工作雜記 on PolloChang 工作筆記

讓 AI 成為您的專屬編輯部：一套基於 Linux 的自動化報紙系統設計

Sun, 26 Apr 2026 19:18:32 +0800

讓 AI 成為您的專屬編輯部：一套基於 Linux 的自動化報紙系統設計
#

在資訊爆炸的時代，每天手動去檢查監控數據、搜集新聞簡直是浪費生命。作為工程師，我們應該追求極致的自動化。今天分享一套我親手打造的 Pollo AI News 自動化生產線。

hermes deploy recard

Sat, 25 Apr 2026 23:34:41 +0800

hermes-deploy recard
#

system requirements
#

Official Minimum Server Requirements (Recommended)
#

CPU: 2 Cores
RAM: 4 GB
Disk: 60 GB SSD
OS: Ubuntu 22.04 LTS / Debian 12

Minimum Functional Requirements (Minimalist Setup)
#

CPU: 1 vCPU
RAM: 2 GB (1 GB absolute minimum, but 2-4 GB is recommended for stability)
Disk: 10 GB Free
Network: 4 Mbps

Software & Deployment Prerequisites
#

OS: Linux (Ubuntu 22.04/24.04, Debian 12), macOS, WSL2, or Android (Termux).
Git: Required for installation.
Python: 3.11 or newer (installed automatically by uv).
Node.js: v22+ (needed for browser tools/WhatsApp).
Other: ripgrep, ffmpeg.
Docker: Recommended for containerized deployment.

My System
#

OS: Debian 13
CPU: 4 vCPU
RAM: 8G
Disk: 200G

install step by step
#

Deploy yuor VM.

I’m deploy on my proxmax server.

打開你的Chrome AI

Sat, 25 Apr 2026 12:24:53 +0800

Chrome 全新 AI 功能在 2026-04-20 已經在台灣發送了，但是我遲遲沒有收到因為它目前仍處於逐步推送階段（Gradual Rollout）。沒有關係仍然可以手動開啟。

手動開啟方式
#

1. 檢查硬體與版本門檻
#

Chrome AI（特別是內建的 Gemini Nano）對硬體有一定要求：

SQL tunning task common

Sat, 31 Jan 2026 23:50:53 +0800

以**「電商物流系統」**為主題。這個場景包含了高頻交易、大量文字描述以及複雜的關聯。

以下是針對 Oracle 11g 環境設計的實作腳本。

第一步：設計與建立資料表 (DDL)
#

我們設計五張表：客戶 (CUSTOMERS)、商品 (PRODUCTS)、訂單主檔 (ORDERS)、訂單明細 (ORDER_ITEMS)、以及物流追蹤備註 (LOGISTICS_DETAIL)。

SQL tunning task MES

Sat, 31 Jan 2026 23:50:53 +0800

第一步：MES 系統資料表設計 (DDL)
#

我們設計六張核心表，涵蓋工單、批次（Lot）、機台、過帳紀錄與參數採集。

Redo test

Mon, 29 Dec 2025 23:50:53 +0800

Test Summary
#

insert and delete

item	start_storm	start_storm_batch_commit	start_storm_optimized	start_storm_hint
test result	success	execute timeout	success	success
time range	2025-12-30 14:34:06 - 2025-12-30 14:37:50	2025-12-29 10:01:54 - 2025-12-29 21:49:39	2025-12-30 09:28:01 - 2025-12-30 09:34:40	2025-12-30 09:40:52 - 2025-12-30 09:42:25
total run time(s)	224	42465	399	93

CTAS

item	start_ctas	start_ctas_nologging	start_ctas_nologging_paralel
test result	success	success	success
time range	2025-12-30 10:50:23 - 2025-12-30 10:51:54	2025-12-30 11:01:09 - 2025-12-30 11:01:11	2025-12-30 13:58:01 - 2025-12-30 13:58:03
total run time(s)	91	2	2

測試環境
#

DB version: Oracle 19c
OS: Oracle linux 7
CPU: 4 vCore
RAM: 8G

測試前準備
#

SELECT GROUP# , status, bytes/1024/1024 FROM v$log l;

GROUP#|STATUS  |BYTES/1024/1024
------+--------+---------------
     1|INACTIVE|            200
     2|INACTIVE|            200
     3|ACTIVE  |            200
     4|CURRENT |             10
     5|UNUSED  |             10
     6|UNUSED  |             10

ALTER DATABASE ADD LOGFILE GROUP 4 ('/u01/app/oracle/oradata/DB/redo04.log') SIZE 10M;
ALTER DATABASE ADD LOGFILE GROUP 5 ('/u01/app/oracle/oradata/DB/redo05.log') SIZE 10M;
ALTER DATABASE ADD LOGFILE GROUP 6 ('/u01/app/oracle/oradata/DB/redo06.log') SIZE 10M;

ALTER SYSTEM SWITCH LOGFILE;
ALTER SYSTEM CHECKPOINT;

ALTER DATABASE DROP LOGFILE GROUP 1;
ALTER DATABASE DROP LOGFILE GROUP 2;
ALTER DATABASE DROP LOGFILE GROUP 3;


GROUP#|STATUS  |BYTES/1024/1024
------+--------+---------------
     4|CURRENT |             10
     5|UNUSED  |             10
     6|UNUSED  |             10

BEGIN
  DBMS_WORKLOAD_REPOSITORY.MODIFY_SNAPSHOT_SETTINGS(
    retention => 259200,   -- 以分鐘為單位 (7天 = 7 * 24 * 60)
    interval  => 10        -- 以分鐘為單位
  );
END;

-- 建立測試 User (若已有可跳過)
CREATE USER pollo IDENTIFIED BY oracle;
GRANT CONNECT, RESOURCE, DBA TO demo_user;

-- 準備來源表 (約 100~200MB 資料量)
CREATE TABLE pollo.src_data NOLOGGING AS
SELECT rownum AS id, a.* FROM dba_objects a, (SELECT 1 FROM dual CONNECT BY level <= 20) b;

-- 以測試 User 登入
CONN pollo/oracle

-- 準備目標空表
CREATE TABLE dest_table AS SELECT * FROM src_data WHERE 1=0;


CREATE TABLE stress_demo_log(
OBJID NUMERIC GENERATED BY DEFAULT AS IDENTITY ,
DATE_CREATED DATE DEFAULT SYSDATE NOT NULL,
test_id NUMERIC,
test_name varchar2(100),
DESC# nvarchar2(200),
status varchar2(30),
CONSTRAINT stress_demo_log_pk PRIMARY KEY (OBJID)
);

