别再挨个试清华、中科大、阿里源了！国家队下场的“CERNET 镜像聚合站”，凭什么让你的下载直接起飞？

#!/usr/bin/env bash
# ==============================================================================
# 脚本名称: cernet-switch.sh
# 支持环境: Ubuntu 26.04 LTS / 24.04 LTS / 22.04 LTS & Debian 系列
# 功能说明: 自动检测 DEB822 与传统 sources.list，一键切换至 CERNET 聚合源，
#          同步配置 Python pip 全局镜像，支持 JSON 巡检输出与自动时间戳备份。
# 依赖要求: 原生 POSIX 工具链 (bash, awk, sed, curl)，零第三方安装依赖。
# ==============================================================================

set -euo pipefail

# 默认参数
MODE="apply" # apply | check
OUTPUT_JSON=false

while [[ $# -gt 0 ]]; do
  case "$1" in
    --check) MODE="check"; shift ;;
    --apply) MODE="apply"; shift ;;
    --json)  OUTPUT_JSON=true; shift ;;
    *) echo "未知参数: $1"; exit 1 ;;
  esac
done

# 环境变量检测
TIMESTAMP=$(date +"%Y%m%d_%H%M%S")
UBUNTU_SOURCES="/etc/apt/sources.list.d/ubuntu.sources"
LEGACY_SOURCES="/etc/apt/sources.list"
CERNET_MIRROR_BASE="https://mirrors.cernet.edu.cn/ubuntu/"
PIP_MIRROR_INDEX="https://mirrors.cernet.edu.cn/pypi/web/simple/"

# 收集系统信息
OS_CODENAME="unknown"
if [ -f /etc/os-release ]; then
  OS_CODENAME=$(grep -E '^VERSION_CODENAME=' /etc/os-release | cut -d= -f2 | tr -d '"')
  [ -z "$OS_CODENAME" ] && OS_CODENAME=$(grep -E '^UBUNTU_CODENAME=' /etc/os-release | cut -d= -f2 | tr -d '"')
fi

# 检查当前配置状态
CURRENT_APT_SOURCE="default"
IS_CERNET_CONFIGURED=false

if [ -f "$UBUNTU_SOURCES" ]; then
  if grep -q "mirrors.cernet.edu.cn" "$UBUNTU_SOURCES"; then
    IS_CERNET_CONFIGURED=true
    CURRENT_APT_SOURCE="deb822:cernet"
  else
    CURRENT_APT_SOURCE="deb822:other"
  fi
elif [ -f "$LEGACY_SOURCES" ]; then
  if grep -q "mirrors.cernet.edu.cn" "$LEGACY_SOURCES"; then
    IS_CERNET_CONFIGURED=true
    CURRENT_APT_SOURCE="legacy:cernet"
  else
    CURRENT_APT_SOURCE="legacy:other"
  fi
fi

# 检查网络重定向目标
REDIRECT_TARGET="unreachable"
if command -v curl >/dev/null 2>&1; then
  REDIRECT_TARGET=$(curl -sIL -o /dev/null -w "%{redirect_url}" "$CERNET_MIRROR_BASE" 2>/dev/null || echo "failed")
  [ -z "$REDIRECT_TARGET" ] && REDIRECT_TARGET="direct"
fi

if [ "$MODE" = "check" ]; then
  if [ "$OUTPUT_JSON" = true ]; then
    printf '{"os":"ubuntu","codename":"%s","apt_source":"%s","configured":%s,"redirect_node":"%s"}\n' \
      "$OS_CODENAME" "$CURRENT_APT_SOURCE" "$IS_CERNET_CONFIGURED" "$REDIRECT_TARGET"
  else
    echo "=== Ubuntu 26.04 CERNET 镜像状态巡检 ==="
    echo "系统版本代号: $OS_CODENAME"
    echo "当前 APT 源状态: $CURRENT_APT_SOURCE"
    echo "CERNET 智能调度目标: $REDIRECT_TARGET"
    echo "是否已就绪: $IS_CERNET_CONFIGURED"
  fi
  exit 0
fi

