init

2026-05-15 14:42:53 +03:30
commit 5ed5cafcdc
8 changed files with 386 additions and 0 deletions
@@ -0,0 +1,26 @@
+name: zerotier-planet-builder
+
+on:
+  workflow_dispatch
+        
+jobs:
+
+  build:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - name: Edit the planet IP
+      run: sed -i "s/1.1.1.1/${{ secrets.IP }}/g" ./patch/patch.json
+    - name: Edit username and password
+      run: sed -i "s/admin/${{ secrets.USERNAME }}/g" ./init.sh && sed -i "s/zero-ui/${{ secrets.PASSWORD }}/g" ./init.sh
+    - name: Build the Zerotier Planet Docker image
+      run: docker build . --file Dockerfile --tag zerotier-planet
+    - name: install 7zip
+      run: sudo apt-get -qq -y install p7zip-full
+    - name: Save the Docker image
+      run: docker save zerotier-planet|gzip > zerotier-planet.tar.gz && 7z a -t7z -mx=9 -p${{ secrets.PASSWORD }} zerotier-planet.tar.gz.7z zerotier-planet.tar.gz
+    - name: Upload the Docker image
+      uses: actions/upload-artifact@v4
+      with:
+          name: zerotier-planet.tar.gz.7z
+          path: zerotier-planet.tar.gz.7z
@@ -0,0 +1,44 @@
+FROM node:lts-bullseye-slim AS build-planet
+LABEL stage=tmp
+
+RUN echo "download tools and code..." && \
+    apt-get -qq update && \
+    apt-get -qq -y install git python3 make curl wget g++ gnupg
+RUN mkdir -p /usr/include/nlohmann/ && \
+    cd /usr/include/nlohmann/ && \
+    wget https://github.com/nlohmann/json/releases/download/v3.10.5/json.hpp
+RUN cd /opt && \
+    git clone -v https://github.com/zerotier/ZeroTierOne.git --depth 1
+
+RUN echo "install zerotier..." && \
+    curl -s https://install.zerotier.com | bash > /dev/null && \
+    cd /var/lib/zerotier-one && zerotier-idtool initmoon identity.public >moon.json
+ADD ./patch /app/patch
+ARG planet
+RUN cd /app/patch && \
+    python3 patch.py  && \
+    cd /var/lib/zerotier-one  && \
+    zerotier-idtool genmoon moon.json  && \
+    mkdir moons.d  && \
+    cp ./*.moon ./moons.d
+RUN echo "compile planet..." && \
+    cd /opt/ZeroTierOne/attic/world/ && sh build.sh > /dev/null && \
+    cd /opt/ZeroTierOne/attic/world/ && ./mkworld > /dev/null && \
+    mkdir /app/bin -p && cp world.bin /app/bin/planet && \
+    cp /app/bin/planet /var/lib/zerotier-one/planet
+
+FROM node:lts-bullseye-slim
+COPY --from=build-planet /var/lib/zerotier-one/ /var/lib/zerotier-one/
+COPY --from=build-planet /usr/sbin/zero* /usr/bin/
+COPY --from=build-planet /usr/lib/x86_64-linux-gnu/libssl*  /usr/lib/x86_64-linux-gnu/
+COPY --from=build-planet /usr/lib/x86_64-linux-gnu/libcrypto*  /usr/lib/x86_64-linux-gnu/
+RUN true
+COPY --from=dec0dos/zero-ui:latest /app/ /app/
+COPY init.sh /
+RUN chmod +x /init.sh
+EXPOSE 9993/udp
+EXPOSE 4000/tcp
+ENV NODE_ENV=production
+ENV ZU_SERVE_FRONTEND=true
+#VOLUME /var/lib/zerotier-one/controller.d /app/backend/data
+ENTRYPOINT ["/init.sh"]
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2022 kissshot
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
@@ -0,0 +1,97 @@
+# zerotier-planet-builder
+[中文说明](#中文说明)  
+A ZeroTierOne planet with zero-ui web interface builder.  
+Easier, faster and smaller way to create your private zerotier controller container.  
+Inspired by [docker-zerotier-planet](https://github.com/xubiaolin/docker-zerotier-planet)  and [zero-ui](https://github.com/dec0dOS/zero-ui).
+## How to use
+- 1 . Fork this repository.
+- 2 . Go to Setting - Secrets - Actions , add secrects:  
+>IP : your planet server IP.  
