Compare commits
118 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
630e9be8e6 | ||
|
|
b3398d2341 | ||
|
|
7aabc6ffcd | ||
|
|
17b6db1acc | ||
|
|
a6e8bb3c87 | ||
|
|
50b4c1036e | ||
|
|
5e4e7eead0 | ||
|
|
37ba5451aa | ||
|
|
e07ec52d34 | ||
|
|
bf73ab201b | ||
|
|
ae7943de83 | ||
|
|
3b42f1c5fb | ||
|
|
7b273f0464 | ||
|
|
5033270988 | ||
|
|
063cd7785f | ||
|
|
b628eaadd2 | ||
|
|
4d32f80f8b | ||
|
|
e576f75398 | ||
|
|
c7eba4be0c | ||
|
|
78a2720c82 | ||
|
|
9cc32db4d2 | ||
|
|
4f3f8b5e40 | ||
|
|
68e9f1f5c2 | ||
|
|
a46286d886 | ||
|
|
e44ea1504b | ||
|
|
57f2724d69 | ||
|
|
672c225645 | ||
|
|
ad036099ce | ||
|
|
723969a497 | ||
|
|
ae84c4ecde | ||
|
|
54c562f054 | ||
|
|
ddb8fe368e | ||
|
|
e4138453e1 | ||
|
|
db0273d518 | ||
|
|
c4cada441a | ||
|
|
89ea52c7df | ||
|
|
0670bf0818 | ||
|
|
ea433daaf8 | ||
|
|
18fd42ae68 | ||
|
|
2e1198189c | ||
|
|
b8f382bc34 | ||
|
|
e7a8f2bffb | ||
|
|
79a24e44eb | ||
|
|
d546633361 | ||
|
|
d5701f354c | ||
|
|
d90a121e42 | ||
|
|
a7af632dc5 | ||
|
|
21147e34f2 | ||
|
|
63f495d811 | ||
|
|
0b3d6862ad | ||
|
|
399cc879ed | ||
|
|
a5601a7320 | ||
|
|
067327e43e | ||
|
|
2b6ed9e615 | ||
|
|
2750b4502c | ||
|
|
30c069ac9e | ||
|
|
22fefaf3f4 | ||
|
|
dc5e2e0ac8 | ||
|
|
1f552fcd84 | ||
|
|
73c149696f | ||
|
|
8955a366fb | ||
|
|
eb5926ac6f | ||
|
|
5bfb3ce1d0 | ||
|
|
99573e837d | ||
|
|
b797695ea3 | ||
|
|
01aa897fda | ||
|
|
c80e3ddcb4 | ||
|
|
312a340f1f | ||
|
|
93429aa0d9 | ||
|
|
0d4e77dc05 | ||
|
|
ef8acaa55b | ||
|
|
20c4031ae6 | ||
|
|
fd52dcf9ec | ||
|
|
8eaa652e3c | ||
|
|
1f76f9ea4c | ||
|
|
b782e4bd65 | ||
|
|
2e6862590e | ||
|
|
7b6f03adc5 | ||
|
|
a9b8746917 | ||
|
|
3a6289c70a | ||
|
|
68a45aeae2 | ||
|
|
ecf7d9b5ea | ||
|
|
74a89f9af6 | ||
|
|
d95c1523f1 | ||
|
|
b7ef8c8304 | ||
|
|
c8ca24f00f | ||
|
|
6014d957f4 | ||
|
|
f9d2554725 | ||
|
|
fbdba025ba | ||
|
|
e01697e0bf | ||
|
|
1bc1d82048 | ||
|
|
cdc8f8df65 | ||
|
|
dcfa022145 | ||
|
|
ab2e4463b6 | ||
|
|
43a30fddb0 | ||
|
|
d0dc0620f9 | ||
|
|
55783f7975 | ||
|
|
81e4c63ceb | ||
|
|
c756852094 | ||
|
|
b7ee8aaa1a | ||
|
|
1a5647bd98 | ||
|
|
60709c4fd6 | ||
|
|
91f4eed086 | ||
|
|
497ed531f3 | ||
|
|
3bde30196c | ||
|
|
8991f41f0b | ||
|
|
dc20f46a94 | ||
|
|
447f7990ae | ||
|
|
969c4fb369 | ||
|
|
bbf8ed23e3 | ||
|
|
7039d76825 | ||
|
|
5e9340c741 | ||
|
|
ac2cfdeafd | ||
|
|
e728aec84c | ||
|
|
1d9971b387 | ||
|
|
1cfb6dba3d | ||
|
|
ba0ffe3cd7 | ||
|
|
7cf469dc0c |
246
.github/workflows/build_docker.yml
vendored
Normal file
@ -0,0 +1,246 @@
|
||||
name: Build CHR Docker
|
||||
on:
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
version:
|
||||
description: "Specify version (e.g., 7.19.2), empty for latest"
|
||||
required: false
|
||||
default: ''
|
||||
type: string
|
||||
|
||||
permissions:
|
||||
packages: write
|
||||
jobs:
|
||||
Prepare:
|
||||
runs-on: ubuntu-24.04
|
||||
outputs:
|
||||
MATRIX: ${{ steps.get_versions.outputs.MATRIX }}
|
||||
steps:
|
||||
- name: Get versions and generate matrix
|
||||
id: get_versions
|
||||
run: |
|
||||
VERSION="${{ inputs.version }}"
|
||||
if [ -n "$VERSION" ]; then
|
||||
MATRIX=$(jq -c -n '
|
||||
[
|
||||
{ "version": $VERSION, "channel": ""}
|
||||
]
|
||||
' --arg VERSION "$VERSION")
|
||||
else
|
||||
TIMESTAMP=$(date +%s)
|
||||
LONG_TERM=$(wget -nv -O - "https://upgrade.mikrotik.ltd/routeros/NEWESTa7.long-term?t=$TIMESTAMP" | cut -d ' ' -f1)
|
||||
STABLE=$(wget -nv -O - "https://upgrade.mikrotik.ltd/routeros/NEWESTa7.stable?t=$TIMESTAMP" | cut -d ' ' -f1)
|
||||
|
||||
echo "Long-term version: $LONG_TERM"
|
||||
echo "Stable version: $STABLE"
|
||||
if [ -z "$LONG_TERM" ]; then
|
||||
echo "Failed to get long-term version"
|
||||
exit 1
|
||||
fi
|
||||
if [ -z "$STABLE" ]; then
|
||||
echo "Failed to get stable version"
|
||||
exit 1
|
||||
fi
|
||||
MATRIX=$(jq -c -n '
|
||||
[
|
||||
{version: $LONG_TERM, channel: "long-term"},
|
||||
{version: $STABLE, channel: "stable"}
|
||||
]
|
||||
' --arg LONG_TERM "$LONG_TERM" --arg STABLE "$STABLE")
|
||||
fi
|
||||
echo "Generated matrix: $MATRIX"
|
||||
echo "MATRIX=$MATRIX" >> $GITHUB_OUTPUT
|
||||
|
||||
Build:
|
||||
runs-on: ubuntu-24.04
|
||||
needs: Prepare
|
||||
strategy:
|
||||
max-parallel: 1
|
||||
matrix:
|
||||
include: ${{ fromJson(needs.Prepare.outputs.MATRIX) }}
|
||||
env:
|
||||
TZ: 'Asia/Shanghai'
|
||||
VERSION: ${{ matrix.version }}
|
||||
CHANNEL: ${{ matrix.channel }}
|
||||
IMAGE: "ghcr.io/${{ github.repository_owner }}/chr"
|
||||
DOCKER_BUILD_SUMMARY: 'false'
|
||||
DOCKER_BUILD_RECORD_UPLOAD: 'false'
|
||||
|
||||
steps:
|
||||
- name: Show build info
|
||||
run: |
|
||||
echo "Version: ${{ env.VERSION }}"
|
||||
echo "Channel: ${{ env.CHANNEL }}"
|
||||
|
||||
- name: Download CHR image
|
||||
run: |
|
||||
# x86 架构
|
||||
mkdir -p "amd64"
|
||||
wget -nv -O "amd64/chr-$VERSION.img.zip" \
|
||||
"https://github.com/elseif/MikroTikPatch/releases/download/$VERSION/chr-$VERSION.img.zip"
|
||||
unzip "amd64/chr-$VERSION.img.zip" -d "amd64/"
|
||||
rm "amd64/chr-$VERSION.img.zip"
|
||||
|
||||
# arm64 架构
|
||||
mkdir -p "arm64"
|
||||
wget -nv -O "arm64/chr-$VERSION-arm64.img.zip" \
|
||||
"https://github.com/elseif/MikroTikPatch/releases/download/$VERSION-arm64/chr-$VERSION-arm64.img.zip"
|
||||
unzip "arm64/chr-$VERSION-arm64.img.zip" -d "arm64/"
|
||||
rm "arm64/chr-$VERSION-arm64.img.zip"
|
||||
|
||||
ls -la amd64/ arm64/
|
||||
|
||||
- name: Create start.sh
|
||||
run: |
|
||||
cat <<'EOF' > start.sh
|
||||
#!/bin/sh
|
||||
set -e
|
||||
|
||||
MEM="${MEM:=512m}"
|
||||
DISK="${DISK:=128M}"
|
||||
CPUS="${CPUS:=1}"
|
||||
bridge_index=0
|
||||
|
||||
get_mac_address() {
|
||||
ifname="$1"
|
||||
ip link show "$ifname" 2>/dev/null | awk '/link\/ether/ {print $2}'
|
||||
}
|
||||
|
||||
increment_mac() {
|
||||
mac=$1
|
||||
mac_no_colons=$(echo "$mac" | tr -d ':' | tr '[:lower:]' '[:upper:]')
|
||||
mac_dec=$((16#${mac_no_colons}))
|
||||
mac_dec=$((mac_dec + 1))
|
||||
mac_hex=$(printf "%012X" "$mac_dec")
|
||||
echo "$mac_hex" | sed 's/.\{2\}/&:/g;s/:$//'
|
||||
}
|
||||
|
||||
echo "" > /etc/qemu/bridge.conf
|
||||
|
||||
qemu="qemu-system-x86_64"
|
||||
if [[ `uname -m` == "aarch64" ]]; then
|
||||
qemu="qemu-system-aarch64 -pflash /usr/share/qemu/edk2-aarch64-code.fd -M virt"
|
||||
fi
|
||||
|
||||
if [ -e /dev/kvm ]; then
|
||||
qemu="$qemu -enable-kvm -cpu host"
|
||||
else
|
||||
if [[ `uname -m` == "aarch64" ]]; then
|
||||
qemu="$qemu -cpu cortex-a57"
|
||||
fi
|
||||
fi
|
||||
|
||||
img=`ls /diskimage/*.img`
|
||||
qemu="$qemu -nographic -m $MEM -smp cpus=$CPUS -drive file=$img,format=raw"
|
||||
truncate -s $DISK $img
|
||||
|
||||
while read -r line; do
|
||||
iface=$(echo "$line" | sed "s/ *\([a-z0-9]*\):.*/\1/")
|
||||
if [[ "$iface" =~ " " ]]; then
|
||||
continue
|
||||
fi
|
||||
if [[ "$iface" =~ ^br ]]; then
|
||||
continue
|
||||
fi
|
||||
if [[ "$iface" == "lo" ]]; then
|
||||
continue
|
||||
fi
|
||||
if [[ "$iface" == "" ]]; then
|
||||
continue
|
||||
fi
|
||||
echo "iface: $iface"
|
||||
bridge="br$bridge_index"
|
||||
ip link add name "$bridge" type bridge
|
||||
ip link set dev "$bridge" up
|
||||
ip link set "$iface" master "$bridge"
|
||||
echo "allow $bridge" >> /etc/qemu/bridge.conf
|
||||
|
||||
veth_mac=$(get_mac_address "$iface")
|
||||
tap_mac=$(increment_mac "$veth_mac")
|
||||
|
||||
bridge_index=$((bridge_index + 1))
|
||||
qemu="$qemu -netdev bridge,id=$bridge,br=$bridge -device virtio-net,netdev=$bridge,mac=$tap_mac "
|
||||
done < /proc/net/dev
|
||||
|
||||
echo "qemu: $qemu"
|
||||
exec $qemu
|
||||
EOF
|
||||
chmod +x start.sh
|
||||
|
||||
|
||||
- name: Create Dockerfile
|
||||
run: |
|
||||
cat > Dockerfile << 'EOF'
|
||||
FROM alpine:latest
|
||||
ARG TARGETARCH
|
||||
ARG VERSION
|
||||
RUN case "$TARGETARCH" in \
|
||||
amd64) apk add --no-cache qemu-system-x86_64 ;; \
|
||||
arm64) apk add --no-cache qemu-system-aarch64 ;; \
|
||||
esac \
|
||||
&& rm -rf /var/cache/apk/*
|
||||
RUN mkdir -p /diskimage
|
||||
COPY ${TARGETARCH}/*.img /diskimage/
|
||||
COPY start.sh /start.sh
|
||||
ENTRYPOINT ["/start.sh"]
|
||||
EOF
|
||||
|
||||
- name: Log in to GitHub Container Registry
|
||||
uses: docker/login-action@v4
|
||||
with:
|
||||
registry: ghcr.io
|
||||
username: ${{ github.actor }}
|
||||
password: ${{ secrets.GITHUB_TOKEN }}
|
||||
|
||||
- name: Set up QEMU
|
||||
uses: docker/setup-qemu-action@v4
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v4
|
||||
|
||||
- name: Build and Push
|
||||
uses: docker/build-push-action@v7
|
||||
with:
|
||||
context: .
|
||||
platforms: linux/amd64,linux/arm64
|
||||
push: true
|
||||
tags: ${{ env.IMAGE }}:${{ env.VERSION }}
|
||||
build-args: VERSION=${{ env.VERSION }}
|
||||
cache-from: type=gha
|
||||
cache-to: type=gha,mode=max
|
||||
provenance: false
|
||||
sbom: false
|
||||
outputs: >
|
||||
type=image,
|
||||
annotation-index.org.opencontainers.image.title=MikroTik CHR RouterOS,
|
||||
annotation-index.org.opencontainers.image.description=MikroTik CHR (Cloud Hosted Router) running on QEMU with Docker,
|
||||
annotation-index.org.opencontainers.image.version=${{ env.VERSION }},
|
||||
annotation-index.org.opencontainers.image.url=https://mikrotik.ltd
|
||||
|
||||
- name: Update channel tags
|
||||
if: env.CHANNEL != ''
|
||||
run: |
|
||||
TAGS="-t ${{ env.IMAGE }}:${{ env.CHANNEL }}"
|
||||
if [ "${{ env.CHANNEL }}" = "stable" ]; then
|
||||
TAGS="$TAGS -t ${{ env.IMAGE }}:latest"
|
||||
fi
|
||||
echo "Creating tags: $TAGS"
|
||||
docker buildx imagetools create $TAGS ${{ env.IMAGE }}:${{ env.VERSION }}
|
||||
|
||||
- name: Save Docker Image as tar
|
||||
run: |
|
||||
mkdir -p artifacts
|
||||
echo "Exporting amd64 tar..."
|
||||
docker pull --platform linux/amd64 ${{ env.IMAGE }}:${{ env.VERSION }}
|
||||
docker save ${{ env.IMAGE }}:${{ env.VERSION }} -o artifacts/chr-${{ env.VERSION }}-amd64.tar
|
||||
echo "Exporting arm64 tar..."
|
||||
docker pull --platform linux/arm64 ${{ env.IMAGE }}:${{ env.VERSION }}
|
||||
docker save ${{ env.IMAGE }}:${{ env.VERSION }} -o artifacts/chr-${{ env.VERSION }}-arm64.tar
|
||||
ls -lh artifacts/
|
||||
|
||||
- name: Upload tar artifact
|
||||
uses: actions/upload-artifact@v7
|
||||
with:
|
||||
name: chr-${{ env.VERSION }}-docker-images
|
||||
path: artifacts/
|
||||
retention-days: 30
|
||||
76
.github/workflows/main.yml
vendored
Normal file
@ -0,0 +1,76 @@
|
||||
|
||||
name: Patch Mikrotik RouterOS
|
||||
on:
|
||||
schedule:
|
||||
- cron: "00 10 * * *" # At UTC 10:00 (Beijing 18:00) on every day
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
version:
|
||||
description: 'Select Version (v6/v7/all)'
|
||||
required: true
|
||||
default: 'all'
|
||||
type: choice
|
||||
options:
|
||||
- all
|
||||
- v6
|
||||
- v7
|
||||
jobs:
|
||||
Patch_Stable_V7:
|
||||
if: |
|
||||
(github.event_name == 'schedule') ||
|
||||
(github.event_name == 'workflow_dispatch' && (github.event.inputs.version == 'all' || github.event.inputs.version == 'v7'))
|
||||
uses: ./.github/workflows/patch_v7.yml
|
||||
with:
|
||||
channel: stable
|
||||
release: true
|
||||
secrets: inherit
|
||||
|
||||
Patch_LongTerm_V7:
|
||||
if: |
|
||||
(github.event_name == 'schedule') ||
|
||||
(github.event_name == 'workflow_dispatch' && (github.event.inputs.version == 'all' || github.event.inputs.version == 'v7'))
|
||||
uses: ./.github/workflows/patch_v7.yml
|
||||
with:
|
||||
channel: long-term
|
||||
release: true
|
||||
secrets: inherit
|
||||
|
||||
Patch_Testing_V7:
|
||||
if: |
|
||||
(github.event_name == 'schedule') ||
|
||||
(github.event_name == 'workflow_dispatch' && (github.event.inputs.version == 'all' || github.event.inputs.version == 'v7'))
|
||||
uses: ./.github/workflows/patch_v7.yml
|
||||
with:
|
||||
channel: testing
|
||||
release: true
|
||||
secrets: inherit
|
||||
|
||||
Patch_Development_V7:
|
||||
if: |
|
||||
(github.event_name == 'schedule') ||
|
||||
(github.event_name == 'workflow_dispatch' && (github.event.inputs.version == 'all' || github.event.inputs.version == 'v7'))
|
||||
uses: ./.github/workflows/patch_v7.yml
|
||||
with:
|
||||
channel: development
|
||||
release: true
|
||||
secrets: inherit
|
||||
|
||||
Patch_Stable_V6:
|
||||
if: |
|
||||
(github.event_name == 'schedule') ||
|
||||
(github.event_name == 'workflow_dispatch' && (github.event.inputs.version == 'all' || github.event.inputs.version == 'v6'))
|
||||
uses: ./.github/workflows/patch_v6.yml
|
||||
with:
|
||||
channel: stable
|
||||
release: true
|
||||
secrets: inherit
|
||||
|
||||
Patch_LongTerm_V6:
|
||||
if: |
|
||||
(github.event_name == 'schedule') ||
|
||||
(github.event_name == 'workflow_dispatch' && (github.event.inputs.version == 'all' || github.event.inputs.version == 'v6'))
|
||||
uses: ./.github/workflows/patch_v6.yml
|
||||
with:
|
||||
channel: long-term
|
||||
release: true
|
||||
secrets: inherit
|
||||
425
.github/workflows/mikrotik_patch_6.yml
vendored
@ -1,425 +0,0 @@
|
||||
name: Patch Mikrotik RouterOS 6.x
|
||||
|
||||
on:
|
||||
# push:
|
||||
# branches: [ "main" ]
|
||||
# schedule:
|
||||
# - cron: "0 0 * * *"
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
channel:
|
||||
description: 'Channel (stable, long-term)'
|
||||
required: true
|
||||
default: 'stable'
|
||||
type: choice
|
||||
options:
|
||||
- stable
|
||||
- long-term
|
||||
version:
|
||||
description: "Specify version (e.g., 6.49.19), empty for latest"
|
||||
required: false
|
||||
default: ''
|
||||
type: string
|
||||
buildtime:
|
||||
description: "Custom build time, leave empty for now,when set specify version"
|
||||
required: false
|
||||
default: ''
|
||||
type: string
|
||||
release:
|
||||
description: "Release to GitHub & Upload "
|
||||
required: false
|
||||
default: false
|
||||
type: boolean
|
||||
permissions:
|
||||
contents: write
|
||||
|
||||
env:
|
||||
CUSTOM_LICENSE_PRIVATE_KEY: ${{ secrets.CUSTOM_LICENSE_PRIVATE_KEY }}
|
||||
CUSTOM_LICENSE_PUBLIC_KEY: ${{ secrets.CUSTOM_LICENSE_PUBLIC_KEY }}
|
||||
CUSTOM_NPK_SIGN_PRIVATE_KEY: ${{ secrets.CUSTOM_NPK_SIGN_PRIVATE_KEY }}
|
||||
CUSTOM_NPK_SIGN_PUBLIC_KEY: ${{ secrets.CUSTOM_NPK_SIGN_PUBLIC_KEY }}
|
||||
CUSTOM_CLOUD_PUBLIC_KEY: ${{ secrets.CUSTOM_CLOUD_PUBLIC_KEY }}
|
||||
MIKRO_LICENSE_PUBLIC_KEY: ${{ secrets.MIKRO_LICENSE_PUBLIC_KEY }}
|
||||
MIKRO_NPK_SIGN_PUBLIC_KEY: ${{ secrets.MIKRO_NPK_SIGN_PUBLIC_KEY }}
|
||||
MIKRO_CLOUD_PUBLIC_KEY: ${{ secrets.MIKRO_CLOUD_PUBLIC_KEY }}
|
||||
MIKRO_LICENCE_URL: ${{ secrets.MIKRO_LICENCE_URL }}
|
||||
CUSTOM_LICENCE_URL: ${{ secrets.CUSTOM_LICENCE_URL }}
|
||||
MIKRO_UPGRADE_URL: ${{ secrets.MIKRO_UPGRADE_URL }}
|
||||
CUSTOM_UPGRADE_URL: ${{ secrets.CUSTOM_UPGRADE_URL }}
|
||||
MIKRO_RENEW_URL: ${{ secrets.MIKRO_RENEW_URL }}
|
||||
CUSTOM_RENEW_URL: ${{ secrets.CUSTOM_RENEW_URL }}
|
||||
MIKRO_CLOUD_URL: ${{ secrets.MIKRO_CLOUD_URL }}
|
||||
CUSTOM_CLOUD_URL: ${{ secrets.CUSTOM_CLOUD_URL }}
|
||||
|
||||
jobs:
|
||||
Set_Variables:
|
||||
runs-on: ubuntu-22.04
|
||||
outputs:
|
||||
BUILD_TIME: ${{ steps.set_vars.outputs.BUILD_TIME }}
|
||||
RELEASE: ${{ steps.set_vars.outputs.RELEASE }}
|
||||
MATRIX_JSON: ${{ steps.set_vars.outputs.MATRIX_JSON }}
|
||||
steps:
|
||||
- name: Set variables
|
||||
id: set_vars
|
||||
run: |
|
||||
if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
|
||||
BUILD_TIME="${{ github.event.inputs.buildtime }}"
|
||||
RELEASE="${{ github.event.inputs.release }}"
|
||||
if [ -z "$BUILD_TIME" ]; then
|
||||
BUILD_TIME=$(date +'%s')
|
||||
fi
|
||||
if [ -z "$RELEASE" ]; then
|
||||
RELEASE=false
|
||||
fi
|
||||
ARCH="${{ github.event.inputs.arch }}"
|
||||
CHANNEL="${{ github.event.inputs.channel }}"
|
||||
MATRIX_JSON=$(jq -nc --arg arch "$ARCH" --arg channel "$CHANNEL" '[{arch: $arch, channel: $channel}]')
|
||||
else
|
||||
BUILD_TIME=$(date +'%s')
|
||||
RELEASE=true
|
||||
MATRIX_JSON='[{"arch":"x86","channel":"stable"},{"arch":"x86","channel":"long-term"}]'
|
||||
fi
|
||||
echo "BUILD_TIME=$BUILD_TIME" >> $GITHUB_OUTPUT
|
||||
echo "RELEASE=$RELEASE" >> $GITHUB_OUTPUT
|
||||
echo "MATRIX_JSON=$MATRIX_JSON" >> $GITHUB_OUTPUT
|
||||
echo "BUILD_TIME: $BUILD_TIME"
|
||||
echo "RELEASE: $RELEASE"
|
||||
echo "MATRIX_JSON: $MATRIX_JSON"
|
||||
|
||||
Patch_RouterOS:
|
||||
needs: Set_Variables
|
||||
runs-on: ubuntu-22.04
|
||||
strategy:
|
||||
matrix:
|
||||
include: ${{ fromJSON(needs.Set_Variables.outputs.MATRIX_JSON) }}
|
||||
env:
|
||||
TZ: 'Asia/Shanghai'
|
||||
BUILD_TIME: ${{ needs.Set_Variables.outputs.BUILD_TIME }}
|
||||
RELEASE: ${{ needs.Set_Variables.outputs.RELEASE }}
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Set up Python
|
||||
uses: actions/setup-python@v6
|
||||
with:
|
||||
python-version: '3.11'
|
||||
|
||||
- name: Get latest routeros version
|
||||
id: get_latest
|
||||
run: |
|
||||
echo $(uname -a)
|
||||
if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
|
||||
if [ -n "${{ github.event.inputs.version }}" ]; then
|
||||
LATEST_VERSION="${{ github.event.inputs.version }}"
|
||||
else
|
||||
read LATEST_VERSION BUILD_TIME <<< "$(wget -nv -O - "https://${{ env.MIKRO_UPGRADE_URL }}/routeros/NEWEST6.${{ matrix.channel }}")"
|
||||
fi
|
||||
else
|
||||
read LATEST_VERSION BUILD_TIME <<< "$(wget -nv -O - "https://${{ env.MIKRO_UPGRADE_URL }}/routeros/NEWEST6.${{ matrix.channel }}")"
|
||||
fi
|
||||
echo Build Time:$BUILD_TIME
|
||||
echo Latest Version:$LATEST_VERSION
|
||||
if [ "${{ github.event_name }}" == "schedule" ]; then
|
||||
_LATEST_VERSION=$(wget -nv -O - https://${{ env.CUSTOM_UPGRADE_URL }}/routeros/NEWEST6.${{ matrix.channel }} | cut -d ' ' -f1)
|
||||
if [ "$_LATEST_VERSION" == "$LATEST_VERSION" ]; then
|
||||
echo "No new version found"
|
||||
echo "has_new_version=false" >> $GITHUB_OUTPUT
|
||||
exit 0
|
||||
fi
|
||||
fi
|
||||
echo "has_new_version=true" >> $GITHUB_OUTPUT
|
||||
wget -nv -O CHANGELOG https://${{ env.MIKRO_UPGRADE_URL }}/routeros/$LATEST_VERSION/CHANGELOG
|
||||
cat CHANGELOG
|
||||
echo "LATEST_VERSION=${LATEST_VERSION}" >> $GITHUB_ENV
|
||||
echo "BUILD_TIME=${BUILD_TIME}" >> $GITHUB_ENV
|
||||
sudo apt-get update > /dev/null
|
||||
|
||||
- name: Get loader patch files
|
||||
if: steps.get_latest.outputs.has_new_version == 'true'
|
||||
run: |
|
||||
wget -nv -O loader.7z https://${{ env.CUSTOM_UPGRADE_URL }}/routeros/loader.7z
|
||||
sudo apt-get install -y p7zip-full > /dev/null
|
||||
7z x -p"${{ secrets.LOADER_7Z_PASSWORD }}" loader.7z >> /dev/null
|
||||
rm loader.7z
|
||||
|
||||
|
||||
- name: Create Squashfs for option and python3
|
||||
if: steps.get_latest.outputs.has_new_version == 'true'
|
||||
run: |
|
||||
sudo mkdir -p ./option-root/bin/
|
||||
sudo cp busybox/busybox_x86 ./option-root/bin/busybox
|
||||
sudo chmod +x ./option-root/bin/busybox
|
||||
sudo cp keygen/keygen_x86 ./option-root/bin/keygen
|
||||
sudo chmod +x ./option-root/bin/keygen
|
||||
sudo chmod +x ./busybox/busybox_x86
|
||||
COMMANDS=$(./busybox/busybox_x86 --list)
|
||||
for cmd in $COMMANDS; do
|
||||
sudo ln -sf /pckg/option/bin/busybox ./option-root/bin/$cmd
|
||||
done
|
||||
sudo mksquashfs option-root option.sfs -quiet -comp xz -no-xattrs -b 256k
|
||||
sudo rm -rf option-root
|
||||
sudo wget -O cpython.tar.gz -nv https://github.com/indygreg/python-build-standalone/releases/download/20250708/cpython-3.11.13+20250708-x86_64-unknown-linux-musl-install_only_stripped.tar.gz
|
||||
sudo tar -xf cpython.tar.gz
|
||||
sudo rm cpython.tar.gz
|
||||
sudo rm -rf ./python/include
|
||||
sudo rm -rf ./python/share
|
||||
sudo mksquashfs python python3.sfs -quiet -comp xz -no-xattrs -b 256k
|
||||
sudo rm -rf ./python
|
||||
|
||||
- name: Cache mikrotik-${{ env.LATEST_VERSION }}.iso
|
||||
if: steps.get_latest.outputs.has_new_version == 'true'
|
||||
id: cache-mikrotik
|
||||
uses: actions/cache@v4
|
||||
with:
|
||||
path: |
|
||||
mikrotik.iso
|
||||
key: mikrotik-${{ env.LATEST_VERSION }}
|
||||
|
||||
- name: Get mikrotik-${{ env.LATEST_VERSION }}.iso
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && steps.cache-mikrotik.outputs.cache-hit != 'true'
|
||||
run: |
|
||||
sudo wget -nv -O mikrotik.iso https://download.mikrotik.com/routeros/$LATEST_VERSION/mikrotik-$LATEST_VERSION.iso
|
||||
|
||||
|
||||
- name: Patch mikrotik-${{ env.LATEST_VERSION }}.iso
|
||||
if: steps.get_latest.outputs.has_new_version == 'true'
|
||||
run: |
|
||||
sudo apt-get install -y mkisofs xorriso > /dev/null
|
||||
sudo mkdir ./iso
|
||||
sudo mount -o loop,ro mikrotik.iso ./iso
|
||||
sudo mkdir ./new_iso
|
||||
sudo cp -r ./iso/* ./new_iso/
|
||||
sudo rsync -a ./iso/ ./new_iso/
|
||||
sudo umount ./iso
|
||||
sudo rm -rf ./iso
|
||||
sudo mv ./new_iso/system-$LATEST_VERSION.npk ./
|
||||
sudo -E python3 patch.py npk system-$LATEST_VERSION.npk
|
||||
NPK_FILES=$(find ./new_iso -type f -name "*.npk")
|
||||
if [ -z "$NPK_FILES" ]; then
|
||||
echo "No .npk files found in iso, downloading..."
|
||||
URL="https://download.mikrotik.com/routeros/$LATEST_VERSION/all_packages-${{ matrix.arch }}-$LATEST_VERSION.zip"
|
||||
TMP_ZIP="./all_packages.zip"
|
||||
sudo wget -nv -O "$TMP_ZIP" "$URL"
|
||||
sudo unzip -o "$TMP_ZIP" -d ./new_iso
|
||||
sudo rm -f "$TMP_ZIP"
|
||||
NPK_FILES=$(find ./new_iso -type f -name "*.npk")
|
||||
fi
|
||||
if [ -n "$NPK_FILES" ]; then
|
||||
for file in $NPK_FILES; do
|
||||
sudo -E python3 npk.py sign "$file" "$file"
|
||||
done
|
||||
fi
|
||||
sudo cp -f system-$LATEST_VERSION.npk ./new_iso/
|
||||
sudo -E python3 patch.py kernel ./new_iso/isolinux/initrd.rgz
|
||||
sudo -E python3 npk.py create ./new_iso/gps-$LATEST_VERSION.npk ./option-$LATEST_VERSION.npk option ./option.sfs -desc="busybox"
|
||||
sudo cp option-$LATEST_VERSION.npk ./new_iso/
|
||||
sudo mkisofs -o mikrotik-$LATEST_VERSION.iso \
|
||||
-V "MikroTik $LATEST_VERSION" \
|
||||
-sysid "" -preparer "MiKroTiK" \
|
||||
-publisher "" -A "MiKroTiK RouterOS" \
|
||||
-input-charset utf-8 \
|
||||
-b isolinux/isolinux.bin \
|
||||
-c isolinux/boot.cat \
|
||||
-no-emul-boot \
|
||||
-boot-load-size 4 \
|
||||
-boot-info-table \
|
||||
-R -J \
|
||||
./new_iso
|
||||
|
||||
sudo mkdir ./all_packages
|
||||
sudo cp ./new_iso/*.npk ./all_packages/
|
||||
sudo rm -rf ./new_iso
|
||||
|
||||
- name: Create install-image-${{ env.LATEST_VERSION }}.img
|
||||
if: steps.get_latest.outputs.has_new_version == 'true'
|
||||
run: |
|
||||
sudo modprobe nbd
|
||||
sudo apt-get update
|
||||
sudo apt-get install -y qemu-utils extlinux > /dev/null
|
||||
truncate --size 64M install-image-$LATEST_VERSION.img
|
||||
sudo qemu-nbd -c /dev/nbd0 -f raw install-image-$LATEST_VERSION.img
|
||||
sudo mkfs.vfat -n "Install" /dev/nbd0
|
||||
sudo mkdir ./install
|
||||
sudo mount /dev/nbd0 ./install
|
||||
sudo extlinux --install -H 64 -S 32 ./install/
|
||||
echo -e 'default system\nLABEL system\n\tKERNEL linux\n\tAPPEND load_ramdisk=1 initrd=initrd.rgz -hdd-install' \
|
||||
> syslinux.cfg
|
||||
sudo cp syslinux.cfg ./install/
|
||||
sudo rm syslinux.cfg
|
||||
NPK_FILES=($(find ./all_packages/*.npk))
|
||||
for ((i=1; i<=${#NPK_FILES[@]}; i++))
|
||||
do
|
||||
echo "${NPK_FILES[$i-1]}=>$i.npk"
|
||||
sudo cp ${NPK_FILES[$i-1]} ./install/$i.npk
|
||||
done
|
||||
sudo touch ./install/CHOOSE
|
||||
sudo touch ./install/autorun.scr
|
||||
sudo umount /dev/nbd0
|
||||
sudo qemu-nbd -d /dev/nbd0
|
||||
sudo rm -rf ./install
|
||||
sudo zip install-image-$LATEST_VERSION.zip ./install-image-$LATEST_VERSION.img
|
||||
sudo rm ./install-image-$LATEST_VERSION.img
|
||||
|
||||
- name: Cache chr-${{ env.LATEST_VERSION }}.img.zip
|
||||
if: steps.get_latest.outputs.has_new_version == 'true'
|
||||
id: cache-chr-img
|
||||
uses: actions/cache@v4
|
||||
with:
|
||||
path: |
|
||||
chr.img
|
||||
key: chr-${{ env.LATEST_VERSION }}.img
|
||||
|
||||
- name: Get chr-${{ env.LATEST_VERSION }}.img
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && steps.cache-chr-img.outputs.cache-hit != 'true'
|
||||
run: |
|
||||
