public_funcs

#!/bin/bash

# the default zstd compress level is 3
export ZSTD_LEVEL=6

get_random_mac ()
{
    # MAC地址第一段可在 02 06 0A 0E 中任选一个
    if [ "$SHELL" == "/bin/bash" ];then
        #MACADDR=$(printf "%02X:%02X:%02X:%02X:%02X:%02X\n" $[RANDOM%255] $[RANDOM%255] $[RANDOM%255] $[RANDOM%255] $[RANDOM%255] $[RANDOM%255])
        MACADDR=$(printf "06:%02X:%02X:%02X:%02X:%02X\n" $[RANDOM%255] $[RANDOM%255] $[RANDOM%255] $[RANDOM%255] $[RANDOM%255])
    else
        uuid=$(cat /proc/sys/kernel/random/uuid)
        mac1="0E"
        #mac1=${uuid:24:2}
        mac2=${uuid:26:2}
        mac3=${uuid:28:2}
        mac4=${uuid:30:2}
        mac5=${uuid:32:2}
        mac6=${uuid:34:2}
        MACADDR=$(echo "$mac1:$mac2:$mac3:$mac4:$mac5:$mac6" | tr '[a-z]' '[A-Z]')
    fi
}

function check_file() {
    if [ ! -f "$1" ];then
        echo "文件: [$1] 不存在!"
        if [ "$2" == "" ];then
            exit 1
        else
            sleep $2
        fi
    fi
}

function check_dir() {
    if [ ! -d "$1" ];then
        echo "目录: [$1] 不存在!"
        if [ "$2" == "" ];then
            exit 1
        else
            sleep $2
        fi
    fi
}

function check_block_dev() {
    if [ ! -b "$1" ];then
        echo "块设备: [$1] 不存在!"
        if [ "$2" == "" ];then
            exit 1
        else
            sleep $2
        fi
    fi
}

# 此函数原有的用途是检查内核版本是否 >= 5.10, 现改为检查内核的 text_offset 是否为 0x01080000
# text offset: 
#   0x01080000  适用晶晨盒子厂商 bootloader 以及 主线 bootloader, 已过时
#   0x00000000  适用主线 bootloader, 但不适用晶晨厂商 bootloader
function get_k510_from_vmlinuz() {
    local vmlinuz=$1
    local temp_script=$(mktemp) 
    cat > $temp_script <<EOF
use strict;
my \$filename = \$ARGV[0];
open my \$fh, '<', \$filename or die;
binmode \$fh;
seek \$fh, 0x8, 0;
my \$buf = "";
read \$fh, \$buf, 0x4;
close(\$fh);
my \$str = unpack 'H*', \$buf; 
print "\$str\n";
EOF
    local result=1
    local text_offset=$(perl "$temp_script" "$vmlinuz")
    [ "$text_offset" == "00000801" ] && result=0
    rm -f $temp_script
    echo "$result"
}

function get_k510_from_boot_tgz() {
    local boot_tgz=$1
    local vmlinuz=$2
    local temp_dir=$(mktemp -d)
    ( 
      cd $temp_dir
      tar xzf "$boot_tgz" "$vmlinuz"
    )
    local result=$(get_k510_from_vmlinuz "${temp_dir}/${vmlinuz}")
    rm -rf $temp_dir
    echo "$result"
}

function check_depends() {
    if [ $(id -u) -ne 0 ];then
        echo "这个脚本需要用root用户来执行，你好象不是root吧？"
        exit 1
    fi

    if mkfs.btrfs -V >/dev/null;then
        echo "check mkfs.btrfs ok"
    else
        echo "mkfs.btrfs 程序不存在，请安装 btrfs-progs"
        exit 1
    fi

    if mkfs.vfat --help 1>/dev/nul 2>&1;then
        echo "check mkfs.vfat ok"
    else
        echo "mkfs.vfat 程序不存在，请安装 dosfstools"
        exit 1
    fi

    if gawk --version >/dev/null;then
        echo "check gawk ok"
    else
        echo "gawk 程序不存在，请安装 gawk"
        exit 1
    fi

    if uuidgen>/dev/null;then
        echo "check uuidgen ok"
    else
        echo "uuidgen 程序不存在，请安装 uuid-runtime"
        exit 1
    fi

    if losetup -V >/dev/null;then
        echo "check losetup ok"
    else
        echo "losetup 程序不存在，请安装 mount"
        exit 1
    fi

    lsblk_version=$(lsblk --version|awk '{print $NF}' 2>/dev/null)
    if [ "$lsblk_version" != "" ];then
        m_v=$(echo ${lsblk_version} | cut -d '.' -f1)
        s_v=$(echo ${lsblk_version} | cut -d '.' -f2)
        if [ $m_v -gt 2 ] || [ $m_v -eq 2 ] && [ $s_v -ge 33 ];then
            echo "check lsblk ok"
        else
            echo "lsblk 需要版本 2.33 或更高的版本, 当前的版本是 $lsblk_version !"
            exit 1
        fi        
    else
        echo "lsblk 程序不存在，请安装 util-linux"
        exit 1
    fi

    if fdisk --version >/dev/null 2>&1;then
        echo "check fdisk ok"
    else
        echo "fdisk 程序不存在，请安装 fdisk"
        exit 1
    fi

    if parted --version >/dev/null 2>&1;then
        echo "check parted ok"
    else
        echo "parted 程序不存在，请安装 parted"
        exit 1
    fi
    echo
}

function wait_dev() {
    while [ ! -b $1 ];do
        echo "wait for $1 ..."
        sleep 1
    done
    sleep 1
}

function init_work_env() {
    export WORK_DIR="${PWD}/tmp"
    [ -d ${WORK_DIR} ] || mkdir -p ${WORK_DIR}
    echo "The work directory is : [$WORK_DIR]"

    export TEMP_DIR=$(mktemp -p $WORK_DIR)
    rm -rf $TEMP_DIR
    mkdir -p $TEMP_DIR
    echo "The temporary directory is : [$TEMP_DIR]"

    export TGT_BOOT=${TEMP_DIR}/tgt_boot
    export TGT_ROOT=${TEMP_DIR}/tgt_root
    mkdir -p $TGT_BOOT $TGT_ROOT
    echo "The target boot directory is : [$TGT_BOOT]"
    echo "The target rootfs directory is : [$TGT_ROOT]"

    export OUTPUT_DIR="${PWD}/output/"
    [ -d ${OUTPUT_DIR} ] || mkdir -p ${OUTPUT_DIR}
    echo "The output directory is : [$OUTPUT_DIR]"

    losetup -D
    echo 
}

function detach_loopdev() {
    cd ${TEMP_DIR}
    umount -f * 2>/dev/null
    losetup -D
    cd ${WORK_DIR}
    rm -rf ${TEMP_DIR}
}

function create_image() {
    local img_name=$1
    local size_mb=$2
    if [ "$img_name" == "" ];then
        echo "镜像名称为空，请指定一个具体的镜像名称！"
        exit 1
    fi

    if [ "$size_mb" == "" ];then
        echo "镜像大小为空，请指定不小于 1 的整数尺寸！"
        exit 1
    fi
    
    echo "创建空白的目标镜像文件, 大小是 $size_mb MB  ... "
    dd if=/dev/zero of="$img_name" bs=1M count=$size_mb conv=fsync && sync
    if [ $? -ne 0 ];then
        echo "空白镜像创建失败！"
        exit 1
    else
        echo "空白镜像创建成功"
    fi

    echo -n "设置分区循环设备 ... "
    losetup -f -P "$img_name"
    if [ $? -ne 0 ];then
        echo "失败！"
        exit 1
    else
        TGT_DEV=$(losetup | grep "$img_name" | gawk '{print $1}')
        export TGT_DEV
        echo "成功: [$TGT_DEV]"
    fi
    echo
}