-- 確保 Package 已經是 VALID 狀態
SELECT type, line, position, text 
FROM all_errors 
WHERE name = 'PKG_STRESS_DEMO' 
  AND owner = 'POLLO'
ORDER BY type, sequence;

there is my test package sql script

2024 CWE Top 25

Thu, 17 Jul 2025 22:56:24 +0800

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) 不正確的網頁生成輸入中和（「跨網站指令碼」）
Out-of-bounds Write 越界寫入
Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) 不正確的 SQL 命令特殊元素中和（「SQL 注入」）
Cross-Site Request Forgery (CSRF) 跨網站請求偽造 (CSRF)
Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) 不正確的限制路徑名稱到受限制目錄（「路徑遍歷」）
Out-of-bounds Read 越界讀取
Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) 不正確的作業系統命令特殊元素中和（「作業系統命令注入」）
Use After Free 釋放後使用
Missing Authorization 缺少授權
Unrestricted Upload of File with Dangerous Type 危險類型檔案的無限制上傳
Improper Control of Generation of Code (‘Code Injection’) 不正確的程式碼生成控制（「程式碼注入」）
Improper Input Validation 不正確的輸入驗證
Improper Neutralization of Special Elements used in a Command (‘Command Injection’) 不正確的命令特殊元素中和（「命令注入」）
Improper Authentication 不正確的身份驗證
Improper Privilege Management 不正確的權限管理
Deserialization of Untrusted Data 不可信資料的反序列化
Exposure of Sensitive Information to an Unauthorized Actor 敏感資訊洩露給未經授權的行為者
Incorrect Authorization 不正確的授權
Server-Side Request Forgery (SSRF) 伺服器端請求偽造 (SSRF)
Improper Restriction of Operations within the Bounds of a Memory Buffer 不正確的記憶體緩衝區操作限制
NULL Pointer Dereference NULL 指標解引用
Use of Hard-coded Credentials 使用硬編碼憑證
Integer Overflow or Wraparound 整數溢位或迴繞
Uncontrolled Resource Consumption 不受控制的資源消耗
Missing Authentication for Critical Function 關鍵功能缺少身份驗證

參考資料
#

2024 CWE Top 25 Most Dangerous Software Weaknesses

GDPR-通用資料保護條例

Thu, 17 Jul 2025 22:25:06 +0800

簡述
#

《通用資料保護條例》(GDPR) 簡述

《通用資料保護條例》(General Data Protection Regulation, GDPR) 是歐盟於 2016 年 4 月 27 日通過的法規，旨在保護自然人在個人資料處理方面的權利和自由，並確保此類資料在歐盟境內的自由流動。它取代了先前的 95/46/EC 指令，並旨在解決資料保護在歐盟內部實施碎片化、法律不確定性以及公眾對線上活動資料保護風險的普遍擔憂。

修補 CVE-2025-26465

Mon, 30 Jun 2025 23:20:15 +0800

修補 CVE-2025-26465 方式

CVE-2025-26465
#

OpenSSH 是一套基於 SSH 協定的安全網路實用程式，這對於透過不安全網路進行通訊至關重要，可提供強大的加密功能以確保隱私與安全檔案傳輸，使其成為遠端伺服器管理和安全資料通訊的重要工具。OpenSSH以其廣泛的安全性和身分驗證功能而聞名，支援各種加密技術，並且是多個類 Unix 系統（包括 macOS 和 Linux）的標準配置。OpenSSH 官方於 2025 年 2 月 18 日發布新版本 9.9p2，修補以下兩個漏洞：

Tomcat Attachment Error

Wed, 18 Jun 2025 22:21:10 +0800

這幾天在公司測試環境頻繁的出現下面的錯誤訊息:

Caused by: org.springframework.web.multipart.MultipartException: Could not parse multipart servlet request; nested exception is org.apache.tomcat.util.http.fileupload.impl.FileCountLimitExceededException: attachment

這條訊息是這樣說的: 檔案數量限制 (Could not parse multipart servlet request) 。

我苦思了兩天，回想這一個禮拜我都沒有任何維護測試環境的紀錄，為什麼卻在這兩天開發的工程師頻頻像我反應類似的錯誤訊息，而且他們都說自己的本機環境不會上道測試機反而會出錯。最終我實在忍不住到處詢問期胎維護工程師。我們大約找了半天左右才發現是 tomcat 9.0.106 新增對 multi-part request 的限制，預設是 10。

各式檔案雜湊

Wed, 11 Jun 2025 11:54:59 +0800

oracle
#

AIX.PPC64_193000_db_home.zip
- tags: oracle
- sha256sum: 03cb2aff2984b47597108572048d4ee432c7e05a74362829f5ddb5540baf56b1
oracle-database-preinstall-19c-1.0-2.el8.x86_64.rpm
- tags: oracle
- sha256sum: 141926e265ff3cbc8ce7c8a67ab2ad2d40d5fb4de3a105d0cdd20de4e23dbd2a
oracle-database-preinstall-21c-1.0-1.el8.x86_64.rpm
- tags: oracle
- sha256sum: 3e99be00f010988370885c1e58acbc6d8a93c6d2d790cbb95420dd8ea554b36b
V982063-01.zip
- tags: oracle
- sha256sum: ba8329c757133da313ed3b6d7f86c5ac42cd9970a28bf2e6233f3235233aa8d8
v9.7fp7_linuxx64_server.tar.gz
- tags: db2
- sha256sum: 8b9a15035204aa99dfc00217849cf79996adb1b625306951121e849c48dc344b
OracleLinux-R9-U6-x86_64-dvd.iso
- tags: oracle, Oracle Linux
- sha256sum: 6aab225832263299c209aa1096b665e36c789ea6d0da77c19920e6ad21620bb7
OracleLinux-R9-U6-x86_64-boot.iso
- tags: oracle, Oracle Linux
- sha256sum: d420b4d02ca8172236dfe60cb2c0d2b407645e9a8ed460c5ccdf7b6a868ea8de
OracleLinux-R9-U6-x86_64-boot-uek.iso
- tags: oracle, Oracle Linux
- sha256sum: 499dd0df4969fbd06d0d3083a572504b51aca5a4428bcbff51a68c47925bcbad
OracleLinux-R9-U6-aarch64-dvd.iso
- tags: oracle, Oracle Linux
- sha256sum: 5480e921172545afd6dd6c09b6e1d6df8f24ca109a2ca4ce6b8b641597bb67ea
OracleLinux-R9-U6-aarch64-boot-uek.iso
- tags: oracle, Oracle Linux
- sha256sum: 18ad394a43bfb3ade82b5625fa335d21ba544fd91ddb4f0bdb5edeed6b76fda2
OracleLinux-R8-U10-x86_64-dvd.iso
- tags: oracle, Oracle Linux
- sha256sum: 7676a80eeaafa16903eebb2abba147a3afe230b130cc066d56fdd6854d8da900
OracleLinux-R8-U10-x86_64-boot.iso
- tags: oracle, Oracle Linux
- sha256sum: c7009ca2b28ddbedd6c09fc9141f933dec01a6ea73c503634786809746af1906
OracleLinux-R8-U10-x86_64-boot-uek.iso
- tags: oracle, Oracle Linux
- sha256sum: a14ef5c626b6fba5fa0667068d3a9cabbb533d8a6ab45635078e6bd9d87d80d6
OracleLinux-R8-U10-aarch64-dvd.iso
- tags: oracle, Oracle Linux
- sha256sum: feff28528569308896f18f7da330a726cc94563fd8c7f26f64fe486961fb490e
OracleLinux-R8-U10-boot-uek.iso
- tags: oracle, Oracle Linux
- sha256sum: f45bcb23008020d6f210fd1eea598e2aa98800852c54925744328641af83ff0c
OracleLinux-R7-U9-Server-x86_64-dvd.iso
- tags: oracle, Oracle Linux
- sha256sum: 28d2928ded40baddcd11884b9a6a611429df12897784923c346057ec5cdd1012
x86_64-boot-uek.iso
- tags: oracle, Oracle Linux
- sha256sum: 6da0323423f3a52d20d1021c2651885052319ca4ace7532859d8d20640829004
x86_64-boot.iso
- tags: oracle, Oracle Linux
- sha256sum: 4b87b6009500f2eb81e52548c6c31f43dc60797193da7c4c47ff9381e14fff6e
aarch64-boot-uek.iso
- tags: oracle, Oracle Linux
- sha256sum: 0e771bf2b2439d79f8538a9b93d0e1f78b04c045e5644406471d34222fc9f35c
OracleLinux-R7-U9-Server-aarch64-dvd.iso
- tags: oracle, Oracle Linux
- sha256sum: fd2c1b1e26858576534f6e6c4cf000a15cd81bec010dad5e827b204a14a1750e
V978757-01.iso
- tags: oracle, Oracle Linux
- sha256sum: 625044388ee60a031965a42a32f4c1de0c029268975edcd542fd14160e0dadcb
OracleLinux-R6-U10-Server-x86_64-dvd.iso
- tags: oracle, Oracle Linux
- sha256sum: 625044388ee60a031965a42a32f4c1de0c029268975edcd542fd14160e0dadcb
x86_64-boot.iso
- tags: oracle, Oracle Linux , V978753-01.iso
- sha256sum: b8f73738bc605b952f5bf2ed04c40c880e5c119588b3f0af647e237fae2232b8
x86_64-boot-uek.iso
- tags: oracle, Oracle Linux , V978755-01.iso
- sha256sum: 001c05d5ea90341de768ba8bde4bbb0209f2b5e06996dc8637b9d3e86df206fe
OracleLinux-R6-U10-Server-i386-dvd.iso
- tags: oracle, Oracle Linux, V978754-01.iso
- sha256sum: 73755329985c96805c1d3ef31dfcb7f7561cd139cc8fe9226b8e794ad7ea4bd4
i386-boot.iso
- tags: oracle, Oracle Linux, V978751-01.iso
- sha256sum: 6a16c63d9d22f333181e7055b0f839e3f3e805bded281ab165cf4d2b4be5af20
i386-boot-uek.iso
- tags: oracle, Oracle Linux, V978752-01.iso
- sha256sum: 7a6478f87c54453eedc0916d67bbfbf892cfb71a08bca7fac580e64b830751c8

