Hello!As you probably know, F5 closed Moscow office in 2022, and I no longer work for F5 since then. Still, we’ve reached an agreement that I will maintain my role in nginx development as a volunteer. And for almost two years I was working on improving nginx and making it better for everyone, for free.Unfortunately, some new non-technical management at F5 recently decided that they know better how to run open source projects. In particular, they decided to interfere with security policy nginx uses for years, ignoring both the policy and developers’ position.That’s quite understandable: they ...继续阅读 (46)

The Debian project is pleased to announce the fifth update of its stable distribution Debian 12 (codename bookworm). This point release mainly adds corrections for security issues, along with a few adjustments for serious problems. Security advisories have already been published separately and are referenced where available.Please note that the point release does not constitute a new version of Debian 12 but only updates some of the packages included. There is no need to throw away old bookworm media. After installation, packages can be upgraded to the current versions using an up-to-date Debi ...继续阅读 (76)

How long are the certificates you issue good for?By default all certificates issued by Google Trust Services are good for up to 90 days; however, ACME allows for clients to request certificates with different validity periods.more一、创建项目并申请EAB在https://console.cloud.google.com/创建一个项目，记录下项目id。1.进入Cloud Shell 执行如下命令gcloud projects add-iam-policy-binding 项目id \ --member=user:邮箱地址 \ --role=roles/publicca.externalAccountKeyCreator2.启用公共 CA APIgcloud services enable publicca.googleapis.com3.申请 EAB，并复制下来gcloud publicca external-account-keys create4.切换到生产环境gcloud config unset api_endpoint_overrides/publ ...继续阅读 (68)

What is frp?frp is a fast reverse proxy that allows you to expose a local server located behind a NAT or firewall to the Internet. It currently supports TCP and UDP, as well as HTTP and HTTPS protocols, enabling requests to be forwarded to internal services via domain name.frp also offers a P2P connect mode.more首先从官方取得程序包，Linux，Windows等。。。https://github.com/fatedier/frp/配置服务端frps.toml，同时监听TCP和UDP# This configuration file is for reference only. Please do not use this configuration directly to run the program as it may have various issues. # A literal address or host name for IPv6 must be enclo ...继续阅读 (78)

If enabled, SSL handshakes in the server block will be rejected.For example, in the following configuration, SSL handshakes with server names other than example.com are rejected:server { listen 443 ssl default_server; ssl_reject_handshake on; } server { listen 443 ssl; server_name example.com; ssl_certificate example.com.crt; ssl_certificate_key example.com.key; } ...继续阅读 (64)

Use the SecurityTrails API to fetch any domain, DNS, and IP-related data. Our easy-to-use API can help you enriching your datasets or adding value to your service:Manage infrastructure sprawl and find forgotten digital assetsSearch everything from one convenient placeMake the right call with comprehensive datasetsGet an accurate read on associated domainsFind key facts fast with curated and up-to-date dataSIGNUP FOR A FREE API KEYmorehttps://securitytrails.com/ ...继续阅读 (84)

The Debian project is pleased to announce the second update of its stable distribution Debian 12 (codename bookworm). This point release mainly adds corrections for security issues, along with a few adjustments for serious problems. Security advisories have already been published separately and are referenced where available.Please note that the point release does not constitute a new version of Debian 12 but only updates some of the packages included. There is no need to throw away old bookworm media. After installation, packages can be upgraded to the current versions using an up-to-date Deb ...继续阅读 (81)

June 10th, 2023After 1 year, 9 months, and 28 days of development, the Debian project is proud to present its new stable version 12 (code name "bookworm")."bookworm" will be supported for the next 5 years thanks to the combined work of the Debian Security team and the Debian Long Term Support team.https://www.debian.org/News/2023/20230610 ...继续阅读 (78)