sudo wget -nv -O chr.img.zip https://download.mikrotik.com/routeros/$LATEST_VERSION/chr-$LATEST_VERSION.img.zip
|
||||
sudo unzip chr.img.zip
|
||||
sudo rm chr.img.zip
|
||||
sudo mv chr-$LATEST_VERSION.img chr.img
|
||||
|
||||
- name: Create chr-${{ env.LATEST_VERSION }}.img
|
||||
if: steps.get_latest.outputs.has_new_version == 'true'
|
||||
run: |
|
||||
sudo modprobe nbd
|
||||
sudo apt-get install -y qemu-utils extlinux > /dev/null
|
||||
sudo mkdir ./chr
|
||||
sudo cp chr.img chr-$LATEST_VERSION.img
|
||||
sudo qemu-nbd -c /dev/nbd0 -f raw chr-$LATEST_VERSION.img
|
||||
sudo -E python3 patch.py block /dev/nbd0p1 boot/initrd.rgz
|
||||
sudo mount /dev/nbd0p1 ./chr
|
||||
sudo cp ./all_packages/dude-$LATEST_VERSION.npk ./chr/var/pdb/dude/image
|
||||
sudo -E python3 patch.py npk ./chr/var/pdb/routeros-x86/image
|
||||
sudo cp ./chr/var/pdb/routeros-x86/image ./all_packages/routeros-x86-$LATEST_VERSION.npk
|
||||
sudo mkdir -p ./chr/var/pdb/option
|
||||
sudo cp ./all_packages/option-$LATEST_VERSION.npk ./chr/var/pdb/option/image
|
||||
sudo mkdir -p ./chr/rw/disk
|
||||
echo -e '#!/bin/sh\n# This script will be executed *before* RouterOS *loader* start.\n# You can put your own initialization stuff in here\n' | sudo tee ./chr/rw/disk/rc.local
|
||||
sudo umount ./chr
|
||||
sudo qemu-nbd -d /dev/nbd0
|
||||
sudo rm -rf ./chr
|
||||
sudo qemu-img convert -f raw -O qcow2 chr-$LATEST_VERSION.img chr-$LATEST_VERSION.qcow2
|
||||
sudo qemu-img convert -f raw -O vmdk chr-$LATEST_VERSION.img chr-$LATEST_VERSION.vmdk
|
||||
sudo qemu-img convert -f raw -O vpc chr-$LATEST_VERSION.img chr-$LATEST_VERSION.vhd
|
||||
sudo qemu-img convert -f raw -O vhdx chr-$LATEST_VERSION.img chr-$LATEST_VERSION.vhdx
|
||||
sudo qemu-img convert -f raw -O vdi chr-$LATEST_VERSION.img chr-$LATEST_VERSION.vdi
|
||||
|
||||
sudo zip chr-$LATEST_VERSION.qcow2.zip chr-$LATEST_VERSION.qcow2
|
||||
sudo zip chr-$LATEST_VERSION.vmdk.zip chr-$LATEST_VERSION.vmdk
|
||||
sudo zip chr-$LATEST_VERSION.vhd.zip chr-$LATEST_VERSION.vhd
|
||||
sudo zip chr-$LATEST_VERSION.vhdx.zip chr-$LATEST_VERSION.vhdx
|
||||
sudo zip chr-$LATEST_VERSION.vdi.zip chr-$LATEST_VERSION.vdi
|
||||
sudo zip chr-$LATEST_VERSION.img.zip chr-$LATEST_VERSION.img
|
||||
|
||||
sudo rm chr-$LATEST_VERSION.qcow2
|
||||
sudo rm chr-$LATEST_VERSION.vmdk
|
||||
sudo rm chr-$LATEST_VERSION.vhd
|
||||
sudo rm chr-$LATEST_VERSION.vhdx
|
||||
sudo rm chr-$LATEST_VERSION.vdi
|
||||
sudo rm chr-$LATEST_VERSION.img
|
||||
|
||||
cd ./all_packages
|
||||
sudo zip ../all_packages-x86-$LATEST_VERSION.zip *.npk
|
||||
cd ..
|
||||
|
||||
- name: Prepare for Upload
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && env.RELEASE == 'true'
|
||||
run: |
|
||||
sudo mkdir -p ./publish/$LATEST_VERSION
|
||||
sudo cp CHANGELOG ./publish/$LATEST_VERSION/
|
||||
sudo cp ./all_packages/*.npk ./publish/$LATEST_VERSION/
|
||||
# sudo cp mikrotik-${{ env.LATEST_VERSION }}${{ env.ARCH }}.iso ./publish/$LATEST_VERSION/ 2>/dev/null || true
|
||||
# sudo cp chr-${{ env.LATEST_VERSION }}*.zip ./publish/$LATEST_VERSION/ 2>/dev/null || true
|
||||
# sudo cp netinstall-${{ env.LATEST_VERSION }}.* ./publish/$LATEST_VERSION/ 2>/dev/null || true
|
||||
# sudo cp install-image-${{ env.LATEST_VERSION }}.zip ./publish/$LATEST_VERSION/ 2>/dev/null || true
|
||||
echo $LATEST_VERSION $BUILD_TIME | sudo tee ./publish/NEWEST6.${{ matrix.channel }}
|
||||
|
||||
- name: Upload Files
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && env.RELEASE == 'true'
|
||||
run: |
|
||||
sudo chown -R root:root ./publish/
|
||||
|
||||
LOCAL_PATH=./publish/$LATEST_VERSION
|
||||
REMOTE_PATH=${{ secrets.SSH_DIRECTORY }}
|
||||
SERVER=${{ secrets.SSH_SERVER }}
|
||||
USER=${{ secrets.SSH_USERNAME }}
|
||||
PASS=${{ secrets.SSH_PASSWORD }}
|
||||
PORT=${{ secrets.SSH_PORT }}
|
||||
CHANNEL=${{ matrix.channel }}
|
||||
|
||||
sudo apt-get install -y lftp ssh sshpass > /dev/null 2>&1
|
||||
|
||||
sudo -E lftp -u "$USER","$PASS" sftp://$SERVER:$PORT <<EOF
|
||||
set sftp:auto-confirm yes
|
||||
mirror --reverse --verbose --only-newer ./publish "$REMOTE_PATH"
|
||||
bye
|
||||
EOF
|
||||
sshpass -p "$PASS" ssh -o StrictHostKeyChecking=no -p $PORT $USER@$SERVER \
|
||||
"echo $LATEST_VERSION $BUILD_TIME | tee /rw/disk/$REMOTE_PATH/NEWEST6.$CHANNEL; chown -R 32768:32768 /rw/disk/$REMOTE_PATH/"
|
||||
|
||||
|
||||
# - name: Upload to R2 Bucket
|
||||
# if: steps.get_latest.outputs.has_new_version == 'true' && env.RELEASE == 'true'
|
||||
# uses: ryand56/r2-upload-action@latest
|
||||
# with:
|
||||
# r2-account-id: ${{ secrets.R2_ACCOUNT_ID }}
|
||||
# r2-access-key-id: ${{ secrets.R2_ACCESS_KEY_ID }}
|
||||
# r2-secret-access-key: ${{ secrets.R2_SECRET_ACCESS_KEY }}
|
||||
# r2-bucket: routeros
|
||||
# source-dir: ./publish
|
||||
# destination-dir: ./routeros
|
||||
# keep-file-fresh: true
|
||||
# output-file-url: false
|
||||
|
||||
|
||||
- name: Clear Cloudflare cache
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && env.RELEASE == 'true'
|
||||
run: |
|
||||
curl --request POST --url "https://api.cloudflare.com/client/v4/zones/fe6831ed6dc9e6235e69ef2a31f2e7fe/purge_cache" \
|
||||
--header "Authorization: Bearer 9GDQkzU51QXaqzp1qMjyFKpyeJyOdnNoG9GZQaGP" \
|
||||
--header "Content-Type:application/json" \
|
||||
--data '{"purge_everything": true}'
|
||||
|
||||
- name: Delete Release tag ${{ env.LATEST_VERSION }}
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && env.RELEASE == 'true'
|
||||
run: |
|
||||
sed -i "1i Build Time:$BUILD_TIME" CHANGELOG
|
||||
HEADER="Authorization: token ${{ secrets.GITHUB_TOKEN }}"
|
||||
RELEASE_INFO=$(curl -s -H $HEADER https://api.github.com/repos/${{ github.repository }}/releases/tags/$LATEST_VERSION)
|
||||
RELEASE_ID=$(echo $RELEASE_INFO | jq -r '.id')
|
||||
echo "Release ID: $RELEASE_ID"
|
||||
if [ "$RELEASE_ID" != "null" ]; then
|
||||
curl -X DELETE -H "$HEADER" https://api.github.com/repos/${{ github.repository }}/git/refs/tags/$LATEST_VERSION
|
||||
echo "Tag $LATEST_VERSION deleted successfully."
|
||||
curl -X DELETE -H "$HEADER" https://api.github.com/repos/${{ github.repository }}/releases/$RELEASE_ID
|
||||
echo "Release with tag $LATEST_VERSION deleted successfully."
|
||||
else
|
||||
echo "Release not found for tag: $LATEST_VERSION)"
|
||||
fi
|
||||
|
||||
|
||||
- name: Create Release tag ${{ env.LATEST_VERSION }}
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && env.RELEASE == 'true'
|
||||
uses: softprops/action-gh-release@v2
|
||||
with:
|
||||
name: "RouterOS ${{ env.LATEST_VERSION }}"
|
||||
body_path: "CHANGELOG"
|
||||
tag_name: ${{ env.LATEST_VERSION }}
|
||||
make_latest: false
|
||||
prerelease: ${{ matrix.channel == 'testing' }}
|
||||
files: |
|
||||
mikrotik-${{ env.LATEST_VERSION }}.iso
|
||||
chr-${{ env.LATEST_VERSION }}*.zip
|
||||
install-image-${{ env.LATEST_VERSION }}.zip
|
||||
routeros-x86-${{ env.LATEST_VERSION }}.npk
|
||||
all_packages-x86-${{ env.LATEST_VERSION }}.zip
|
||||
|
||||
- name: Upload Files as Artifact (No Release)
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && env.RELEASE == 'false'
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: mikrotik-${{ env.LATEST_VERSION }}
|
||||
path: |
|
||||
all_packages-x86-${{ env.LATEST_VERSION }}.zip
|
||||
mikrotik-${{ env.LATEST_VERSION }}.iso
|
||||
chr-${{ env.LATEST_VERSION }}*.zip
|
||||
801
.github/workflows/mikrotik_patch_7.yml
vendored
@ -1,801 +0,0 @@
|
||||
name: Patch Mikrotik RouterOS 7.x
|
||||
on:
|
||||
# push:
|
||||
# branches: [ "main" ]
|
||||
schedule:
|
||||
- cron: "0 0 * * *" # At UTC 00:00 on every day
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
arch:
|
||||
description: 'Architecture (x86, arm64, arm)'
|
||||
required: true
|
||||
default: 'x86'
|
||||
type: choice
|
||||
options:
|
||||
- x86
|
||||
- arm64
|
||||
- arm
|
||||
channel:
|
||||
description: 'Channel (stable, testing)'
|
||||
required: true
|
||||
default: 'stable'
|
||||
type: choice
|
||||
options:
|
||||
- stable
|
||||
- long-term
|
||||
- testing
|
||||
version:
|
||||
description: "Specify version (e.g., 7.19.2), empty for latest"
|
||||
required: false
|
||||
default: ''
|
||||
type: string
|
||||
buildtime:
|
||||
description: "Custom build time, leave empty for now"
|
||||
required: false
|
||||
default: ''
|
||||
type: string
|
||||
release:
|
||||
description: "Release to GitHub & Upload "
|
||||
required: false
|
||||
default: false
|
||||
type: boolean
|
||||
|
||||
permissions:
|
||||
contents: write
|
||||
|
||||
env:
|
||||
CUSTOM_LICENSE_PRIVATE_KEY: ${{ secrets.CUSTOM_LICENSE_PRIVATE_KEY }}
|
||||
CUSTOM_LICENSE_PUBLIC_KEY: ${{ secrets.CUSTOM_LICENSE_PUBLIC_KEY }}
|
||||
CUSTOM_NPK_SIGN_PRIVATE_KEY: ${{ secrets.CUSTOM_NPK_SIGN_PRIVATE_KEY }}
|
||||
CUSTOM_NPK_SIGN_PUBLIC_KEY: ${{ secrets.CUSTOM_NPK_SIGN_PUBLIC_KEY }}
|
||||
CUSTOM_CLOUD_PUBLIC_KEY: ${{ secrets.CUSTOM_CLOUD_PUBLIC_KEY }}
|
||||
MIKRO_LICENSE_PUBLIC_KEY: ${{ secrets.MIKRO_LICENSE_PUBLIC_KEY }}
|
||||
MIKRO_NPK_SIGN_PUBLIC_KEY: ${{ secrets.MIKRO_NPK_SIGN_PUBLIC_KEY }}
|
||||
MIKRO_CLOUD_PUBLIC_KEY: ${{ secrets.MIKRO_CLOUD_PUBLIC_KEY }}
|
||||
MIKRO_LICENCE_URL: ${{ secrets.MIKRO_LICENCE_URL }}
|
||||
CUSTOM_LICENCE_URL: ${{ secrets.CUSTOM_LICENCE_URL }}
|
||||
MIKRO_UPGRADE_URL: ${{ secrets.MIKRO_UPGRADE_URL }}
|
||||
CUSTOM_UPGRADE_URL: ${{ secrets.CUSTOM_UPGRADE_URL }}
|
||||
MIKRO_RENEW_URL: ${{ secrets.MIKRO_RENEW_URL }}
|
||||
CUSTOM_RENEW_URL: ${{ secrets.CUSTOM_RENEW_URL }}
|
||||
MIKRO_CLOUD_URL: ${{ secrets.MIKRO_CLOUD_URL }}
|
||||
CUSTOM_CLOUD_URL: ${{ secrets.CUSTOM_CLOUD_URL }}
|
||||
|
||||
jobs:
|
||||
Set_Variables:
|
||||
runs-on: ubuntu-22.04
|
||||
outputs:
|
||||
BUILD_TIME: ${{ steps.set_vars.outputs.BUILD_TIME }}
|
||||
RELEASE: ${{ steps.set_vars.outputs.RELEASE }}
|
||||
MATRIX_JSON: ${{ steps.set_vars.outputs.MATRIX_JSON }}
|
||||
steps:
|
||||
- name: Set variables
|
||||
id: set_vars
|
||||
run: |
|
||||
if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
|
||||
BUILD_TIME="${{ github.event.inputs.buildtime }}"
|
||||
RELEASE="${{ github.event.inputs.release }}"
|
||||
if [ -z "$BUILD_TIME" ]; then
|
||||
BUILD_TIME=$(date +'%s')
|
||||
fi
|
||||
if [ -z "$RELEASE" ]; then
|
||||
RELEASE=false
|
||||
fi
|
||||
ARCH="${{ github.event.inputs.arch }}"
|
||||
CHANNEL="${{ github.event.inputs.channel }}"
|
||||
MATRIX_JSON=$(jq -nc --arg arch "$ARCH" --arg channel "$CHANNEL" '[{arch: $arch, channel: $channel}]')
|
||||
else
|
||||
BUILD_TIME=$(date +'%s')
|
||||
RELEASE=true
|
||||
MATRIX_JSON='[{"arch":"x86","channel":"stable"},{"arch":"arm64","channel":"stable"},{"arch":"arm","channel":"stable"},{"arch":"x86","channel":"testing"},{"arch":"arm64","channel":"testing"},{"arch":"arm","channel":"testing"}]'
|
||||
MATRIX_JSON='[{"arch":"x86","channel":"stable"},{"arch":"arm64","channel":"stable"},{"arch":"x86","channel":"long-term"},{"arch":"arm64","channel":"long-term"},{"arch":"x86","channel":"testing"},{"arch":"arm64","channel":"testing"}]'
|
||||
fi
|
||||
echo "BUILD_TIME=$BUILD_TIME" >> $GITHUB_OUTPUT
|
||||
echo "RELEASE=$RELEASE" >> $GITHUB_OUTPUT
|
||||
echo "MATRIX_JSON=$MATRIX_JSON" >> $GITHUB_OUTPUT
|
||||
echo "BUILD_TIME: $BUILD_TIME"
|
||||
echo "RELEASE: $RELEASE"
|
||||
echo "MATRIX_JSON: $MATRIX_JSON"
|
||||
|
||||
Patch_RouterOS:
|
||||
needs: Set_Variables
|
||||
runs-on: ubuntu-22.04
|
||||
strategy:
|
||||
matrix:
|
||||
include: ${{ fromJSON(needs.Set_Variables.outputs.MATRIX_JSON) }}
|
||||
env:
|
||||
TZ: 'Asia/Shanghai'
|
||||
BUILD_TIME: ${{ needs.Set_Variables.outputs.BUILD_TIME }}
|
||||
RELEASE: ${{ needs.Set_Variables.outputs.RELEASE }}
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Set up Python
|
||||
uses: actions/setup-python@v6
|
||||
with:
|
||||
python-version: '3.11'
|
||||
|
||||
- name: Get latest routeros version
|
||||
id: get_latest
|
||||
run: |
|
||||
echo $(uname -a)
|
||||
echo Build Time:$BUILD_TIME
|
||||
if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
|
||||
if [ -n "${{ github.event.inputs.version }}" ]; then
|
||||
LATEST_VERSION="${{ github.event.inputs.version }}"
|
||||
else
|
||||
LATEST_VERSION=$(wget -nv -O - https://${{ env.MIKRO_UPGRADE_URL }}/routeros/NEWESTa7.${{ matrix.channel }} | cut -d ' ' -f1)
|
||||
fi
|
||||
else
|
||||
LATEST_VERSION=$(wget -nv -O - https://${{ env.MIKRO_UPGRADE_URL }}/routeros/NEWESTa7.${{ matrix.channel }} | cut -d ' ' -f1)
|
||||
fi
|
||||
echo Latest Version:$LATEST_VERSION
|
||||
if [ "${{ github.event_name }}" == "schedule" ]; then
|
||||
_LATEST_VERSION=$(wget -nv -O - https://${{ env.CUSTOM_UPGRADE_URL }}/routeros/NEWESTa7.${{ matrix.channel }} | cut -d ' ' -f1)
|
||||
if [ "$_LATEST_VERSION" == "$LATEST_VERSION" ]; then
|
||||
echo "No new version found"
|
||||
echo "has_new_version=false" >> $GITHUB_OUTPUT
|
||||
exit 0
|
||||
fi
|
||||
fi
|
||||
echo "has_new_version=true" >> $GITHUB_OUTPUT
|
||||
wget -nv -O CHANGELOG https://${{ env.MIKRO_UPGRADE_URL }}/routeros/$LATEST_VERSION/CHANGELOG
|
||||
cat CHANGELOG
|
||||
if [[ "${{ matrix.arch }}" == "arm64" ]]; then
|
||||
echo "ARCH=-arm64" >> $GITHUB_ENV
|
||||
elif [[ "${{ matrix.arch }}" == "arm" ]]; then
|
||||
echo "ARCH=-arm" >> $GITHUB_ENV
|
||||
else
|
||||
echo "ARCH=" >> $GITHUB_ENV
|
||||
fi
|
||||
echo "LATEST_VERSION=${LATEST_VERSION}" >> $GITHUB_ENV
|
||||
sudo apt-get update > /dev/null
|
||||
|
||||
- name: Get loader patch files
|
||||
if: steps.get_latest.outputs.has_new_version == 'true'
|
||||
run: |
|
||||
wget -nv -O loader.7z https://${{ env.CUSTOM_UPGRADE_URL }}/routeros/loader.7z
|
||||
sudo apt-get install -y p7zip-full > /dev/null
|
||||
7z x -p"${{ secrets.LOADER_7Z_PASSWORD }}" loader.7z >> /dev/null
|
||||
rm loader.7z
|
||||
|
||||
- name: Create Squashfs for option and python3
|
||||
if: steps.get_latest.outputs.has_new_version == 'true'
|
||||
run: |
|
||||
sudo mkdir -p ./option-root/bin/
|
||||
if [ "${{ matrix.arch }}" == "x86" ]; then
|
||||
sudo cp busybox/busybox_x86 ./option-root/bin/busybox
|
||||
sudo chmod +x ./option-root/bin/busybox
|
||||
sudo cp keygen/keygen_x86 ./option-root/bin/keygen
|
||||
sudo chmod +x ./option-root/bin/keygen
|
||||
elif [ "${{ matrix.arch }}" == "arm64" ]; then
|
||||
sudo cp busybox/busybox_aarch64 ./option-root/bin/busybox
|
||||
sudo chmod +x ./option-root/bin/busybox
|
||||
sudo cp keygen/keygen_aarch64 ./option-root/bin/keygen
|
||||
sudo chmod +x ./option-root/bin/keygen
|
||||
elif [ "${{ matrix.arch }}" == "arm" ]; then
|
||||
sudo cp busybox/busybox_arm ./option-root/bin/busybox
|
||||
sudo chmod +x ./option-root/bin/busybox
|
||||
sudo cp keygen/keygen_arm ./option-root/bin/keygen
|
||||
sudo chmod +x ./option-root/bin/keygen
|
||||
else
|
||||
echo "Unsupported architecture: ${{ matrix.arch }}"
|
||||
exit 1
|
||||
fi
|
||||
sudo chmod +x ./busybox/busybox_x86
|
||||
COMMANDS=$(./busybox/busybox_x86 --list)
|
||||
for cmd in $COMMANDS; do
|
||||
sudo ln -sf /pckg/option/bin/busybox ./option-root/bin/$cmd
|
||||
done
|
||||
sudo mksquashfs option-root option.sfs -quiet -comp xz -no-xattrs -b 256k
|
||||
sudo rm -rf option-root
|
||||
if [ "${{ matrix.arch }}" == "x86" ]; then
|
||||
sudo wget -O cpython.tar.gz -nv https://github.com/astral-sh/python-build-standalone/releases/download/20241206/cpython-3.11.11+20241206-x86_64-unknown-linux-musl-install_only_stripped.tar.gz
|
||||
elif [ "${{ matrix.arch }}" == "arm64" ]; then
|
||||
sudo wget -O cpython.tar.gz -nv https://github.com/indygreg/python-build-standalone/releases/download/20241206/cpython-3.11.11+20241206-aarch64-unknown-linux-gnu-install_only_stripped.tar.gz
|
||||
elif [ "${{ matrix.arch }}" == "arm" ]; then
|
||||
sudo wget -O cpython.tar.gz -nv https://github.com/indygreg/python-build-standalone/releases/download/20241206/cpython-3.11.11+20241206-armv7-unknown-linux-gnueabi-install_only_stripped.tar.gz
|
||||
fi
|
||||
sudo tar -xf cpython.tar.gz
|
||||
sudo rm cpython.tar.gz
|
||||
sudo rm -rf ./python/include
|
||||
sudo rm -rf ./python/share
|
||||
sudo mksquashfs python python3.sfs -quiet -comp xz -no-xattrs -b 256k
|
||||
sudo rm -rf ./python
|
||||
|
||||
- name: Cache mikrotik-${{ env.LATEST_VERSION }}${{ env.ARCH }}.iso
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && (matrix.arch == 'x86' || matrix.arch == 'arm64')
|
||||
id: cache-mikrotik
|
||||
uses: actions/cache@v5
|
||||
with:
|
||||
path: |
|
||||
mikrotik.iso
|
||||
key: mikrotik-${{ env.LATEST_VERSION }}${{ env.ARCH }}
|
||||
restore-keys: mikrotik-${{ env.LATEST_VERSION }}${{ env.ARCH }}
|
||||
|
||||
- name: Get mikrotik-${{ env.LATEST_VERSION }}${{ env.ARCH }}.iso
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && steps.cache-mikrotik.outputs.cache-hit != 'true' && (matrix.arch == 'x86' || matrix.arch == 'arm64')
|
||||
run: |
|
||||
sudo wget -nv -O mikrotik.iso https://download.mikrotik.com/routeros/$LATEST_VERSION/mikrotik-$LATEST_VERSION$ARCH.iso
|
||||
|
||||
- name: Cache refind
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && matrix.arch == 'x86'
|
||||
id: cache-refind
|
||||
uses: actions/cache@v5
|
||||
with:
|
||||
path: refind-bin-0.14.2.zip
|
||||
key: refind
|
||||
restore-keys: refind
|
||||
|
||||
- name: Get refind
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && matrix.arch == 'x86' && steps.cache-refind.outputs.cache-hit != 'true'
|
||||
run: sudo wget -O refind-bin-0.14.2.zip https://downloads.sourceforge.net/project/refind/0.14.2/refind-bin-0.14.2.zip
|
||||
|
||||
- name: Patch mikrotik-${{ env.LATEST_VERSION }}${{ env.ARCH }}.iso
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && (matrix.arch == 'x86' || matrix.arch == 'arm64')
|
||||
run: |
|
||||
sudo apt-get install -y build-essential binutils-arm-linux-gnueabi mkisofs xorriso > /dev/null
|
||||
sudo mkdir ./iso
|
||||
sudo mount -o loop,ro mikrotik.iso ./iso
|
||||
sudo mkdir ./new_iso
|
||||
sudo rsync -a ./iso/ ./new_iso/
|
||||
sudo umount ./iso
|
||||
sudo rm -rf ./iso
|
||||
sudo mv ./new_iso/routeros-$LATEST_VERSION$ARCH.npk ./
|
||||
sudo -E python3 patch.py npk routeros-$LATEST_VERSION$ARCH.npk
|
||||
NPK_FILES=$(find ./new_iso -type f -name "*.npk")
|
||||
if [ -z "$NPK_FILES" ]; then
|
||||
echo "No .npk files found in iso, downloading..."
|
||||
URL="https://download.mikrotik.com/routeros/$LATEST_VERSION/all_packages-${{ matrix.arch }}-$LATEST_VERSION.zip"
|
||||
TMP_ZIP="./all_packages.zip"
|
||||
sudo wget -nv -O "$TMP_ZIP" "$URL"
|
||||
sudo unzip -o "$TMP_ZIP" -d ./new_iso
|
||||
sudo rm -f "$TMP_ZIP"
|
||||
NPK_FILES=$(find ./new_iso -type f -name "*.npk")
|
||||
fi
|
||||
if [ -n "$NPK_FILES" ]; then
|
||||
for file in $NPK_FILES; do
|
||||
sudo -E python3 npk.py sign "$file" "$file"
|
||||
done
|
||||
fi
|
||||
if [ "$LATEST_VERSION" = "7.12.1" ]; then
|
||||
URL="https://download.mikrotik.com/routeros/$LATEST_VERSION/routeros-${{ matrix.arch }}-$LATEST_VERSION.npk"
|
||||
sudo wget -nv -O "routeros-${{ matrix.arch }}-$LATEST_VERSION.npk" "$URL"
|
||||
sudo -E python3 patch.py npk routeros-${{ matrix.arch }}-$LATEST_VERSION.npk
|
||||
sudo mv "routeros-${{ matrix.arch }}-$LATEST_VERSION.npk" ./new_iso
|
||||
URL="https://download.mikrotik.com/routeros/$LATEST_VERSION/system-$LATEST_VERSION.npk"
|
||||
sudo wget -nv -O "system-$LATEST_VERSION.npk" "$URL"
|
||||
sudo -E python3 patch.py npk system-$LATEST_VERSION.npk
|
||||
sudo mv "system-$LATEST_VERSION.npk" ./new_iso
|
||||
fi
|
||||
sudo cp -f routeros-$LATEST_VERSION$ARCH.npk ./new_iso/
|
||||
sudo -E python3 npk.py create ./new_iso/gps-$LATEST_VERSION$ARCH.npk ./option-$LATEST_VERSION$ARCH.npk option ./option.sfs -desc="busybox"
|
||||
sudo cp option-$LATEST_VERSION$ARCH.npk ./new_iso/
|
||||
sudo -E python3 npk.py create ./new_iso/gps-$LATEST_VERSION$ARCH.npk ./python3-$LATEST_VERSION$ARCH.npk python3 ./python3.sfs -desc="python 3.11.13"
|
||||
sudo cp python3-$LATEST_VERSION$ARCH.npk ./new_iso/
|
||||
sudo mkdir ./efiboot
|
||||
if [ "${{ matrix.arch }}" == "x86" ]; then
|
||||
truncate --size 32M efiboot.img
|
||||
sudo mkfs.fat -F16 -n ROUTEROS efiboot.img
|
||||
sudo mount -o loop efiboot.img efiboot
|
||||
sudo mkdir -p efiboot/EFI/BOOT
|
||||
sudo unzip refind-bin-0.14.2.zip refind-bin-0.14.2/refind/refind_x64.efi
|
||||
sudo cp refind-bin-0.14.2/refind/refind_x64.efi ./efiboot/EFI/BOOT/BOOTX64.EFI
|
||||
sudo rm -rf refind-bin-0.14.2
|
||||
echo -e 'timeout 0\ntextonly\ntextmode 0\nshowtools shutdown, reboot, exit\nmenuentry "Install RouterOS" {\n\tloader /linux.x86_64\n\toptions "load_ramdisk=1 root=/dev/ram0 -install -cdrom debug"\n}\ndefault_selection /EFI/BOOT/BOOTX64.EFI' \
|
||||
> refind.conf
|
||||
sudo cp refind.conf ./efiboot/EFI/BOOT/
|
||||
sudo rm refind.conf
|
||||
sudo -E python3 patch.py kernel ./new_iso/isolinux/linux
|
||||
sudo cp ./new_iso/isolinux/linux ./efiboot/linux.x86_64
|
||||
sudo cp ./new_iso/isolinux/linux ./linux.x86_64
|
||||
sudo umount ./efiboot
|
||||
sudo cp -f efiboot.img ./new_iso/efiboot.img
|
||||
sudo mkisofs -o mikrotik-$LATEST_VERSION$ARCH.iso \
|
||||
-V "MikroTik $LATEST_VERSION ${{ matrix.arch }}" \
|
||||
-sysid "" -preparer "MiKroTiK" \
|
||||
-publisher "" -A "MiKroTiK RouterOS" \
|
||||
-input-charset utf-8 \
|
||||
-b isolinux/isolinux.bin \
|
||||
-c isolinux/boot.cat \
|
||||
-no-emul-boot \
|
||||
-boot-load-size 4 \
|
||||
-boot-info-table \
|
||||
-eltorito-alt-boot \
|
||||
-e efiboot.img \
|
||||
-no-emul-boot \
|
||||
-R -J \
|
||||
./new_iso
|
||||
elif [ "${{ matrix.arch }}" == "arm64" ]; then
|
||||
sudo mount -o loop ./new_iso/efiboot.img ./efiboot
|
||||
sudo -E python3 patch.py kernel ./efiboot/EFI/BOOT/BOOTAA64.EFI
|
||||
sudo umount ./efiboot
|
||||
sudo xorriso -as mkisofs -o mikrotik-$LATEST_VERSION$ARCH.iso \
|
||||
-V "MikroTik $LATEST_VERSION ${{ matrix.arch }}" \
|
||||
-sysid "" -preparer "MiKroTiK" \
|
||||
-publisher "" -A "MiKroTiK RouterOS" \
|
||||
-input-charset utf-8 \
|
||||
-b efiboot.img \
|
||||
-no-emul-boot \
|
||||
-R -J \
|
||||
./new_iso
|
||||
fi
|
||||
sudo rm -rf ./efiboot
|
||||
sudo mkdir ./all_packages
|
||||
sudo cp ./new_iso/*.npk ./all_packages/
|
||||
sudo rm -rf ./new_iso
|
||||
cd ./all_packages
|
||||
sudo zip ../all_packages-${{ matrix.arch }}-$LATEST_VERSION.zip *.npk
|
||||
cd ..
|
||||
|
||||
- name: Cache chr-${{ env.LATEST_VERSION }}${{ env.ARCH }}.img.zip
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && (matrix.arch == 'x86' || matrix.arch == 'arm64')
|
||||
id: cache-chr-img
|
||||
uses: actions/cache@v5
|
||||
with:
|
||||
path: |
|
||||
chr.img
|
||||
key: chr-${{ env.LATEST_VERSION }}${{ env.ARCH }}.img
|
||||
restore-keys: chr-${{ env.LATEST_VERSION }}${{ env.ARCH }}.img
|
||||
|
||||
- name: Get chr-${{ env.LATEST_VERSION }}${{ env.ARCH }}.img
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && steps.cache-chr-img.outputs.cache-hit != 'true' && (matrix.arch == 'x86' || matrix.arch == 'arm64')
|
||||
run: |
|
||||
sudo wget -nv -O chr.img.zip https://download.mikrotik.com/routeros/$LATEST_VERSION/chr-$LATEST_VERSION$ARCH.img.zip
|
||||
sudo unzip chr.img.zip
|
||||
sudo rm chr.img.zip
|
||||
sudo mv chr-$LATEST_VERSION$ARCH.img chr.img
|
||||
|
||||
- name: Create chr-${{ env.LATEST_VERSION }}${{ env.ARCH }}.img
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && (matrix.arch == 'x86' || matrix.arch == 'arm64')
|
||||
run: |
|
||||
OVF_TEMPLATE='<?xml version="1.0" encoding="UTF-8"?>
|
||||
<Envelope vmw:buildId="build-18663434" xmlns="http://schemas.dmtf.org/ovf/envelope/1" xmlns:cim="http://schemas.dmtf.org/wbem/wscim/1/common" xmlns:ovf="http://schemas.dmtf.org/ovf/envelope/1" xmlns:rasd="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_ResourceAllocationSettingData" xmlns:vmw="http://www.vmware.com/schema/ovf" xmlns:vssd="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_VirtualSystemSettingData" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
|
||||
<References>
|
||||
<File ovf:href="{VMDK_FILE}" ovf:id="file1" ovf:size="{FILE_SIZE}"/>
|
||||
</References>
