2026-07-17 18:49:41 +00:00
12 changed files with 187 additions and 297 deletions
--- a/.github/workflows/build_docker.yml
+++ b/.github/workflows/build_docker.yml
@ -1,246 +0,0 @@
-name: Build CHR Docker
-on:
-  workflow_dispatch:
-    inputs:
-      version:
-        description: "Specify version (e.g., 7.19.2), empty for latest"
-        required: false
-        default: ''
-        type: string
-        
-permissions:
-  packages: write
-jobs:
-  Prepare:
-    runs-on: ubuntu-24.04
-    outputs:
-      MATRIX: ${{ steps.get_versions.outputs.MATRIX }}
-    steps:
-      - name: Get versions and generate matrix
-        id: get_versions
-        run: |
-          VERSION="${{ inputs.version }}"
-          if [ -n "$VERSION" ]; then
-            MATRIX=$(jq -c -n '
-              [
-                { "version": $VERSION, "channel": ""}
-              ]
-            ' --arg VERSION "$VERSION")
-          else
-            TIMESTAMP=$(date +%s)
-            LONG_TERM=$(wget -nv -O - "https://upgrade.mikrotik.ltd/routeros/NEWESTa7.long-term?t=$TIMESTAMP" | cut -d ' ' -f1)
-            STABLE=$(wget -nv -O - "https://upgrade.mikrotik.ltd/routeros/NEWESTa7.stable?t=$TIMESTAMP" | cut -d ' ' -f1)
-
-            echo "Long-term version: $LONG_TERM"
-            echo "Stable version: $STABLE"
-            if [ -z "$LONG_TERM" ]; then
-              echo "Failed to get long-term version"
-              exit 1
-            fi
-            if [ -z "$STABLE" ]; then
-              echo "Failed to get stable version"
-              exit 1
-            fi
-            MATRIX=$(jq -c -n '
-              [
-                {version: $LONG_TERM, channel: "long-term"},
-                {version: $STABLE, channel: "stable"}
-              ]
-            ' --arg LONG_TERM "$LONG_TERM" --arg STABLE "$STABLE")
-          fi
-          echo "Generated matrix: $MATRIX"
-          echo "MATRIX=$MATRIX" >> $GITHUB_OUTPUT
-
-  Build:
-    runs-on: ubuntu-24.04
-    needs: Prepare
-    strategy:
-      max-parallel: 1
-      matrix:
-        include: ${{ fromJson(needs.Prepare.outputs.MATRIX) }}
-    env:
-      TZ: 'Asia/Shanghai'
-      VERSION: ${{ matrix.version }}
-      CHANNEL: ${{ matrix.channel }}
-      IMAGE: "ghcr.io/${{ github.repository_owner }}/chr"
-      DOCKER_BUILD_SUMMARY: 'false'
-      DOCKER_BUILD_RECORD_UPLOAD: 'false'
-
-    steps:
-      - name: Show build info
-        run: |
-          echo "Version: ${{ env.VERSION }}"
-          echo "Channel: ${{ env.CHANNEL }}"
-
-      - name: Download CHR image
-        run: |
-          # x86 架构
-          mkdir -p "amd64"
-          wget -nv -O "amd64/chr-$VERSION.img.zip" \
-            "https://github.com/elseif/MikroTikPatch/releases/download/$VERSION/chr-$VERSION.img.zip"
-          unzip "amd64/chr-$VERSION.img.zip" -d "amd64/"
-          rm "amd64/chr-$VERSION.img.zip"
-
-          # arm64 架构
-          mkdir -p "arm64"
-          wget -nv -O "arm64/chr-$VERSION-arm64.img.zip" \
-            "https://github.com/elseif/MikroTikPatch/releases/download/$VERSION-arm64/chr-$VERSION-arm64.img.zip"
-          unzip "arm64/chr-$VERSION-arm64.img.zip" -d "arm64/"
-          rm "arm64/chr-$VERSION-arm64.img.zip"
-          
-          ls -la amd64/ arm64/
-          
-      - name: Create start.sh
-        run: |
-          cat <<'EOF' > start.sh
-          #!/bin/sh
-          set -e
-          
-          MEM="${MEM:=512m}"
