notes
#Проверка файлов на одинаковые:
#Проверить и удалить двойные:
pi ~ $ fdupes -r -d -N /mnt/HD4/
#linux terminal games:
pi ~ $ sudo apt install bastet pacman4console nsnake greed moon-buggy
#Raspberry Login and Password:
Login: pi
Password: raspberry
#Raspberry config menu:
sudo raspi-config
#Зашифрованные пароли:
pi ~ $ sudo apt-get install apg -y
pi ~ $ apg -a 1 -m 128
#Настройка обновления одной строкой:
#Debian:
root ~ $ echo "alias sysupgrade='sudo apt-get update; sudo apt-get dist-upgrade -y'" >> ~/.bashrc
root ~ $ source ~/.bashrc
root ~ $ sysupgrade
#Centos:
root ~ $ echo "alias sysupgrade='sudo yum update -y'" >> ~/.bashrc
source ~/.bashrc
root ~ $ sysupgrade
#Manjaro:
echo "alias sysupgrade='sudo pacman -Syyu'" >> ~/.bashrc
source ~/.bashrc
sysupgrade
System Info:
pi ~ $ sudo inxi -Fxz
#Перечень дисков по uuid:
pi ~ $ ls -l /dev/disk/by-uuid/
#fstab монтирование со всеми зависимостями:
UUID=0F31-2878 /mnt/usb1 vfat auto,nofail,sync,users,rw,umask=777 0 0
#SSH:
#залить публичный ключ на сервер:
pi ~ $ scp ~/.ssh/id_rsa.pub root@192.168.0.21:~/.ssh/authorized_keys
#WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!:
pi ~ $ ssh-keygen -f "/root/.ssh/known_hosts" -R "192.168.0.2"
pi ~ $ ssh-keygen -R "you server hostname or ip" "
#scp ssh copy
scp -r root@137.240.0.0:/var/www root@138.76.0.0:/var/www
scp -r root@138.160.0.0:/var/www /home/rootone/www
rsync -avzrhe ssh --progress root@137.1.0.0:/var/www /home/rootone/www
#SSH /etc/ssh/ssh.config
Host dd
HostName 192.168.0.2
User root
Host dl
HostName 192.168.0.1
User root
#bash цвета
PS1='\[\e[0;32m\]\u\[\e[m\] \[\e[1;34m\]\w\[\e[m\] \[\e[1;32m\]\$\[\e[m\] \[\e[1;37m\]'
PS1="\[\e[32m\][\[\e[m\]\[\e[31m\]\u\[\e[m\]\[\e[33m\]@\[\e[m\]\[\e[32m\]\h\[\e[m\]:\[\e[36m\]\w\[\e[m\]\[\e[32m\]]\[\e[m\]\[\e[32;47m\]\\$\[\e[m\] "
PS1="[\[\e[1;34m\]$WINDOW\[\e[0m\]:\[\e[1;$UCOL\]\$(sens)\[\e[0m\]$SEP\u@\[\e[1;$ENV\]\h.$ENAME\[\e[0m\]:\[\e[1;31m\]\$(get_branch)\[\e[0m\] \w]\\$"
PS1=">\[\033[s\]\[\033[1;\$((COLUMNS-5))f\]\$(date +%H:%M)\[\033[u\]"
PS1="\[\033[38;5;39m\]\v\[$(tput sgr0)\]\[\033[38;5;15m\] \[$(tput sgr0)\]\[\033[38;5;83m\]\d\[$(tput sgr0)\]\[\033[38;5;15m\] \[$(tput sgr0)\]\[\033[38;5;201m\]\u\[$(tput sgr0)\]\[\033[38;5;196m\]@\[$(tput sgr0)\]\[\033[38;5;51m\]\H\[$(tput sgr0)\]\[\033[38;5;15m\] \[$(tput sgr0)\]\[\033[38;5;82m\]\l\[$(tput sgr0)\]\[\033[38;5;15m\]: \\$ \[$(tput sgr0)\]"
#TERMINAL 256 Colors
root ~ $ apt-get install ncurses-term
edit .bashrc - add this line the end:
Reload your .bashrc by typing
root ~ $ tput colors
#export term
export LANG=ru_RU.UTF-8
export LC_LANG=ru_RU.UTF-8
export LANGUAGE=ru_RU.UTF-8
export TERM=xterm-256color
export MANOPT="-L ru"
export EDITOR="/usr/bin/nano"
#proton vpn
pi ~ $ sudo apt install -y openvpn dialog python3-pip python3-setuptools
pi ~ $ sudo pip3 install protonvpn-cli
pi ~ $ sudo protonvpn init
pi ~ $ sudo protonvpn status
pi ~ $ sudo protonvpn c --cc [countrycode]
pi ~ $ sudo protonvpn c -f #(Connect to the fastest server)
pi ~ $ sudo protonvpn disconnect #(Disconnect the current session)
#weather in terminal
pi ~ $ curl wttr.in/Berlin
#samba
sudo apt install samba samba-common-bin smbclient cifs-utils
sudo sudo mkdir -m 1777 /home/pi/pishare
sudo nano /etc/samba/smb.conf
[global]
workgroup = WORKGROUP
netbios name = pi server
string = files pi
guest account = nobody
map to guest = Bad User
[files pi4]
comment = pi4
