@ghyper9023/u2secure 0.4.0 → 0.5.0

package/README.md

@@ -4,7 +4,7 @@ Linux 服务器安全加固工具（CLI + TUI 双模式），基于 Rust 构建
 
 > Linux server security hardening tool (CLI + TUI) built with Rust. One run builds a complete security baseline: system updates, user creation, deep SSH hardening, firewall, intrusion prevention, auditing and automatic updates.
 >
-> 支持平台 / Supported platforms: Linux x86_64 & ARM64, macOS x86_64 & ARM64, Windows x64
+> 支持平台 / Supported platform: Linux x86_64 & ARM64 (Linux only)
 >
 > 详细文档与使用指南请访问 / For full documentation and usage guide, visit:
 > [GitHub 主页](https://github.com/cherish-ltt/U2Secure)

package/bin/install.js

@@ -3,6 +3,7 @@
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
+const { pipeline } = require('stream');
 const { https } = require('follow-redirects');
 
 const pkgJson = require('../package.json');
@@ -25,37 +26,25 @@ if (repo.endsWith('.git')) {
 
 const tag = `v${version}`;
 
+// U2Secure 是 Linux 专用工具，只发布 Linux 二进制。
+// 这里给出明确报错，而不是让 postinstall 去下载一个永远不存在的资产。
 function getPlatformAsset() {
   const platform = os.platform();
   const arch = os.arch();
   console.log(`Detected platform: ${platform}, arch: ${arch}`);
 
-  if (platform === 'win32') {
-    // Windows: currently only x64 builds are provided.
-    if (arch === 'x64' || arch === 'ia32' || arch === 'arm64') {
-      console.log('Using Windows x64 binary (compatible with all Windows architectures)');
-      return 'u2secure-x86_64-pc-windows-msvc.exe';
-    } else {
-      throw new Error(`Unsupported Windows architecture: ${arch}`);
-    }
-  } else if (platform === 'linux') {
-    if (arch === 'x64') {
-      return 'u2secure-x86_64-unknown-linux-gnu';
-    } else if (arch === 'arm64') {
-      return 'u2secure-aarch64-unknown-linux-gnu';
-    } else {
-      throw new Error(`Unsupported Linux architecture: ${arch}`);
-    }
-  } else if (platform === 'darwin') {
-    if (arch === 'arm64') {
-      return 'u2secure-aarch64-apple-darwin';
-    } else if (arch === 'x64') {
-      return 'u2secure-x86_64-apple-darwin';
-    } else {
-      throw new Error(`Unsupported macOS architecture: ${arch}`);
-    }
+  if (platform !== 'linux') {
+    throw new Error(
+      `U2Secure only supports Linux (detected: ${platform}). ` +
+        'On other platforms please use Docker or a Linux server / VM.'
+    );
+  }
+  if (arch === 'x64') {
+    return 'u2secure-x86_64-unknown-linux-gnu';
+  } else if (arch === 'arm64') {
+    return 'u2secure-aarch64-unknown-linux-gnu';
   } else {
-    throw new Error(`Unsupported platform: ${platform}`);
+    throw new Error(`Unsupported Linux architecture: ${arch}`);
   }
 }
 
@@ -68,19 +57,34 @@ console.log(`Downloading from ${url} ...`);
 
 if (!fs.existsSync(destDir)) fs.mkdirSync(destDir, { recursive: true });
 
-const file = fs.createWriteStream(destFile);
+const staging = fs.mkdtempSync(path.join(destDir, '.download-'));
+const temporary = path.join(staging, 'binary');
+function fail(error) {
+  console.error(`Download failed: ${error.message}`);
+  process.exitCode = 1;
+  fs.rmSync(staging, { recursive: true, force: true });
+}
 https.get(url, (response) => {
   if (response.statusCode !== 200) {
-    console.error(`Failed to download ${url}: HTTP ${response.statusCode}`);
-    process.exit(1);
+    response.resume();
+    fail(new Error(`HTTP ${response.statusCode}`));
+    return;
   }
-  response.pipe(file);
-  file.on('finish', () => {
-    file.close();
-    fs.chmodSync(destFile, 0o755);
-    console.log(`Binary saved to ${destFile}`);
+  pipeline(response, fs.createWriteStream(temporary, { flags: 'wx' }), (error) => {
+    if (error) return fail(error);
+    try {
+      const expected = response.headers['content-length'];
+      const bytes = fs.statSync(temporary).size;
+      if (!response.complete || bytes === 0 ||
+          (expected !== undefined && Number(expected) !== bytes)) {
+        throw new Error('Incomplete binary response');
+      }
+      fs.chmodSync(temporary, 0o755);
+      fs.renameSync(temporary, destFile);
+      fs.rmdirSync(staging);
+      console.log(`Binary saved to ${destFile}`);
+    } catch (error) {
+      fail(error);
+    }
   });
-}).on('error', (err) => {
-  console.error(err);
-  process.exit(1);
-});
+}).on('error', fail);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ghyper9023/u2secure",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Make your Linux system more secure through interactive CLI | 通过交互式的 CLI 让你的 Linux 系统更安全",
   "bin": {
     "u2secure": "bin/u2secure-wrapper.js"