# 创建分区(允许在空白磁盘里新建分区，也允许在现有分区表中扩充分区)
# 参数1： 块设备名
# 参数2： 分区表类型： msdos|gpt|auto  auto表示在现有的磁盘中添加新分区
# 参数3+4+5： 分区1跳过MB 分区1大小MB 分区1类型
# 参数6+7+8： 分区2跳过MB 分区2大小MB 分区2类型
# 参数9+10+11： 分区3跳过MB 分区3大小MB 分区3类型
# 参数12+13+14: 分区4跳过MB 分区4大小MB 分区4类型
# ...
function create_partition() {
    local device_name=$1
    check_block_dev $device_name
    shift

    local partition_label=$1
    shift

    local max_pt_cnt
    local cur_pt_cnt=0
    case ${partition_label} in
        msdos) max_pt_cnt=4
               ;;
          gpt) max_pt_cnt=128
               ;;
         auto) local label=$(parted $device_name print 2>/dev/null | gawk '$NF ~ /&msdos$/ || $NF ~ /^gpt$/ || $NF ~ /^unknown$/ {print $NF}')
               case $label in 
                   msdos) partition_label="msdos"
                          max_pt_cnt=4
                          cur_pt_cnt=$(parted $device_name print | gawk '$1 ~ /^[0-9]+$/ {print $1}' | tail -n1)
                          [ "$cur_pt_cnt" == "" ] && cur_pt_cnt=0
                          ;;
                     gpt) partition_label="gpt"
                          max_pt_cnt=128
                          cur_pt_cnt=$(parted $device_name print | gawk '$1 ~ /^[0-9]+$/ {print $1}' | tail -n1)
                          [ "$cur_pt_cnt" == "" ] && cur_pt_cnt=0
                          ;;
                       *) # 自动模式下，如果检测到空白磁盘，将会用msdos格式新建分区表
                          partition_label="msdos"
                          max_pt_cnt=4
                          cur_pt_cnt=0
                          ;;
               esac
               ;;
            *) echo "未指定分区表类型, 必须为 gpt|msdos|auto"
               exit 1
               ;;
    esac

    echo "对磁盘设备 [$device_name] 进行分区 ..."
    if [ $cur_pt_cnt -eq 0 ];then
        echo -n "创建新的分区表 ... "
        parted -s ${device_name} mklabel ${partition_label} 2>/dev/null
        if [ $? -ne 0 ];then
            echo "失败!"
            detach_loopdev
            exit 1
        else
            echo "成功"
        fi
    fi

    local start=0
    if [ $cur_pt_cnt -gt 0 ];then
        start=$(fdisk -l $device_name | tail -n1 | gawk '{ print ($3 + 1) / 512 * 1024 * 1024 }')
    fi
    i=$((cur_pt_cnt + 1))
    while [ $i -le ${max_pt_cnt} ]; do
        local skip_mb=$1
        shift
        local pt_size=$1
        shift
        local pt_type=$1
        shift
        
        if [ "$skip_mb" == "" ] || [ "$pt_size" == "" ] || [ "$pt_type" == "" ];then
            break
        fi            

        start=$(( skip_mb * 1024 * 1024 + start ))

        local end
        if [ "${pt_size}" == "-1" ] || [ "${pt_size}" == "100%" ];then
            echo -n "创建第 [$i] 个分区, 分区大小: 所有剩余空间, 分区类型: [$pt_type] ... "
            parted -s ${device_name} mkpart primary ${pt_type} ${start}b "100%" 2>/dev/null
            if [ $? -ne 0 ];then
                echo "失败!"
                detach_loopdev
                exit 1
            else
                echo "成功"
                break
            fi
        else
            end=$(( pt_size * 1024 * 1024 +  start - 1 ))
            echo -n "创建第 [$i] 个分区, 分区大小: [$pt_size] MB, 分区类型: [$pt_type] ... "
            parted -s ${device_name} mkpart primary ${pt_type} ${start}b ${end}b 2>/dev/null
            if [ $? -ne 0 ];then
                echo "失败!"
                detach_loopdev
                exit 1
            else
                echo "成功"
            fi
        fi

        start=$(( end + 1 ))
        i=$((i + 1))
    done

    echo "[$device_name] 磁盘分区一览:"
    echo "==================================================================="
    fdisk -l $device_name 2>/dev/null
    echo "==================================================================="
    echo
}

# 格式化文件系统
# 参数1:  块设备名
# 参数2:  分区1用途: boot=B rootfs=R other=O
# 参数3： 分区1类型: fat32|ext4|xfs|btrfs|f2fs
# 参数4： 分区1卷标
# 参数5:  分区2用途: boot=B rootfs=R other=O
# 参数6： 分区2类型: fat32|ext4|xfs|btrfs|f2fs
# 参数7： 分区2卷标
# 参数8:  分区3用途: boot=B rootfs=R other=O
# 参数9： 分区3类型: fat32|ext4|xfs|btrfs|f2fs
# 参数10: 分区3卷标
# 参数11: 分区4用途: boot=B rootfs=R other=O
# 参数12: 分区4类型: fat32|ext4|xfs|btrfs|f2fs
# 参数13：分区4卷标
function make_filesystem() {
    local device_name=$1
    check_block_dev $device_name
    shift

    echo "==================================================================="
    echo "在 [$device_name] 上创建文件系统 ... " 
    i=1
    while [ $i -le 4 ]; do
        local fs_use=$1
        shift
        local fs_type=$1
        shift
        local fs_label=$1
        shift
        if [ "$fs_use" == "" ] || [ "$fs_type" == "" ] || [ "$fs_label" == "" ];then
             break
        fi

        local fs_uuid=$(uuidgen)
        case $fs_use in
            B) if [ "$fs_type" == "ext4" ] || [ "$fs_type" == "xfs" ] || [ "$fs_type" == "btrfs" ] || [ "$fs_type" == "f2fs" ];then
                    BOOT_UUID=${fs_uuid}
                    echo "The boot uuid is ${BOOT_UUID}"
                    export BOOT_UUID
               fi
               BOOT_LABEL=${fs_label}
               echo "The boot label is ${BOOT_LABEL}"
               export BOOT_LABEL
               ;;
            R) ROOTFS_UUID=${fs_uuid}
               ROOTFS_LABEL=${fs_label}
               echo "The rootfs uuid is ${ROOTFS_UUID}"
               echo "The rootfs label is ${ROOTFS_LABEL}"
               export ROOTFS_UUID ROOTFS_LABEL
               ;;
            O) ;;
            *) echo "分区用途： [$fs_use] 无法识别！仅支持 B/R/O 三种!"
               detach_loopdev
               exit 1
               ;;
        esac

        echo "格式化 [${device_name}p${i}], 类型为 [$fs_type], 卷标为 [$fs_label] ... "
        wait_dev ${device_name}p${i}
        case $fs_type in 
            fat32) mkfs.vfat -n "${fs_label}" ${device_name}p${i}
                   if [ $? -ne 0 ];then
                        echo "[${device_name}p${i}] 格式化失败！"
                        detach_loopdev
                        exit 1
                   else
                        echo "[${device_name}p${i}] 格式化成功"
                   fi
                   ;;
             ext4) mkfs.ext4 -U ${fs_uuid} -L "${fs_label}" ${device_name}p${i}
                   if [ $? -ne 0 ];then
                        echo "[${device_name}p${i}] 格式化失败！"
                        detach_loopdev
                        exit 1
                   else
                        echo "[${device_name}p${i}] 格式化成功"
                   fi
                   ;;
              xfs) mkfs.xfs -U ${fs_uuid} -L "${fs_label}" ${device_name}p${i}
                   if [ $? -ne 0 ];then
                        echo "[${device_name}p${i}] 格式化失败！"
                        detach_loopdev
                        exit 1
                   else
                        echo "[${device_name}p${i}] 格式化成功"
                   fi
                   ;;
             f2fs) mkfs.f2fs -U ${fs_uuid} -l "${fs_label}" ${device_name}p${i}
                   if [ $? -ne 0 ];then
                        echo "[${device_name}p${i}] 格式化失败！"
                        detach_loopdev
                        exit 1
                   else
                        echo "[${device_name}p${i}] 格式化成功"
                   fi
                   ;;
            btrfs) mkfs.btrfs -U ${fs_uuid} -L "${fs_label}" -m single ${device_name}p${i}
                   if [ $? -ne 0 ];then
                        echo "[${device_name}p${i}] 格式化失败！"
                        detach_loopdev
                        exit 1
                   else
                        echo "[${device_name}p${i}] 格式化成功"
                   fi
                   ;;
                *) echo "文件系统类型 [$fs_type] 不受支持!"
                   detach_loopdev
                   exit 1
                   ;;
        esac

        i=$((i+1))
    done
    echo "[$device_name] 文件系统已创建." 
    echo "==================================================================="
    echo
}

