mkdir -p /data

cat > /data/install_docker_offline.sh << 'EOF'
cat > /data/install_docker_offline.sh << 'EOF'
#!/usr/bin/env bash
set -euo pipefail

# 仅使用你提供的离线包（Docker 本体来源固定为 ZIP）
URL_PRIMARY="https://pub-b69a7194f4ea42fba6aa990c49bded91.r2.dev/xui/dockde12.zip"
URL_BACKUP="https://freeyx.vps3344.dpdns.org/xui/dockde12.zip"

WORKDIR="/tmp/docker_offline_install"
ZIP_FILE="$WORKDIR/dockde12.zip"

log(){ echo "[*] $*"; }
warn(){ echo "[!] $*"; }
die(){ echo "[X] $*"; exit 1; }

need_root() {
  [ "$(id -u)" -eq 0 ] || die "请使用 root 运行（sudo -i 后再执行）"
}

arch_check() {
  [ "$(uname -m)" = "x86_64" ] || die "仅支持 x86_64（AMD64）架构"
}

wait_dpkg_locks() {
  log "检查 dpkg/apt 锁..."
  local i
  for i in $(seq 1 60); do
    if fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1 || \
       fuser /var/lib/dpkg/lock >/dev/null 2>&1 || \
       fuser /var/cache/apt/archives/lock >/dev/null 2>&1; then
      sleep 2
      continue
    fi
    return 0
  done
  die "dpkg/apt 锁持续占用（可能正在自动更新）。请稍后再运行。"
}

env_sanity_check() {
  # systemd 检查：没有 systemd 的环境，docker.service 无法按常规启动
  if ! command -v systemctl >/dev/null 2>&1; then
    warn "检测不到 systemctl（可能不是标准 Debian 主机环境）。安装可能完成，但无法以 systemd 方式启动。"
  else
    if ! systemctl is-system-running >/dev/null 2>&1; then
      warn "systemd 可能未正常运行（容器/精简环境常见）。即使安装成功，docker 服务也可能无法启动。"
    fi
  fi

  # 容器环境提示（不强制退出，但给出风险提示）
  if command -v systemd-detect-virt >/dev/null 2>&1; then
    local virt
    virt="$(systemd-detect-virt || true)"
    if [ "$virt" != "none" ] && [ -n "$virt" ]; then
      warn "检测到虚拟化/容器环境：$virt。若是非特权 LXC/OpenVZ，Docker 可能无法运行（需要特权/开启 nesting）。"
    fi
  fi
}

install_tools_if_missing() {
  # 仅安装“解压/下载必要工具”，不涉及 Docker 包来源
  wait_dpkg_locks

  if ! command -v curl >/dev/null 2>&1 && ! command -v wget >/dev/null 2>&1; then
    log "安装下载工具 curl..."
    apt-get update -y >/dev/null 2>&1 || true
    apt-get install -y curl >/dev/null 2>&1 || die "无法安装 curl（网络或源不可用）"
  fi

  if ! command -v unzip >/dev/null 2>&1 && ! command -v python3 >/dev/null 2>&1; then
    log "安装解压工具 unzip（或 python3）..."
    apt-get update -y >/dev/null 2>&1 || true
    apt-get install -y unzip >/dev/null 2>&1 || true
    if ! command -v unzip >/dev/null 2>&1; then
      apt-get install -y python3 >/dev/null 2>&1 || die "缺少 unzip/python3 且无法安装（网络或源不可用）"
    fi
  fi
}

stop_old_services() {
  log "停止可能存在的旧服务..."
  systemctl stop docker >/dev/null 2>&1 || true
  systemctl stop containerd >/dev/null 2>&1 || true
}

purge_conflicts() {
  log "清理可能冲突的旧包（尽量保证可重复安装）..."
  # 这些包会与离线 docker-ce / containerd.io / runc 冲突
  local PKGS="docker.io docker-doc docker-compose podman-docker containerd runc docker-ce docker-ce-cli containerd.io"
  wait_dpkg_locks
  apt-get remove -y $PKGS >/dev/null 2>&1 || true
  apt-get purge -y  $PKGS >/dev/null 2>&1 || true
  apt-get autoremove -y >/dev/null 2>&1 || true