Rspamd is an advanced spam filtering system and email processing framework that allows evaluation of messages by a number of rules including regular expressions, statistical analysis and custom services such as URL black lists. Each message is analysed by Rspamd and given a verdict that might be used by MTA for further processing (e.g. to reject a message, or add a special header indicating spam) along with other information, such as possible DKIM signature or modifications suggested for a message.Rspamd can act as a Milter allowing direct interaction with popular MTA systems, such as Postfix ...继续阅读 (77)

kexec是Linux内核的一种机制，它允许从当前运行的内核启动新内核。kexec会跳过由系统固件执行的引导加载程序阶段和硬件初始化阶段，直接将新内核加载到主内存并立即开始执行。这避免了与完全重新启动相关的漫长时间，并且可以通过最小化停机时间来帮助系统满足高可用性要求。moreDebian默认支持kexec，所以在Debian下我们只要安装kexec-tools就行了。apt install kexec-tools检查当前的内核banbroot@jp:~# uname -r 5.10.0-17-amd64查找目前可用的内核版本root@jp:~# ls /boot/vmlinuz-* /boot/vmlinuz-5.10.0-16-amd64 /boot/vmlinuz-5.10.0-17-amd64 /boot/vmlinuz-5.10.0-18-amd64这里最新的是 /boot/vmlinuz-5.10.0-18-amd64先查看当前内核5.10.0-17-amd64的引导参数root@jp:~# cat /boot/grub/grub.cfg | grep 5.10.0-17-amd64 echo 'Loading Linux 5.10.0-17-amd64 ...' linux /boot/vm ...继续阅读 (66)

以管理员身份运行Windows Powershell，然后运行如下命令：Schtasks /change /s localhost /tn "\Microsoft\Office\Office Feature Updates" /disable Schtasks /change /s localhost /tn "\Microsoft\Office\Office Feature Updates Logon" /disable ...继续阅读 (65)

通过https://customerconnect.vmware.com/patch下载最新补丁包，上传到数据存储，开启维护模式，通过SSH连接到ESXi检查当前版本，可以忽略[root@localhost:~] vmware -vl VMware ESXi 6.7.0 build-14320388 VMware ESXi 6.7.0 Update 3通过控制台寻找文件位置/vmfs/volumes/5d68042f-45d86544-d997-a0369f7517fc/VMware-ESXi-7.0U2d-18538813-depot.zip检索包信息，可以忽略esxcli software sources profile list -d /vmfs/volumes/5d68042f-45d86544-d997-a0369f7517fc/VMware-ESXi-7.0U2d-18538813-depot.zip执行升级，必须esxcli software profile update -d /vmfs/volumes/5d68042f-45d86544-d997-a0369f7517fc/VMware-ESXi-7.0U2d-18538813-depot.zip -p ESXi-7.0U2d-18538813-standard重启服务器，必须reboot重启完成后进入控制台退出维 ...继续阅读 (66)

ProcedureUbuntu, Debian, and Related OSesIf the VM has a GUI (X11, and so on), install or upgrade open-vm-tools-desktop:apt-get install open-vm-tools-desktopOtherwise, use the command to install open-vm-tools:apt-get install open-vm-toolsmore参考https://docs.vmware.com/en/VMware-Tools/11.3.0/com.vmware.vsphere.vmwaretools.doc/GUID-C48E1F14-240D-4DD1-8D4C-25B6EBE4BB0F.html ...继续阅读 (73)

编辑网络配置文件/etc/network/interfaces新增内容iface ens3 inet6 static address 2001:4860:4860:1111/112 gateway 2001:4860:4860::1 dns-nameservers 2001:4860:4860::8888 2001:4860:4860::8844重新载入网络配置/etc/init.d/networking reload ...继续阅读 (68)

After 2 years, 1 month, and 9 days of development, the Debian project is proud to present its new stable version 11 (code name "bullseye"), which will be supported for the next 5 years thanks to the combined work of the Debian Security team and the Debian Long Term Support team.从 Debian 11 “Bullseye” 开始，安全更新仓库名从 发行版代号/updates 更新为 发行版代号-security，详见Debian 11 (bullseye) 发行说明，请旧版本用户注意。 ...继续阅读 (65)