function mount_fs() {
    local device_name=$1
    check_block_dev $device_name

    local mount_point=$2
    check_dir $mount_point

    local fs_type=$3
    if [ -z "$fs_type" ];then
         echo "未指定文件系统类型"
         detach_loopdev
         exit 1
    fi

    local mount_options=$4

    echo -n "挂载 ${device_name} --> ${mount_point} ... "
    if [ "$mount_options" == "" ];then
        mount -t "$fs_type" "$device_name" "$mount_point"
    else
        mount -t "$fs_type" -o "$mount_options" "$device_name" "$mount_point"
    fi
    if [ $? -ne 0 ];then
         echo "失败!"
         detach_loopdev
         exit 1
    else
         echo "成功"
    fi
}

function extract_rootfs_files() {
   echo -n "释放 Openwrt rootfs 压缩包 ... "
   (
       cd ${TGT_ROOT} && \
          tar --exclude="./lib/firmware/*" --exclude="./lib/modules/*" -xzf "$OPWRT_ROOTFS_GZ" && \
          mkdir -p .reserved boot rom overlay proc sys run ./etc/modprobe.d ./etc/modules.d.remove && \
          sync
   )
   if [ $? -ne 0 ];then
        echo "失败！"
        detach_loopdev
        exit 1
   else 
        echo "完成"
   fi
   echo -n "裁减 Rootfs 中用不到的文件 ... "
   (
       cd ${TGT_ROOT}
       rm -rf ./lib/firmware/* ./lib/modules/*
       rm -f ./etc/docker-init ./sbin/firstboot ./sbin/jffs2reset ./sbin/jffs2mark
       # for collectd
       [ -f ./etc/ppp/options-opkg ] && mv ./etc/ppp/options-opkg ./etc/ppp/options
       chmod 755 ./etc/init.d/*
       rm -f ./etc/rc.d/S80nginx 2>/dev/null
       local ps="${PLATFORM}_${SOC}"
       case $ps in 
           amlogic_s905) # s905不支持硬件aes，所以必须删除 ss-rust 程序
                         [ -f ./usr/bin/sslocal ] && rm -f ./usr/bin/sslocal
                         [ -f ./usr/bin/ssserver ] && rm -f ./usr/bin/ssserver
                         ;;
       esac
   )
   echo "完成"

   echo -n "重新链接 kmod 程序 ... "
   (  cd $TGT_ROOT/sbin 
      [ ! -x "kmod" ] && [ -f "${KMOD}" ] && cp "$KMOD" kmod
      if [ -x "kmod" ];then
          rm -f depmod insmod lsmod modinfo modprobe rmmod
          ln -sf kmod depmod
          ln -sf kmod insmod
          ln -sf kmod lsmod
          ln -sf kmod modinfo
          ln -sf kmod modprobe
          ln -sf kmod rmmod
      fi
   )
   echo "完成"

   echo -n "释放 Armbian firmware 压缩包 ... "
   ( cd ${TGT_ROOT} && tar xJf "$FIRMWARE_TXZ" && sync )
   if [ $? -ne 0 ];then
        echo "失败！"
        detach_loopdev
        exit 1
   else 
        echo "完成"
   fi

   if [ -d "${FMW_HOME}" ];then
       echo -n "复制 Added firmware 文件 ... "
       ( cd ${TGT_ROOT} && cp -a ${FMW_HOME}/* lib/firmware/ && sync )
       echo "完成"
   fi

   echo -n "优化 firmware ... "
   (
       cd $TGT_ROOT/lib/firmware
       mv *.hcd brcm/ 2>/dev/null
       [ -f "$REGULATORY_DB" ] && tar xzf "$REGULATORY_DB"
       cd brcm

       # gtking/gtking pro 采用 bcm4356 wifi/bluetooth 模块
       get_random_mac
       # wifi5 module AP6356S
       sed -e "s/macaddr=00:90:4c:1a:10:01/macaddr=${MACADDR}/" "brcmfmac4356-sdio.txt" > "brcmfmac4356-sdio.azw,gtking.txt"
       get_random_mac
       # wifi6 module AP6275S
       sed -e "s/macaddr=00:90:4c:12:d0:01/macaddr=${MACADDR}/" "brcmfmac4375-sdio.txt" > "brcmfmac4375-sdio.azw,gtking.txt"
       # Phicomm N1 采用 bcm43455 wifi/bluetooth 模块
       get_random_mac
       sed -e "s/macaddr=b8:27:eb:74:f2:6c/macaddr=${MACADDR}/" "brcmfmac43455-sdio.txt" > "brcmfmac43455-sdio.phicomm,n1.txt"
       # MXQ Pro+ 采用 AP6330(bcm4330) wifi/bluetooth 模块
       get_random_mac
       sed -e "s/macaddr=00:90:4c:c5:12:38/macaddr=${MACADDR}/" "brcmfmac4330-sdio.txt" > "brcmfmac4330-sdio.crocon,mxq-pro-plus.txt"
       # HK1 Box 和 H96 Max X3 采用 bcm54339 wifi/bluetooth 模块
       get_random_mac
       sed -e "s/macaddr=00:90:4c:c5:12:38/macaddr=${MACADDR}/" "brcmfmac4339-sdio.ZP.txt" > "brcmfmac4339-sdio.amlogic,sm1.txt"
       # 旧版ugoos x3 采用 bcm43455 wifi/bluetooth 模块
       get_random_mac
       sed -e "s/macaddr=b8:27:eb:74:f2:6c/macaddr=${MACADDR}/" "brcmfmac43455-sdio.txt" > "brcmfmac43455-sdio.amlogic,sm1.txt"
       # 新版ugoos x3 采用 brm43456
       get_random_mac
       sed -e "s/macaddr=b8:27:eb:74:f2:6c/macaddr=${MACADDR}/" "brcmfmac43456-sdio.txt" > "brcmfmac43456-sdio.amlogic,sm1.txt"
       # V5.1版 x96max plus 采用 AM7256 (brcm4354)
       get_random_mac
       sed -e "s/macaddr=00:90:4c:00:43:54/macaddr=${MACADDR}/" "brcmfmac4354-sdio.txt" > "brcmfmac4354-sdio.amlogic,sm1.txt"
   )
   echo "完成"

   echo -n "释放 Kernel modules 压缩包 ... "
   ( 
      cd ${TGT_ROOT} && \
          mkdir -p lib/modules && \
          cd lib/modules && \
              tar xzf ${MODULES_TGZ} && \
              cd ${KERNEL_VERSION}/ && \
                  find . -name '*.ko' -exec ln -sf {} . \; && \
                  rm -f "build" "source" "ntfs.ko" && \
          sync
   )
   if [ $? -ne 0 ];then
        echo "失败！"
        detach_loopdev
        exit 1
   else 
        echo "完成"
   fi

   if [ -n "$MODEL_DB" ] && [ -f "$MODEL_DB" ];then
       echo "复制硬件机型数据库 ..."
       cp -v "$MODEL_DB" ${TGT_ROOT}/etc/model_database.txt
       echo "完成"
   fi 
}

function extract_amlogic_boot_files() {
    echo -n "释放 Kernel zImage、uInitrd 及 dtbs 压缩包 ... "
    ( 
        cd ${TGT_BOOT} && \
            cp "${BOOTFILES_HOME}"/* . && \
            tar xzf "${BOOT_TGZ}" && \
            rm -f initrd.img-${KERNEL_VERSION} && \
            cp vmlinuz-${KERNEL_VERSION} zImage && \
            cp uInitrd-${KERNEL_VERSION} uInitrd && \
            cp ${UBOOT_WITHOUT_FIP_HOME}/* . && \
            mkdir -p dtb/amlogic && \
            cd dtb/amlogic && \
            tar xzf "${DTBS_TGZ}" && \
            sync
    )
    if [ $? -ne 0 ];then
         echo "失败！"
         detach_loopdev
         exit 1
    fi
    ( 
        cd ${TGT_BOOT}
        # 5.4内核不再需要u-boot.sd 以及 u-boot.usb
        rm -f u-boot.usb u-boot.sd
        # 5.10以后的内核，需要增加u-boot重载
        # 5.4内核可加可不加
        if [ $K510 -eq 1 ];then
            check_file ${UBOOT_WITHOUT_FIP}
            cp -f ${UBOOT_WITHOUT_FIP} u-boot.ext
            if [ $? -ne 0 ];then
                echo "失败！"
                detach_loopdev
                exit 1
            fi
        fi
    ) 
    echo "完成"
}

