Method toggleRootLogin

ssh/ssh.ts:1117–1201

(msg: Api.Message, mode: string)

      
      // 重启SSH服务使配置生效
      const restartResult = await restartSSHService();
      if (!restartResult.success) {
        throw new Error("无法重启SSH服务");
      }
      
      // 保存配置到插件数据库
      await ConfigManager.set(CONFIG_KEYS.PUBKEY_AUTH, authValue);

      let warningText = "";
      if (!enable) {
        warningText = "\n\n⚠️ <b>警告</b>: 关闭密钥登录可能会造成无法使用SSH密钥连接";
      }

      await msg.edit({
        text: `✅ <b>密钥登录已${action}</b>\n\n当前状态: ${enable ? "✅ 已开启" : "❌ 已关闭"}\n备份文件: /etc/ssh/sshd_config.backup.${timestamp}${warningText}`,
        parseMode: "html"
      });
    } catch (error: any) {
      throw new Error(`${action}密钥登录失败: ${error.message}`);
    }
  }

  // 开关Root登录
  private async toggleRootLogin(msg: Api.Message, mode: string): Promise<void> {
    const enable = mode === "on" || mode === "enable" || mode === "yes";
    const disable = mode === "off" || mode === "disable" || mode === "no";
    const keyOnly = mode === "keyonly" || mode === "key-only" || mode === "keys";
    
    if (!enable && !disable && !keyOnly) {
      await msg.edit({
        text: `❌ <b>无效的参数</b>\n\n用法:\n• <code>${mainPrefix}ssh rootlogin on</code> - 允许所有root登录方式\n• <code>${mainPrefix}ssh rootlogin off</code> - 完全禁止root登录\n• <code>${mainPrefix}ssh rootlogin keyonly</code> - 仅允许密钥登录root`,
        parseMode: "html"
      });
      return;
    }

    let action: string;
    let authValue: string;
    
    if (enable) {
      action = "开启所有Root登录方式";
      authValue = "yes";
    } else if (keyOnly) {
      action = "设置Root仅密钥登录";
      authValue = "prohibit-password";
    } else {
      action = "完全禁止Root登录";
      authValue = "no";
    }

    await msg.edit({ text: `🔄 正在${action}...`, parseMode: "html" });

    try {
      // 检查当前是否有其他登录方式
      if (disable) {
        // 完全禁用root登录前检查是否有其他用户
        try {
          const { stdout: users } = await execFileAsync("getent", ["passwd"]);