311 lines
7.0 KiB
Markdown
311 lines
7.0 KiB
Markdown
### Python
|
||
|
||
`pip install xxx -i https://pypi.tuna.tsinghua.edu.cn/simple`
|
||
|
||
mirrors:
|
||
- https://pypi.tuna.tsinghua.edu.cn/simple
|
||
- https://mirrors.aliyun.com/pypi/simple/
|
||
|
||
|
||
### RDMA
|
||
|
||
`ibstat`
|
||
`ibv_devinfo`
|
||
|
||
`lspci | grep -i mellanox` (`apt install pciutils`)
|
||
|
||
`wget https://content.mellanox.com/ofed/MLNX_OFED-24.10-2.1.8.0/MLNX_OFED_LINUX-24.10-2.1.8.0-ubuntu24.04-x86_64.tgz`
|
||
`./mlnxofedinstall --user-space-only --without-fw-update --distro ubuntu24.04 --force`
|
||
[MLNX_OFED Download Center](https://network.nvidia.com/products/infiniband-drivers/linux/mlnx_ofed/)
|
||
|
||
`ib_send_bw <server_ip> --report_gbits`
|
||
|
||
|
||
|
||
### Linux
|
||
|
||
`cat /etc/os-release`
|
||
`cat /proc/cpuinfo`
|
||
|
||
|
||
|
||
### uv
|
||
|
||
`curl -LsSf https://astral.sh/uv/install.sh | sh`
|
||
`uv self update`
|
||
|
||
|
||
|
||
## docker
|
||
|
||
`docker system info` 来得到 config 配置
|
||
|
||
`/etc/docker/daemon.json` 内配置：
|
||
|
||
``` json
|
||
{
|
||
"proxies": {
|
||
"http-proxy": "http://ipads:ipads123@202.120.40.82:11235",
|
||
"https-proxy": "http://ipads:ipads123@202.120.40.82:11235"
|
||
}
|
||
}
|
||
```
|
||
|
||
|
||
|
||
## Proxy
|
||
|
||
```
|
||
p="http://127.0.0.1:7890"
|
||
p="http://gahow:Jiahao_4465_proxy@47.83.188.3:9118"
|
||
p="http://gahow:Jiahao_13387_proxy@47.245.13.144:12358"
|
||
```
|
||
|
||
server: tiny proxy
|
||
|
||
```
|
||
sudo apt install tinyproxy -y
|
||
sudo vim /etc/tinyproxy/tinyproxy.conf
|
||
sudo systemctl restart tinyproxy
|
||
```
|
||
|
||
|
||
trojan
|
||
|
||
```
|
||
trojan -c trojan_server.json
|
||
```
|
||
|
||
trojan_server.json
|
||
|
||
```json
|
||
{
|
||
"run_type": "server",
|
||
"local_addr": "0.0.0.0",
|
||
"local_port": 12358,
|
||
"remote_addr": "127.0.0.1",
|
||
"remote_port": 80,
|
||
"password": [
|
||
"Jiahao_4465_trojan_proxy"
|
||
],
|
||
"log_level": 1,
|
||
"ssl": {
|
||
"cert": "/home/gahow/ca/certificate.crt",
|
||
"key": "/home/gahow/ca/privkey.key",
|
||
"key_password": "",
|
||
"cipher": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384",
|
||
"cipher_tls13": "TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384",
|
||
"prefer_server_cipher": true,
|
||
"alpn": [
|
||
"http/1.1"
|
||
],
|
||
"alpn_port_override": {
|
||
"h2": 81
|
||
},
|
||
"reuse_session": true,
|
||
"session_ticket": false,
|
||
"session_timeout": 600,
|
||
"plain_http_response": "",
|
||
"curves": "",
|
||
"dhparam": ""
|
||
},
|
||
"tcp": {
|
||
"prefer_ipv4": false,
|
||
"no_delay": true,
|
||
"keep_alive": true,
|
||
"reuse_port": false,
|
||
"fast_open": false,
|
||
"fast_open_qlen": 20
|
||
},
|
||
"mysql": {
|
||
"enabled": false,
|
||
"server_addr": "127.0.0.1",
|
||
"server_port": 3306,
|
||
"database": "trojan",
|
||
"username": "trojan",
|
||
"password": "",
|
||
"key": "",
|
||
"cert": "",
|
||
"ca": ""
|
||
}
|
||
}
|
||
```
|
||
|
||
trojan_client.json
|
||
|
||
```json
|
||
{
|
||
"run_type": "client",
|
||
"local_addr": "127.0.0.1",
|
||
"local_port": 1080,
|
||
"remote_addr": "47.245.13.144",
|
||
"remote_port": 12358,
|
||
"password": [
|
||
"Jiahao_13387_trojan_proxy"
|
||
],
|
||
"log_level": 1,
|
||
"ssl": {
|
||
"verify": false,
|
||
"verify_hostname": true,
|
||
"cert": "",
|
||
"cipher": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA",
|
||
"cipher_tls13": "TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384",
|
||
"sni": "",
|
||
"alpn": [
|
||
"h2",
|
||
"http/1.1"
|
||
],
|
||
"reuse_session": true,
|
||
"session_ticket": false,
|
||
"curves": ""
