魔のkyo的BLOG

server-id               = 1
log_bin                 = /var/log/mysql/mysql-bin.log
expire_logs_days        = 10
max_binlog_size         = 100M
binlog_do_db            = test  # 需要写binlog的数据库
binlog_ignore_db        = mysql # 不需要写binlog的数据库
# binlog_do_db和binlog_ignore_db可以仅指定一项，也可以都不指定，都不指定则全部写binlog

server-id               = 2
log_bin                 = /var/log/mysql/mysql-bin.log
expire_logs_days        = 10
max_binlog_size         = 100M
#binlog_do_db           = include_database_name
#binlog_ignore_db       = include_database_name
replicate-do-db         = test    #需要同步的数据库
replicate-ignore-db     = mysql    #不同步系统数据库
super_read_only         = 1
read_only               = 1

cd /data/dbbackup/20221009
cat xtrabackup_binlog_info

CHANGE MASTER TO
MASTER_HOST='192.168.1.140',
MASTER_USER='repl',
MASTER_PASSWORD='4Bd9x25ERcacAqwX',
MASTER_LOG_FILE='mysql-bin.000891',
MASTER_LOG_POS=408016029;

START SLAVE;

Slave_IO_Running: Yes
Slave_SQL_Running: Yes
Seconds_Behind_Master: 0

docker run --restart=always --network host -d -v /etc/frp/frps.ini:/etc/frp/frps.ini --name frps snowdreamtech/frps

[common]
# 监听端口
bind_port = 7000
# 面板端口
dashboard_port = 7500
# 登录面板账号设置
dashboard_user = admin
dashboard_pwd = password
# 设置http及https协议下代理端口
vhost_http_port = 7080
vhost_https_port = 7443
# 子域名配置
subdomain_host = frp.kyo86.com
# 身份验证
token = 随意填一些字符

[common]
server_addr = 服务器IP
server_port = 7000
# 身份验证
token = 与服务端frps.ini中保存一致

[jenkins]
type = http
local_ip = 127.0.0.1
local_port = 8080
use_encryption = false
use_compression = false
subdomain = jenkins

[joplin]
type = tcp
local_ip = 127.0.0.1
local_port = 22300
route_port = 22300
use_encryption = false
use_compression = false

frpc http -n 代理名称 -s frp服务器地址:frp服务器端口 -l 本地端口 --sd 子域名 -t TOKEN
frpc tcp -n 代理名称 -s frp服务器地址:frp服务器端口 -l 本地端口 -r 远程端口 -t TOKEN
frpc udp -n 代理名称 -s frp服务器地址:frp服务器端口 -l 本地端口 -r 远程端口 -t TOKEN

docker run -u root --privileged -p 8080:8080 -p 50000:50000 -h jenkins --name=jenkins --restart=on-failure\
  -v /etc/localtime:/etc/localtime\
  -v jenkins_home:/var/jenkins_home\
  -v /root:/root\
  -v /mnt:/mnt\
  jenkins/jenkins:lts-jdk11

docker restart jenkins

curl -w %{http_code} -u <用户名>:<API_TOKEN> http://<JENKINS_URL>/job/<PROJECT>/build?token=<PROJ_TOKEN>

rsync -av --delete --exclude-from=exclude.lst --stop-after=240 源路径/ 目标路径/

--exclude-from=exclude.lst

test
*_test
test.*
*_test.*

--stop-after=240

[user@]HOST[:PORT]:/path/

rsync://[USER@]HOST[:PORT]/MODULE/path/

use chroot = false
max connections = 0
syslog facility = deamon
log file = /var/log/rsyncd.log
pid file = /var/run/rsyncd.pid

[database]
path = /data/data_manager/database
comment = database
strict modes = false
read only = 1
list = no

# ifupdown has been replaced by netplan(5) on this system.  See
# /etc/netplan for current configuration.
# To re-enable ifupdown on this system, you can run:
#    sudo apt install ifupdown

ifconfig enp2s0 up

network:
    renderer: networkd
    ethernets:
        enp2s0:
            dhcp4: no
            addresses:
            - 192.168.1.10/24
            gateway4: 192.168.1.1
            nameservers:
                addresses:
                - 114.114.114.114
                - 8.8.8.8
                search: []
    version: 2

netplan apply

ifconfig enp2s0 up

network:
    renderer: networkd
    ethernets:
        enp2s0:
            dhcp4: yes
    version: 2

netplan apply

apt update && apt install -y wpasupplicant network-manager

ifconfig enp2s0 down
ifconfig wlp3s0 up

network:
    renderer: NetworkManager
    ethernets:
        wlp3s0:
            dhcp4: no
            addresses:
            - 192.168.1.10/24
            gateway4: 192.168.1.1
            nameservers:
                addresses:
                - 114.114.114.114
                - 8.8.8.8
                search: []
            access-points:
                "WIFI名称":
                    password: "WIFI密码"
    version: 2

sudo netplan generate
sudo netplan apply

network:
    renderer: NetworkManager
    ethernets:
        wlp3s0:
            dhcp4: yes
            access-points:
                "WIFI名称":
                    password: "WIFI密码"
    version: 2

ifconfig <网口号> <IP地址> netmask <子网掩码>

ifconfig eth0 192.168.1.141 netmask 255.255.255.0

ip addr add 192.168.1.141/24 dev eth0

route add default gw 192.168.1.1

netstat -rn

route -n

ip route

ip route add 192.168.10.0/24 via 192.168.1.99

dhclient

netstat -anp

netstat -anp|grep <port>

telnet <ip> <port>

nc -v <ip> <port>

apt update && apt install -y iproute2 iputils-ping net-tools

docker pull kylemanna/openvpn

OVPN_DATA="ovpn-data-example"

