git clone https://github.com/kalcaddle/kodbox.git chmod -Rf 777 ./kodbox/*要php支持 bu shu部署设置很简单. ...继续阅读 (79)

[] user = $pool group = $pool listen = /var/run/php-fpm-$pool.sock listen.owner = nginx listen.group = nginx pm = dynamic pm.max_children = 5 pm.start_servers = 2 pm.min_spare_servers = 1 pm.max_spare_servers = 3 pm.status_path = /php-fpm-status ping.path = /php-fpm-ping access.log = /home/www/$pool/chroot/log/php-fpm-pool.log slowlog = /home/www/$pool/chroot/log/php-fpm-slow.log request_slowlog_timeout = 15s request_terminate_timeout = 20s chroot = /home/www/$pool/chroot/ chdir = / ; Flags & limits php_flag[display_errors] = off php_admin_flag[log_errors] = on php_admin_flag[expose_ph ...继续阅读 (95)

php7的最后一个版本在centos9上由于openssl新版本不兼容了, 得安装低版本的openssl才能安装先安装旧版本的libersslwget https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.0.tar.gz -O - | tar xz cd libressl-3.6.0 ./configure--prefix=/usr/local/liberssl make check make install./configure --prefix=/opt/php7/usr --with-openssl=/usr/local/liberssl/bin --with-openssl-dir=/usr/local/liberssl/bin然后测试编译php7.4发现一大堆的错误, MMP, 还是直接用remi源安装吧.dnf install -y http://rpms.remirepo.net/enterprise/remi-release-9.rpm dnf -y --enablerepo=remi install php74* --skip-broken ln -s /etc/opt/remi/php74/ /opt/php7 echo "zend_extension='/opt/ioncube/ioncube ...继续阅读 (77)

curl https://get.acme.sh | sh -s email=kevin@kvm.la source ~/.bashrc openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048 acme(){ DOMAIN="$1"; acme.sh --issue -d $1 --nginx /etc/nginx/conf/$DOMAIN.conf \ --key-file /etc/nginx/ssl/$DOMAIN.key \ --fullchain-file /etc/nginx/ssl/$DOMAIN.crt \ --reloadcmd "nginx -s reload" --force } acmeupdate(){ DOMAIN="$1"; acme.sh --renew -d $DOMAIN --ecc --force } ...继续阅读 (90)

addfpm() { if [ ! -n "$1" ]; then username="newuser"; else prefix=$1; fi if [ ! -n "$2" ]; then prefix="/opt/php8"; else prefix=$2; fi useradd -r -s /bin/nologin $username cat>$prefix/etc/php-fpm.d/$username.conf继续阅读 (83)

解决办法:update-crypto-policies --set LEGACY rpm --import https://openresty.org/package/pubkey.gpg或者是dnf带上 --nogpgcheck参数dnf install -y --nogpgcheck openresty把gpgcheck检查去掉也行.sed -i 's/gpgcheck=1/gpgcheck=0/g' /etc/yum.repos.d/openresty.repo 没导入时候报错提示GPG Keys are configured as: https://openresty.org/package/pubkey.gpgError: GPG check FAILED当导入时候的错误提示warning: Signature not supported. Hash algorithm SHA1 not available.error: https://openresty.org/package/pubkey.gpg: key 1 import failed总结:更新update-crypto-policies设置文章内容源自:https://www.redhat.com/en/blog/rhel-security-sha-1-package-signatures-distrusted ...继续阅读 (96)

设置通电自动开机sudo pmset autorestart 1取消自动开机sudo pmset repeat cancel设置定时自动开机和关机sudo pmset repeat wakeorpoweron MTWRF 9:00:00 shutdown MTWRFSU 18:30:00 ...继续阅读 (96)

对于小白可以安装一个cockpit, ssh被玩死了上不去的时候可以通过浏览器访问9090端口进入操作终端.dnf install -y cockpit systemctl start cockpit如果管理的服务器比较多, 还能串联管理. ...继续阅读 (83)

对于绑定了很多IP遇上暴力破解ssh之类的, 用iptables封IP会比较慢.用ip route把对方IP段丢路由黑洞封掉会立竿见影.ip route add blackhole 10.0.0.0/24 ...继续阅读 (71)