function extract_rockchip_boot_files() {
    echo -n "释放 Kernel zImage、uInitrd 及 dtbs 压缩包 ... "
    ( 
          cd ${TGT_BOOT} && \
              cp "${BOOTFILES_HOME}"/* . && \
              tar xzf "${BOOT_TGZ}" && \
              rm -f initrd.img-${KERNEL_VERSION} && \
              ln -sf vmlinuz-${KERNEL_VERSION} Image && \
              ln -sf uInitrd-${KERNEL_VERSION} uInitrd && \
              mkdir -p dtb-${KERNEL_VERSION}/rockchip && \
              ln -sf dtb-${KERNEL_VERSION} dtb && \
              cd dtb/rockchip && \
              tar xzf "${DTBS_TGZ}" && \
              sync
    )
    if [ $? -ne 0 ];then
        echo "失败！"
        detach_loopdev
        exit 1
    else 
        echo "完成"
    fi
}

function extract_allwinner_boot_files() {
    echo -n "释放 Kernel zImage、uInitrd 及 dtbs 压缩包 ... "
    ( 
        cd ${TGT_BOOT} && \
            cp "${BOOTFILES_HOME}"/* . && \
            tar xzf "${BOOT_TGZ}" && \
            rm -f initrd.img-${KERNEL_VERSION} && \
            cp vmlinuz-${KERNEL_VERSION} zImage && \
            cp uInitrd-${KERNEL_VERSION} uInitrd && \
            mkdir -p dtb/allwinner && \
            cd dtb/allwinner && \
            tar xzf "${DTBS_TGZ}" && \
            sync
    )
    if [ $? -ne 0 ];then
        echo "失败！"
        detach_loopdev
        exit 1
    else 
        echo "完成"
    fi
}

# 生成 openwrt 所需的 fstab 文件
function create_fstab_config() {
    echo "创建 fstab 配置文件 ... "
    (
        cd $TGT_ROOT
        if [ ! -z "${BOOT_UUID}" ];then
            cat > ./etc/fstab <<EOF
UUID=${ROOTFS_UUID} / btrfs compress=zstd:${ZSTD_LEVEL} 0 1
UUID=${BOOT_UUID} /boot ext4 noatime,errors=remount-ro 0 2
#tmpfs /tmp tmpfs defaults,nosuid 0 0
EOF
        else 
            cat > ./etc/fstab <<EOF
UUID=${ROOTFS_UUID} / btrfs compress=zstd:${ZSTD_LEVEL} 0 1
LABEL=${BOOT_LABEL} /boot vfat defaults 0 2
#tmpfs /tmp tmpfs defaults,nosuid 0 0
EOF
        fi

        cat > ./etc/config/fstab <<EOF
config global
        option anon_swap '0'
        option auto_swap '0'
        option anon_mount '1'
        option auto_mount '1'
        option delay_root '5'
        option check_fs '0'

config mount
        option target '/overlay'
        option enabled '1'
        option enabled_fsck '1'
        option uuid '${ROOTFS_UUID}'
        option fstype 'btrfs'
        option options 'compress=zstd:${ZSTD_LEVEL}'

config mount
        option target '/boot'
        option enabled '1'
        option enabled_fsck '1'
EOF
        if [ ! -z "${BOOT_UUID}" ];then
            cat >> ./etc/config/fstab <<EOF
        option uuid '${BOOT_UUID}'
        option fstype 'ext4'

EOF
        else
            cat >> ./etc/config/fstab <<EOF
        option label '${BOOT_LABEL}'
        option fstype 'vfat'

EOF
        fi
    )
    echo "当前 fstab 内容如下："
    echo "==============================================="
    cat $TGT_ROOT/etc/config/fstab
    echo "==============================================="
    echo
}

# 调整ntfs相关配置
function adjust_ntfs_config() {
    echo -n "调整 ntfs 配置 ... "
    ( 
        cd $TGT_ROOT/sbin
        if ls ../usr/lib/opkg/info/ntfs3* >/dev/null 2>&1;then
            rm -f mount.ntfs* 
            cat > mount.ntfs <<EOF
#!/bin/sh

function check_k515() {
    # 判断内核版本是否 >= 5.15
    K_VER=\$(uname -r | cut -d '.' -f1)
    K_MAJ=\$(uname -r | cut -d '.' -f2)

    if [ \$K_VER -eq 5 ];then
        if [ \$K_MAJ -ge 15 ];then
            K515=1
        else
            K515=0
        fi
    elif [ \$K_VER -gt 5 ];then
        K515=1
    else
        K515=0
    fi
    export K515
}

check_k515
if [ \$K515 -eq 1 ];then
    mount -t ntfs3 -o iocharset=utf8,force "\$@"
else
    mount -t ntfs3 -o nls=utf8,force "\$@"
fi

EOF
            chmod 755 mount.ntfs
            echo "发现 ntfs3, 调整完成"
        elif ls ../usr/lib/opkg/info/ntfs-3g* >/dev/null 2>&1;then
            ln -sf /usr/bin/ntfs-3g mount.ntfs
            echo "发现 ntfs-3g, 调整完成"
        else
            echo "完成"
        fi
    )
}

# 调整 turboacc 相关配置
function adjust_turboacc_config() {
    echo -n "调整 turboacc 配置 ... "
    ( 
        cd $TGT_ROOT
        if [ -f ./etc/config/turboacc ];then
            sed -e "s/option sw_flow '1'/option sw_flow '${SW_FLOWOFFLOAD}'/" -i ./etc/config/turboacc
            sed -e "s/option hw_flow '1'/option hw_flow '${HW_FLOWOFFLOAD}'/" -i ./etc/config/turboacc
            sed -e "s/option sfe_flow '1'/option sfe_flow '${SFE_FLOW}'/" -i ./etc/config/turboacc
        else
            cat > ./etc/config/turboacc <<EOF

config turboacc 'config'
        option sw_flow '${SW_FLOWOFFLOAD}'
        option hw_flow '${HW_FLOWOFFLOAD}'
        option sfe_flow '${SFE_FLOW}'
        option bbr_cca '0'
        option fullcone_nat '1'
        option dns_caching '0'

EOF
        fi
    )
    echo "完成"
}

# CPU状态补丁
function patch_admin_status_index_html() {
    echo "打补丁：[状态页面相关信息补丁] ... "
    (  
        cd $TGT_ROOT
        if [ ! -f usr/bin/perl ];then
             echo "未发现 perl 实用程序, 放弃补丁!"
        else 
            if [ -f "$CPUSTAT_PATCH" ];then 
                 patch -p1 < ${CPUSTAT_PATCH} 
                 if [ $? -ne 0 ];then
                     echo "补丁失败!"
                 else
                     if [ -f "${CPUSTAT_PATCH_02}" ] ;then
                         patch -p1 < ${CPUSTAT_PATCH_02}
                         if [ $? -ne 0 ];then
                            echo "补丁失败!"
                         fi
                     fi
                 fi
            fi
            echo "完成"
        fi
        echo
    )
}

# 写入 release 信息
function write_release_info() {
    echo "写入 release 信息 ... "
    (
        cd $TGT_ROOT

        # 写入版本信息
        cat > ./etc/flippy-openwrt-release <<EOF
PLATFORM=${PLATFORM}
SOC=${SOC}
BOARD=${BOARD}
KERNEL_VERSION=${KERNEL_VERSION}
K510=${K510}
EOF

        if [ -f "./etc/uci-defaults/99-default-settings" ] && [ -n "${DISTRIB_REVISION}" ] && [ -n "${DISTRIB_DESCRIPTION}" ];then
            sed -e "/exit 0/d" -i ./etc/uci-defaults/99-default-settings
	    cat >> ./etc/uci-defaults/99-default-settings <<EOF
sed -i '/DISTRIB_REVISION/d' /etc/openwrt_release
echo "DISTRIB_REVISION='${DISTRIB_REVISION}'" >> /etc/openwrt_release
sed -i '/DISTRIB_DESCRIPTION/d' /etc/openwrt_release
echo "DISTRIB_DESCRIPTION='${DISTRIB_DESCRIPTION} '" >> /etc/openwrt_release

exit 0
EOF
        fi

        if [ "$PLATFORM" == "amlogic" ] && [ -n "$UBOOT_WITHOUT_FIP" ];then
            cat >> ./etc/flippy-openwrt-release <<EOF
UBOOT_OVERLOAD=${UBOOT_WITHOUT_FIP}
EOF
        fi
    )
    cat $TGT_ROOT/etc/flippy-openwrt-release
    echo 
}

