如果遇到 The repository 'http://mirrors.tuna.tsinghua.edu.cn/raspbian/raspbian buster InRelease' is not signed 错误,可以按如下操作添加公钥(参见:https://www.jianshu.com/p/c64deffb1308)
There's four parms listed in the document you cite. Code: Select all
rtw_power_mgnt=0|1|2 0 == disable power saving 1 == power saving on, minPS 2 == power saving on, maxPS Code: Select all
rtw_enusbss=0|1 0 == disable auto suspend 1 == enable auto suspend Code: Select all
rtw_hwpwrp_detect=0|1 0 == disable HW power pin detection 1 == enable HW power pin detection Code: Select all
rtw_ips_mode=0|1 0 == low power, IPS_NORMAL 1 == higher power, IPS_LEVEL2 The conventional wisdom, because we're running our RPis as server systems not clients, is to set rtw_power_mgnt=0 and rtw_enusbss=0 to prevent the dongle going into power saving and to ignore the other two parms because they don't make any difference. If the server goes into power saving we'd need a process to wake it up. That's different from a client system where interaction from a keyboard user will trigger a request to wake up and associate the dongle.
本文介绍在Raspberry Pi 3、3+,4和Raspberry Pi Zero W上配置串行端口。 上述的几种树莓派包含两个可用于串行通信的UART控制器,也就是常说的串口:mini UART和PL011 UART。默认情况下,mini UART映射到40引脚GPIO连接器的TXD(GPIO 14)和RXD(GPIO 15)上,PL011 UART用于蓝牙模块,但是任何一个模块都可以映射到GPIO端口。
\ No newline at end of file
diff --git "a/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/2022-02-07-21-53-27.png" "b/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/2022-02-07-21-53-27.png"
new file mode 100644
index 0000000..844da05
Binary files /dev/null and "b/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/2022-02-07-21-53-27.png" differ
diff --git "a/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/2022-02-07-22-44-49.png" "b/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/2022-02-07-22-44-49.png"
new file mode 100644
index 0000000..6aec87f
Binary files /dev/null and "b/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/2022-02-07-22-44-49.png" differ
diff --git "a/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/2022-02-07-22-44-54.png" "b/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/2022-02-07-22-44-54.png"
new file mode 100644
index 0000000..175389b
Binary files /dev/null and "b/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/2022-02-07-22-44-54.png" differ
diff --git "a/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/icarus-logo.svg" "b/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/icarus-logo.svg"
new file mode 100644
index 0000000..cb6a8e9
--- /dev/null
+++ "b/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/icarus-logo.svg"
@@ -0,0 +1,6 @@
+
\ No newline at end of file
diff --git "a/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/index.html" "b/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/index.html"
new file mode 100644