最近安装php发现编译失败, 搜索一圈后发现软件包仓库改crb去了,稍微改一下脚本判断就解决了.dnf --enablerepo=crb install libzip-devel oniguruma-develhttps://mirror.stream.centos.org/9-stream/CRB/x86_64/os/Packages/ 另外libc-client-devel的包暂时也没找到, 用remi的源安装uw-imap-devel替代解决了.dnf install -y http://rpms.remirepo.net/enterprise/remi-release-9.rpm dnf -y --enablerepo=remi install uw-imap-devel ...继续阅读 (94)

IP="168.192.in-addr.arpa 10.10.in-addr.arpa "; for list in $IP do pdnsutil create-zone $list ns1.server.com pdnsutil add-record $list @ NS ns2.server.com pdnsutil replace-rrset $list . SOA 'ns1.server.com. ns2.server.com. 0 10800 3600 604800 3600' pdnsutil increase-serial $list done for i in {0..255}; do for o in {0..255}; do pdnsutil add-record 168.192.in-addr.arpa $o.$i PTR test.example.com done; done; ...继续阅读 (114)

whmcs自定义模版调用login.tpl模版报错Error: Error: Call to a member function getButtonClass() on null inError: Error: Call to a member function isEnabled() on null in 主要问题在$captcha上, {if $captcha->isEnabled()} 和{$captcha->getButtonClass($captchaForm)}自定义php文件里面引入一下Captcha()类就解决了.$smartyvalues["captcha"] = new WHMCS\Utility\Captcha(); ...继续阅读 (91)

官方指引:https://wiki.samba.org/index.php/Configure_Samba_to_Work_Better_with_Mac_OS_Xsmb.conf配置后TimeMachine直接可以备份数据.[Global] vfs objects = fruit streams_xattr fruit:metadata = stream fruit:model = MacSamba fruit:posix_rename = yes fruit:veto_appledouble = no fruit:nfs_aces = no fruit:wipe_intentionally_left_blank_rfork = yes fruit:delete_empty_adfiles = yes [TimeMachineBackup] fruit:time machine = yes # fruit:time machine max size = SIZE 不用再设置什么虚拟磁盘进行挂载了, 当airport一样用. ...继续阅读 (112)

https://lg.he.net/https://lg.sgix.sghttps://www.cogentco.com/en/looking-glasshttps://www.cmi.chinamobile.com/en/looking-glasshttps://lg.ibeo.hgc-intl.com/https://lg.ix.br/https://lg.ntt.lt/https://www.gin.ntt.net/looking-glass/https://lookingglass.consoleconnect.com/https://lookingglass.centurylink.com/http://lg.level3carrier.com/lg/lg.cgihttps://lg.telia.net/https://lg.twelve99.net/https://ipms.chinatelecomglobal.com/public/lookglass/lookglassDisclaimer.html?lang=zh_CN ...继续阅读 (97)

个人经验1.RAID5/6 如同泡水的卫生纸, 出了问题的时候碎得渣, 很难救.2.仅次于比RAID0安全一点点,安全性低于RAID13. RAID5/6掉盘或者迁移主机, 恢复慢导入硬盘慢容易崩.4.RAID50 RAID60 没用过不评价.最后总结: 一块盘或者一块以上, 数据无所谓要空间和速度组RAID0就无所谓;两块盘要安全首选RAID1, 低成本安全储存方案;只有三块硬盘的时候建议追加一块, 跨入最低门槛用四块硬盘直接组RAID10, 兼顾安全和速度以及一半硬盘的容量,换阵列卡或者迁移到其他机箱, 导入快rebuild同步快, 掉了一块盘即使跑半年也不用担心坏. ...继续阅读 (107)

#composer require stripe/stripe-phpphp require_once('vendor/autoload.php'); Stripe\Stripe::setApiKey('sk_test_51zX1hSDCA8Q8MfjPdZLR7oFRlQeJQ1z1W1SoguoffuZbu2WfHyliWa3BAXie3ma45UAgIkQ369cR4bnRNSCh2e6200nbfrbxQb'); $source = Stripe\Source::create(["type" ="wechat", "amount" => 20000,'currency' => 'usd', "metadata" => ["invoice_id" => 'test'], 'redirect'=> [ 'return_url'=>'https://www.xxx.host/callback.php?id=260040&amount;=8120¤cy;=cny' ] ]); ?> 返回二维码连接 [status] => pending [type] => wechat [usage] => single_use [wechat] => Stripe\StripeObject Object ( ...继续阅读 (101)

