The post first appeared on EQblog.

将旧的CentOS系统上的lxc环境迁移至Proxmox VE环境下

旧的系统上需要的操作

备份rootfs目录如：

cd containers/containersname/rootfs  && tar -czvf xxx.tar.gz ./

Proxmox VE需要操作如下：

#提前创建rootfs硬盘 这里已挂载的lvm硬盘为例 目录为 /var/lib/vz/images
mkdir -p /var/lib/vz/images/100
qemu-img create -f raw /var/lib/vz/images/100/vm-100-disk-0.raw 100G
#创建VM并导入备份 请修改password后的changeme

pct create 100 /var/lib/vz/template/cache/xxx.tar.gz -description LXC -hostname pvecontainer01 -memory 1024 -nameserver 8.8.8.8 -storage local -password changeme  --rootfs local:100

导入后即可，在实际操作过程中，导入后系统可正常进入，但一些目录权限会出现问题，需要进行手动修复。

后记：

mysql的权限折腾了很久，整个文件夹里的文件都给了权限但依然不能正常工作，直到给了文件夹权限，参考报错：

mysqld: File './mysql-bin.~rec~' not found (Errcode: 13 - Permission denied)

实际应该为文件夹无权限它无法创建文件？

参考来源：https://forum.proxmox.com/threads/migrating-plain-unprivileged-lxc-container-to-proxmoxs-ones.58648/

The post 记一次LXC迁移 first appeared on EQblog.

racadm set idrac.webserver.HostHeaderCheck 0

来自：https://serverfault.com/questions/1129118/why-i-cannot-access-idrac9-remotely

The post Dell IDRAC 反代无法访问解决办法 first appeared on EQblog.

nxos3:

feature interface-vlan
feature lacp
feature vpc

vlan 10
name VPC10

interface Vlan10
no shutdown
no ip redirects
ip address 10.0.0.3/24
no ipv6 redirects

interface port-channel1
switchport mode trunk
spanning-tree port type network
vpc peer-link

interface port-channel10
switchport mode trunk
switchport trunk allowed vlan 10
vpc 10

interface Ethernet1/1
  switchport mode trunk
  channel-group 1 mode active

interface Ethernet1/2
  switchport mode trunk
  channel-group 1 mode active

interface Ethernet1/3
  no switchport
  ip address 34.1.3.0/31
  no shutdown

interface Ethernet1/7
  switchport mode trunk
  switchport trunk allowed vlan 10
  channel-group 10

nxos4:

feature interface-vlan
feature lacp
feature vpc

vlan 10
name VPC10

interface Vlan10
no shutdown
no ip redirects
ip address 10.0.0.4/24
no ipv6 redirects

interface port-channel1
switchport mode trunk
spanning-tree port type network
vpc peer-link

interface port-channel10
switchport mode trunk
switchport trunk allowed vlan 10
vpc 10

interface Ethernet1/1
  switchport mode trunk
  channel-group 1 mode active

interface Ethernet1/2
  switchport mode trunk
  channel-group 1 mode active

interface Ethernet1/3
  no switchport
  ip address 34.1.3.1/31
  no shutdown

interface Ethernet1/6
  switchport mode trunk
  switchport trunk allowed vlan 10
  channel-group 10

nxos5:

feature interface-vlan
feature lacp

vlan 10
  name VPC10

interface Vlan10
  no shutdown
  ip address 10.0.0.5/24

interface port-channel10
  switchport mode trunk
  switchport trunk allowed vlan 10


interface Ethernet1/6
  switchport mode trunk
  switchport trunk allowed vlan 10
  channel-group 10

interface Ethernet1/7
  switchport mode trunk
  switchport trunk allowed vlan 10
  channel-group 10

The post A simple Cisco vPC example in N9k first appeared on EQblog.

入手了一台华为的RH 2288H v3，发现不能使用NVME引导，买了块廉价的SATA SSD当启动盘后发现很缓慢，不知道是不是前面的硬盘背板有问题。由于折腾太久SATA SSD还不能正常使用，而且手头正好有NVME硬盘就想到了能不能其它方式来引导。

使用Clover引导还是非常方便的，我是采用了U盘作为服务器的引导盘

Clover ISO下载地址：https://github.com/CloverHackyColor/CloverBootloader/releases

可以使用Rufus进行刻录：https://rufus.ie/en/

刻录完成后，需要对刻录好的U盘进行一些操作，默认是不支持引导NVME

将刻录好的U盘直接插入电脑，进入U盘的目录：EFI/CLOVER/driver/off

将 NvmExpressDxe.efi 文件复制到 EFI/CLOVER/drivers/BIOS 与 EFI/CLOVER/drivers/UEFI 即可

The post 使用Clover引导NVME first appeared on EQblog.