+USERNAME: zero-ui username.  
+PASSWORD: zero-ui password and docker image password.   
+
+![secrets.png](https://s2.loli.net/2022/08/29/uxcTpePls5SmbWn.png)
+- 3 . Go to Actions,click "Run workflow."
+![run.png](https://s2.loli.net/2022/08/29/ITs4SVxLE9lORM3.png)
+- 4 . Wait 3 minutes and you will see the Artifacts below, download it.
+![artifacts.png](https://s2.loli.net/2022/08/29/Gc3fbyUwZReJOHt.png)
+- 5 . Use the password you set to unzip it to get **zerotier-planet.tar.gz** and upload it to your server.  
+Prepare the docker environment on your server and run the following command to import the image:
+```sh
+docker image load < zerotier-planet.tar.gz
+```
+Check your image:
+```sh
+docker images
+```
+Run docker:
+```sh
+docker run -d --name zerotier-server -p 4000:4000 -p 9993:9993/udp  zerotier-planet
+```
+Or, if you want to mount the data to the host path
+```sh
+docker run -d --name zerotier-server -p 4000:4000 -p 9993:9993/udp -v /data/zerotier:/var/lib/zerotier-one/controller.d -v /data/zero-ui/:/app/backend/data   zerotier-planet
+```
+Note that each run of the docker image produces a unique ID related file. If you create a new docker image, you need to copy the related files under/var/lib/zerotier-one under the original image.
+```sh
+ docker cp zerotier-server:/var/lib/zerotier-one backup
+```
+Open http://IP:4000, use your secrets USERNAME and PASSWORD to login.   
+## For client  
+Replace your planet file:  
+Download your planet: http://IP:4000/app/planet  
+
+Windows: C:\ProgramData\ZeroTier\One\planet  
+Linux: /var/lib/zerotier-one/planet  
+Macos: /Library/Application\ Support/ZeroTier/One/planet  
+Andriod: https://github.com/kaaass/ZerotierFix  
+
+**Note: Restart zerotier client related services after replacing the planet file.**
+
+# 中文说明
+一个zerotier planet docker生成器，轻松搭建属于你自己的zerotier服务器，目的是生成更简单，更快和更小的docker镜像。  
+本项目参考自 [docker-zerotier-planet](https://github.com/xubiaolin/docker-zerotier-planet)  和 [zero-ui](https://github.com/dec0dOS/zero-ui)，关于zerotier planet的概念和用途、客户端文件替换的配置，[docker-zerotier-planet](https://github.com/xubiaolin/docker-zerotier-planet)这个项目描述的很详细，本项目web端使用[zero-ui](https://github.com/dec0dOS/zero-ui)，更详尽的web端配置可以点进该项目查看进阶使用指南。  
+
+## 怎么使用
+- 1 . Fork 这个项目.
+- 2 . 点击你项目的 Setting - Secrets - Actions , 添加 secrects:  
+>IP : 你的 planet 服务端 IP,就是公网IP  
+USERNAME: 登陆zero-ui的用户名  
+PASSWORD: zero-ui 的密码，和docker的镜像压缩包密码.   
+
+![secrets.png](https://s2.loli.net/2022/08/29/uxcTpePls5SmbWn.png)
+- 3 . 点击 Actions,点击 "Run workflow."
+![run.png](https://s2.loli.net/2022/08/29/ITs4SVxLE9lORM3.png)
+- 4 . 等待三分钟左右，就可以下载docker镜像了，大小在100M以内.
+![artifacts.png](https://s2.loli.net/2022/08/29/Gc3fbyUwZReJOHt.png)
+- 5 . 用你之前设置的密码解压文件得到 **zerotier-planet.tar.gz** 并上传到服务器.  
+在你的服务器准备docker运行环境，运行以下命令导入镜像:
+```sh
+docker image load < zerotier-planet.tar.gz
+```
+检查镜像是否导入成功:
+```sh
+docker images
+```
+运行docker:
+```sh
+docker run -d --name zerotier-server -p 4000:4000 -p 9993:9993/udp  zerotier-planet
+```
+或者，如果你想把数据挂在到主机目录，以便容器损坏的时候迁移：
+```sh
+docker run -d --name zerotier-server -p 4000:4000 -p 9993:9993/udp -v /data/zerotier:/var/lib/zerotier-one/controller.d -v /data/zero-ui/:/app/backend/data   zerotier-planet
+```
+注意每次运行docker镜像生产唯一的id相关文件，如果你建立新docker镜像的话，你需要复制原来镜像下/var/lib/zerotier-one下的相关文件  
+```sh
+ docker cp zerotier-server:/var/lib/zerotier-one backup
+```
+打开 http://IP:4000, 用你设置的secrets USERNAME 和 PASSWORD 登陆.  