|
||||
<DiskSection>
|
||||
<Info>Virtual disk information</Info>
|
||||
<Disk ovf:capacity="{CAPACITY_MB}" ovf:capacityAllocationUnits="byte * 2^20" ovf:diskId="vmdisk1" ovf:fileRef="file1" ovf:format="http://www.vmware.com/interfaces/specifications/vmdk.html#streamOptimized"/>
|
||||
</DiskSection>
|
||||
<NetworkSection>
|
||||
<Info>The list of logical networks</Info>
|
||||
<Network ovf:name="VM Network">
|
||||
<Description>The VM Network network</Description>
|
||||
</Network>
|
||||
</NetworkSection>
|
||||
<VirtualSystem ovf:id="vm">
|
||||
<Info>A virtual machine</Info>
|
||||
<Name>MikroTik_RouterOS_CHR</Name>
|
||||
<OperatingSystemSection ovf:id="100" vmw:osType="other3xLinux64Guest">
|
||||
<Info>The kind of installed guest operating system</Info>
|
||||
</OperatingSystemSection>
|
||||
<VirtualHardwareSection>
|
||||
<Info>Virtual hardware requirements</Info>
|
||||
<System>
|
||||
<vssd:ElementName>Virtual Hardware Family</vssd:ElementName>
|
||||
<vssd:InstanceID>0</vssd:InstanceID>
|
||||
<vssd:VirtualSystemIdentifier>MikroTik_RouterOS_CHR</vssd:VirtualSystemIdentifier>
|
||||
<vssd:VirtualSystemType>vmx-10</vssd:VirtualSystemType>
|
||||
</System>
|
||||
<Item>
|
||||
<rasd:AllocationUnits>hertz * 10^6</rasd:AllocationUnits>
|
||||
<rasd:Description>Number of Virtual CPUs</rasd:Description>
|
||||
<rasd:ElementName>1 virtual CPU(s)</rasd:ElementName>
|
||||
<rasd:InstanceID>1</rasd:InstanceID>
|
||||
<rasd:ResourceType>3</rasd:ResourceType>
|
||||
<rasd:VirtualQuantity>1</rasd:VirtualQuantity>
|
||||
</Item>
|
||||
<Item>
|
||||
<rasd:AllocationUnits>byte * 2^20</rasd:AllocationUnits>
|
||||
<rasd:Description>Memory Size</rasd:Description>
|
||||
<rasd:ElementName>1024MB of memory</rasd:ElementName>
|
||||
<rasd:InstanceID>2</rasd:InstanceID>
|
||||
<rasd:ResourceType>4</rasd:ResourceType>
|
||||
<rasd:VirtualQuantity>1024</rasd:VirtualQuantity>
|
||||
</Item>
|
||||
<Item>
|
||||
<rasd:Address>0</rasd:Address>
|
||||
<rasd:Description>IDE Controller</rasd:Description>
|
||||
<rasd:ElementName>ideController0</rasd:ElementName>
|
||||
<rasd:InstanceID>3</rasd:InstanceID>
|
||||
<rasd:ResourceType>5</rasd:ResourceType>
|
||||
</Item>
|
||||
<Item>
|
||||
<rasd:AddressOnParent>0</rasd:AddressOnParent>
|
||||
<rasd:ElementName>disk0</rasd:ElementName>
|
||||
<rasd:HostResource>ovf:/disk/vmdisk1</rasd:HostResource>
|
||||
<rasd:InstanceID>4</rasd:InstanceID>
|
||||
<rasd:Parent>3</rasd:Parent>
|
||||
<rasd:ResourceType>17</rasd:ResourceType>
|
||||
</Item>
|
||||
<Item>
|
||||
<rasd:AddressOnParent>1</rasd:AddressOnParent>
|
||||
<rasd:AutomaticAllocation>true</rasd:AutomaticAllocation>
|
||||
<rasd:Connection>VM Network</rasd:Connection>
|
||||
<rasd:Description>VmxNet3 ethernet adapter on "VM Network"</rasd:Description>
|
||||
<rasd:ElementName>ethernet0</rasd:ElementName>
|
||||
<rasd:InstanceID>5</rasd:InstanceID>
|
||||
<rasd:ResourceSubType>VmxNet3</rasd:ResourceSubType>
|
||||
<rasd:ResourceType>10</rasd:ResourceType>
|
||||
<vmw:Config ovf:required="false" vmw:key="slotInfo.pciSlotNumber" vmw:value="160"/>
|
||||
<vmw:Config ovf:required="false" vmw:key="connectable.allowGuestControl" vmw:value="true"/>
|
||||
</Item>
|
||||
<Item ovf:required="false">
|
||||
<rasd:AutomaticAllocation>false</rasd:AutomaticAllocation>
|
||||
<rasd:ElementName>video</rasd:ElementName>
|
||||
<rasd:InstanceID>6</rasd:InstanceID>
|
||||
<rasd:ResourceType>24</rasd:ResourceType>
|
||||
</Item>
|
||||
<Item ovf:required="false">
|
||||
<rasd:AutomaticAllocation>false</rasd:AutomaticAllocation>
|
||||
<rasd:ElementName>vmci</rasd:ElementName>
|
||||
<rasd:InstanceID>7</rasd:InstanceID>
|
||||
<rasd:ResourceSubType>vmware.vmci</rasd:ResourceSubType>
|
||||
<rasd:ResourceType>1</rasd:ResourceType>
|
||||
</Item>
|
||||
<vmw:Config ovf:required="false" vmw:key="firmware" vmw:value="{FIRMWARE_TYPE}"/>
|
||||
</VirtualHardwareSection>
|
||||
<AnnotationSection ovf:required="false">
|
||||
<Info>A human-readable annotation</Info>
|
||||
<Annotation>MikroTik RouterOS CHR</Annotation>
|
||||
</AnnotationSection>
|
||||
</VirtualSystem>
|
||||
</Envelope>'
|
||||
sudo modprobe nbd
|
||||
sudo apt-get install -y qemu-utils > /dev/null
|
||||
truncate --size 128M chr-$LATEST_VERSION$ARCH.img
|
||||
sgdisk --clear --set-alignment=2 \
|
||||
--new=1::+32M --typecode=1:8300 --change-name=1:"RouterOS Boot" --attributes=1:set:2 \
|
||||
--new=2::-0 --typecode=2:8300 --change-name=2:"RouterOS" \
|
||||
--gpttombr=1:2 \
|
||||
chr-$LATEST_VERSION$ARCH.img
|
||||
dd if=chr-$LATEST_VERSION$ARCH.img of=pt.bin bs=1 count=66 skip=446
|
||||
echo -e "\x80" | dd of=pt.bin bs=1 count=1 conv=notrunc
|
||||
sgdisk --mbrtogpt --clear --set-alignment=2 \
|
||||
--new=1::+32M --typecode=1:8300 --change-name=1:"RouterOS Boot" --attributes=1:set:2 \
|
||||
--new=2::-0 --typecode=2:8300 --change-name=2:"RouterOS" \
|
||||
chr-$LATEST_VERSION$ARCH.img
|
||||
dd if=chr.img of=chr-$LATEST_VERSION$ARCH.img bs=1 count=446 conv=notrunc
|
||||
dd if=pt.bin of=chr-$LATEST_VERSION$ARCH.img bs=1 count=66 seek=446 conv=notrunc
|
||||
sudo qemu-nbd -c /dev/nbd0 -f raw chr-$LATEST_VERSION$ARCH.img
|
||||
sudo mkfs.vfat -n "Boot" /dev/nbd0p1
|
||||
sudo mkfs.ext4 -F -L "RouterOS" -m 0 /dev/nbd0p2
|
||||
sudo mkdir -p ./img/{boot,routeros}
|
||||
sudo mount /dev/nbd0p1 ./img/boot/
|
||||
if [ "${{ matrix.arch }}" == "x86" ]; then
|
||||
sudo cp chr.img chr-$LATEST_VERSION$ARCH-legacy-bios.img
|
||||
sudo qemu-nbd -c /dev/nbd1 -f raw chr-$LATEST_VERSION$ARCH-legacy-bios.img
|
||||
sudo -E python3 patch.py block /dev/nbd1p1 EFI/BOOT/BOOTX64.EFI
|
||||
sudo mkdir -p ./chr/{boot,routeros}
|
||||
sudo mount /dev/nbd1p1 ./chr/boot/
|
||||
sudo mkdir -p ./img/boot/EFI/BOOT
|
||||
sudo cp ./chr/boot/EFI/BOOT/BOOTX64.EFI ./img/boot/EFI/BOOT/BOOTX64.EFI
|
||||
sudo umount /dev/nbd1p1
|
||||
sudo shred -v -n 1 -z /dev/nbd1p2
|
||||
sudo mkfs.ext4 -F -L "RouterOS" -m 0 /dev/nbd1p2
|
||||
sudo mount /dev/nbd1p2 ./chr/routeros/
|
||||
sudo mkdir -p ./chr/routeros/{var/pdb/{system,option},boot,rw/disk}
|
||||
sudo cp ./all_packages/option-$LATEST_VERSION$ARCH.npk ./chr/routeros/var/pdb/option/image
|
||||
sudo cp ./all_packages/routeros-$LATEST_VERSION$ARCH.npk ./chr/routeros/var/pdb/system/image
|
||||
echo -e '#!/bin/sh\n# This script will be executed *before* RouterOS *loader* start.\n# You can put your own initialization stuff in here\n' | sudo tee ./chr/routeros/rw/disk/rc.local
|
||||
sudo umount /dev/nbd1p2
|
||||
sudo qemu-nbd -d /dev/nbd1
|
||||
sudo rm -rf ./chr
|
||||
|
||||
sudo qemu-img convert -f raw -O qcow2 chr-$LATEST_VERSION$ARCH-legacy-bios.img chr-$LATEST_VERSION$ARCH-legacy-bios.qcow2
|
||||
sudo qemu-img convert -f raw -O vmdk chr-$LATEST_VERSION$ARCH-legacy-bios.img chr-$LATEST_VERSION$ARCH-legacy-bios.vmdk
|
||||
sudo qemu-img convert -f raw -O vpc chr-$LATEST_VERSION$ARCH-legacy-bios.img chr-$LATEST_VERSION$ARCH-legacy-bios.vhd
|
||||
sudo qemu-img convert -f raw -O vhdx chr-$LATEST_VERSION$ARCH-legacy-bios.img chr-$LATEST_VERSION$ARCH-legacy-bios.vhdx
|
||||
sudo qemu-img convert -f raw -O vdi chr-$LATEST_VERSION$ARCH-legacy-bios.img chr-$LATEST_VERSION$ARCH-legacy-bios.vdi
|
||||
|
||||
sudo qemu-img convert -f raw -O vmdk -o subformat=streamOptimized chr-$LATEST_VERSION$ARCH-legacy-bios.img chr-$LATEST_VERSION$ARCH-legacy-bios-disk1.vmdk
|
||||
VMDK=chr-$LATEST_VERSION$ARCH-legacy-bios-disk1.vmdk
|
||||
OVF=chr-$LATEST_VERSION$ARCH-legacy-bios.ovf
|
||||
OVA=chr-$LATEST_VERSION$ARCH-legacy-bios.ova
|
||||
FILE_SIZE=$(stat -c %s "$VMDK")
|
||||
VIRTUAL_SIZE=$(qemu-img info --output=json "$VMDK" | jq '.["virtual-size"]' | head -n 1)
|
||||
CAPACITY_MB=$((VIRTUAL_SIZE / 1024 / 1024))
|
||||
POPULATED_SIZE=$FILE_SIZE
|
||||
FIRMWARE_TYPE="bios"
|
||||
echo "$OVF_TEMPLATE" | sudo sed -e "s|{VMDK_FILE}|$VMDK|g" \
|
||||
-e "s|{FILE_SIZE}|$FILE_SIZE|g" \
|
||||
-e "s|{CAPACITY_MB}|$CAPACITY_MB|g" \
|
||||
-e "s|{POPULATED_SIZE}|$POPULATED_SIZE|g" \
|
||||
-e "s|{FIRMWARE_TYPE}|$FIRMWARE_TYPE|g" |sudo tee $OVF
|
||||
sudo tar -cvf "$OVA" "$OVF" "$VMDK"
|
||||
sudo rm $VMDK
|
||||
sudo rm $OVF
|
||||
sudo zip $OVA.zip $OVA
|
||||
sudo rm $OVA
|
||||
|
||||
sudo zip chr-$LATEST_VERSION$ARCH-legacy-bios.qcow2.zip chr-$LATEST_VERSION$ARCH-legacy-bios.qcow2
|
||||
sudo zip chr-$LATEST_VERSION$ARCH-legacy-bios.vmdk.zip chr-$LATEST_VERSION$ARCH-legacy-bios.vmdk
|
||||
sudo zip chr-$LATEST_VERSION$ARCH-legacy-bios.vhd.zip chr-$LATEST_VERSION$ARCH-legacy-bios.vhd
|
||||
sudo zip chr-$LATEST_VERSION$ARCH-legacy-bios.vhdx.zip chr-$LATEST_VERSION$ARCH-legacy-bios.vhdx
|
||||
sudo zip chr-$LATEST_VERSION$ARCH-legacy-bios.vdi.zip chr-$LATEST_VERSION$ARCH-legacy-bios.vdi
|
||||
sudo zip chr-$LATEST_VERSION$ARCH-legacy-bios.img.zip chr-$LATEST_VERSION$ARCH-legacy-bios.img
|
||||
|
||||
sudo rm chr-$LATEST_VERSION$ARCH-legacy-bios.qcow2
|
||||
sudo rm chr-$LATEST_VERSION$ARCH-legacy-bios.vmdk
|
||||
sudo rm chr-$LATEST_VERSION$ARCH-legacy-bios.vhd
|
||||
sudo rm chr-$LATEST_VERSION$ARCH-legacy-bios.vhdx
|
||||
sudo rm chr-$LATEST_VERSION$ARCH-legacy-bios.vdi
|
||||
sudo rm chr-$LATEST_VERSION$ARCH-legacy-bios.img
|
||||
|
||||
elif [ "${{ matrix.arch }}" == "arm64" ]; then
|
||||
sudo qemu-nbd -c /dev/nbd1 -f raw chr.img
|
||||
sudo mkdir -p ./chr/boot
|
||||
sudo mount /dev/nbd1p1 ./chr/boot/
|
||||
sudo -E python3 patch.py kernel ./chr/boot/EFI/BOOT/BOOTAA64.EFI -O ./BOOTAA64.EFI
|
||||
sudo mkdir -p ./img/boot/EFI/BOOT
|
||||
sudo cp ./BOOTAA64.EFI ./img/boot/EFI/BOOT/BOOTAA64.EFI
|
||||
sudo umount /dev/nbd1p1
|
||||
sudo rm -rf ./chr
|
||||
sudo qemu-nbd -d /dev/nbd1
|
||||
fi
|
||||
sudo umount /dev/nbd0p1
|
||||
sudo mount /dev/nbd0p2 ./img/routeros/
|
||||
sudo mkdir -p ./img/routeros/{var/pdb/{system,option},boot,rw}
|
||||
sudo cp ./all_packages/option-$LATEST_VERSION$ARCH.npk ./img/routeros/var/pdb/option/image
|
||||
sudo cp ./all_packages/routeros-$LATEST_VERSION$ARCH.npk ./img/routeros/var/pdb/system/image
|
||||
sudo umount /dev/nbd0p2
|
||||
sudo rm -rf ./img
|
||||
sudo qemu-nbd -d /dev/nbd0
|
||||
|
||||
sudo qemu-img convert -f raw -O qcow2 chr-$LATEST_VERSION$ARCH.img chr-$LATEST_VERSION$ARCH.qcow2
|
||||
sudo qemu-img convert -f raw -O vmdk chr-$LATEST_VERSION$ARCH.img chr-$LATEST_VERSION$ARCH.vmdk
|
||||
sudo qemu-img convert -f raw -O vpc chr-$LATEST_VERSION$ARCH.img chr-$LATEST_VERSION$ARCH.vhd
|
||||
sudo qemu-img convert -f raw -O vhdx chr-$LATEST_VERSION$ARCH.img chr-$LATEST_VERSION$ARCH.vhdx
|
||||
sudo qemu-img convert -f raw -O vdi chr-$LATEST_VERSION$ARCH.img chr-$LATEST_VERSION$ARCH.vdi
|
||||
|
||||
sudo qemu-img convert -f raw -O vmdk -o subformat=streamOptimized chr-$LATEST_VERSION$ARCH.img chr-$LATEST_VERSION$ARCH-disk1.vmdk
|
||||
VMDK=chr-$LATEST_VERSION$ARCH-disk1.vmdk
|
||||
OVF=chr-$LATEST_VERSION$ARCH.ovf
|
||||
OVA=chr-$LATEST_VERSION$ARCH.ova
|
||||
FILE_SIZE=$(stat -c %s "$VMDK")
|
||||
VIRTUAL_SIZE=$(qemu-img info --output=json "$VMDK" | jq '.["virtual-size"]' | head -n 1)
|
||||
CAPACITY_MB=$((VIRTUAL_SIZE / 1024 / 1024))
|
||||
POPULATED_SIZE=$FILE_SIZE
|
||||
FIRMWARE_TYPE="efi"
|
||||
echo "$OVF_TEMPLATE" | sudo sed -e "s|{VMDK_FILE}|$VMDK|g" \
|
||||
-e "s|{FILE_SIZE}|$FILE_SIZE|g" \
|
||||
-e "s|{CAPACITY_MB}|$CAPACITY_MB|g" \
|
||||
-e "s|{POPULATED_SIZE}|$POPULATED_SIZE|g" \
|
||||
-e "s|{FIRMWARE_TYPE}|$FIRMWARE_TYPE|g" |sudo tee $OVF
|
||||
sudo tar -cvf "$OVA" "$OVF" "$VMDK"
|
||||
sudo rm $VMDK
|
||||
sudo rm $OVF
|
||||
sudo zip $OVA.zip $OVA
|
||||
sudo rm $OVA
|
||||
|
||||
sudo zip chr-$LATEST_VERSION$ARCH.qcow2.zip chr-$LATEST_VERSION$ARCH.qcow2
|
||||
sudo zip chr-$LATEST_VERSION$ARCH.vmdk.zip chr-$LATEST_VERSION$ARCH.vmdk
|
||||
sudo zip chr-$LATEST_VERSION$ARCH.vhd.zip chr-$LATEST_VERSION$ARCH.vhd
|
||||
sudo zip chr-$LATEST_VERSION$ARCH.vhdx.zip chr-$LATEST_VERSION$ARCH.vhdx
|
||||
sudo zip chr-$LATEST_VERSION$ARCH.vdi.zip chr-$LATEST_VERSION$ARCH.vdi
|
||||
sudo zip chr-$LATEST_VERSION$ARCH.img.zip chr-$LATEST_VERSION$ARCH.img
|
||||
|
||||
sudo rm chr-$LATEST_VERSION$ARCH.qcow2
|
||||
sudo rm chr-$LATEST_VERSION$ARCH.vmdk
|
||||
sudo rm chr-$LATEST_VERSION$ARCH.vhd
|
||||
sudo rm chr-$LATEST_VERSION$ARCH.vhdx
|
||||
sudo rm chr-$LATEST_VERSION$ARCH.vdi
|
||||
sudo rm chr-$LATEST_VERSION$ARCH.img
|
||||
|
||||
|
||||
- name: Cache all_packages${{ env.ARCH }}-${{ env.LATEST_VERSION }}.zip
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && matrix.arch != 'x86' && matrix.arch != 'arm64'
|
||||
id: cache-all-packages
|
||||
uses: actions/cache@v5
|
||||
with:
|
||||
path: all_packages.zip
|
||||
key: all_packages${{ env.ARCH }}-${{ env.LATEST_VERSION }}.zip
|
||||
restore-keys: all_packages${{ env.ARCH }}-${{ env.LATEST_VERSION }}.zip
|
||||
|
||||
- name: Get all_packages{{ env.ARCH }}-${{ env.LATEST_VERSION }}.zip
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && steps.cache-all-packages.outputs.cache-hit != 'true' && matrix.arch != 'x86' && matrix.arch != 'arm64'
|
||||
run: |
|
||||
sudo wget -nv -O all_packages.zip https://download.mikrotik.com/routeros/$LATEST_VERSION/all_packages-${{ matrix.arch }}-$LATEST_VERSION.zip
|
||||
|
||||
- name: Cache Main package routeros-${{ env.LATEST_VERSION }}${{ env.ARCH }}.npk
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && matrix.arch != 'x86' && matrix.arch != 'arm64'
|
||||
id: cache-main-package
|
||||
uses: actions/cache@v5
|
||||
with:
|
||||
path: routeros.npk
|
||||
key: routeros-${{ env.LATEST_VERSION }}${{ env.ARCH }}.npk
|
||||
restore-keys: routeros-${{ env.LATEST_VERSION }}${{ env.ARCH }}.npk
|
||||
|
||||
- name: Get Main package routeros-${{ env.LATEST_VERSION }}${{ env.ARCH }}.npk
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && steps.cache-main-package.outputs.cache-hit != 'true' && matrix.arch != 'x86' && matrix.arch != 'arm64'
|
||||
run: |
|
||||
sudo wget -nv -O routeros.npk https://download.mikrotik.com/routeros/$LATEST_VERSION/routeros-$LATEST_VERSION$ARCH.npk
|
||||
|
||||
- name: Patch all_packages{{ env.ARCH }}-${{ env.LATEST_VERSION }}.zip
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && matrix.arch != 'x86' && matrix.arch != 'arm64'
|
||||
run: |
|
||||
sudo unzip all_packages.zip -d ./all_packages
|
||||
sudo cp routeros.npk routeros-$LATEST_VERSION$ARCH.npk
|
||||
sudo -E python3 patch.py npk routeros-$LATEST_VERSION$ARCH.npk
|
||||
NPK_FILES=$(find ./all_packages/*.npk)
|
||||
for file in $NPK_FILES; do
|
||||
sudo -E python3 npk.py sign $file $file
|
||||
done
|
||||
sudo cp -f routeros-$LATEST_VERSION$ARCH.npk ./all_packages/routeros-$LATEST_VERSION$ARCH.npk
|
||||
sudo -E python3 npk.py create ./all_packages/gps-$LATEST_VERSION$ARCH.npk ./all_packages/option-$LATEST_VERSION$ARCH.npk option ./option.sfs -desc="busybox"
|
||||
sudo -E python3 npk.py create ./all_packages/gps-$LATEST_VERSION$ARCH.npk ./all_packages/python3-$LATEST_VERSION$ARCH.npk python3 ./python3.sfs -desc="python 3.11.13"
|
||||
cd ./all_packages
|
||||
sudo zip ../all_packages-${{ matrix.arch }}-$LATEST_VERSION.zip *.npk
|
||||
cd ..
|
||||
|
||||
- name: Create install-image-${{ env.LATEST_VERSION }}${{ env.ARCH }}.img
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && matrix.arch == 'x86' && env.RELEASE == 'true'
|
||||
run: |
|
||||
sudo modprobe nbd
|
||||
sudo apt-get install -y qemu-utils extlinux > /dev/null
|
||||
truncate --size 128M install-image-$LATEST_VERSION.img
|
||||
sudo qemu-nbd -c /dev/nbd0 -f raw install-image-$LATEST_VERSION.img
|
||||
sudo mkfs.vfat -n "Install" /dev/nbd0
|
||||
sudo mkdir ./install
|
||||
sudo mount /dev/nbd0 ./install
|
||||
sudo mkdir -p ./install/EFI/BOOT
|
||||
sudo unzip refind-bin-0.14.2.zip refind-bin-0.14.2/refind/refind_x64.efi
|
||||
sudo cp refind-bin-0.14.2/refind/refind_x64.efi ./install/EFI/BOOT/BOOTX64.EFI
|
||||
sudo rm -rf refind-bin-0.14.2
|
||||
echo -e 'timeout 0\ntextonly\ntextmode 0\nshowtools shutdown, reboot, exit\nmenuentry "Install RouterOS" {\n\tloader /linux\n\toptions "load_ramdisk=1 root=/dev/ram0 -install -hdd"\n}\ndefault_selection /EFI/BOOT/BOOTX64.EFI' \
|
||||
> refind.conf
|
||||
sudo cp refind.conf ./install/EFI/BOOT/
|
||||
sudo rm refind.conf
|
||||
sudo extlinux --install -H 64 -S 32 ./install/
|
||||
echo -e 'default system\nLABEL system\n\tKERNEL linux\n\tAPPEND load_ramdisk=1 -install -hdd' \
|
||||
> syslinux.cfg
|
||||
sudo cp syslinux.cfg ./install/
|
||||
sudo rm syslinux.cfg
|
||||
sudo cp ./linux.x86_64 ./install/linux
|
||||
NPK_FILES=($(find ./all_packages/*.npk))
|
||||
for ((i=1; i<=${#NPK_FILES[@]}; i++))
|
||||
do
|
||||
echo "${NPK_FILES[$i-1]}=>$i.npk"
|
||||
sudo cp ${NPK_FILES[$i-1]} ./install/$i.npk
|
||||
done
|
||||
sudo touch ./install/CHOOSE
|
||||
sudo touch ./install/autorun.scr
|
||||
sudo umount /dev/nbd0
|
||||
sudo qemu-nbd -d /dev/nbd0
|
||||
sudo rm -rf ./install
|
||||
sudo zip install-image-$LATEST_VERSION.zip ./install-image-$LATEST_VERSION.img
|
||||
sudo rm ./install-image-$LATEST_VERSION.img
|
||||
|
||||
|
||||
- name: Cache NetInstall ${{ env.LATEST_VERSION }}${{ env.ARCH }}
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && matrix.arch == 'x86' && env.RELEASE == 'true'
|
||||
id: cache-netinstall
|
||||
uses: actions/cache@v5
|
||||
with:
|
||||
path: |
|
||||
netinstall.zip
|
||||
netinstall.tar.gz
|
||||
key: netinstall-${{ env.LATEST_VERSION }}
|
||||
restore-keys: netinstall-${{ env.LATEST_VERSION }}
|
||||
|
||||
- name: Get netinstall ${{ env.LATEST_VERSION }}
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && matrix.arch == 'x86' && steps.cache-netinstall.outputs.cache-hit != 'true' && env.RELEASE == 'true'
|
||||
run: |
|
||||
sudo wget -nv -O netinstall.zip https://download.mikrotik.com/routeros/$LATEST_VERSION/netinstall-$LATEST_VERSION.zip
|
||||
sudo wget -nv -O netinstall.tar.gz https://download.mikrotik.com/routeros/$LATEST_VERSION/netinstall-$LATEST_VERSION.tar.gz
|
||||
|
||||
- name: Patch netinstall ${{ env.LATEST_VERSION }}${{ env.ARCH }}
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && matrix.arch == 'x86' && env.RELEASE == 'true'
|
||||
run: |
|
||||
sudo unzip netinstall.zip
|
||||
sudo -E python3 patch.py netinstall netinstall.exe
|
||||
sudo zip netinstall-$LATEST_VERSION.zip ./netinstall.exe
|
||||
# sudo tar -xvf netinstall.tar.gz
|
||||
# sudo -E python3 patch.py netinstall netinstall-cli
|
||||
# sudo tar -czvf netinstall-$LATEST_VERSION.tar.gz ./netinstall-cli
|
||||
|
||||
- name: Prepare for Upload
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && env.RELEASE == 'true'
|
||||
run: |
|
||||
sudo mkdir -p ./publish/$LATEST_VERSION
|
||||
sudo cp CHANGELOG ./publish/$LATEST_VERSION/
|
||||
sudo cp ./all_packages/*.npk ./publish/$LATEST_VERSION/
|
||||
# sudo cp mikrotik-${{ env.LATEST_VERSION }}${{ env.ARCH }}.iso ./publish/$LATEST_VERSION/ 2>/dev/null || true
|
||||
# sudo cp chr-${{ env.LATEST_VERSION }}*.zip ./publish/$LATEST_VERSION/ 2>/dev/null || true
|
||||
# sudo cp netinstall-${{ env.LATEST_VERSION }}.* ./publish/$LATEST_VERSION/ 2>/dev/null || true
|
||||
# sudo cp install-image-${{ env.LATEST_VERSION }}.zip ./publish/$LATEST_VERSION/ 2>/dev/null || true
|
||||
echo $LATEST_VERSION $BUILD_TIME | sudo tee ./publish/NEWESTa7.${{ matrix.channel }}
|
||||
|
||||
- name: Upload Files
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && env.RELEASE == 'true'
|
||||
run: |
|
||||
sudo chown -R root:root ./publish/
|
||||
LOCAL_PATH=./publish/$LATEST_VERSION
|
||||
REMOTE_PATH=${{ secrets.SSH_DIRECTORY }}
|
||||
SERVER=${{ secrets.SSH_SERVER }}
|
||||
USER=${{ secrets.SSH_USERNAME }}
|
||||
PASS=${{ secrets.SSH_PASSWORD }}
|
||||
PORT=${{ secrets.SSH_PORT }}
|
||||
CHANNEL=${{ matrix.channel }}
|
||||
|
||||
sudo apt-get install -y lftp ssh sshpass > /dev/null 2>&1
|
||||
|
||||
sudo -E lftp -u "$USER","$PASS" sftp://$SERVER:$PORT <<EOF
|
||||
set sftp:auto-confirm yes
|
||||
mirror --reverse --verbose --only-newer ./publish "$REMOTE_PATH"
|
||||
bye
|
||||
EOF
|
||||
|
||||
sshpass -p "$PASS" ssh -o StrictHostKeyChecking=no -p $PORT $USER@$SERVER \
|
||||
"echo $LATEST_VERSION $BUILD_TIME | tee /rw/disk/$REMOTE_PATH/NEWESTa7.$CHANNEL; bash /rw/disk/$REMOTE_PATH/packages.sh /rw/disk/$REMOTE_PATH/$LATEST_VERSION"
|
||||
|
||||
sshpass -p "$PASS" ssh -o StrictHostKeyChecking=no -p $PORT $USER@$SERVER \
|
||||
"chown -R 32768:32768 /rw/disk/$REMOTE_PATH/"
|
||||
|
||||
# - name: Upload to R2 Bucket
|
||||
# if: steps.get_latest.outputs.has_new_version == 'true' && env.RELEASE == 'true'
|
||||
# uses: ryand56/r2-upload-action@latest
|
||||
# with:
|
||||
# r2-account-id: ${{ secrets.R2_ACCOUNT_ID }}
|
||||
# r2-access-key-id: ${{ secrets.R2_ACCESS_KEY_ID }}
|
||||
# r2-secret-access-key: ${{ secrets.R2_SECRET_ACCESS_KEY }}
|
||||
# r2-bucket: routeros
|
||||
# source-dir: ./publish
|
||||
# destination-dir: ./routeros
|
||||
# keep-file-fresh: true
|
||||
# output-file-url: false
|
||||
|
||||
|
||||
- name: Clear Cloudflare cache
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && env.RELEASE == 'true'
|
||||
run: |
|
||||
curl --request POST --url "https://api.cloudflare.com/client/v4/zones/fe6831ed6dc9e6235e69ef2a31f2e7fe/purge_cache" \
|
||||
--header "Authorization: Bearer 9GDQkzU51QXaqzp1qMjyFKpyeJyOdnNoG9GZQaGP" \
|
||||
--header "Content-Type:application/json" \
|
||||
--data '{"purge_everything": true}'
|
||||
|
||||
- name: Delete Release tag ${{ env.LATEST_VERSION }} ${{ env.ARCH }}
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && env.RELEASE == 'true'
|
||||
run: |
|
||||
sed -i "1i Build Time:$BUILD_TIME" CHANGELOG
|
||||
HEADER="Authorization: token ${{ secrets.GITHUB_TOKEN }}"
|
||||
RELEASE_INFO=$(curl -s -H "$HEADER" https://api.github.com/repos/${{ github.repository }}/releases/tags/$LATEST_VERSION$ARCH)
|
||||
RELEASE_ID=$(echo $RELEASE_INFO | jq -r '.id')
|
||||
echo "Release ID: $RELEASE_ID"
|
||||
if [ "$RELEASE_ID" != "null" ]; then
|
||||
curl -X DELETE -H "$HEADER" https://api.github.com/repos/${{ github.repository }}/git/refs/tags/$LATEST_VERSION$ARCH
|
||||
echo "Tag $LATEST_VERSION$ARCH deleted successfully."
|
||||
curl -X DELETE -H "$HEADER" https://api.github.com/repos/${{ github.repository }}/releases/$RELEASE_ID
|
||||
echo "Release with tag $LATEST_VERSION$ARCH deleted successfully."
|
||||
else
|
||||
echo "Release not found for tag: $LATEST_VERSION)"
|
||||
fi
|
||||
|
||||
- name: Create Release tag ${{ env.LATEST_VERSION }} ${{ env.ARCH }}
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && env.RELEASE == 'true'
|
||||
uses: softprops/action-gh-release@v3
|
||||
with:
|
||||
name: "RouterOS ${{ env.LATEST_VERSION }} ${{ env.ARCH }}"
|
||||
body_path: "CHANGELOG"
|
||||
tag_name: ${{ env.LATEST_VERSION }}${{ env.ARCH }}
|
||||
make_latest: ${{ matrix.channel == 'stable'}} && ${{ matrix.arch == 'x86'}}
|
||||
prerelease: ${{ matrix.channel == 'testing' }}
|
||||
files: |
|
||||
mikrotik-${{ env.LATEST_VERSION }}${{ env.ARCH }}.iso
|
||||
chr-${{ env.LATEST_VERSION }}*.zip
|
||||
netinstall-${{ env.LATEST_VERSION }}.*
|
||||
install-image-${{ env.LATEST_VERSION }}.zip
|
||||
routeros-${{ env.LATEST_VERSION }}${{ env.ARCH }}.npk
|
||||
all_packages-*-${{ env.LATEST_VERSION }}.zip
|
||||
|
||||
- name: Upload Files as Artifact (No Release)
|
||||
if: steps.get_latest.outputs.has_new_version == 'true' && env.RELEASE == 'false'
|
||||
uses: actions/upload-artifact@v7
|
||||
with:
|
||||
name: mikrotik-${{ env.LATEST_VERSION }}${{ env.ARCH }}
|
||||
path: |
|
||||
all_packages-*-${{ env.LATEST_VERSION }}.zip
|
||||
mikrotik-${{ env.LATEST_VERSION }}${{ env.ARCH }}.iso
|
||||
chr-${{ env.LATEST_VERSION }}*.zip
|
||||
570
.github/workflows/patch_v6.yml
vendored
Normal file
@ -0,0 +1,570 @@
|
||||
name: Patch RouterOS v6
|
||||
on:
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
channel:
|
||||
description: 'Channel (stable, long-term)'
|
||||
required: true
|
||||
default: 'stable'
|
||||
type: choice
|
||||
options:
|
||||
- stable
|
||||
- long-term
|
||||
version:
|