来源：https://forum.proxmox.com/threads/proxmox-gui-session-timeout.46583/post-490228

The post Proxmox VE WEB GUI Session Timeout 过快 first appeared on EQblog.

起因，家里的网络最近莫名其妙的开始阻断，恢复时间不等，故做了简单的网络备份，此篇文章进行相关记录

1.网络结构

backup 1 node(10.2.0.1)——————–|
(10.1.0.3)                                                |
|                                                              |
| (proxy ip 10.0.0.1/32)                     (10.2.0.2)
proxy main node(10.1.0.1)—-(10.1.0.2)home
|                                                         (10.3.0.2)
|                                                               |
(10.1.0.4)                                                 |
backup 2 node (10.3.0.1)——————–|

2.简单运行逻辑

所有备份的节点需要和proxy main node和home连接（笔者使用wireguard连接），同时建立bgp时，启用rr（路由反射），启用bfd

proxy main node宣告路由10.0.0.1/32，启用bfd

home设置backup node路由权重（此处使用weight属性），启用bfd

设置完成后，当proxy main node与home的链路出现问题，将会毫秒级切换至其他backup node至proxy main node。

3.配置过程

proxy main node:

bfd
profile bgpcheck
detect-multiplier 2
exit
!
exit
router bgp 59598
 neighbor 10.1.0.2 remote-as 59598
 neighbor 10.1.0.2 bfd profile bgpcheck
 neighbor 10.1.0.3 remote-as 59598
 neighbor 10.1.0.4 remote-as 59598

backup 1 node:

bfd
 profile bgpcheck
  detect-multiplier 2
 exit
 !
exit
router bgp 59598
 neighbor 10.1.0.1 remote-as 59598
 neighbor 10.2.0.2 remote-as 59598
 neighbor 10.2.0.2 bfd profile bgpcheck
 address-family ipv4 unicast
  neighbor 10.2.0.2 route-reflector-client
 exit-address-family
exit

backup 2 node:

bfd
 profile bgpcheck
  detect-multiplier 2
 exit
 !
exit
router bgp 59598
 neighbor 10.1.0.1 remote-as 59598
 neighbor 10.3.0.2 remote-as 59598
 neighbor 10.3.0.2 bfd profile bgpcheck
 address-family ipv4 unicast
  neighbor 10.3.0.2 route-reflector-client
 exit-address-family
exit

home:

bfd
 profile bgpcheck
  detect-multiplier 2
 exit
 !
exit
route-map main-node-in permit 10
 set ip next-hop peer-address
 set weight 1000
exit
route-map backup-1-node-in permit 10
 set ip next-hop peer-address
 set weight 999
exit
route-map backup-2-node-in permit 10
 set ip next-hop peer-address
 set weight 998
exit
router bgp 59598
 neighbor 10.1.0.1 remote-as 59598
 neighbor 10.1.0.1 bfd profile bgpcheck
 neighbor 10.2.0.1 remote-as 59598
 neighbor 10.2.0.1 bfd profile bgpcheck
 neighbor 10.3.0.1 remote-as 59598
 neighbor 10.3.0.1 bfd profile bgpcheck
 address-family ipv4 unicast
  neighbor 10.1.0.1 route-map main-node-in in
  neighbor 10.2.0.1 route-map backup-1-node-in in
  neighbor 10.3.0.1 route-map backup-2-node-in in
 exit-address-family
exit

The post frrouting下使用BGP+BFD进行网络备份 first appeared on EQblog.