jasperReports
#

jasperReportServer-ultimate-guide-7.9.pdf
- tags: jasperReports
- sha256sum: 46322eaa9b37b0322b90c07981c3dc30617fb697735257ef25d6d570749129ba
Jasperserver-7.8.0.zip
- tags: jasperReports
- 28bff90c3f2cd4ef38948a700ea3ee829c75bca168c2cb1409da844e7ca294d5
TIB_js-jrs-cp_7.8.0_linux_x86_64.run
- tags: jasperReports
- e19e3d39b73f29ee96987c271d75b859c800e37913d11c3b5c855a50634982af
TIB_js-jrs-cp_8.0.0_bin.zip
- tags: jasperReports
- 6f60dca5b4dd48ce20e7ea0e42902c62082dca89f3695188890224de91f98a52
TIB_js-jrs-cp_8.0.0_macosx_x86_64.zip
- tags: jasperReports
- 6a6e5e109a92e9d95924ec21dd0d95606a1675ee2997d77b77013186248151cc
TIB_js-jrs-cp_8.0.0_win_x86_64.exe
- tags: jasperReports
- 6cee8503a493582923d00caf972f33975afff6550ce79e3b0bc1bb1cc7944792
TIB_js-jrs-cp_8.1.0_bin.zip
- tags: jasperReports
- 4c1edac34490c99c14d142acdac432154c94a7226fa718749afaf3e2d3739e30
TIB_js-jrs-cp_8.2.0_bin.zip
- tags: jasperReports
- 3659c5e6be23ab49a5a095741fd8111d8246b1622788e44b2af8b2295a384575

lnav 使用方式

Thu, 05 Jun 2025 23:37:57 +0800

分析 log

gitHub: https://github.com/tstack/lnav

安裝
#

`1`	`sudo apt install lnav`

使用方式
#

查看壓縮的日誌檔案:

Goaccess 日誌分析

Thu, 05 Jun 2025 22:52:06 +0800

分析 access log

安裝
#

wget -O - https://deb.goaccess.io/gnugpg.key | gpg --dearmor | sudo tee /usr/share/keyrings/goaccess.gpg >/dev/null
echo "deb [signed-by=/usr/share/keyrings/goaccess.gpg arch=$(dpkg --print-architecture)] https://deb.goaccess.io/ $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/goaccess.list
sudo apt update
sudo apt install goaccess

使用方式
#

分析多個檔案產出 html

`1`	`cat w/localhost_access_log..txt \| goaccess - --log-format=COMMON -o combined_report.html`

Terminal中分析

`1`	`cat w/localhost_access_log..txt \| goaccess - --log-format=COMMON`

報告解讀
#

如何解讀 GoAccess 報告
#

您好！生成 GoAccess 報告後，下一步就是解讀它所呈現的豐富數據。GoAccess 報告以模組化的方式組織資訊，讓您可以快速掌握網站的流量概況和使用者行為。

Worknot 20241113 1

Wed, 13 Nov 2024 11:46:34 +0800

剛剛 commit 想要反悔
#

1
2

git reset master^
git reset --hard HEAD

處理結果

 ~/Documents/gitContent/data/tgroup/test on master ⇡3 ·······································
❯  git reset master^
Unstaged changes after reset:
M       build.gradle
M       grails-app/services/ex/ExampleService.groovy

 ~/Documents/gitContent/data/tgroup/test on master !2 ·······································
❯ git reset --hard HEAD
HEAD is now at 7d0988b Merge branch 'develop' of http://127.0.0.1/tgroup/test

修補 CVE-2023-41080

Wed, 13 Nov 2024 00:08:28 +0800

URL: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41080

contentDescription
#

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. The vulnerability is limited to the ROOT (default) web application.

