Acris/shadowsocks-asuswrt-merlin

"Illegal instruction"

JOHNatCASC opened this issue · 25 comments

I followed the instructions in your post, started the ss-merlin
PUTTY

So far, I could not use the ASUS Router to bypass the GFW.

My Config file is like this.

{
  "server": "X.X.X.X",
  "server_port": 8388,
  "local_address": "0.0.0.0",
  "local_port":1080,
  "password": "passwd",
  "timeout": 60,
  "method": "aes-256-cfb",
  "mode": "tcp_only"
}

I did not setup any plugins on my VPS SERVER.
So, please help, Why does the "Illegal instruction" always occur? What should I do?

I can use the shadowsocks-libev on my cell phone via Shadowrocket and it works well.

Many Thanks.

Acris commented

What's your router's model?

ASUS RT AC86U merlin 384.12

If the SS-MERLIN works perfectly, what should I do with my browsers on PC?
Use direct mode and do not setup any proxies?

Acris commented
  • Login to your router with SSH then excute ss-redir --help and v2ray-plugin --help, paste the output here.
  • You don't need to do anything with your PC or browser if the ss-merlin works perfectly.

The output is as follows:
redir
It seems that there must be something wrong with the "ss-redir".

ss-redir
then output
illegal instruction

Acris commented

Thanks for your reply, I re-compiled the ss-redir binary, can you test again with following commands?
wget https://transfer.sh/12tiLC/ss-redir && chmod +x ss-redir && ss-redir --help && rm ss-redir

The output is as follows:
ss-redir

`Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/root/.wget-hsts'. HSTS will be disabled.
--2019-07-02 20:58:16-- https://transfer.sh/12tiLC/ss-redir
Resolving transfer.sh... 144.76.136.153
Connecting to transfer.sh|144.76.136.153|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2303352 (2.2M) [application/octet-stream]
Saving to: 'ss-redir'

...

Illegal instruction`

Acris commented

Maybe it's a build issue, btw, what's your asuswrt merlin's version?

It's MERLIN 384.12.
In this case, what shall I do?

Acris commented

I'll try to build ss-redir with another method, when I finished, I'll reply to here ASAP.

Thanks a lot.

I reinstalled the ss-merlin. And the output is as follows.
Hope this will help.

Click to see logs
CB190R@RT-AC86U-3448:/tmp/home/root# sh -c "$(wget https://raw.githubusercontent.
com/Acris/shadowsocks-asuswrt-merlin/master/tools/install.sh -O -)"
Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/root/.wget-hsts'. HSTS will be disabled.
--2019-07-02 22:51:04--  https://raw.githubusercontent.com/Acris/shadowsocks-asuswrt-merlin/master/tools/install.sh
Resolving raw.githubusercontent.com... 151.101.108.133
Connecting to raw.githubusercontent.com|151.101.108.133|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3325 (3.2K) [text/plain]
Saving to: 'STDOUT'

-                    100%[===================>]   3.25K  1.24KB/s    in 2.6s

2019-07-02 22:51:08 (1.24 KB/s) - written to stdout [3325/3325]