和朋友出游时，一起玩了射箭，感觉蛮有趣的（正在给自己创造需求），故在网上选购了CLUB 900反曲弓进行练习使用。

选购

由于并没有对反曲弓选购有相关研究，故选择了迪卡侬

购买款式为：

https://www.decathlon.com.cn/zh/p/club-900-archery-bow-right-hander/_/R-p-172576 （68）

https://www.decathlon.com.cn/zh/p/carbon-archery-arrows-for-recurve-bow-tri-pack-club-500/_/R-p-305151

主体如上

组装过程

恕我太笨，看了好久包装上的安装指示也没有正确将弓组装好 查看了视频（https://www.bilibili.com/video/BV1xx411878Y）进行了对照安装，另外迪卡侬的club 900的射箭运动箭台（https://www.decathlon.com.cn/zh/p/archery-arrow-rest-right-hander-metal/_/R-p-120364）安装是胶面直接粘上去的，看了好久才看懂。

组装完成后的成品：

组装到最后，我还是没有学会怎么使用瞄准器，然后就将装上去的瞄准器拆了下来，测试了下没有瞄准器的短距离射箭，靠着直觉准度还是可以。

结尾

还没有体验更多，不过上弓弦的时候，真的是累人，力气不大的人建议找人帮忙。另外拉弓还是需要购买护指，我测试射箭不到6次，手指已经被勒的难受，更多的是体力跟不上。本意买来是用来锻炼身体的，希望不要放着吃灰吧。

The post 迪卡侬 CLUB 900 反曲弓简单开箱 first appeared on EQblog.

然后安装 qemu-kvm

apt update && apt install qemu-kvm

使用fdisk或者parted提前分区 例如

parted /dev/sda
mklabel gpt

下载uefi bios

wget -qO- /tmp http://www.danpros.com/content/files/uefi.tar.gz | tar -xvz -C /tmp

使用qemu-system启动服务并使用VNC安装

qemu-system-x86_64 -bios /tmp/uefi.bin -net nic -net user,hostfwd=tcp::3389-:3389 -m 2048M -enable-kvm -cpu host,+nx -M pc -smp 2 -vga std -usbdevice tablet -k en-us -cdrom  你的windows镜像 -drive file=/dev/sda,format=raw,media=disk -boot once=d -vnc :1

执行后使用VNC用 IP:1 或者IP:5901 链接 此处IP是你救援系统所使用的IP 之后正常安装即可

参考：https://community.hetzner.com/tutorials/install-windows，https://www.sbzsystems.com/general-help-issues/windows-general-issues/install-windows-using-the-rescue-system-on-a-dedicated-server-of-hetzner/

The post 使用kvm与vnc快速安装windows first appeared on EQblog.

apt update
apt install mariadb-server -y

2.创建数据库表与用户

mysql -u root -p

CREATE DATABASE powerdns;
GRANT ALL ON powerdns.* TO 'powerdns'@'localhost' IDENTIFIED BY 'CHANGEME';
FLUSH PRIVILEGES;
USE powerdns;
CREATE TABLE domains (
id INT AUTO_INCREMENT,
name VARCHAR(255) NOT NULL,
master VARCHAR(128) DEFAULT NULL,
last_check INT DEFAULT NULL,
type VARCHAR(6) NOT NULL,
notified_serial INT UNSIGNED DEFAULT NULL,
account VARCHAR(40) CHARACTER SET 'utf8' DEFAULT NULL,
PRIMARY KEY (id)
) Engine=InnoDB CHARACTER SET 'latin1';

CREATE UNIQUE INDEX name_index ON domains(name);

CREATE TABLE records (
id BIGINT AUTO_INCREMENT,
domain_id INT DEFAULT NULL,
name VARCHAR(255) DEFAULT NULL,
type VARCHAR(10) DEFAULT NULL,
content VARCHAR(64000) DEFAULT NULL,
ttl INT DEFAULT NULL,
prio INT DEFAULT NULL,
change_date INT DEFAULT NULL,
disabled TINYINT(1) DEFAULT 0,
ordername VARCHAR(255) BINARY DEFAULT NULL,
auth TINYINT(1) DEFAULT 1,
PRIMARY KEY (id)
) Engine=InnoDB CHARACTER SET 'latin1';

CREATE INDEX nametype_index ON records(name,type);
CREATE INDEX domain_id ON records(domain_id);
CREATE INDEX ordername ON records (ordername);

CREATE TABLE supermasters (
ip VARCHAR(64) NOT NULL,
nameserver VARCHAR(255) NOT NULL,
account VARCHAR(40) CHARACTER SET 'utf8' NOT NULL,
PRIMARY KEY (ip, nameserver)
) Engine=InnoDB CHARACTER SET 'latin1';

