TLS Hello Fragmenting: New Single TLS Hello Fragmenting Method #2548
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and Release | |
| # NOTE: This Github Actions file depends on the Makefile. | |
| # Building the correct package requires the correct binaries generated by the Makefile. To | |
| # ensure the correct output, the Makefile must accept the appropriate input and compile the | |
| # correct file with the correct name. If you need to modify this file, please ensure it won't | |
| # disrupt the Makefile. | |
| on: | |
| workflow_dispatch: | |
| release: | |
| types: [published] | |
| push: | |
| branches: | |
| - main | |
| paths: | |
| - "**/*.go" | |
| - "go.mod" | |
| - "go.sum" | |
| - ".github/workflows/release.yml" | |
| pull_request: | |
| types: [opened, synchronize, reopened] | |
| paths: | |
| - "**/*.go" | |
| - "go.mod" | |
| - "go.sum" | |
| - ".github/workflows/release.yml" | |
| jobs: | |
| prepare: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Restore Cache | |
| uses: actions/cache/restore@v4 | |
| with: | |
| path: resources | |
| key: xray-geodat- | |
| - name: Update Geodat | |
| id: update | |
| uses: nick-fields/retry@v3 | |
| with: | |
| timeout_minutes: 60 | |
| retry_wait_seconds: 60 | |
| max_attempts: 60 | |
| command: | | |
| [ -d 'resources' ] || mkdir resources | |
| LIST=('geoip geoip geoip' 'domain-list-community dlc geosite') | |
| for i in "${LIST[@]}" | |
| do | |
| INFO=($(echo $i | awk 'BEGIN{FS=" ";OFS=" "} {print $1,$2,$3}')) | |
| FILE_NAME="${INFO[2]}.dat" | |
| echo -e "Verifying HASH key..." | |
| HASH="$(curl -sL "https://raw.githubusercontent.com/v2fly/${INFO[0]}/release/${INFO[1]}.dat.sha256sum" | awk -F ' ' '{print $1}')" | |
| if [ -s "./resources/${FILE_NAME}" ] && [ "$(sha256sum "./resources/${FILE_NAME}" | awk -F ' ' '{print $1}')" == "${HASH}" ]; then | |
| continue | |
| else | |
| echo -e "Downloading https://raw.githubusercontent.com/v2fly/${INFO[0]}/release/${INFO[1]}.dat..." | |
| curl -L "https://raw.githubusercontent.com/v2fly/${INFO[0]}/release/${INFO[1]}.dat" -o ./resources/${FILE_NAME} | |
| echo -e "Verifying HASH key..." | |
| [ "$(sha256sum "./resources/${FILE_NAME}" | awk -F ' ' '{print $1}')" == "${HASH}" ] || { echo -e "The HASH key of ${FILE_NAME} does not match cloud one."; exit 1; } | |
| echo "unhit=true" >> $GITHUB_OUTPUT | |
| fi | |
| done | |
| - name: Save Cache | |
| uses: actions/cache/save@v4 | |
| if: ${{ steps.update.outputs.unhit }} | |
| with: | |
| path: resources | |
| key: xray-geodat-${{ github.sha }}-${{ github.run_number }} | |
| build: | |
| needs: prepare | |
| permissions: | |
| contents: write | |
| strategy: | |
| matrix: | |
| # Include amd64 on all platforms. | |
| goos: [windows, freebsd, openbsd, linux, darwin] | |
| goarch: [amd64, 386] | |
| gotoolchain: [""] | |
| patch-assetname: [""] | |
| exclude: | |
| # Exclude i386 on darwin | |
| - goarch: 386 | |
| goos: darwin | |
| include: | |
| # BEGIN MacOS ARM64 | |
| - goos: darwin | |
| goarch: arm64 | |
| # END MacOS ARM64 | |
| # BEGIN Linux ARM 5 6 7 | |
| - goos: linux | |
| goarch: arm | |
| goarm: 7 | |
| - goos: linux | |
| goarch: arm | |
| goarm: 6 | |
| - goos: linux | |
| goarch: arm | |
| goarm: 5 | |
| # END Linux ARM 5 6 7 | |
| # BEGIN Android ARM 8 | |
| - goos: android | |
| goarch: arm64 | |
| # END Android ARM 8 | |
| # Windows ARM | |
| - goos: windows | |
| goarch: arm64 | |
| - goos: windows | |
| goarch: arm | |
| goarm: 7 | |
| # BEGIN Other architectures | |