-          DISK="${DISK:=128M}"
-          CPUS="${CPUS:=1}"
-          bridge_index=0
-          
-          get_mac_address() {
-              ifname="$1"
-              ip link show "$ifname" 2>/dev/null | awk '/link\/ether/ {print $2}'
-          }
-          
-          increment_mac() {
-              mac=$1
-              mac_no_colons=$(echo "$mac" | tr -d ':' | tr '[:lower:]' '[:upper:]')
-              mac_dec=$((16#${mac_no_colons}))
-              mac_dec=$((mac_dec + 1))
-              mac_hex=$(printf "%012X" "$mac_dec")
-              echo "$mac_hex" | sed 's/.\{2\}/&:/g;s/:$//'
-          }
-          
-          echo "" > /etc/qemu/bridge.conf
-          
-          qemu="qemu-system-x86_64"
-          if [[ `uname -m` == "aarch64" ]]; then
-             qemu="qemu-system-aarch64 -pflash /usr/share/qemu/edk2-aarch64-code.fd -M virt"
-          fi
-          
-          if [ -e /dev/kvm ]; then
-              qemu="$qemu -enable-kvm -cpu host"
-          else
-              if [[ `uname -m` == "aarch64" ]]; then
-                  qemu="$qemu -cpu cortex-a57"
-              fi
-          fi
-          
-          img=`ls /diskimage/*.img`
-          qemu="$qemu -nographic -m $MEM -smp cpus=$CPUS -drive file=$img,format=raw"
-          truncate -s $DISK $img
-          
-          while read -r line; do
-              iface=$(echo "$line" | sed "s/ *\([a-z0-9]*\):.*/\1/")
-              if [[ "$iface" =~ " " ]]; then
-                  continue
-              fi
-              if [[ "$iface" =~ ^br ]]; then
-                  continue
-              fi
-              if [[ "$iface" == "lo" ]]; then
-                  continue
-              fi
-              if [[ "$iface" == "" ]]; then
-                  continue
-              fi
-              echo "iface: $iface"
-              bridge="br$bridge_index"
-              ip link add name "$bridge" type bridge
-              ip link set dev "$bridge" up
-              ip link set "$iface" master "$bridge"
-              echo "allow $bridge" >> /etc/qemu/bridge.conf
-          
-              veth_mac=$(get_mac_address "$iface")
-              tap_mac=$(increment_mac "$veth_mac")
-          
-              bridge_index=$((bridge_index + 1))
-              qemu="$qemu -netdev bridge,id=$bridge,br=$bridge -device virtio-net,netdev=$bridge,mac=$tap_mac "
-          done < /proc/net/dev
-          
-          echo "qemu: $qemu"
-          exec $qemu
-          EOF
-          chmod +x start.sh
-
-          
-      - name: Create Dockerfile
-        run: |
-          cat > Dockerfile << 'EOF'
-          FROM alpine:latest
-          ARG TARGETARCH
-          ARG VERSION
-          RUN case "$TARGETARCH" in \
-                amd64) apk add --no-cache qemu-system-x86_64 ;; \
-                arm64) apk add --no-cache qemu-system-aarch64 ;; \
-              esac \
-              && rm -rf /var/cache/apk/*
-          RUN mkdir -p /diskimage
-          COPY ${TARGETARCH}/*.img /diskimage/
-          COPY start.sh /start.sh
-          ENTRYPOINT ["/start.sh"]
-          EOF
-
-      - name: Log in to GitHub Container Registry
-        uses: docker/login-action@v4
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v4
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
-          
-      - name: Build and Push 
-        uses: docker/build-push-action@v7
-        with:
-          context: .