 Checking installation environment...
git version 2.21.0
opkg version d4ba162bb3f931bd5a019154270a548cf1f0853b (2019-01-31)
 Installing required packages...
Downloading http://bin.entware.net/aarch64-k3.10/Packages.gz
Updated list of available packages in /opt/var/opkg-lists/entware
Installing haveged (1.9.4-1) to root...
Downloading http://bin.entware.net/aarch64-k3.10/haveged_1.9.4-1_aarch64-3.10.ipk
Installing libhavege (1.9.4-1) to root...
Downloading http://bin.entware.net/aarch64-k3.10/libhavege_1.9.4-1_aarch64-3.10.ipk
Installing unbound (1.9.1-3) to root...
Downloading http://bin.entware.net/aarch64-k3.10/unbound_1.9.1-3_aarch64-3.10.ipk
Installing libunbound (1.9.1-3) to root...
Downloading http://bin.entware.net/aarch64-k3.10/libunbound_1.9.1-3_aarch64-3.10.ipk
Package ipset (7.1-3) installed in root is up to date.
Package iptables (1.4.21-2a) installed in root is up to date.
Configuring libunbound.
Configuring libhavege.
Configuring haveged.
Configuring unbound.
 Starting haveged...              done.
 Cloning shadowsocks-asuswrt-merlin...
Cloning into '/opt/share/ss-merlin'...
remote: Enumerating objects: 36, done.
remote: Counting objects: 100% (36/36), done.
remote: Compressing objects: 100% (31/31), done.
remote: Total 36 (delta 3), reused 18 (delta 1), pack-reused 0
Unpacking objects: 100% (36/36), done.
 Giving execute permissions...
 Updating IP and DNS whitelists...
Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/root/.wget-hsts'. HSTS will be disabled.
--2019-07-02 22:56:19--  https://ftp.apnic.net/apnic/stats/apnic/delegated-apnic-latest
Resolving ftp.apnic.net... 202.12.29.205, 2001:dc0:2001:11::205
Connecting to ftp.apnic.net|202.12.29.205|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2983561 (2.8M) [text/plain]
Saving to: 'STDOUT'

-                    100%[===================>]   2.84M  9.33KB/s    in 5m 19s

2019-07-02 23:01:42 (9.13 KB/s) - written to stdout [2983561/2983561]

Update IP whitelist done.
Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/root/.wget-hsts'. HSTS will be disabled.
--2019-07-02 23:01:42--  https://raw.githubusercontent.com/felixonmars/dnsmasq-china-list/master/accelerated-domains.china.conf
Resolving raw.githubusercontent.com... 151.101.228.133
Connecting to raw.githubusercontent.com|151.101.228.133|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2278478 (2.2M) [text/plain]
Saving to: '/opt/share/ss-merlin/etc/dnsmasq.d/accelerated-domains.china.conf.bak'

/opt/share/ss-merlin 100%[===================>]   2.17M  12.5KB/s    in 3m 14s

2019-07-02 23:04:58 (11.4 KB/s) - '/opt/share/ss-merlin/etc/dnsmasq.d/accelerated-domains.china.conf.bak' saved [2278478/2278478]

Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/root/.wget-hsts'. HSTS will be disabled.
--2019-07-02 23:04:58--  https://raw.githubusercontent.com/felixonmars/dnsmasq-china-list/master/google.china.conf
Resolving raw.githubusercontent.com... 151.101.228.133
Connecting to raw.githubusercontent.com|151.101.228.133|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2554 (2.5K) [text/plain]
Saving to: '/opt/share/ss-merlin/etc/dnsmasq.d/google.china.conf.bak'

/opt/share/ss-merlin 100%[===================>]   2.49K  --.-KB/s    in 0s

2019-07-02 23:04:59 (12.9 MB/s) - '/opt/share/ss-merlin/etc/dnsmasq.d/google.china.conf.bak' saved [2554/2554]

Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/root/.wget-hsts'. HSTS will be disabled.
--2019-07-02 23:04:59--  https://raw.githubusercontent.com/felixonmars/dnsmasq-china-list/master/apple.china.conf
Resolving raw.githubusercontent.com... 151.101.228.133
Connecting to raw.githubusercontent.com|151.101.228.133|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3746 (3.7K) [text/plain]
Saving to: '/opt/share/ss-merlin/etc/dnsmasq.d/apple.china.conf.bak'

/opt/share/ss-merlin 100%[===================>]   3.66K  --.-KB/s    in 0s

2019-07-02 23:05:01 (18.4 MB/s) - '/opt/share/ss-merlin/etc/dnsmasq.d/apple.china.conf.bak' saved [3746/3746]