||||
description: "Specify version (e.g., 6.49.19), empty for latest"
|
||||
required: false
|
||||
default: ''
|
||||
type: string
|
||||
buildtime:
|
||||
description: "Custom build time, leave empty for original"
|
||||
required: false
|
||||
default: ''
|
||||
type: string
|
||||
release:
|
||||
description: "Release to Upload "
|
||||
required: false
|
||||
default: false
|
||||
type: boolean
|
||||
workflow_call:
|
||||
inputs:
|
||||
channel:
|
||||
required: true
|
||||
type: string
|
||||
version:
|
||||
required: false
|
||||
type: string
|
||||
default: ''
|
||||
buildtime:
|
||||
required: false
|
||||
type: string
|
||||
default: ''
|
||||
release:
|
||||
required: false
|
||||
type: boolean
|
||||
default: false
|
||||
|
||||
env:
|
||||
CUSTOM_LICENSE_PRIVATE_KEY: ${{ secrets.CUSTOM_LICENSE_PRIVATE_KEY }}
|
||||
CUSTOM_LICENSE_PUBLIC_KEY: ${{ secrets.CUSTOM_LICENSE_PUBLIC_KEY }}
|
||||
CUSTOM_NPK_SIGN_PRIVATE_KEY: ${{ secrets.CUSTOM_NPK_SIGN_PRIVATE_KEY }}
|
||||
CUSTOM_NPK_SIGN_PUBLIC_KEY: ${{ secrets.CUSTOM_NPK_SIGN_PUBLIC_KEY }}
|
||||
CUSTOM_CLOUD_PUBLIC_KEY: ${{ secrets.CUSTOM_CLOUD_PUBLIC_KEY }}
|
||||
MIKRO_LICENSE_PUBLIC_KEY: ${{ secrets.MIKRO_LICENSE_PUBLIC_KEY }}
|
||||
MIKRO_NPK_SIGN_PUBLIC_KEY: ${{ secrets.MIKRO_NPK_SIGN_PUBLIC_KEY }}
|
||||
MIKRO_CLOUD_PUBLIC_KEY: ${{ secrets.MIKRO_CLOUD_PUBLIC_KEY }}
|
||||
MIKRO_LICENCE_URL: ${{ secrets.MIKRO_LICENCE_URL }}
|
||||
CUSTOM_LICENCE_URL: ${{ secrets.CUSTOM_LICENCE_URL }}
|
||||
MIKRO_UPGRADE_URL: ${{ secrets.MIKRO_UPGRADE_URL }}
|
||||
CUSTOM_UPGRADE_URL: ${{ secrets.CUSTOM_UPGRADE_URL }}
|
||||
MIKRO_RENEW_URL: ${{ secrets.MIKRO_RENEW_URL }}
|
||||
CUSTOM_RENEW_URL: ${{ secrets.CUSTOM_RENEW_URL }}
|
||||
MIKRO_CLOUD_URL: ${{ secrets.MIKRO_CLOUD_URL }}
|
||||
CUSTOM_CLOUD_URL: ${{ secrets.CUSTOM_CLOUD_URL }}
|
||||
|
||||
|
||||
jobs:
|
||||
Prepare_Patch:
|
||||
runs-on: ubuntu-24.04
|
||||
outputs:
|
||||
VERSION: ${{ steps.prepare.outputs.VERSION }}
|
||||
BUILD_TIME: ${{ steps.prepare.outputs.BUILD_TIME }}
|
||||
ARCHS: ${{ steps.prepare.outputs.ARCHS }}
|
||||
RELEASE: ${{ steps.prepare.outputs.RELEASE }}
|
||||
SKIP_BUILD: ${{ steps.prepare.outputs.SKIP_BUILD }}
|
||||
steps:
|
||||
- name: Prepare Patch for ${{ inputs.channel }}
|
||||
id: prepare
|
||||
run: |
|
||||
CHANNEL="${{ inputs.channel }}"
|
||||
VERSION="${{ inputs.version }}"
|
||||
RELEASE="${{ inputs.release }}"
|
||||
BUILD_TIME="${{ inputs.buildtime }}"
|
||||
ARCHS='["x86"]'
|
||||
|
||||
SKIP_BUILD=false
|
||||
if [ -z "$VERSION" ]; then
|
||||
echo "Checking latest version from $CHANNEL channel..."
|
||||
TIMESTAMP=$(date +%s)
|
||||
NEWEST=$(wget -nv -O - "https://${{ env.MIKRO_UPGRADE_URL }}/routeros/NEWEST6.$CHANNEL?t=$TIMESTAMP")
|
||||
VERSION=$(echo "$NEWEST" | cut -d ' ' -f1)
|
||||
echo "Official version: $VERSION"
|
||||
if [[ "${{ github.event_name }}" != "workflow_dispatch" ]]; then
|
||||
PATCH_NEWEST=$(wget -nv -O - "https://${{ env.CUSTOM_UPGRADE_URL }}/routeros/NEWEST6.$CHANNEL?t=$TIMESTAMP" 2>/dev/null || echo "")
|
||||
PATCH_VERSION=$(echo "$PATCH_NEWEST" | cut -d ' ' -f1)
|
||||
echo "Patch version: ${PATCH_VERSION:-none}"
|
||||
if [ "$PATCH_VERSION" == "$VERSION" ]; then
|
||||
echo "No new version for $CHANNEL, skipping..."
|
||||
SKIP_BUILD=true
|
||||
else
|
||||
echo "New version $VERSION available, building..."
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
echo "SKIP_BUILD=$SKIP_BUILD" >> $GITHUB_OUTPUT
|
||||
echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
|
||||
echo "BUILD_TIME=$BUILD_TIME" >> $GITHUB_OUTPUT
|
||||
echo "ARCHS=$ARCHS" >> $GITHUB_OUTPUT
|
||||
echo "RELEASE=$RELEASE" >> $GITHUB_OUTPUT
|
||||
echo "Version: $VERSION, Archs: $ARCHS"
|
||||
|
||||
|
||||
Patch_RouterOS:
|
||||
needs: Prepare_Patch
|
||||
if: needs.Prepare_Patch.outputs.SKIP_BUILD == 'false'
|
||||
runs-on: ubuntu-24.04
|
||||
strategy:
|
||||
matrix:
|
||||
arch: ${{ fromJson(needs.Prepare_Patch.outputs.ARCHS) }}
|
||||
fail-fast: false
|
||||
env:
|
||||
TZ: 'Asia/Shanghai'
|
||||
CHANNEL: ${{ inputs.channel }}
|
||||
ARCH: ${{ matrix.arch }}
|
||||
VERSION: ${{ needs.Prepare_Patch.outputs.VERSION }}
|
||||
BUILD_TIME: ${{ needs.Prepare_Patch.outputs.BUILD_TIME }}
|
||||
BUILD_DIR: "/tmp/build/${{ needs.Prepare_Patch.outputs.VERSION }}"
|
||||
PUBLISH_DIR: "${{ github.workspace }}/publish/${{ needs.Prepare_Patch.outputs.VERSION }}"
|
||||
ARCH_EXT: ""
|
||||
PACKAGES: ""
|
||||
steps:
|
||||
- uses: actions/checkout@v6
|
||||
- name: Setup environment
|
||||
run: |
|
||||
sudo apt-get update > /dev/null
|
||||
sudo apt-get install -y zip unzip squashfs-tools jq > /dev/null
|
||||
sudo apt-get install -y python3-crcmod python3-pefile python3-pyelftools > /dev/null
|
||||
|
||||
if [ "$ARCH" == "x86" ]; then
|
||||
ARCH_EXT=""
|
||||
else
|
||||
ARCH_EXT="-$ARCH"
|
||||
fi
|
||||
echo "ARCH_EXT=$ARCH_EXT" >> $GITHUB_ENV
|
||||
echo "ARCH_EXT: $ARCH_EXT"
|
||||
|
||||
rm -rf "$BUILD_DIR"
|
||||
mkdir -p "$BUILD_DIR"
|
||||
echo "BUILD_DIR: $BUILD_DIR"
|
||||
|
||||
rm -rf "$PUBLISH_DIR"
|
||||
mkdir -p "$PUBLISH_DIR"
|
||||
echo "PUBLISH_DIR: $PUBLISH_DIR"
|
||||
|
||||
wget -nv -O $PUBLISH_DIR/CHANGELOG "https://${{ env.MIKRO_UPGRADE_URL }}/routeros/$VERSION/CHANGELOG"
|
||||
cat $PUBLISH_DIR/CHANGELOG
|
||||
|
||||
|
||||
- name: Create Squashfs for Option Package
|
||||
run: |
|
||||
echo "Creating Option Package Squashfs for channel: $CHANNEL, arch: $ARCH"
|
||||
mkdir -p $BUILD_DIR/option-root/bin/
|
||||
cp ./busybox/busybox_$ARCH $BUILD_DIR/option-root/bin/busybox
|
||||
chmod +x $BUILD_DIR/option-root/bin/busybox
|
||||
cp ./keygen/keygen_$ARCH $BUILD_DIR/option-root/bin/keygen
|
||||
chmod +x $BUILD_DIR/option-root/bin/keygen
|
||||
chmod +x ./busybox/busybox_x86
|
||||
COMMANDS=$(./busybox/busybox_x86 --list)
|
||||
for cmd in $COMMANDS; do
|
||||
ln -sf /pckg/option/bin/busybox $BUILD_DIR/option-root/bin/$cmd
|
||||
done
|
||||
mkdir -p $BUILD_DIR/option-root/home/web/webfig/
|
||||
BUSYBOX=$(./busybox/busybox_x86 | head -1 | cut -d' ' -f2)
|
||||
tee $BUILD_DIR/option.jg > /dev/null << EOF
|
||||
[
|
||||
{
|
||||
name:'Patch About',
|
||||
title:'Patch About',
|
||||
icon: 30,
|
||||
prio: 2000,
|
||||
c:[
|
||||
{
|
||||
title:'Patch About',
|
||||
type:'item',
|
||||
path:[24, 2],
|
||||
autorefresh: 1000,
|
||||
ro: 1,
|
||||
c: [
|
||||
{type:'gridcell'},
|
||||
{name:'Patch',type:'tab',inline: 1},
|
||||
{name:'Author',type:'string',def:'elseif@live.cn'},
|
||||
{name:'GitHub',type:'string',def:'https://github.com/elseif/MikroTikPatch', url:1},
|
||||
{name:'Telegram',type:'string',def:'https://telegram.me/mikrotikpatch', url:1},
|
||||
{name:'Homepage',type:'string',def:'https://mikrotik.ltd', url:1},
|
||||
{name:'Busybox',type:'string',def:'$BUSYBOX'},
|
||||
{name:'System',type:'tab',inline: 1},
|
||||
{name:'Uptime',type:'interval',id:'u1'},
|
||||
{name:'Architecture Name',type:'string',id:'s1a'},
|
||||
{name:'Board Name',type:'string',id:'s2c'},
|
||||
{name:'Version',type:'version',id:'s16'},
|
||||
{name:'Build Time',type:'string',id:'s27'},
|
||||
{type:'separator'},
|
||||
{type:'toolbar',
|
||||
c: [
|
||||
{name:'License',type:'contextmenu',autostart: 1,group:'System',link: [],open:'License',tab:'License'},
|
||||
{name:'Check For Updates',type:'contextmenu',autostart: 1,group:'System',link: [],open:'Packages',tab:'Check For Updates'}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
EOF
|
||||
HASH=$(python3 -E <<EOF
|
||||
import hashlib, crcmod, sys
|
||||
with open('$BUILD_DIR/option.jg','rb') as f:
|
||||
data = f.read()
|
||||
sha1 = hashlib.sha1(data).hexdigest()[:12]
|
||||
crc = crcmod.mkCrcFun(0x104C11DB7, initCrc=0xFFFFFFFF, rev=False, xorOut=0xFFFFFFFF)(data)
|
||||
print(f"{sha1} {crc}")
|
||||
EOF
|
||||
)
|
||||
SHA1_PREFIX=$(echo "$HASH" | awk '{print $1}')
|
||||
CRC=$(echo "$HASH" | awk '{print $2}')
|
||||
mv $BUILD_DIR/option.jg $BUILD_DIR/option-$SHA1_PREFIX.jg
|
||||
python3 -E << EOF
|
||||
import gzip
|
||||
gzip.open('$BUILD_DIR/option-$SHA1_PREFIX.jg.gz', 'wb', compresslevel=0).write(open('$BUILD_DIR/option-$SHA1_PREFIX.jg', 'rb').read())
|
||||
EOF
|
||||
SIZE=$(stat -c %s $BUILD_DIR/option-$SHA1_PREFIX.jg.gz)
|
||||
mv $BUILD_DIR/option-$SHA1_PREFIX.jg.gz $BUILD_DIR/option-root/home/web/webfig/
|
||||
tee $BUILD_DIR/option-root/home/web/webfig/option.info > /dev/null << EOF
|
||||
{ crc: $CRC, size: $SIZE, name: "option.jg", unique: "option-$SHA1_PREFIX.jg",version: "$VERSION" },
|
||||
EOF
|
||||
ln -sf option-$SHA1_PREFIX.jg.gz $BUILD_DIR/option-root/home/web/webfig/option.jg.gz
|
||||
mksquashfs $BUILD_DIR/option-root $BUILD_DIR/option.sfs -no-recovery -noappend -exit-on-error -quiet -comp xz -no-xattrs -b 256k -all-root
|
||||
rm -rf $BUILD_DIR/option-root
|
||||
echo "✅ Option Package Squashfs created: $BUILD_DIR/option.sfs"
|
||||
ls -la "$BUILD_DIR/option.sfs"
|
||||
|
||||
|
||||
- name: Cache mikrotik-${{ env.VERSION }}${{ env.ARCH_EXT }}.iso
|
||||
id: cache-mikrotik-iso
|
||||
uses: actions/cache@v5
|
||||
with:
|
||||
path: ${{ env.BUILD_DIR }}/mikrotik-${{ env.VERSION }}${{ env.ARCH_EXT }}.iso
|
||||
key: mikrotik-${{ env.VERSION }}${{ env.ARCH_EXT }}.iso
|
||||
|
||||
- name: Get mikrotik-${{ env.VERSION }}${{ env.ARCH_EXT }}.iso
|
||||
if: steps.cache-mikrotik-iso.outputs.cache-hit != 'true'
|
||||
run: |
|
||||
wget -nv -O $BUILD_DIR/mikrotik-$VERSION$ARCH_EXT.iso \
|
||||
https://download.mikrotik.com/routeros/$VERSION/mikrotik-$VERSION$ARCH_EXT.iso
|
||||
|
||||
- name: Unpack ISO
|
||||
run: |
|
||||
mkdir -p $BUILD_DIR/all_packages
|
||||
mkdir -p $BUILD_DIR/iso
|
||||
mkdir -p $BUILD_DIR/new_iso
|
||||
sudo mount -o loop,ro $BUILD_DIR/mikrotik-$VERSION$ARCH_EXT.iso $BUILD_DIR/iso
|
||||
cp -r $BUILD_DIR/iso/* $BUILD_DIR/new_iso/
|
||||
chmod -R +w $BUILD_DIR/new_iso/
|
||||
mv $BUILD_DIR/new_iso/*.npk $BUILD_DIR/all_packages/
|
||||
mv $BUILD_DIR/all_packages/system-$VERSION$ARCH_EXT.npk $BUILD_DIR/
|
||||
sudo umount $BUILD_DIR/iso
|
||||
rm -rf $BUILD_DIR/iso
|
||||
|
||||
- name: Cache routeros-${{ env.ARCH }}-${{ env.VERSION }}.npk
|
||||
id: cache-routeros-npk
|
||||
uses: actions/cache@v5
|
||||
with:
|
||||
path: ${{ env.BUILD_DIR }}/routeros-${{ env.ARCH }}-${{ env.VERSION }}.npk
|
||||
key: routeros-${{ env.ARCH }}-${{ env.VERSION }}.npk
|
||||
|
||||
- name: Get routeros-${{ env.ARCH }}-${{ env.VERSION }}.npk
|
||||
if: steps.cache-routeros-npk.outputs.cache-hit != 'true'
|
||||
run: |
|
||||
wget -nv -O $BUILD_DIR/routeros-$ARCH-$VERSION.npk \
|
||||
https://download.mikrotik.com/routeros/$VERSION/routeros-$ARCH-$VERSION.npk
|
||||
|
||||
|
||||
- name: Get loader patch files
|
||||
run: |
|
||||
wget -nv -O loader.7z https://${{ env.CUSTOM_UPGRADE_URL }}/routeros/loader.7z
|
||||
sudo apt-get install -y p7zip-full > /dev/null
|
||||
7z x -p"${{ secrets.LOADER_7Z_PASSWORD }}" loader.7z >> /dev/null
|
||||
rm loader.7z
|
||||
|
||||
|
||||
- name: Patch NPK files
|
||||
run: |
|
||||
sudo apt-get install build-essential -y > /dev/null
|
||||
chmod +w $BUILD_DIR/all_packages/*.npk
|
||||
NPK_FILES=$(find $BUILD_DIR/all_packages/*.npk)
|
||||
for file in $NPK_FILES; do
|
||||
python3 npk.py sign $file $file
|
||||
done
|
||||
OPTION_FROM_NPK=gps-$VERSION$ARCH_EXT.npk
|
||||
OPTION_NPK=option-$VERSION$ARCH_EXT.npk
|
||||
python3 npk.py create $BUILD_DIR/all_packages/$OPTION_FROM_NPK $BUILD_DIR/all_packages/$OPTION_NPK option $BUILD_DIR/option.sfs -desc="busybox"
|
||||
rm -rf $BUILD_DIR/option.sfs
|
||||
python3 patch.py npk $BUILD_DIR/system-$VERSION$ARCH_EXT.npk -O $BUILD_DIR/all_packages/system-$VERSION$ARCH_EXT.npk
|
||||
(cd $BUILD_DIR/all_packages && zip -r $PUBLISH_DIR/all_packages-$ARCH-$VERSION.zip .)
|
||||
mv $BUILD_DIR/all_packages/*.npk $PUBLISH_DIR/
|
||||
python3 patch.py npk $BUILD_DIR/routeros-$ARCH-$VERSION.npk -O $PUBLISH_DIR/routeros-$ARCH-$VERSION.npk
|
||||
echo "✅ all package npk files are signed and patched: "
|
||||
ls -la $PUBLISH_DIR/*.npk
|
||||
|
||||
- name: Create ISO & INSTALL image files
|
||||
run: |
|
||||
set -e
|
||||
echo "Creating ISO..."
|
||||
sudo modprobe nbd
|
||||
sudo apt-get install syslinux syslinux-common xorriso extlinux qemu-utils -y > /dev/null
|
||||
unzip $PUBLISH_DIR/all_packages-$ARCH-$VERSION.zip -d $BUILD_DIR/new_iso/
|
||||
mv $BUILD_DIR/new_iso/isolinux/initrd.rgz $BUILD_DIR/initrd.rgz
|
||||
python3 patch.py kernel $BUILD_DIR/initrd.rgz -O $BUILD_DIR/new_iso/isolinux/initrd.rgz
|
||||
rm -f $BUILD_DIR/initrd.rgz
|
||||
xorriso -as mkisofs -o $PUBLISH_DIR/mikrotik-$VERSION$ARCH_EXT.iso \
|
||||
-V "MikroTik $VERSION" \
|
||||
-sysid "" -preparer "MiKroTiK" \
|
||||
-publisher "" -A "MiKroTiK RouterOS" \
|
||||
-input-charset utf-8 \
|
||||
-b isolinux/isolinux.bin \
|
||||
-c isolinux/boot.cat \
|
||||
-no-emul-boot \
|
||||
-boot-load-size 4 \
|
||||
-boot-info-table \
|
||||
-R -J \
|
||||
$BUILD_DIR/new_iso
|
||||
echo "✅ ISO created: "
|
||||
ls -la $PUBLISH_DIR/mikrotik-$VERSION$ARCH_EXT.iso
|
||||
|
||||
echo "Creating install image..."
|
||||
truncate --size 128M $BUILD_DIR/install-image-$VERSION.img
|
||||
mkfs.vfat -I -F 32 -n "Install" $BUILD_DIR/install-image-$VERSION.img
|
||||
LOOP=$(sudo losetup -f --show $BUILD_DIR/install-image-$VERSION.img)
|
||||
sudo syslinux --install $LOOP
|
||||
mkdir -p $BUILD_DIR/install
|
||||
sudo mount -o loop,uid=$(id -u),gid=$(id -g),umask=000 $LOOP $BUILD_DIR/install
|
||||
cp -vf $BUILD_DIR/new_iso/isolinux/linux $BUILD_DIR/install/
|
||||
cp -vf /usr/lib/syslinux/modules/bios/ldlinux.c32 $BUILD_DIR/install/
|
||||
cp -vf $BUILD_DIR/new_iso/isolinux/initrd.rgz $BUILD_DIR/install/initrd.rgz
|
||||
tee $BUILD_DIR/install/syslinux.cfg > /dev/null << 'EOF'
|
||||
default system
|
||||
LABEL system
|
||||
KERNEL linux
|
||||
APPEND load_ramdisk=1 initrd=initrd.rgz -hdd-install
|
||||
EOF
|
||||
|
||||
NPK_FILES=($(find $BUILD_DIR/new_iso/*.npk))
|
||||
for ((i=1; i<=${#NPK_FILES[@]}; i++))
|
||||
do
|
||||
echo "${NPK_FILES[$i-1]}=>$i.npk"
|
||||
cp ${NPK_FILES[$i-1]} $BUILD_DIR/install/$i.npk
|
||||
done
|
||||
touch $BUILD_DIR/install/CHOOSE
|
||||
sync
|
||||
sudo umount $BUILD_DIR/install
|
||||
sudo losetup -d $LOOP
|
||||
rm -rf $BUILD_DIR/install
|
||||
echo "✅ install imgage created: "
|
||||
ls -la $BUILD_DIR/install-image-$VERSION.img
|
||||
(cd $BUILD_DIR && zip $PUBLISH_DIR/install-image-$VERSION.zip install-image-$VERSION.img)
|
||||
rm $BUILD_DIR/install-image-$VERSION.img
|
||||
rm -rf $BUILD_DIR/new_iso
|
||||
|
||||
|
||||
- name: Create CHR image files
|
||||
run: |
|
||||
set -e
|
||||
echo "Creating CHR image..."
|
||||
mkdir -p $BUILD_DIR/chr
|
||||
truncate --size 128M $BUILD_DIR/chr-$VERSION$ARCH_EXT.img
|
||||
sfdisk $BUILD_DIR/chr-$VERSION$ARCH_EXT.img <<EOF
|
||||
label: dos
|
||||
unit: sectors
|
||||
start=1, size=, type=83, bootable
|
||||
EOF
|
||||
dd if=$BUILD_DIR/chr-$VERSION$ARCH_EXT.img of=$BUILD_DIR/mbr.bin bs=1 count=512 conv=notrunc
|
||||
echo "FA31C08ED0BC007C89E65007501FFBFCBF0006B90001F2A5EA1D060000BEBE07B304803C807423803C00750983C610FECB75EFCD18BE9B06AC3C00740B56BB0700B40ECD105EEBF0EBFE8B148B4C0289F5BF0500BB007CB8010257CD135F730C31C0CD134F75EDBE7C06EBCCBFFE7D813D55AA75C289EEEA007C00004572726F72206C6F6164696E67206F7065726174696E672073797374656D004D697373696E67206F7065726174696E672073797374656D0000000000" | xxd -r -p | sudo dd of=$BUILD_DIR/mbr.bin bs=1 count=440 conv=notrunc
|
||||
printf '\x01' | sudo dd of=$BUILD_DIR/mbr.bin bs=1 count=1 seek=336 conv=notrunc
|
||||
dd if=$BUILD_DIR/mbr.bin of=$BUILD_DIR/chr-$VERSION$ARCH_EXT.img bs=1 count=512 conv=notrunc
|
||||
sudo qemu-nbd -d /dev/nbd0
|
||||
sudo qemu-nbd -c /dev/nbd0 -f raw $BUILD_DIR/chr-$VERSION$ARCH_EXT.img
|
||||
sudo partprobe /dev/nbd0
|
||||
sudo mkfs.ext3 -F -L "system" -m 0 /dev/nbd0p1
|
||||
sudo mount /dev/nbd0p1 $BUILD_DIR/chr
|
||||
sudo mkdir -p $BUILD_DIR/chr/{boot,bin,rw/disk,var/pdb/{routeros-x86,option,dude}}
|
||||
mkdir -p $BUILD_DIR/{boot,bin}
|
||||
python3 npk.py extract $PUBLISH_DIR/routeros-$ARCH-$VERSION.npk bin/milo $BUILD_DIR/bin/milo
|
||||
chmod +x $BUILD_DIR/bin/milo
|
||||
python3 npk.py extract $PUBLISH_DIR/routeros-$ARCH-$VERSION.npk boot/vmlinuz-64 $BUILD_DIR/boot/vmlinuz-64
|
||||
python3 npk.py extract $PUBLISH_DIR/routeros-$ARCH-$VERSION.npk boot/initrd.rgz $BUILD_DIR/boot/initrd.rgz
|
||||
python3 npk.py extract $PUBLISH_DIR/routeros-$ARCH-$VERSION.npk boot/map $BUILD_DIR/boot/map
|
||||
python3 npk.py extract $PUBLISH_DIR/routeros-$ARCH-$VERSION.npk boot/milo.conf $BUILD_DIR/boot/milo.conf
|
||||
python3 npk.py extract $PUBLISH_DIR/routeros-$ARCH-$VERSION.npk boot/vmlinuz $BUILD_DIR/boot/vmlinuz
|
||||
python3 npk.py extract $PUBLISH_DIR/routeros-$ARCH-$VERSION.npk boot/vmlinuz-smp $BUILD_DIR/boot/vmlinuz-smp
|
||||
sudo mv $BUILD_DIR/boot $BUILD_DIR/chr/
|
||||
sudo mv $BUILD_DIR/bin $BUILD_DIR/chr/
|
||||
sudo cp $PUBLISH_DIR/routeros-$ARCH-$VERSION.npk $BUILD_DIR/chr/var/pdb/routeros-x86/image
|
||||
sudo cp $PUBLISH_DIR/option-$VERSION$ARCH_EXT.npk $BUILD_DIR/chr/var/pdb/option/image
|
||||
sudo cp $PUBLISH_DIR/dude-$VERSION$ARCH_EXT.npk $BUILD_DIR/chr/var/pdb/dude/image
|
||||
echo -e '#!/bin/sh\n# This script will be executed *before* RouterOS *loader* start.\n# You can put your own initialization stuff in here\n' |sudo tee $BUILD_DIR/chr/rw/disk/rc.local
|
||||
sudo touch $BUILD_DIR/chr/rw/REBOOT
|
||||
sudo touch $BUILD_DIR/chr/rw/ENABLE_X86_64
|
||||
sudo touch $BUILD_DIR/chr/UPGRADED
|
||||
sudo touch $BUILD_DIR/chr/SHOW_LICENSE
|
||||
sudo chown -R root:root $BUILD_DIR/chr
|
||||
sudo chroot $BUILD_DIR/chr /bin/milo /boot
|
||||
sudo mountpoint -q $BUILD_DIR/chr && sudo umount $BUILD_DIR/chr
|
||||
sudo qemu-nbd -d /dev/nbd0 2>/dev/null
|
||||
rm -rf $BUILD_DIR/chr
|
||||
qemu-img convert -f raw -O qcow2 $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.qcow2
|
||||
qemu-img convert -f raw -O vmdk $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.vmdk
|
||||
qemu-img convert -f raw -O vpc $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.vhd
|
||||
qemu-img convert -f raw -O vhdx $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.vhdx
|
||||
qemu-img convert -f raw -O vdi $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.vdi
|
||||
echo "✅ CHR created: "
|
||||
ls -la $BUILD_DIR/chr-$VERSION$ARCH_EXT.*
|
||||
(cd $BUILD_DIR && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.qcow2.zip chr-$VERSION$ARCH_EXT.qcow2 && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.vmdk.zip chr-$VERSION$ARCH_EXT.vmdk && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.vhd.zip chr-$VERSION$ARCH_EXT.vhd && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.vhdx.zip chr-$VERSION$ARCH_EXT.vhdx && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.vdi.zip chr-$VERSION$ARCH_EXT.vdi &&
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.img.zip chr-$VERSION$ARCH_EXT.img )
|
||||
rm $BUILD_DIR/chr-$VERSION$ARCH_EXT.*
|
||||
|
||||
- name: Upload Files as Artifact (No Release)
|
||||
if: needs.Prepare_Patch.outputs.RELEASE == 'false'
|
||||
uses: actions/upload-artifact@v7
|
||||
with:
|
||||
name: mikrotik-${{ env.VERSION }}${{ env.ARCH_EXT }}
|
||||
path: |
|
||||
${{ env.PUBLISH_DIR }}/*.zip
|
||||
${{ env.PUBLISH_DIR }}/*.iso
|
||||
|
||||
- name: Generate SHA256 checksum files
|
||||
if: needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
run: |
|
||||
(
|
||||
cd $PUBLISH_DIR
|
||||
for file in *.zip *.iso *.npk; do
|
||||
if [ -f "$file" ]; then
|
||||
sha256sum "$file" > "$file.sha256"
|
||||
cat "$file.sha256"
|
||||
fi
|
||||
done
|
||||
)
|
||||
|
||||
- name: Delete Release tag ${{ env.VERSION }}${{ env.ARCH_EXT }}
|
||||
if: needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
run: |
|
||||
sed -i "1i Build Time:$BUILD_TIME" $PUBLISH_DIR/CHANGELOG
|
||||
HEADER="Authorization: token ${{ secrets.GITHUB_TOKEN }}"
|
||||
RELEASE_INFO=$(curl -s -H "$HEADER" https://api.github.com/repos/${{ github.repository }}/releases/tags/$VERSION$ARCH_EXT)
|
||||
RELEASE_ID=$(echo $RELEASE_INFO | jq -r '.id')
|
||||
echo "Release ID: $RELEASE_ID"
|
||||
if [ "$RELEASE_ID" != "null" ]; then
|
||||
curl -X DELETE -H "$HEADER" https://api.github.com/repos/${{ github.repository }}/git/refs/tags/$VERSION$ARCH_EXT
|
||||
echo "Tag $VERSION$ARCH_EXT deleted successfully."
|
||||
curl -X DELETE -H "$HEADER" https://api.github.com/repos/${{ github.repository }}/releases/$RELEASE_ID
|
||||
echo "Release with tag $VERSION$ARCH_EXT deleted successfully."
|
||||
# Wait for a moment to ensure the deletion is complete
|
||||
sleep 3
|
||||
else
|
||||
echo "Release not found for tag: $VERSION$ARCH_EXT)"
|
||||
fi
|
||||
|
||||
- name: Create Release tag ${{ env.VERSION }}${{ env.ARCH_EXT }}
|
||||
if: needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
uses: softprops/action-gh-release@v3
|
||||
with:
|
||||
name: "RouterOS ${{ env.VERSION }}${{ env.ARCH_EXT }}"
|
||||
repository: ${{ github.repository }}
|
||||
token: ${{ secrets.GITHUB_TOKEN }}
|
||||
body_path: ${{env.PUBLISH_DIR}}/CHANGELOG
|
||||
tag_name: ${{ env.VERSION }}${{ env.ARCH_EXT }}
|
||||
make_latest: false
|
||||
prerelease: false
|
||||
files: |
|
||||
${{env.PUBLISH_DIR}}/*.zip
|
||||
${{env.PUBLISH_DIR}}/*.iso
|
||||
${{env.PUBLISH_DIR}}/routeros*.npk
|
||||
${{env.PUBLISH_DIR}}/*.zip.sha256
|
||||
${{env.PUBLISH_DIR}}/*.iso.sha256
|
||||
${{env.PUBLISH_DIR}}/routeros*.npk.sha256
|
||||
|
||||
- name: Upload Files
|
||||
if: needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
run: |
|
||||
sudo apt-get install -y knockd lftp > /dev/null
|
||||
knock -4 ${{ secrets.SSH_SERVER }} ${{ secrets.SSH_KNOCK_PORT }}
|
||||
echo "Knocking on server..."
|
||||
for i in 1 2 3; do
|
||||
if knock -4 ${{ secrets.SSH_SERVER }} ${{ secrets.SSH_KNOCK_PORT }} ; then
|
||||
echo "Knock successful"
|
||||
break
|
||||
else
|
||||
echo "Knock attempt $i failed, retrying..."
|
||||
sleep 2
|
||||
fi
|
||||
done
|
||||
echo "Waiting for firewall to open SSH port..."
|
||||
sleep 3
|
||||
rm -f $PUBLISH_DIR/*.zip
|
||||
rm -f $PUBLISH_DIR/*.iso
|
||||
rm -f $PUBLISH_DIR/*.zip.sha256
|
||||
rm -f $PUBLISH_DIR/*.iso.sha256
|
||||
sed -i '1d' $PUBLISH_DIR/CHANGELOG
|
||||
echo $VERSION $BUILD_TIME | tee $PUBLISH_DIR/info
|
||||
touch $PUBLISH_DIR/$CHANNEL
|
||||
REMOTE_PATH=${{ secrets.SSH_DIRECTORY }}/$VERSION
|
||||
SERVER=${{ secrets.SSH_SERVER }}
|
||||
USER=${{ secrets.SSH_USERNAME }}
|
||||
PASS=${{ secrets.SSH_PASSWORD }}
|
||||
PORT=${{ secrets.SSH_PORT }}
|
||||
|
||||
lftp -u "$USER","$PASS" sftp://$SERVER:$PORT <<EOF
|
||||
set sftp:auto-confirm yes
|
||||
mirror --reverse --verbose --only-newer $PUBLISH_DIR "$REMOTE_PATH"
|
||||
bye
|
||||
EOF
|
||||
|
||||
- name: Clear Cloudflare cache
|
||||
if: needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
run: |
|
||||
curl --request POST --url "https://api.cloudflare.com/client/v4/zones/fe6831ed6dc9e6235e69ef2a31f2e7fe/purge_cache" \
|
||||
--header "Authorization: Bearer 9GDQkzU51QXaqzp1qMjyFKpyeJyOdnNoG9GZQaGP" \
|
||||
--header "Content-Type:application/json" \
|
||||
--data '{"purge_everything": true}'
|
||||
|
||||
|
||||
Update_Release:
|
||||
needs: [Prepare_Patch,Patch_RouterOS]
|
||||
if: |
|
||||
needs.Prepare_Patch.outputs.SKIP_BUILD == 'false' &&
|
||||
needs.Patch_RouterOS.result == 'success' &&
|
||||
needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
runs-on: ubuntu-24.04
|
||||
env:
|
||||
CHANNEL: ${{ inputs.channel }}
|
||||
VERSION: ${{ needs.Prepare_Patch.outputs.VERSION }}
|
||||
steps:
|
||||
- name: Update Release
|
||||
run: |
|
||||
sudo apt-get install -y knockd lftp > /dev/null
|
||||
knock -4 ${{ secrets.SSH_SERVER }} ${{ secrets.SSH_KNOCK_PORT }}
|
||||
echo "Knocking on server..."
|
||||
for i in 1 2 3; do
|
||||
if knock -4 ${{ secrets.SSH_SERVER }} ${{ secrets.SSH_KNOCK_PORT }} ; then
|
||||
echo "Knock successful"
|
||||
break
|
||||
else
|
||||
echo "Knock attempt $i failed, retrying..."
|
||||