+## 客户端
+替换planet文件:  
+下载planet: http://IP:4000/app/planet    
+
+Windows: C:\ProgramData\ZeroTier\One\planet    
+Linux: /var/lib/zerotier-one/planet    
+Macos: /Library/Application\ Support/ZeroTier/One/planet    
+Andriod: https://github.com/kaaass/ZerotierFix    
+**注意替换planet文件后重启zerotier客户端相关服务.**
@@ -0,0 +1,23 @@
+#!/usr/bin/env sh
+
+if  [ -z "$ZU_SECURE_HEADERS"  ]
+then export ZU_SECURE_HEADERS=false
+fi
+
+if  [ -z "$ZU_DEFAULT_USERNAME"  ]
+then export ZU_DEFAULT_USERNAME=admin
+fi
+
+if  [ -z "$ZU_DEFAULT_PASSWORD"  ]
+then export ZU_DEFAULT_PASSWORD=zero-ui
+fi
+
+cp /var/lib/zerotier-one/planet /app/frontend/build/planet
+js=$(grep -ors "Please Log In to continue" /app|cut -d":" -f1)
+sed -i "s/Please Log In to continue/\/app\/planet /g" $js
+sed -i "s/ZeroUI - ZeroTier Controller Web UI - is a web user interface for a self-hosted ZeroTier network controller./Download planet:/g"  $js
+echo Run zerotier...
+zerotier-one -d
+cd /app/backend/
+echo Run zero ui...
+node ./bin/www
@@ -0,0 +1,119 @@
+/*
+ * ZeroTier One - Network Virtualization Everywhere
+ * Copyright (C) 2011-2016  ZeroTier, Inc.  https://www.zerotier.com/
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+/*
+ * This utility makes the World from the configuration specified below.
+ * It probably won't be much use to anyone outside ZeroTier, Inc. except
+ * for testing and experimentation purposes.
+ *
+ * If you want to make your own World you must edit this file.
+ *
+ * When run, it expects two files in the current directory:
+ *
+ * previous.c25519 - key pair to sign this world (key from previous world)
+ * current.c25519 - key pair whose public key should be embedded in this world
+ *
+ * If these files do not exist, they are both created with the same key pair
+ * and a self-signed initial World is born.
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <stdint.h>
+
+#include <string>
+#include <vector>
+#include <algorithm>
+
+#include <node/Constants.hpp>
+#include <node/World.hpp>
+#include <node/C25519.hpp>
+#include <node/Identity.hpp>
+#include <node/InetAddress.hpp>
+#include <osdep/OSUtils.hpp>
+
+using namespace ZeroTier;
+
+int main(int argc,char **argv)
+{
+	std::string previous,current;
+	if ((!OSUtils::readFile("previous.c25519",previous))||(!OSUtils::readFile("current.c25519",current))) {
+		C25519::Pair np(C25519::generate());
+		previous = std::string();
+		previous.append((const char *)np.pub.data,ZT_C25519_PUBLIC_KEY_LEN);
+		previous.append((const char *)np.priv.data,ZT_C25519_PRIVATE_KEY_LEN);
+		current = previous;
+		OSUtils::writeFile("previous.c25519",previous);
+		OSUtils::writeFile("current.c25519",current);
+		fprintf(stderr,"INFO: created initial world keys: previous.c25519 and current.c25519 (both initially the same)" ZT_EOL_S);
+	}
+
+	if ((previous.length() != (ZT_C25519_PUBLIC_KEY_LEN + ZT_C25519_PRIVATE_KEY_LEN))||(current.length() != (ZT_C25519_PUBLIC_KEY_LEN + ZT_C25519_PRIVATE_KEY_LEN))) {
+		fprintf(stderr,"FATAL: previous.c25519 or current.c25519 empty or invalid" ZT_EOL_S);
+		return 1;
+	}
+	C25519::Pair previousKP;
+	memcpy(previousKP.pub.data,previous.data(),ZT_C25519_PUBLIC_KEY_LEN);