index 0000000..df9cdc2
--- /dev/null
+++ "b/2022/01/15/Icarus\344\270\273\351\242\230\351\205\215\347\275\256\346\227\245\350\256\260/index.html"
@@ -0,0 +1,194 @@
+
+Icarus主题配置日记 - Centaurus99 的杂物堆
\ No newline at end of file
diff --git "a/2022/06/21/\344\275\277\347\224\250acme-sh\350\207\252\345\212\250\351\205\215\347\275\256\346\263\233\345\237\237\345\220\215\350\257\201\344\271\246/index.html" "b/2022/06/21/\344\275\277\347\224\250acme-sh\350\207\252\345\212\250\351\205\215\347\275\256\346\263\233\345\237\237\345\220\215\350\257\201\344\271\246/index.html"
new file mode 100644
index 0000000..a54d0eb
--- /dev/null
+++ "b/2022/06/21/\344\275\277\347\224\250acme-sh\350\207\252\345\212\250\351\205\215\347\275\256\346\263\233\345\237\237\345\220\215\350\257\201\344\271\246/index.html"
@@ -0,0 +1,99 @@
+
+使用acme.sh自动配置泛域名证书 - Centaurus99 的杂物堆
\ No newline at end of file
diff --git "a/2022/09/02/\344\275\277\347\224\250-Clash-AdGuard-Home-\345\234\250\346\240\221\350\216\223\346\264\276\350\275\257\350\267\257\347\224\261\344\270\212\346\220\255\345\273\272\345\271\277\345\221\212\345\261\217\350\224\275\344\270\216\351\200\217\346\230\216\344\273\243\347\220\206\346\234\215\345\212\241\345\231\250/index.html" "b/2022/09/02/\344\275\277\347\224\250-Clash-AdGuard-Home-\345\234\250\346\240\221\350\216\223\346\264\276\350\275\257\350\267\257\347\224\261\344\270\212\346\220\255\345\273\272\345\271\277\345\221\212\345\261\217\350\224\275\344\270\216\351\200\217\346\230\216\344\273\243\347\220\206\346\234\215\345\212\241\345\231\250/index.html"
new file mode 100644
index 0000000..29280f7
--- /dev/null
+++ "b/2022/09/02/\344\275\277\347\224\250-Clash-AdGuard-Home-\345\234\250\346\240\221\350\216\223\346\264\276\350\275\257\350\267\257\347\224\261\344\270\212\346\220\255\345\273\272\345\271\277\345\221\212\345\261\217\350\224\275\344\270\216\351\200\217\346\230\216\344\273\243\347\220\206\346\234\215\345\212\241\345\231\250/index.html"
@@ -0,0 +1,95 @@
+
+使用 Clash + AdGuard Home 在树莓派软路由上搭建广告屏蔽与透明代理服务器 - Centaurus99 的杂物堆
*filter # INPUT 和 FORWARD 链上默认 DROP 掉 :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0]
# 防止外网使用内网 IP 欺骗 -A INPUT -i eth0 -s 192.168.0.0/16 -j DROP
# 允许本机、内网以及已建立的连接通过和转发 -A INPUT -i lo -j ACCEPT -A INPUT -i docker0 -j ACCEPT -A INPUT -i wlx1cbfceb110dc -j ACCEPT -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A FORWARD -i lo -j ACCEPT -A FORWARD -i docker0 -j ACCEPT -A FORWARD -i wlx1cbfceb110dc -j ACCEPT -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
*filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0]
