feat: one-line install for agents and probes from one shared script (curl | bash, zsh, PowerShell) [CI]

packaging/install/install.ps1

@@ -0,0 +1,77 @@
+# MoShiro 节点一键安装（Windows，Agent 和 Probe 共用同一份）。面板在 /install.ps1?code=… 生成这份脚本，把下面四个值填好：
+#   irm 'https://panel/install.ps1?code=jt_…' | iex
+# 做的事：用 Docker Desktop 起一个容器，身份和配置存在命名卷里（重启、换新镜像重建都不用再给参数），节点名字默认取计算机名。
+# 可选环境变量：MOSHIRO_NAME=节点名字（名字被占用时用）。
+function Install-MoShiro {
+    $ErrorActionPreference = 'Stop'
+    $role = '@@ROLE@@'
+    $server = '@@SERVER@@'
+    $code = '@@CODE@@'
+    $image = '@@IMAGE@@'
+
+    $name = if ($env:MOSHIRO_NAME) { $env:MOSHIRO_NAME } else { $env:COMPUTERNAME }
+    $name = $name -replace '[^A-Za-z0-9._-]', '-'
+    if ($name.Length -gt 64) { $name = $name.Substring(0, 64) }
+    if (-not $name) { $name = 'node' }
+
+    if (-not (Get-Command docker -ErrorAction SilentlyContinue)) {
+        Write-Error 'Docker Desktop is required: https://docs.docker.com/desktop/setup/install/windows-install/'
+        return
+    }
+    docker info *> $null
+    if ($LASTEXITCODE -ne 0) {
+        Write-Error 'Docker is installed but not running: start Docker Desktop and run this again'
+        return
+    }
+
+    $container = "moshiro-$role"
+    $volume = "moshiro-$role-config"
+    docker inspect $container *> $null
+    if ($LASTEXITCODE -eq 0) {
+        docker start $container | Out-Null
+        Write-Host "$container is already installed and running."
+        Write-Host "reinstall: docker rm -f $container; docker volume rm $volume   (then run the install command again)"
+        return
+    }
+
+    Write-Host "pulling $image"
+    docker pull $image | Out-Null
+    if ($LASTEXITCODE -ne 0) {
+        Write-Error "could not pull $image (private registry? run: docker login $($image.Split('/')[0]))"
+        return
+    }
+
+    $arguments = @('run', '-d', '--name', $container, '--restart', 'unless-stopped',
+        '--read-only', '--tmpfs', '/tmp:rw,noexec,nosuid,size=64m', '--cap-drop', 'all', '--security-opt', 'no-new-privileges',
+        '-v', "${volume}:/etc/moshiro")
+    # Docker Desktop 没有宿主网络：Agent 把端口发布出来（面板里的地址需要指向这台机器的公网地址）
+    if ($role -eq 'agent') { $arguments += @('-p', '7443:7443/tcp', '-p', '7443:7443/udp', '-p', '7444:7444/tcp') }
+    $arguments += @('-e', "MOSHIRO_SERVER=$server", '-e', "MOSHIRO_JOIN=$code", '-e', "MOSHIRO_NAME=$name", $image)
+
+    Write-Host "starting $container as '$name'"
+    docker @arguments | Out-Null
+    if ($LASTEXITCODE -ne 0) {
+        Write-Error 'docker run failed'
+        return
+    }
+
+    # 等注册完成：第一次启动会用上面的令牌注册，成功之后才算装好
+    for ($i = 0; $i -lt 30; $i++) {
+        $running = docker inspect -f '{{.State.Running}}' $container 2>$null
+        $logs = (docker logs $container 2>&1) -join "`n"
+        if ($logs -match 'link up') {
+            Write-Host "done: $role '$name' is online. It shows up in the panel now."
+            Write-Host "logs: docker logs -f $container"
+            return
+        }
+        if ($running -ne 'true') {
+            ($logs -split "`n" | Select-Object -Last 8) -join "`n" | Write-Host
+            Write-Error "$container stopped. If the name '$name' is taken, run again with `$env:MOSHIRO_NAME='<other-name>'. To start over: docker rm -f $container; docker volume rm $volume"
+            return
+        }
+        Start-Sleep -Seconds 1
+    }
+    Write-Host "$container is running, but has not reported online yet. Check: docker logs $container"
+}
+
+Install-MoShiro