service_id" ] || ! mkdir -p .original_dns; then
|
||||
result=1
|
||||
elif [ -f ".original_dns/$service_id" ]; then
|
||||
rm -f .original_dns.txt || result=1
|
||||
elif ! mv .original_dns.txt ".original_dns/$service_id"; then
|
||||
result=1
|
||||
fi
|
||||
fi
|
||||
backup_header='# clash-verge-dns-managed'
|
||||
completed_backups=()
|
||||
|
||||
for backup in .original_dns/*; do
|
||||
[ -f "$backup" ] || continue
|
||||
hardware_port=$(sc_value "Setup:/Network/Service/${backup##*/}" UserDefinedName)
|
||||
# Kept for a service that is gone: there is nothing to write it back to.
|
||||
[ -n "$hardware_port" ] || continue
|
||||
if ! current_dns=$(dns_of "$hardware_port"); then
|
||||
echo "Cannot read DNS servers of $hardware_port." >&2
|
||||
result=1
|
||||
continue
|
||||
function restore_dns() {
|
||||
local result=0
|
||||
# Older releases kept a single backup for whichever service was primary.
|
||||
if [ -f .original_dns.txt ]; then
|
||||
service_id=$(sc_value State:/Network/Global/IPv4 PrimaryService)
|
||||
if [ -z "$service_id" ] || ! mkdir -p .original_dns; then
|
||||
result=1
|
||||
elif [ -f ".original_dns/$service_id" ]; then
|
||||
rm -f .original_dns.txt || result=1
|
||||
elif ! mv .original_dns.txt ".original_dns/$service_id"; then
|
||||
result=1
|
||||
fi
|
||||
fi
|
||||
# A service no longer on the placeholder was changed by someone else, and that change stands.
|
||||
if [ "$current_dns" = "$1" ]; then
|
||||
original_dns=$(cat "$backup") || { result=1; continue; }
|
||||
# Older releases could back up the placeholder itself.
|
||||
[ "$original_dns" = "$1" ] && original_dns=empty
|
||||
networksetup -setdnsservers "$hardware_port" $original_dns
|
||||
if [ "$(dns_of "$hardware_port")" != "$original_dns" ]; then
|
||||
echo "Failed to restore DNS for $hardware_port." >&2
|
||||
|
||||
for backup in .original_dns/*; do
|
||||
[ -f "$backup" ] || continue
|
||||
# Current backups take precedence even after their DNS has already been restored.
|
||||
if [ "$PWD" != "$state_dir" ] && [ -f "$state_dir/$backup" ]; then
|
||||
completed_backups+=("$PWD/$backup")
|
||||
continue
|
||||
fi
|
||||
hardware_port=$(sc_value "Setup:/Network/Service/${backup##*/}" UserDefinedName) || { result=1; continue; }
|
||||
# Kept for a service that is gone: there is nothing to write it back to.
|
||||
[ -n "$hardware_port" ] || continue
|
||||
if ! current_dns=$(dns_of "$hardware_port"); then
|
||||
echo "Cannot read DNS servers of $hardware_port." >&2
|
||||
result=1
|
||||
continue
|
||||
fi
|
||||
fi
|
||||
rm -f "$backup" || result=1
|
||||
done
|
||||
rmdir .original_dns 2>/dev/null
|
||||
original_dns=$(cat "$backup") || { result=1; continue; }
|
||||
legacy_backup=false
|
||||
case "$original_dns" in
|
||||
"$backup_header"$'\n'*) original_dns=${original_dns#*$'\n'} ;;
|
||||
*) legacy_backup=true ;;
|
||||
esac
|
||||
# A service no longer on its recorded placeholder was changed by someone else.
|
||||
if [ "$current_dns" = "$1" ] || { [ "$legacy_backup" = true ] && [ "$current_dns" = "114.114.114.114" ]; }; then
|
||||
networksetup -setdnsservers "$hardware_port" $original_dns
|
||||
if [ "$(dns_of "$hardware_port")" != "$original_dns" ]; then
|
||||
echo "Failed to restore DNS for $hardware_port." >&2
|
||||
result=1
|
||||
continue
|
||||
fi
|
||||
fi
|
||||
completed_backups+=("$PWD/$backup")
|
||||
done
|
||||
return $result
|
||||
}
|
||||
|
||||
result=0
|
||||
state_dir=$PWD
|
||||
restore_dns "$1" || result=1
|
||||
if [ -n "$2" ] && [ "$2" != "$PWD" ]; then
|
||||
{ cd "$2" && restore_dns "$1"; } || result=1
|
||||
fi
|
||||
# Remove superseded legacy backups first; a cleanup failure must leave current authority intact.
|
||||
if [ "$result" -eq 0 ]; then
|
||||
for ((index=${#completed_backups[@]}-1; index>=0; index--)); do
|
||||
rm -f "${completed_backups[index]}" || { result=1; break; }
|
||||
done
|
||||
fi
|
||||
rmdir "$state_dir/.original_dns" "${2:-$state_dir}/.original_dns" 2>/dev/null
|
||||
exit $result
|
||||
|
||||
Reference in New Issue
Block a user