# 写入 banner 信息
function write_banner() {
    echo "写入 banner 信息 ... "
    (
        cd $TGT_ROOT
        if [ -f $BANNER ];then
            cp -f $BANNER ./etc/banner
            echo " Base on OpenWrt ${OPENWRT_VER} by lean & lienol" >> etc/banner
            echo " Kernel ${KERNEL_VERSION}" >> etc/banner
            TODAY=$(date +%Y-%m-%d)
            echo " Packaged by ${WHOAMI} on ${TODAY}" >> etc/banner
            echo " PLATFORM: ${PLATFORM}  SOC: ${SOC}  BOARD: ${BOARD}" >> etc/banner
            echo >> etc/banner
        fi
    )
    cat $TGT_ROOT/etc/banner
    echo 
}

# 复制增补文件
function copy_supplement_files() {
    echo "复制增补的文件 ... "
    echo "==============================================================================="
    (
        cd $TGT_ROOT
        [ -n "$DAEMON_JSON" ] && [ -f $DAEMON_JSON ] && mkdir -p "etc/docker" && cp -v $DAEMON_JSON "./etc/docker/daemon.json"
        [ -n "$COREMARK" ] && [ -f $COREMARK ] && [ -f "etc/coremark.sh" ] && \
              cp -fv $COREMARK "./etc/coremark.sh" && chmod 755 "etc/coremark.sh" && \
              rm -f ./etc/bench.log && \
              echo "17 3 * * * /etc/coremark.sh" >> ./etc/crontabs/root

        #[ -n "$TTYD" ] && [ -f $TTYD ] && cp -v $TTYD etc/init.d/

        [ -n "$FLIPPY" ] && [ -f $FLIPPY ] && cp -v $FLIPPY ./usr/sbin/
        [ -n "$OPENWRT_INSTALL" ] && [ -f ${OPENWRT_INSTALL} ] && cp -v ${OPENWRT_INSTALL} ./usr/sbin/ && \
              (cd root && ln -s ../usr/sbin/openwrt-install-amlogic ./install-to-emmc.sh)
        [ -n "$OPENWRT_KERNEL" ] && [ -f ${OPENWRT_KERNEL} ] && cp -v ${OPENWRT_KERNEL} ./usr/sbin/
        [ -n "$OPENWRT_BACKUP" ] && [ -f ${OPENWRT_BACKUP} ] && cp -v ${OPENWRT_BACKUP} ./usr/sbin/ && (cd usr/sbin && ln -sfv openwrt-backup flippy)
        [ -n "$OPENWRT_UPDATE" ] && [ -f ${OPENWRT_UPDATE} ] && cp -v ${OPENWRT_UPDATE} ./usr/sbin/
	[ -n "${DDBR}" ] && [ -f "${DDBR}" ] && cp -v ${DDBR} ./usr/sbin/

        # 我家云, 风扇调速脚本
        if [ "$PLATFORM" == "rockchip" ] && [ "$SOC" == "rk3328" ] && [ "$BOARD" == "l1pro" ] && [ -f "$PWM_FAN" ];then
            cp -v $PWM_FAN ./usr/bin
            echo "pwm_fan" > ./etc/modules.d/pwm_fan
            sed -e "/exit/i\/usr/bin/pwm-fan.pl &" -i etc/rc.local
        fi

        [ -n "$BAL_ETH_IRQ" ] && [ -f $BAL_ETH_IRQ ] && cp -v $BAL_ETH_IRQ ./usr/sbin && chmod 755 ./usr/sbin/balethirq.pl && \
              sed -e "/exit/i\/usr/sbin/balethirq.pl" -i etc/rc.local

        [ -n "$BAL_CONFIG" ] && [ -f $BAL_CONFIG ] && cp -v $BAL_CONFIG etc/
        [ -f "./etc/init.d/cpufreq" ] && [ -n "$CPUFREQ_INIT" ] && [ -f $CPUFREQ_INIT ] && cp -v $CPUFREQ_INIT etc/init.d/ && chmod 755 etc/init.d/cpufreq
        [ -n "$WIRELESS_CONFIG" ] && [ -f $WIRELESS_CONFIG ] && cp -v $WIRELESS_CONFIG etc/config/
        [ -n "$FIX_CPU_FREQ" ] && [ -f $FIX_CPU_FREQ ] && cp -v $FIX_CPU_FREQ ./usr/sbin && chmod 755 ./usr/sbin/fixcpufreq.pl
        [ -n "$SYSFIXTIME_PATCH" ] && [ -f $SYSFIXTIME_PATCH ] && patch -p1 < $SYSFIXTIME_PATCH
        [ -n "$FORCE_REBOOT" ] && [ -f $FORCE_REBOOT ] && cp -v $FORCE_REBOOT usr/sbin/ 

        [ -n "$GET_RANDOM_MAC" ] && [ -f ${GET_RANDOM_MAC} ] && cp -v ${GET_RANDOM_MAC} ./usr/bin/
        [ -n "$MAC_SCRIPT1" ] && [ -f $MAC_SCRIPT1 ] && cp -v $MAC_SCRIPT1 ./usr/bin/
        [ -n "$MAC_SCRIPT2" ] && [ -f $MAC_SCRIPT2 ] && cp -v $MAC_SCRIPT2 ./usr/bin/
        [ -n "$MAC_SCRIPT3" ] && [ -f $MAC_SCRIPT3 ] && cp -v $MAC_SCRIPT3 ./usr/bin/

        [ -n "$CPUSTAT_SCRIPT" ] && [ -f $CPUSTAT_SCRIPT ] && cp -v $CPUSTAT_SCRIPT ./usr/bin/cpustat && chmod 755 ./usr/bin/cpustat  
        [ -n "$GETCPU_SCRIPT" ] && [ -f $GETCPU_SCRIPT ] && cp -v $GETCPU_SCRIPT ./bin/
        [ -n "$SYSINFO_SCRIPT" ] && [ -x ./bin/bash ] && [ -f "${SYSINFO_SCRIPT}" ] && cp -v "${SYSINFO_SCRIPT}" ./etc/profile.d/ && \
             sed -e "s/\/bin\/ash/\/bin\/bash/" -i ./etc/passwd && sed -e "s/\/bin\/ash/\/bin\/bash/" -i ./usr/libexec/login.sh

        [ -f ./etc/sysupgrade.conf ] && \
             cat >> ./etc/sysupgrade.conf <<EOF
/root/.ssh/
EOF

        if [ -n "${P7ZIP}" ] && [ -f "$P7ZIP" ];then
             rm -rf ./usr/lib/opkg/info/p7zip* ./usr/lib/p7zip ./usr/bin/7z
	     cp -v "${P7ZIP}" ./usr/bin/7z && chmod 755 ./usr/bin/7z
        fi
    )
    echo "==============================================================================="
    echo "完成"
    echo
}

function extract_glibc_programs() {
    echo -n "释放基于 glibc 的增补程序包 ... "
    (
        cd $TGT_ROOT
        if [ -f "$SS_LIB" ];then
            ( cd ./lib && tar xJf "$SS_LIB" )
            ( [ -n "$JQ" ] && [ -f "$JQ" ] && [ ! -f "./usr/bin/jq" ] && cp ${JQ} ./usr/bin/jq )
            [ -n "$SS_BIN" ] && [ -f "$SS_BIN" ] && \
                 (   cd ./usr/bin 
                     mkdir -p ss-bin-musl && mv -f ss-server ss-redir ss-local ss-tunnel ss-bin-musl/ 2>/dev/null
                     tar xJf "$SS_BIN"
                 )
        fi
    )
    echo "完成"
    echo
}

