sing-box-yg: a five-protocol VPS install script from yonggekkk

What sing-box-yg installs and who it is aimed at

The repository ships two installers. sb.sh targets a normal VPS and, according to the README, sets up five protocols side by side: Vless-reality-vision, Vmess-ws (with TLS or through an Argo tunnel), Hysteria-2, Tuic-v5 and Anytls. serv00.sh targets Serv00 and Hostuno free hosting and installs three: vless-reality, vmess-ws over Argo, and hysteria2. The README describes the VPS script as a beginner mode where no domain certificate is needed and three Enter presses finish the installation, after which you copy or scan the node config you want.

The intended user is someone who has a VPS but not a certificate workflow. Reality means the Vless node borrows a TLS handshake from another site instead of presenting its own certificate, which is why the simple path can skip domain setup entirely. The README also states that the project generates subscription nodes locally and does not use node converters or third-party subscription links, so the subscription content is not visible to an external link author. That is a design position, not a security audit, and it only covers the generation step: the config still travels to whatever client you paste it into.

Two constraints are stated plainly. The script supports pure IPv6, pure IPv4 and dual-stack VPS, on amd and arm, and on Alpine, with the newest Ubuntu recommended. The Serv00 script carries a warning that using proxy scripts on the free Serv00 tier risks account suspension, while the paid Hostuno tier is described as unaffected, and it says not to mix it with other Serv00 scripts.

How the five protocols coexist under one menu

The repository is a Shell project. sb.sh is the entry point, and the top-level files sversion and version hold version strings, while sb.txt, sbwpph_amd64 and sbwpph_arm64 are the architecture-specific binaries the script pulls in. The README shows a single interactive interface with numbered choices, and the shortcut commands reveal the menu structure: choice 3 opens the node display, choice 5 opens domain routing, and the sub-choices under them select which tunnel or subscription to print. So the script is a menu wrapper around a sing-box core, not a service manager with a config file you edit by hand.

The Argo side is the part with the most moving pieces. The README distinguishes a temporary tunnel from a fixed tunnel and says they can coexist, and the Serv00 script is described as able to reset the temporary tunnel, keep the previous fixed tunnel, or replace the fixed tunnel's domain or token. Domain routing is a separate menu entry that takes a list of domain suffixes. The Psiphon feature is described as a local WARP plus Psiphon VPN switch with IPs from 30 countries, used for routing rather than as the transport itself.

The subscription output is the other half. The README says local IP subscriptions are generated and can be synced, and the video titles mention pushing a private subscription link to a self-hosted GitLab and feeding Clash, Mihomo, Sing-box and aggregated node lists. None of that is documented in the README beyond the command names, so the real explanation lives in the blog post and the video series linked from the repository.

Installing sing-box-yg on a VPS and printing your first subscription

The README gives two equivalent one-liners for the VPS script. Both download sb.sh and run it; the wget form is listed first. Run one of them as root on a fresh VPS, and the interactive menu appears.

bash <(wget -qO- https://raw.githubusercontent.com/yonggekkk/sing-box-yg/main/sb.sh)

The curl form is the alternative the README lists immediately after it.

bash <(curl -Ls https://raw.githubusercontent.com/yonggekkk/sing-box-yg/main/sb.sh)

After installation the shortcut sb opens the same menu, and the README documents non-interactive one-liners that pipe menu answers in. This one prints the local IP subscription; replace the password with the one the script generated for you.

printf '3\n8\n1\n订阅密码' | sb

The same pattern prints an Argo temporary tunnel, and a third variant takes a fixed tunnel key and domain as arguments.

printf '3\n3\n1\n1' | sb

For a fixed Argo tunnel the README passes the key and the domain on the same line. Domain routing uses menu path 5, then 2, then 1, followed by the suffixes you want split out.

printf '3\n3\n2\n1\n固定密钥\n固定域名' | sb

printf '5\n2\n1\n后缀域名1 后缀域名2' | sb

The Serv00 and Hostuno variant is a separate script with its own one-liner. The README warns not to combine it with other Serv00 scripts.