  # 关键：旧 containerd 配置经常导致新版本 containerd 启动失败
  if [ -f /etc/containerd/config.toml ]; then
    log "备份并移除旧 /etc/containerd/config.toml（避免 containerd 启动冲突）"
    mv /etc/containerd/config.toml "/etc/containerd/config.toml.bak.$(date +%s)" || true
  fi
}

download_zip() {
  log "准备下载离线包（双线路）..."
  rm -rf "$WORKDIR"
  mkdir -p "$WORKDIR"

  local ok=0
  if command -v curl >/dev/null 2>&1; then
    curl -L -k --retry 3 --connect-timeout 10 -o "$ZIP_FILE" "$URL_PRIMARY" && ok=1 || true
    if [ "$ok" -ne 1 ]; then
      curl -L -k --retry 3 --connect-timeout 10 -o "$ZIP_FILE" "$URL_BACKUP" && ok=1 || true
    fi
  else
    wget --no-check-certificate -t 3 -T 10 -O "$ZIP_FILE" "$URL_PRIMARY" && ok=1 || true
    if [ "$ok" -ne 1 ]; then
      wget --no-check-certificate -t 3 -T 10 -O "$ZIP_FILE" "$URL_BACKUP" && ok=1 || true
    fi
  fi

  [ "$ok" -eq 1 ] || die "离线包下载失败（两条线路都失败）"
  [ -s "$ZIP_FILE" ] || die "离线包下载为空文件"
}

extract_debs() {
  log "解压离线包..."
  cd "$WORKDIR"

  if command -v unzip >/dev/null 2>&1; then
    unzip -oq "$ZIP_FILE" || die "unzip 解压失败"
  else
    python3 - <<PY
import zipfile, sys
try:
  zipfile.ZipFile("$ZIP_FILE").extractall("$WORKDIR")
except Exception as e:
  print(e)
  sys.exit(1)
PY
  fi

  # 防止套娃目录：把所有 deb 收拢到 WORKDIR 根目录
  find "$WORKDIR" -name "*.deb" -exec mv -f {} "$WORKDIR" \; 2>/dev/null || true

  ls "$WORKDIR"/*.deb >/dev/null 2>&1 || die "解压后未找到 .deb 文件（可能压缩包结构变化或损坏）"
}

install_debs_with_fix() {
  log "安装离线 deb 包..."
  cd "$WORKDIR"

  # 第一次安装可能会失败（依赖缺失），不直接退出
  set +e
  dpkg -i --force-overwrite ./*.deb >/dev/null 2>&1
  local rc=$?
  set -e

  if [ "$rc" -ne 0 ]; then
    warn "dpkg 首次安装遇到依赖/冲突，尝试 apt 自动修复依赖..."
    wait_dpkg_locks
    apt-get update -y >/dev/null 2>&1 || true
    apt-get -f install -y || die "依赖自动修复失败（可能网络/源不可用或系统依赖严重缺失）"

    log "依赖修复完成，重试安装 deb..."
    dpkg -i --force-overwrite ./*.deb >/dev/null 2>&1 || die "重试 dpkg 安装仍失败"
  fi
}

start_and_verify() {
  log "启动 Docker..."
  if command -v systemctl >/dev/null 2>&1; then
    systemctl daemon-reload >/dev/null 2>&1 || true
    systemctl unmask docker >/dev/null 2>&1 || true
    systemctl enable docker >/dev/null 2>&1 || true
    systemctl restart docker >/dev/null 2>&1 || true
    sleep 1
  else
    warn "没有 systemctl，跳过 docker.service 启动（需要你自行以非 systemd 方式启动）"
  fi

  if command -v docker >/dev/null 2>&1 && docker info >/dev/null 2>&1; then
    log "Docker 安装并运行成功：$(docker --version 2>/dev/null || true)"
    if docker compose version >/dev/null 2>&1; then
      log "Compose 可用：$(docker compose version 2>/dev/null || true)"
    fi
    return 0
  fi

  warn "Docker 未能正常运行。常见原因：容器环境/内核特性缺失/systemd 不可用。"
  if command -v systemctl >/dev/null 2>&1; then
    warn "可用命令：journalctl -xeu docker.service"
    systemctl status docker --no-pager >/dev/null 2>&1 || true
  fi
  exit 1
}

cleanup() {
  rm -rf "$WORKDIR" >/dev/null 2>&1 || true
}

main() {
  need_root
  arch_check
  env_sanity_check
  install_tools_if_missing
  stop_old_services
  purge_conflicts
  download_zip
  extract_debs
  install_debs_with_fix
  start_and_verify
  cleanup
}

main
EOF

chmod +x /data/install_docker_offline.sh
bash /data/install_docker_offline.sh