# 执行换源 (MODE=apply)
BACKUP_PATH=""
if [ "$(id -u)" -ne 0 ]; then
  echo "错误: 执行换源操作需要 root 权限，请使用 sudo $0" >&2
  exit 1
fi

if [ -f "$UBUNTU_SOURCES" ]; then
  # 优先采用 Ubuntu 24.04/26.04 推荐的 DEB822 现代格式
  BACKUP_PATH="${UBUNTU_SOURCES}.bak.${TIMESTAMP}"
  cp -p "$UBUNTU_SOURCES" "$BACKUP_PATH"
  
  cat << EOF > "$UBUNTU_SOURCES"
Types: deb
URIs: https://mirrors.cernet.edu.cn/ubuntu/
Suites: ${OS_CODENAME} ${OS_CODENAME}-updates ${OS_CODENAME}-backports
Components: main restricted universe multiverse
Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg

Types: deb
URIs: https://mirrors.cernet.edu.cn/ubuntu/
Suites: ${OS_CODENAME}-security
Components: main restricted universe multiverse
Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg
EOF

else
  # 降级支持传统 sources.list
  BACKUP_PATH="${LEGACY_SOURCES}.bak.${TIMESTAMP}"
  cp -p "$LEGACY_SOURCES" "$BACKUP_PATH"

  cat << EOF > "$LEGACY_SOURCES"
deb https://mirrors.cernet.edu.cn/ubuntu/ ${OS_CODENAME} main restricted universe multiverse
deb https://mirrors.cernet.edu.cn/ubuntu/ ${OS_CODENAME}-updates main restricted universe multiverse
deb https://mirrors.cernet.edu.cn/ubuntu/ ${OS_CODENAME}-backports main restricted universe multiverse
deb https://mirrors.cernet.edu.cn/ubuntu/ ${OS_CODENAME}-security main restricted universe multiverse
EOF
fi

# 配置全局 pip 镜像
PIP_CONFIG_STATUS="skipped"
if command -v python3 >/dev/null 2>&1; then
  python3 -m pip config set global.index-url "$PIP_MIRROR_INDEX" >/dev/null 2>&1 || true
  PIP_CONFIG_STATUS="applied"
fi

if [ "$OUTPUT_JSON" = true ]; then
  printf '{"status":"success","os":"ubuntu","backup":"%s","redirect_node":"%s","pip":"%s"}\n' \
    "$BACKUP_PATH" "$REDIRECT_TARGET" "$PIP_CONFIG_STATUS"
else
  echo -e "\033[32m[SUCCESS]\033[0m Ubuntu APT 软件源已成功切换至 CERNET 校园网联合镜像站！"
  echo "• 原配置文件已备份至: $BACKUP_PATH"
  echo "• 智能调度重定向至: $REDIRECT_TARGET"
  echo "• Python pip 源配置状态: $PIP_CONFIG_STATUS"
  echo "• 您现在可以立即测试高速拉取: sudo apt-get update"
fi

#!/usr/bin/env zsh
# ==============================================================================
# 脚本名称: cernet-switch.zsh
# 支持环境: macOS 26 (Tahoe) / macOS 15 (Sequoia) / macOS 14 (Sonoma)
# 功能说明: 一键配置 Homebrew (brew.git, core.git, bottles 二进制预编译包)
#          与 Python pip 全局镜像至 CERNET 聚合站，支持 Zsh 环境自动注入。
# 依赖要求: macOS 内置 Zsh 与原生开发工具链，零外部依赖。
# ==============================================================================

set -e

MODE="apply"
OUTPUT_JSON=false

while [[ $# -gt 0 ]]; do
  case "$1" in
    --check) MODE="check"; shift ;;
    --apply) MODE="apply"; shift ;;
    --json)  OUTPUT_JSON=true; shift ;;
    *) echo "未知选项: $1"; exit 1 ;;
  esac
done

PROFILE_FILE="${HOME}/.zprofile"
TIMESTAMP=$(date +"%Y%m%d_%H%M%S")
BREW_BOT_URL="https://mirrors.cernet.edu.cn/homebrew-bottles"
PIP_INDEX_URL="https://mirrors.cernet.edu.cn/pypi/web/simple/"

# 检查 Homebrew 与当前配置
BREW_FOUND=false
command -v brew >/dev/null 2>&1 && BREW_FOUND=true

IS_CONFIGURED=false
if [ -f "$PROFILE_FILE" ] && grep -q "mirrors.cernet.edu.cn/homebrew-bottles" "$PROFILE_FILE"; then
  IS_CONFIGURED=true
fi