bash <(curl -Ls https://raw.githubusercontent.com/yonggekkk/sing-box-yg/main/serv00.sh)

What the README does not document

The README is a pointer to a blog post and a video series, not a manual. It does not document rollback, uninstall, how to change a protocol after installation, where the generated sing-box config is written, or which systemd unit or process supervisor keeps the core running. The version files sversion and version exist, but the README does not explain how the script uses them or how an upgrade is triggered. There is no changelog in the repository, and the single release, tagged singbox on 2025-02-19, predates the last push on 2026-09-15 by more than a year, so the tag does not describe the current sb.sh.

The Serv00 warning is the sharpest limitation. The README states that using proxy scripts on the free Serv00 tier risks losing the account, and that the paid Hostuno tier is not affected. That is an account-level risk, not a bug you can patch. The second limitation is environmental: the script installs a proxy stack and opens listening ports, so a provider that blocks outbound tunnels or inspects traffic will break the Argo and CDN paths regardless of what the script does. The third is language. Everything in the repository, from menu labels to the blog, is in Chinese, so anyone who cannot read it is working from the menu alone.

How it differs from Fscarmen/sing-box and eooce's Serv00 script

Fscarmen/sing-box and the eooce Serv00 script are the two names that come up alongside this one, and the difference is scope rather than quality. Fscarmen's project is a multi-protocol sing-box installer in the same genre, but sing-box-yg's distinguishing claim is the combination of an Argo temporary and fixed tunnel that can coexist, a certificate mode that switches between self-signed and acme, and the WARP plus Psiphon routing layer. Those three are described in the repository as its own features, so if you need exactly that mix, a general installer will not give it to you.

The Serv00 script is closer to eooce's. The README credits eooce and frankiejun directly and says the Serv00 variant adds default proxyip support for CF vless and trojan nodes, plus preferred reverse-proxy IPs on non-standard ports, and an aggregated node list that covers up to 22 nodes including 13 Argo ports. So the relationship is additive: it builds on the same foundation and layers on the IP selection. If you only want a single protocol on a VPS, none of these scripts is the right size; a hand-written sing-box config is shorter and easier to reason about than a menu with five protocols and three tunnel modes.

Licence, maintenance and what an upgrade costs you

The repository is GPL-3.0. Running the script on your own VPS is the ordinary use case and raises no distribution question. The licence matters if you repackage the script, ship it inside a product, or host it as a service for others: GPL-3.0 requires source availability and carries copyleft terms, and the README states that the code is assembled from the GitHub community and ChatGPT, which makes the provenance of individual functions worth checking before you redistribute any of it. This is a description of the licence, not legal advice.

Maintenance is the harder question. The last push was on 2026-09-15, so the repository is being touched, but the only release is dated 2025-02-19 and there is no changelog. In practice that means you cannot pin a version and expect it to mean anything: the one-liner always fetches the current sb.sh from the main branch, so every reinstall pulls whatever was pushed most recently. Upgrading is therefore the same command as installing, and there is no documented way to go back to a previous state. If you need reproducible deployments, clone the repository at a commit you have inspected and run the local copy instead of the raw URL.

Editorial conclusion

sing-box-yg suits someone with a fresh VPS who wants Vless-reality-vision, Vmess-ws, Hysteria-2, Tuic-v5 and Anytls running from one menu, and who is willing to read the blog post and videos because the in-repo README is a command list rather than documentation. It is the wrong tool if you need a maintained changelog, English documentation, or a supported upgrade path; the only release is dated 2025-02-19 while the last push was on 2026-09-15, so the tag and the code have drifted apart, and there is no documented rollback. Before adopting it, check the sb.sh script on your distribution, confirm that ports 443 and 80 are free, and decide whether you accept the Serv00 account-ban risk the README states for the free tier.

Frequently asked questions

Official sources

1. License: GPL-3.0
2. Project website
3. README
4. Releases
5. yonggekkk/sing-box-yg on GitHub