首先是超微的一些资料 获取登陆信息的数据SESSION_ID=$(curl -s "http://${HOST}/cgi/login.cgi" --data "name=${IPMI_USER}&pwd;=${IPMI_PASS}" -i | awk '/SID=[^;]/ { print $2 }') 操作电源选项接口信息 (抓取地址https://xxxxx.xxxx.xxx/cgi/url_redirect.cgi?url_name=man_chassis) url = '../cgi/ipmi.cgi'; pars = '?SET_POWER_INFO.XML=(1,0)&time;_stamp=' + (new Date ());电源状态判断 currentPwrStatus == 0 status Power Off [...] ...继续阅读 (99)

官方下载没了http://datahack.se/datastore/xvatool/xvatool-1.1.tar.gz ,只能从github上克隆. 原文出处https://docs.onapp.com/mg/migration-from-xenserveryum install make git gcc git clone https://github.com/mindo/xvatool cd xvatool cmake . make make install安装后就可以解压tar后开始合并文件变成raw了.cd /tmp mkdir /tmp/VM1 tar -xf vm1.xva -C /tmp/VM1 chmod -R 755 VM1 xvatool -p disk-export VM1/Ref\:X/ disk.raw ...继续阅读 (107)

由于frp客户端没有指定出口网卡或者ip设置只能临时解决方案useradd frp IP=出口IP UserID=`id -u frp` iptables -t mangle -A OUTPUT -m owner --uid-owner $UserID -j MARK --set-mark $UserID iptables -t nat -A POSTROUTING -m mark --mark $UserID -j SNAT --to-source $IP用iptables绑定uid指定出口IP ...继续阅读 (103)

时间久了怕记不住, 还得写文本 esxi的 boot.cfg要把/斜杠剔除掉, 才能ipxe安装xenserver安装引导内核没有dns参数, ipxe的源地址只能ip地址不能用域名.或者xenserver版本信息在iso目录下的 .treeinfo 文件里面# cat .treeinfo [platform] name = XCP version = 2.4.0 [branding] name = XenServer version = 7.3.0 [build] number = release/inverness/master/15 [keys] key1 = RPM-GPG-KEY-XS-7-LCM key2 = RPM-GPG-KEY-XS-7 key3 = RPM-GPG-KEY-Platform-V1 windows识别iso需要wimtools命令#wiminfo sources/install.wim | grep -vE "Boot|Description"|grep -A2 "Index:"|awk -F: '{print $2 }'|sed 's/[\t ]\+/ /g' ...继续阅读 (78)

apt install grub-imageboot 官方版和netboot版本或者是其他自己的版本都可以自己选址. mkdir /boot/images wget http://boot.ipxe.org/ipxe.iso -O /boot/images/ipxe.iso #wget https://boot.netboot.xyz/ipxe/netboot.xyz.iso -O /boot/images/ipxe.iso # Update GRUB menu to include this ISO update-grub2 reboot ...继续阅读 (84)

#下载内核映像 wget -q http://boot.ipxe.org/ipxe.lkrn -O /boot/ipxe.lkrn #运行shell脚本 cat>/boot/boot.ipxe继续阅读 (106)

官方原文https://next-terminal.typesafe.cn/docs/install/native-install.html整理后可以直接安装, 不用那么费事.大量管理ssh或者rdp的时候, 中心化管理比较方便.#安装各种需要的工具包 yum install -y epel-release yum install -y tcpdump net-tools vim mtr git tar yum install -y libguac-client-kubernetes libguac-client-rdp libguac-client-ssh libguac-client-telnet libguac-client-vnc guacd fontconfig mkfontscale #下载已编译好的最新版本 wget https://github.com/dushixiang/next-terminal/releases/latest/download/next-terminal.tar.gz -O -| tar xz -C /usr/local/; #更新所需要的字体 cd /usr/share/fonts/ wget https://gitee.com/dushixiang/next-terminal/raw/master/guacd/fonts/Menl ...继续阅读 (83)

systemctl stop rpcbind systemctl stop rpcbind.socket systemctl disable rpcbind systemctl disable rpcbind.socket ...继续阅读 (85)

原文:https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/configuring-ip-tunnels_configuring-and-managing-networking 创建隧道, 模式ipip, 接口名tun0 , 附带参数可以加-- ip-tunnel.mtu 1500 ip-tunnel.ttl 255nmcli connection add type ip-tunnel ip-tunnel.mode ipip con-name tun0 ifname tun0 remote 198.51.100.5 local 203.0.113.10 nmcli connection modify tun0 ipv4.addresses '10.0.1.1/30' #给tun0设置互联IP nmcli connection modify tun0 ipv4.method manual #设置网口为手动 nmcli connection up tun0 #启用tun0隧道B端设置一样,改变下互联IP. nmcli connection modify tun0 +ipv4.routes "1 ...继续阅读 (98)