docker volume create --name $OVPN_DATA
docker run -v $OVPN_DATA:/etc/openvpn --rm kylemanna/openvpn ovpn_genconfig -u udp://VPN.SERVERNAME.COM
docker run -v $OVPN_DATA:/etc/openvpn --rm -it kylemanna/openvpn ovpn_initpki

docker run --name=openvpn -v $OVPN_DATA:/etc/openvpn -d -p 1194:1194/udp --cap-add=NET_ADMIN kylemanna/openvpn

docker run -v $OVPN_DATA:/etc/openvpn --rm -it kylemanna/openvpn easyrsa build-client-full CLIENTNAME nopass

docker run -v $OVPN_DATA:/etc/openvpn --rm kylemanna/openvpn ovpn_getclient CLIENTNAME > CLIENTNAME.ovpn

docker volume inspect ovpn-data-example

rm ***/_data/pki/private/CLIENTNAME.key

vim ***/_data/pki/index.txt

route-nopull
route-metric 150
route remote_host 255.255.255.255 net_gateway
route 172.19.0.0 255.255.0.0 net_gateway
route 192.168.1.0 255.255.0.0 vpn_gateway

# redirect-gateway def1

#push "block-outside-dns"

declare -x OVPN_DISABLE_PUSH_BLOCK_DNS=1

apt -y install openvpn

service openvpn stop

systemctl disable openvpn

openvpn --daemon --config CLIENTNAME.ovpn

apt install inotify-tools

sysctl -w fs.inotify.max_user_watches="1000000"

cat /proc/sys/fs/inotify/max_user_watches

inotifywait 3.14
Wait for a particular event on a file or set of files.
Usage: inotifywait [ options ] file1 [ file2 ] [ file3 ] [ ... ]
Options:
        -h|--help       Show this help text.
        @<file>         Exclude the specified file from being watched.
        --exclude <pattern>
                        Exclude all events on files matching the
                        extended regular expression <pattern>.
        --excludei <pattern>
                        Like --exclude but case insensitive.
        -m|--monitor    Keep listening for events forever.  Without
                        this option, inotifywait will exit after one
                        event is received.
        -d|--daemon     Same as --monitor, except run in the background
                        logging events to a file specified by --outfile.
                        Implies --syslog.
        -r|--recursive  Watch directories recursively.
        --fromfile <file>
                        Read files to watch from <file> or `-' for stdin.
        -o|--outfile <file>
                        Print events to <file> rather than stdout.
        -s|--syslog     Send errors to syslog rather than stderr.
        -q|--quiet      Print less (only print events).
        -qq             Print nothing (not even events).
        --format <fmt>  Print using a specified printf-like format
                        string; read the man page for more details.
        --timefmt <fmt> strftime-compatible format string for use with
                        %T in --format string.
        -c|--csv        Print events in CSV format.
        -t|--timeout <seconds>
                        When listening for a single event, time out after
                        waiting for an event for <seconds> seconds.
                        If <seconds> is 0, inotifywait will never time out.
        -e|--event <event1> [ -e|--event <event2> ... ]
                Listen for specific event(s).  If omitted, all events are
                listened for.

Exit status:
        0  -  An event you asked to watch for was received.
        1  -  An event you did not ask to watch for was received
              (usually delete_self or unmount), or some error occurred.
        2  -  The --timeout option was given and no events occurred
              in the specified interval of time.

Events:
        access          file or directory contents were read
        modify          file or directory contents were written
        attrib          file or directory attributes changed
        close_write     file or directory closed, after being opened in
                        writable mode
        close_nowrite   file or directory closed, after being opened in
                        read-only mode
        close           file or directory closed, regardless of read/write mode
        open            file or directory opened
        moved_to        file or directory moved to watched directory
        moved_from      file or directory moved from watched directory
        move            file or directory moved to or from watched directory
        create          file or directory created within watched directory
        delete          file or directory deleted within watched directory
        delete_self     file or directory was deleted
        unmount         file system containing file or directory unmounted

/data *(insecure,ro,async,all_squash,root_squash,no_subtree_check)

/data 192.168.1.123(insecure,rw,sync,all_squash,root_squash,no_subtree_check) 192.168.1.124(insecure,rw,sync,all_squash,root_squash,no_subtree_check)

mount 172.17.0.2:/data <挂载点>

useradd samba

smbpasswd -a samba

[data]
   comment = Shared Data
   path = /data             # 共享路径
   workgroup = WORKGROUP    # 和WINDOWS工作组一致，从局域网内其他WINDOWS系统的属性可以看到
   public = yes             # 是否允许游客访问
   guest account = nobody   # 游客用户
   browseable = yes         # 是否允许列出文件
   writable = yes           # 是否可写
   write list = samba       # 具有写权限的用户（多用户空格分割）
   create mask = 0777       # 创建文件时赋权，相当于执行chmod
   directory mask = 0777
   force user = nobody      # 创建文件时强制所有者，相当于执行chown
   force group = nogroup

mount //172.17.0.2/data <挂载点> -ouser=guest,pass=

mount //172.17.0.2/data <挂载点> -ouser=samba,pass=<密码>

net use X: \\172.17.0.2\data <密码> /user:samba

执行用时：
12 ms, 在所有 C++ 提交中击败了100.00%的用户
内存消耗：
11.6 MB, 在所有 C++ 提交中击败了82.61%的用户
通过测试用例：
36 / 36