以ESXi 6.7为例,在web控制台开启SSH并登陆到SSH,需要转精简置备的机器要先关机进入需要转换的虚拟机目录后执行vmkfstools -i thick2thin.vmdk -d thin thin.vmdkthick2thin.vmdk 源文件,源文件不能选择含flat字样的VMDK文件thin.vmdk 产生的新文件完成转换后对磁盘空间进行回收,执行vmkfstools -K thin.vmdk核对一下文件大小du -sh thin.vmdk ...继续阅读 (67)

SpaceSniffer是一个免费软件和便携式工具应用程序，可让您了解磁盘上文件夹和文件的结构。通过使用 树图 可视化布局，您可以立即感知大文件夹和文件在设备上的放置位置。more下载地址:spacesniffer_1_3_0_2.zip ...继续阅读 (68)

使用命令行：REG EXPORT HKEY_CURRENT_USER\Software\SimonTatham SESSION.REG或者手工操作regedit：HKEY_CURRENT_USER\Software\SimonTatham将导出的文件在新电脑上直接双击导入即可。 ...继续阅读 (78)

make时候出现DTRACE-NOTFOUND: Command not foundcmake增加 -DENABLE_DTRACE=0出现 make[2]: *** [libmysqld/examples/mysql_client_test_embedded]cmake 增加 -DWITH_EMBEDDED_SERVER=0 ...继续阅读 (61)

MYSQL 备份用户权限需要以下权限:SELECT, RELOAD, SHOW DATABASES, LOCK TABLES, REPLICATION CLIENT, EVENT权限列表1.SELECT 读取2.SHOW DATABASES 允许访问完整的数据库列表4.LOCK TABLES 允许锁定表5.RELOAD 允许载入和刷新服务器缓存6.REPLICATION CLIENT 允许用户询问从属服务器或主服务器的地址7.EVENT 允许执行事务more参考 http://www.linuxhub.org/?p=2579 ...继续阅读 (73)

因为在软件源中要用到HTTPS进行传输，所以，首先安装apt-transport-https，否则会出现：E: The method driver /usr/lib/apt/methods/https could not be found.N: Is the package apt-transport-https installed?使用下面命令安装apt的ssl支持apt-get install apt-transport-https顺便分享几个SSL的源站https://mirrors.ustc.edu.cn/https://mirrors.aliyun.com/https://mirrors.tuna.tsinghua.edu.cn/ 似乎限速.... 不推荐用 ...继续阅读 (89)

使用管理员权限打开CMD,执行如下命令secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose具体参考 https://support.microsoft.com/en-us/help/313222/ ...继续阅读 (65)

阿里云的标配套件,然而,我并不需要,我选择了毁灭!方法如下wget http://update.aegis.aliyun.com/download/uninstall.shchmod +x uninstall.sh./uninstall.sh ...继续阅读 (66)

LNMP无法删除或更改权限，显示：rm: cannot remove `.user.ini': Operation not permitted无法删除“.user.ini”文件解决方法,运行后删除即可chattr -i /home/wwwroot/yoursite/.user.ini如果是需要修改文件，记得修改完以后运行：chattr +i /home/wwwroot/yoursite/.user.ini ...继续阅读 (90)

首先得把软件包给安装上去apt-get install mutt msmtp配置msmtp指定邮箱帐号密码nano ~/.msmtprcaccount defaultmorehost smtp.163.comfrom xxx@163.comauth loginuser xxx@163.compassword xxxxxxlogfile ~/msmtp.log配置mutt通过msmtp发信nano ~/.muttrcset sendmail="/usr/bin/msmtp"set use_from=yesset realname="闲人"set from=866134@163.comset envelope_from=yesset charset="utf-8"set send_charset="utf-8"set locale = "zh_CN.UTF-8"set content_type = "text/html\;charset=utf-8"测试发送echo "hello world" | mutt -s "邮件标题" test@qq.com如果其他问题,查阅~/msmtp.log即可 ...继续阅读 (69)