Update DNS whitelist done.
 Updating GFW list...
Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/root/.wget-hsts'. HSTS will be disabled.
--2019-07-02 23:05:01--  https://cokebar.github.io/gfwlist2dnsmasq/dnsmasq_gfwlist_ipset.conf
Resolving cokebar.github.io... 185.199.109.153, 185.199.111.153, 185.199.108.153, ...
Connecting to cokebar.github.io|185.199.109.153|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 371984 (363K) [text/plain]
Saving to: 'STDOUT'

-                    100%[===================>] 363.27K  14.7KB/s    in 26s

2019-07-02 23:05:29 (13.8 KB/s) - written to stdout [371984/371984]

Update GFW list done.
 Creating system links...
 Creating dnsmasq config file...
 Creating automatic upgrade cron jobs...

   ______           __                        __
  / __/ /  ___ ____/ /__ _    _____ ___  ____/ /__ ___
 _\ \/ _ \/ _ `/ _  / _ \ |/|/ (_-</ _ \/ __/  '_/(_-<
/___/_//_/\_,_/\_,_/\___/__,__/___/\___/\__/_/\_\/___/
                                   ...is now installed!

 Copy and edit your shadowsocks configuration file at: /opt/share/ss-merlin/etc/shadowsocks/config.sample.json
 and shadowsocks-asuswrt-merlin configuration file at: /opt/share/ss-merlin/etc/ss-merlin.sample.conf
Type ss-merlin to get all supported arguments.
Get more details and give us a feedback at https://github.com/Acris/shadowsocks-asuswrt-merlin.

Acris commented

The installation script is fine, but the ss-redir binary is not compatible with RT-AC86U now. I'll build again on tomorrow, and I will reply back because I need your test.

Acris commented

Hey, there are 5 ss-redir binary compiled from different build environment, can you download them and test separately to see which one does work? Just download with wget and give execute permission by chmod +x ss-redir, and test with ./ss-redir --help.

# 1.  build with brcm-arm-hnd, size: 2303352
https://transfer.sh/Jmxm1/ss-redir

# 2. build with brcm-arm-sdk on merlin.ng 384.12, size: 1701653
https://transfer.sh/YJ3Wb/ss-redir

# 3. build with legacy merlin 380.70, size: 1703929
https://transfer.sh/avCAn/ss-redir

#4.  fancyss arm, size: 280472
https://raw.githubusercontent.com/hq450/fancyss/master/fancyss_arm/shadowsocks/bin/ss-redir

# 5. fancyss hnd, size: 554596
https://raw.githubusercontent.com/hq450/fancyss/master/fancyss_hnd/shadowsocks/bin/ss-redir

1

Click to see logs
CB190R@RT-AC86U-3448:/tmp/home/root# chmod +x ss-redir
CB190R@RT-AC86U-3448:/tmp/home/root# ./ss-redir --help

shadowsocks-libev 3.3.0

  maintained by Max Lv <max.c.lv@gmail.com> and Linus Yang <laokongzi@gmail.com>

  usage:

    ss-redir

       -s <server_host>           Host name or IP address of your remote server.
       -p <server_port>           Port number of your remote server.
       -l <local_port>            Port number of your local server.
       -k <password>              Password of your remote server.
       -m <encrypt_method>        Encrypt method: rc4-md5,
                                  aes-128-gcm, aes-192-gcm, aes-256-gcm,
                                  aes-128-cfb, aes-192-cfb, aes-256-cfb,
                                  aes-128-ctr, aes-192-ctr, aes-256-ctr,
                                  camellia-128-cfb, camellia-192-cfb,
                                  camellia-256-cfb, bf-cfb,
                                  chacha20-ietf-poly1305,
                                  xchacha20-ietf-poly1305,
                                  salsa20, chacha20 and chacha20-ietf.
                                  The default cipher is chacha20-ietf-poly1305.