# Filter all packets that have RH0 headers. Refer to RFC 5095 -A INPUT -m rt --rt-type 0 -j DROP -A FORWARD -m rt --rt-type 0 -j DROP -A OUTPUT -m rt --rt-type 0 -j DROP
# Allow trusted link to INPUT and FORWARD -A INPUT -i lo -j ACCEPT -A INPUT -i docker0 -j ACCEPT -A INPUT -i wlx1cbfceb110dc -j ACCEPT -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A FORWARD -i lo -j ACCEPT -A FORWARD -i docker0 -j ACCEPT -A FORWARD -i wlx1cbfceb110dc -j ACCEPT -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
influx # 默认连接到localhost:8086 show users# 查看所有用户,默认没有 CREATE USER "pi" WITH PASSWORD '******' WITH ALL PRIVILEGES # 创建 pi 用户用于管理数据 create database mi # 创建 mi 数据库用于存放数据
\ No newline at end of file
diff --git "a/2022/09/07/\344\275\277\347\224\250\346\240\221\350\216\223\346\264\276\345\222\214\345\260\217\347\261\263\350\223\235\347\211\231\346\270\251\346\271\277\345\272\246\350\256\241\345\217\257\350\247\206\345\214\226\345\256\277\350\210\215\346\270\251\346\271\277\345\272\246\345\217\230\345\214\226/raspberry-pi-foundation-vector-logo.svg" "b/2022/09/07/\344\275\277\347\224\250\346\240\221\350\216\223\346\264\276\345\222\214\345\260\217\347\261\263\350\223\235\347\211\231\346\270\251\346\271\277\345\272\246\350\256\241\345\217\257\350\247\206\345\214\226\345\256\277\350\210\215\346\270\251\346\271\277\345\272\246\345\217\230\345\214\226/raspberry-pi-foundation-vector-logo.svg"
new file mode 100644
index 0000000..8cdb0f0
--- /dev/null
+++ "b/2022/09/07/\344\275\277\347\224\250\346\240\221\350\216\223\346\264\276\345\222\214\345\260\217\347\261\263\350\223\235\347\211\231\346\270\251\346\271\277\345\272\246\350\256\241\345\217\257\350\247\206\345\214\226\345\256\277\350\210\215\346\270\251\346\271\277\345\272\246\345\217\230\345\214\226/raspberry-pi-foundation-vector-logo.svg"
@@ -0,0 +1,68 @@
+
+
+
diff --git "a/2023/06/17/\345\237\272\344\272\216-Proxmox-VE-\347\232\204-All-in-One-\346\234\215\345\212\241\345\231\250\346\220\255\345\273\272/index.html" "b/2023/06/17/\345\237\272\344\272\216-Proxmox-VE-\347\232\204-All-in-One-\346\234\215\345\212\241\345\231\250\346\220\255\345\273\272/index.html"
new file mode 100644
index 0000000..05cc3e4
--- /dev/null
+++ "b/2023/06/17/\345\237\272\344\272\216-Proxmox-VE-\347\232\204-All-in-One-\346\234\215\345\212\241\345\231\250\346\220\255\345\273\272/index.html"
@@ -0,0 +1,492 @@
+
+基于 Proxmox VE 的 All in One 服务器搭建 - Centaurus99 的杂物堆
监控对 /dev/sda 的使用:blktrace -d /dev/sda -a pc -o - | blkparse -i -
+
然后 hdparm -Y /dev/sda ,查看唤醒磁盘的进程。
+
我这儿结果如下,然而搜索相关资料后并没有获取到有用的信息:
+
1 2 3 4 5 6 7 8 9
8,16 0 1 0.000000000 18871 D N 0 [hdparm] 8,16 1 1 0.497835738 0 C N [0] 8,16 0 2 1.412267626 168 D R 4 [scsi_eh_1] 8,16 0 3 1.412286261 14 C R [0] 8,16 0 4 1.412293625 18 D R 12 [kworker/0:1] 8,16 0 5 1.412295327 14 C R [0] 8,16 0 6 1.412297439 18 D R 4 [kworker/0:1] 8,16 0 7 1.412298518 14 C R [0] ...
ip link add bond-lan type bond mode 802.3ad # 添加 bond 类型的虚拟接口 名称为 bond-lan ip linkset eth3 down ip linkset eth4 down ip linkset eth3 type bond_slave # 配置网卡模式 ip linkset eth4 type bond_slave ip linkset eth3 master bond-lan # 加入名称为 bond-lan 的 bond 类型网卡 ip linkset eth4 master bond-lan ip linkset bond-lan up # 启动该网卡 ip linkset eth3 up ip linkset eth4 up