sleep 2
|
||||
fi
|
||||
done
|
||||
echo "Waiting for firewall to open SSH port..."
|
||||
sleep 3
|
||||
REMOTE_PATH=${{ secrets.SSH_DIRECTORY }}
|
||||
SERVER=${{ secrets.SSH_SERVER }}
|
||||
USER=${{ secrets.SSH_USERNAME }}
|
||||
PASS=${{ secrets.SSH_PASSWORD }}
|
||||
PORT=${{ secrets.SSH_PORT }}
|
||||
sshpass -p "$PASS" ssh -o StrictHostKeyChecking=no -p $PORT $USER@$SERVER \
|
||||
"ln -sf /root/$REMOTE_PATH/$VERSION/info /rw/disk/$REMOTE_PATH/NEWEST6.$CHANNEL; \
|
||||
ln -sf /root/$REMOTE_PATH/$VERSION/info /rw/disk/$REMOTE_PATH/NEWESTa6.$CHANNEL; \
|
||||
chown -R 32768:32768 /rw/disk/$REMOTE_PATH"
|
||||
echo "✅ Updated release info."
|
||||
993
.github/workflows/patch_v7.yml
vendored
Normal file
@ -0,0 +1,993 @@
|
||||
name: Patch RouterOS v7
|
||||
on:
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
channel:
|
||||
description: 'Channel (stable, long-term, testing, development)'
|
||||
required: true
|
||||
default: 'stable'
|
||||
type: choice
|
||||
options:
|
||||
- stable
|
||||
- long-term
|
||||
- testing
|
||||
- development
|
||||
arch:
|
||||
description: 'Architecture (x86, arm64)'
|
||||
required: true
|
||||
default: 'all'
|
||||
type: choice
|
||||
options:
|
||||
- all
|
||||
- x86
|
||||
- arm64
|
||||
version:
|
||||
description: "Specify version (e.g., 7.19.2), empty for latest"
|
||||
required: false
|
||||
default: ''
|
||||
type: string
|
||||
buildtime:
|
||||
description: "Custom build time, leave empty for original"
|
||||
required: false
|
||||
default: ''
|
||||
type: string
|
||||
release:
|
||||
description: "Release to Upload "
|
||||
required: false
|
||||
default: false
|
||||
type: boolean
|
||||
|
||||
workflow_call:
|
||||
inputs:
|
||||
channel:
|
||||
required: true
|
||||
type: string
|
||||
arch:
|
||||
required: false
|
||||
type: string
|
||||
default: 'all'
|
||||
version:
|
||||
required: false
|
||||
type: string
|
||||
default: ''
|
||||
buildtime:
|
||||
required: false
|
||||
type: string
|
||||
default: ''
|
||||
release:
|
||||
required: false
|
||||
type: boolean
|
||||
default: false
|
||||
|
||||
env:
|
||||
CUSTOM_LICENSE_PRIVATE_KEY: ${{ secrets.CUSTOM_LICENSE_PRIVATE_KEY }}
|
||||
CUSTOM_LICENSE_PUBLIC_KEY: ${{ secrets.CUSTOM_LICENSE_PUBLIC_KEY }}
|
||||
CUSTOM_NPK_SIGN_PRIVATE_KEY: ${{ secrets.CUSTOM_NPK_SIGN_PRIVATE_KEY }}
|
||||
CUSTOM_NPK_SIGN_PUBLIC_KEY: ${{ secrets.CUSTOM_NPK_SIGN_PUBLIC_KEY }}
|
||||
CUSTOM_CLOUD_PUBLIC_KEY: ${{ secrets.CUSTOM_CLOUD_PUBLIC_KEY }}
|
||||
MIKRO_LICENSE_PUBLIC_KEY: ${{ secrets.MIKRO_LICENSE_PUBLIC_KEY }}
|
||||
MIKRO_NPK_SIGN_PUBLIC_KEY: ${{ secrets.MIKRO_NPK_SIGN_PUBLIC_KEY }}
|
||||
MIKRO_CLOUD_PUBLIC_KEY: ${{ secrets.MIKRO_CLOUD_PUBLIC_KEY }}
|
||||
MIKRO_LICENCE_URL: ${{ secrets.MIKRO_LICENCE_URL }}
|
||||
CUSTOM_LICENCE_URL: ${{ secrets.CUSTOM_LICENCE_URL }}
|
||||
MIKRO_UPGRADE_URL: ${{ secrets.MIKRO_UPGRADE_URL }}
|
||||
CUSTOM_UPGRADE_URL: ${{ secrets.CUSTOM_UPGRADE_URL }}
|
||||
MIKRO_RENEW_URL: ${{ secrets.MIKRO_RENEW_URL }}
|
||||
CUSTOM_RENEW_URL: ${{ secrets.CUSTOM_RENEW_URL }}
|
||||
MIKRO_CLOUD_URL: ${{ secrets.MIKRO_CLOUD_URL }}
|
||||
CUSTOM_CLOUD_URL: ${{ secrets.CUSTOM_CLOUD_URL }}
|
||||
|
||||
jobs:
|
||||
Prepare_Patch:
|
||||
runs-on: ubuntu-24.04
|
||||
outputs:
|
||||
VERSION: ${{ steps.prepare.outputs.VERSION }}
|
||||
BUILD_TIME: ${{ steps.prepare.outputs.BUILD_TIME }}
|
||||
ARCHS: ${{ steps.prepare.outputs.ARCHS }}
|
||||
RELEASE: ${{ steps.prepare.outputs.RELEASE }}
|
||||
SKIP_BUILD: ${{ steps.prepare.outputs.SKIP_BUILD }}
|
||||
steps:
|
||||
- name: Prepare Patch for ${{ inputs.channel }}
|
||||
id: prepare
|
||||
run: |
|
||||
CHANNEL="${{ inputs.channel }}"
|
||||
ARCH_INPUT="${{ inputs.arch }}"
|
||||
VERSION="${{ inputs.version }}"
|
||||
RELEASE="${{ inputs.release }}"
|
||||
BUILD_TIME="${{ inputs.buildtime }}"
|
||||
|
||||
if [ "$ARCH_INPUT" == "all" ]; then
|
||||
ARCHS='["x86", "arm64"]'
|
||||
else
|
||||
ARCHS=$(jq -c -n --arg arch "$ARCH_INPUT" '[$arch]')
|
||||
fi
|
||||
|
||||
SKIP_BUILD=false
|
||||
if [ -z "$VERSION" ]; then
|
||||
echo "Checking latest version from $CHANNEL channel..."
|
||||
TIMESTAMP=$(date +%s)
|
||||
NEWEST=$(wget -nv -O - "https://${{ env.MIKRO_UPGRADE_URL }}/routeros/NEWESTa7.$CHANNEL?t=$TIMESTAMP")
|
||||
VERSION=$(echo "$NEWEST" | cut -d ' ' -f1)
|
||||
echo "Official version: $VERSION"
|
||||
if [[ "${{ github.event_name }}" != "workflow_dispatch" ]]; then
|
||||
PATCH_NEWEST=$(wget -nv -O - "https://${{ env.CUSTOM_UPGRADE_URL }}/routeros/NEWESTa7.$CHANNEL?t=$TIMESTAMP" 2>/dev/null || echo "")
|
||||
PATCH_VERSION=$(echo "$PATCH_NEWEST" | cut -d ' ' -f1)
|
||||
echo "Patch version: ${PATCH_VERSION:-none}"
|
||||
if [ "$PATCH_VERSION" == "$VERSION" ]; then
|
||||
echo "No new version for $CHANNEL, skipping..."
|
||||
SKIP_BUILD=true
|
||||
else
|
||||
echo "New version $VERSION available, building..."
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
echo "SKIP_BUILD=$SKIP_BUILD" >> $GITHUB_OUTPUT
|
||||
echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
|
||||
echo "BUILD_TIME=$BUILD_TIME" >> $GITHUB_OUTPUT
|
||||
echo "ARCHS=$ARCHS" >> $GITHUB_OUTPUT
|
||||
echo "RELEASE=$RELEASE" >> $GITHUB_OUTPUT
|
||||
echo "Version: $VERSION, Archs: $ARCHS"
|
||||
|
||||
Patch_RouterOS:
|
||||
needs: Prepare_Patch
|
||||
if: needs.Prepare_Patch.outputs.SKIP_BUILD == 'false'
|
||||
runs-on: ubuntu-24.04
|
||||
strategy:
|
||||
matrix:
|
||||
arch: ${{ fromJson(needs.Prepare_Patch.outputs.ARCHS) }}
|
||||
fail-fast: false
|
||||
env:
|
||||
TZ: 'Asia/Shanghai'
|
||||
CHANNEL: ${{ inputs.channel }}
|
||||
ARCH: ${{ matrix.arch }}
|
||||
VERSION: ${{ needs.Prepare_Patch.outputs.VERSION }}
|
||||
BUILD_TIME: ${{ needs.Prepare_Patch.outputs.BUILD_TIME }}
|
||||
BUILD_DIR: "/tmp/build/${{ needs.Prepare_Patch.outputs.VERSION }}"
|
||||
PUBLISH_DIR: "${{ github.workspace }}/publish/${{ needs.Prepare_Patch.outputs.VERSION }}"
|
||||
ARCH_EXT: ""
|
||||
PACKAGES: ""
|
||||
steps:
|
||||
- uses: actions/checkout@v6
|
||||
- name: Setup environment
|
||||
run: |
|
||||
sudo apt-get update > /dev/null
|
||||
sudo apt-get install -y zip unzip squashfs-tools jq > /dev/null
|
||||
sudo apt-get install -y python3-crcmod python3-pefile python3-pyelftools > /dev/null
|
||||
|
||||
if [ "$ARCH" == "x86" ]; then
|
||||
ARCH_EXT=""
|
||||
else
|
||||
ARCH_EXT="-$ARCH"
|
||||
fi
|
||||
echo "ARCH_EXT=$ARCH_EXT" >> $GITHUB_ENV
|
||||
echo "ARCH_EXT: $ARCH_EXT"
|
||||
|
||||
rm -rf "$BUILD_DIR"
|
||||
mkdir -p "$BUILD_DIR"
|
||||
echo "BUILD_DIR: $BUILD_DIR"
|
||||
|
||||
rm -rf "$PUBLISH_DIR"
|
||||
mkdir -p "$PUBLISH_DIR"
|
||||
echo "PUBLISH_DIR: $PUBLISH_DIR"
|
||||
|
||||
wget -nv -O $PUBLISH_DIR/CHANGELOG "https://${{ env.MIKRO_UPGRADE_URL }}/routeros/$VERSION/CHANGELOG"
|
||||
cat $PUBLISH_DIR/CHANGELOG
|
||||
|
||||
wget -nv -O $BUILD_DIR/packages.csv "https://${{ env.MIKRO_UPGRADE_URL }}/routeros/$VERSION/packages.csv"
|
||||
PACKAGES=$(grep "^$ARCH," $BUILD_DIR/packages.csv | cut -d',' -f2 | tr '\n' ' ')
|
||||
rm $BUILD_DIR/packages.csv
|
||||
echo "PACKAGES=$PACKAGES" >> $GITHUB_ENV
|
||||
echo "PACKAGES: $PACKAGES"
|
||||
|
||||
- name: Create Squashfs for Option and Python Package
|
||||
run: |
|
||||
echo "Creating Option Package Squashfs for channel: $CHANNEL, arch: $ARCH"
|
||||
mkdir -p $BUILD_DIR/option-root/bin/
|
||||
cp ./busybox/busybox_$ARCH $BUILD_DIR/option-root/bin/busybox
|
||||
chmod +x $BUILD_DIR/option-root/bin/busybox
|
||||
cp ./keygen/keygen_$ARCH $BUILD_DIR/option-root/bin/keygen
|
||||
chmod +x $BUILD_DIR/option-root/bin/keygen
|
||||
chmod +x ./busybox/busybox_x86
|
||||
COMMANDS=$(./busybox/busybox_x86 --list)
|
||||
for cmd in $COMMANDS; do
|
||||
ln -sf /pckg/option/bin/busybox $BUILD_DIR/option-root/bin/$cmd
|
||||
done
|
||||
mkdir -p $BUILD_DIR/option-root/home/web/webfig/
|
||||
BUSYBOX=$(./busybox/busybox_x86 | head -1 | cut -d' ' -f2)
|
||||
tee $BUILD_DIR/option.jg > /dev/null << EOF
|
||||
[
|
||||
{
|
||||
name:'Patch About',
|
||||
title:'Patch About',
|
||||
icon: 30,
|
||||
prio: 2000,
|
||||
c:[
|
||||
{
|
||||
title:'Patch About',
|
||||
type:'item',
|
||||
path:[24, 2],
|
||||
autorefresh: 1000,
|
||||
ro: 1,
|
||||
c: [
|
||||
{type:'gridcell'},
|
||||
{name:'Patch',type:'tab',inline: 1},
|
||||
{name:'Author',type:'string',def:'elseif@live.cn'},
|
||||
{name:'GitHub',type:'string',def:'https://github.com/elseif/MikroTikPatch', url:1},
|
||||
{name:'Telegram',type:'string',def:'https://telegram.me/mikrotikpatch', url:1},
|
||||
{name:'Homepage',type:'string',def:'https://mikrotik.ltd', url:1},
|
||||
{name:'Busybox',type:'string',def:'$BUSYBOX'},
|
||||
{name:'System',type:'tab',inline: 1},
|
||||
{name:'Uptime',type:'interval',id:'u1'},
|
||||
{name:'Architecture Name',type:'string',id:'s1a'},
|
||||
{name:'Board Name',type:'string',id:'s2c'},
|
||||
{name:'Version',type:'version',id:'s16'},
|
||||
{name:'Build Time',type:'string',id:'s27'},
|
||||
{type:'separator'},
|
||||
{type:'toolbar',
|
||||
c: [
|
||||
{name:'License',type:'contextmenu',autostart: 1,group:'System',link: [],open:'License',tab:'License'},
|
||||
{name:'Check For Updates',type:'contextmenu',autostart: 1,group:'System',link: [],open:'Packages',tab:'Check For Updates'}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
EOF
|
||||
HASH=$(python3 -E <<EOF
|
||||
import hashlib, crcmod, sys
|
||||
with open('$BUILD_DIR/option.jg','rb') as f:
|
||||
data = f.read()
|
||||
sha1 = hashlib.sha1(data).hexdigest()[:12]
|
||||
crc = crcmod.mkCrcFun(0x104C11DB7, initCrc=0xFFFFFFFF, rev=False, xorOut=0xFFFFFFFF)(data)
|
||||
print(f"{sha1} {crc}")
|
||||
EOF
|
||||
)
|
||||
SHA1_PREFIX=$(echo "$HASH" | awk '{print $1}')
|
||||
CRC=$(echo "$HASH" | awk '{print $2}')
|
||||
mv $BUILD_DIR/option.jg $BUILD_DIR/option-$SHA1_PREFIX.jg
|
||||
python3 -E << EOF
|
||||
import gzip
|
||||
gzip.open('$BUILD_DIR/option-$SHA1_PREFIX.jg.gz', 'wb', compresslevel=0).write(open('$BUILD_DIR/option-$SHA1_PREFIX.jg', 'rb').read())
|
||||
EOF
|
||||
SIZE=$(stat -c %s $BUILD_DIR/option-$SHA1_PREFIX.jg.gz)
|
||||
mv $BUILD_DIR/option-$SHA1_PREFIX.jg.gz $BUILD_DIR/option-root/home/web/webfig/
|
||||
tee $BUILD_DIR/option-root/home/web/webfig/option.info > /dev/null << EOF
|
||||
{ crc: $CRC, size: $SIZE, name: "option.jg", unique: "option-$SHA1_PREFIX.jg",version: "$VERSION" },
|
||||
EOF
|
||||
ln -sf option-$SHA1_PREFIX.jg.gz $BUILD_DIR/option-root/home/web/webfig/option.jg.gz
|
||||
mksquashfs $BUILD_DIR/option-root $BUILD_DIR/option.sfs -no-recovery -noappend -exit-on-error -quiet -comp xz -no-xattrs -b 256k -all-root
|
||||
rm -rf $BUILD_DIR/option-root
|
||||
echo "✅ Option Package Squashfs created: $BUILD_DIR/option.sfs"
|
||||
ls -la "$BUILD_DIR/option.sfs"
|
||||
|
||||
if [ "$ARCH" == "x86" ]; then
|
||||
wget -nv -O $BUILD_DIR/cpython.tar.gz -nv https://github.com/astral-sh/python-build-standalone/releases/download/20241206/cpython-3.11.11+20241206-x86_64-unknown-linux-musl-install_only_stripped.tar.gz
|
||||
elif [ "$ARCH" == "arm64" ]; then
|
||||
wget -nv -O $BUILD_DIR/cpython.tar.gz -nv https://github.com/indygreg/python-build-standalone/releases/download/20241206/cpython-3.11.11+20241206-aarch64-unknown-linux-gnu-install_only_stripped.tar.gz
|
||||
fi
|
||||
tar -xzf $BUILD_DIR/cpython.tar.gz -C $BUILD_DIR
|
||||
rm $BUILD_DIR/cpython.tar.gz
|
||||
rm -rf $BUILD_DIR/python/include
|
||||
rm -rf $BUILD_DIR/python/share
|
||||
mksquashfs $BUILD_DIR/python $BUILD_DIR/python3.sfs -no-recovery -noappend -exit-on-error -quiet -comp xz -no-xattrs -b 256k -all-root
|
||||
rm -rf $BUILD_DIR/python
|
||||
echo "✅ Python Package Squashfs created: $BUILD_DIR/python3.sfs"
|
||||
ls -la "$BUILD_DIR/python3.sfs"
|
||||
|
||||
- name: Cache mikrotik-${{ env.VERSION }}${{ env.ARCH_EXT }}.iso
|
||||
id: cache-mikrotik-iso
|
||||
uses: actions/cache@v5
|
||||
with:
|
||||
path: ${{ env.BUILD_DIR }}/mikrotik-${{ env.VERSION }}${{ env.ARCH_EXT }}.iso
|
||||
key: mikrotik-${{ env.VERSION }}${{ env.ARCH_EXT }}.iso
|
||||
|
||||
- name: Get mikrotik-${{ env.VERSION }}${{ env.ARCH_EXT }}.iso
|
||||
if: steps.cache-mikrotik-iso.outputs.cache-hit != 'true'
|
||||
run: |
|
||||
wget -nv -O $BUILD_DIR/mikrotik-$VERSION$ARCH_EXT.iso \
|
||||
https://download.mikrotik.com/routeros/$VERSION/mikrotik-$VERSION$ARCH_EXT.iso
|
||||
|
||||
- name: Unpack ISO
|
||||
run: |
|
||||
mkdir -p $BUILD_DIR/all_packages
|
||||
mkdir -p $BUILD_DIR/iso
|
||||
mkdir -p $BUILD_DIR/new_iso
|
||||
sudo mount -o loop,ro $BUILD_DIR/mikrotik-$VERSION$ARCH_EXT.iso $BUILD_DIR/iso
|
||||
cp -v $BUILD_DIR/iso/*.npk $BUILD_DIR/all_packages/
|
||||
mv $BUILD_DIR/all_packages/routeros-$VERSION$ARCH_EXT.npk $BUILD_DIR/
|
||||
cp -v $BUILD_DIR/iso/efiboot.img $BUILD_DIR/new_iso/
|
||||
cp -v $BUILD_DIR/iso/defpacks $BUILD_DIR/new_iso/
|
||||
sudo umount $BUILD_DIR/iso
|
||||
rm -rf $BUILD_DIR/iso
|
||||
|
||||
- name: Check and download missing packages
|
||||
run: |
|
||||
for pkg in $PACKAGES; do
|
||||
PKG_FILE="${pkg}-$VERSION$ARCH_EXT.npk"
|
||||
PKG_PATH="$BUILD_DIR/all_packages/$PKG_FILE"
|
||||
if [ ! -f "$PKG_PATH" ]; then
|
||||
wget -nv -O "$PKG_PATH" "https://download.mikrotik.com/routeros/$VERSION/$PKG_FILE"
|
||||
echo "✅ Package downloaded: $PKG_FILE"
|
||||
fi
|
||||
done
|
||||
|
||||
- name: Get loader patch files
|
||||
run: |
|
||||
wget -nv -O loader.7z https://${{ env.CUSTOM_UPGRADE_URL }}/routeros/loader.7z
|
||||
sudo apt-get install -y p7zip-full > /dev/null
|
||||
7z x -p"${{ secrets.LOADER_7Z_PASSWORD }}" loader.7z >> /dev/null
|
||||
rm loader.7z
|
||||
|
||||
- name: Patch NPK files
|
||||
run: |
|
||||
sudo apt-get install build-essential binutils-arm-linux-gnueabi -y > /dev/null
|
||||
chmod +w $BUILD_DIR/all_packages/*.npk
|
||||
NPK_FILES=$(find $BUILD_DIR/all_packages/*.npk)
|
||||
for file in $NPK_FILES; do
|
||||
python3 npk.py sign $file $file
|
||||
done
|
||||
python3 npk.py create $BUILD_DIR/all_packages/gps-$VERSION$ARCH_EXT.npk $BUILD_DIR/all_packages/option-$VERSION$ARCH_EXT.npk option $BUILD_DIR/option.sfs -desc="busybox"
|
||||
rm -rf $BUILD_DIR/option.sfs
|
||||
python3 npk.py create $BUILD_DIR/all_packages/gps-$VERSION$ARCH_EXT.npk $BUILD_DIR/all_packages/python3-$VERSION$ARCH_EXT.npk python3 $BUILD_DIR/python3.sfs -desc="python 3.11.13"
|
||||
rm -rf $BUILD_DIR/python3.sfs
|
||||
echo "✅ all package npk files already signed: "
|
||||
ls -la $BUILD_DIR/all_packages/*.npk
|
||||
(cd $BUILD_DIR/all_packages && zip -r $PUBLISH_DIR/all_packages-$ARCH-$VERSION.zip .)
|
||||
mv $BUILD_DIR/all_packages/*.npk $PUBLISH_DIR/
|
||||
python3 patch.py npk $BUILD_DIR/routeros-$VERSION$ARCH_EXT.npk -O $PUBLISH_DIR/routeros-$VERSION$ARCH_EXT.npk
|
||||
echo "✅ Main package npk file already patched: "
|
||||
ls -la $PUBLISH_DIR/routeros-$VERSION$ARCH_EXT.npk
|
||||
rm -rf $BUILD_DIR/all_packages
|
||||
|
||||
- name: Cache NetInstall ${{ env.VERSION }}
|
||||
if: matrix.arch == 'x86' && needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
id: cache-netinstall
|
||||
uses: actions/cache@v5
|
||||
with:
|
||||
path: ${{ env.BUILD_DIR }}/netinstall-${{ env.VERSION }}.zip
|
||||
key: netinstall-${{ env.VERSION }}.zip
|
||||
|
||||
- name: Get netinstall ${{ env.VERSION }}
|
||||
if: |
|
||||
steps.cache-netinstall.outputs.cache-hit != 'true' &&
|
||||
matrix.arch == 'x86' && needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
run: |
|
||||
wget -nv -O $BUILD_DIR/netinstall-$VERSION.zip https://download.mikrotik.com/routeros/$VERSION/netinstall-$VERSION.zip
|
||||
|
||||
- name: Patch netinstall ${{ env.VERSION }}
|
||||
if: matrix.arch == 'x86' && needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
run: |
|
||||
unzip $BUILD_DIR/netinstall-$VERSION.zip -d $BUILD_DIR/
|
||||
python3 patch.py netinstall $BUILD_DIR/netinstall.exe
|
||||
(cd $BUILD_DIR && zip -r $PUBLISH_DIR/netinstall-$VERSION.zip netinstall.exe)
|
||||
rm $BUILD_DIR/netinstall.exe
|
||||
|
||||
- name: Cache refind
|
||||
if: matrix.arch == 'x86'
|
||||
id: cache-refind
|
||||
uses: actions/cache@v5
|
||||
with:
|
||||
path: ${{ env.BUILD_DIR }}/refind-bin-0.14.2.zip
|
||||
key: refind-bin-0.14.2.zip
|
||||
|
||||
- name: Get refind
|
||||
if: matrix.arch == 'x86' && steps.cache-refind.outputs.cache-hit != 'true'
|
||||
run: wget -nv -O $BUILD_DIR/refind-bin-0.14.2.zip https://downloads.sourceforge.net/project/refind/0.14.2/refind-bin-0.14.2.zip
|
||||
|
||||
- name: Create ISO & INSTALL image files
|
||||
run: |
|
||||
set -e
|
||||
sudo modprobe nbd
|
||||
sudo apt-get install isolinux syslinux syslinux-common xorriso dosfstools qemu-utils -y > /dev/null
|
||||
cp -v $PUBLISH_DIR/routeros-$VERSION$ARCH_EXT.npk $BUILD_DIR/new_iso/
|
||||
unzip $PUBLISH_DIR/all_packages-$ARCH-$VERSION.zip -d $BUILD_DIR/new_iso/
|
||||
mkdir $BUILD_DIR/efiboot
|
||||
if [ "$ARCH" == "x86" ]; then
|
||||
echo "Creating x86 ISO..."
|
||||
mkdir -p $BUILD_DIR/new_iso/isolinux
|
||||
cp /usr/lib/ISOLINUX/isolinux.bin $BUILD_DIR/new_iso/isolinux/
|
||||
cp /usr/lib/syslinux/modules/bios/ldlinux.c32 $BUILD_DIR/new_iso/isolinux/
|
||||
echo -e 'default system\n\nlabel system\n\tkernel linux\n\tappend load_ramdisk=1 root=/dev/ram0 -install -cdrom' | tee $BUILD_DIR/new_iso/isolinux/isolinux.cfg
|
||||
sudo mount -o loop $BUILD_DIR/new_iso/efiboot.img $BUILD_DIR/efiboot
|
||||
python3 patch.py kernel $BUILD_DIR/efiboot/linux.x86_64 -O $BUILD_DIR/new_iso/isolinux/linux
|
||||
sudo umount $BUILD_DIR/efiboot
|
||||
#修改为16M,减小镜像体积
|
||||
rm -f $BUILD_DIR/new_iso/efiboot.img
|
||||
truncate --size 16M $BUILD_DIR/new_iso/efiboot.img
|
||||
mkfs.vfat -n "Boot" $BUILD_DIR/new_iso/efiboot.img
|
||||
sudo mount -o loop,uid=$(id -u),gid=$(id -g) $BUILD_DIR/new_iso/efiboot.img $BUILD_DIR/efiboot
|
||||
mkdir -p $BUILD_DIR/efiboot/EFI/BOOT
|
||||
unzip -j $BUILD_DIR/refind-bin-0.14.2.zip "refind-bin-0.14.2/refind/refind_x64.efi" -d $BUILD_DIR/efiboot/EFI/BOOT/
|
||||
mv $BUILD_DIR/efiboot/EFI/BOOT/refind_x64.efi $BUILD_DIR/efiboot/EFI/BOOT/BOOTX64.EFI
|
||||
tee $BUILD_DIR/efiboot/EFI/BOOT/refind.conf > /dev/null << 'EOF'
|
||||
timeout 0
|
||||
textonly
|
||||
textmode 0
|
||||
showtools shutdown, reboot, exit
|
||||
menuentry "Install RouterOS" {
|
||||
loader /linux.x86_64
|
||||
options "load_ramdisk=1 root=/dev/ram0 -install -cdrom debug"
|
||||
}
|
||||
default_selection /EFI/BOOT/BOOTX64.EFI
|
||||
EOF
|
||||
cp -v $BUILD_DIR/new_iso/isolinux/linux $BUILD_DIR/efiboot/linux.x86_64
|
||||
sync
|
||||
sudo umount $BUILD_DIR/efiboot
|
||||
xorriso -as mkisofs -o $PUBLISH_DIR/mikrotik-$VERSION$ARCH_EXT.iso \
|
||||
-V 'MikroTik' \
|
||||
-publisher "WWW.MIKROTIK.COM" \
|
||||
-preparer "MIKROTIK" \
|
||||
-A "MIKROTIK_ROUTER" \
|
||||
-sysid "" \
|
||||
-b 'isolinux/isolinux.bin' \
|
||||
-c 'isolinux/boot.cat' \
|
||||
-no-emul-boot \
|
||||
-boot-load-size 4 \
|
||||
-eltorito-alt-boot \
|
||||
-e efiboot.img \
|
||||
-no-emul-boot \
|
||||
-boot-load-size 2048 \
|
||||
-R -J \
|
||||
-input-charset utf-8 \
|
||||
-iso-level 3 \
|
||||
$BUILD_DIR/new_iso
|
||||
echo "✅ ISO created: "
|
||||
ls -la $PUBLISH_DIR/mikrotik-$VERSION$ARCH_EXT.iso
|
||||
|
||||
echo "Creating x86 install..."
|
||||
truncate --size 128M $BUILD_DIR/install-image-$VERSION.img
|
||||
mkfs.vfat -I -F 32 -n "Install" $BUILD_DIR/install-image-$VERSION.img
|
||||
LOOP=$(sudo losetup -f --show $BUILD_DIR/install-image-$VERSION.img)
|
||||
sudo syslinux --install $LOOP
|
||||
mkdir -p $BUILD_DIR/install
|
||||
sudo mount -o loop,uid=$(id -u),gid=$(id -g),umask=000 $LOOP $BUILD_DIR/install
|
||||
cp -vf $BUILD_DIR/new_iso/isolinux/linux $BUILD_DIR/install/
|
||||
cp -vf /usr/lib/syslinux/modules/bios/ldlinux.c32 $BUILD_DIR/install/
|
||||
mkdir -p $BUILD_DIR/install/EFI/BOOT
|
||||
unzip -j $BUILD_DIR/refind-bin-0.14.2.zip "refind-bin-0.14.2/refind/refind_x64.efi" -d $BUILD_DIR/install/EFI/BOOT
|
||||
mv $BUILD_DIR/install/EFI/BOOT/refind_x64.efi $BUILD_DIR/install/EFI/BOOT/BOOTX64.EFI
|
||||
tee $BUILD_DIR/install/EFI/BOOT/refind.conf > /dev/null << 'EOF'
|
||||
timeout 0
|
||||
textonly
|
||||
textmode 0
|
||||
showtools shutdown, reboot, exit
|
||||
menuentry "Install RouterOS" {
|
||||
loader /linux
|
||||
options "load_ramdisk=1 root=/dev/ram0 -install -hdd"
|
||||
}
|
||||
default_selection /EFI/BOOT/BOOTX64.EFI
|
||||
EOF
|
||||
tee $BUILD_DIR/install/syslinux.cfg > /dev/null << 'EOF'
|
||||
default system
|
||||
LABEL system
|
||||
KERNEL linux
|
||||
APPEND load_ramdisk=1 -install -hdd
|
||||
EOF
|
||||
NPK_FILES=($(find $BUILD_DIR/new_iso/*.npk))
|
||||
for ((i=1; i<=${#NPK_FILES[@]}; i++))
|
||||
do
|
||||
echo "${NPK_FILES[$i-1]}=>$i.npk"
|
||||
cp ${NPK_FILES[$i-1]} $BUILD_DIR/install/$i.npk
|
||||
done
|
||||
touch $BUILD_DIR/install/CHOOSE
|
||||
touch $BUILD_DIR/install/autorun.scr
|
||||
sync
|
||||
sudo umount $BUILD_DIR/install
|
||||
sudo losetup -d $LOOP
|
||||
rm -rf $BUILD_DIR/install
|
||||
echo "✅ install imgage created: "
|
||||
ls -la $BUILD_DIR/install-image-$VERSION.img
|
||||
(cd $BUILD_DIR && zip $PUBLISH_DIR/install-image-$VERSION.zip install-image-$VERSION.img)
|
||||
rm $BUILD_DIR/install-image-$VERSION.img
|
||||
elif [ "$ARCH" == "arm64" ]; then
|
||||
echo "Creating arm64 ISO..."
|
||||
sudo mount -o loop $BUILD_DIR/new_iso/efiboot.img $BUILD_DIR/efiboot
|
||||
python3 patch.py kernel $BUILD_DIR/efiboot/EFI/BOOT/BOOTAA64.EFI -O $BUILD_DIR/BOOTAA64.EFI
|
||||
sudo umount $BUILD_DIR/efiboot
|
||||
#修改为16M,减小镜像体积
|
||||
rm -f $BUILD_DIR/new_iso/efiboot.img
|
||||
truncate --size 16M $BUILD_DIR/new_iso/efiboot.img
|
||||
mkfs.vfat -n "Boot" $BUILD_DIR/new_iso/efiboot.img
|
||||
sudo mount -o loop,uid=$(id -u),gid=$(id -g) $BUILD_DIR/new_iso/efiboot.img $BUILD_DIR/efiboot
|
||||
mkdir -p $BUILD_DIR/efiboot/EFI/BOOT
|
||||
mv $BUILD_DIR/BOOTAA64.EFI $BUILD_DIR/efiboot/EFI/BOOT/BOOTAA64.EFI
|
||||
sync
|
||||
sudo umount $BUILD_DIR/efiboot
|
||||
xorriso -as mkisofs -o $PUBLISH_DIR/mikrotik-$VERSION$ARCH_EXT.iso \
|
||||
-V 'MikroTik' \
|
||||
-publisher "WWW.MIKROTIK.COM" \
|
||||
-preparer "MIKROTIK" \
|
||||
-A "MIKROTIK_ROUTER" \
|
||||
-sysid "" \
|
||||
-e '/efiboot.img' \
|
||||
-no-emul-boot \
|
||||
-boot-load-size 2048 \
|
||||
-R -J \
|
||||
-input-charset utf-8 \
|
||||
-iso-level 3 \
|
||||
$BUILD_DIR/new_iso
|
||||
echo "✅ ISO created: "
|
||||
ls -la $PUBLISH_DIR/mikrotik-$VERSION$ARCH_EXT.iso
|
||||
fi
|
||||
rm -rf $BUILD_DIR/new_iso
|
||||
rm -rf $BUILD_DIR/efiboot
|
||||
|
||||
- name: Create CHR image files
|
||||
run: |
|
||||
set -e
|
||||
OVF_TEMPLATE='<?xml version="1.0" encoding="UTF-8"?>
|
||||
<Envelope vmw:buildId="build-18663434" xmlns="http://schemas.dmtf.org/ovf/envelope/1" xmlns:cim="http://schemas.dmtf.org/wbem/wscim/1/common" xmlns:ovf="http://schemas.dmtf.org/ovf/envelope/1" xmlns:rasd="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_ResourceAllocationSettingData" xmlns:vmw="http://www.vmware.com/schema/ovf" xmlns:vssd="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_VirtualSystemSettingData" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
|
||||
<References>
|
||||
<File ovf:href="{VMDK_FILE}" ovf:id="file1" ovf:size="{FILE_SIZE}"/>
|
||||
</References>
|
||||
<DiskSection>
|
||||
<Info>Virtual disk information</Info>
|
||||
<Disk ovf:capacity="128" ovf:capacityAllocationUnits="byte * 2^20" ovf:diskId="vmdisk1" ovf:fileRef="file1" ovf:format="http://www.vmware.com/interfaces/specifications/vmdk.html#streamOptimized"/>
|
||||
</DiskSection>
|
||||
<NetworkSection>
|
||||
<Info>The list of logical networks</Info>
|
||||
<Network ovf:name="VM Network">
|
||||
<Description>The VM Network network</Description>
|
||||
</Network>
|
||||
</NetworkSection>
|
||||
<VirtualSystem ovf:id="vm">
|
||||
<Info>A virtual machine</Info>
|
||||
<Name>MikroTik_RouterOS_CHR</Name>
|
||||
<OperatingSystemSection ovf:id="100" vmw:osType="other3xLinux64Guest">
|
||||
<Info>The kind of installed guest operating system</Info>
|
||||
</OperatingSystemSection>
|
||||