處理方式
#

調查tomcat version

`1`	`sudo ls -l /home/tomcat/apache-tomcat*`

升級 tomcat

資訊工程職務必經之路

Tue, 12 Nov 2024 23:13:11 +0800

以下是我個人工作上的經驗，笑笑就好

初階工程師
#

一開始我踏入資訊行業是擔任甲方駐點資訊人員。事情很雜，凡事系統發生問題都要處理，最小的事情是系統發生錯誤要進行排除，大到系統崩潰都要進行處理。但是擔任第一線的資訊員通常只要進行事件回報即可，等到有一定的排除系統能力也就漸漸的往其他領域發展。

big-ip client linux 安裝

Mon, 04 Nov 2024 15:32:49 +0800

https://<big-ip apm virtual server>/public/download/<file name>

Debian
linux_f5cli.x86_64.deb
linux_f5epi.x86_64.deb
linux_f5vpn.x86_64.deb

`1`	`sudo apt install ./linux_f5*.deb`

參考資料
#

K47922841: Using the Linux client f5fpc to connect to the BIG-IP APM network access for the first time

telnet 替代方案: curl

Wed, 30 Oct 2024 22:14:13 +0800

過去在偵測網路 port 可連接的狀況，會使用 telnet 這個指令測，但是新版的作業系統已經預設已經沒有安裝了。

現在的替代方案是 curl 指令，此方法在 windows 10 環境也適用

`1`	`curl telnet://[IP]:[port]`

讓我們來看一下差別，以下是 telnet 輸出的結果

硬體設備-hba

Wed, 30 Oct 2024 21:42:54 +0800

最近工作中遇到需要設定光纖設備，這邊我稍微紀錄一下過往常用的指令

查詢 hba 型號: ``

1
2
3

[root@test-host ~]# lspci -nn |egrep -i "fibre|hba"
17:00.0 Fibre Channel [0c04]: QLogic Corp. ISP2532-based 8Gb Fibre Channel to PCI Express HBA [1077:2532] (rev 02)
17:00.1 Fibre Channel [0c04]: QLogic Corp. ISP2532-based 8Gb Fibre Channel to PCI Express HBA [1077:2532] (rev 02)

重新掃描 scsi: echo "- - -" > /sys/class/scsi_host/<host>/scan

Prometheus Node Exporter 設定

Mon, 28 Oct 2024 21:45:28 +0800

安裝環境
#

OS: Oracle Linux 9, Debian 12
測試版本: 1.8.2

安裝步驟
#

01. 新增帳號
#

1
2

sudo groupadd --system -g 800 prometheus &&\
sudo useradd -s /sbin/nologin --system -g prometheus --uid 800 -c "prometheus_exporter" prometheus

02. 下載 Node Exporter 及部署程式
#

下載 Node Exporter

AI幻覺導致我操作系統錯誤了

Sun, 13 Oct 2024 22:19:03 +0800

TL;DR
#

剛剛在練習 KVM 指令時一些不懂的地方直接問 Cheap GPT 遇到 AI 幻覺。在執行虛擬磁碟擴容到 60G 照著 GPT 指示做，結果擴充到 30TB。好險是在實驗室進行操作練習，如果是在正式環境可能或造成難以收復的系統災難。

Redmine Api

Sun, 15 Sep 2024 23:16:39 +0800

以下是 redmine API 筆記

在使用 API 之前記得先取得 token，token 會在 [我的帳戶] - [API 存取金鑰] 中，每個帳戶都會有一組。

取得 Token 之後就可以進行操作了

在這邊我會使用兩個參數方便接下來的操作

pdns-server 安裝

Fri, 09 Aug 2024 22:18:32 +0800

以下是我初次建立 powerdns 服務的紀錄

環境
#

OS: Debian 12
DB: postgresql-14
pdns-server version: 4.7

`1`	`apt install pdns-server pdns-backend-pgsql -y`

事前準備
#

安裝 postgresql
建立資料庫

1
2

sudo su - postgres
psql

CREATE DATABASE pdnsdb;
CREATE USER pdns WITH PASSWORD 'pdnsPassword';
GRANT CONNECT ON DATABASE pdnsdb TO pdns;
ALTER DATABASE pdnsdb OWNER TO pdns;

建置 table schema，可以在說明文件中找到: /usr/share/doc/pdns-backend-pgsql/schema.pgsql.sql

docker overlay2

Fri, 19 Jul 2024 15:56:16 +0800

經驗分享

linux /var/lib/docker/overlay2 這層目錄不能亂刪

刪了本機的 docker image 通通不見

服務會瞬間死光光

以下是誤刪的解決方式

重啟 docker

sudo systemctl restart docker

清除docker資源

docker system prune -a

重新匯入 docker image

尋找作業系統帳號建立日期

Wed, 17 Jul 2024 06:14:11 +0800

weindows
#

Write-Output "User,Birth"

# 取得所有用戶名和主目錄路徑
$users = Get-WmiObject Win32_UserAccount | Where-Object { $_.LocalAccount -eq $true -and $_.SIDType -eq 1 }

foreach ($user in $users) {
    $homeDir = "C:\Users\$($user.Name)"
    
    if (Test-Path $homeDir) {
        $creationTime = (Get-Item $homeDir).CreationTime
        $formattedTime = $creationTime.ToString("yyyy-MM-dd HH:mm:ss")
        Write-Output "$($env:COMPUTERNAME),$($user.Name),$formattedTime"
    } else {
        Write-Output "$($env:COMPUTERNAME),$($user.Name),-"
    }
}

Linux
#

#!/bin/bash


# 從 /etc/passwd 文件中讀取所有用戶名和主目錄路徑
while IFS=: read -r username _ _ _ _ home_dir _; do
  if [ -d "$home_dir" ]; then
    # 使用 stat 命令獲取主目錄資訊
    stat_output=$(stat "$home_dir")
    birth_time=$(echo "$stat_output" | grep 'Birth' | awk '{print $2 " " $3}')
    
    if [ -n "$birth_time" ]; then
      formatted_time=$(date -d "$birth_time" +'%Y-%m-%d %H:%M:%S')
      echo "$(hostname),$username,$formatted_time"
    else
      birth_time=$(echo "$stat_output" | grep 'Change' | awk '{print $2 " " $3}')
    if [-n "$birth_time"]; then
      formatted_time=$(date -d "$birth_time" +'%Y-%m-%d %H:%M:%S')
    else
      echo "$(hostname),$username,-"
    fi
      
    fi
  else
    echo "$(hostname),$username,-"
  fi
done < /etc/passwd

故障排除: Linux 連接 windows AD

Mon, 08 Jul 2024 22:20:49 +0800

環境
#

AD server: windows server 2022 Client server: Oracle Linux 9

症狀: 無法抓取 AD 新資訊
#

1
2

[root@client-server ~]# id testacconut
id: ‘testacconut’: no such user

問題排除步驟
#

# 退出當前 AD 領域。
realm leave

# 停止 sssd 服務。
systemctl stop sssd

# 確保舊的 AD 資料被清除。
sudo rm -rf /var/lib/sss/db/*
sudo rm -rf /var/lib/sss/mc/*
sudo rm -rf /var/lib/sss/secrets/*
sudo rm -rf /var/lib/sss/pipes/*
sudo rm -rf /var/lib/sss/gpo_cache/*
sudo rm -rf /var/cache/realmd/*

# 重新加入新的 AD 領域。
realm join --user=adManager ad.server.domain.com

# 建立目錄和設置權限, 確保新的 sssd 配置能正常工作。
mkdir -p /var/lib/sss/pipes/private
chown sssd:root /var/lib/sss/pipes/private

# 重新啟動 sssd 服務以應用新的設定。
systemctl restart sssd

檢查
#

1
2

[root@client-server ~]# id testacconut
uid=1167001136(testacconut@ad.server.domain.com) gid=1167000513(domain users@ad.server.domain.com) groups=1167000513(domain users@ad.server.domain.com)