uci set socat.mc-tcp=socat uci set socat.mc-tcp.enable=1 uci set socat.mc-tcp.SocatOptions='TCP6-LISTEN:25565,fork,reuseaddr TCP:192.168.22.3:25565' uci commit
+
+
UDP 也类似:
+
1 2 3 4
uci set socat.mc-udp=socat uci set socat.mc-udp.enable=1 uci set socat.mc-udp.SocatOptions='UDP6-LISTEN:25565,fork,reuseaddr UDP:192.168.22.3:25565' uci commit
+
+
然后重启 socat 服务即可生效:/etc/init.d/socat restart
+
对外网开放还需在防火墙中允许对应端口的输入。
+
配置 DDNS
我的 DNS 解析提供商为 CloudFlare,故安装 ddns-scripts-cloudflare。
为了方便配置,我没有将这个接口划入单独的区域,而是划入了 lan 区域,共享 lan 区域的防火墙配置。
+
然后就可以添加对端了。注意 允许的 IP 的这一项中填写 “对端的隧道 IP 地址和对端经由隧道的网络”,对于对端为非路由设备的情况,这一项只填隧道 IP 地址就行,比如 192.168.23.102/32(/32 可省略),但不能填写 VPN 接口间的网段,即不能填写 192.168.23.102/24。
lxc.idmap: u 0 100000 1000 lxc.idmap: g 0 100000 1000 lxc.idmap: u 1000 1000 1 lxc.idmap: g 1000 1000 1 lxc.idmap: u 1001 101000 64535 lxc.idmap: g 1001 101000 64535
Bus 004 Device 002: ID 174c:3074 ASMedia Technology Inc. ASM1074 SuperSpeed hub Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub Bus 003 Device 003: ID 05e3:0751 Genesys Logic, Inc. microSD Card Reader Bus 003 Device 004: ID 0a12:0001 Cambridge Silicon Radio, Ltd Bluetooth Dongle (HCI mode) Bus 003 Device 002: ID 174c:2074 ASMedia Technology Inc. ASM1074 High-Speed hub Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
\ No newline at end of file
diff --git "a/2023/06/17/\345\237\272\344\272\216-Proxmox-VE-\347\232\204-All-in-One-\346\234\215\345\212\241\345\231\250\346\220\255\345\273\272/proxmox-logo.svg" "b/2023/06/17/\345\237\272\344\272\216-Proxmox-VE-\347\232\204-All-in-One-\346\234\215\345\212\241\345\231\250\346\220\255\345\273\272/proxmox-logo.svg"
new file mode 100644
index 0000000..8873350
--- /dev/null
+++ "b/2023/06/17/\345\237\272\344\272\216-Proxmox-VE-\347\232\204-All-in-One-\346\234\215\345\212\241\345\231\250\346\220\255\345\273\272/proxmox-logo.svg"
@@ -0,0 +1,5 @@
+
+
\ No newline at end of file
diff --git a/about/index.html b/about/index.html
new file mode 100644
index 0000000..2266fd8
--- /dev/null
+++ b/about/index.html
@@ -0,0 +1,83 @@
+
+关于 - Centaurus99 的杂物堆
\ No newline at end of file
diff --git a/archives/index.html b/archives/index.html
new file mode 100644
index 0000000..bb2d176
--- /dev/null
+++ b/archives/index.html
@@ -0,0 +1,60 @@
+
+归档 - Centaurus99 的杂物堆
监控对 /dev/sda 的使用:blktrace -d /dev/sda -a pc -o - | blkparse -i -
然后 hdparm -Y /dev/sda ,查看唤醒磁盘的进程。
我这儿结果如下,然而搜索相关资料后并没有获取到有用的信息:
1 2 3 4 5 6 7 8 9
8,16 0 1 0.000000000 18871 D N 0 [hdparm] 8,16 1 1 0.497835738 0 C N [0] 8,16 0 2 1.412267626 168 D R 4 [scsi_eh_1] 8,16 0 3 1.412286261 14 C R [0] 8,16 0 4 1.412293625 18 D R 12 [kworker/0:1] 8,16 0 5 1.412295327 14 C R [0] 8,16 0 6 1.412297439 18 D R 4 [kworker/0:1] 8,16 0 7 1.412298518 14 C R [0] ...