       [-a <user>]                Run as another user.
       [-f <pid_file>]            The file path to store pid.
       [-t <timeout>]             Socket timeout in seconds.
       [-c <config_file>]         The path to config file.
       [-n <number>]              Max number of open files.
       [-b <local_address>]       Local address to bind.

       [-u]                       Enable UDP relay.
                                  TPROXY is required in redir mode.
       [-U]                       Enable UDP relay and disable TCP relay.

       [--reuse-port]             Enable port reuse.
       [--fast-open]              Enable TCP fast open.
                                  with Linux kernel > 3.7.0.
       [--mtu <MTU>]              MTU of your network interface.
       [--mptcp]                  Enable Multipath TCP on MPTCP Kernel.
       [--no-delay]               Enable TCP_NODELAY.
       [--key <key_in_base64>]    Key of your remote server.
       [--plugin <name>]          Enable SIP003 plugin. (Experimental)
       [--plugin-opts <options>]  Set SIP003 plugin options. (Experimental)

       [-v]                       Verbose mode.
       [-h, --help]               Print this message.

CB190R@RT-AC86U-3448:/tmp/home/root#

2

Illegal instruction

3

Illegal instruction

4

Click to see logs
CB190R@RT-AC86U-3448:/tmp/home/root# ./ss-redir --help

shadowsocks-libev 3.2.1

  maintained by Max Lv <max.c.lv@gmail.com> and Linus Yang <laokongzi@gmail.com>

  usage:

    ss-redir

       -s <server_host>           Host name or IP address of your remote server.
       -p <server_port>           Port number of your remote server.
       -l <local_port>            Port number of your local server.
       -k <password>              Password of your remote server.
       -m <encrypt_method>        Encrypt method: rc4-md5,
                                  aes-128-gcm, aes-192-gcm, aes-256-gcm,
                                  aes-128-cfb, aes-192-cfb, aes-256-cfb,
                                  aes-128-ctr, aes-192-ctr, aes-256-ctr,
                                  camellia-128-cfb, camellia-192-cfb,
                                  camellia-256-cfb, bf-cfb,
                                  chacha20-ietf-poly1305,
                                  xchacha20-ietf-poly1305,
                                  salsa20, chacha20 and chacha20-ietf.
                                  The default cipher is chacha20-ietf-poly1305.

       [-a <user>]                Run as another user.
       [-f <pid_file>]            The file path to store pid.
       [-t <timeout>]             Socket timeout in seconds.
       [-c <config_file>]         The path to config file.
       [-n <number>]              Max number of open files.
       [-b <local_address>]       Local address to bind.

       [-u]                       Enable UDP relay.
                                  TPROXY is required in redir mode.
       [-U]                       Enable UDP relay and disable TCP relay.

       [--reuse-port]             Enable port reuse.
       [--fast-open]              Enable TCP fast open.
                                  with Linux kernel > 3.7.0.
       [--mtu <MTU>]              MTU of your network interface.
       [--mptcp]                  Enable Multipath TCP on MPTCP Kernel.
       [--no-delay]               Enable TCP_NODELAY.
       [--key <key_in_base64>]    Key of your remote server.
       [--plugin <name>]          Enable SIP003 plugin. (Experimental)
       [--plugin-opts <options>]  Set SIP003 plugin options. (Experimental)

       [-v]                       Verbose mode.
       [-h, --help]               Print this message.

CB190R@RT-AC86U-3448:/tmp/home/root#

5

Click to see logs
CB190R@RT-AC86U-3448:/tmp/home/root# ./ss-redir --help

shadowsocks-libev 3.2.5

  maintained by Max Lv <max.c.lv@gmail.com> and Linus Yang <laokongzi@gmail.com>

  usage:

    ss-redir

       -s <server_host>           Host name or IP address of your remote server.
       -p <server_port>           Port number of your remote server.
       -l <local_port>            Port number of your local server.
       -k <password>              Password of your remote server.
       -m <encrypt_method>        Encrypt method: rc4-md5,
                                  aes-128-gcm, aes-192-gcm, aes-256-gcm,
                                  aes-128-cfb, aes-192-cfb, aes-256-cfb,
                                  aes-128-ctr, aes-192-ctr, aes-256-ctr,
                                  camellia-128-cfb, camellia-192-cfb,
                                  camellia-256-cfb, bf-cfb,
                                  chacha20-ietf-poly1305,
                                  xchacha20-ietf-poly1305,
                                  salsa20, chacha20 and chacha20-ietf.
                                  The default cipher is chacha20-ietf-poly1305.