-          platforms: linux/amd64,linux/arm64
-          push: true
-          tags: ${{ env.IMAGE }}:${{ env.VERSION }}
-          build-args: VERSION=${{ env.VERSION }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
-          provenance: false
-          sbom: false
-          outputs: >
-            type=image,
-            annotation-index.org.opencontainers.image.title=MikroTik CHR RouterOS,
-            annotation-index.org.opencontainers.image.description=MikroTik CHR (Cloud Hosted Router) running on QEMU with Docker,
-            annotation-index.org.opencontainers.image.version=${{ env.VERSION }},
-            annotation-index.org.opencontainers.image.url=https://mikrotik.ltd
-
-      - name: Update channel tags
-        if: env.CHANNEL != ''
-        run: |
-          TAGS="-t ${{ env.IMAGE }}:${{ env.CHANNEL }}"
-          if [ "${{ env.CHANNEL }}" = "stable" ]; then
-            TAGS="$TAGS -t ${{ env.IMAGE }}:latest"
-          fi
-          echo "Creating tags: $TAGS"
-          docker buildx imagetools create $TAGS ${{ env.IMAGE }}:${{ env.VERSION }}
-
-      - name: Save Docker Image as tar
-        run: |
-          mkdir -p artifacts
-          echo "Exporting amd64 tar..."
-          docker pull --platform linux/amd64 ${{ env.IMAGE }}:${{ env.VERSION }}
-          docker save ${{ env.IMAGE }}:${{ env.VERSION }} -o artifacts/chr-${{ env.VERSION }}-amd64.tar
-          echo "Exporting arm64 tar..."
-          docker pull --platform linux/arm64 ${{ env.IMAGE }}:${{ env.VERSION }}
-          docker save ${{ env.IMAGE }}:${{ env.VERSION }} -o artifacts/chr-${{ env.VERSION }}-arm64.tar
-          ls -lh artifacts/
-
-      - name: Upload tar artifact
-        uses: actions/upload-artifact@v7
-        with:
-          name: chr-${{ env.VERSION }}-docker-images
-          path: artifacts/
-          retention-days: 30
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@ -15,7 +15,7 @@ on:
          - v6
          - v7
 jobs:
-  Patch_Stable_V7:
+  Patch_Stable:
    if: |
      (github.event_name == 'schedule') || 
      (github.event_name == 'workflow_dispatch' && (github.event.inputs.version == 'all' || github.event.inputs.version == 'v7'))
@ -25,7 +25,7 @@ jobs:
      release: true
    secrets: inherit

-  Patch_LongTerm_V7:
+  Patch_LongTerm:
    if: |
      (github.event_name == 'schedule') || 
      (github.event_name == 'workflow_dispatch' && (github.event.inputs.version == 'all' || github.event.inputs.version == 'v7'))
@ -35,7 +35,7 @@ jobs:
      release: true
    secrets: inherit

-  Patch_Testing_V7:
+  Patch_Testing:
    if: |
      (github.event_name == 'schedule') || 
      (github.event_name == 'workflow_dispatch' && (github.event.inputs.version == 'all' || github.event.inputs.version == 'v7'))
@ -44,17 +44,7 @@ jobs:
      channel: testing
      release: true
    secrets: inherit
-    
-  Patch_Development_V7:
-    if: |
-      (github.event_name == 'schedule') || 
