modified: README.md

modified:   README.md

Changes not staged for commit:
	modified:   README.md

.github/workflows/build_docker.yml

@@ -0,0 +1,246 @@
+name: Build CHR Docker
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "Specify version (e.g., 7.19.2), empty for latest"
+        required: false
+        default: ''
+        type: string
+        
+permissions:
+  packages: write
+jobs:
+  Prepare:
+    runs-on: ubuntu-24.04
+    outputs:
+      MATRIX: ${{ steps.get_versions.outputs.MATRIX }}
+    steps:
+      - name: Get versions and generate matrix
+        id: get_versions
+        run: |
+          VERSION="${{ inputs.version }}"
+          if [ -n "$VERSION" ]; then
+            MATRIX=$(jq -c -n '
+              [
+                { "version": $VERSION, "channel": ""}
+              ]
+            ' --arg VERSION "$VERSION")
+          else
+            TIMESTAMP=$(date +%s)
+            LONG_TERM=$(wget -nv -O - "https://upgrade.mikrotik.ltd/routeros/NEWESTa7.long-term?t=$TIMESTAMP" | cut -d ' ' -f1)
+            STABLE=$(wget -nv -O - "https://upgrade.mikrotik.ltd/routeros/NEWESTa7.stable?t=$TIMESTAMP" | cut -d ' ' -f1)
+
+            echo "Long-term version: $LONG_TERM"
+            echo "Stable version: $STABLE"
+            if [ -z "$LONG_TERM" ]; then
+              echo "Failed to get long-term version"
+              exit 1
+            fi
+            if [ -z "$STABLE" ]; then
+              echo "Failed to get stable version"
+              exit 1
+            fi
+            MATRIX=$(jq -c -n '
+              [
+                {version: $LONG_TERM, channel: "long-term"},
+                {version: $STABLE, channel: "stable"}
+              ]
+            ' --arg LONG_TERM "$LONG_TERM" --arg STABLE "$STABLE")
+          fi
+          echo "Generated matrix: $MATRIX"
+          echo "MATRIX=$MATRIX" >> $GITHUB_OUTPUT
+
+  Build:
+    runs-on: ubuntu-24.04
+    needs: Prepare
+    strategy:
+      max-parallel: 1
+      matrix:
+        include: ${{ fromJson(needs.Prepare.outputs.MATRIX) }}
+    env:
+      TZ: 'Asia/Shanghai'
+      VERSION: ${{ matrix.version }}
+      CHANNEL: ${{ matrix.channel }}
+      IMAGE: "ghcr.io/${{ github.repository_owner }}/chr"
+      DOCKER_BUILD_SUMMARY: 'false'
+      DOCKER_BUILD_RECORD_UPLOAD: 'false'
+
+    steps:
+      - name: Show build info
+        run: |
+          echo "Version: ${{ env.VERSION }}"
+          echo "Channel: ${{ env.CHANNEL }}"
+
+      - name: Download CHR image
+        run: |
+          # x86 架构
+          mkdir -p "amd64"
+          wget -nv -O "amd64/chr-$VERSION.img.zip" \
+            "https://github.com/elseif/MikroTikPatch/releases/download/$VERSION/chr-$VERSION.img.zip"
+          unzip "amd64/chr-$VERSION.img.zip" -d "amd64/"
+          rm "amd64/chr-$VERSION.img.zip"
+
+          # arm64 架构
+          mkdir -p "arm64"
+          wget -nv -O "arm64/chr-$VERSION-arm64.img.zip" \
+            "https://github.com/elseif/MikroTikPatch/releases/download/$VERSION-arm64/chr-$VERSION-arm64.img.zip"
+          unzip "arm64/chr-$VERSION-arm64.img.zip" -d "arm64/"
+          rm "arm64/chr-$VERSION-arm64.img.zip"
+          
+          ls -la amd64/ arm64/
+          
+      - name: Create start.sh
+        run: |
+          cat <<'EOF' > start.sh
+          #!/bin/sh
+          set -e
+          
+          MEM="${MEM:=512m}"
+          DISK="${DISK:=128M}"
+          CPUS="${CPUS:=1}"
+          bridge_index=0
+          
+          get_mac_address() {
+              ifname="$1"
+              ip link show "$ifname" 2>/dev/null | awk '/link\/ether/ {print $2}'
+          }
+          
+          increment_mac() {
+              mac=$1
+              mac_no_colons=$(echo "$mac" | tr -d ':' | tr '[:lower:]' '[:upper:]')
+              mac_dec=$((16#${mac_no_colons}))
+              mac_dec=$((mac_dec + 1))
+              mac_hex=$(printf "%012X" "$mac_dec")
+              echo "$mac_hex" | sed 's/.\{2\}/&:/g;s/:$//'
+          }
+          
+          echo "" > /etc/qemu/bridge.conf
+          
+          qemu="qemu-system-x86_64"
+          if [[ `uname -m` == "aarch64" ]]; then