       [-a <user>]                Run as another user.
       [-f <pid_file>]            The file path to store pid.
       [-t <timeout>]             Socket timeout in seconds.
       [-c <config_file>]         The path to config file.
       [-n <number>]              Max number of open files.
       [-b <local_address>]       Local address to bind.

       [-u]                       Enable UDP relay.
                                  TPROXY is required in redir mode.
       [-U]                       Enable UDP relay and disable TCP relay.

       [--reuse-port]             Enable port reuse.
       [--fast-open]              Enable TCP fast open.
                                  with Linux kernel > 3.7.0.
       [--mtu <MTU>]              MTU of your network interface.
       [--mptcp]                  Enable Multipath TCP on MPTCP Kernel.
       [--no-delay]               Enable TCP_NODELAY.
       [--key <key_in_base64>]    Key of your remote server.
       [--plugin <name>]          Enable SIP003 plugin. (Experimental)
       [--plugin-opts <options>]  Set SIP003 plugin options. (Experimental)

       [-v]                       Verbose mode.
       [-h, --help]               Print this message.

CB190R@RT-AC86U-3448:/tmp/home/root#

Acris commented

Thanks for your test, can you uninstall the previous version by ss-merlin uninstall, and reinstall the latest hnd version by the following command:

# For Broadcom HND ARM platform (RT-AC86U) and HND AX ARM (RT-AX88U)
sh -c "$(wget https://raw.githubusercontent.com/Acris/shadowsocks-asuswrt-merlin/hnd/tools/install.sh -O -)"

When the installation completed, test if it works functionally. Especially set the server address to a domain name instead of an IP, then see if there any error happens.

Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/root/.wget-hsts'. HSTS will be disabled.

This ERROR still occurs.

ASUSWRT-Merlin RT-AC86U 384.12-0 Fri Jun 21 21:25:52 UTC 2019
CB190R@RT-AC86U-3448:/tmp/home/root# clear
CB190R@RT-AC86U-3448:/tmp/home/root# ss-merlin uninstall
Are you sure you want to remove shadowsocks-ausuwrt-merlin? [y/N]y
 Stopping all services...
All service stopped.
 Cleaning iptables rules...
Clean iptables rule done.
 Deleting cron jobs...
 Removing packages...
Removing package unbound from root...
libunbound was autoinstalled and is now orphaned, removing.
Removing package libunbound from root...
Removing package haveged from root...
libhavege was autoinstalled and is now orphaned, removing.
Removing package libhavege from root...
 Deleting system links...
 Cleaning dnsmasq configuration file...

Done.
 Removing user scripts...
 Deleting shadowsocks-ausuwrt-merlin...
 Thanks for using shadowsocks-ausuwrt-merlin. It's been removed.
CB190R@RT-AC86U-3448:/tmp/home/root# sh -c "$(wget https://raw.githubusercontent
.com/Acris/shadowsocks-asuswrt-merlin/hnd/tools/install.sh -O -)"
Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/root/.wget-hsts'. HSTS will be disabled.
--2019-07-04 20:26:31--  https://raw.githubusercontent.com/Acris/shadowsocks-asuswrt-merlin/hnd/tools/install.sh
Resolving raw.githubusercontent.com... 151.101.228.133
Connecting to raw.githubusercontent.com|151.101.228.133|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3332 (3.3K) [text/plain]
Saving to: 'STDOUT'