Oracle OCFS2 初學

Wed, 03 Jul 2024 23:50:53 +0800

Oracle Cluster File System 2 (OCFS2) 文件系统

指令
#

手動掛載
#

`1`	`mount -t ocfs2 /dev/xvdb1 /data`

處理結果

Docker Network 網路問題排除

Sun, 30 Jun 2024 08:28:26 +0800

狀況
#

從 docker 內部無法連接外網，但是主機可以。例如

[root@test-vm oraGtw4db2]# docker exec -it oragtw4db2 bash
[root@text-docker /]# ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
^C
--- 8.8.8.8 ping statistics ---
6 packets transmitted, 0 received, 100% packet loss, time 5119ms

檢查步驟
#

從 docker 內部 ping 外網，例如: ping 8.8.8.8
從主機內部 ping 外網，例如: ping 8.8.8.8
檢查 docker 啟動時有錯誤訊息，指令: journalctl -u docker.service

錯誤訊息處理
#

bridge-nf-call-iptables is disabled
#

level=warning msg=“WARNING: bridge-nf-call-iptables is disabled”
level=warning msg=“WARNING: bridge-nf-call-ip6tables is disabled”

啟用 br_netfilter

修補 CVE-2023-48795

Thu, 06 Jun 2024 23:20:15 +0800

修補 CVE-2023-48795 方式

系統環境
#

OS: Rocky Linux 8

檢測方式
#

使用有風險的加密方式登入，無法登入則驗證通過

網頁連線問題

Tue, 07 May 2024 14:44:31 +0800

問題
#

You cannot visit domain.example.com right now because the website uses HSTS.

說明
#

該網站啟用了 HSTS（HTTP Strict Transport Security）功能，這意味著您的瀏覽器記住了您僅能使用安全的 HTTPS 連接方式訪問該網站，以增強安全性。這可以防止您的瀏覽器通過不安全的 HTTP 連接訪問該網站。

職涯七年心路歷程

Tue, 07 May 2024 00:11:13 +0800

這幾個月左思右想，這幾年的工作中發現做有些事情可以讓任務執行的更順暢。

凡事先規劃並將規劃轉寫成文件。
每天列舉出要做的事項。
完成工作後，撰寫一份簡單的結案文件。

這三件事情我覺的重點在於「紀錄文件」這件事。畢竟身為人畢竟識健忘的，即使是一個團體內部可以互向提醒，但是集體忽略或是忘記某件事仍然會出現。所以將每項任務或是事情落實成文件是一件很重要的事情。重點有這些文件，隨時都可以有一個交接的起步。

GlassFish 2.1.1.1 CLI 說明文件

Tue, 30 Apr 2024 18:21:25 +0800

GlassFish 2.1.1.1 CLI 說明

最近在處理 GlassFish 2.1.1.1 的相關問題，發現裡面的說明有些難看，於是我稍微把裡面的說明文件整理了一下

asadmin> help


NAME
     help - displays the asadmin utility commands

SYNOPSIS

     help  [command_name]

     command_name  [--help | -?]

DESCRIPTION
     The help command displays a list of all the asadmin  utility commands.  Specify the command to display the usage informa-tion for that command.  To display the man page of each com-mand,  use  the  syntax: asadmin command_name --help | -? or asadmin help command_name

     The following is a list of all the asadmin utility commands:

     add-resources

         registers the resource in the specified XML file

     apply-http-lb-changes
         applies load balancer configuration changes to the  load
         balancer

     backup-domain

         performs a backup on the domain

     change-admin-password
         changes the administrator password

     change-master-password

         changes the master password

     clear-ha-store
         deletes tables in the HA database

     configure-ha-cluster

         configures an existing cluster to be High Availability

     configure-ha-persistence

         enables configuration of parameters related  to  session persistence

     configure-lb-weight
         
         sets load balancing weights for clustered instances

     configure-webservice-management

          sets the monitoring or maxhistory or  attributes of a deployed webservice

     copy-config
         copies an existing configuration to create a new  confi-guration

     create-admin-object

         adds the administered object  with  the  specified  JNDI name

     create-application-ref
         
         creates a reference to an application

     create-audit-module

         creates an audit module for the optional plugin module

     create-auth-realm
         adds the named authorized realm

     create-cluster

         creates a cluster

     create-connector-connection-pool
         adds a connection pool  with  the  specified  connection
         pool name

     create-connector-resource

         registers the resource with the specified JNDI name

     create-connector-security-map

         creates or modifies a security map for the named connec-
         tor connection pool

     create-converged-lb
         creates a converged load balancer.

         Note -

           This command is available if you  have  installed  Sun GlassFish Communications Server.

     create-converged-lb-config

         creates a converged load balancer configuration.

         Note -

           This command is available if you  have  installed  Sun GlassFish Communications Server.

     create-converged-lb-ref
        
         creates a converged load balancer reference.

         Note -

           This command is available if you  have  installed  Sun
           GlassFish Communications Server.

     create-custom-resource

         registers the custom resource

     create-domain
        
         creates a domain with the specified name

     create-file-user

         creates a new file user

     create-ha-store
         creates tables in HA database that are used by HA clus-ter

     create-http-health-checker

         creates a health-checker for a specified  load  balancer configuration

     create-http-lb
         creates a load balancer

     create-http-lb-config

         creates a configuration for the load balancer

     create-http-lb-ref
         add an existing cluster or server instance to an exist-ing load balancer configuration

     create-http-listener

         adds a new HTTP listener socket

     create-iiop-listener

         adds the IIOP listener

     create-instance

         creates an instance with the given name

     create-javamail-resource
         registers the Javamail resource

     create-jdbc-connection-pool

         registers the JDBC connection pool

     create-jdbc-resource

         registers the JDBC resource

     create-jms-host

         creates a JMS host

     create-jms-resource

         registers the JMS resource

     create-jmsdest

         adds the named destination

     create-jndi-resource

         registers the JNDI resource

     create-jvm-options

         creates the JVM options from the Java  configuration  or profiler elements

     create-lifecycle-module

         adds a lifecycle module

     create-management-rule

         creates a new management rule

     create-mbean

         creates and registers a custom MBean

     create-message-security-provider

         enables administrators to create  the  message-security-config and provider-config sub-elements for the security service in domain.xml

     create-node-agent-config

         adds a new unbound node agent to a domain

     create-node-agent

         creates a node agent and its associated directory struc-ture

     create-password-alias

         creates a password alias

     create-persistence-resource

         registers the persistence resource

     create-profiler

         creates the profiler element

     create-resource-adapter-config

        creates the resource adapter Java bean

     create-resource-ref

         creates a reference to a resource

     create-service

         configures the starting of a DAS or  node  agent  on  an unattended boot

     create-sip-listener

         creates the SIP listener.