|
||
},
|
||
"tcp": {
|
||
"no_delay": true,
|
||
"keep_alive": true,
|
||
"reuse_port": false,
|
||
"fast_open": false,
|
||
"fast_open_qlen": 20
|
||
},
|
||
"forward_proxy": {
|
||
"enabled": true,
|
||
"listen_addr": "127.0.0.1",
|
||
"listen_port": 3128
|
||
}
|
||
}
|
||
```
|
||
|
||
|
||
http to socks5h
|
||
```bash
|
||
sudo apt update
|
||
sudo apt install privoxy -y
|
||
sudo vim /etc/privoxy/config
|
||
|
||
# add some lines:
|
||
# listen-address 127.0.0.1:7890
|
||
# forward-socks5t / 127.0.0.1:1080 .
|
||
|
||
sudo privoxy /etc/privoxy/config
|
||
```
|
||
|
||
|
||
## Mount
|
||
|
||
`mount_webdav`, `umount`
|
||
|
||
|
||
## IP
|
||
|
||
`curl ipinfo.io / curl ip-api.com`
|
||
|
||
|
||
|
||
## Model download
|
||
|
||
`uvx modelscope download --model Qwen/Qwen3-VL-8B-Instruct --local_dir ./Qwen3-VL-8B-Instruct`
|
||
|
||
|
||
|
||
## Self signed ca
|
||
|
||
```bash
|
||
# 进入 root（如果你已经是 root 可跳过）
|
||
# sudo -i
|
||
|
||
# 创建目录并进入
|
||
mkdir -p /root/ca
|
||
cd /root/ca
|
||
chmod 700 /root/ca
|
||
|
||
# ---------- A. 生成 CA（根证书） ----------
|
||
# 生成 CA 私钥（4096 bits）
|
||
openssl genrsa -out /root/ca/ca.key 4096
|
||
|
||
# 生成自签 CA 根证书（有效期 10 年 => 3650 天）
|
||
openssl req -x509 -new -nodes -key /root/ca/ca.key \
|
||
-sha256 -days 3650 -out /root/ca/ca.crt \
|
||
-subj "/C=CN/ST=Shanghai/L=Shanghai/O=MyOrg/OU=MyUnit/CN=MyLocalCA"
|
||
|
||
chmod 600 /root/ca/ca.key
|
||
chmod 644 /root/ca/ca.crt
|
||
|
||
# ---------- B. 生成服务器私钥与 CSR（包含 SAN 配置） ----------
|
||
# 服务器私钥（2048 bits）
|
||
openssl genrsa -out /root/ca/privkey.key 2048
|
||
chmod 600 /root/ca/privkey.key
|
||
|
||
# 生成用于 CSR 的配置文件（内含 SAN）
|
||
cat > /root/ca/server.csr.cnf <<'EOF'
|
||
[req]
|
||
default_bits = 2048
|
||
prompt = no
|
||
default_md = sha256
|
||
distinguished_name = dn
|
||
req_extensions = req_ext
|
||
|
||
[dn]
|
||
C=CN
|
||
ST=Shanghai
|
||
L=Shanghai
|
||
O=MyOrg
|
||
OU=MyUnit
|
||
CN = my.example.com
|
||
|
||
[req_ext]
|
||
subjectAltName = @alt_names
|
||
|
||
[alt_names]
|
||
DNS.1 = my.example.com
|
||
DNS.2 = localhost
|
||
IP.1 = 127.0.0.1
|
||
EOF
|
||
|
||
# 生成 CSR
|
||
openssl req -new -key /root/ca/privkey.key -out /root/ca/server.csr -config /root/ca/server.csr.cnf
|
||
|
||
# ---------- C. 用 CA 签发服务器证书（包含 SAN） ----------
|
||
# v3 扩展文件（可复用）
|
||
cat > /root/ca/v3.ext <<'EOF'
|
||
authorityKeyIdentifier=keyid,issuer
|
||
basicConstraints=CA:FALSE
|
||
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
|
||
subjectAltName = @alt_names
|
||
|
||
[alt_names]
|
||
DNS.1 = my.example.com
|
||
DNS.2 = localhost
|
||
IP.1 = 127.0.0.1
|
||
EOF
|
||
|
||
# 用 CA 签发（有效期 1 年 = 365 天），-CAcreateserial 会生成 /root/ca/ca.srl
|
||
openssl x509 -req -in /root/ca/server.csr -CA /root/ca/ca.crt -CAkey /root/ca/ca.key \
|
||
-CAcreateserial -out /root/ca/certificate.crt -days 365 -sha256 -extfile /root/ca/v3.ext
|
||
|
||
chmod 644 /root/ca/certificate.crt
|
||
|
||
# ---------- 可选：合并为一个 PEM（某些软件需要） ----------
|
||
cat /root/ca/privkey.key /root/ca/certificate.crt > /root/ca/server.pem
|
||
chmod 600 /root/ca/server.pem
|
||
|
||
# 输出结果路径
|
||
echo "生成完成："
|
||
echo " CA 根证书: /root/ca/ca.crt"
|
||
echo " CA 私钥 : /root/ca/ca.key"
|
||
echo " 服务器私钥: /root/ca/privkey.key"
|
||
echo " 服务器证书: /root/ca/certificate.crt"
|
||
echo " 合并 PEM : /root/ca/server.pem (可选)"
|
||
echo " CA serial : /root/ca/ca.srl"
|
||
```
|
||
|
||
|
||
修复 apt
|
||
|
||
```bash
|
||
sudo dpkg --remove --force-depends x11-utils zutty
|
||
|
||
sudo apt --fix-broken install
|
||
sudo dpkg --configure -a
|
||
|
||
sudo apt update
|
||
sudo apt install -y --no-install-recommends bubblewrap
|
||
``` |