ip link add bond-lan type bond mode 802.3ad # 添加 bond 类型的虚拟接口 名称为 bond-lan ip linkset eth3 down ip linkset eth4 down ip linkset eth3 type bond_slave # 配置网卡模式 ip linkset eth4 type bond_slave ip linkset eth3 master bond-lan # 加入名称为 bond-lan 的 bond 类型网卡 ip linkset eth4 master bond-lan ip linkset bond-lan up # 启动该网卡 ip linkset eth3 up ip linkset eth4 up
uci set socat.mc-tcp=socat uci set socat.mc-tcp.enable=1 uci set socat.mc-tcp.SocatOptions='TCP6-LISTEN:25565,fork,reuseaddr TCP:192.168.22.3:25565' uci commit
UDP 也类似:
1 2 3 4
uci set socat.mc-udp=socat uci set socat.mc-udp.enable=1 uci set socat.mc-udp.SocatOptions='UDP6-LISTEN:25565,fork,reuseaddr UDP:192.168.22.3:25565' uci commit
然后重启 socat 服务即可生效:/etc/init.d/socat restart
对外网开放还需在防火墙中允许对应端口的输入。
配置 DDNS
我的 DNS 解析提供商为 CloudFlare,故安装 ddns-scripts-cloudflare。
为了方便配置,我没有将这个接口划入单独的区域,而是划入了 lan 区域,共享 lan 区域的防火墙配置。
然后就可以添加对端了。注意 允许的 IP 的这一项中填写 “对端的隧道 IP 地址和对端经由隧道的网络”,对于对端为非路由设备的情况,这一项只填隧道 IP 地址就行,比如 192.168.23.102/32(/32 可省略),但不能填写 VPN 接口间的网段,即不能填写 192.168.23.102/24。
lxc.idmap: u 0 100000 1000 lxc.idmap: g 0 100000 1000 lxc.idmap: u 1000 1000 1 lxc.idmap: g 1000 1000 1 lxc.idmap: u 1001 101000 64535 lxc.idmap: g 1001 101000 64535
Bus 004 Device 002: ID 174c:3074 ASMedia Technology Inc. ASM1074 SuperSpeed hub Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub Bus 003 Device 003: ID 05e3:0751 Genesys Logic, Inc. microSD Card Reader Bus 003 Device 004: ID 0a12:0001 Cambridge Silicon Radio, Ltd Bluetooth Dongle (HCI mode) Bus 003 Device 002: ID 174c:2074 ASMedia Technology Inc. ASM1074 High-Speed hub Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
influx # 默认连接到localhost:8086 show users# 查看所有用户,默认没有 CREATE USER "pi" WITH PASSWORD '******' WITH ALL PRIVILEGES # 创建 pi 用户用于管理数据 create database mi # 创建 mi 数据库用于存放数据
*filter # INPUT 和 FORWARD 链上默认 DROP 掉 :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0]
# 防止外网使用内网 IP 欺骗 -A INPUT -i eth0 -s 192.168.0.0/16 -j DROP
# 允许本机、内网以及已建立的连接通过和转发 -A INPUT -i lo -j ACCEPT -A INPUT -i docker0 -j ACCEPT -A INPUT -i wlx1cbfceb110dc -j ACCEPT -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A FORWARD -i lo -j ACCEPT -A FORWARD -i docker0 -j ACCEPT -A FORWARD -i wlx1cbfceb110dc -j ACCEPT -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
*filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0]
# Filter all packets that have RH0 headers. Refer to RFC 5095 -A INPUT -m rt --rt-type 0 -j DROP -A FORWARD -m rt --rt-type 0 -j DROP -A OUTPUT -m rt --rt-type 0 -j DROP
# Allow trusted link to INPUT and FORWARD -A INPUT -i lo -j ACCEPT -A INPUT -i docker0 -j ACCEPT -A INPUT -i wlx1cbfceb110dc -j ACCEPT -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A FORWARD -i lo -j ACCEPT -A FORWARD -i docker0 -j ACCEPT -A FORWARD -i wlx1cbfceb110dc -j ACCEPT -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
如果遇到 The repository 'http://mirrors.tuna.tsinghua.edu.cn/raspbian/raspbian buster InRelease' is not signed 错误,可以按如下操作添加公钥(参见:https://www.jianshu.com/p/c64deffb1308)
There's four parms listed in the document you cite. Code: Select all
rtw_power_mgnt=0|1|2 0 == disable power saving 1 == power saving on, minPS 2 == power saving on, maxPS Code: Select all
rtw_enusbss=0|1 0 == disable auto suspend 1 == enable auto suspend Code: Select all
rtw_hwpwrp_detect=0|1 0 == disable HW power pin detection 1 == enable HW power pin detection Code: Select all
rtw_ips_mode=0|1 0 == low power, IPS_NORMAL 1 == higher power, IPS_LEVEL2 The conventional wisdom, because we're running our RPis as server systems not clients, is to set rtw_power_mgnt=0 and rtw_enusbss=0 to prevent the dongle going into power saving and to ignore the other two parms because they don't make any difference. If the server goes into power saving we'd need a process to wake it up. That's different from a client system where interaction from a keyboard user will trigger a request to wake up and associate the dongle.
