Package Details: mihomo 1.19.23-1

Git Clone URL: https://aur.archlinux.org/mihomo.git (read-only, click to copy)
Package Base: mihomo
Description: Mihomo Kernel by MetaCubeX, formerly known as Clash.Meta
Upstream URL: https://github.com/MetaCubeX/mihomo
Licenses: GPL3
Conflicts: clash-meta
Provides: clash-meta
Submitter: handsomexdd1024
Maintainer: Kizumi
Last Packager: Kizumi
Votes: 20
Popularity: 1.89
First Submitted: 2023-12-02 15:01 (UTC)
Last Updated: 2026-04-08 13:50 (UTC)

Pinned Comments

sukanka commented on 2023-02-15 01:05 (UTC)

If you want use tun mode, add the following pacman hook.

➜  ~ cat /etc/pacman.d/hooks/clash-meta.hook
[Trigger]
Operation = Install
Operation = Upgrade
Type = Path
Target = usr/bin/clash-meta

[Action]
When = PostTransaction
Exec = /usr/bin/setcap 'cap_net_admin,cap_net_bind_service=+ep' /usr/bin/clash-meta

Latest Comments

« First ‹ Previous 1 2 3 4

black_desk commented on 2023-06-21 07:45 (UTC) (edited on 2023-06-21 07:55 (UTC) by black_desk)

有两个建议：

考虑让clash-meta把需要写的文件和理应只读的配置文件分开，并且开启一些保护功能：

[Service]
ProtectHome=true
ProtectSystem=full
PrivateTmp=true
ProtectKernelTunables=true
ProtectControlGroups=true

NoNewPrivileges=true
MemoryDenyWriteExecute=true

StateDirectory=clash-meta

ConfigurationDirectory=clash-meta
ConfigurationDirectoryMode=0555

ExecStartPre=
ExecStartPre=-ln -s /etc/clash/Country.mmdb $STATE_DIRECTORY
ExecStart=
ExecStart=clash-meta -d $STATE_DIRECTORY -f ${CONFIGURATION_DIRECTORY}/config.yaml

按道理来说 /usr 和 /etc 对于绝大多数服务而言都应该是只读的。

另外，默认配置应该做成无条件直连的

oogeek commented on 2023-05-01 16:30 (UTC)

It seems that the shasum of the latest 1.14.4.tar.gz is wrong.

sukanka commented on 2023-02-15 01:06 (UTC)

@MiketsuSmasher 原始配置是我瞎编的，也不知道能不能用，所以其实并没有意义

sukanka commented on 2023-02-15 01:05 (UTC)

If you want use tun mode, add the following pacman hook.

➜  ~ cat /etc/pacman.d/hooks/clash-meta.hook
[Trigger]
Operation = Install
Operation = Upgrade
Type = Path
Target = usr/bin/clash-meta

[Action]
When = PostTransaction
Exec = /usr/bin/setcap 'cap_net_admin,cap_net_bind_service=+ep' /usr/bin/clash-meta

MiketsuSmasher commented on 2023-02-14 16:44 (UTC)

可以考虑将 config.yaml 复制一份为 config.yaml.example，方便用户恢复原始配置

reeeeeeeeeeelity commented on 2023-02-14 10:19 (UTC)

The function of finding process doesn't work. Maybe need some specific systemd capability?

« First ‹ Previous 1 2 3 4