# 调整 openssh 配置
function adjust_openssh_config() {
    echo "调整 openssh 配置 ..."
    echo "==============================================================================="
    (
        cd $TGT_ROOT
        sed -e 's/root::/root:$1$NA6OM0Li$99nh752vw4oe7A.gkm2xk1:/' -i ./etc/shadow
        if [ -f "./etc/ssh/sshd_config" ];then
            echo -n "配置 sshd_config, 允许 root 用户登录 ... "
            sed -e "s/#PermitRootLogin prohibit-password/PermitRootLogin yes/" -i ./etc/ssh/sshd_config 2>/dev/null
            sed -e "s/#PermitRootLogin no/PermitRootLogin yes/" -i ./etc/ssh/sshd_config 2>/dev/null
	    echo "完成 "
	    if [ "$SSH_CIPHERS" != "" ];then
                echo -n "优化 ssh client ciphers ... "
		echo "Host *" >> ./etc/ssh/ssh_config
		echo "    Ciphers $SSH_CIPHERS" >> ./etc/ssh/ssh_config
		echo "完成"
	    fi
	    if [ "$SSHD_CIPHERS" != "" ];then
                echo -n "优化 ssh server ciphers ... "
                sed -e "/# Ciphers and keying/a\Ciphers $SSHD_CIPHERS" -i ./etc/ssh/sshd_config 2>/dev/null
		echo "完成"
	    fi
	    echo "#HostkeyAlgorithms +ssh-rsa" >> ./etc/ssh/sshd_config
	    echo "#PubkeyAcceptedAlgorithms +ssh-rsa" >> ./etc/ssh/sshd_config
	    echo -n "配置 shadow, 刷新密码更新日期 ... "
            utc_secs=$(date +%s)
            days=$(( utc_secs / 86400 ))
            sed -e "s/:0:0:99999:7:::/:${days}:0:99999:7:::/" -i ./etc/shadow
	    echo "完成"
            echo -n "检查sshd用户和组 ... "
	    if ! grep "sshd:x:22:sshd" ./etc/group >/dev/null;then
                 echo "sshd_x:22:sshd" >> ./etc/group
            fi
	    if ! grep "sshd:x:22:22:sshd:" ./etc/passwd >/dev/null;then
                 echo "sshd:x:22:22:sshd:/var/run/sshd:/bin/false" >> ./etc/passwd
            fi
	    if ! grep "sshd:x:" ./etc/shadow >/dev/null;then
                 echo "sshd:x:0:0:99999:7:::" >> ./etc/shadow
            fi
	    echo "完成"
	    
	    echo -n "添加防火墙规则，丢弃目标为 WAN 区域, 端口为 22/TCP 的报文 ... "
	    cat >> ./etc/config/firewall <<EOF

config rule
        option name 'drop-wan-ssh'
        option src '*'
        option dest 'wan'
        option dest_port '22'
        option proto 'tcp'
        option target 'DROP'

EOF
            echo "完成"
        else
            echo "未发现 openssh 配置文件， 放弃调整"
        fi
    )
    echo "==============================================================================="
    echo
}

# 调整 samba server 配置
function adjust_samba_config() {
    echo "调整 samba server 配置 ..."
    (
         # for cifsd
         if [ -f ./etc/init.d/cifsd ];then
             echo -n "发现 cifsd, 禁用 samba4. "        
             rm -f ./etc/rc.d/S98samba4
         fi
          # for smbd
         if [ -f ./etc/init.d/smbd ];then
             echo -n "发现 smbd, 禁用 samba4. "        
             rm -f ./etc/rc.d/S98samba4
         fi                
         # for ksmbd
         if [ -f ./etc/init.d/ksmbd ];then
             echo -n "发现 ksmbd, 禁用 samba4. "        
             rm -f ./etc/rc.d/S98samba4
             sed -e 's/modprobe ksmbd/sleep 1 \&\& modprobe ksmbd/' -i ./etc/init.d/ksmbd
         fi
         # for samba4 enable smbv1 protocol
         if [ -f ./etc/config/samba4 ];then
             echo "发现 samba4, 将启用 smbv1 协议. "        
             sed -e 's/services/nas/g' -i ./usr/lib/lua/luci/controller/samba4.lua
	     sed -e 's/services/nas/g' -i ./usr/share/luci/menu.d/luci-app-samba4.json

             [ -f ${SMB4_PATCH} ] && patch -p1 < ${SMB4_PATCH}
         fi
    )
    echo "完成"
    echo
}

# 调整 nfs server 配置
function adjust_nfs_config() {
    local mount_point=$1
    [ -z "$mount_point" ] && return
    echo "调整 nfs server 配置 ... "
    (
        # for nfs server
        if [ -f ./etc/init.d/nfsd ];then
            echo -n "已发现 nfsd 服务, 将调整其初始配置文件 ... "
            cat > ./etc/exports <<EOF
# /etc/exports: the access control list for filesystems which may be exported
#               to NFS clients.  See exports(5).
#
# Example for NFSv2 and NFSv3:
# /srv/homes       hostname1(rw,sync,no_subtree_check) hostname2(ro,sync,no_subtree_check)
#
# Example for NFSv4:
# /srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)
# /srv/nfs4/homes  gss/krb5i(rw,sync,no_subtree_check)
#

/mnt *(ro,fsid=0,sync,nohide,no_subtree_check,insecure,no_root_squash)
/mnt/${mount_point} *(rw,fsid=1,sync,no_subtree_check,no_root_squash)
EOF
             cat > ./etc/config/nfs <<EOF
config share
        option clients '*'
        option enabled '1'
        option path '/mnt'
        option options 'ro,fsid=0,sync,nohide,no_subtree_check,insecure,no_root_squash'

config share
        option enabled '1'
        option path '/mnt/${mount_point}'
        option clients '*'
        option options 'rw,fsid=1,sync,no_subtree_check,no_root_squash'
EOF
        fi

    )
    echo "完成, 初始 nfs 配置文件为："
    echo "==============================================================================="
    cat $TGT_ROOT/etc/config/nfs
    echo "==============================================================================="
    echo
}

# 调整 openclash 配置
function adjust_openclash_config() {
    echo -n "调整 openclash 配置 ... "
    (
        cd $TGT_ROOT
        if [ -d ./etc/openclash/core ];then
            mkdir -p ./usr/share/openclash/core && \
            cd ./etc/openclash && \
            mv core ../../usr/share/openclash/ && \
            ln -s ../../usr/share/openclash/core .
            echo "完成"
        else
            echo "未发现 openclash, 放弃调整"
        fi
    )
}

# 调整 getty 配置
function adjust_getty_config() {
    echo -n "调整 getty 配置 ..."
    (
        cd $TGT_ROOT
        case $PLATFORM in
            allwinner)   cat > ./etc/inittab <<EOF
::sysinit:/etc/init.d/rcS S boot
::shutdown:/etc/init.d/rcS K shutdown
ttyS0::askfirst:/usr/libexec/login.sh
EOF
                         echo "完成"
                         ;;
             rockchip)   cat > ./etc/inittab <<EOF
::sysinit:/etc/init.d/rcS S boot
::shutdown:/etc/init.d/rcS K shutdown
tty1::askfirst:/usr/libexec/login.sh
ttyS2::askfirst:/usr/libexec/login.sh
EOF
                         echo "完成"
                         ;;
             amlogic)    cat > ./etc/inittab <<EOF
::sysinit:/etc/init.d/rcS S boot
::shutdown:/etc/init.d/rcS K shutdown
ttyAML0::askfirst:/usr/libexec/login.sh
tty0::askfirst:/usr/libexec/login.sh
EOF
                         echo "完成"
                         ;;
                   *)    echo "Platform: ${PLATFORM} 不受支持！放弃调整"
                         ;;
        esac
    )
}

# qbittorrent 配置调整
function adjust_qbittorrent_config() {
    echo -n "调整 qbittorrent 配置 ... "
    (
        cd $TGT_ROOT
        if [ -f "./etc/config/qbittorrent" ];then
            sed -e 's/\/opt/\/etc/' -i ./etc/config/qbittorrent
            echo "完成"
        else
            echo "未发现 qbittorrent 配置文件, 放弃调整"
        fi
    )
}

# openssl 配置调整
function adjust_openssl_config() {
    echo "调整 openssl 配置 ... "
    (
        cd $TGT_ROOT
        #if [ -f $SSL_CNF_PATCH ];then
             #if patch -p1 < $SSL_CNF_PATCH;then
                 #echo "完成"
             #else
                 #echo "失败！请检查 $SSL_CNF_PATCH "
             #fi 
        #else
            #echo "未发现 openssl 配置文件，放弃调整"
        #fi

	# devcrypto engine 会导致 openssh 无法工作，禁用 (建议编译时不要选择此engine)
	if [ -f "./etc/ssl/engines.cnf.d/devcrypto.cnf" ];then
             echo -n "禁用 devcrypto 引擎 ... "
	     rm -f ./etc/ssl/engines.cnf.d/devcrypto.cnf
	     # 清空 etc/config/openssl
	     > ./etc/config/openssl
             echo "完成"
        fi

	# 如果发现 afalg engine
	if [ -f "./usr/lib/engines-1.1/afalg.so" ] && [ -d "./etc/ssl/engines.cnf.d" ];then
             echo -n "添加 afalg 引擎 ... "
             grep "engine 'afalg'" "./etc/config/openssl" || cat >> ./etc/config/openssl <<EOF

config engine 'afalg'
        option enabled '1'

EOF
             [ -f "./etc/ssl/engines.cnf.d/afalg.cnf" ] || cat > ./etc/ssl/engines.cnf.d/afalg.cnf <<EOF
[afalg]
# Leave this alone and configure algorithms with CIPERS/DIGESTS below
default_algorithms = ALL

# The following commands are only available if using the alternative
# (sync) AFALG engine
# Configuration commands:
# Run 'openssl engine -t -c -vv -pre DUMP_INFO devcrypto' to see a
# list of supported algorithms, along with their driver, whether they
# are hw accelerated or not, and the engine's configuration commands.