本文介绍在Raspberry Pi 3、3+,4和Raspberry Pi Zero W上配置串行端口。 上述的几种树莓派包含两个可用于串行通信的UART控制器,也就是常说的串口:mini UART和PL011 UART。默认情况下,mini UART映射到40引脚GPIO连接器的TXD(GPIO 14)和RXD(GPIO 15)上,PL011 UART用于蓝牙模块,但是任何一个模块都可以映射到GPIO端口。
监控对 /dev/sda 的使用:blktrace -d /dev/sda -a pc -o - | blkparse -i -
然后 hdparm -Y /dev/sda ,查看唤醒磁盘的进程。
我这儿结果如下,然而搜索相关资料后并没有获取到有用的信息:
1 2 3 4 5 6 7 8 9
8,16 0 1 0.000000000 18871 D N 0 [hdparm] 8,16 1 1 0.497835738 0 C N [0] 8,16 0 2 1.412267626 168 D R 4 [scsi_eh_1] 8,16 0 3 1.412286261 14 C R [0] 8,16 0 4 1.412293625 18 D R 12 [kworker/0:1] 8,16 0 5 1.412295327 14 C R [0] 8,16 0 6 1.412297439 18 D R 4 [kworker/0:1] 8,16 0 7 1.412298518 14 C R [0] ...
ip link add bond-lan type bond mode 802.3ad # 添加 bond 类型的虚拟接口 名称为 bond-lan ip linkset eth3 down ip linkset eth4 down ip linkset eth3 type bond_slave # 配置网卡模式 ip linkset eth4 type bond_slave ip linkset eth3 master bond-lan # 加入名称为 bond-lan 的 bond 类型网卡 ip linkset eth4 master bond-lan ip linkset bond-lan up # 启动该网卡 ip linkset eth3 up ip linkset eth4 up
uci set socat.mc-tcp=socat uci set socat.mc-tcp.enable=1 uci set socat.mc-tcp.SocatOptions='TCP6-LISTEN:25565,fork,reuseaddr TCP:192.168.22.3:25565' uci commit
UDP 也类似:
1 2 3 4
uci set socat.mc-udp=socat uci set socat.mc-udp.enable=1 uci set socat.mc-udp.SocatOptions='UDP6-LISTEN:25565,fork,reuseaddr UDP:192.168.22.3:25565' uci commit
然后重启 socat 服务即可生效:/etc/init.d/socat restart
对外网开放还需在防火墙中允许对应端口的输入。
配置 DDNS
我的 DNS 解析提供商为 CloudFlare,故安装 ddns-scripts-cloudflare。
为了方便配置,我没有将这个接口划入单独的区域,而是划入了 lan 区域,共享 lan 区域的防火墙配置。
然后就可以添加对端了。注意 允许的 IP 的这一项中填写 “对端的隧道 IP 地址和对端经由隧道的网络”,对于对端为非路由设备的情况,这一项只填隧道 IP 地址就行,比如 192.168.23.102/32(/32 可省略),但不能填写 VPN 接口间的网段,即不能填写 192.168.23.102/24。
lxc.idmap: u 0 100000 1000 lxc.idmap: g 0 100000 1000 lxc.idmap: u 1000 1000 1 lxc.idmap: g 1000 1000 1 lxc.idmap: u 1001 101000 64535 lxc.idmap: g 1001 101000 64535
Bus 004 Device 002: ID 174c:3074 ASMedia Technology Inc. ASM1074 SuperSpeed hub Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub Bus 003 Device 003: ID 05e3:0751 Genesys Logic, Inc. microSD Card Reader Bus 003 Device 004: ID 0a12:0001 Cambridge Silicon Radio, Ltd Bluetooth Dongle (HCI mode) Bus 003 Device 002: ID 174c:2074 ASMedia Technology Inc. ASM1074 High-Speed hub Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
influx # 默认连接到localhost:8086 show users# 查看所有用户,默认没有 CREATE USER "pi" WITH PASSWORD '******' WITH ALL PRIVILEGES # 创建 pi 用户用于管理数据 create database mi # 创建 mi 数据库用于存放数据
*filter # INPUT 和 FORWARD 链上默认 DROP 掉 :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0]