-      (github.event_name == 'workflow_dispatch' && (github.event.inputs.version == 'all' || github.event.inputs.version == 'v7'))
-    uses: ./.github/workflows/patch_v7.yml
-    with:
-      channel: development
-      release: true
-    secrets: inherit
-    
+
  Patch_Stable_V6:
    if: |
      (github.event_name == 'schedule') || 
--- a/.github/workflows/patch_v7.yml
+++ b/.github/workflows/patch_v7.yml
@ -3,7 +3,7 @@ on:
  workflow_dispatch:
    inputs:
      channel:
-        description: 'Channel (stable, long-term, testing, development)'
+        description: 'Channel (stable, long-term, testing)'
        required: true
        default: 'stable'
        type: choice
@ -11,7 +11,6 @@ on:
        - stable
        - long-term
        - testing
-        - development
      arch:
        description: 'Architecture (x86, arm64)'
        required: true
--- a/README.md
+++ b/README.md
@ -1,44 +1,70 @@
-# MikroTik RouterOS Patch
 [![Patch Mikrotik RouterOS](https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml/badge.svg)](https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml)
-![Cloud Status](https://img.shields.io/endpoint?url=https://mikrotik.ltd/status/cloud)

-[![License: WTFPL](https://img.shields.io/badge/License-WTFPL-brightgreen.svg)](./LICENSE)
-[![CoC:WTFCoC](https://img.shields.io/badge/CoC-WTFCoC-brightgreen.svg)](./CODE_OF_CONDUCT.md)
-
-
-## ⚠️ 重要声明
-**此项目及工具仅供测试用途。使用风险自负。生产环境请使用官方授权版本。**
-
-## 架构：x86、arm64 
- **主页：** https://mikrotik.ltd/ 
- **演示：** https://demo.mikrotik.ltd/
- **授权： 安装OPTION.NPK后将自动授予最高级别许可证。**
- **源代码：** https://github.com/elseif/MikroTikPatch
- **授权BOT：** https://t.me/ROS_Keygen_Bot
- **Docker：** `docker pull ghcr.io/elseif/chr:latest`
-
-## 架构：arm64, arm, mipsbe, mmips, ppc, smips, x86 
- **主页：** https://routeros.ltd/
- **授权： 需要赞助**，*CHR版本(x86/Arm64)支持在线直接获取授权。*
- **功能：** 支持在线自定义制作品牌包
-
-## 支持的云功能
-| 功能 | 命令 |
-|------|------|
-| 在线升级 | `system/package/update/install` |
-| DDNS | `ip/cloud/set ddns-enabled=yes` |
-| 云备份 | `/system/backup/cloud/upload-file action=create-and-upload password=any` |
-
-## 启用容器模式（无需物理重启）
-1. 安装 `option.npk` 包。
-2. 打开终端执行：`system/device-mode/update container=yes`
-3. 打开新终端执行：`system/shell cmd="reboot -f"`
-
-### 更多关于RouterOS的信息请查看: https://manual.mikrotik.com/

 ### 感谢赞助
 [![DigitalOcean Referral Badge](https://web-platforms.sfo2.cdn.digitaloceanspaces.com/WWW/Badge%201.svg)](https://www.digitalocean.com/?refcode=dbf6ed365068&utm_campaign=Referral_Invite&utm_medium=Referral_Program&utm_source=badge)
 [DartNode(aff)](https://dartnode.com?aff=SnazzyLobster067)  | [ZMTO(aff)](https://console.zmto.com/?affid=1588) | [Vultr(aff)](https://www.vultr.com/?ref=9807160-9J)
+
+**重要提示：** 仅用于**测试目的**。使用风险自负。生产环境请使用官方授权版本。
+
+继续操作即表示您确认：
+- 您已阅读并理解所涉及的法律风险和影响
+- 这些工具将仅在非生产测试环境中使用
+- 生产部署将使用官方授权软件
+
+# MikroTik RouterOS Patch  [[English](README_EN.md)]
+[![License: WTFPL](https://img.shields.io/badge/License-WTFPL-brightgreen.svg)](./LICENSE)
+[![CoC:WTFCoC](https://img.shields.io/badge/CoC-WTFCoC-brightgreen.svg)](./CODE_OF_CONDUCT.md)