         Note -

           This command is available if you  have  installed  Sun GlassFish Communications Server.

     create-ssl

         creates the SSL element in the  HTTP  listener  or  IIOP listener

     create-system-properties
         adds or updates one or more  system  properties  of  the domain, configuration, cluster, or server instance

     create-threadpool

         creates the thread pool

     create-transformation-rule
         
         creates transformation rule for a deployed web service

     create-trust-config

         creates a trust configuration.

     create-trusted-entity
         
         creates a trusted entity.

     create-virtual-server

         adds the named virtual server

     delete-admin-object
         
         removes the administered object with the specified  JNDI name


     delete-application-ref

         removes a reference to an application

     delete-audit-module
         deletes the audit-module for the optional plugin module

     delete-auth-realm

         removes the named authorized realm

     delete-converged-lb

         deletes the specified converged load balancer

     delete-converged-lb-config

         deletes the specified converged load balancer configura-tion.

     delete-converged-lb-ref

         deletes the specified converged load balancer reference.

     delete-cluster

         deletes a cluster

     delete-config

         deletes an existing configuration

     delete-connector-connection-pool

         removes the specified connection pool

     delete-connector-resource

         removes the named resource connector

     delete-connector-security-map

         deletes the named security map

     delete-custom-resource

         removes the custom resource

     delete-domain

         deletes the given domain

     delete-file-user

         removes the named file user

     delete-http-health-checker

         deletes a health-checker for a specified  load  balancer configuration

     delete-http-lb

         deletes a load balancer

     delete-http-lb-config

         deletes a load balancer configuration

     delete-http-lb-ref

         deletes the cluster  or  server  instance  from  a  load balancer configuration

     delete-http-listener

         removes the HTTP listener

     delete-iiop-listener

         removes the IIOP listener

     delete-instance

         deletes the instance that is not running

     delete-javamail-resource

         removes the Javamail resource

     delete-jdbc-connection-pool

         removes the JDBC connection pool

     delete-jdbc-resource

         removes the JDBC resource

     delete-jms-host

         removes a JMS host

     delete-jms-resource

         removes the JMS resource

     delete-jmsdest

         destroys the named destination

     delete-jndi-resource

         removes the JNDI resource

     delete-jvm-options

         deletes the JVM options from the Java  configuration  or profiler elements


     delete-lifecycle-module

         removes the lifecycle module

     delete-management-rule

         deletes a specified management rule

     delete-mbean

         deletes a custom MBean

     delete-message-security-provider

         enables administrators to delete a provider-config  sub-element  for  the given message layer (message-security-config element of domain.xml)

     delete-node-agent-config

         removes a node agent from a domain

     delete-node-agent

         deletes the node  agent  and  its  associated  directory structure

     delete-password-alias

         deletes a password alias

     delete-persistence-resource

         removes the persistence resource

     delete-profiler

         deletes the profiler element

     delete-resource-adapter-config

         deletes the resource adapter Java bean

     delete-resource-ref

         removes a reference to a resource


     delete-sip-listener

         deletes the specified SIP listener.

     delete-ssl

         deletes the ssl element from the HTTP listener  or  IIOP listener

     delete-system-property

         removes one or more system  properties  of  the  domain, configuration, cluster, or server instance

     delete-threadpool
         deletes the thread pool

     delete-transformation-rule

         deletes the transformation rule of a given web service

     delete-trust-config
         deletes the trust configuration.

         Note -

           This command is available if you  have  installed  Sun GlassFish Communications Server.

     delete-trusted-entity

         deletes the trusted entity

         Note -

           This command is available if you  have  installed  Sun GlassFish Communications Server.

     delete-virtual-server

         deletes the virtual server with the named virtual server ID

     deploy-jbi-service-assembly

         deploys a service assembly into the JBI environment

     deploy

         deploys the specified component

     deploydir

         deploys the component that is in  the  specified  direc-tory, located in the domain

     disable-http-lb-server

         disables a sever or cluster managed by a load balancer

     disable-converged-lb-server

         disables a sever or cluster managed by a converged  load balancer

         Note -

           This command is available if you  have  installed  Sun GlassFish Communications Server.

     disable-http-lb-application

         disables an application managed by a load balancer

     disable
         stops the specified, deployed component

     display-error-distribution

         displays distribution of errors from instance server.log
         at module level

     display-error-statistics
         
         displays a summary list of severities and warnings

     display-log-records

         displays all the error messages for a given module at a given timestamp

     enable-converged-lb-server

         enables a previously disabled sever or  cluster  managed by a converged load balancer

         Note -

           This command is available if you  have  installed  Sun GlassFish Communications Server.

     enable-http-lb-application

         enables a previously-disabled application managed  by  a
         load balancer

     enable-http-lb-server
         
         enables a previously disabled sever or  cluster  managed by a load balancer

     enable

         runs the specified, deployed component

     export-http-lb-config

         exports the load balancer configuration to a  file  that can be used by the load balancer

     export

         marks a  variable  name  for  automatic  export  to  the environment of subsequent commands in multimode

     flush-jmsdest

         purges the messages in a JMS destination

     freeze-transaction-service

         immobilizes the named transaction service

     generate-diagnostic-report


         generates reports that can help diagnose malfunctioning

     generate-jvm-report

         shows the threads, classes and memory for a given target instance

     get-client-stubs

         gets the stubs of the client

     get

         gets the  values  of  the  monitorable  or  configurable
         attributes

     get-health

         provides information on the cluster health

     help
         displays a list of all the  commands  available in the command-line interface

     install-jbi-component

         installs a service engine or binding component into the JBI environment

     install-jbi-shared-library

         installs a shared library into the JBI environment

     jms-ping

         checks to see if the JMS provider is running

     list-admin-objects
         lists all the administered objects

     list-application-refs

         lists  all  application  references  in  a  cluster   or unclustered server instance

     list-audit-modules

         lists the audit modules

     list-auth-realms

         lists the authorized realms

     list-backups

         lists all backups and restores

     list-clusters

         lists the existing clusters

     list-components

         lists deployed components

     list-configs

         lists all existing configurations

     list-connector-connection-pools

          gets all the connection pools

     list-connector-resources

         gets all the connector resources

     list-connector-security-maps

         lists the security maps  for  the  connector  connection pool

     list-converged-lbs

         lists all the converged load balancers.

         Note -

           This command is available if you  have  installed  Sun GlassFish Communications Server.

     list-converged-lb-configs

         lists all the converged load balancer configurations.