-                   100%[===================>]   3.25K  --.-KB/s    in 0s

2019-07-04 20:26:32 (10.8 MB/s) - written to stdout [3332/3332]

 Checking installation environment...
git version 2.21.0
opkg version d4ba162bb3f931bd5a019154270a548cf1f0853b (2019-01-31)
 Installing required packages...
Downloading http://bin.entware.net/aarch64-k3.10/Packages.gz
Updated list of available packages in /opt/var/opkg-lists/entware
Installing haveged (1.9.4-1) to root...
Downloading http://bin.entware.net/aarch64-k3.10/haveged_1.9.4-1_aarch64-3.10.ipk
Installing libhavege (1.9.4-1) to root...
Downloading http://bin.entware.net/aarch64-k3.10/libhavege_1.9.4-1_aarch64-3.10.ipk
Installing unbound (1.9.1-3) to root...
Downloading http://bin.entware.net/aarch64-k3.10/unbound_1.9.1-3_aarch64-3.10.ipk
Installing libunbound (1.9.1-3) to root...
Downloading http://bin.entware.net/aarch64-k3.10/libunbound_1.9.1-3_aarch64-3.10.ipk
Package ipset (7.1-3) installed in root is up to date.
Package iptables (1.4.21-2a) installed in root is up to date.
Configuring libunbound.
Configuring libhavege.
Configuring haveged.
Configuring unbound.
 Starting haveged...              already running.
 Cloning shadowsocks-asuswrt-merlin...
Cloning into '/opt/share/ss-merlin'...
remote: Enumerating objects: 34, done.
remote: Counting objects: 100% (34/34), done.
remote: Compressing objects: 100% (29/29), done.
remote: Total 34 (delta 1), reused 13 (delta 0), pack-reused 0
Unpacking objects: 100% (34/34), done.
 Giving execute permissions...
 Updating IP and DNS whitelists...
Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/root/.wget-hsts'. HSTS will be disabled.
--2019-07-04 20:28:38--  https://ss-merlin.iloli.li/proxy-apnic/apnic/stats/apnic/delegated-apnic-latest
Resolving ss-merlin.iloli.li... 104.28.20.221, 104.28.21.221, 2606:4700:30::681c:15dd, ...
Connecting to ss-merlin.iloli.li|104.28.20.221|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/plain]
Saving to: 'STDOUT'

-                       [             <=>    ]   2.85M   772KB/s    in 3.8s

2019-07-04 20:28:46 (772 KB/s) - written to stdout [2984843]

Update IP whitelist done.
Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/root/.wget-hsts'. HSTS will be disabled.
--2019-07-04 20:28:46--  https://ss-merlin.iloli.li/proxy-github-raw/felixonmars/dnsmasq-china-list/master/accelerated-domains.china.conf
Resolving ss-merlin.iloli.li... 104.28.20.221, 104.28.21.221, 2606:4700:30::681c:15dd, ...
Connecting to ss-merlin.iloli.li|104.28.20.221|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/plain]
Saving to: '/opt/share/ss-merlin/etc/dnsmasq.d/accelerated-domains.china.conf.bak'

/opt/share/ss-merli     [       <=>          ]   2.18M  1.10MB/s    in 2.0s

2019-07-04 20:28:50 (1.10 MB/s) - '/opt/share/ss-merlin/etc/dnsmasq.d/accelerated-domains.china.conf.bak' saved [2282960]

Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/root/.wget-hsts'. HSTS will be disabled.
--2019-07-04 20:28:50--  https://ss-merlin.iloli.li/proxy-github-raw/felixonmars/dnsmasq-china-list/master/google.china.conf
Resolving ss-merlin.iloli.li... 104.28.21.221, 104.28.20.221, 2606:4700:30::681c:14dd, ...
Connecting to ss-merlin.iloli.li|104.28.21.221|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/plain]
Saving to: '/opt/share/ss-merlin/etc/dnsmasq.d/google.china.conf.bak'

