PassWall 一键安装/更新脚本分享：手动安装用户也能快速升级

cat >/usr/bin/passwall-update.sh <<'EOF'
#!/bin/sh
set -e

KEY_URL="https://master.dl.sourceforge.net/project/openwrt-passwall-build/passwall.pub"
GH_API="https://api.github.com/repos/Openwrt-Passwall/openwrt-passwall/releases/latest"
LOCKDIR="/tmp/passwall-update.lock"

if ! mkdir "$LOCKDIR" 2>/dev/null; then
  echo "==> Another update task is already running"
  exit 1
fi
trap 'rmdir "$LOCKDIR"' EXIT INT TERM

# 读取系统信息
. /etc/openwrt_release
ARCH="$DISTRIB_ARCH"
REL_RAW="$DISTRIB_RELEASE"

# 判断 release / snapshot 源
case "$REL_RAW" in
  *SNAPSHOT*)
    FEED_BASE="https://master.dl.sourceforge.net/project/openwrt-passwall-build/snapshots/packages/$ARCH"
    ;;
  *)
    RELEASE="${REL_RAW%.*}"
    FEED_BASE="https://master.dl.sourceforge.net/project/openwrt-passwall-build/releases/packages-$RELEASE/$ARCH"
    ;;
esac

echo "==> System release: $REL_RAW"
echo "==> Arch: $ARCH"
echo "==> Feed base: $FEED_BASE"

# GitHub 最新版本（仅显示参考）
GH_LATEST="$(wget -qO- "$GH_API" 2>/dev/null | sed -n 's/.*"tag_name":[[:space:]]*"\([^"]*\)".*/\1/p' | head -n1)"
[ -n "$GH_LATEST" ] && echo "==> GitHub latest release: $GH_LATEST"

# 确保文件存在
touch /etc/opkg/customfeeds.conf

# 清理旧的 passwall 源，避免重复追加
sed -i '\|openwrt-passwall-build|d' /etc/opkg/customfeeds.conf
sed -i '/^src\/gz passwall_luci /d' /etc/opkg/customfeeds.conf
sed -i '/^src\/gz passwall_packages /d' /etc/opkg/customfeeds.conf
sed -i '/^src\/gz passwall2 /d' /etc/opkg/customfeeds.conf

# 导入 key
cd /tmp
rm -f passwall.pub
wget -qO passwall.pub "$KEY_URL"
opkg-key add /tmp/passwall.pub >/dev/null 2>&1 || true

# 重写软件源
for feed in passwall_luci passwall_packages passwall2; do
  echo "src/gz $feed $FEED_BASE/$feed" >> /etc/opkg/customfeeds.conf
done

echo "==> Refresh package index"
opkg update

OLD_VER="$(opkg status luci-app-passwall 2>/dev/null | sed -n 's/^Version: //p')"
echo "==> Current installed version: ${OLD_VER:-not installed}"

echo "==> Install / upgrade PassWall"
opkg install luci-app-passwall luci-i18n-passwall-zh-cn

NEW_VER="$(opkg status luci-app-passwall 2>/dev/null | sed -n 's/^Version: //p')"
echo "==> Installed version after update: ${NEW_VER:-unknown}"

if [ -n "$NEW_VER" ] && [ "$OLD_VER" != "$NEW_VER" ]; then
  echo "==> Version changed, restarting related services"
  /etc/init.d/firewall restart >/dev/null 2>&1 || true
  /etc/init.d/passwall restart >/dev/null 2>&1 || true
  /etc/init.d/uhttpd restart >/dev/null 2>&1 || true
else
  echo "==> No version change, skip service restart"
fi

echo "==> Done"
EOF

chmod +x /usr/bin/passwall-update.sh
/usr/bin/passwall-update.sh