+             qemu="qemu-system-aarch64 -pflash /usr/share/qemu/edk2-aarch64-code.fd -M virt"
+          fi
+          
+          if [ -e /dev/kvm ]; then
+              qemu="$qemu -enable-kvm -cpu host"
+          else
+              if [[ `uname -m` == "aarch64" ]]; then
+                  qemu="$qemu -cpu cortex-a57"
+              fi
+          fi
+          
+          img=`ls /diskimage/*.img`
+          qemu="$qemu -nographic -m $MEM -smp cpus=$CPUS -drive file=$img,format=raw"
+          truncate -s $DISK $img
+          
+          while read -r line; do
+              iface=$(echo "$line" | sed "s/ *\([a-z0-9]*\):.*/\1/")
+              if [[ "$iface" =~ " " ]]; then
+                  continue
+              fi
+              if [[ "$iface" =~ ^br ]]; then
+                  continue
+              fi
+              if [[ "$iface" == "lo" ]]; then
+                  continue
+              fi
+              if [[ "$iface" == "" ]]; then
+                  continue
+              fi
+              echo "iface: $iface"
+              bridge="br$bridge_index"
+              ip link add name "$bridge" type bridge
+              ip link set dev "$bridge" up
+              ip link set "$iface" master "$bridge"
+              echo "allow $bridge" >> /etc/qemu/bridge.conf
+          
+              veth_mac=$(get_mac_address "$iface")
+              tap_mac=$(increment_mac "$veth_mac")
+          
+              bridge_index=$((bridge_index + 1))
+              qemu="$qemu -netdev bridge,id=$bridge,br=$bridge -device virtio-net,netdev=$bridge,mac=$tap_mac "
+          done < /proc/net/dev
+          
+          echo "qemu: $qemu"
+          exec $qemu
+          EOF
+          chmod +x start.sh
+
+          
+      - name: Create Dockerfile
+        run: |
+          cat > Dockerfile << 'EOF'
+          FROM alpine:latest
+          ARG TARGETARCH
+          ARG VERSION
+          RUN case "$TARGETARCH" in \
+                amd64) apk add --no-cache qemu-system-x86_64 ;; \
+                arm64) apk add --no-cache qemu-system-aarch64 ;; \
+              esac \
+              && rm -rf /var/cache/apk/*
+          RUN mkdir -p /diskimage
+          COPY ${TARGETARCH}/*.img /diskimage/
+          COPY start.sh /start.sh
+          ENTRYPOINT ["/start.sh"]
+          EOF
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+          
+      - name: Build and Push 
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ env.IMAGE }}:${{ env.VERSION }}
+          build-args: VERSION=${{ env.VERSION }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          provenance: false
+          sbom: false
+          outputs: >
+            type=image,
+            annotation-index.org.opencontainers.image.title=MikroTik CHR RouterOS,
+            annotation-index.org.opencontainers.image.description=MikroTik CHR (Cloud Hosted Router) running on QEMU with Docker,
+            annotation-index.org.opencontainers.image.version=${{ env.VERSION }},
+            annotation-index.org.opencontainers.image.url=https://mikrotik.ltd
+
+      - name: Update channel tags
+        if: env.CHANNEL != ''
+        run: |
+          TAGS="-t ${{ env.IMAGE }}:${{ env.CHANNEL }}"
+          if [ "${{ env.CHANNEL }}" = "stable" ]; then
+            TAGS="$TAGS -t ${{ env.IMAGE }}:latest"
+          fi
+          echo "Creating tags: $TAGS"
+          docker buildx imagetools create $TAGS ${{ env.IMAGE }}:${{ env.VERSION }}
+
+      - name: Save Docker Image as tar
+        run: |
+          mkdir -p artifacts
+          echo "Exporting amd64 tar..."
+          docker pull --platform linux/amd64 ${{ env.IMAGE }}:${{ env.VERSION }}
+          docker save ${{ env.IMAGE }}:${{ env.VERSION }} -o artifacts/chr-${{ env.VERSION }}-amd64.tar
+          echo "Exporting arm64 tar..."
+          docker pull --platform linux/arm64 ${{ env.IMAGE }}:${{ env.VERSION }}
+          docker save ${{ env.IMAGE }}:${{ env.VERSION }} -o artifacts/chr-${{ env.VERSION }}-arm64.tar
+          ls -lh artifacts/
+
+      - name: Upload tar artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: chr-${{ env.VERSION }}-docker-images
+          path: artifacts/
+          retention-days: 30

