利用Docker部署shadowsocks和simple-obfs

Posted on Edited on

简介

Shadowsocks-libev: Shadowsocks-libev is a lightweight secured SOCKS5 proxy for embedded devices and low-end boxes.

Simple-obfs: Simple-obfs is a simple obfusacting tool, designed as plugin server of shadowsocks.

Docker: Docker is an open platform for developers and sysadmins to build, ship, and run distributed applications, whether on laptops, data center VMs, or the cloud.

编写 Dockerfile

首先编写 shadowsocks-libev 的 Dockerfile

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
#
# Dockerfile for shadowsocks-libev
#

FROM alpine

RUN set -ex \
    # Build environment setup
    && apk add --no-cache --virtual .build-deps \
    autoconf \
    automake \
    build-base \
    c-ares-dev \
    libev-dev \
    libtool \
    libsodium-dev \
    linux-headers \
    mbedtls-dev \
    pcre-dev \
    git \
    # Build and install
    && cd /tmp \
    && git clone https://github.com/shadowsocks/shadowsocks-libev.git \
    && cd shadowsocks-libev && git submodule update --init --recursive \
    && ./autogen.sh \
    && ./configure --prefix=/usr --disable-documentation \
    && make install \
    && apk del .build-deps \
    # Runtime dependencies setup
    && apk add --no-cache \
    rng-tools \
    $(scanelf --needed --nobanner /usr/bin/ss-* \
    | awk '{ gsub(/,/, "\nso:", $2); print "so:" $2 }' \
    | sort -u) \
    && rm -rf /tmp/*

ENTRYPOINT ["ss-server"]

接下来是 simple-obfs 的 Dockerfile

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
#
# Dockerfile for shadowsocks-libev-simple-obfs
#

FROM alpine

RUN set -ex \
    # Build environment setup
    && apk add --no-cache --virtual .build-deps gcc autoconf make libtool automake zlib-dev openssl asciidoc xmlto libpcre32 libev-dev g++ linux-headers git \
    # Build and install
    && cd /tmp \
    && git clone https://github.com/shadowsocks/simple-obfs.git \
    && cd simple-obfs \
    && git submodule update --init --recursive \
    && ./autogen.sh \
    && ./configure --prefix=/usr --disable-documentation \
    && make && make install \
    && apk del .build-deps \
    # Runtime dependencies setup
    && apk add --no-cache \
    $(scanelf --needed --nobanner /usr/bin/obfs-* \
    | awk '{ gsub(/,/, "\nso:", $2); print "so:" $2 }' \
    | sort -u) \
    && rm -rf /tmp/*

ENTRYPOINT ["obfs-server"]

运行 docker build 和 docker push

在 shadowsocks-libev 和 simple-obfs 的 Dockerfile 目录下分别运行

1
2
docker build ./Dockerfile -t vermouthx/shadowsocks-libev
docker build ./Dockerfile -t vermouthx/simple-obfs

将 build 好的 image push 到 docker cloud

1
2
docker push vermouthx/shadowsocks-libev
docker push vermouthx/simple-obfs

运用 Ansible 实现 VPS 自动化部署

关于Ansible：Ansible是一个自动化运维工具，具体可看官网

编写 Ansible Playbook的相关tasks，关键代码如下

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
- name: deploy shadowsocks-libev
  become: yes
  docker_container:
    name: ss-server
    image: vermouthx/shadowsocks-libev
    volumes:
      - "/etc/shadowsocks-libev:/etc/shadowsocks-libev"
    entrypoint: ss-server
    command: "-c /etc/shadowsocks-libev/config.json"
    ports:
      - "9999:9999/udp"
    user: nobody
    networks:
      - name: shadowsocks
    state: "{{ container_state }}"
    recreate: yes
  tags: ss
- name: deploy simple-obfs
  become: yes
  docker_container:
    name: obfs-server
    image: vermouthx/simple-obfs
    volumes:
      - "/etc/simple-obfs:/etc/simple-obfs"
    command: "-c /etc/simple-obfs/config.json"
    ports:
      - "9999:8139"
    user: nobody
    networks:
      - name: shadowsocks
    state: "{{ container_state }}"
    recreate: yes
  tags: obfs

运行该 playbook 即可完成shadowsocks+simple-obfs的部署

Dockerfile的源码：https://github.com/WhiteVermouth/shadowsocks-docker