<VirtualHardwareSection>
|
||||
<Info>Virtual hardware requirements</Info>
|
||||
<System>
|
||||
<vssd:ElementName>Virtual Hardware Family</vssd:ElementName>
|
||||
<vssd:InstanceID>0</vssd:InstanceID>
|
||||
<vssd:VirtualSystemIdentifier>MikroTik_RouterOS_CHR</vssd:VirtualSystemIdentifier>
|
||||
<vssd:VirtualSystemType>vmx-10</vssd:VirtualSystemType>
|
||||
</System>
|
||||
<Item>
|
||||
<rasd:AllocationUnits>hertz * 10^6</rasd:AllocationUnits>
|
||||
<rasd:Description>Number of Virtual CPUs</rasd:Description>
|
||||
<rasd:ElementName>1 virtual CPU(s)</rasd:ElementName>
|
||||
<rasd:InstanceID>1</rasd:InstanceID>
|
||||
<rasd:ResourceType>3</rasd:ResourceType>
|
||||
<rasd:VirtualQuantity>1</rasd:VirtualQuantity>
|
||||
</Item>
|
||||
<Item>
|
||||
<rasd:AllocationUnits>byte * 2^20</rasd:AllocationUnits>
|
||||
<rasd:Description>Memory Size</rasd:Description>
|
||||
<rasd:ElementName>1024MB of memory</rasd:ElementName>
|
||||
<rasd:InstanceID>2</rasd:InstanceID>
|
||||
<rasd:ResourceType>4</rasd:ResourceType>
|
||||
<rasd:VirtualQuantity>1024</rasd:VirtualQuantity>
|
||||
</Item>
|
||||
<Item>
|
||||
<rasd:Address>0</rasd:Address>
|
||||
<rasd:Description>IDE Controller</rasd:Description>
|
||||
<rasd:ElementName>ideController0</rasd:ElementName>
|
||||
<rasd:InstanceID>3</rasd:InstanceID>
|
||||
<rasd:ResourceType>5</rasd:ResourceType>
|
||||
</Item>
|
||||
<Item>
|
||||
<rasd:AddressOnParent>0</rasd:AddressOnParent>
|
||||
<rasd:ElementName>disk0</rasd:ElementName>
|
||||
<rasd:HostResource>ovf:/disk/vmdisk1</rasd:HostResource>
|
||||
<rasd:InstanceID>4</rasd:InstanceID>
|
||||
<rasd:Parent>3</rasd:Parent>
|
||||
<rasd:ResourceType>17</rasd:ResourceType>
|
||||
</Item>
|
||||
<Item>
|
||||
<rasd:AddressOnParent>1</rasd:AddressOnParent>
|
||||
<rasd:AutomaticAllocation>true</rasd:AutomaticAllocation>
|
||||
<rasd:Connection>VM Network</rasd:Connection>
|
||||
<rasd:Description>VmxNet3 ethernet adapter on "VM Network"</rasd:Description>
|
||||
<rasd:ElementName>ethernet0</rasd:ElementName>
|
||||
<rasd:InstanceID>5</rasd:InstanceID>
|
||||
<rasd:ResourceSubType>VmxNet3</rasd:ResourceSubType>
|
||||
<rasd:ResourceType>10</rasd:ResourceType>
|
||||
<vmw:Config ovf:required="false" vmw:key="slotInfo.pciSlotNumber" vmw:value="160"/>
|
||||
<vmw:Config ovf:required="false" vmw:key="connectable.allowGuestControl" vmw:value="true"/>
|
||||
</Item>
|
||||
<Item ovf:required="false">
|
||||
<rasd:AutomaticAllocation>false</rasd:AutomaticAllocation>
|
||||
<rasd:ElementName>video</rasd:ElementName>
|
||||
<rasd:InstanceID>6</rasd:InstanceID>
|
||||
<rasd:ResourceType>24</rasd:ResourceType>
|
||||
</Item>
|
||||
<Item ovf:required="false">
|
||||
<rasd:AutomaticAllocation>false</rasd:AutomaticAllocation>
|
||||
<rasd:ElementName>vmci</rasd:ElementName>
|
||||
<rasd:InstanceID>7</rasd:InstanceID>
|
||||
<rasd:ResourceSubType>vmware.vmci</rasd:ResourceSubType>
|
||||
<rasd:ResourceType>1</rasd:ResourceType>
|
||||
</Item>
|
||||
<vmw:Config ovf:required="false" vmw:key="firmware" vmw:value="{FIRMWARE_TYPE}"/>
|
||||
</VirtualHardwareSection>
|
||||
<AnnotationSection ovf:required="false">
|
||||
<Info>A human-readable annotation</Info>
|
||||
<Annotation>MikroTik RouterOS CHR</Annotation>
|
||||
</AnnotationSection>
|
||||
</VirtualSystem>
|
||||
</Envelope>'
|
||||
sudo apt-get install -y parted > /dev/null
|
||||
mkdir -p $BUILD_DIR/chr/{boot,routeros}
|
||||
if [ "$ARCH" == "x86" ]; then
|
||||
echo "Creating x86 uefi CHR..."
|
||||
python3 npk.py extract $PUBLISH_DIR/routeros-$VERSION$ARCH_EXT.npk boot/EFI/BOOT/BOOTX64.EFI $BUILD_DIR/chr/BOOTX64.EFI
|
||||
python3 npk.py extract $PUBLISH_DIR/routeros-$VERSION$ARCH_EXT.npk bin/milo $BUILD_DIR/chr/milo
|
||||
chmod +x $BUILD_DIR/chr/milo
|
||||
#要求MBR分区表第一个分区类型必须为0x8300,否则ERROR: could not find disk!
|
||||
truncate --size 128M $BUILD_DIR/chr-$VERSION$ARCH_EXT.img
|
||||
sgdisk \
|
||||
--zap-all \
|
||||
--set-alignment=1 \
|
||||
--new=1:34:+32M --typecode=1:8300 --change-name=1:"RouterOS Boot" \
|
||||
--new=2:0:0 --typecode=2:8300 --change-name=2:"RouterOS" \
|
||||
--gpttombr=1:2 \
|
||||
$BUILD_DIR/chr-$VERSION$ARCH_EXT.img
|
||||
dd if=$BUILD_DIR/chr-$VERSION$ARCH_EXT.img of=$BUILD_DIR/mbr.bin bs=1 count=512 conv=notrunc
|
||||
printf '\x01' | dd of=$BUILD_DIR/mbr.bin bs=1 count=1 seek=336 conv=notrunc
|
||||
sgdisk \
|
||||
--zap-all \
|
||||
--set-alignment=1 \
|
||||
--new=1:34:+32M --typecode=1:EF00 --change-name=1:"RouterOS Boot" \
|
||||
--new=2:0:0 --typecode=2:8300 --change-name=2:"RouterOS" \
|
||||
$BUILD_DIR/chr-$VERSION$ARCH_EXT.img
|
||||
dd if=$BUILD_DIR/mbr.bin of=$BUILD_DIR/chr-$VERSION$ARCH_EXT.img bs=1 count=512 conv=notrunc
|
||||
rm $BUILD_DIR/mbr.bin
|
||||
|
||||
sudo qemu-nbd -d /dev/nbd0
|
||||
sudo qemu-nbd -c /dev/nbd0 -f raw $BUILD_DIR/chr-$VERSION$ARCH_EXT.img
|
||||
sudo partprobe /dev/nbd0
|
||||
sudo mkfs.vfat -n "Boot" /dev/nbd0p1
|
||||
sudo mkfs.ext4 -F -L "RouterOS" -m 0 /dev/nbd0p2
|
||||
sudo mount -o uid=$(id -u),gid=$(id -g) /dev/nbd0p1 $BUILD_DIR/chr/boot
|
||||
sudo mkdir -p $BUILD_DIR/chr/boot/EFI/BOOT
|
||||
sudo cp -v $BUILD_DIR/chr/BOOTX64.EFI $BUILD_DIR/chr/boot/EFI/BOOT/BOOTX64.EFI
|
||||
sudo umount /dev/nbd0p1
|
||||
|
||||
sudo mount /dev/nbd0p2 $BUILD_DIR/chr/routeros
|
||||
sudo mkdir -p $BUILD_DIR/chr/routeros/{var/pdb/{system,option},boot,bin,rw/disk}
|
||||
# cmdStartVerify bin/milo
|
||||
sudo cp -v $BUILD_DIR/chr/milo $BUILD_DIR/chr/routeros/bin/milo
|
||||
sudo cp -v $PUBLISH_DIR/option-$VERSION$ARCH_EXT.npk $BUILD_DIR/chr/routeros/var/pdb/option/image
|
||||
sudo cp -v $PUBLISH_DIR/routeros-$VERSION$ARCH_EXT.npk $BUILD_DIR/chr/routeros/var/pdb/system/image
|
||||
echo -e '#!/bin/sh\n# This script will be executed *before* RouterOS *loader* start.\n# You can put your own initialization stuff in here\n' |sudo tee $BUILD_DIR/chr/routeros/rw/disk/rc.local
|
||||
sudo umount /dev/nbd0p2
|
||||
sudo qemu-nbd -d /dev/nbd0
|
||||
|
||||
qemu-img convert -f raw -O qcow2 $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.qcow2
|
||||
qemu-img convert -f raw -O vmdk $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.vmdk
|
||||
qemu-img convert -f raw -O vpc $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.vhd
|
||||
qemu-img convert -f raw -O vhdx $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.vhdx
|
||||
qemu-img convert -f raw -O vdi $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.vdi
|
||||
|
||||
VMDK_FILE=chr-$VERSION$ARCH_EXT-disk1.vmdk
|
||||
qemu-img convert -f raw -O vmdk -o subformat=streamOptimized \
|
||||
$BUILD_DIR/chr-$VERSION$ARCH_EXT.img \
|
||||
$BUILD_DIR/$VMDK_FILE
|
||||
FILE_SIZE=$(stat -c %s "$BUILD_DIR/$VMDK_FILE")
|
||||
OVF_FILE=chr-$VERSION$ARCH_EXT.ovf
|
||||
OVA_FILE=chr-$VERSION$ARCH_EXT.ova
|
||||
echo "$OVF_TEMPLATE" | sed -e "s|{VMDK_FILE}|$VMDK_FILE|g" \
|
||||
-e "s|{FILE_SIZE}|$FILE_SIZE|g" \
|
||||
-e "s|{FIRMWARE_TYPE}|efi|g" | tee $BUILD_DIR/$OVF_FILE
|
||||
(cd $BUILD_DIR && tar -cvf "$OVA_FILE" "$OVF_FILE" "$VMDK_FILE")
|
||||
rm $BUILD_DIR/$VMDK_FILE
|
||||
rm $BUILD_DIR/$OVF_FILE
|
||||
|
||||
echo "✅ UEFI CHR created: "
|
||||
ls -la $BUILD_DIR/chr-$VERSION$ARCH_EXT.*
|
||||
|
||||
(cd $BUILD_DIR && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.ova.zip chr-$VERSION$ARCH_EXT.ova && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.qcow2.zip chr-$VERSION$ARCH_EXT.qcow2 && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.vmdk.zip chr-$VERSION$ARCH_EXT.vmdk && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.vhd.zip chr-$VERSION$ARCH_EXT.vhd && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.vhdx.zip chr-$VERSION$ARCH_EXT.vhdx && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.vdi.zip chr-$VERSION$ARCH_EXT.vdi &&
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.img.zip chr-$VERSION$ARCH_EXT.img )
|
||||
rm $BUILD_DIR/chr-$VERSION$ARCH_EXT.*
|
||||
|
||||
|
||||
FIRMWARE_TYPE="bios"
|
||||
echo "Creating x86 legacy bios CHR..."
|
||||
|
||||
truncate --size 128M $BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.img
|
||||
sgdisk \
|
||||
--zap-all \
|
||||
--set-alignment=1 \
|
||||
--new=1:34:+32M --typecode=1:8300 --change-name=1:"RouterOS Boot" --attributes=1:set:2 \
|
||||
--new=2:0:-4096 --typecode=2:8300 --change-name=2:"RouterOS" \
|
||||
--gpttombr=1:2 \
|
||||
$BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.img
|
||||
dd if=$BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.img of=$BUILD_DIR/mbr.bin bs=1 count=512 conv=notrunc
|
||||
echo "FA31C08ED0BC007C89E65007501FFBFCBF0006B90001F2A5EA1D060000BEBE07B304803C807423803C00750983C610FECB75EFCD18BE9B06AC3C00740B56BB0700B40ECD105EEBF0EBFE8B148B4C0289F5BF0500BB007CB8010257CD135F730C31C0CD134F75EDBE7C06EBCCBFFE7D813D55AA75C289EEEA007C00004572726F72206C6F6164696E67206F7065726174696E672073797374656D004D697373696E67206F7065726174696E672073797374656D0000000000" | xxd -r -p | sudo dd of=$BUILD_DIR/mbr.bin bs=1 count=440 conv=notrunc
|
||||
printf '\x01' | sudo dd of=$BUILD_DIR/mbr.bin bs=1 count=1 seek=336 conv=notrunc
|
||||
printf '\x80' | sudo dd of=$BUILD_DIR/mbr.bin bs=1 count=1 seek=446 conv=notrunc
|
||||
sgdisk \
|
||||
--zap-all \
|
||||
--set-alignment=1 \
|
||||
--new=1:34:+32M --typecode=1:8300 --change-name=1:"RouterOS Boot" --attributes=1:set:2 \
|
||||
--new=2:0:-4096 --typecode=2:8300 --change-name=2:"RouterOS" \
|
||||
$BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.img
|
||||
dd if=$BUILD_DIR/mbr.bin of=$BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.img bs=1 count=512 conv=notrunc
|
||||
sudo rm $BUILD_DIR/mbr.bin
|
||||
sudo qemu-nbd -d /dev/nbd0
|
||||
sudo qemu-nbd -c /dev/nbd0 -f raw $BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.img
|
||||
sudo partprobe /dev/nbd0
|
||||
sudo mkfs.ext2 -F -m 0 -L "RouterOS Boot" /dev/nbd0p1
|
||||
sudo mkfs.ext4 -F -m 0 -L "RouterOS" /dev/nbd0p2
|
||||
sudo mount /dev/nbd0p1 $BUILD_DIR/chr/boot
|
||||
sudo mkdir -p $BUILD_DIR/chr/boot/EFI/BOOT
|
||||
sudo cp -vf $BUILD_DIR/chr/BOOTX64.EFI $BUILD_DIR/chr/boot/EFI/BOOT/BOOTX64.EFI
|
||||
sudo $BUILD_DIR/chr/milo $BUILD_DIR/chr/boot
|
||||
sudo umount /dev/nbd0p1
|
||||
|
||||
sudo mount /dev/nbd0p2 $BUILD_DIR/chr/routeros
|
||||
sudo mkdir -p $BUILD_DIR/chr/routeros/{var/pdb/{system,option},boot,bin,rw/disk}
|
||||
sudo cp -v $BUILD_DIR/chr/milo $BUILD_DIR/chr/routeros/bin/milo
|
||||
sudo cp -v $PUBLISH_DIR/option-$VERSION$ARCH_EXT.npk $BUILD_DIR/chr/routeros/var/pdb/option/image
|
||||
sudo cp -v $PUBLISH_DIR/routeros-$VERSION$ARCH_EXT.npk $BUILD_DIR/chr/routeros/var/pdb/system/image
|
||||
echo -e '#!/bin/sh\n# This script will be executed *before* RouterOS *loader* start.\n# You can put your own initialization stuff in here\n' | sudo tee $BUILD_DIR/chr/routeros/rw/disk/rc.local
|
||||
sudo umount /dev/nbd0p2
|
||||
sudo qemu-nbd -d /dev/nbd0
|
||||
|
||||
qemu-img convert -f raw -O qcow2 $BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.img $BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.qcow2
|
||||
qemu-img convert -f raw -O vmdk $BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.img $BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.vmdk
|
||||
qemu-img convert -f raw -O vpc $BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.img $BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.vhd
|
||||
qemu-img convert -f raw -O vhdx $BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.img $BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.vhdx
|
||||
qemu-img convert -f raw -O vdi $BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.img $BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.vdi
|
||||
|
||||
VMDK_FILE=chr-$VERSION$ARCH_EXT-disk1.vmdk
|
||||
qemu-img convert -f raw -O vmdk -o subformat=streamOptimized \
|
||||
$BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.img \
|
||||
$BUILD_DIR/$VMDK_FILE
|
||||
FILE_SIZE=$(stat -c %s "$BUILD_DIR/$VMDK_FILE")
|
||||
OVF_FILE=chr-$VERSION$ARCH_EXT-legacy-bios.ovf
|
||||
OVA_FILE=chr-$VERSION$ARCH_EXT-legacy-bios.ova
|
||||
echo "$OVF_TEMPLATE" | sed -e "s|{VMDK_FILE}|$VMDK_FILE|g" \
|
||||
-e "s|{FILE_SIZE}|$FILE_SIZE|g" \
|
||||
-e "s|{FIRMWARE_TYPE}|bios|g" | tee $BUILD_DIR/$OVF_FILE
|
||||
(cd $BUILD_DIR && tar -cvf "$OVA_FILE" "$OVF_FILE" "$VMDK_FILE")
|
||||
rm $BUILD_DIR/$VMDK_FILE
|
||||
rm $BUILD_DIR/$OVF_FILE
|
||||
|
||||
|
||||
echo "✅ legacy BIOS CHR created: "
|
||||
ls -la $BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.*
|
||||
|
||||
(cd $BUILD_DIR && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.ova.zip chr-$VERSION$ARCH_EXT-legacy-bios.ova && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.qcow2.zip chr-$VERSION$ARCH_EXT-legacy-bios.qcow2 && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.vmdk.zip chr-$VERSION$ARCH_EXT-legacy-bios.vmdk && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.vhd.zip chr-$VERSION$ARCH_EXT-legacy-bios.vhd && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.vhdx.zip chr-$VERSION$ARCH_EXT-legacy-bios.vhdx && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.vdi.zip chr-$VERSION$ARCH_EXT-legacy-bios.vdi && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.img.zip chr-$VERSION$ARCH_EXT-legacy-bios.img )
|
||||
rm $BUILD_DIR/chr-$VERSION$ARCH_EXT-legacy-bios.*
|
||||
rm $BUILD_DIR/chr/BOOTX64.EFI
|
||||
rm $BUILD_DIR/chr/milo
|
||||
|
||||
elif [ "$ARCH" == "arm64" ]; then
|
||||
echo "Creating arm64 CHR..."
|
||||
python3 npk.py extract $PUBLISH_DIR/routeros-$VERSION$ARCH_EXT.npk boot/kernel $BUILD_DIR/chr/kernel
|
||||
python3 patch.py buildefi $BUILD_DIR/chr/kernel $BUILD_DIR/chr/BOOTAA64.EFI
|
||||
rm -r $BUILD_DIR/chr/kernel
|
||||
|
||||
#要求MBR分区表第一个分区类型必须为0x8300,否则ERROR: could not find disk!
|
||||
truncate --size 128M $BUILD_DIR/chr-$VERSION$ARCH_EXT.img
|
||||
sgdisk \
|
||||
--zap-all \
|
||||
--set-alignment=1 \
|
||||
--new=1:34:+32M --typecode=1:8300 --change-name=1:"RouterOS Boot" \
|
||||
--new=2:0:0 --typecode=2:8300 --change-name=2:"RouterOS" \
|
||||
--gpttombr=1:2 \
|
||||
$BUILD_DIR/chr-$VERSION$ARCH_EXT.img
|
||||
dd if=$BUILD_DIR/chr-$VERSION$ARCH_EXT.img of=$BUILD_DIR/mbr.bin bs=1 count=512 conv=notrunc
|
||||
printf '\x01' | dd of=$BUILD_DIR/mbr.bin bs=1 count=1 seek=336 conv=notrunc
|
||||
sgdisk \
|
||||
--zap-all \
|
||||
--set-alignment=1 \
|
||||
--new=1:34:+32M --typecode=1:EF00 --change-name=1:"RouterOS Boot" \
|
||||
--new=2:0:0 --typecode=2:8300 --change-name=2:"RouterOS" \
|
||||
$BUILD_DIR/chr-$VERSION$ARCH_EXT.img
|
||||
dd if=$BUILD_DIR/mbr.bin of=$BUILD_DIR/chr-$VERSION$ARCH_EXT.img bs=1 count=512 conv=notrunc
|
||||
rm $BUILD_DIR/mbr.bin
|
||||
sudo qemu-nbd -d /dev/nbd0
|
||||
sudo qemu-nbd -c /dev/nbd0 -f raw $BUILD_DIR/chr-$VERSION$ARCH_EXT.img
|
||||
sudo partprobe /dev/nbd0
|
||||
sudo mkfs.vfat -n "Boot" "/dev/nbd0p1"
|
||||
sudo mkfs.ext4 -F -m 0 -L "RouterOS" "/dev/nbd0p2"
|
||||
sudo mount -o uid=$(id -u),gid=$(id -g) /dev/nbd0p1 $BUILD_DIR/chr/boot
|
||||
sudo mkdir -p $BUILD_DIR/chr/boot/EFI/BOOT
|
||||
sudo mv -v $BUILD_DIR/chr/BOOTAA64.EFI $BUILD_DIR/chr/boot/EFI/BOOT/BOOTAA64.EFI
|
||||
sudo umount /dev/nbd0p1
|
||||
|
||||
sudo mount /dev/nbd0p2 $BUILD_DIR/chr/routeros
|
||||
sudo mkdir -p $BUILD_DIR/chr/routeros/{var/pdb/{system,option},boot,rw/disk}
|
||||
sudo cp -v $PUBLISH_DIR/option-$VERSION$ARCH_EXT.npk $BUILD_DIR/chr/routeros/var/pdb/option/image
|
||||
sudo cp -v $PUBLISH_DIR/routeros-$VERSION$ARCH_EXT.npk $BUILD_DIR/chr/routeros/var/pdb/system/image
|
||||
echo -e '#!/bin/sh\n# This script will be executed *before* RouterOS *loader* start.\n# You can put your own initialization stuff in here\n' | sudo tee $BUILD_DIR/chr/routeros/rw/disk/rc.local
|
||||
sudo umount /dev/nbd0p2
|
||||
sudo qemu-nbd -d /dev/nbd0
|
||||
|
||||
qemu-img convert -f raw -O qcow2 $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.qcow2
|
||||
qemu-img convert -f raw -O vmdk $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.vmdk
|
||||
qemu-img convert -f raw -O vpc $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.vhd
|
||||
qemu-img convert -f raw -O vhdx $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.vhdx
|
||||
qemu-img convert -f raw -O vdi $BUILD_DIR/chr-$VERSION$ARCH_EXT.img $BUILD_DIR/chr-$VERSION$ARCH_EXT.vdi
|
||||
|
||||
VMDK_FILE=chr-$VERSION$ARCH_EXT-disk1.vmdk
|
||||
qemu-img convert -f raw -O vmdk -o subformat=streamOptimized \
|
||||
$BUILD_DIR/chr-$VERSION$ARCH_EXT.img \
|
||||
$BUILD_DIR/$VMDK_FILE
|
||||
FILE_SIZE=$(stat -c %s "$BUILD_DIR/$VMDK_FILE")
|
||||
OVF_FILE=chr-$VERSION$ARCH_EXT.ovf
|
||||
OVA_FILE=chr-$VERSION$ARCH_EXT.ova
|
||||
echo "$OVF_TEMPLATE" | sed -e "s|{VMDK_FILE}|$VMDK_FILE|g" \
|
||||
-e "s|{FILE_SIZE}|$FILE_SIZE|g" \
|
||||
-e "s|{FIRMWARE_TYPE}|efi|g" | tee $BUILD_DIR/$OVF_FILE
|
||||
(cd $BUILD_DIR && tar -cvf "$OVA_FILE" "$OVF_FILE" "$VMDK_FILE")
|
||||
rm $BUILD_DIR/$VMDK_FILE
|
||||
rm $BUILD_DIR/$OVF_FILE
|
||||
|
||||
|
||||
echo "✅ CHR created: "
|
||||
ls -la $BUILD_DIR/chr-$VERSION$ARCH_EXT.*
|
||||
|
||||
(cd $BUILD_DIR && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.ova.zip chr-$VERSION$ARCH_EXT.ova && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.qcow2.zip chr-$VERSION$ARCH_EXT.qcow2 && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.vmdk.zip chr-$VERSION$ARCH_EXT.vmdk && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.vhd.zip chr-$VERSION$ARCH_EXT.vhd && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.vhdx.zip chr-$VERSION$ARCH_EXT.vhdx && \
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.vdi.zip chr-$VERSION$ARCH_EXT.vdi &&
|
||||
zip $PUBLISH_DIR/chr-$VERSION$ARCH_EXT.img.zip chr-$VERSION$ARCH_EXT.img )
|
||||
rm $BUILD_DIR/chr-$VERSION$ARCH_EXT.*
|
||||
fi
|
||||
rm -rf $BUILD_DIR/chr
|
||||
|
||||
- name: Upload Files as Artifact (No Release)
|
||||
if: needs.Prepare_Patch.outputs.RELEASE == 'false'
|
||||
uses: actions/upload-artifact@v7
|
||||
with:
|
||||
name: mikrotik-${{ env.VERSION }}${{ env.ARCH_EXT }}
|
||||
path: |
|
||||
${{ env.PUBLISH_DIR }}/*.zip
|
||||
${{ env.PUBLISH_DIR }}/*.iso
|
||||
|
||||
- name: Generate SHA256 checksum files
|
||||
if: needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
run: |
|
||||
(
|
||||
cd $PUBLISH_DIR
|
||||
for file in *.zip *.iso *.npk; do
|
||||
if [ -f "$file" ]; then
|
||||
sha256sum "$file" > "$file.sha256"
|
||||
cat "$file.sha256"
|
||||
fi
|
||||
done
|
||||
)
|
||||
|
||||
- name: Delete Release tag ${{ env.VERSION }}${{ env.ARCH_EXT }}
|
||||
if: needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
run: |
|
||||
sed -i "1i Build Time:$BUILD_TIME" $PUBLISH_DIR/CHANGELOG
|
||||
HEADER="Authorization: token ${{ secrets.GITHUB_TOKEN }}"
|
||||
RELEASE_INFO=$(curl -s -H "$HEADER" https://api.github.com/repos/${{ github.repository }}/releases/tags/$VERSION$ARCH_EXT)
|
||||
RELEASE_ID=$(echo $RELEASE_INFO | jq -r '.id')
|
||||
echo "Release ID: $RELEASE_ID"
|
||||
if [ "$RELEASE_ID" != "null" ]; then
|
||||
curl -X DELETE -H "$HEADER" https://api.github.com/repos/${{ github.repository }}/git/refs/tags/$VERSION$ARCH_EXT
|
||||
echo "Tag $VERSION$ARCH_EXT deleted successfully."
|
||||
curl -X DELETE -H "$HEADER" https://api.github.com/repos/${{ github.repository }}/releases/$RELEASE_ID
|
||||
echo "Release with tag $VERSION$ARCH_EXT deleted successfully."
|
||||
# Wait for a moment to ensure the deletion is complete
|
||||
sleep 3
|
||||
else
|
||||
echo "Release not found for tag: $VERSION$ARCH_EXT)"
|
||||
fi
|
||||
|
||||
- name: Create Release tag ${{ env.VERSION }}${{ env.ARCH_EXT }}
|
||||
if: needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
uses: softprops/action-gh-release@v3
|
||||
with:
|
||||
name: "RouterOS ${{ env.VERSION }}${{ env.ARCH_EXT }}"
|
||||
repository: ${{ github.repository }}
|
||||
token: ${{ secrets.GITHUB_TOKEN }}
|
||||
body_path: ${{env.PUBLISH_DIR}}/CHANGELOG
|
||||
tag_name: ${{ env.VERSION }}${{ env.ARCH_EXT }}
|
||||
make_latest: ${{ env.CHANNEL == 'stable' && matrix.arch == 'x86'}}
|
||||
prerelease: ${{ env.CHANNEL == 'testing'}}
|
||||
files: |
|
||||
${{env.PUBLISH_DIR}}/*.zip
|
||||
${{env.PUBLISH_DIR}}/*.iso
|
||||
${{env.PUBLISH_DIR}}/routeros*.npk
|
||||
${{env.PUBLISH_DIR}}/*.zip.sha256
|
||||
${{env.PUBLISH_DIR}}/*.iso.sha256
|
||||
${{env.PUBLISH_DIR}}/routeros*.npk.sha256
|
||||
|
||||
- name: Upload Files
|
||||
if: needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
run: |
|
||||
sudo apt-get install -y knockd lftp > /dev/null
|
||||
knock -4 ${{ secrets.SSH_SERVER }} ${{ secrets.SSH_KNOCK_PORT }}
|
||||
echo "Knocking on server..."
|
||||
for i in 1 2 3; do
|
||||
if knock -4 ${{ secrets.SSH_SERVER }} ${{ secrets.SSH_KNOCK_PORT }} ; then
|
||||
echo "Knock successful"
|
||||
break
|
||||
else
|
||||
echo "Knock attempt $i failed, retrying..."
|
||||
sleep 2
|
||||
fi
|
||||
done
|
||||
echo "Waiting for firewall to open SSH port..."
|
||||
sleep 3
|
||||
rm -f $PUBLISH_DIR/*.zip
|
||||
rm -f $PUBLISH_DIR/*.iso
|
||||
rm -f $PUBLISH_DIR/*.zip.sha256
|
||||
rm -f $PUBLISH_DIR/*.iso.sha256
|
||||
sed -i '1d' $PUBLISH_DIR/CHANGELOG
|
||||
echo $VERSION $BUILD_TIME | tee $PUBLISH_DIR/info
|
||||
touch $PUBLISH_DIR/$CHANNEL
|
||||
REMOTE_PATH=${{ secrets.SSH_DIRECTORY }}/$VERSION
|
||||
SERVER=${{ secrets.SSH_SERVER }}
|
||||
USER=${{ secrets.SSH_USERNAME }}
|
||||
PASS=${{ secrets.SSH_PASSWORD }}
|
||||
PORT=${{ secrets.SSH_PORT }}
|
||||
|
||||
lftp -u "$USER","$PASS" sftp://$SERVER:$PORT <<EOF
|
||||
set sftp:auto-confirm yes
|
||||
mirror --reverse --verbose --only-newer $PUBLISH_DIR "$REMOTE_PATH"
|
||||
bye
|
||||
EOF
|
||||
|
||||
- name: Clear Cloudflare cache
|
||||
if: needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
run: |
|
||||
curl --request POST --url "https://api.cloudflare.com/client/v4/zones/fe6831ed6dc9e6235e69ef2a31f2e7fe/purge_cache" \
|
||||
--header "Authorization: Bearer 9GDQkzU51QXaqzp1qMjyFKpyeJyOdnNoG9GZQaGP" \
|
||||
--header "Content-Type:application/json" \
|
||||
--data '{"purge_everything": true}'
|
||||
|
||||
Update_Release:
|
||||
needs: [Prepare_Patch,Patch_RouterOS]
|
||||
if: |
|
||||
needs.Prepare_Patch.outputs.SKIP_BUILD == 'false' &&
|
||||
needs.Patch_RouterOS.result == 'success' &&
|
||||
needs.Prepare_Patch.outputs.RELEASE == 'true'
|
||||
runs-on: ubuntu-24.04
|
||||
env:
|
||||
CHANNEL: ${{ inputs.channel }}
|
||||
VERSION: ${{ needs.Prepare_Patch.outputs.VERSION }}
|
||||
steps:
|
||||
- name: Update Release
|
||||
run: |
|
||||
sudo apt-get install -y knockd lftp > /dev/null
|
||||
knock -4 ${{ secrets.SSH_SERVER }} ${{ secrets.SSH_KNOCK_PORT }}
|
||||
echo "Knocking on server..."
|
||||
for i in 1 2 3; do
|
||||
if knock -4 ${{ secrets.SSH_SERVER }} ${{ secrets.SSH_KNOCK_PORT }} ; then
|
||||
echo "Knock successful"
|
||||
break
|
||||
else
|
||||
echo "Knock attempt $i failed, retrying..."
|
||||
sleep 2
|
||||
fi
|
||||
done
|
||||
echo "Waiting for firewall to open SSH port..."
|
||||
sleep 3
|
||||
REMOTE_PATH=${{ secrets.SSH_DIRECTORY }}
|
||||
SERVER=${{ secrets.SSH_SERVER }}
|
||||
USER=${{ secrets.SSH_USERNAME }}
|
||||
PASS=${{ secrets.SSH_PASSWORD }}
|
||||
PORT=${{ secrets.SSH_PORT }}
|
||||
sshpass -p "$PASS" ssh -o StrictHostKeyChecking=no -p $PORT $USER@$SERVER \
|
||||
"bash /rw/disk/$REMOTE_PATH/packages.sh /rw/disk/$REMOTE_PATH/$VERSION; \
|
||||
ln -sf /root/$REMOTE_PATH/$VERSION/info /rw/disk/$REMOTE_PATH/NEWESTa7.$CHANNEL; \
|
||||
chown -R 32768:32768 /rw/disk/$REMOTE_PATH"
|
||||
|
||||
echo "✅ Updated: packages.csv"
|
||||
1
.gitignore
vendored
@ -3,4 +3,5 @@ __pycache__/
|
||||
venv/
|
||||
app/
|
||||
loader/
|
||||
test/
|
||||
test_*.py
|
||||
86
README.md
@ -1,69 +1,45 @@
|
||||
[](https://github.com/elseif/MikroTikPatch/actions/workflows/mikrotik_patch_6.yml)
|
||||
[](https://github.com/elseif/MikroTikPatch/actions/workflows/mikrotik_patch_7.yml)
|
||||
# MikroTik RouterOS Patch
|
||||
[](https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml)
|
||||