/opt/share/ss-merli     [ <=>                ]   2.49K  --.-KB/s    in 0s

2019-07-04 20:28:52 (5.31 MB/s) - '/opt/share/ss-merlin/etc/dnsmasq.d/google.china.conf.bak' saved [2554]

Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/root/.wget-hsts'. HSTS will be disabled.
--2019-07-04 20:28:52--  https://ss-merlin.iloli.li/proxy-github-raw/felixonmars/dnsmasq-china-list/master/apple.china.conf
Resolving ss-merlin.iloli.li... 104.28.20.221, 104.28.21.221, 2606:4700:30::681c:15dd, ...
Connecting to ss-merlin.iloli.li|104.28.20.221|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/plain]
Saving to: '/opt/share/ss-merlin/etc/dnsmasq.d/apple.china.conf.bak'

/opt/share/ss-merli     [  <=>               ]   3.66K  3.61KB/s    in 1.0s

2019-07-04 20:28:55 (3.61 KB/s) - '/opt/share/ss-merlin/etc/dnsmasq.d/apple.china.conf.bak' saved [3746]

Update DNS whitelist done.
 Updating GFW list...
Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/root/.wget-hsts'. HSTS will be disabled.
--2019-07-04 20:28:55--  https://ss-merlin.iloli.li/proxy-github-cokebar/gfwlist2dnsmasq/dnsmasq_gfwlist_ipset.conf
Resolving ss-merlin.iloli.li... 104.28.21.221, 104.28.20.221, 2606:4700:30::681c:14dd, ...
Connecting to ss-merlin.iloli.li|104.28.21.221|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/plain]
Saving to: 'STDOUT'

-                       [     <=>            ] 363.27K   369KB/s    in 1.0s

2019-07-04 20:28:58 (369 KB/s) - written to stdout [371984]

Update GFW list done.
 Creating system links...
 Creating dnsmasq config file...
 Creating automatic upgrade cron jobs...

   ______           __                        __
  / __/ /  ___ ____/ /__ _    _____ ___  ____/ /__ ___
 _\ \/ _ \/ _ `/ _  / _ \ |/|/ (_-</ _ \/ __/  '_/(_-<
/___/_//_/\_,_/\_,_/\___/__,__/___/\___/\__/_/\_\/___/
                                   ...is now installed!

 Copy and edit your shadowsocks configuration file at: /opt/share/ss-merlin/etc/shadowsocks/config.sample.json
 and shadowsocks-asuswrt-merlin configuration file at: /opt/share/ss-merlin/etc/ss-merlin.sample.conf
Type ss-merlin to get all supported arguments.
Get more details and give us a feedback at https://github.com/Acris/shadowsocks-asuswrt-merlin.
CB190R@RT-AC86U-3448:/tmp/home/root#

The Acris SS-Merlin WORKS!!!
THANK YOU SO MUCH MY DEAR ACRIS! REALLY GREAT WORK!

CB190R@RT-AC86U-3448:/tmp/home/root# ss-merlin start
 Start shadowsocks-asuswrt-merlin...
Initializing dnsmasq...
Creating cron jobs...
 Creating post-mount task...
Applying iptables rules...
Applying localips ipset rule...
Apply iptables rule done.
Starting all services...
All service started.
Updating dnsmasq configuration file...

Done.
 Started.

It is ok to set the server address to a domain name. The ss-merlin can resolve the server IP properly.

 Start shadowsocks-asuswrt-merlin...
Initializing dnsmasq...
Creating cron jobs...
 Creating post-mount task...
Applying iptables rules...
Applying localips ipset rule...
Resolving server IP address...
Server IP address is X.X.X.X
Apply iptables rule done.
Starting all services...
All service started.
Updating dnsmasq configuration file...

Done.

Again, thank you Acris.
I would like to express my sincere thanks to you.
^_^.

Acris commented

Thank you too for your test. 😊