# 防止外网使用内网 IP 欺骗 -A INPUT -i eth0 -s 192.168.0.0/16 -j DROP
# 允许本机、内网以及已建立的连接通过和转发 -A INPUT -i lo -j ACCEPT -A INPUT -i docker0 -j ACCEPT -A INPUT -i wlx1cbfceb110dc -j ACCEPT -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A FORWARD -i lo -j ACCEPT -A FORWARD -i docker0 -j ACCEPT -A FORWARD -i wlx1cbfceb110dc -j ACCEPT -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
*filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0]
# Filter all packets that have RH0 headers. Refer to RFC 5095 -A INPUT -m rt --rt-type 0 -j DROP -A FORWARD -m rt --rt-type 0 -j DROP -A OUTPUT -m rt --rt-type 0 -j DROP
# Allow trusted link to INPUT and FORWARD -A INPUT -i lo -j ACCEPT -A INPUT -i docker0 -j ACCEPT -A INPUT -i wlx1cbfceb110dc -j ACCEPT -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A FORWARD -i lo -j ACCEPT -A FORWARD -i docker0 -j ACCEPT -A FORWARD -i wlx1cbfceb110dc -j ACCEPT -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
如果遇到 The repository 'http://mirrors.tuna.tsinghua.edu.cn/raspbian/raspbian buster InRelease' is not signed 错误,可以按如下操作添加公钥(参见:https://www.jianshu.com/p/c64deffb1308)
There's four parms listed in the document you cite. Code: Select all
rtw_power_mgnt=0|1|2 0 == disable power saving 1 == power saving on, minPS 2 == power saving on, maxPS Code: Select all
rtw_enusbss=0|1 0 == disable auto suspend 1 == enable auto suspend Code: Select all
rtw_hwpwrp_detect=0|1 0 == disable HW power pin detection 1 == enable HW power pin detection Code: Select all
rtw_ips_mode=0|1 0 == low power, IPS_NORMAL 1 == higher power, IPS_LEVEL2 The conventional wisdom, because we're running our RPis as server systems not clients, is to set rtw_power_mgnt=0 and rtw_enusbss=0 to prevent the dongle going into power saving and to ignore the other two parms because they don't make any difference. If the server goes into power saving we'd need a process to wake it up. That's different from a client system where interaction from a keyboard user will trigger a request to wake up and associate the dongle.
本文介绍在Raspberry Pi 3、3+,4和Raspberry Pi Zero W上配置串行端口。 上述的几种树莓派包含两个可用于串行通信的UART控制器,也就是常说的串口:mini UART和PL011 UART。默认情况下,mini UART映射到40引脚GPIO连接器的TXD(GPIO 14)和RXD(GPIO 15)上,PL011 UART用于蓝牙模块,但是任何一个模块都可以映射到GPIO端口。
\ No newline at end of file
diff --git a/tags/AdGuard-Home/index.html b/tags/AdGuard-Home/index.html
new file mode 100644
index 0000000..d3e6a27
--- /dev/null
+++ b/tags/AdGuard-Home/index.html
@@ -0,0 +1,60 @@
+
+标签: AdGuard Home - Centaurus99 的杂物堆
\ No newline at end of file
diff --git a/tags/index.html b/tags/index.html
new file mode 100644
index 0000000..9b82a0c
--- /dev/null
+++ b/tags/index.html
@@ -0,0 +1,60 @@
+
+标签 - Centaurus99 的杂物堆