CREATE TABLE comments (
id INT AUTO_INCREMENT,
domain_id INT NOT NULL,
name VARCHAR(255) NOT NULL,
type VARCHAR(10) NOT NULL,
modified_at INT NOT NULL,
account VARCHAR(40) CHARACTER SET 'utf8' DEFAULT NULL,
comment TEXT CHARACTER SET 'utf8' NOT NULL,
PRIMARY KEY (id)
) Engine=InnoDB CHARACTER SET 'latin1';

CREATE INDEX comments_name_type_idx ON comments (name, type);
CREATE INDEX comments_order_idx ON comments (domain_id, modified_at);

CREATE TABLE domainmetadata (
id INT AUTO_INCREMENT,
domain_id INT NOT NULL,
kind VARCHAR(32),
content TEXT,
PRIMARY KEY (id)
) Engine=InnoDB CHARACTER SET 'latin1';

CREATE INDEX domainmetadata_idx ON domainmetadata (domain_id, kind);

CREATE TABLE cryptokeys (
id INT AUTO_INCREMENT,
domain_id INT NOT NULL,
flags INT NOT NULL,
active BOOL,
content TEXT,
PRIMARY KEY(id)
) Engine=InnoDB CHARACTER SET 'latin1';

CREATE INDEX domainidindex ON cryptokeys(domain_id);

CREATE TABLE tsigkeys (
id INT AUTO_INCREMENT,
name VARCHAR(255),
algorithm VARCHAR(50),
secret VARCHAR(255),
PRIMARY KEY (id)
) Engine=InnoDB CHARACTER SET 'latin1';

CREATE UNIQUE INDEX namealgoindex ON tsigkeys(name, algorithm);

ALTER table cryptokeys add column published BOOL DEFAULT 1 after active;

3.关闭可能回影响占用端口的系统应用

systemctl disable systemd-resolved
systemctl stop systemd-resolved

4.开始安装后端

Debian 10:

echo "deb [arch=amd64] http://repo.powerdns.com/debian buster-auth-master main" | sudo tee /etc/apt/sources.list.d/pdns.list
apt install curl wget apt-transport-https gnupg2 -y
curl https://repo.powerdns.com/CBC8B383-pub.asc | sudo apt-key add -
apt-get update
apt-get install pdns-server pdns-backend-mysql
echo '
# MySQL Configuration
# Launch gmysql backend
launch+=gmysql
gmysql-host=localhost
gmysql-port=3306
gmysql-dbname=powerdns
gmysql-user=powerdns
gmysql-password=CHANGEME
gmysql-dnssec=yes
' > /etc/powerdns/pdns.d/pdns.local.gmysql.conf

systemctl restart pdns
systemctl enable pdns

5.关于主从的配置

master ip : 10.1.1.1 master domain:ns1.eqblog.com
slave ip : 10.1.1.2 slave domain:ns2.eqblog.com

master pdns.conf:

allow-axfr-ips=10.1.1.2/32
api=yes #用于开启weeb api
api-key=CHANGEMEAPIKEY #用于开启weeb api
daemon=yes
guardian=yes
include-dir=/etc/powerdns/pdns.d
loglevel=7
master=yes #主从配置
slave=no #主从配置
webserver=yes #用于开启weeb api
webserver-address=0.0.0.0 #用于开启weeb api
webserver-allow-from=0.0.0.0/0 #用于开启weeb api
xfr-cycle-interval=3 #4.5以上需要使用此选项

slave pdns.conf

allow-notify-from=10.1.1.1/32
autosecondary=yes #4.5以上需要使用此选项
daemon=yes
disable-axfr=yes
include-dir=/etc/powerdns/pdns.d
loglevel=7
slave=yes
slave-cycle-interval=3 #4.5以下需要使用此选项
xfr-cycle-interval=5 #4.5以上需要使用此选项

slave和master安装方式相同，只有pdns.conf不同与数据库需要插入新的表。

mysql -u root -p
USE powerdns;
insert into supermasters values ('10.1.1.1', 'ns2.eqblog.com', 'admin');
eixt;
service pdns restart

至此你可以使用powerdns admin进行管理服务，添加域名选择master即可，注意域名需要增加相应的NS解析。

The post PowerDNS 安装与主从节点配置记录 first appeared on EQblog.