首先得把软件包给安装上去apt-get install mutt msmtp配置msmtp指定邮箱帐号密码nano ~/.msmtprcaccount defaultmorehost smtp.163.comfrom xxx@163.comauth loginuser xxx@163.compassword xxxxxxlogfile ~/msmtp.log配置mutt通过msmtp发信nano ~/.muttrcset sendmail="/usr/bin/msmtp"set use_from=yesset realname="闲人"set from=866134@163.comset envelope_from=yesset charset="utf-8"set send_charset="utf-8"set locale = "zh_CN.UTF-8"set content_type = "text/html\;charset=utf-8"测试发送echo "hello world" | mutt -s "邮件标题" test@qq.com如果其他问题,查阅~/msmtp.log即可 ...继续阅读 (79)

查看初始内存free -m切换至内存目录cd /dev/shm进行数据写入，标识 count=100 为写入100M，这里在服务商提供的标识数据内，自行进行数据增长dd if=/dev/zero of=./memtest bs=1M count=100完成后，执行删除rm ./memtest ...继续阅读 (68)

查看初始内存free -m切换至内存目录cd /dev/shm进行数据写入，标识 count=100 为写入100M，这里在服务商提供的标识数据内，自行进行数据增长dd if=/dev/zero of=./memtest bs=1M count=100完成后，执行删除rm ./memtest ...继续阅读 (77)

1、厚置备延迟置零（zeroed thick）以默认的厚格式创建虚拟磁盘。创建过程中为虚拟磁盘分配所需空间。创建时不会擦除物理设备上保留的任何数据，但是以后从虚拟机首次执行写操作时会按需要将其置零。简单的说就是立刻分配指定大小的空间，空间内数据暂时不清空，以后按需清空。2、厚置备置零（eager zeroed thick）创建支持群集功能（如 Fault Tolerance）的厚磁盘。在创建时为虚拟磁盘分配所需的空间。与平面格式相反，在创建过程中会将物理设备上保留的数据置零。创建这种格式的磁盘所需的时间可能会比创建其他类型的磁盘长。简单的说就是立刻分配指定大小的空间，并将该空间内所有数据清空。3、精简置备（thin）使用精简置备格式。最初，精简置备的磁盘只使用该磁盘最初所需要的数据存储空间。如果以后精简磁盘需要更多空间，则它可以增长到为其分配的最大容量。简单的说就是为该磁盘文件指定增长的最大空间，需要增长的时候检查是否超过限额。 ...继续阅读 (66)

1、厚置备延迟置零（zeroed thick）以默认的厚格式创建虚拟磁盘。创建过程中为虚拟磁盘分配所需空间。创建时不会擦除物理设备上保留的任何数据，但是以后从虚拟机首次执行写操作时会按需要将其置零。简单的说就是立刻分配指定大小的空间，空间内数据暂时不清空，以后按需清空。2、厚置备置零（eager zeroed thick）创建支持群集功能（如 Fault Tolerance）的厚磁盘。在创建时为虚拟磁盘分配所需的空间。与平面格式相反，在创建过程中会将物理设备上保留的数据置零。创建这种格式的磁盘所需的时间可能会比创建其他类型的磁盘长。简单的说就是立刻分配指定大小的空间，并将该空间内所有数据清空。3、精简置备（thin）使用精简置备格式。最初，精简置备的磁盘只使用该磁盘最初所需要的数据存储空间。如果以后精简磁盘需要更多空间，则它可以增长到为其分配的最大容量。简单的说就是为该磁盘文件指定增长的最大空间，需要增长的时候检查是否超过限额。 ...继续阅读 (72)