|
||||
|
||||
### 感谢赞助
|
||||
[](https://www.digitalocean.com/?refcode=dbf6ed365068&utm_campaign=Referral_Invite&utm_medium=Referral_Program&utm_source=badge)
|
||||
|
||||
[DartNode(aff)](https://dartnode.com?aff=SnazzyLobster067) | [ZMTO(aff)](https://console.zmto.com/?affid=1588) | [Vultr(aff)](https://www.vultr.com/?ref=9807160-9J)
|
||||
|
||||
# MikroTik RouterOS Patch [[English](README_EN.md)]
|
||||
[](./LICENSE)
|
||||
[](./CODE_OF_CONDUCT.md)
|
||||
|
||||
### [[Discord](https://discord.gg/keV6MWQFtX)] [[Telegram](https://t.me/mikrotikpatch)] [[Keygen(Telegram Bot)](https://t.me/ROS_Keygen_Bot)]
|
||||
|
||||
支持:在线更新、在线授权、云备份、DDNS
|
||||
## ⚠️ 重要声明
|
||||
**此项目及工具仅供测试用途。使用风险自负。生产环境请使用官方授权版本。**
|
||||
|
||||

|
||||

|
||||
## 架构:x86、arm64
|
||||
- **主页:** https://mikrotik.ltd/
|
||||
- **演示:** https://demo.mikrotik.ltd/
|
||||
- **授权: 安装OPTION.NPK后将自动授予最高级别许可证。**
|
||||
- **源代码:** https://github.com/elseif/MikroTikPatch
|
||||
- **授权BOT:** https://t.me/ROS_Keygen_Bot
|
||||
- **Docker:** `docker pull ghcr.io/elseif/chr:latest`
|
||||
|
||||
*如果云服务或部署云服务的虚拟主机都不在线,那么在线更新、在线授权、云备份、DDNS以及ROS_Keygen_Bot都暂时不能使用*
|
||||
## 架构:arm64, arm, mipsbe, mmips, ppc, smips, x86
|
||||
- **主页:** https://routeros.ltd/
|
||||
- **授权: 需要赞助**,*CHR版本(x86/Arm64)支持在线直接获取授权。*
|
||||
- **功能:** 支持在线自定义制作品牌包
|
||||
|
||||
### 从7.19.4和7.20beta8开始,安装option包以后会自动激活授权,如果有rc.local文件,会自动加载运行。
|
||||
```mermaid
|
||||
graph TD
|
||||
A[启动] --> B[检查 keygen 文件是否存在 ]
|
||||
B -->|是| C[fork 执行 keygen]
|
||||
B -->|否| D[检查 rc.local 文件是否存在]
|
||||
C --> D
|
||||
D -->|是| E[fork 执行 /bin/sh rc.local]
|
||||
D -->|否| F[启动服务]
|
||||
E --> F
|
||||
```
|
||||

|
||||

|
||||
## 支持的云功能
|
||||
| 功能 | 命令 |
|
||||
|------|------|
|
||||
| 在线升级 | `system/package/update/install` |
|
||||
| DDNS | `ip/cloud/set ddns-enabled=yes` |
|
||||
| 云备份 | `/system/backup/cloud/upload-file action=create-and-upload password=any` |
|
||||
|
||||
### x86模式授权许可
|
||||

|
||||
### x86模式在线授权(v6.x)
|
||||

|
||||
### Chr模式在线授权
|
||||

|
||||
### Chr模式授权许可
|
||||

|
||||
## 启用容器模式(无需物理重启)
|
||||
1. 安装 `option.npk` 包。
|
||||
2. 打开终端执行:`system/device-mode/update container=yes`
|
||||
3. 打开新终端执行:`system/shell cmd="reboot -f"`
|
||||
|
||||

|
||||

|
||||
### 更多关于RouterOS的信息请查看: https://manual.mikrotik.com/
|
||||
|
||||
## 如何使用Shell
|
||||
安装 option-{version}.npk 包
|
||||
telnet到RouterOS,用户名devel,密码与admin的密码相同
|
||||
要使用devel用户名登录必须安装option-{version}.npk包,且启用。
|
||||
## 如何授权许可
|
||||
进入shell
|
||||
运行 keygen
|
||||
参考上图。
|
||||
Chr镜像支持在线授权许可
|
||||
## 如何使用Python
|
||||
安装 python3-{version}.npk 包
|
||||
telnet到RouterOS,用户名devel,密码与admin的密码相同
|
||||
运行 python -V
|
||||
### npk.py
|
||||
对npk文件进行解包,修改,创建,签名和验证
|
||||
### patch.py
|
||||
替换公钥并签名
|
||||
|
||||
## 所有的修补操作都自动运行在[Github Action](https://github.com/elseif/MikroTikPatch/blob/main/.github/workflows/)。
|
||||
### 感谢赞助
|
||||
[](https://www.digitalocean.com/?refcode=dbf6ed365068&utm_campaign=Referral_Invite&utm_medium=Referral_Program&utm_source=badge)
|
||||
[DartNode(aff)](https://dartnode.com?aff=SnazzyLobster067) | [ZMTO(aff)](https://console.zmto.com/?affid=1588) | [Vultr(aff)](https://www.vultr.com/?ref=9807160-9J)
|
||||
[](https://dartnode.com "Powered by DartNode - Free VPS for Open Source")
|
||||
|
||||
|
||||
|
||||
|
||||
53
README_EN.md
@ -1,53 +0,0 @@
|
||||
[](https://github.com/elseif/MikroTikPatch/actions/workflows/mikrotik_patch_6.yml)
|
||||
[](https://github.com/elseif/MikroTikPatch/actions/workflows/mikrotik_patch_7.yml)
|
||||
# MikroTik RouterOS Patch [[中文](README.md)]
|
||||
[](./LICENSE)
|
||||
[](./CODE_OF_CONDUCT.md)
|
||||
|
||||
### [[Discord](https://discord.gg/keV6MWQFtX)] [[Telegram](https://t.me/mikrotikpatch)] [[Keygen(Telegram Bot)](https://t.me/ROS_Keygen_Bot)]
|
||||
|
||||
### Download [Latest Patched](https://github.com/elseif/MikroTikPatch/releases/latest) iso file,install it and enjoy.
|
||||
### CHR image is both support BIOS and UEFI boot mode.
|
||||
|
||||
### Support online upgrade,online license,cloud backup,cloud DDNS
|
||||
|
||||

|
||||

|
||||
|
||||
### license RouterOS for x86.
|
||||

|
||||
### Renew license for x86 v6.x
|
||||

|
||||
### Renew license for chr
|
||||

|
||||
### license RouterOS for chr
|
||||

|
||||
|
||||

|
||||

|
||||
|
||||
## How to use shell
|
||||
install option-{version}.npk package
|
||||
run telnet to routeros with username devel and password is same as admin
|
||||
## How to license RouterOS
|
||||
telnet to routeros with username devel and password is same as admin
|
||||
run keygen
|
||||
chr mode could use renew lincense online
|
||||
## How to use python3
|
||||
install python3-{version}.npk package
|
||||
run telnet to routeros with username devel and password is same as admin
|
||||
run python -V
|
||||
### npk.py
|
||||
Sign,Verify,Create, Extract npk file.
|
||||
### patch.py
|
||||
Patch public key and sign NPK files
|
||||
|
||||
## Thanks for sponsoring
|
||||
[ZMTO](https://console.zmto.com/)
|
||||
|
||||
## all patches are applied automatically with [Github Action](https://github.com/elseif/MikroTikPatch/blob/main/.github/workflows/).
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
66
README_PT.md
@ -1,66 +0,0 @@
|
||||
[](https://github.com/elseif/MikroTikPatch/actions/workflows/mikrotik_patch_6.yml)
|
||||
[](https://github.com/elseif/MikroTikPatch/actions/workflows/mikrotik_patch_7.yml)
|
||||
|
||||
# Patch para MikroTik RouterOS [[中文](README.md)]
|
||||
[](./LICENSE)
|
||||
[](./CODE_OF_CONDUCT.md)
|
||||
|
||||
### [[Discord](https://discord.gg/keV6MWQFtX)] [[Telegram](https://t.me/mikrotikpatch)] [[Keygen (Bot do Telegram)](https://t.me/ROS_Keygen_Bot)]
|
||||
|
||||
### Baixe a [ISO modificada mais recente](https://github.com/elseif/MikroTikPatch/releases/latest), instale e aproveite.
|
||||
### A imagem CHR suporta modo de boot tanto BIOS quanto UEFI.
|
||||
|
||||
### Suporte a atualização online, licença online, backup em nuvem e DDNS em nuvem
|
||||
|
||||