path = /home/pi/pishare
browseable = Yes
guest ok = Yes
public = yes
sudo smbpasswd -a pi
sudo /etc/init.d/samba restart
#internet speed test
pi ~ $ sudo speedtest-cli
#SSL Certificate
pi ~ $ cd /etc/ssl
pi ~ $ sudo openssl req -x509 -nodes -days 1096 -newkey rsa:2048 -keyout kamozin.de/pi.key -out kamozin.de/pi.crt
pi ~ $ sudo nano /etc/nginx/snippets/snakeoil.conf
pi ~ $ ssl_certificate /etc/ssl/kamozin.de/pi/.crt;
pi ~ $ ssl_certificate_key /etc/ssl/kamozin.de/pi/.key;
pi ~ $ sudo nano /etc/nginx/nginx.conf
pi ~ $ listen 443 ssl;
pi ~ $ listen [::]:443 ssl;
pi ~ $ include snippets/snakeoil.conf;
pi ~ $ cd /etc/ca-certificates/trust-source/anchors/
pi ~ $ cd /usr/share/ca-certificates/trust-source/
pi ~ $ cd /etc/ca-certificates/extracted/
pi ~ $ sudo trust extract-compat
#CRONTAB
pi ~ $ sudo crontab -e
Cписок заданий Crontab: pi ~ $ crontab -l
Ежедневно в 2 часа ночи: 0 2 * * * sudo apt update
Дважды в день: 0 5,17 * * * sudo apt upgrade
Каждую минуту: * * * * * ping kamozin.de
Каждое воскресенье в 17:00: 0 17 * * sun sudo apt update
Каждые 10 минут: */10 * * * * ping kamozin.de
Определенные месяцы: * * * jan,may,aug * ping kamozin.de
Определенные дни: 0 17 * * sun,fri ab -c 1000 -n 1000000 https://kamozin.de/
Каждые четыре часа: 0 */4 * * * sudo apt install apache2-utils
Несколько задач: * * * * * ping kamozin.de; ping kamozin.com
#SWAP ARENA:
pi ~ $ sudo fallocate -l 1G /swapfile
pi ~ $ sudo chmod 600 /swapfile
pi ~ $ sudo swapon /swapfile
pi ~ $ sudo nano /etc/fstab
/swapfile swap swap defaults 0 0
pi ~ $ sudo swapon --show
pi ~ $ cat /proc/sys/vm/swappiness
pi ~ $ sudo sysctl vm.swappiness=10
#RAID
pi ~ $ sudo apt install mdadm
mdadm --misc --zero-superblock /dev/drive
2-device RAID1 array: mdadm --create --verbose --level=1 --metadata=1.2 --raid-devices=2 /dev/md/MyRAID1Array /dev/sdb1 /dev/sdc1
RAID5 array with 4 active devices and 1 spare device: mdadm --create --verbose --level=5 --metadata=1.2 --chunk=256 --raid-devices=4 /dev/md/MyRAID5Array /dev/sdb1 /dev/sdc1 /dev/sdd1 /dev/sde1 --spare-devices=1 /dev/sdf1
RAID10,far2 array with 2 devices: mdadm --create --verbose --level=10 --metadata=1.2 --chunk=512 --raid-devices=2 --layout=f2 /dev/md/MyRAID10Array /dev/sdb1 /dev/sdc1
Check the progress with: cat /proc/mdstat
Assemble the array: mdadm --assemble --scan
Removing devices from an array: mdadm --remove /dev/md0 /dev/sdxx
#SUDO NO PASSWORD:
pi ~ $ sudo nano /etc/sudoers
root ALL=(ALL:ALL) ALL
%admin ALL=(ALL) ALL
rootone ALL=(ALL) NOPASSWD:ALL
pi ALL=(ALL) NOPASSWD:ALL
%sudo ALL=(ALL:ALL) ALL
rootone ALL=(ALL) NOPASSWD:ALL
#DNSSEC:
pi ~ $ sudo systemctl status systemd-resolved.service
pi ~ $ sudo systemd-resolve --status
pi ~ $ sudo nano /run/systemd/resolve/stub-resolv.conf
nameserver 127.0.0.53
options edns0 trust-ad
search Domains\061\126eno1
pi ~ $ sudo ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
pi ~ $ sudo nano /etc/systemd/resolved.conf
[Resolve]
DNS=1.1.1.1 1.0.0.1
FallbackDNS=2606:4700:4700::1111 2606:4700:4700::1001
Domains=Domains=~eno1
LLMNR=yes
MulticastDNS=yes
DNSSEC=allow-downgrade
DNSOverTLS=opportunistic
Cache=yes
DNSStubListener=yes
ReadEtcHosts=yes
pi ~ $sudo systemctl enable systemd-resolved.service
pi ~ $ sudo systemctl start systemd-resolved.service
pi ~ $ sudo systemctl restart systemd-networkd.service
pi ~ $ resolvectl status
#FSTAB:
UUID=1303-1981 /mnt/FOLDER vfat defaults,noatime,uid=1000,gid=1000 0 0