# USE_SOFTDRIVERS: specifies whether to use software (not accelerated)
# drivers (0=use only accelerated drivers, 1=allow all drivers, 2=use
# if acceleration can't be determined) [default=2]
#USE_SOFTDRIVERS = 2

# CIPHERS: either ALL, NONE, NO_ECB (all except ECB-mode) or a
# comma-separated list of ciphers to enable [default=NO_ECB]
# Starting in 1.2.0, if you use a cipher list, each cipher may be
# followed by a colon (:) and the minimum request length to use
# AF_ALG drivers for that cipher; smaller requests are processed by
# softare; a negative value will use the default for that cipher
#CIPHERS=AES-128-CBC:1024, AES-256-CBC:768, DES-EDE3-CBC:0

# DIGESTS: either ALL, NONE, or a comma-separated list of digests to
# enable [default=NONE]
# It is strongly recommended not to enable digests; their performance
# is poor, and there are many cases in which they will not work,
# especially when calling fork with open crypto contexts.  Openssh,
# for example, does this, and you may not be able to login.
#DIGESTS = NONE
EOF
             echo "完成"
        fi
    )
    echo "调整完成"
    echo
}

# docker 配置调整
function adjust_docker_config() {
    echo "调整 docker server 配置 ... "
    (
        cd $TGT_ROOT
        [ -n "$DOCKER_README" ] && [ -f ./www/DockerReadme.pdf ] && [ -f ${DOCKER_README} ] && cp -fv ${DOCKER_README} ./www/DockerReadme.pdf
        if [ -f ./etc/init.d/dockerd ];then
            echo "发现 dockerd 服务，正在调整 ... "
            [ -n "$DOCKERD_PATCH" ] && [ -f "$DOCKERD_PATCH" ] && [ ! -f ./etc/init.d/dockerman ] && patch -p1 < $DOCKERD_PATCH

            if [ -f "./etc/init.d/dockerman" ] ;then
                cat >> ./etc/config/dockerd <<EOF

config globals 'globals'
        option alt_config_file '/etc/docker/daemon.json' 
	option auto_start '1'
EOF
                sed -e '/uci -q set dockerd.globals.auto_start="0"/d' -i ./etc/uci-defaults/luci-app-dockerman 
            fi

	    # 由first_run.sh负责重新开启dockerd服务
            echo "默认关闭 dockerd 服务 ... "
            rm -f ./etc/rc.d/S??dockerd ./etc/rc.d/S??dockerman
            echo "完成"
        else
            echo "未发现 dockerd 服务，放弃调整"
        fi
    )
    echo
}

# mosdns 配置调整
function adjust_mosdns_config() {
    (
    	if [ -f ./etc/config/mosdns ];then
            echo -n "发现mosdns配置，正在调整 ... "
	    sed -e "s/option enabled '1'/option enabled '0'/" -i ./etc/config/mosdns
	    sed -e "s/option redirect '1'/option redirect '0'/" -i ./etc/config/mosdns
	    sed -e "s/option autoconf '1'/option autoconf '0'/" -i ./etc/config/mosdns
	    echo "完成"
        fi
    )
}

# 用 xray 代替 v2ray (如果v2ray不存在)
function use_xrayplug_replace_v2rayplug() {
    (
        cd $TGT_ROOT
        if [ -f usr/bin/xray ] && [ ! -f usr/bin/v2ray ];then
            echo -n "用 xray 代替 v2ray ... "
            cd usr/bin && rm -f v2ray && ln -s xray v2ray
            echo "完成"
        fi

        cd $TGT_ROOT
        if [ -f usr/bin/xray-plugin ] && [ ! -f usr/bin/v2ray-plugin ];then
            echo -n "用 xray-plugin 代替 v2ray-plugin ... "
            cd usr/bin && rm -f v2ray-plugin && ln -s xray-plugin v2ray-plugin
            echo "完成"
        fi
    )
}

# 配置 first run 程序
function config_first_run() {
    echo "创建 [初次使用] 应用环境 ... "
    (
         cd $TGT_ROOT
         # First run, 第一次启动时自动创建新分区及格式化
         if [ -n "$FIRSTRUN_SCRIPT" ] && [ -f "$FIRSTRUN_SCRIPT" ];then
              cp -v "$FIRSTRUN_SCRIPT" ./etc/first_run.sh && \
                  sed -e "s/MYSELF=\$0/MYSELF=\"\/etc\/first_run.sh\"/" -i ./etc/first_run.sh && \
                  chmod 755 ./etc/first_run.sh
              cp -v "./etc/rc.local" "./etc/rc.local.orig"
              echo -e "${SKIP_MB}\t${BOOT_MB}\t${ROOTFS_MB}" > ./etc/part_size
              sed -e "/exit/i\/etc/first_run.sh >/root/first_run.log 2>&1" -i etc/rc.local
              echo "完成"
          else
              echo "未发现相关依赖，跳过配置"
          fi

    )
    echo
}

# 调整 内核 环境
function adjust_kernel_env() {
    echo "调整内核、硬件驱动等相关环境 ..."
    echo "==============================================================================="
    (
        cd $TGT_ROOT
        local ps="${PLATFORM}_${SOC}"
        if [ -f etc/config/cpufreq ];then
            echo "设置 schedutil 为默认调度器"
            sed -e "s/ondemand/schedutil/" -i etc/config/cpufreq
        fi

        if [ -n "$SYSCTL_CUSTOM_CONF" ] && [ -f ${SYSCTL_CUSTOM_CONF} ];then
            echo "启用自定义的内核优化参数 ... "
            cp -v ${SYSCTL_CUSTOM_CONF} ./etc/sysctl.d/
        fi

        if [ -n "${KMOD_BLACKLIST}" ] && [ -f "${KMOD_BLACKLIST}" ];then
            echo -n "禁用黑名单中的内核模块 ... "
            [ -d ./etc/modules.d.remove ] || mkdir -p ./etc/modules.d.remove
            local mod_blacklist=$(cat ${KMOD_BLACKLIST})
            for mod in $mod_blacklist ;do
                 mv -f ./etc/modules.d/${mod} ./etc/modules.d.remove/ 2>/dev/null
            done
            echo "完成"
        fi    

        case $ps in 
            allwinner_h6|rockchip_rk3328) 
                echo -n "当前机型并未内置 broadcom 无线模块, 禁用 brcmfmac 驱动 ... "
                mv -f ./etc/modules.d/brcm* ./etc/modules.d.remove/ 2>/dev/null
                echo "完成"
                ;;
            amlogic_*) 
                if [ $K510 -eq 1 ];then
                    # 高版本内核下，如果ENABLE_WIFI_K510 = 0 则禁用wifi
                    if [ $ENABLE_WIFI_K510 -eq 0 ];then
                         echo "禁用了 brcmfmac 内置无线网卡驱动, 如需开启, 请设置 ENABLE_WIFI_K510=1 并重新打包"
                         mv -f ./etc/modules.d/brcm*  ./etc/modules.d.remove/ 2>/dev/null
                    else
                         echo "brcmfmac" > ./etc/modules.d/brcmfmac
                         echo "brcmutil" > ./etc/modules.d/brcmutil
                         echo "已启用 brcmfmac 驱动，如果机内有 broadcom 模块的话，就可以开启wifi功能" 
                    fi
                else
                    # 低版本内核下，如果ENABLE_WIFI_K504 = 0 则禁用wifi
                    if [ $ENABLE_WIFI_K504 -eq 0 ];then
                        echo "禁用了 brcmfmac 内置无线网卡驱动, 如需开启, 请设置 ENABLE_WIFI_K504=1 并重新打包"
                        mv -f ./etc/modules.d/brcm*  ./etc/modules.d.remove/ 2>/dev/null
                    else
                        echo "brcmfmac" > ./etc/modules.d/brcmfmac
                        echo "brcmutil" > ./etc/modules.d/brcmutil
                        echo "已启用 brcmfmac 驱动，如果机内有 broadcom 模块的话，就可以开启wifi功能" 
                    fi
                fi
                ;;
            *)  echo "跳过"
                ;;
        esac 
             
