Skip to content

AikoBox v0.1.0-beta.1 (UNSIGNED beta)

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Jul 03:17
v0.1.0-beta.1
d6d0bc8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

AikoBox v0.1.0-beta.1

这是 AikoBox 的第一个 Windows x64 公开预发行版，供愿意测试 sing-box + Clash YAML 工作流的用户日常试用。它仍是 Beta：请保留你当前可用的代理软件及配置备份，不要在确认 AikoBox 能稳定连接前把它作为唯一联网路径。

This is the first public Windows x64 prerelease of AikoBox for users who want to test the sing-box core with a Clash YAML workflow. It is still a beta: keep your current working proxy client and a configuration backup until you have confirmed that AikoBox is stable on your machine.

下载 / Downloads

  • aikobox-windows-0.1.0-beta.1-x64-setup.exe：安装版，安装到 Program Files；TUN 需要管理员授权。

  • aikobox-windows-0.1.0-beta.1-x64-portable.exe：免安装便携版，仅使用普通系统代理模式；建议先用它试用。

  • 两个同名 .sha256 文件和 SHA256SUMS.txt：用于验证下载文件没有被替换或损坏。

  • aikobox-windows-0.1.0-beta.1-x64-setup.exe: per-machine installer for Program Files; TUN requires administrator approval.

  • aikobox-windows-0.1.0-beta.1-x64-portable.exe: no-install portable build, limited to normal system-proxy mode; recommended for the first trial.

  • Matching .sha256 files and SHA256SUMS.txt: verify that downloads were not replaced or corrupted.

首次使用 / First use

  1. 保持你现在使用的代理软件运行，并记住如何恢复它；先不要启用开机自启，也不要让 AikoBox 接管 TUN。
  2. 优先下载便携版，把它放进一个可写的独立文件夹，然后导入你的 Clash YAML 订阅或配置。
  3. 第一次测试使用普通系统代理模式。确认节点、网页访问、订阅更新和退出后的代理恢复都正常，再考虑安装版或 TUN。
  4. 遇到问题时先退出 AikoBox，恢复原代理软件；提交 Issue 前删除订阅地址、认证信息、控制器密钥和日志中的隐私数据。

English:

  1. Keep your current proxy client running and know how to restore it. Do not enable start-at-login or let AikoBox take over TUN yet.
  2. Prefer the portable build for the first trial. Put it in its own writable folder, then import a Clash YAML subscription or configuration.
  3. Test normal system-proxy mode first. Confirm nodes, browsing, subscription updates, and proxy restoration after exit before considering the installer or TUN.
  4. If anything goes wrong, exit AikoBox and restore your existing client. Remove subscription URLs, credentials, controller secrets, and private log data before filing an issue.

SHA-256 校验 / Verification

在下载目录打开 PowerShell：

$file = '.\aikobox-windows-0.1.0-beta.1-x64-portable.exe'
$actual = (Get-FileHash $file -Algorithm SHA256).Hash.ToLowerInvariant()
$expected = ((Get-Content "$file.sha256") -split '\s+')[0]
$actual -ceq $expected

结果必须是 True。校验只能证明文件与本次 GitHub Release 一致，不能代替代码签名或安全审查。

The result must be True. A checksum proves that the file matches this GitHub Release; it does not replace code signing or a security review.

Windows SmartScreen

如果本次构建没有受信任的 Authenticode 证书，Windows 可能显示“未知发布者”或 Microsoft Defender SmartScreen 提示。这是新项目和未签名程序的常见保护提示，但不是可以忽略来源检查的理由。只从 AikoBox 官方 Releases 下载、先核对 SHA-256；不确定时不要运行。发布页底部会由工作流自动追加本次产物的准确签名状态。

If this build does not have a trusted Authenticode certificate, Windows may show Unknown publisher or a Microsoft Defender SmartScreen warning. This is common for new or unsigned applications, but it is not a reason to skip provenance checks. Download only from the official AikoBox Releases, verify SHA-256 first, and do not run it if unsure. The workflow appends the exact signing status for this build at the end of the release page.

已知限制 / Known limitations

  • 仅支持 Windows 10/11 x64。

  • 这是 Beta 版本，不建议在没有备用联网方案的机器上作为唯一代理客户端。

  • 便携版不支持 TUN；安装版的 TUN 会触发 Windows 管理员授权。

  • Clash YAML 到 sing-box 的转换并非逐字段等价；无法安全转换的关键配置会被拒绝。

  • Windows 10/11 x64 only.

  • This beta should not be the only proxy client on a machine without a recovery path.

  • The portable build does not support TUN; TUN in the installed build requires Windows elevation.

  • Clash YAML to sing-box conversion is not field-for-field; unsafe unsupported configurations are rejected.

⚠ 未签名 Beta / UNSIGNED BETA

仓库尚未配置受信任的 Windows 代码签名证书。发布工作流已确认安装包、便携版和内部主程序均为未签名，并已对最终文件执行静态内容与 SHA-256 校验。Windows 可能显示“未知发布者”或 Microsoft Defender SmartScreen 提示；只应从本仓库 Release 下载并先核对 SHA-256。此说明不代表文件获得了 Windows 信任签名。

A trusted Windows code-signing certificate is not configured. The workflow confirmed that the installer, portable executable, and packaged application are unsigned, then performed static payload and SHA-256 verification. Windows may show Unknown publisher or Microsoft Defender SmartScreen. Download only from this repository's Releases and verify SHA-256 first. This notice does not claim that the files are trusted or signed.

第三方许可审计 / Third-party license audit

本次构建的完整审计输出作为 THIRD_PARTY-LICENSE-AUDIT.txt 随 Release 发布。Beta 允许继续发布已被准确记录的已知许可证据缺口；这不表示这些缺口已经解决。正式版本仍要求零缺口。

The complete audit output is attached as THIRD_PARTY-LICENSE-AUDIT.txt. A beta may proceed only with accurately recorded and disclosed known evidence gaps; this does not mean those gaps are resolved. Stable releases still require zero blockers.

Assets 9
Loading