         Note -

           This command is available if you  have  installed  Sun GlassFish Communications Server.

     list-custom-resources

         gets all the custom resources

     list-domains

         lists the domains in the given domains directory

     list-file-groups

         lists the file groups

     list-file-users

         lists the file users

     list-http-lb-configs

         lists load balancer configurations

     list-http-lbs
         lists load balancers

     list-http-listeners

         gets the HTTP listeners

     list-iiop-listeners

         gets the IIOP listeners

     list-instances

         lists all the instances in the server

     list-javamail-resources

         gets all the Javamail resources

     list-jdbc-connection-pools

         registers the JDBC connection pool

     list-jdbc-resources

         gets all the JDBC resources

     list-jbi-binding-components

         lists the binding components installed on the  specified target

     list-jbi-service-assemblies

         lists the service  assemblies  installed  into  the  JBI environment

     list-jbi-service-engines

         lists the service engines  installed  on  the  specified target

     list-jbi-shared-libraries

         lists the JBI shared libraries that are  installed into the JBI environment

     list-jms-hosts

         lists the existing JMS hosts

     list-jms-resources

         gets all the JMS resources

     list-jmsdest

         gets all the named destinations

     list-jndi-entries

         gets all the named destinations, browses and queries the JNDI tree

     list-jndi-resources

         gets all the JNDI resources

     list-lifecycle-modules
         gets the lifecycle modules

     list-management-rules

         lists the management rules  created  using  the  create-management-rule command

     list-mbeans

         lists the  custom  mbeans  for  a  given  target  server
         instance

     list-message-security-providers
         enables administrators to list all security message pro-viders (provider-config sub-elements) for the given mes-sage layer (message-security-config element of domain.xml)

     list-node-agents

         lists the node agents along with their status

     list-password-aliases

         lists all password aliases

     list-persistence-resources

         gets all the persistence resources

     list-registry-locations

         returns list of configured web service  registry  access points

     list-resource-adapter-configs

         lists the resource adapters configured in an instance

     list-resource-refs

         lists the existing resource references

     list-sub-components

         lists EJBs or Servlets in a  deployed  module  or  in  a module of a deployed application

     list-system-properties
         lists the system properties of the domain, configuration, cluster, or server instance

     list-threadpools

         lists the thread pools

     list-timers

         lists all of the timers owned by server instance(s)

     list-transformation-rules

         lists all the transformation rules of a given webservice

     list-trust-configs

         lists all identity assertion trust configurations.

     list-virtual-servers

         gets the virtual servers

     list

         lists the configurable elements and provides the fully qualified dotted names of the management components that have read-only or modifiable attributes

     login

         lets you log in to a domain

     migrate-timers

         moves a timer when a server instance stops

     monitor

         displays monitoring data for commonly-used components

     multimode
         allows you to execute multiple commands while returning environment  settings and remaining in the asadmin util-ity

     ping-connection-pool

         tests if a connection pool is usable

     publish-to-registry

         publishes all the web service artifacts to registries

     recover-transactions

         manually recovers pending transactions

     remove-ha-cluster

         returns an HA cluster to non-HA status

     restore-domain

         restores files from backup

     rollback-transaction
         rolls back the named transaction

     set

         sets the values of attributes. Set command can  be  used to modify default properties of a resource.

     set-dcr-file

         uploads the Data Centric Rule (DCR) file from the Domain Administration Server (DAS).

         Note -

           This command is available if you  have  installed  Sun GlassFish Communications Server.

     show-component-status

         displays the status of the deployed component

     show-jbi-binding-component

         shows detailed information about the  specified  binding
         component

     show-jbi-service-assembly

         shows detailed information about a specified  service assembly

     show-jbi-service-engine

         shows detailed information about the  specified service engine

     show-jbi-shared-library

         shows detailed information about  a  specified shared library

     shut-down-jbi-component

         shuts down a service engine or a  binding  component  on
         the specified target

     shut-down-jbi-service-assembly

         shuts down a JBI service assembly on the specified  tar-get

     start-appserv

         starts the domains in the specified domains directory

     start-callflow-monitoring

         provides the complete callflow/path of a request

     start-cluster

         starts a cluster

     start-database

         starts the bundled Java DB database

     start-domain

         starts the given domain

     start-instance

         starts a server instance

     start-jbi-component

         starts a service engine or a binding  component on the specified target

     start-jbi-service-assembly

         starts a service assembly on the specified target

     start-node-agent

         starts a node agent

     stop-appserv

         stops the domains in the specified domains directory

     stop-callflow-monitoring

         disables collection of callflow information of a request

     stop-cluster

         stops a cluster

     stop-database

         stops the bundled Java DB database

     stop-domain

         stops the given domain

     stop-instance

         stops a server instance

     stop-jbi-component

         stops a service engine or a  binding  component  on  the specified target

     stop-jbi-service-assembly

         stops a service assembly on the specified target

     stop-node-agent

         stops a node agent

     undeploy-jbi-service-assembly

         undeploys a service assembly on the specified target

     undeploy

         removes a component in the domain

     unfreeze-transaction-service

         mobilizes the named transaction service

     uninstall-jbi-component

         uninstalls a service engine or binding component on the specified target

     uninstall-jbi-shared-library

         uninstalls a shared library on the specified target

     unpublish-from-registry

         unpublishes the web service artifacts  from  the  regis-tries

     unset
         removes  one  or  more  variables from the multimode environment

     unset

         removes  one  or  more  variables from the multimode environment

     unset-dcr-file
     
         removes the Data Centric Rule (DCR) file from the Domain Administration Server (DAS).

         Note -

           This command is available if you  have  installed  Sun

GlassFish Communications Server.

     update-file-user

         updates a current file user as specified

     update-password-alias
         updates a password alias

     upgrade-jbi-component

         upgrades a service engine or binding component

     verify-domain-xml
         verifies the content of the domain.xml

     version

         displays the version information

     The following commands are deprecated:


         o    display-license

         o    install-license

         o    restart-instance

         o    shutdown

         o    create-acl

         o    delete-acl

         o    list-acls

         o    start-appserv

         o    stop-appserv

EXAMPLES
     Example 1 Using help

       asadmin> help

       asadmin> create-domain --help

     Where: create-domain is the command you  wish  to  view  the usage for.

SEE ALSO
     asadmin(1M)

grails5 強制升級 plugin 相依

Sun, 28 Apr 2024 12:14:15 +0800

今天在為自己的專案做CVE 弱點掃描，解決過程中需要為專案進行 plugin 相依升級。在 build.gradle 設定如下

build.gradle


configurations{
    // 強制移除
    implementation {
        exclude group: 'com.h2database' //CVE-2022-45868,CVE-2022-23221,CVE-2021-42392
        exclude group: "org.graalvm.sdk"
        exclude group: "com.bertramlabs.plugins:asset-pipeline-core"
    }

    // 強制升級
    all{
        resolutionStrategy.eachDependency { DependencyResolveDetails details ->
            ModuleVersionSelector requested = details.requested
            List forcePlugins = [
                    [group: 'org.yaml', name: 'snakeyaml', useVersion: '1.33'],
            ]

            forcePlugins.each {forcePlugin ->
                if (requested.group == forcePlugin.group && requested.name == forcePlugin.name ) {
                    details.useVersion forcePlugin.useVersion
                }
            }
        }
    }
}

dependency-check

Sun, 28 Apr 2024 08:47:57 +0800

下載

1
2

wget https://github.com/jeremylong/DependencyCheck/releases/download/v9.1.0/dependency-check-9.1.0-release.zip
sudo unzip -q dependency-check-9.1.0-release.zip -d /usr/local/share

執行
#

`1`	`/usr/local/share/dependency-check/bin/dependency-check.sh -s ~/Documents/gitContent/pollochang/TWGBC/pollo-twgcb-web/build/libs/pollo-twgcb-web.war --format HTML -o ./`

