[{"_1":2,"_173":-5,"_174":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_150":151},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":17},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_85":-5,"_86":87,"_141":-5,"_142":11,"_143":17,"_144":11,"_145":-5,"_146":11,"_147":-5,"_148":149},"canonicalUrl","https://hub.docker.com/r/chisbread/chislash/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","chisbread","reponame","chislash","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":11,"_69":29,"_70":71,"_76":11,"_77":78,"_82":29,"_83":84},"categories",[],"content_types",[40],"image","date_registered","2022-05-07T14:59:46.71394Z","description","https://github.com/ChisBread/chislash","is_private","last_updated","2023-01-09T15:20:09.378955Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.distribution.manifest.list.v2+json","name","pull_count",15607,"repository_type","star_count",4,"status",1,"status_description","active","source","collaborator_count",0,"full_description","# chislash\n- 开箱即用的clash透明网关\n- 也可作为[纯订阅转换服务](#其它场景)使用\n## 警告\n- 十分**不建议**在云服务器(甲骨文,AWS...)上使用透明代理特性(IP_ROUTE=1)！任何意外情况都可能导致你的服务器失联\n- 如果依然要使用,请关闭透明代理特性,作为HTTP/SOCKS5代理服务器使用; 参考[非透明代理](#其它场景)\n## 环境检查\n- 检查是否支持TProxy(支持TProxy, 才能使用透明代理)\n```\nlsmod | grep xt_TPROXY\n```\n- 如果没有返回,则需要加载\n```\nmodprobe xt_TPROXY\n``` \n- 如果没有报错,设置自动加载xt_TPROXY\n```\nsudo bash -c \"echo 'xt_TPROXY' >/etc/modules-load.d/TPROXY.conf\"\n```\n## 快速上手\n- 将Linux服务器(树莓派,工控机,闲置电脑)作为透明代理\n- 一行搞定\n```bash\nsudo docker run --name chislash \\\n --network=\"host\" \\\n --privileged \\\n --rm -it \\\n -e SUBSCR_URLS=<(自带配置可不填)节点订阅链接或代理节点的分享链接, 多个用'|'分隔> \\\n -v $HOME/.config/chislash:/etc/clash \\\n -v /dev:/dev \\\n -v /lib/modules:/lib/modules \\\n chisbread/chislash:latest\n```\n- 成功启动, 输出如下图的日志\n![quickstart](https://github.com/ChisBread/chislash/raw/master/images/quickstart.png)\n- 如果失败, 请检查\n - 订阅链接(SUBSCR_URLS)是否能正常访问. 如果不能, 请联系供应商\n - 规则链接(REMOTE_CONV_RULE)是否能正常访问. 可添加 *-e REMOTE_CONV_RULE=\"\"* 到命令中重试\n- 调试通过后, 作为后台服务: 将 *--rm -it* 改为 *--restart unless-stopped -d*\n- 此时Linux服务器本身已经被代理接管, 将其设置为网关后, 其它机器也可获得透明代理\n- 控制台\n - **http://< 服务器IP >:8080/ui** 为clash的WebUI, 用于切换节点\n - **http://< 服务器IP >:25500** 为subconverter后端服务地址, 用于节点订阅转换\n## 其它场景\n- 非透明代理\n```bash\nsudo docker run --name chislash \\\n --network=\"host\" \\\n --rm -it \\\n -e IP_ROUTE=0 \\\n -e SUBSCR_URLS=<(自带配置可不填)节点订阅链接或代理节点的分享链接, 多个用'|'分隔> \\\n -v $HOME/.config/chislash:/etc/clash \\\n chisbread/chislash:latest\n```\n- 关闭IPv6代理: *-e IPV6_PROXY=0*\n- 关闭UDP代理: *-e UDP_PROXY=0*\n- 纯订阅转换服务(subconverter)\n```bash\nsudo docker run --name chislash \\\n --rm -it \\\n -e ENABLE_CLASH=0 \\\n -p 25500:25500 \\\n -p 8091:8091 \\\n -e SUBSCR_URLS=<(可不填, 填写后启动会更新/etc/clash/config.yaml)> \\\n -v $HOME/.config/chislash:/etc/clash \\\n chisbread/chislash:latest\n```\n - 转换服务: *http://127.0.0.1:25500/sub*\n - 转换规则: *http://127.0.0.1:8091/ACL4SSR/Clash/config/* \n## 进阶使用\n- 一些细节\n - 透明代理: 容器自动映射路由表, 劫持本地DNS流量实现本地透明代理; 亦可作为网关使用, 需要将网关和DNS指定为服务器IP\n - 配置文件: 请注意备份配置文件, 容器会修改部分用户配置来统一端口和部分高级配置, utils/override.py中定义了本镜像修改用户配置的方式\n- docker-compose\n```yaml\nversion: \"3.4\"\nservices:\n chislash:\n image: chisbread/chislash\n container_name: chislash\n # 以下样例中的 \"/etc/clash/\" 代表容器内目录\n environment:\n - TZ=Asia/Shanghai # optional\n - REQUIRED_CONFIG= # optional \n # REQUIRED_CONFIG: 不能被覆盖的设置项, 最高优先级 (e.g. /etc/clash/required.yaml)\n - CLASH_HTTP_PORT=7890 # optional (default:7890)\n - CLASH_SOCKS_PORT=7891 # optional (default:7891)\n - CLASH_TPROXY_PORT=7892 # optional (default:7892)\n - CLASH_MIXED_PORT=7893 # optional (default:7893)\n - DASH_PORT=8080 # optional (default:8080) RESTful API端口(对应WebUI http://IP:8080/ui)\n - DASH_PATH= # optional (default:\"/etc/clash/dashboard/public\")\n - IP_ROUTE=1 # optional (default:1) 开启透明代理(本机透明代理/作为旁路网关)\n - UDP_PROXY=1 # optional (default:1) 开启透明代理-UDP转发(需要节点支持)\n - IPV6_PROXY=1 # optional (default:1) 开启IPv6透明代理\n - LOG_LEVEL=info # optional (default:info) 日志等级\n - ENABLE_SUBCONV=1 # optional (default:1) 开启本地订阅转换服务, 指定SUBSCR_URLS, 且没有外部订阅转换服务时, 需要为1\n - SUBCONV_URL=http://127.0.0.1:25500/sub # optional (default:\"http://127.0.0.1:25500/sub\") 订阅转换服务地址\n - SUBSCR_URLS= # optional 订阅的节点链接, 多个链接用'|'分隔, 会覆盖原有的config.yaml\n - SUBSCR_EXPR=86400 # optional (default:86400) 订阅过期时间(秒), 下次启动如果过期, 会重新订阅\n - REMOTE_CONV_RULE= # optional (default:⬇️) 订阅转换规则\n # REMOTE_CONV_RULE: 默认使用内部服务提供的链接 \"http://127.0.0.1:8091/ACL4SSR/Clash/config/ACL4SSR_Online_Full.ini\"\n # 在浏览器打开 http://< 服务器IP >:8091/ACL4SSR/Clash/config/ 即可查看内部服务支持的规则列表\n - EXPORT_DIR_PORT=8091\n - EXPORT_DIR_BIND=0.0.0.0\n - NO_ENGLISH=true # optional (default:true) 提醒自己这玩意主要是国人用\n - PREMIUM=false # optional (default:false) 使用闭源版本内核\n volumes:\n - :/etc/clash # required config.yaml的存放路径\n - /dev:/dev # optional 用于自动挂载TPROXY模块\n - /lib/modules:/lib/modules # optional 用于自动挂载TPROXY模块\n network_mode: \"host\" # required 如果开启IP_ROUTE, 则必须是host\n privileged: true # required 如果开启IP_ROUTE, 则必须是true\n restart: unless-stopped\n```\n- docker run (参考docker-compose)\n\n## 支持情况\n\n| OS | 透明代理/网关(Transparent Gateway) | 服务端(HTTP/SOCKS5 Proxy Server) |\n| ----------------------------- | ---------------------------------- | -------------------------------- |\n| Linux (with tproxy module) | ✅ | ✅ |\n| Linux (without tproxy module) | ❎ | ✅ |\n| Windows | ❓ | ❓ |\n| macOS | ❓ | ❓ |\n\n## 感谢\n- https://github.com/Dreamacro/clash\n- https://github.com/haishanh/yacd\n- https://github.com/tindy2013/subconverter\n- https://github.com/ACL4SSR/ACL4SSR\n","has_starred","hub_user","immutable_tags_settings",{"_72":11,"_73":74},"enabled","rules",[75],".