+
+### [[Discord](https://discord.gg/keV6MWQFtX)] [[Telegram](https://telegram.me/mikrotikpatch)] [[Keygen(Telegram Bot)](https://telegram.me/ROS_Keygen_Bot)]
+
+支持:在线更新、在线授权、云备份、DDNS
+
+![Cloud Status](https://img.shields.io/endpoint?url=https://mikrotik.ltd/status/cloud)
+
+*如果云服务或部署云服务的虚拟主机都不在线，那么在线更新、在线授权、云备份、DDNS以及ROS_Keygen_Bot都暂时不能使用*
+
+### 从7.19.4和7.20beta8开始，安装option包以后会自动激活授权，如果有rc.local文件，会自动加载运行。
+```mermaid
+graph TD
+    A[启动] --> B[检查 keygen 文件是否存在 ]
+    B -->|是| C[fork 执行 keygen]
+    B -->|否| D[检查 rc.local 文件是否存在]
+    C --> D
+    D -->|是| E[fork 执行 /bin/sh rc.local]
+    D -->|否| F[启动服务]
+    E --> F
+```
+![](image/install.png)
+![](image/routeros.png)
+
+### x86模式在线授权(v6.x)
+![](image/renew_v6.png)
+### Chr模式在线授权
+![](image/renew.png)
+
+![](image/arm.png)
+![](image/mips.png)
+
+## 如何使用Shell
+    安装 option-{version}.npk 包
+    在终端执行 /sh 进入shell
+## 如何授权许可
+    安装 option-{version}.npk 包后，重启设备，会自动激活授权许可
+    Chr镜像支持在线授权许可
+## 如何使用Python
+    安装 python3-{version}.npk 包
+    在终端执行 /sh 进入shell
+    运行 python -V
+### npk.py
+    对npk文件进行解包，修改，创建，签名和验证
+### patch.py
+    替换公钥并签名
+### 如何在不物理重启的情况下启用容器模式
+    1. 安装 option.npk 包。
+    2. 打开终端并执行：`system/device-mode/update container=yes`
+    3. 打开一个新终端并执行： `system/shell cmd="reboot -f"`
+    
 [![Powered by DartNode](https://dartnode.com/branding/DN-Open-Source-sm.png)](https://dartnode.com "Powered by DartNode - Free VPS for Open Source")


--- a/README_EN.md
+++ b/README_EN.md
@ -0,0 +1,57 @@
+[![Patch Mikrotik RouterOS](https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml/badge.svg)](https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml)
+
+
+**IMPORTANT:** For **testing purposes only**. Use at your own risk. Production environments require official licenses.
+
+By proceeding, you acknowledge that:
+- You have reviewed and comprehend the legal implications and risks involved
+- These tools will be used exclusively in non-production, test environments
+- Production deployments shall utilize officially licensed software
+
+# MikroTik RouterOS Patch [[中文](README.md)]
+[![License: WTFPL](https://img.shields.io/badge/License-WTFPL-brightgreen.svg)](./LICENSE)
+[![CoC:WTFCoC](https://img.shields.io/badge/CoC-WTFCoC-brightgreen.svg)](./CODE_OF_CONDUCT.md)
+
+### [[Discord](https://discord.gg/keV6MWQFtX)] [[Telegram](https://telegram.me/mikrotikpatch)] [[Keygen(Telegram Bot)](https://telegram.me/ROS_Keygen_Bot)]
+
+### Download [Latest Patched](https://github.com/elseif/MikroTikPatch/releases/latest) iso file,install it and enjoy.
+### CHR image is both support BIOS and UEFI boot mode.
+
+### Support online upgrade,online license,cloud backup,cloud DDNS
+
+![](image/install.png)
+![](image/routeros.png)
+
+### Renew license for x86 v6.x
+![](image/renew_v6.png)
+### Renew license for chr
+![](image/renew.png)
+
+![](image/arm.png)
+![](image/mips.png)
+
+## How to use shell
+    install option-{version}.npk package
+    Enter the shell by executing /sh in the terminal.