README.md

@@ -1,70 +1,44 @@
+# MikroTik RouterOS Patch
 [![Patch Mikrotik RouterOS](https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml/badge.svg)](https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml)
+![Cloud Status](https://img.shields.io/endpoint?url=https://mikrotik.ltd/status/cloud)
 
+[![License: WTFPL](https://img.shields.io/badge/License-WTFPL-brightgreen.svg)](./LICENSE)
+[![CoC:WTFCoC](https://img.shields.io/badge/CoC-WTFCoC-brightgreen.svg)](./CODE_OF_CONDUCT.md)
+
+
+## ⚠️ 重要声明
+**此项目及工具仅供测试用途。使用风险自负。生产环境请使用官方授权版本。**
+
+## 架构：x86、arm64 
+- **主页：** https://mikrotik.ltd/ 
+- **演示：** https://demo.mikrotik.ltd/
+- **授权： 安装OPTION.NPK后将自动授予最高级别许可证。**
+- **源代码：** https://github.com/elseif/MikroTikPatch
+- **授权BOT：** https://t.me/ROS_Keygen_Bot
+- **Docker：** `docker pull ghcr.io/elseif/chr:latest`
+
+## 架构：arm64, arm, mipsbe, mmips, ppc, smips, x86 
+- **主页：** https://routeros.ltd/
+- **授权： 需要赞助**，*CHR版本(x86/Arm64)支持在线直接获取授权。*
+- **功能：** 支持在线自定义制作品牌包
+
+## 支持的云功能
+| 功能 | 命令 |
+|------|------|
+| 在线升级 | `system/package/update/install` |
+| DDNS | `ip/cloud/set ddns-enabled=yes` |
+| 云备份 | `/system/backup/cloud/upload-file action=create-and-upload password=any` |
+
+## 启用容器模式（无需物理重启）
+1. 安装 `option.npk` 包。
+2. 打开终端执行：`system/device-mode/update container=yes`
+3. 打开新终端执行：`system/shell cmd="reboot -f"`
+
+### 更多关于RouterOS的信息请查看: https://manual.mikrotik.com/
 
