Add Dockerfile

Signed-off-by: Neil Shen <overvenus@gmail.com>

Author: overvenus

.dockerignore

@@ -0,0 +1,2 @@
+_tools
+corplink-headless

Dockerfile

@@ -0,0 +1,40 @@
+# Stage 1: Build
+FROM golang:1.24 AS builder
+
+# Extract corplink-service
+RUN wget -q -O corplink.deb \
+        https://oss-s3.ifeilian.com/linux/FeiLian_Linux_v2.0.9_r615_97b98b.deb && \
+    dpkg-deb -x ./corplink.deb /
+
+WORKDIR /app
+
+COPY go.mod go.sum ./
+ENV GOPROXY=https://goproxy.cn
+RUN go mod download
+
+COPY . .
+RUN CGO_ENABLED=0 go build .
+
+# Stage 2: Final image
+FROM ubuntu:20.04
+
+ENV CONTAINER=1
+
+# Install socks5
+COPY --from=serjs/go-socks5-proxy /socks5 /usr/local/bin/socks5
+# Install corplink-headless
+RUN mkdir -p /opt/Corplink
+COPY --from=builder /app/corplink-headless /opt/Corplink
+# Install corplink-service
+COPY --from=builder /opt/Corplink/corplink-service /opt/Corplink/
+# Install services
+COPY ./scripts/install_service.sh /opt/Corplink
+RUN bash /opt/Corplink/install_service.sh  && rm /opt/Corplink/install_service.sh
+COPY ./scripts/startup.sh /
+
+WORKDIR /opt/Corplink
+USER root
+
+ENV COMPANY_CODE=""
+
+ENTRYPOINT ["/startup.sh"]

Makefile

@@ -0,0 +1,2 @@
+build:
+	docker build -t overvenus/corplink:latest .

README.md

@@ -0,0 +1,36 @@
+# corplink-headless
+
+corplink-headless is a headless client for corplink VPN. It designed to run the official corplink VPN in a docker container.
+
+## Usage
+
+1. Run the container as a daemon.
+
+```bash
+docker run -d \
+  --name=corplink \
+  --hostname=ubuntu \
+  --device=/dev/net/tun \
+  --cap-add=NET_ADMIN \
+  --shm-size=512m \
+  -p 8888:8118 \
+  -p 1088:1080 \
+  -e COMPANY_CODE="your_company" \
+  overvenus/corplink:latest
+```
+
+2. Configure corplink.
+
+```bash
+# Scan QR code using Feilian App
+docker exec -it corplink-headless less -rf +F /var/log/corplink-headless/stdout.log
+# Quit less if it prints "login success, company code: xxx"
+```
+
+3. Access corplink network via http proxy: localhost:8888 or socks5 proxy: localhost:1088.
+  You can also route traffic to the container. The container will do SNAT for all traffic sent to it.
+
+## Acknowledgments
+
+* corplink-headless is inspired by [sleepymole/docker-corplink](https://github.com/sleepymole/docker-corplink).
+  The Dockerfile and relevant scirpts are modified from the project.

main.go

@@ -2,8 +2,10 @@ package main
 
 import (
 	"context"
+	"errors"
 	"flag"
 	"log"
+	"os"
 
 	"github.com/overvenus/corplink-headless/pkg/headless"
 )
@@ -16,7 +18,12 @@ func main() {
 	flag.Parse()
 	err := func() error {
 		if *companyCode == "" {
-			log.Println("company-code is not be empty")
+			// Get from env
+			code := os.Getenv("COMPANY_CODE")
+			if code == "" {
+				return errors.New("company-code must not be empty")
+			}
+			*companyCode = code
 		}
 		token, err := headless.NewToken(*rpcConf)
 		if err != nil {

pkg/headless/login.go

@@ -237,6 +237,7 @@ func (s *loginState) Execute(ctx context.Context, cli State) error {
 			success, err1 = s.checkLoginToken(ctx, cli, token)
 			if success {
 				log.Printf("login success, company code: %s", cli.GetCompanyCode())
+				fmt.Printf("login success, company code: %s\n", cli.GetCompanyCode())
 				return nil
 			}
 			time.Sleep(time.Second)