+	memcpy(previousKP.priv.data,previous.data() + ZT_C25519_PUBLIC_KEY_LEN,ZT_C25519_PRIVATE_KEY_LEN);
+	C25519::Pair currentKP;
+	memcpy(currentKP.pub.data,current.data(),ZT_C25519_PUBLIC_KEY_LEN);
+	memcpy(currentKP.priv.data,current.data() + ZT_C25519_PUBLIC_KEY_LEN,ZT_C25519_PRIVATE_KEY_LEN);
+
+	// =========================================================================
+	// EDIT BELOW HERE
+
+	std::vector<World::Root> roots;
+
+	const uint64_t id = ZT_WORLD_ID_EARTH;
+	const uint64_t ts = 1567191349589ULL; // August 30th, 2019
+
+	//__PATCH_REPLACE__
+
+	// END WORLD DEFINITION
+	// =========================================================================
+
+	fprintf(stderr,"INFO: generating and signing id==%llu ts==%llu" ZT_EOL_S,(unsigned long long)id,(unsigned long long)ts);
+
+	World nw = World::make(World::TYPE_PLANET,id,ts,currentKP.pub,roots,previousKP);
+
+	Buffer<ZT_WORLD_MAX_SERIALIZED_LENGTH> outtmp;
+	nw.serialize(outtmp,false);
+	World testw;
+	testw.deserialize(outtmp,0);
+	if (testw != nw) {
+		fprintf(stderr,"FATAL: serialization test failed!" ZT_EOL_S);
+		return 1;
+	}
+
+	OSUtils::writeFile("world.bin",std::string((const char *)outtmp.data(),outtmp.size()));
+	fprintf(stderr,"INFO: world.bin written with %u bytes of binary world data." ZT_EOL_S,outtmp.size());
+
+	fprintf(stdout,ZT_EOL_S);
+	fprintf(stdout,"#define ZT_DEFAULT_WORLD_LENGTH %u" ZT_EOL_S,outtmp.size());
+	fprintf(stdout,"static const unsigned char ZT_DEFAULT_WORLD[ZT_DEFAULT_WORLD_LENGTH] = {");
+	for(unsigned int i=0;i<outtmp.size();++i) {
+		const unsigned char *d = (const unsigned char *)outtmp.data();
+		if (i > 0)
+			fprintf(stdout,",");
+		fprintf(stdout,"0x%.2x",(unsigned int)d[i]);
+	}
+	fprintf(stdout,"};" ZT_EOL_S);
+
+	return 0;
+}
@@ -0,0 +1,5 @@
+{
+  "stableEndpoints": [
+    "1.1.1.1/9993"
+  ]
+}
@@ -0,0 +1,51 @@
+import os
+import json
+from re import M
+
+
+def get_moon():
+    with open("/var/lib/zerotier-one/moon.json", "r") as f:
+        moon = json.load(f)
+        return moon
+
+
+def get_patch():
+    with open("/app/patch/patch.json", "r") as f:
+        return json.load(f)
+
+
+def patch():
+    moon = get_moon()
+    patch = get_patch()
+
+    identity = moon["roots"][0]["identity"]
+    moon["roots"][0]["stableEndpoints"] = patch["stableEndpoints"]
+
+    # 修改moon  
+    with open("/var/lib/zerotier-one/moon.json", "w") as f:
+        f.write(json.dumps(moon,sort_keys=True, indent=2))
+
+    #print("修改后的moon")
+    #print(moon)
+
+    # 修改world
+    moon["roots"][0]["stableEndpoints"] = get_patch()["stableEndpoints"]
+    text = f"""// Los Angeles
+	roots.push_back(World::Root());
+	roots.back().identity = Identity("{identity}");
+"""
+
+    for i in get_patch()["stableEndpoints"]:
+        text += f'\n        roots.back().stableEndpoints.push_back(InetAddress("{i}"));'
+
+    # 生成文件
+    with open("/app/patch/mkworld.cpp", "r") as cpp:
+        world = "".join(cpp.readlines())
+        world = world.replace("//__PATCH_REPLACE__", text)
+
+    with open("/opt/ZeroTierOne/attic/world/mkworld.cpp", "w") as cpp:
+        cpp.write(world)
+
+
+if __name__ == '__main__':
+    patch()