nessi
5003a2f0f7
Add install-runtime command to tunnel-helper for automated WireGuard installation on Windows. Download and bundle official WireGuard MSI during build process with automatic version discovery from wireguard.com. Add ensure_windows_runtime_installed checks before connect/disconnect operations. Implement install_windows_runtime with UAC elevation prompt and install_windows_runtime_direct for MS
121 lines
3.7 KiB
Bash
121 lines
3.7 KiB
Bash
#!/usr/bin/env bash
|
|
set -eu
|
|
|
|
ROOT_DIR="$(cd "$(dirname "$0")/.." && pwd)"
|
|
HELPER_DIR="${ROOT_DIR}/tunnel-helper"
|
|
BUNDLED_DIR="${ROOT_DIR}/src-tauri/bundled"
|
|
HOST_OS="$(uname -s)"
|
|
|
|
TARGET="${1:-}"
|
|
if [ -z "${TARGET}" ]; then
|
|
echo "usage: build-tunnel-helper.sh <cargo-target>"
|
|
exit 1
|
|
fi
|
|
|
|
case "${TARGET}" in
|
|
x86_64-pc-windows-msvc)
|
|
OUTPUT_DIR="${BUNDLED_DIR}/windows-x64"
|
|
OUTPUT_NAME="nexavpn-tunnel-helper.exe"
|
|
;;
|
|
aarch64-apple-darwin)
|
|
OUTPUT_DIR="${BUNDLED_DIR}/macos-arm64"
|
|
OUTPUT_NAME="nexavpn-tunnel-helper"
|
|
;;
|
|
*)
|
|
echo "unsupported target: ${TARGET}"
|
|
exit 1
|
|
;;
|
|
esac
|
|
|
|
if [ "${TARGET}" = "x86_64-pc-windows-msvc" ]; then
|
|
case "${HOST_OS}" in
|
|
MINGW64_NT*|MSYS_NT*|CYGWIN_NT*)
|
|
;;
|
|
Linux)
|
|
if ! cargo xwin --version >/dev/null 2>&1; then
|
|
echo "Linux cross-builds for Windows require cargo-xwin."
|
|
echo "Install it with:"
|
|
echo " cargo install --locked cargo-xwin"
|
|
exit 1
|
|
fi
|
|
;;
|
|
*)
|
|
echo "Windows x64 helper builds are supported on Windows or on Linux with cargo-xwin."
|
|
echo "Current host: ${HOST_OS}"
|
|
echo "Install the target with:"
|
|
echo " rustup target add x86_64-pc-windows-msvc"
|
|
exit 1
|
|
;;
|
|
esac
|
|
fi
|
|
|
|
if [ "${TARGET}" = "aarch64-apple-darwin" ] && [ "${HOST_OS}" != "Darwin" ]; then
|
|
echo "macOS ARM helper builds must run on macOS."
|
|
echo "Current host: ${HOST_OS}"
|
|
echo "Use a Mac, then install the target with:"
|
|
echo " rustup target add aarch64-apple-darwin"
|
|
exit 1
|
|
fi
|
|
|
|
if ! command -v rustup >/dev/null 2>&1; then
|
|
echo "rustup is required to verify/install Rust targets."
|
|
exit 1
|
|
fi
|
|
|
|
if ! rustup target list --installed | grep -qx "${TARGET}"; then
|
|
echo "Rust target ${TARGET} is not installed."
|
|
echo "Install it with:"
|
|
echo " rustup target add ${TARGET}"
|
|
exit 1
|
|
fi
|
|
|
|
mkdir -p "${OUTPUT_DIR}"
|
|
rm -f "${OUTPUT_DIR}/${OUTPUT_NAME}"
|
|
if [ "${HOST_OS}" = "Linux" ] && [ "${TARGET}" = "x86_64-pc-windows-msvc" ]; then
|
|
cargo xwin build --manifest-path "${HELPER_DIR}/Cargo.toml" --release --target "${TARGET}" --xwin-arch x86_64
|
|
else
|
|
cargo build --manifest-path "${HELPER_DIR}/Cargo.toml" --release --target "${TARGET}"
|
|
fi
|
|
install -m 755 "${HELPER_DIR}/target/${TARGET}/release/${OUTPUT_NAME}" "${OUTPUT_DIR}/${OUTPUT_NAME}"
|
|
|
|
if [ "${TARGET}" = "x86_64-pc-windows-msvc" ]; then
|
|
if ! command -v curl >/dev/null 2>&1; then
|
|
echo "curl is required to bundle the official WireGuard Windows MSI."
|
|
exit 1
|
|
fi
|
|
|
|
MSI_URL="${NEXAVPN_WIREGUARD_WINDOWS_MSI_URL:-}"
|
|
if [ -z "${MSI_URL}" ]; then
|
|
INDEX_HTML="$(curl -fsSL https://download.wireguard.com/windows-client/)"
|
|
MSI_NAME="$(printf '%s' "${INDEX_HTML}" | grep -oE 'wireguard-amd64-[0-9.]+\.msi' | sort -uV | tail -n 1)"
|
|
if [ -z "${MSI_NAME}" ]; then
|
|
echo "Unable to discover the latest official WireGuard Windows MSI."
|
|
exit 1
|
|
fi
|
|
MSI_URL="https://download.wireguard.com/windows-client/${MSI_NAME}"
|
|
fi
|
|
|
|
echo "Bundling WireGuard Windows runtime from ${MSI_URL}"
|
|
rm -f "${OUTPUT_DIR}/wireguard-installer.msi"
|
|
curl -fsSL "${MSI_URL}" -o "${OUTPUT_DIR}/wireguard-installer.msi"
|
|
fi
|
|
|
|
if [ "${TARGET}" = "aarch64-apple-darwin" ]; then
|
|
WG_BIN="$(command -v wg || true)"
|
|
WG_QUICK_BIN="$(command -v wg-quick || true)"
|
|
|
|
if [ -z "${WG_BIN}" ] || [ -z "${WG_QUICK_BIN}" ]; then
|
|
echo "macOS bundle requires wg and wg-quick to be installed on the build machine."
|
|
echo "Install them with:"
|
|
echo " brew install wireguard-tools"
|
|
exit 1
|
|
fi
|
|
|
|
rm -f "${OUTPUT_DIR}/wg" "${OUTPUT_DIR}/wg-quick"
|
|
install -m 755 "$(realpath "${WG_BIN}")" "${OUTPUT_DIR}/wg"
|
|
install -m 755 "$(realpath "${WG_QUICK_BIN}")" "${OUTPUT_DIR}/wg-quick"
|
|
chmod -R u+rwX,go+rX "${OUTPUT_DIR}"
|
|
fi
|
|
|
|
echo "Bundled ${OUTPUT_NAME} into ${OUTPUT_DIR}"
|