分类目录归档：Linux Development

acme.sh with Google SSL certificate

发表于由

Acme.sh issue SSL certificate with Google

Install acme.sh

    sudo su
    source ~/env.sh
    env|grep proxy|grep http

    curl https://get.acme.sh|sh
    exit
    sudo su
    source ~/env.sh
    source /root/.acme.sh/acme.sh.env
    acme.sh --set-default-ca --server google

Generae EAB:

# Must install Google Cloud SDK first
gcloud publicca external-account-keys create

Register Account:

acme.sh --register-account -m admin@zhenglei.net --server google --eab-kid "your KeyId" --eab-hmac-key "your b64MacKey"

Issue:

sudo su
   
   # Stop services listen 80/443 port
   #/opt/local/etc/init.d/openresty stop
  
   source ~/env.sh
   source /root/.acme.sh/acme.sh.env

   # Only have IP v6 public Address
   acme.sh  --issue  -d blog.zhenglei.net  --standalone --listen-v6
Install Google Cloud SDK on Debian system

Install Google Cloud SDK on Debian system

发表于由

Install google-cloud-cli

sudo su

source ~/proxy.sh
env|grep proxy|grep http

apt-get update
apt-get install apt-transport-https ca-certificates gnupg  curl socat

curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | gpg --dearmor -o /usr/share/keyrings/cloud.google.gpg

echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" | tee -a /etc/apt/sources.list.d/google-cloud-sdk.list

apt-get update
apt install google-cloud-cli
gcloud init

Install music-tag-web on debian system

发表于由

Remote debian system

ssh remote.zhenglei.net
sudo su
docker pull xhongc/music_tag_web:latest
docker images
docker save -o music_tag_web.tar  xhongc/music_tag_web:latest

Local debian system

ssh local.zhenglei.net
scp remote.zhenglei.net:/${YOUR_PATH}/remote.zhenglei.net .
sudo su
docker load < music_tag_web.tar
docker image ls

Launch

sudo su
./music_tag_web.sh

cat music_tag_web.sh

#!/bin/bash
PORT=8001:8001
DATA=/Music
CFG=/docker/music/config

MTAG=xhongc/music_tag_web:latest

if [ ! -d ${CFG} ];then
  mkdir -p ${CFG}
fi

if [ ! -d ${DATA} ];then
  mkdir -p ${DATA}
fi

docker run -d -p ${PORT} -v ${DATA}:/app/media -v ${CFG}:/app/data --restart=always ${MTAG}

Verify

http://yor_ip:8001

default login: admin:admin

Stop

sudo su
docker stats
docker stop  $(docker ps -q)

Install ffmpeg

sudo apt-get instgall ffmpeg
which ffmpeg
# cd ${CFG}/bin
cd /docker/music/config/bin
sudo ln /usr/bin/ffmpeg

Install docker on Debian

发表于由 
sudo apt update

sudo apt upgrade

sudo apt install apt-transport-https ca-certificates curl software-properties-common gnupg2

curl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key add -

sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/debian $(lsb_release -cs) stable"

sudo apt update
sudo apt install docker-ce


sudo usermod -aG docker $USER

给家中的服务器, 分配 IPv6公网地址

发表于由

条件:

中国电信光猫, Openwrt 路由器, 阿里云域名

Step 1: 路由器升级, 最新版 OpenWrt / 23.05.03

Step 2: 从电信获得 宽带帐号/宽带密码

Step 3: 设置光猫为Bridge 模式

Step 4: 路由器 Lan 接口 IPv4 地址设置为 10.0.0.1

Step 5: 路由器 Wan 接口 修改为 PPPoE 模式, PAP/CHAP username/password 填入从电信获得的　宽带帐号／宽带密码

Step 6: 因为PPPoE 拨号会同时获得 IPv4 和 IPv6地址，wan6 接口没用，删除wan6接口

Step 7: 重起wan接口，会自动拨号，若成功，自动增加wan_6虚拟接口，IPv6 和IPv6-PD

Step 8: 修改Lan接口Advanced Setting：

Delegate IPv6 prefixes = yes

IPv6 assignment length = 60

IPv6 prefix filter = wan_6

Step 9: 修改路由器 network/dhcp/Static Leases, 为每个IPv6公网网卡增加一项纪录：

包括: Hostname, Mac 地址，IPv4，IPv6-Suffix，

为方便记忆，我选择 IPv4 最后一栏与IPv6-Suffix 相同，

比如，mpd IPv4=10.0.0.222, mpd的IPv6-Suffix 设置为0222

Step 10： 根据应用需要，修改基于端口的防火墙：Network/Firewall/TrafficRules 增加纪录

至此，路由器设置完毕

域名更新

由于每次拨号，都会获得一个不同的IPv6-PD值

可以使用脚本程序，监控路由器中的IPv6-PD值，若有变化，调用域名服务商的API接口，更新IPv6值

https://github.com/zhengleic/ddns-aliyun

存在问题：

发现重新拨号，IPv6-PD变化后，应用服务器可以自动获得新的IPv6，并访问外部网络，但无法从外部网络访问应用服务器

原因不详， 应用服务器为Debian 10

解决办法：

更新域名后，同时将应用服务器的网卡down/up一次: ifdown dev / ifup dev

NAS DIY: HP ML310e Gen8 V2 + TrueNas v13

发表于由

Hardware:

HP ML310e Gen8 V2

Update system software with SPP gen8.1

Update iLO4 to v2.8.1

CPU:

E3-1220L V3 @1.10GHz

RAM:

32G ECC DDR3 @1.35V / 1066MHz

System Disk:

32G T-Flash Card + 32G USB Disk

Hrad disk drivers

6 LFF SATA

Software:

TruenNAS – Core – 13.0 – U2

Power Consumption

28W ( Without hard driver )

TCO: RMB 1326.8

HP ML310e Gen8 V2 X1 638

Samsung 8G 2RX8 PC3-12800E X4 397

Intel E3-1220L V3 X1 130

SanDisk 32GB USB3.1 CZ430 X1 35.9

SanDisk Ultra 64GB Micro SD X1 35.9

Toolfree MRA190 5.25=>3.5 X2 90

Update iLO4 to the latest version

发表于由

To have HTML5 console supported in ILO4, we must to update iLO4 to the new version on HP ML310e Gen8 V2

Go to the HPE support center: support.hpe.com

Search iLO4

Select HPE Integrated Lights-Out 4 (iLO 4)

Select Driver and Software

Download ilO4 2.81 of Online ROM Flash Component for Windows x64 – HPE Integrated Lights-Out 4 —— cp051874.exe

Execute the cp051874.exe under windows, extract the firmware bin file, instead of install

Launch a browser, such as firefox, and login into the iLO4 of ML310e Gen8 V2

Go to Administration / Firmware, select the download bin file, and updating

Deploy draw.io app website on local LAN

发表于由

Create a new ESXi host with 2G RAM/ 20G disk, Debian 10

# Install java JRE

sudo apt install openjdk-11-jre
java –version

# Install apache ant

wget https://downloads.apache.org/ant/binaries/apache-ant-1.10.12-bin.tar.xz
tar xvfJ apache-ant-1.10.12-bin.tar.xz
sudo mv apache-ant-1.10.12/ /usr/local/ant
sudo bash -c ” cat >>/etc/profile ” << EOF
ANT_HOME=”/usr/local/ant”
PATH=”$PATH:/usr/local/ant/bin”
export ANT_HOME
export PATH
EOF
source /etc/profile
ant –version

# Install Tomcat

sudo apt-get install tomcat9 tomcat9-admin

http://127.0.0.1:8080/
http://${SERVER_IP}:8080/
ls -l /var/lib/tomcat9/webapps/ROOT/

# Build drawio, war package

wget https://github.com/jgraph/drawio/archive/refs/tags/v17.1.3.tar.gz
tar xvfz v17.1.3.tar.gz
cd drawio-17.1.3
( cd etc/build && ant war )

# Install drwaio

sudo cp build/draw.war /var/lib/tomcat9/webapps

http://127.0.0.1:8080/draw
http://${SERVER_IP}:8080/draw

# Change draw as the root of tomcat

cd /var/lib/tomcat9/webapps
sudo rm -rf ROOT
sudo mv draw.war ROOT.war

http://127.0.0.1:8080
http://${SERVER_IP}:8080

# Change tomcat to the http default port: 80

sudo grep 8080 /etc/tomcat9/*
sudo sed -i “s/8080/80/g” /etc/tomcat9/server.xml

http://127.0.0.1
http://${SERVER_IP}