| # BEGIN riscv64 & ARM64 & LOONG64 | |
| - goos: linux | |
| goarch: arm64 | |
| - goos: linux | |
| goarch: riscv64 | |
| - goos: linux | |
| goarch: loong64 | |
| # END riscv64 & ARM64 & LOONG64 | |
| # BEGIN MIPS | |
| - goos: linux | |
| goarch: mips64 | |
| - goos: linux | |
| goarch: mips64le | |
| - goos: linux | |
| goarch: mipsle | |
| - goos: linux | |
| goarch: mips | |
| # END MIPS | |
| # BEGIN PPC | |
| - goos: linux | |
| goarch: ppc64 | |
| - goos: linux | |
| goarch: ppc64le | |
| # END PPC | |
| # BEGIN FreeBSD ARM | |
| - goos: freebsd | |
| goarch: arm64 | |
| - goos: freebsd | |
| goarch: arm | |
| goarm: 7 | |
| # END FreeBSD ARM | |
| # BEGIN S390X | |
| - goos: linux | |
| goarch: s390x | |
| # END S390X | |
| # END Other architectures | |
| # BEGIN OPENBSD ARM | |
| - goos: openbsd | |
| goarch: arm64 | |
| - goos: openbsd | |
| goarch: arm | |
| goarm: 7 | |
| # END OPENBSD ARM | |
| # BEGIN Windows 7 | |
| - goos: windows | |
| goarch: amd64 | |
| gotoolchain: 1.21.4 | |
| patch-assetname: win7-64 | |
| - goos: windows | |
| goarch: 386 | |
| gotoolchain: 1.21.4 | |
| patch-assetname: win7-32 | |
| # END Windows 7 | |
| fail-fast: false | |
| runs-on: ubuntu-latest | |
| env: | |
| GOOS: ${{ matrix.goos }} | |
| GOARCH: ${{ matrix.goarch }} | |
| GOARM: ${{ matrix.goarm }} | |
| CGO_ENABLED: 0 | |
| steps: | |
| - name: Checkout codebase | |
| uses: actions/checkout@v4 | |
| - name: Show workflow information | |
| run: | | |
| _NAME=${{ matrix.patch-assetname }} | |
| [ -n "$_NAME" ] || _NAME=$(jq ".[\"$GOOS-$GOARCH$GOARM$GOMIPS\"].friendlyName" -r < .github/build/friendly-filenames.json) | |
| echo "GOOS: $GOOS, GOARCH: $GOARCH, GOARM: $GOARM, GOMIPS: $GOMIPS, RELEASE_NAME: $_NAME" | |
| echo "ASSET_NAME=$_NAME" >> $GITHUB_ENV | |
| - name: Set up Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version: ${{ matrix.gotoolchain || '1.22' }} | |
| check-latest: true | |
| - name: Get project dependencies | |
| run: go mod download | |
| - name: Build Xray | |
| run: | | |
| mkdir -p build_assets | |
| make | |
| find . -maxdepth 1 -type f -regex './\(wxray\|xray\|xray_softfloat\)\(\|.exe\)' -exec mv {} ./build_assets/ \; | |
| - name: Restore Cache | |
| uses: actions/cache/restore@v4 | |
| with: | |
| path: resources | |
| key: xray-geodat- | |
| - name: Copy README.md & LICENSE | |
| run: | | |
| mv -f resources/* build_assets | |
| cp ${GITHUB_WORKSPACE}/README.md ./build_assets/README.md | |
| cp ${GITHUB_WORKSPACE}/LICENSE ./build_assets/LICENSE | |
| - name: Create ZIP archive | |
| if: github.event_name == 'release' | |
| shell: bash | |
| run: | | |
| pushd build_assets || exit 1 | |
| touch -mt $(date +%Y01010000) * | |
| zip -9vr ../Xray-${{ env.ASSET_NAME }}.zip . | |
| popd || exit 1 | |
| FILE=./Xray-${{ env.ASSET_NAME }}.zip | |
| DGST=$FILE.dgst | |
| for METHOD in {"md5","sha1","sha256","sha512"} | |
| do | |
| openssl dgst -$METHOD $FILE | sed 's/([^)]*)//g' >>$DGST | |
| done | |
| - name: Change the name | |
| run: | | |
| mv build_assets Xray-${{ env.ASSET_NAME }} | |
| - name: Upload files to Artifacts | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: Xray-${{ env.ASSET_NAME }} | |
| path: | | |
| ./Xray-${{ env.ASSET_NAME }}/* | |
| - name: Upload binaries to release | |
| uses: svenstaro/upload-release-action@v2 | |
| if: github.event_name == 'release' | |
| with: | |
| repo_token: ${{ secrets.GITHUB_TOKEN }} | |
| file: ./Xray-${{ env.ASSET_NAME }}.zip* | |
| tag: ${{ github.ref }} | |
| file_glob: true |