feat: 对齐 xxxig/proxy 打包规范并迁移配置至 /etc/mond

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-09 22:00:48 +08:00
parent 2862374985
commit 317973e94d
11 changed files with 184 additions and 227 deletions
@@ -17,128 +17,43 @@ mkdir -p /var/log/mond
 chown mond:mond /var/log/mond
 chmod 750 /var/log/mond

-# Create data directory
+# Create data directory（非递归设权限，避免升级时遍历庞大的区块链数据目录）
 mkdir -p /var/lib/mond/data
-chown -R mond:mond /var/lib/mond
-chmod -R 750 /var/lib/mond
+chown mond:mond /var/lib/mond /var/lib/mond/data
+chmod 750 /var/lib/mond /var/lib/mond/data

-# Create configuration file if it doesn't exist
-if [ ! -f /var/lib/mond/params.conf ]; then
-    cat > /var/lib/mond/params.conf << 'CONF'
-# Mond Configuration File
-# This file is automatically created during installation
-# Edit this file to customize your Mond daemon settings
-# After modifying, restart the service: sudo systemctl restart mond.service
+# Create config directory
+mkdir -p /etc/mond

-# DATA STORAGE
-# ============================================================================
-# data-dir: 区块链数据存储目录
-data-dir=/var/lib/mond/data
-
-# BLOCKCHAIN PRUNING
-# ============================================================================
-# prune-blockchain: 启用区块链修剪模式
-prune-blockchain=1
-
-# sync-pruned-blocks: 同步已修剪的区块（默认启用）
-sync-pruned-blocks=1
-
-# NETWORK PEER SETTINGS
-# ============================================================================
-# out-peers: 主动连接的对等节点数量（出站连接）
-out-peers=32
-
-# in-peers: 接受连接的对等节点数量（入站连接）
-in-peers=64
-
-# limit-rate-up: 上传速率限制（kB/s）
-limit-rate-up=1048576
-
-# limit-rate-down: 下载速率限制（kB/s）
-limit-rate-down=1048576
-
-# PRIORITY NODES
-# ============================================================================
-# add-priority-node: 优先连接的可信节点
-add-priority-node=p2pmd.xmrvsbeast.com:18080
-add-priority-node=nodes.hashvault.pro:18080
-
-# SECURITY AND NETWORK INTEGRITY
-# ============================================================================
-# enforce-dns-checkpointing: 强制执行 DNS 检查点验证
-enforce-dns-checkpointing=1
-
-# enable-dns-blocklist: 启用 DNS 黑名单
-enable-dns-blocklist=1
-
-# ZMQ NOTIFICATION SYSTEM
-# ============================================================================
-# zmq-pub: ZeroMQ 发布接口，用于实时广播区块链事件
-zmq-pub=tcp://127.0.0.1:18083
-
-# P2P AND RPC NETWORK BINDING
-# ============================================================================
-# p2p-bind-ip: P2P 网络监听地址（默认启用，绑定所有网络接口）
-p2p-bind-ip=0.0.0.0
-
-# p2p-bind-port: P2P 网络监听端口
-p2p-bind-port=18080
-
-# rpc-bind-ip: RPC 接口监听地址
-#rpc-bind-ip=0.0.0.0
-
-# rpc-bind-port: RPC 接口监听端口
-#rpc-bind-port=18081
-
-# confirm-external-bind: 确认外部网络绑定
-#confirm-external-bind=1
-
-# RPC AUTHENTICATION
-# ============================================================================
-# rpc-login: RPC 访问认证凭据
-#rpc-login=user:password
-
-# RPC SSL/TLS ENCRYPTION
-# ============================================================================
-# rpc-ssl: 启用 RPC 连接的 SSL/TLS 加密（语义更清晰的启用方式）
-#rpc-ssl=enabled
-
-# rpc-ssl-certificate: SSL 证书文件路径
-#rpc-ssl-certificate=/path/to/your/certificate.pem
-
-# rpc-ssl-private-key: SSL 私钥文件路径
-#rpc-ssl-private-key=/path/to/your/private_key.pem
-
-# LOGGING SETTINGS
-# ============================================================================
-# log-level: 日志详细程度（调整为详细日志级别）
-log-level=1
-
-# log-file: 日志文件保存路径
-log-file=/var/log/mond/mond.log
-CONF
-    chown mond:mond /var/lib/mond/params.conf
-    chmod 640 /var/lib/mond/params.conf
+# 兼容旧版本：配置文件曾位于 /var/lib/mond/params.conf，迁移到 /etc/mond/params.conf
+if [ ! -f /etc/mond/params.conf ] && [ -f /var/lib/mond/params.conf ]; then
+    echo "Migrating existing config from /var/lib/mond to /etc/mond..."
+    cp /var/lib/mond/params.conf /etc/mond/params.conf
 fi