        echo -n "启用 USB AX88179 网卡驱动 ... "
        [ -f ./etc/modules.d/usb-net-asix-ax88179 ] || echo "ax88179_178a" > ./etc/modules.d/usb-net-asix-ax88179
        echo "完成"

        echo -n "启用 USB RTL8152/8153/8156 网卡驱动 ... "
        [ -f ./etc/modules.d/usb-net-rtl8152 ] || echo "r8152" > ./etc/modules.d/usb-net-rtl8152
        echo "完成"

        echo -n "启用 USB Realtek RTL8188EU 无线网卡驱动 ... "
        echo "r8188eu" > ./etc/modules.d/rtl8188eu
        echo "完成"
        echo "  *** 是否可用请自行测试"

        echo -n "启用 USB Ralink 无线网卡驱动  ... "
        echo "rt2500usb" > ./etc/modules.d/rt2500-usb
        echo "rt2800usb" > ./etc/modules.d/rt2800-usb
        echo "rt2x00usb" > ./etc/modules.d/rt2x00-usb
        echo "完成"
        echo "  *** 如果有 Ralink rt2xxx/rt3xxx/rt5xxx 系列USB无线网卡的话，插上基本能用"

        echo -n "启用 USB Mediatek 无线网卡驱动  ... "
        echo "mt7601u" > ./etc/modules.d/mt7601u
        echo "mt7663u" > ./etc/modules.d/mt7663u
        echo "mt76x0u" > ./etc/modules.d/mt76x0u
        echo "mt76x2u" > ./etc/modules.d/mt76x2u
        echo "完成"
        echo "  *** 如果有 Mediatek mt7601u/mt7610u/mt7612u/mt7663u 系列USB无线网卡的话，插上基本能用"

        echo -n "启用看门狗驱动 ... "
        case $PLATFORM in 
            allwinner) echo "sunxi_wdt" > ./etc/modules.d/watchdog
                       echo "完成"
                       ;;
             rockchip) echo "dw_wdt" > ./etc/modules.d/watchdog
                       echo "完成"
                       ;;
              amlogic) echo meson_gxbb_wdt > ./etc/modules.d/watchdog
                       echo "完成"
                       ;;
                    *) echo "跳过";;
        esac 

        if [ -n "${SND_MOD}" ] && [ -f ./etc/config/shairport-sync ] && [ -f ${SND_MOD} ];then
            echo -n "启用声卡驱动 ... "
            cp ${SND_MOD} ./etc/modules.d/
            echo "完成"
        fi

        if [ "$PLATFORM" == "amlogic" ];then
            echo -n "启用 GPU 驱动 ... "
            echo "panfrost" > ./etc/modules.d/panfrost
            echo "完成"
            echo -n "启用 PWM 驱动 ... "
            echo "pwm_meson" > ./etc/modules.d/pwm_meson
            echo "完成"
        fi
    )
    echo "==============================================================================="
    echo "完成"
    echo
}

# 复制 u-boot 到文件系统
function copy_uboot_to_fs() {
    (
        cd $TGT_ROOT
        if [ "$BOARD" == "vplus" ] && [ -n "${UBOOT_BIN}" ] && [ -f ${UBOOT_BIN} ];then
            echo "检测到 vplus 机型，正在把 u-boot 相关文件写入到 /lib/u-boot目录中备用 ... "
            mkdir -p ./lib/u-boot
            cp -v ${UBOOT_BIN} ./lib/u-boot/
            cp -v ${WRITE_UBOOT_SCRIPT} ./lib/u-boot/
            echo "完成"
        fi

        if [ "$PLATFORM" == "amlogic" ] && [ -n "$FIP_HOME" ] && [ -d "${FIP_HOME}" ];then
            echo "检测到 amlogic 平台，正在把主线 u-boot 相关文件写入到 /lib/u-boot 目录中备用 ... "
            mkdir -p ./lib/u-boot
            cp -v "${FIP_HOME}"/../*.sh lib/u-boot/
            cp -v "${FIP_HOME}"/*.sd.bin lib/u-boot/
            echo "完成"
        fi

        if [ "$PLATFORM" == "amlogic" ] && [ -n "$BTLD_BIN" ] && [ -f "${BTLD_BIN}" ];then
            echo "检测到 amlogic 平台，正在把安卓 u-boot 相关文件写入到 /lib/u-boot 目录中备用 ... "
            mkdir -p ./lib/u-boot
            cp -v "$BTLD_BIN" lib/u-boot/
            echo "完成"
        fi
    )
    echo
}

# 写入 u-boot 到磁盘镜像
function write_uboot_to_disk() {
    (
        if [ "$PLATFORM" == "allwinner" ] && [ -n "$UBOOT_BIN" ] && [ -f "$UBOOT_BIN" ];then
            echo "写入 bootloader ..."

            echo "dd if=${UBOOT_BIN} of=${TGT_DEV} conv=fsync,notrunc bs=1024 seek=8"

            dd if="${UBOOT_BIN}" of="${TGT_DEV}" conv=fsync,notrunc bs=1024 seek=8

            sync
            echo "完成"
        fi

        if [ "$PLATFORM" == "rockchip" ] && [ -n "$BOOTLOADER_IMG" ] && [ -f "$BOOTLOADER_IMG" ];then
            echo "写入 bootloader ..."
            echo "dd if=${BOOTLOADER_IMG} of=${TGT_DEV} conv=fsync,notrunc bs=1 count=442"
            echo "dd if=${BOOTLOADER_IMG} of=${TGT_DEV} conv=fsync,notrunc bs=512 skip=1 seek=1"

            dd if=${BOOTLOADER_IMG} of=${TGT_DEV} conv=fsync,notrunc bs=1 count=442
            dd if=${BOOTLOADER_IMG} of=${TGT_DEV} conv=fsync,notrunc bs=512 skip=1 seek=1

            sync
            echo "完成"
        fi

        if [ "$PLATFORM" == "amlogic" ] && [ -n "$UBOOT_WITH_FIP" ] && [ -f "$UBOOT_WITH_FIP" ];then
            echo "写入 bootloader ..."
            echo "dd if=${UBOOT_WITH_FIP}  of=${TGT_DEV} conv=fsync,notrunc bs=512 skip=1 seek=1"
            echo "dd if=${UBOOT_WITH_FIP}  of=${TGT_DEV} conv=fsync,notrunc bs=1 count=444"

            dd if=${UBOOT_WITH_FIP}  of=${TGT_DEV} conv=fsync,notrunc bs=512 skip=1 seek=1
            dd if=${UBOOT_WITH_FIP}  of=${TGT_DEV} conv=fsync,notrunc bs=1 count=444

            sync
            echo "完成"
        fi
    )
    echo
}

# 对btrfs格式的 rootfs 创建 etc 快照
function create_snapshot() {
    local snapshot_name=$1
    fstype=$(lsblk -o MOUNTPOINT,FSTYPE ${TGT_DEV} | grep "${TGT_ROOT}" | gawk '{print $2}')
    if [ "$fstype" != "btrfs" ];then
        return
    fi
    (
        cd $TGT_ROOT
        echo "创建初始快照: /etc -> /.snapshots/${snapshot_name}"
        mkdir -p .snapshots && \
        btrfs subvolume snapshot -r etc .snapshots/${snapshot_name}
        echo "完成"
        echo
    )
}

# 清理环境
function clean_work_env() {
    echo -n "清理环境 ... "
    detach_loopdev
    sync
    echo "完成"
    echo
}