 ### 感谢赞助
 [![DigitalOcean Referral Badge](https://web-platforms.sfo2.cdn.digitaloceanspaces.com/WWW/Badge%201.svg)](https://www.digitalocean.com/?refcode=dbf6ed365068&utm_campaign=Referral_Invite&utm_medium=Referral_Program&utm_source=badge)
 [DartNode(aff)](https://dartnode.com?aff=SnazzyLobster067)  | [ZMTO(aff)](https://console.zmto.com/?affid=1588) | [Vultr(aff)](https://www.vultr.com/?ref=9807160-9J)
-
-**重要提示：** 仅用于**测试目的**。使用风险自负。生产环境请使用官方授权版本。
-
-继续操作即表示您确认：
-- 您已阅读并理解所涉及的法律风险和影响
-- 这些工具将仅在非生产测试环境中使用
-- 生产部署将使用官方授权软件
-
-# MikroTik RouterOS Patch  [[English](README_EN.md)]
-[![License: WTFPL](https://img.shields.io/badge/License-WTFPL-brightgreen.svg)](./LICENSE)
-[![CoC:WTFCoC](https://img.shields.io/badge/CoC-WTFCoC-brightgreen.svg)](./CODE_OF_CONDUCT.md)
-
-### [[Discord](https://discord.gg/keV6MWQFtX)] [[Telegram](https://telegram.me/mikrotikpatch)] [[Keygen(Telegram Bot)](https://telegram.me/ROS_Keygen_Bot)]
-
-支持:在线更新、在线授权、云备份、DDNS
-
-![Cloud Status](https://img.shields.io/endpoint?url=https://mikrotik.ltd/status/cloud)
-
-*如果云服务或部署云服务的虚拟主机都不在线，那么在线更新、在线授权、云备份、DDNS以及ROS_Keygen_Bot都暂时不能使用*
-
-### 从7.19.4和7.20beta8开始，安装option包以后会自动激活授权，如果有rc.local文件，会自动加载运行。
-```mermaid
-graph TD
-    A[启动] --> B[检查 keygen 文件是否存在 ]
-    B -->|是| C[fork 执行 keygen]
-    B -->|否| D[检查 rc.local 文件是否存在]
-    C --> D
-    D -->|是| E[fork 执行 /bin/sh rc.local]
-    D -->|否| F[启动服务]
-    E --> F
-```
-![](image/install.png)
-![](image/routeros.png)
-
-### x86模式在线授权(v6.x)
-![](image/renew_v6.png)
-### Chr模式在线授权
-![](image/renew.png)
-
-![](image/arm.png)
-![](image/mips.png)
-
-## 如何使用Shell
-    安装 option-{version}.npk 包
-    在终端执行 /sh 进入shell
-## 如何授权许可
-    安装 option-{version}.npk 包后，重启设备，会自动激活授权许可
-    Chr镜像支持在线授权许可
-## 如何使用Python
-    安装 python3-{version}.npk 包
-    在终端执行 /sh 进入shell
-    运行 python -V
-### npk.py
-    对npk文件进行解包，修改，创建，签名和验证
-### patch.py
-    替换公钥并签名
-### 如何在不物理重启的情况下启用容器模式
-    1. 安装 option.npk 包。
-    2. 打开终端并执行：`system/device-mode/update container=yes`
-    3. 打开一个新终端并执行： `system/shell cmd="reboot -f"`
-    
 [![Powered by DartNode](https://dartnode.com/branding/DN-Open-Source-sm.png)](https://dartnode.com "Powered by DartNode - Free VPS for Open Source")
 
 