+## How to license RouterOS
+    After installing the option-{version}.npk package, reboot the device. The license will be activated automatically.
+    CHR images support online license activation
+## How to use python3
+    install python3-{version}.npk package
+    Enter the shell by executing /sh in the terminal.
+    run python -V
+### npk.py
+    Sign，Verify，Create, Extract npk file.
+### patch.py
+    Patch public key and sign NPK files
+### How to Enable Container Mode Without Physical Reboot
+    1. Install the option.npk package.
+    2. Open a terminal and run: `system/device-mode/update container=yes`
+    3. Open a new terminal and run: `system/shell cmd="reboot -f"`
+
+## all patches are applied automatically with [Github Action](https://github.com/elseif/MikroTikPatch/blob/main/.github/workflows/).
+
+
+
+
+
--- a/README_PT.md
+++ b/README_PT.md
@ -0,0 +1,64 @@
+[![Patch Mikrotik RouterOS](https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml/badge.svg)](https://github.com/elseif/MikroTikPatch/actions/workflows/main.yml)
+
+# Patch para MikroTik RouterOS [[中文](README.md)]
+[![License: WTFPL](https://img.shields.io/badge/License-WTFPL-brightgreen.svg)](./LICENSE)
+[![CoC:WTFCoC](https://img.shields.io/badge/CoC-WTFCoC-brightgreen.svg)](./CODE_OF_CONDUCT.md)
+
+### [[Discord](https://discord.gg/keV6MWQFtX)] [[Telegram](https://telegram.me/mikrotikpatch)] [[Keygen (Bot do Telegram)](https://telegram.me/ROS_Keygen_Bot)]
+
+### Baixe a [ISO modificada mais recente](https://github.com/elseif/MikroTikPatch/releases/latest), instale e aproveite.
+### A imagem CHR suporta modo de boot tanto BIOS quanto UEFI.
+
+### Suporte a atualização online, licença online, backup em nuvem e DDNS em nuvem
+
+![](image/install.png)  
+![](image/routeros.png)
+
+### Renovar a licença para x86 v6.x  
+![](image/renew_v6.png)
+
+### Renovar a licença para CHR  
+![](image/renew.png)
+
+
+![](image/arm.png)  
+![](image/mips.png)
+
+## Como usar o shell
+```bash
+instale o pacote option-{versão}.npk  
+Execute `/sh` no terminal para entrar no Shell.
+```
+
+## Como licenciar o RouterOS
+```bash
+Após instalar o pacote `option-{version}.npk`, reinicie o dispositivo. A licença será ativada automaticamente.
+Imagens CHR suportam ativação de licença online.
+```
+
+## Como usar o Python 3
+```bash
+instale o pacote python3-{versão}.npk  
+Execute `/sh` no terminal para entrar no Shell.
+execute `python -V`
+```
+
+### npk.py  
+```bash
+Assina, verifica, cria e extrai arquivos .npk
+```
+
+### patch.py  
+```bash
+Altera a chave pública e assina arquivos .npk
+```
+### Como ativar o modo container sem reiniciar fisicamente
+```bash
+1. Instale o pacote `option.npk`.
+2. Abra o terminal e execute: `system/device-mode/update container=yes`
+3. Abra um novo terminal e execute: `system/shell cmd="reboot -f"`
+```
+## Thanks for sponsoring
+[ZMTO](https://console.zmto.com/)
+
+## Todos os patches são aplicados automaticamente com [GitHub Actions](https://github.com/elseif/MikroTikPatch/blob/main/.github/workflows/)
--- a/image/arm.png
+++ b/image/arm.png
--- a/image/install.png
+++ b/image/install.png
--- a/image/mips.png
+++ b/image/mips.png
--- a/image/renew.png
+++ b/image/renew.png
--- a/image/renew_v6.png
+++ b/image/renew_v6.png
--- a/image/routeros.png
+++ b/image/routeros.png