*","is_automated","permissions",{"_79":17,"_80":11,"_81":11},"read","write","admin","user","storage_size",1631907935,"orgData","recentTags",[88],{"_89":40,"_90":91,"_92":93,"_94":95,"_96":97,"_98":99,"_46":129,"_130":91,"_131":29,"_132":52,"_53":133,"_134":135,"_136":137,"_138":129,"_139":62,"_140":17},"content_type","creator",9297617,"digest","sha256:cee2b272c100f9030805aed93d83832eedc3d91bc96e603da25a4741ce279ab9","full_size",73158932,"id",209791038,"images",[100,116,122],{"_101":102,"_92":103,"_104":105,"_106":107,"_108":109,"_110":111,"_112":105,"_113":-5,"_114":95,"_59":62,"_115":-5},"architecture","amd64","sha256:8ad2dc885d308226d519b3e5a3c75ff8988faec8a1d11f5aa49e36f8b8719c9a","features","","last_pulled","2026-09-25T04:30:42.912063734Z","last_pushed","2023-01-09T15:20:08Z","os","linux","os_features","os_version","size","variant",{"_101":117,"_92":118,"_104":105,"_106":119,"_108":120,"_110":111,"_112":105,"_113":-5,"_114":121,"_59":62,"_115":-5},"arm64","sha256:f42b40f327ca43396ddfa2b275eb14d02a5279394ab5fe5a37cf6c07f76bac58","2026-09-25T04:30:42.913988368Z","2023-01-09T15:20:09Z",70459497,{"_101":123,"_92":124,"_104":105,"_106":125,"_108":126,"_110":111,"_112":105,"_113":-5,"_114":127,"_59":62,"_115":128},"arm","sha256:34556b470c4c29c3f8837b9b8856ddbcbfa1c6bedaa0aa691f2eb001662b6ba4","2026-09-25T04:30:42.91316945Z","2023-01-09T15:20:07Z",65983526,"v7","2023-01-09T15:20:09.076092Z","last_updater","last_updater_username","media_type","latest","repository",17075585,"tag_last_pulled","2026-09-28T16:43:28.433832538Z","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":152,"_159":160,"_148":171,"_172":11},{"_36":153,"_38":154,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":155,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":11,"_69":29,"_70":156,"_76":11,"_77":158,"_82":29,"_83":84},[],[40],[52],{"_72":11,"_73":157},[75],{"_79":17,"_80":11,"_81":11},"tags",{"_161":60,"_162":-5,"_163":-5,"_164":165},"count","next","previous","results",[166],{"_89":40,"_90":91,"_92":93,"_94":95,"_96":97,"_98":167,"_46":129,"_130":91,"_131":29,"_132":52,"_53":133,"_134":135,"_136":137,"_138":129,"_139":62,"_140":17},[168,169,170],{"_101":102,"_92":103,"_104":105,"_106":107,"_108":109,"_110":111,"_112":105,"_113":-5,"_114":95,"_59":62,"_115":-5},{"_101":117,"_92":118,"_104":105,"_106":119,"_108":120,"_110":111,"_112":105,"_113":-5,"_114":121,"_59":62,"_115":-5},{"_101":123,"_92":124,"_104":105,"_106":125,"_108":126,"_110":111,"_112":105,"_113":-5,"_114":127,"_59":62,"_115":128},[],"canDeleteTags","actionData","errors"]

Digest	OS/ARCH	Compressed size
8ad2dc885d30	linux/amd64	69.77 MB
34556b470c4c	linux/arm/v7	62.93 MB
f42b40f327ca	linux/arm64	67.2 MB

chisbread/chislash

Tags for chisbread/chislash