README_EN.md

@@ -1,57 +0,0 @@
-[![Patch Mikrotik RouterOS](https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml/badge.svg)](https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml)
-
-
-**IMPORTANT:** For **testing purposes only**. Use at your own risk. Production environments require official licenses.
-
-By proceeding, you acknowledge that:
-- You have reviewed and comprehend the legal implications and risks involved
-- These tools will be used exclusively in non-production, test environments
-- Production deployments shall utilize officially licensed software
-
-# MikroTik RouterOS Patch [[中文](README.md)]
-[![License: WTFPL](https://img.shields.io/badge/License-WTFPL-brightgreen.svg)](./LICENSE)
-[![CoC:WTFCoC](https://img.shields.io/badge/CoC-WTFCoC-brightgreen.svg)](./CODE_OF_CONDUCT.md)
-
-### [[Discord](https://discord.gg/keV6MWQFtX)] [[Telegram](https://telegram.me/mikrotikpatch)] [[Keygen(Telegram Bot)](https://telegram.me/ROS_Keygen_Bot)]
-
-### Download [Latest Patched](https://github.com/elseif/MikroTikPatch/releases/latest) iso file,install it and enjoy.
-### CHR image is both support BIOS and UEFI boot mode.
-
-### Support online upgrade,online license,cloud backup,cloud DDNS
-
-![](image/install.png)
-![](image/routeros.png)
-
-### Renew license for x86 v6.x
-![](image/renew_v6.png)
-### Renew license for chr
-![](image/renew.png)
-
-![](image/arm.png)
-![](image/mips.png)
-
-## How to use shell
-    install option-{version}.npk package
-    Enter the shell by executing /sh in the terminal.
-## How to license RouterOS
-    After installing the option-{version}.npk package, reboot the device. The license will be activated automatically.
-    CHR images support online license activation
-## How to use python3
-    install python3-{version}.npk package
-    Enter the shell by executing /sh in the terminal.
-    run python -V
-### npk.py
-    Sign，Verify，Create, Extract npk file.
-### patch.py
-    Patch public key and sign NPK files
-### How to Enable Container Mode Without Physical Reboot
-    1. Install the option.npk package.
-    2. Open a terminal and run: `system/device-mode/update container=yes`
-    3. Open a new terminal and run: `system/shell cmd="reboot -f"`
-
-## all patches are applied automatically with [Github Action](https://github.com/elseif/MikroTikPatch/blob/main/.github/workflows/).
-
-
-
-
-

README_PT.md

@@ -1,64 +0,0 @@
-[![Patch Mikrotik RouterOS](https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml/badge.svg)](https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml)
-
-# Patch para MikroTik RouterOS [[中文](README.md)]
-[![License: WTFPL](https://img.shields.io/badge/License-WTFPL-brightgreen.svg)](./LICENSE)
-[![CoC:WTFCoC](https://img.shields.io/badge/CoC-WTFCoC-brightgreen.svg)](./CODE_OF_CONDUCT.md)
-
-### [[Discord](https://discord.gg/keV6MWQFtX)] [[Telegram](https://telegram.me/mikrotikpatch)] [[Keygen (Bot do Telegram)](https://telegram.me/ROS_Keygen_Bot)]
-
-### Baixe a [ISO modificada mais recente](https://github.com/elseif/MikroTikPatch/releases/latest), instale e aproveite.
-### A imagem CHR suporta modo de boot tanto BIOS quanto UEFI.
-
-### Suporte a atualização online, licença online, backup em nuvem e DDNS em nuvem
-
-![](image/install.png)  
-![](image/routeros.png)
-
-### Renovar a licença para x86 v6.x  
-![](image/renew_v6.png)
-
-### Renovar a licença para CHR  
-![](image/renew.png)
-
-
-![](image/arm.png)  
-![](image/mips.png)
-
-## Como usar o shell
-```bash
-instale o pacote option-{versão}.npk  
-Execute `/sh` no terminal para entrar no Shell.
-```
-
-## Como licenciar o RouterOS
-```bash
-Após instalar o pacote `option-{version}.npk`, reinicie o dispositivo. A licença será ativada automaticamente.
-Imagens CHR suportam ativação de licença online.
-```
-
-## Como usar o Python 3
-```bash
-instale o pacote python3-{versão}.npk  
-Execute `/sh` no terminal para entrar no Shell.
-execute `python -V`
-```
-
-### npk.py  
-```bash
-Assina, verifica, cria e extrai arquivos .npk
-```
-
-### patch.py  
-```bash
-Altera a chave pública e assina arquivos .npk
-```
-### Como ativar o modo container sem reiniciar fisicamente
-```bash
-1. Instale o pacote `option.npk`.
-2. Abra o terminal e execute: `system/device-mode/update container=yes`
-3. Abra um novo terminal e execute: `system/shell cmd="reboot -f"`
-```
-## Thanks for sponsoring
-[ZMTO](https://console.zmto.com/)
-
-## Todos os patches são aplicados automaticamente com [GitHub Actions](https://github.com/elseif/MikroTikPatch/blob/main/.github/workflows/)