|
||||

|
||||
|
||||
### Licenciar o RouterOS para x86
|
||||

|
||||
|
||||
### Renovar a licença para x86 v6.x
|
||||

|
||||
|
||||
### Renovar a licença para CHR
|
||||

|
||||
|
||||
### Licenciar o RouterOS para CHR
|
||||

|
||||
|
||||

|
||||

|
||||
|
||||
## Como usar o shell
|
||||
```bash
|
||||
instale o pacote option-{versão}.npk
|
||||
acesse via telnet o routeros com o usuário devel e a senha igual a do usuário admin
|
||||
```
|
||||
|
||||
## Como licenciar o RouterOS
|
||||
```bash
|
||||
acesse via telnet o routeros com o usuário devel e a senha igual a do admin
|
||||
execute o keygen
|
||||
modo CHR pode usar a renovação de licença online
|
||||
```
|
||||
|
||||
## Como usar o Python 3
|
||||
```bash
|
||||
instale o pacote python3-{versão}.npk
|
||||
acesse via telnet o routeros com o usuário devel e a senha igual a do admin
|
||||
execute `python -V`
|
||||
```
|
||||
|
||||
### npk.py
|
||||
```bash
|
||||
Assina, verifica, cria e extrai arquivos .npk
|
||||
```
|
||||
|
||||
### patch.py
|
||||
```bash
|
||||
Altera a chave pública e assina arquivos .npk
|
||||
```
|
||||
|
||||
## Thanks for sponsoring
|
||||
[ZMTO](https://console.zmto.com/)
|
||||
|
||||
## Todos os patches são aplicados automaticamente com [GitHub Actions](https://github.com/elseif/MikroTikPatch/blob/main/.github/workflows/)
|
||||
BIN
busybox/busybox_arm64
Normal file
52
chr.sh
@ -56,10 +56,10 @@ select_language() {
|
||||
1)
|
||||
MSG_ARCH="Arch:"
|
||||
MSG_BOOTMODE="BootMode:"
|
||||
MSG_STORAGE_DEVICE="Input storage device name:"
|
||||
MSG_ADDRESS="Input IP address:"
|
||||
MSG_GATEWAY="Input gateway:"
|
||||
MSG_DNS="Input domain name server:"
|
||||
MSG_STORAGE_DEVICE="Storage Device:"
|
||||
MSG_ADDRESS="IP Address:"
|
||||
MSG_GATEWAY="Gateway:"
|
||||
MSG_DNS="Domain Name Server:"
|
||||
MSG_SELECT_VERSION="Select the version you want to install:"
|
||||
MSG_STABLE="stable (v7)"
|
||||
MSG_TEST="testing (v7)"
|
||||
@ -77,10 +77,7 @@ select_language() {
|
||||
MSG_OPERATION_ABORTED="Error: Operation aborted."
|
||||
MSG_WARNING="Warn: All data on /dev/%s will be lost!"
|
||||
MSG_REBOOTING="Ok, rebooting..."
|
||||
MSG_ADMIN_PASSWORD="admin password:"
|
||||
MSG_MANUAL_PASS_CHOICE="Do you want to enter a password manually? (y/N): "
|
||||
MSG_ENTER_NEW_PASS="Enter new password: "
|
||||
MSG_PASS_EMPTY="Password cannot be empty, please try again."
|
||||
MSG_ADMIN_PASSWORD="Admin Password:"
|
||||
MSG_ERROR_MOUNT="Error: Failed to mount partition"
|
||||
MSG_ERROR_LOOP="Error: Failed to setup loop device"
|
||||
MSG_AUTO_RUN_FILE_CREATED="autorun.scr file created."
|
||||
@ -90,10 +87,10 @@ select_language() {
|
||||
2)
|
||||
MSG_ARCH="CPU架构:"
|
||||
MSG_BOOTMODE="引导模式:"
|
||||
MSG_STORAGE_DEVICE="输入存储设备名称:"
|
||||
MSG_ADDRESS="输入IP地址:"
|
||||
MSG_GATEWAY="输入网关地址:"
|
||||
MSG_DNS="输入DNS服务器:"
|
||||
MSG_STORAGE_DEVICE="存储设备名称:"
|
||||
MSG_ADDRESS="IP地址:"
|
||||
MSG_GATEWAY="网关地址:"
|
||||
MSG_DNS="DNS服务器:"
|
||||
MSG_SELECT_VERSION="请选择您要安装的版本:"
|
||||
MSG_STABLE="稳定版 (v7)"
|
||||
MSG_TEST="测试版 (v7)"
|
||||
@ -110,11 +107,8 @@ select_language() {
|
||||
MSG_DOWNLOAD_FAILED="错误: 下载失败!"
|
||||
MSG_OPERATION_ABORTED="错误: 操作已中止。"
|
||||
MSG_WARNING="警告:/dev/%s 上的数据将会丢失!"
|
||||
MSG_REBOOTING="好的,正在重启..."
|
||||
MSG_REBOOTING="正在重启..."
|
||||
MSG_ADMIN_PASSWORD="管理员密码:"
|
||||
MSG_MANUAL_PASS_CHOICE="是否手动输入密码?(y/N): "
|
||||
MSG_ENTER_NEW_PASS="请输入新密码: "
|
||||
MSG_PASS_EMPTY="密码不能为空,请重新输入。"
|
||||
MSG_ERROR_MOUNT="错误: 挂载分区失败"
|
||||
MSG_ERROR_LOOP="错误: 设置 loop 设备失败"
|
||||
MSG_AUTO_RUN_FILE_CREATED="autorun.scr 文件已创建。"
|
||||
@ -138,17 +132,14 @@ show_system_info() {
|
||||
echo "$MSG_BOOTMODE $BOOT_MODE"
|
||||
}
|
||||
|
||||
confirm_storge() {
|
||||
if command -v lsblk >/dev/null 2>&1; then
|
||||
STORAGE=$(lsblk -d -n -o NAME,TYPE | awk '$2=="disk"{print $1; exit}')
|
||||
else
|
||||
STORAGE=$(fdisk -l | awk '/^Disk \/dev/ {print $2; exit}' | sed 's#:##' | sed 's#/dev/##')
|
||||
fi
|
||||
confirm_storage() {
|
||||
STORAGE=$(lsblk | grep disk | head -1 | awk '{print $1}')
|
||||
ask_until "$MSG_STORAGE_DEVICE" "$STORAGE"
|
||||
STORAGE=$resp
|
||||
}
|
||||
confirm_address() {
|
||||
ETH=$(ip route show default | grep '^default' | sed -n 's/.* dev \([^\ ]*\) .*/\1/p')
|
||||
MAC=$(cat /sys/class/net/$ETH/address | tr 'a-z' 'A-Z')
|
||||
ADDRESS=$(ip addr show $ETH | grep global | cut -d' ' -f 6 | head -n 1)
|
||||
GATEWAY=$(ip route list | grep default | cut -d' ' -f 3)
|
||||
if [ -f "/etc/resolv.conf" ]; then
|
||||
@ -291,22 +282,24 @@ download_image(){
|
||||
}
|
||||
|
||||
create_autorun() {
|
||||
if LOOP=$(losetup -Pf --show chr.img 2>/dev/null); then
|
||||
LOOP=$(losetup -f)
|
||||
if losetup -P "$LOOP" chr.img; then
|
||||
sleep 1
|
||||
MNT=/tmp/chr
|
||||
mkdir -p $MNT
|
||||
PARTITION=$([ "$V7" == 1 ] && echo "p2" || echo "p1")
|
||||
if mount "${LOOP}${PARTITION}" "$MNT" 2>/dev/null; then
|
||||
if mount "${LOOP}${PARTITION}" "$MNT"; then
|
||||
confirm_address
|
||||
RANDOM_ADMIN_PASS=$(tr -dc 'A-Za-z0-9' </dev/urandom | head -c 16)
|
||||
RANDOM_ADMIN_PASS=$(head -c 512 /dev/urandom | tr -dc 'A-HJ-KMNP-Za-hj-kmnp-z2-9' | head -c 16)
|
||||
ask_until "$MSG_ADMIN_PASSWORD" "$RANDOM_ADMIN_PASS"
|
||||
RANDOM_ADMIN_PASS=$resp
|
||||
cat <<EOF > "$MNT/rw/autorun.scr"
|
||||
/user set admin password="$RANDOM_ADMIN_PASS"
|
||||
/ip dns set servers=$DNS
|
||||
/ip address add address=$ADDRESS interface=ether1
|
||||
/ip address add address=$ADDRESS interface=[/interface ethernet get [find mac-address=$MAC] name]
|
||||
/ip route add gateway=$GATEWAY
|
||||
EOF
|
||||
cat "$MNT/rw/autorun.scr"
|
||||
echo "$MSG_AUTO_RUN_FILE_CREATED"
|
||||
umount $MNT
|
||||
losetup -d "$LOOP"
|
||||
@ -322,14 +315,15 @@ EOF
|
||||
}
|
||||
|
||||
|
||||
write_and_reboot() {
|
||||
confirm_storge
|
||||
write_reboot() {
|
||||
confirm_storage
|
||||
printf "$MSG_WARNING\n" "$STORAGE"
|
||||
ask_yesno "$MSG_CONFIRM_CONTINUE"
|
||||
if [ $? -ne 0 ]; then
|
||||
echo "$MSG_OPERATION_ABORTED"
|
||||
exit 1
|
||||
fi
|
||||
sync
|
||||
dd if=chr.img of=/dev/$STORAGE bs=4M conv=fsync
|
||||
echo "$MSG_REBOOTING"
|
||||
echo 1 > /proc/sys/kernel/sysrq 2>/dev/null || true
|
||||
@ -342,5 +336,5 @@ show_system_info
|
||||
select_version
|
||||
download_image
|
||||
create_autorun
|
||||
write_and_reboot
|
||||
write_reboot
|
||||
exit 0
|
||||
|
||||
BIN
image/arm.png
|
Before Width: | Height: | Size: 464 KiB |
BIN
image/chr.png
|
Before Width: | Height: | Size: 51 KiB |
|
Before Width: | Height: | Size: 8.1 KiB |
BIN
image/mips.png
|
Before Width: | Height: | Size: 725 KiB |
BIN
image/renew.png
|
Before Width: | Height: | Size: 15 KiB |
|
Before Width: | Height: | Size: 16 KiB |
|
Before Width: | Height: | Size: 607 KiB |
BIN
image/x86.png
|
Before Width: | Height: | Size: 74 KiB |
@ -138,10 +138,8 @@
|
||||
|
||||
<!-- Status badges for build workflows and services -->
|
||||
<div class="mt-6 flex justify-center items-center gap-4 flex-wrap">
|
||||
<a href="https://github.com/elseif/MikroTikPatch/actions/workflows/mikrotik_patch_6.yml" target="_blank"><img src="https://mikrotik.ltd/badge/mikrotik_patch_6.yml" alt="Patch Mikrotik RouterOS 6.x"></a>
|
||||
<a href="https://github.com/elseif/MikroTikPatch/actions/workflows/mikrotik_patch_7.yml" target="_blank"><img src="https://mikrotik.ltd/badge/mikrotik_patch_7.yml" alt="Patch Mikrotik RouterOS 7.x"></a>
|
||||
<a href="https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml" target="_blank"><img src="https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml/badge.svg" alt="Patch Mikrotik RouterOS"></a>
|
||||
<img src="https://img.shields.io/endpoint?logo=icloud&url=https://mikrotik.ltd/status/cloud" alt="Cloud Status">
|
||||
<img src="https://img.shields.io/endpoint?logo=googlecloudstorage&url=https://mikrotik.ltd/status/dartnode" alt="VPS Status">
|
||||
</div>
|
||||
<!-- GitHub social buttons -->
|
||||
<div class="mt-4 flex justify-center items-center gap-2">
|
||||
@ -500,7 +498,7 @@
|
||||
title:"RouterOS v6",
|
||||
versions:[ { title:"Long-Term", version:routeros6_longterm }, { title:"Stable", version:routeros6_stable } ],
|
||||
groups: [
|
||||
{ title:"X86", arch:"x86", downloads:[ { title:"Extra packages", type:"extra" }, { title:"CD Image", type:"iso" }, { title:"Install image", type:"install" }, { title:"Changelog", type:"changlog" } ] }
|
||||
{ title:"X86", arch:"x86", downloads:[ { title:"Main package", type:"main" },{ title:"Extra packages", type:"extra" }, { title:"CD Image", type:"iso" }, { title:"Install image", type:"install" }, { title:"Changelog", type:"changlog" } ] }
|
||||
]
|
||||
},
|
||||
{
|
||||
@ -520,6 +518,8 @@
|
||||
if (version.charAt(0) === "6" && arch !== "x86") return files;
|
||||
// Main package for RouterOS v7
|
||||
if (type === "main" && version.charAt(0) === "7") files.push(`routeros-${version}${arch === "x86" ? "" : "-" + arch}.npk`);
|
||||
// Main package for RouterOS v6
|
||||
if (type === "main" && version.charAt(0) === "6") files.push(`routeros-x86-${version}.npk`);
|
||||
// ISO images
|
||||
if (type === "iso") files.push(`mikrotik-${version}${arch === "x86" ? "" : "-" + arch}.iso`);
|
||||
// Extra packages
|
||||
|
||||
139
npk.py
@ -1,6 +1,6 @@
|
||||
|
||||
import struct,zlib
|
||||
import argparse,os
|
||||
import argparse,os,tempfile
|
||||
from datetime import datetime
|
||||
from dataclasses import dataclass
|
||||
from enum import IntEnum
|
||||
@ -51,7 +51,45 @@ class NpkInfo:
|
||||
def name(self,value:str):
|
||||
self._name = value[:16].encode().ljust(16,b'\x00')
|
||||
@staticmethod
|
||||
def decode_version(value:bytes):
|
||||
def encode_version(version: str) -> bytes:
|
||||
numbers = []
|
||||
build = None
|
||||
i = 0
|
||||
n = len(version)
|
||||
while i < n:
|
||||
if version[i].isdigit():
|
||||
num_str = ''
|
||||
while i < n and version[i].isdigit():
|
||||
num_str += version[i]
|
||||
i += 1
|
||||
numbers.append(int(num_str))
|
||||
elif version[i] == '.':
|
||||
i += 1
|
||||
elif version[i].isalpha():
|
||||
build = ''
|
||||
while i < n and version[i].isalpha():
|
||||
build += version[i]
|
||||
i += 1
|
||||
else:
|
||||
i += 1
|
||||
major = numbers[0] if len(numbers) > 0 else 0
|
||||
minor = numbers[1] if len(numbers) > 1 else 0
|
||||
revision = numbers[2] if len(numbers) > 2 else 0
|
||||
if build == 'alpha':
|
||||
build = 97
|
||||
elif build == 'beta':
|
||||
build = 98
|
||||
elif build == 'rc':
|
||||
build = 99
|
||||
elif build == 'test':
|
||||
build = 102
|
||||
revision |= 0x80
|
||||
else:# 'final'
|
||||
build = 102
|
||||
revision &= 0x7f
|
||||
return struct.pack('4B',revision,build,minor,major)
|
||||
@staticmethod
|
||||
def decode_version(value:bytes)->str:
|
||||
revision,build,minor,major = struct.unpack_from('4B',value)
|
||||
if build == 97:
|
||||
build = 'alpha'
|
||||
@ -64,31 +102,10 @@ class NpkInfo:
|
||||
build = 'test'
|
||||
revision &= 0x7f
|
||||
else:
|
||||
build = 'final'
|
||||
build = ''
|
||||
else:
|
||||
build = 'unknown'
|
||||
return f'{major}.{minor}.{revision}.{build}'
|
||||
@staticmethod
|
||||
def encode_version(value:str):
|
||||
s = value.split('.')
|
||||
if 4 != len(s) and s[3] in [ 'alpha', 'beta', 'rc','final', 'test']:
|
||||
raise ValueError('Invalid version string')
|
||||
major = int(s[0])
|
||||
minor = int(s[1])
|
||||
revision = int(s[2])
|
||||
if s[3] == 'alpha':
|
||||
build = 97
|
||||
elif s[3] == 'beta':
|
||||
build = 98
|
||||
elif s[3] == 'rc':
|
||||
build = 99
|
||||
elif s[3] == 'final':
|
||||
build = 102
|
||||
revision &= 0x7f
|
||||
else: #'test'
|
||||
build = 102
|
||||
revision |= 0x80
|
||||
return struct.pack('4B',revision,build,minor,major)
|
||||
return f'{major}.{minor}{build + str(revision) if build !="" else "." + str(revision) if revision != 0 else ""}'
|
||||
@property
|
||||
def version(self)->str:
|
||||
return self.decode_version(self._version)
|
||||
@ -137,7 +154,7 @@ class NpkFileContainer:
|
||||
self._items= items
|
||||
def serialize(self)->bytes:
|
||||
compressed_data = b''
|
||||
compressor = zlib.compressobj()
|
||||
compressor = zlib.compressobj(level=0)
|
||||
for item in self._items:
|
||||
data = struct.pack(self._format, item.perm,item.type,item.usr_or_grp, item.modify_time,item.revision,item.rc,item.minor,item.major,item.create_time,item.unknow,len(item.data),len(item.name))
|
||||
data += item.name + item.data
|
||||
@ -210,13 +227,15 @@ class NovaPackage(Package):
|
||||
|
||||
def set_null_block(self):
|
||||
def rebuild_squashfs(data):
|
||||
with open('squashfs.sfs', 'wb') as f:
|
||||
with tempfile.TemporaryDirectory() as tmp_dir:
|
||||
squashfs_file = os.path.join(tmp_dir, 'squashfs.sfs')
|
||||
squashfs_root = os.path.join(tmp_dir, 'squashfs-root')
|
||||
with open(squashfs_file, 'wb') as f:
|
||||
f.write(data)
|
||||
os.system('unsquashfs -d squashfs-root squashfs.sfs')
|
||||
os.system('rm squashfs.sfs')
|
||||
os.system('mksquashfs squashfs-root squashfs.sfs -comp xz -no-xattrs -b 256k')
|
||||
os.system('rm -rf squashfs-root')
|
||||
with open('squashfs.sfs', 'rb') as f:
|
||||
os.system(f'unsquashfs -d {squashfs_root} {squashfs_file}')
|
||||
os.remove(squashfs_file)
|
||||
os.system(f'mksquashfs {squashfs_root} {squashfs_file} -no-recovery -noappend -exit-on-error -quiet -comp xz -no-xattrs -b 256k -all-root')
|
||||
with open(squashfs_file, 'rb') as f:
|
||||
return f.read()
|
||||
def get_size(package,size):
|
||||
for part in package._parts:
|
||||
@ -272,14 +291,28 @@ class NovaPackage(Package):
|
||||
if len(self._packages) > 0:
|
||||
if build_time:
|
||||
self[NpkPartID.PKG_INFO].data._build_time = int(build_time)
|
||||
else:
|
||||
build_time = self[NpkPartID.PKG_INFO].data._build_time
|
||||
os.environ['BUILD_TIME'] = str(build_time)
|
||||
github_env = os.getenv('GITHUB_ENV')
|
||||
if github_env:
|
||||
with open(github_env, 'a') as f:
|
||||
f.write(f"BUILD_TIME={build_time}\n")
|
||||
for package in self._packages:
|
||||
if len(package[NpkPartID.SIGNATURE].data) != 20+48+64:
|
||||
package[NpkPartID.SIGNATURE].data = b'\0'*(20+48+64)
|
||||
if build_time:
|
||||
package[NpkPartID.NAME_INFO].data._build_time = int(build_time)
|
||||
else:
|
||||
build_time = self[NpkPartID.NAME_INFO].data._build_time
|
||||
os.environ['BUILD_TIME'] = str(build_time)
|
||||
github_env = os.getenv('GITHUB_ENV')
|
||||
if github_env:
|
||||
with open(github_env, 'a') as f:
|
||||
f.write(f"BUILD_TIME={build_time}\n")
|
||||
sha1_digest = self.get_digest(hashlib.new('SHA1'),package)
|
||||
sha256_digest = self.get_digest(hashlib.new('SHA256'),package)
|
||||
kcdsa_signature = mikro_kcdsa_sign(sha256_digest[:20],kcdsa_private_key)
|
||||
kcdsa_signature = mikro_kcdsa_sign(sha1_digest,kcdsa_private_key)
|
||||
eddsa_signature = mikro_eddsa_sign(sha256_digest,eddsa_private_key)
|
||||
package[NpkPartID.SIGNATURE].data = sha1_digest + kcdsa_signature + eddsa_signature
|
||||
else:
|
||||
@ -287,9 +320,16 @@ class NovaPackage(Package):
|
||||
self[NpkPartID.SIGNATURE].data = b'\0'*(20+48+64)
|
||||
if build_time:
|
||||
self[NpkPartID.NAME_INFO].data._build_time = int(build_time)
|
||||
else:
|
||||
build_time = self[NpkPartID.NAME_INFO].data._build_time
|
||||
os.environ['BUILD_TIME'] = str(build_time)
|
||||
github_env = os.getenv('GITHUB_ENV')
|
||||
if github_env:
|
||||
with open(github_env, 'a') as f:
|
||||
f.write(f"BUILD_TIME={build_time}\n")
|
||||
sha1_digest = self.get_digest(hashlib.new('SHA1'))
|
||||
sha256_digest = self.get_digest(hashlib.new('SHA256'))
|
||||
kcdsa_signature = mikro_kcdsa_sign(sha256_digest[:20],kcdsa_private_key)
|
||||
kcdsa_signature = mikro_kcdsa_sign(sha1_digest,kcdsa_private_key)
|
||||
eddsa_signature = mikro_eddsa_sign(sha256_digest,eddsa_private_key)
|
||||
self[NpkPartID.SIGNATURE].data = sha1_digest + kcdsa_signature + eddsa_signature
|
||||
|
||||
@ -303,9 +343,9 @@ class NovaPackage(Package):
|
||||
signature = package[NpkPartID.SIGNATURE].data
|
||||
if sha1_digest != signature[:20]:
|
||||
return False
|
||||
if not mikro_kcdsa_verify(sha256_digest[:20],signature[20:68],kcdsa_public_key):
|
||||
if not mikro_kcdsa_verify(sha1_digest,signature[20:68],kcdsa_public_key):
|
||||
return False
|
||||
if not mikro_eddsa_verify(sha256_digest,signature[68:132],eddsa_public_key):
|
||||
if len(signature) == 132 and not mikro_eddsa_verify(sha256_digest,signature[68:132],eddsa_public_key):
|
||||
return False
|
||||
else:
|
||||
sha1_digest = self.get_digest(hashlib.new('SHA1'))
|
||||
@ -313,11 +353,10 @@ class NovaPackage(Package):
|
||||
signature = self[NpkPartID.SIGNATURE].data
|
||||
if sha1_digest != signature[:20]:
|
||||
return False
|
||||
if not mikro_kcdsa_verify(sha256_digest[:20],signature[20:68],kcdsa_public_key):
|
||||
if not mikro_kcdsa_verify(sha1_digest,signature[20:68],kcdsa_public_key):
|
||||
return False
|
||||
if not mikro_eddsa_verify(sha256_digest,signature[68:132],eddsa_public_key):
|
||||
if len(signature) == 132 and not mikro_eddsa_verify(sha256_digest,signature[68:132],eddsa_public_key):
|
||||
return False
|
||||
|
||||
return True
|
||||
|
||||
def save(self,file):
|
||||
@ -365,6 +404,10 @@ if __name__=='__main__':
|
||||
create_option_parser.add_argument('name',type=str,help='NPK name')
|
||||
create_option_parser.add_argument('squashfs',type=str,help='NPK squashfs file')
|
||||
create_option_parser.add_argument('-desc','--description',type=str,help='NPK description')
|
||||
extract_parser = subparsers.add_parser('extract',help='Extract npk file')
|
||||
extract_parser.add_argument('input',type=str, help='Input file')
|
||||
extract_parser.add_argument('name',type=str,help='File to extract')
|
||||
extract_parser.add_argument('output',type=str,help='Output to file')
|
||||
args = parser.parse_args()
|
||||
kcdsa_private_key = bytes.fromhex(os.environ['CUSTOM_LICENSE_PRIVATE_KEY'])
|
||||
eddsa_private_key = bytes.fromhex(os.environ['CUSTOM_NPK_SIGN_PRIVATE_KEY'])
|
||||
@ -395,5 +438,23 @@ if __name__=='__main__':
|
||||
option_npk.sign(kcdsa_private_key,eddsa_private_key)
|
||||
option_npk.save(args.output)
|
||||
print(f'Created {args.output}')
|
||||
elif args.command =='extract':
|
||||
print(f'Extracting {args.name} from {args.input}')
|
||||
npk = NovaPackage.load(args.input)
|
||||
file_container = None
|
||||
if len(npk._packages) > 0:
|
||||
for package in npk._packages:
|
||||
if package[NpkPartID.NAME_INFO].data.name == 'system':
|
||||
file_container = NpkFileContainer.unserialize_from(package[NpkPartID.FILE_CONTAINER].data)
|
||||
else:
|
||||
if npk[NpkPartID.NAME_INFO].data.name == 'system':
|
||||
file_container = NpkFileContainer.unserialize_from(npk[NpkPartID.FILE_CONTAINER].data)
|
||||
if file_container:
|
||||
for item in file_container:
|
||||
if item.name == args.name.encode():
|
||||
with open(args.output,'wb') as f:
|
||||
f.write(item.data)
|
||||
print(f'Extracted {args.name} to {args.output}')
|
||||
break
|
||||
else:
|
||||
parser.print_help()
|
||||
|
||||
32
package.py
@ -1,32 +0,0 @@
|
||||
def install_package(package, version="upgrade", index_url='https://mirrors.aliyun.com/pypi/simple/'):
|
||||
from sys import executable
|
||||
from subprocess import check_call
|
||||
result = False
|
||||
try:
|
||||
if version.lower() == "upgrade":
|
||||
result = check_call([executable, "-m", "pip", "install", package, "--upgrade", "-i", index_url])
|
||||
else:
|
||||
from pkg_resources import get_distribution
|
||||
current_package_version = None
|
||||
try:
|
||||
current_package_version = get_distribution(package)
|
||||
except Exception:
|
||||
pass
|
||||
if current_package_version is None or current_package_version != version:
|
||||
installation_sign = "==" if ">=" not in version else ""
|
||||
result = check_call([executable, "-m", "pip", "install", package + installation_sign + version, "-i", index_url])
|
||||
except Exception as e:
|
||||
print(e)
|
||||
result = -1
|
||||
return result
|
||||
def check_package(package):
|
||||
from importlib import import_module
|
||||
try:
|
||||
import_module(package)
|
||||
return True
|
||||
except ImportError:
|
||||
return False
|
||||
def check_install_package(packages):
|
||||
for package in packages:
|
||||
if not check_package(package):
|
||||
install_package(package)
|
||||
137
patch.py
@ -1,5 +1,7 @@
|
||||
import subprocess,lzma
|
||||
import struct,os,re
|
||||
import struct,os,re,tempfile
|
||||
import pefile
|
||||
from elftools.elf.elffile import ELFFile
|
||||
from npk import NovaPackage,NpkPartID,NpkFileContainer
|
||||
|
||||
def replace_chunks(old_chunks,new_chunks,data,name):
|
||||
@ -104,42 +106,12 @@ def patch_bzimage(data:bytes,key_dict:dict):
|
||||
new_data = new_data.replace(vmlinux_xz,new_vmlinux_xz)
|
||||
return new_data
|
||||
|
||||
def patch_block(dev:str,file:str,key_dict):
|
||||
BLOCK_SIZE = 4096
|
||||
#sudo debugfs /dev/nbd0p1 -R 'stats' | grep "Block size" | sed -n '1p' | cut -d ':' -f 2
|
||||
|
||||
#sudo debugfs /dev/nbd0p1 -R 'stat boot/initrd.rgz' 2> /dev/null | sed -n '11p'
|
||||
stdout,_ = run_shell_command(f"debugfs {dev} -R 'stat {file}' 2> /dev/null | sed -n '11p' ")
|
||||
#(0-11):1592-1603, (IND):1173, (12-15):1604-1607, (16-26):1424-1434
|
||||
blocks_info = stdout.decode().strip().split(',')
|
||||
print(f'blocks_info : {blocks_info}')
|
||||
blocks = []
|
||||
ind_block_id = None
|
||||
for block_info in blocks_info:
|
||||
_tmp = block_info.strip().split(':')
|
||||
if _tmp[0].strip() == '(IND)':
|
||||
ind_block_id = int(_tmp[1])
|
||||
else:
|
||||
print(f'block_info : {block_info}')
|
||||
id_range = _tmp[0].strip().replace('(','').replace(')','').split('-')
|
||||
block_range = _tmp[1].strip().replace('(','').replace(')','').split('-')
|
||||
blocks += [id for id in range(int(block_range[0]),int(block_range[1])+1)]
|
||||
print(f' blocks : {len(blocks)} ind_block_id : {ind_block_id}')
|
||||
|
||||
#sudo debugfs /dev/nbd0p1 -R 'cat boot/initrd.rgz' > data
|
||||
data,stderr = run_shell_command(f"debugfs {dev} -R 'cat {file}' 2> /dev/null")
|
||||
new_data = patch_kernel(data,key_dict)
|
||||
print(f'write block {len(blocks)} : [',end="")
|
||||
with open(dev,'wb') as f:
|
||||
for index,block_id in enumerate(blocks):
|
||||
print('#',end="")
|
||||
f.seek(block_id*BLOCK_SIZE)
|
||||
f.write(new_data[index*BLOCK_SIZE:(index+1)*BLOCK_SIZE])
|
||||
f.flush()
|
||||
print(']')
|
||||
|
||||
def patch_initrd_xz(initrd_xz:bytes,key_dict:dict,ljust=True):
|
||||
try:
|
||||
initrd = lzma.decompress(initrd_xz)
|
||||
except Exception as e:
|
||||
print(f'size:{len(initrd_xz)},header:{initrd_xz[:20].hex().upper()},footer:{initrd_xz[-20:].hex().upper()}\n')
|
||||
raise Exception(f'failed to decompress initrd_xz: {e}')
|
||||
new_initrd = initrd
|
||||
for old_public_key,new_public_key in key_dict.items():
|
||||
new_initrd = replace_key(old_public_key,new_public_key,new_initrd,'initrd')
|
||||
@ -199,12 +171,58 @@ def patch_pe(data: bytes,key_dict:dict):
|
||||
new_data = data.replace(vmlinux_xz,new_vmlinux_xz)
|
||||
return new_data
|
||||
|
||||
def build_efi(input_file, output_file):
|
||||
def find_xz_streams(data:bytes):
|
||||
streams = []
|
||||
XZ_HEADER_MAGIC = b'\xFD7zXZ\x00\x00\x01'
|
||||
XZ_FOOTER_MAGIC = b'\x00\x00\x00\x00\x01\x59\x5A'
|
||||
i = 0
|
||||
while True:
|
||||
start = data.find(XZ_HEADER_MAGIC, i)
|
||||
if start == -1:
|
||||
break
|
||||
end = data.find(XZ_FOOTER_MAGIC, start)
|
||||
assert end != -1, 'XZ footer not found'
|
||||
end += len(XZ_FOOTER_MAGIC)
|
||||
streams.append((start, end))
|
||||
i = end
|
||||
return streams
|
||||
with open(input_file, 'rb') as f:
|
||||
elf = ELFFile(f)
|
||||
initrd_section =elf.get_section_by_name('initrd')
|
||||
assert initrd_section is not None,'initrd section not found'
|
||||
initrd_data = initrd_section.data()
|
||||
xz_streams = find_xz_streams(initrd_data)
|
||||
assert len(xz_streams) == 2,'only support 2 xz streams'
|
||||
efi_xz = initrd_data[xz_streams[0][0]:xz_streams[0][1]]
|
||||
cpio_xz = initrd_data[xz_streams[1][0]:xz_streams[1][1]]
|
||||
try:
|
||||
efi = lzma.decompress(efi_xz)
|
||||
except Exception as e:
|
||||
print(f'size:{len(efi_xz)},header:{efi_xz[:20].hex().upper()},footer:{efi_xz[-20:].hex().upper()}\n')
|
||||
raise Exception(f'failed to decompress efi: {e}')
|
||||
|
||||
with pefile.PE(data = efi) as pe:
|
||||
data_section =[section for section in pe.sections if section.Name == b'.data\x00\x00\x00'][0]
|
||||
rva = data_section.VirtualAddress
|
||||
addr = data_section.PointerToRawData
|
||||
data = data_section.get_data()
|
||||
size = len(data)
|
||||
alignment = ((rva + size) + 4096 - 1) & ~(4096 - 1) #4096对齐
|
||||
alignment = alignment - (rva+size)
|
||||
new_data = data + b'\x00'*alignment
|
||||
new_data += struct.pack('<I',len(cpio_xz))
|
||||
new_data += cpio_xz
|
||||
data_section.SizeOfRawData = len(new_data)
|
||||
new_file_data = pe.write()
|
||||
new_file_data = new_file_data[:addr]
|
||||
new_file_data += new_data
|
||||
with open(output_file, 'wb') as f:
|
||||
f.write(new_file_data)
|
||||
|
||||
def patch_netinstall(key_dict: dict,input_file,output_file=None):
|
||||
netinstall = open(input_file,'rb').read()
|
||||
if netinstall[:2] == b'MZ':
|
||||
from package import check_install_package
|
||||
check_install_package(['pefile'])
|
||||
import pefile
|
||||
ROUTEROS_BOOT = {
|
||||
129:{'arch':'power','name':'Powerboot'},
|
||||
130:{'arch':'e500','name':'e500_boot'},
|
||||
@ -243,7 +261,6 @@ def patch_netinstall(key_dict: dict,input_file,output_file=None):
|
||||
pe.set_bytes_at_rva(rva,new_data)
|
||||
pe.write(output_file or input_file)
|
||||
elif netinstall[:4] == b'\x7FELF':
|
||||
import re
|
||||
# 83 00 00 00 C4 68 C4 0B 5A C2 04 08 10 9E 52 00
|
||||
# 8A 00 00 00 C3 68 C4 0B 6A 60 57 08 C0 3D 54 00
|
||||
# 81 00 00 00 D3 68 C4 0B 2A 9E AB 08 5C 1B 78 00
|
||||
@ -304,14 +321,12 @@ def patch_kernel(data:bytes,key_dict):
|
||||
return patch_elf(data,key_dict)
|
||||
elif data[:5] == b'\xFD7zXZ':
|
||||
print('patching initrd')
|
||||
return patch_initrd_xz(data,key_dict)
|
||||
return patch_initrd_xz(data,key_dict,False)
|
||||
else:
|
||||
raise Exception('unknown kernel format')
|
||||
|
||||
def patch_loader(loader_file):
|
||||
try:
|
||||
from package import check_install_package
|
||||
check_install_package(['pyelftools'])
|
||||
from loader.patch_loader import patch_loader as do_patch_loader
|
||||
arch = os.getenv('ARCH') or 'x86'
|
||||
arch = arch.replace('-', '')
|
||||
@ -338,13 +353,16 @@ def patch_squashfs(path,key_dict):
|
||||
for file_path in [os.path.join(root, 'mode'),os.path.join(root, 'keyman')]:
|
||||
with open(file_path, 'rb') as f:
|
||||
data = f.read()
|
||||
for old_url,new_url in url_replacements.items():
|
||||
if old_url in data:
|
||||
print(f'{file_path} url patched {old_url.decode()[:7]}...')
|
||||
data = data.replace(old_url,new_url)
|
||||
modified = False
|
||||
for old_public_key,new_public_key in key_dict.items():
|
||||
new_data = replace_key(old_public_key,new_public_key,data,file_path)
|
||||
if new_data != data:
|
||||
data = new_data
|
||||
modified = True
|
||||
assert modified, f'{file_path} key not patched'
|
||||
with open(f'{file_path}_', 'wb') as f:
|
||||
f.write(data)
|
||||
if 'loader' in files and os.path.isfile(os.path.join(root, 'loader')):
|
||||
@ -407,22 +425,21 @@ def patch_npk_package(package,key_dict):
|
||||
print(f'patch {item.name} ...')
|
||||
item.data = patch_kernel(item.data,key_dict)
|
||||
package[NpkPartID.FILE_CONTAINER].data = file_container.serialize()
|
||||
squashfs_file = 'squashfs-root.sfs'
|
||||
extract_dir = 'squashfs-root'
|
||||
open(squashfs_file,'wb').write(package[NpkPartID.SQUASHFS].data)
|
||||
with tempfile.TemporaryDirectory() as tmp_dir:
|
||||
squashfs_file = os.path.join(tmp_dir, 'squashfs-root.sfs')
|
||||
extract_dir = os.path.join(tmp_dir, 'squashfs-root')
|
||||
with open(squashfs_file,'wb') as f:
|
||||
f.write(package[NpkPartID.SQUASHFS].data)
|
||||
print(f"extract {squashfs_file} ...")
|
||||
run_shell_command(f"unsquashfs -d {extract_dir} {squashfs_file}")
|
||||
patch_squashfs(extract_dir,key_dict)
|
||||
logo = os.path.join(extract_dir,"nova/lib/console/logo.txt")
|
||||
run_shell_command(f"sudo sed -i '1d' {logo}")
|
||||
run_shell_command(f"sudo sed -i '8s#.*# elseif@live.cn https://github.com/elseif/MikroTikPatch#' {logo}")
|
||||
run_shell_command(f"sed -i '1d' {logo}")
|
||||
run_shell_command(f"sed -i '8s#.*# elseif@live.cn https://github.com/elseif/MikroTikPatch#' {logo}")
|
||||
print(f"pack {extract_dir} ...")
|
||||
run_shell_command(f"rm -f {squashfs_file}")
|
||||
run_shell_command(f"mksquashfs {extract_dir} {squashfs_file} -quiet -comp xz -no-xattrs -b 256k")
|
||||
print(f"clean ...")
|
||||
run_shell_command(f"rm -rf {extract_dir}")
|
||||
package[NpkPartID.SQUASHFS].data = open(squashfs_file,'rb').read()
|
||||
run_shell_command(f"rm -f {squashfs_file}")
|
||||
run_shell_command(f"mksquashfs {extract_dir} {squashfs_file} -no-recovery -noappend -exit-on-error -quiet -comp xz -no-xattrs -b 256k -all-root")
|
||||
with open(squashfs_file,'rb') as f:
|
||||
package[NpkPartID.SQUASHFS].data = f.read()
|
||||
|
||||
def patch_npk_file(key_dict,kcdsa_private_key,eddsa_private_key,input_file,output_file=None):
|
||||
npk = NovaPackage.load(input_file)
|
||||
@ -444,9 +461,9 @@ if __name__ == '__main__':
|
||||
kernel_parser = subparsers.add_parser('kernel',help='patch kernel file')
|
||||
kernel_parser.add_argument('input',type=str, help='Input file')
|
||||
kernel_parser.add_argument('-O','--output',type=str,help='Output file')
|
||||
block_parser = subparsers.add_parser('block',help='patch block file')
|
||||
block_parser.add_argument('dev',type=str, help='block device')
|
||||
block_parser.add_argument('file',type=str, help='file path')
|
||||
buildefi_parser = subparsers.add_parser('buildefi',help='build efi file')
|
||||
buildefi_parser.add_argument('input',type=str, help='kernel file')
|
||||
buildefi_parser.add_argument('output',type=str,help='Output to file')
|
||||
netinstall_parser = subparsers.add_parser('netinstall',help='patch netinstall file')
|
||||
netinstall_parser.add_argument('input',type=str, help='Input file')
|
||||
netinstall_parser.add_argument('-O','--output',type=str,help='Output file')
|
||||
@ -464,9 +481,9 @@ if __name__ == '__main__':
|
||||
print(f'patching {args.input} ...')
|
||||
data = patch_kernel(open(args.input,'rb').read(),key_dict)
|
||||
open(args.output or args.input,'wb').write(data)
|
||||
elif args.command == 'block':
|
||||
print(f'patching {args.file} in {args.dev} ...')
|
||||
patch_block(args.dev,args.file,key_dict)
|
||||
elif args.command == 'buildefi':
|
||||
print(f'building EFI from {args.input} ...')
|
||||
build_efi(args.input,args.output)
|
||||
elif args.command == 'netinstall':
|
||||
print(f'patching {args.input} ...')
|
||||
patch_netinstall(key_dict,args.input,args.output)
|
||||
|
||||
@ -87,7 +87,7 @@ class ShortWeierstrassCurve(EllipticCurve, CurveOpIsomorphism, CurveOpExportSage
|
||||
@property
|
||||
def is_koblitz(self):
|
||||
"""Returns whether the curve allows for efficient computation of a map
|
||||
\phi in the field (i.e. that the curve is commonly known as a 'Koblitz
|
||||
phi in the field (i.e. that the curve is commonly known as a 'Koblitz
|
||||
Curve'). This corresponds to examples 3 and 4 of the paper "Faster
|
||||
Point Multiplication on Elliptic Curves with Efficient Endomorphisms"
|
||||
by Gallant, Lambert and Vanstone."""
|
||||
|
||||