# 检查重定向有效性
REDIRECT_NODE=$(curl -sIL -o /dev/null -w "%{redirect_url}" "$BREW_BOT_URL" 2>/dev/null || echo "unreachable")
[ -z "$REDIRECT_NODE" ] && REDIRECT_NODE="direct"

if [ "$MODE" = "check" ]; then
  if [ "$OUTPUT_JSON" = true ]; then
    printf '{"os":"macos","brew_installed":%s,"configured":%s,"redirect_node":"%s"}\n' \
      "$BREW_FOUND" "$IS_CONFIGURED" "$REDIRECT_NODE"
  else
    echo "=== macOS 26 CERNET 镜像状态巡检 ==="
    echo "Homebrew 安装状态: $BREW_FOUND"
    echo "Bottles 镜像是否注入: $IS_CONFIGURED"
    echo "智能重定向匹配节点: $REDIRECT_NODE"
  fi
  exit 0
fi

# 执行换源 (MODE=apply)
BACKUP_PATH=""
if [ -f "$PROFILE_FILE" ]; then
  BACKUP_PATH="${PROFILE_FILE}.bak.${TIMESTAMP}"
  cp "$PROFILE_FILE" "$BACKUP_PATH"
fi

# 移除旧的 HOMEBREW 环境变量设置
[ -f "$PROFILE_FILE" ] && sed -i '' '/HOMEBREW_BOTTLE_DOMAIN/d' "$PROFILE_FILE" || touch "$PROFILE_FILE"

# 注入新 CERNET 镜像环境变量
cat << 'EOF' >> "$PROFILE_FILE"
# >>> CERNET MirrorZ Auto Injection >>>
export HOMEBREW_BOTTLE_DOMAIN="https://mirrors.cernet.edu.cn/homebrew-bottles"
export HOMEBREW_API_DOMAIN="https://mirrors.cernet.edu.cn/homebrew-bottles/api"
# <<< CERNET MirrorZ Auto Injection <<<
EOF

# 如果已安装 Homebrew，设置 git 镜像源
if [ "$BREW_FOUND" = true ]; then
  git -C "$(brew --repo)" remote set-url origin https://mirrors.cernet.edu.cn/git/homebrew/brew.git 2>/dev/null || true
fi

# 配置 pip 镜像
PIP_STATUS="skipped"
if command -v python3 >/dev/null 2>&1; then
  python3 -m pip config set global.index-url "$PIP_INDEX_URL" >/dev/null 2>&1 || true
  PIP_STATUS="applied"
fi

if [ "$OUTPUT_JSON" = true ]; then
  printf '{"status":"success","os":"macos","backup":"%s","redirect_node":"%s","pip":"%s"}\n' \
    "$BACKUP_PATH" "$REDIRECT_NODE" "$PIP_STATUS"
else
  echo "\033[32m[SUCCESS]\033[0m macOS Homebrew 与 pip 源已成功切换至 CERNET 校园网联合镜像站！"
  echo "• 环境配置文件已注入: $PROFILE_FILE (备份: $BACKUP_PATH)"
  echo "• 智能调度指向节点: $REDIRECT_NODE"
  echo "• 请在当前终端执行刷新: source ~/.zprofile"
fi

<#
.SYNOPSIS
    Windows 11 CERNET 校园网联合镜像站一键换源与自动化巡检脚本
.DESCRIPTION
    自动配置 Windows Package Manager (winget) 与 Python pip 镜像至 CERNET 聚合平台，
    支持原生 PowerShell 5.1/7+，无任何第三方包依赖。
.PARAMETER Check
    仅执行当前镜像状态巡检，不修改系统设置。
.PARAMETER Apply
    执行换源设置（默认操作）。
.PARAMETER Json
    以标准化 JSON 对象输出执行结果，便于 AI Agent 解析。
#>

[CmdletBinding()]
param (
    [switch]$Check,
    [switch]$Apply = $true,
    [switch]$Json
)

$ErrorActionPreference = "SilentlyContinue"
$cernetPypi = "https://mirrors.cernet.edu.cn/pypi/web/simple/"
$cernetWinget = "https://mirrors.cernet.edu.cn/winget-source"