-# Set permissions on binary
-chown root:root /opt/mond/mond
+# 首次安装：从包内默认配置生成（源：conf/params.example.conf）。升级不覆盖已有配置
+if [ ! -f /etc/mond/params.conf ]; then
+    cp /opt/mond/params.conf /etc/mond/params.conf
+fi
+
+chown mond:mond /etc/mond/params.conf
+chmod 640 /etc/mond/params.conf
+
+# Set permissions：/opt 目录与二进制 755，数据文件 644（对齐 xxxig / xxxig-proxy）
+chown -R root:root /opt/mond
+find /opt/mond -type d -exec chmod 755 {} +
+find /opt/mond -type f -exec chmod 644 {} +
 chmod 755 /opt/mond/mond

-# Reload systemd and handle service restart on upgrade
+# Reload systemd
 if [ -d /run/systemd/system ]; then
    systemctl daemon-reload

-    # On upgrade: restart service if it was enabled
-    if [ "$1" = "configure" ] && [ -n "$2" ]; then
-        # $2 is the previously installed version (only set on upgrade)
-        if systemctl is-enabled --quiet mond.service 2>/dev/null; then
-            echo "Restarting mond service after upgrade..."
-            systemctl start mond.service || true
-        fi
-    fi
+    # 升级时重启正在运行的服务以加载新二进制；try-restart 不会启动未运行的服务，
+    # 故首次安装仍保持"不自动启动"语义
+    systemctl try-restart mond.service 2>/dev/null || true
+
    # Note: On fresh install, service is NOT auto-enabled or auto-started
-    # Users should manually enable the service:
    #   systemctl enable mond.service
    #   systemctl start mond.service
 fi
@@ -146,31 +61,14 @@ fi
 echo ""
 echo "✅ Mond installed successfully!"
 echo ""
-echo "📋 Configuration and startup:"
-echo ""
-echo "1. Review and configure settings (optional):"
-echo "   sudo nano /var/lib/mond/params.conf"
-echo ""
-echo "   Adjust network settings, peer connections, and other options as needed."
-echo ""
-echo "2. Start Mond:"
-echo "   sudo systemctl enable mond.service"
-echo "   sudo systemctl start mond.service"
-echo ""
-echo "3. Check status:"
-echo "   sudo systemctl status mond.service"
-echo "   sudo journalctl -u mond -f"
-echo ""
 echo "📁 Important paths:"
-echo "   Config file:    /var/lib/mond/params.conf"
-echo "   Data directory: /var/lib/mond/data"
-echo "   Log directory:  /var/log/mond"
-echo "   Binary:         /opt/mond/mond"
+echo "   Config file:      /etc/mond/params.conf"
+echo "   Data directory:   /var/lib/mond/data"
+echo "   Log directory:    /var/log/mond"
+echo "   Binaries:         /opt/mond/mond"
+echo "   Systemd services: mond.service"
 echo ""
-echo "💡 Tip: Your params.conf will NOT be overwritten during package upgrades."
-echo ""
-echo "For help:"
-echo "   /opt/mond/mond --help"
+echo "💡 Tip: Your config files will NOT be overwritten during package upgrades."
 echo ""

 exit 0