scripts/install_service.sh

@@ -0,0 +1,120 @@
+#!/usr/bin/env bash
+#
+# Modified from https://github.com/sleepymole/docker-corplink
+
+if [ -z "$CONTAINER" ]; then
+    echo "CONTAINER is not set, it should be run in a docker container"
+    exit 1
+fi
+
+set -ex
+
+apt-get update
+apt-get install -y \
+    supervisor \
+    privoxy \
+    jq \
+    iptables \
+    iproute2 \
+    net-tools \
+    iputils-ping \
+    less \
+    ca-certificates && \
+rm -rf /var/lib/apt/lists/*
+
+# corplink-service
+mkdir -p /var/log/corplink/
+cat <<EOF >/etc/supervisor/conf.d/corplink.conf
+[program:corplink]
+command=/opt/Corplink/corplink-service
+autostart=true
+autorestart=true
+stderr_logfile=/var/log/corplink/stderr.log
+stdout_logfile=/var/log/corplink/stdout.log
+priority=1
+startsecs=3
+EOF
+
+# corplink-headless
+mkdir -p /var/log/corplink-headless/
+cat <<EOF >/etc/supervisor/conf.d/corplink-headless.conf
+[program:corplink-headless]
+command=/opt/Corplink/corplink-headless
+autostart=true
+autorestart=true
+stderr_logfile=/var/log/corplink-headless/stderr.log
+stdout_logfile=/var/log/corplink-headless/stdout.log
+priority=2
+EOF
+
+# Privoxy
+mkdir -p /var/log/privoxy
+cat <<EOF >/etc/supervisor/conf.d/privoxy.conf
+[program:privoxy]
+command=/usr/sbin/privoxy --no-daemon /etc/privoxy/config
+autostart=true
+autorestart=true
+stderr_logfile=/var/log/privoxy/stderr.log
+stdout_logfile=/var/log/privoxy/stdout.log
+EOF
+sed -i '/^listen-address/d' /etc/privoxy/config
+echo 'listen-address 0.0.0.0:8118' >>/etc/privoxy/config
+
+# Socks5 server
+mkdir -p /var/log/socks5/
+cat <<EOF >/etc/supervisor/conf.d/socks5.conf
+[program:socks5]
+command=/usr/local/bin/socks5
+autostart=true
+autorestart=true
+stderr_logfile=/var/log/socks5/stderr.log
+stdout_logfile=/var/log/socks5/stdout.log
+EOF
+
+# Automatic fix dns
+cat <<EOF >/usr/local/bin/fixdns.sh
+#!/bin/bash
+set -x
+while true; do
+  sleep 5
+  dns=\$(jq -r '.DNS[0]' /opt/Corplink/vpn.conf  2>/dev/null)
+  [ -z "\$dns" ] && continue
+  grep -q "\$dns" /etc/resolv.conf && continue
+  echo "nameserver \${dns}" >/etc/resolv.conf
+  echo "nameserver 114.114.114.114" >>/etc/resolv.conf
+  echo "nameserver 1.1.1.1" >>/etc/resolv.conf
+done
+EOF
+chmod +x /usr/local/bin/fixdns.sh
+mkdir -p /var/log/fixdns/
+cat <<EOF >/etc/supervisor/conf.d/fixdns.conf
+[program:fixdns]
+command=/usr/local/bin/fixdns.sh
+autostart=true
+autorestart=true
+stderr_logfile=/var/log/fixdns/stderr.log
+stdout_logfile=/var/log/fixdns/stdout.log
+EOF
+
+# Fix ssh stuck at debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
+# See https://serverfault.com/a/670081
+cat <<EOF >/usr/local/bin/fixsshmtu.sh
+#!/bin/bash
+set -x
+while true; do
+  sleep 10
+  mtu=\$(cat /sys/class/net/utun/mtu  2>/dev/null)
+  [[ "\$mtu" -eq 1200 ]] && continue
+  ifconfig utun mtu 1200
+done
+EOF
+chmod +x /usr/local/bin/fixsshmtu.sh
+mkdir -p /var/log/fixsshmtu/
+cat <<EOF >/etc/supervisor/conf.d/fixsshmtu.conf
+[program:fixsshmtu]
+command=/usr/local/bin/fixsshmtu.sh
+autostart=true
+autorestart=true
+stderr_logfile=/var/log/fixsshmtu/stderr.log
+stdout_logfile=/var/log/fixsshmtu/stdout.log
+EOF

scripts/startup.sh

@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+#
+# Modified from https://github.com/sleepymole/docker-corplink
+
+if [ -z "$CONTAINER" ]; then
+    echo "CONTAINER is not set, it should be run in a docker container"
+    exit 1
+fi
+
+set -ex
+
+iptables -t nat -F
+iptables -t nat -A POSTROUTING -j MASQUERADE
+/usr/bin/supervisord 2>/dev/null || true
+
+while true; do {
+    sleep 86400;
+} done