# 连通性与 302 重定向探针
$redirectNode = "unreachable"
try {
    $req = [System.Net.WebRequest]::Create($cernetPypi)
    $req.Method = "HEAD"
    $req.AllowAutoRedirect = $false
    $res = $req.GetResponse()
    if ($res.StatusCode -eq 302 -or $res.StatusCode -eq 301) {
        $redirectNode = $res.GetResponseHeader("Location")
    } else {
        $redirectNode = "direct"
    }
    $res.Close()
} catch {
    $redirectNode = "probe_failed"
}

# 检查当前 pip 配置
$pipCurrent = (python -m pip config get global.index-url 2>$null)
$pipConfigured = ($pipCurrent -like "*mirrors.cernet.edu.cn*")

# 检查 winget 状态
$wingetInstalled = ($null -ne (Get-Command "winget" -ErrorAction SilentlyContinue))

if ($Check) {
    $checkReport = [PSCustomObject]@{
        Platform = "Windows 11"
        PipConfigured = $pipConfigured
        CurrentPipSource = $pipCurrent
        WingetAvailable = $wingetInstalled
        RedirectNode = $redirectNode
    }

    if ($Json) {
        $checkReport | ConvertTo-Json -Compress
    } else {
        Write-Host "=== Windows 11 CERNET 镜像站状态巡检 ===" -ForegroundColor Cyan
        Write-Host "Pip 镜像状态: $(if ($pipConfigured) { '已配置 CERNET' } else { '非 CERNET 源' })" -ForegroundColor White
        Write-Host "当前索引地址: $pipCurrent" -ForegroundColor Gray
        Write-Host "Winget 支持: $wingetInstalled" -ForegroundColor White
        Write-Host "智能调度节点: $redirectNode" -ForegroundColor Yellow
    }
    exit 0
}

# 执行换源配置 (Apply)
$pipStatus = "skipped"
if ($null -ne (Get-Command "python" -ErrorAction SilentlyContinue)) {
    python -m pip config set global.index-url $cernetPypi | Out-Null
    python -m pip config set global.trusted-host "mirrors.cernet.edu.cn" | Out-Null
    $pipStatus = "success"
}

$wingetStatus = "skipped"
if ($wingetInstalled) {
    # 尝试切换 winget 源为国内联合加速源
    winget source remove winget 2>$null | Out-Null
    winget source add winget $cernetWinget --type "Microsoft.Rest" 2>$null | Out-Null
    $wingetStatus = "success"
}

$applyReport = [PSCustomObject]@{
    Status = "success"
    Platform = "Windows 11"
    PipConfig = $pipStatus
    WingetConfig = $wingetStatus
    RedirectTarget = $redirectNode
}

if ($Json) {
    $applyReport | ConvertTo-Json -Compress
} else {
    Write-Host "==========================================================" -ForegroundColor Green
    Write-Host "[SUCCESS] Windows 11 开发环境已成功接入 CERNET 镜像聚合站！" -ForegroundColor Green
    Write-Host "• Python pip 全局镜像: $pipStatus ($cernetPypi)" -ForegroundColor White
    Write-Host "• 微软 Winget 加速源: $wingetStatus" -ForegroundColor White
    Write-Host "• 智能调度指向高校: $redirectNode" -ForegroundColor Yellow
    Write-Host "==========================================================" -ForegroundColor Green
}

1. Agent 定时执行自检命令：`./cernet-switch.sh --check --json`
2. Agent 解析返回的 JSON 输出：
   {
     "os": "ubuntu",
     "codename": "resolute",
     "apt_source": "legacy:other",
     "configured": false,
     "redirect_node": "https://mirrors.hit.edu.cn/ubuntu/"
   }
3. Agent 判断决策逻辑：
   - 若 `configured == false`，或者检测到用户刚刚误操作覆盖了源文件；
   - Agent 自动调用提权工具执行：`sudo ./cernet-switch.sh --apply --json`；
   - 检查返回值确认 `status == "success"` 后，向飞书/钉钉或控制台发送自愈报告：
     “已自动修复节点软件源至 CERNET 聚合站，当前最佳调度高校为哈尔滨工业大学镜像。”