CCNIC镜像站 : https://mirrors.cnnic.cn/中科院软件所智能软件研究中心开源镜像站：https://mirror.iscas.ac.cn/清华大学：https://mirrors.tuna.tsinghua.edu.cn/北京大学：https://mirrors.pku.edu.cn/北京外国语大学：https://mirrors.bfsu.edu.cn/北京理工大学：https://mirrors.bit.edu.cn/web/北京交通大学：https://mirror.bjtu.edu.cn/北京邮电大学开源软件镜像站：https://mirrors.bupt.edu.cn/高能物理研究所：http://mirror.ihep.ac.cn/浙江大学：http://mirrors.zju.edu.cn/上海交通大学：https://mirrors.sjtug.sjtu.edu.cn/ https://mirror.sjtu.edu.cn/中国科学技术大学：https://mirrors.ustc.edu.cn/南方科技大学：https://mirrors.sustech.edu.cn/华南农业大学：https://mirrors.scau.edu.cn/山东大学：https://mirrors.sdu.edu.cn/山东女子学院开源软件镜像站: ht ...继续阅读 (125)

1 Transit 过境 juniper设备第一次进入console口必须配置密码2 help reference 命令显示相关配置选项的完整列表以及特定于命令语句的其他几个详细信息3 ctrl+b 将光标向左移动一个字符4 ctrl+a 将光标移动到命令行的开头5 ctrl+f 将光标向右移动一个字符6 ctrl+e 将光标移动到命令行的末尾7 delete/backspace 删除光标前的字符8 ctrl+d 删除光标上的字符9 ctrl+k 从光标删除到行尾10 ctrl+u 删除所有字符并取消当前命令11 ctrl+w 删除光标左侧的整个单词12 ctrl+i 重绘当前行13 ctrl+p/ctrl+n 分别在命令历史记录中重复上一个和下一个命令14 Esc+d 删除右侧的单词15 Esc+b 将光标移回一个没有删除的单词16 Esc+f 将光标向前移动一个字17 show | |显示过滤输出18 compare（filename|rollback n） 仅在配置模式下使用show命令。将配置更改与其他配置文件进行比较。[...] ...继续阅读 (107)

ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_dsa_key ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key ssh-keygen -t ed25519 -f /etc/ssh/ssh_host_ed25519_key ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key /usr/sbin/sshd ...继续阅读 (100)

最近在折腾ipxe安装系统,iso里面获取系统的版本选择手动有点麻烦, 找了下wimlib实现dism的一些功能, 记录一下wimtools源码安装记录.官方网站https://wimlib.net/安装前提需要准备好编译环境以及ntfs-3g-devel(自己想办法)yum install fuse-devel git -y git clone git://wimlib.net/wimlib cd wimlib ./bootstrap ./configure 安装好后在目录/usr/local/bin/下可以看到命令全部.# ls /usr/local/bin/wim*/usr/local/bin/wimappend /usr/local/bin/wimextract /usr/local/bin/wimoptimize/usr/local/bin/wimapply /usr/local/bin/wiminfo /usr/local/bin/wimsplit/usr/local/bin/wimcapture /usr/local/bin/wimjoin /usr/local/bin/wimunmount/usr/local/bin/wimdelete /usr/local/bin/wimlib-imagex /usr/loca ...继续阅读 (95)

Centos6 安装pf_ringcd /etc/yum.repos.d/wget http://packages.ntop.org/centos/ntop.repo -O ntop.repowget https://copr.fedoraproject.org/coprs/saltstack/zeromq4/repo/epel-6/saltstack-zeromq4-epel-6.reporpm -ivh http://packages.ntop.org/rpm6/extra/hiredis-0.10.1-3.el6.x86_64.rpm http://packages.ntop.org/rpm6/extra/hiredis-devel-0.10.1-3.el6.x86_64.rpmyum install -y epel-releaseyum erase zeromq3 #(Do this once to make sure zeromq3 is not installed)yum clean allyum updateyum install pfring n2disk nprobe ntopng ntopng-data centoCentos7 安装pf_ringyum install -y epel-releaseyum erase zeromq3 #(Do ...继续阅读 (84)