參考資料
#

DependencyCheck

hugo 筆記

Sat, 27 Apr 2024 23:30:17 +0800

hugo + gitHub 是我自己架設網站的工具，這邊我簡單紀錄一下常用的指令

新增文章

`1`	`hugo new worknot/worknot-$(date '+%Y%m%d').md`

預覽文章，包含草稿

`1`	`hugo server`

預覽文章，包含草稿

`1`	`hugo server -D`

寫好的內容推送到網站

#!/bin/bash

hugo
git -C public add .
git -C public commit -m "更新筆記"
git -C public push

CLI 檢查網站憑證

Fri, 26 Apr 2024 07:00:46 +0800

curl
#

`1`	`curl https://www.google.com -v -k 2>&1 \| grep -E "Connected to\|subject\|expire"`

執行結果

❯ curl https://www.google.com -v -k 2>&1 | grep -E "Connected to|subject|expire"
* Connected to www.google.com (2404:6800:4012:2::2004) port 443 (#0)
*  subject: CN=www.google.com
*  expire date: Jun 10 20:38:48 2024 GMT
< expires: -1
< set-cookie: 1P_JAR=2024-04-25-23; expires=Sat, 25-May-2024 23:03:14 GMT; path=/; domain=.google.com; Secure
< set-cookie: AEC=AQTF6Hw4gUm8n5W0uPUDTe6vEa8fTROwT6DEAUWQ6FTKMp52DrhWnROmmw; expires=Tue, 22-Oct-2024 23:03:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
< set-cookie: NID=513=TZnGjLI3KvFu_SLuZJCrPktY6GMHeuK3Hg8ht9ojqTr_OgX460hGPFUccru0PZr2J1pWw_mynjevt8eTyWu0pN9gPXi4hcJkFUQzR9SJlTfypnftjNlM9CGEu1956tVk67u6tWkrNRa2zi8QdXzULlXJZ2wO1tBrzCGnmRJ4nyg; expires=Fri, 25-Oct-2024 23:03:14 GMT; path=/; domain=.google.com; HttpOnly

openssl
#

`1`	`echo \| openssl s_client -servername www.google.com -connect www.google.com:443 \| openssl x509 -noout -dates`

執行結果

❯ echo | openssl s_client -servername www.google.com -connect www.google.com:443 | openssl x509 -noout -dates
depth=2 C = US, O = Google Trust Services LLC, CN = GTS Root R1
verify return:1
depth=1 C = US, O = Google Trust Services LLC, CN = GTS CA 1C3
verify return:1
depth=0 CN = www.google.com
verify return:1
DONE
notBefore=Mar 18 20:38:49 2024 GMT
notAfter=Jun 10 20:38:48 2024 GMT

linux 資料基礎分析

Thu, 25 Apr 2024 22:16:23 +0800

grep: 過濾資料

`1`	`grep 要過濾出的資料 exampleFileSource.log > exampleFile.log`

cut 切除每行前 60 個字元

`1`	`cut -b 60- exampleFile.log > exampleFile.2.log`

sort: 類似 sql distinct 效果

`1`	`grep 要過濾出的資料 exampleFile.2.log \| sort --unique`

分析 message IP
#

1
2

grep "martian source" messages | grep -oE '([0-9]{1,3}\.){3}[0-9]{1,3}' >> messages-IP.log
sort messages-IP.log | uniq -c | sort -nr

程式進化史

Tue, 16 Apr 2024 07:14:27 +0800

筆記一下這些年我寫的糞 code 的優化流程

一開始寫的
#

被檢測為 CyclomaticComplexity 。程式如下:

package work.pollochang.twgcb

import grails.gorm.transactions.Transactional
import grails.web.servlet.mvc.GrailsParameterMap
import org.hibernate.criterion.CriteriaSpecification
import org.hibernate.type.StandardBasicTypes
import work.pollochang.util.PFilterResult
import work.pollochang.util.PFilterType

/**
 * TWGCB 資料處理
 */
@Transactional
class TwGcbService {

    /**
     * 查詢
     * @param params
     * @param filterType
     * @return 查詢結果
     */
    PFilterResult filter(
            GrailsParameterMap params,
            PFilterType filterType = PFilterType.DEFAULT
    ) {
        PFilterResult pFilterResult = new PFilterResult()

        params.max = (params.max ?: '10').toInteger()
        params.offset = (params?.offset ?: '0').toInteger()

        List<Twgcb> twgcbList =  Twgcb.createCriteria().list(params) {
            resultTransformer(CriteriaSpecification.ALIAS_TO_ENTITY_MAP)

            switch (filterType) {
                case PFilterType.QUICK:
                    projections {
                        property('id', 'id')
                        property('twgcbId', 'twgcbId')
                        property('cname', 'cname')
                        property('typeDesc', 'typeDesc')
                    }
                    break
                case PFilterType.FULL:
                    projections {
                        property('id', 'id')
                        property('twgcbId', 'twgcbId')
                        property('cname', 'cname')
                        property('type', 'type')
                        property('explanation', 'explanation')
                        property('instructions', 'instructions')
                        property('defaultValue', 'defaultValue')
                        property('remark', 'remark')
                        property('typeDesc', 'typeDesc')
                    }
                    break
                case PFilterType.VIEW:
                    projections {
                        property('id', 'id')
                        property('twgcbId', 'twgcbId')
                        property('cname', 'cname')
                        property('explanation', 'explanation')
                        property('instructions', 'instructions')
                        property('defaultValue', 'defaultValue')
                        property('remark', 'remark')
                        property('typeDesc', 'typeDesc')
                    }
                    break
                default:
                    projections {
                        property('twgcbId', 'twgcbId')
                        property('cname', 'cname')
                        sqlProjection("(select t.cdesc from bs_select t where t.type = 'twgcb_type' and t.code = this_.type ) typeDesc", ['typeDesc'], [StandardBasicTypes.STRING])
                    }
            }

            if (params?.twgcbId) {
                eq('twgcbId',params?.twgcbId)
            }

            if (params?.type) {
                int type = params?.type as int
                eq('type',type)
            }

            if (params?.id) {
                long id = params?.id as long
                eq('id',id)
            }

            if (params?.cname) {
                ilike('cname', "%${params?.cname}%")
            }

            order('twgcbId', 'asc')
        } as List<Twgcb>

        pFilterResult.domainList = twgcbList
        pFilterResult.totalCount = twgcbList.totalCount?:0

        return pFilterResult

    }
}

第一次優化
#

將顯示欄位邏輯拉出
#

更改前

/**
* 查詢
* @param params
* @param filterType
* @return 查詢結果
*/
PFilterResult filter(
    GrailsParameterMap params,
    PFilterType filterType = PFilterType.DEFAULT
) {

    // 程式碼部份省略

    switch (filterType) {
      case PFilterType.QUICK:
          projections {
              property('id', 'id')
              property('twgcbId', 'twgcbId')
              property('cname', 'cname')
              property('typeDesc', 'typeDesc')
          }
          break
      case PFilterType.FULL:
          projections {
              property('id', 'id')
              property('twgcbId', 'twgcbId')
              property('cname', 'cname')
              property('type', 'type')
              property('explanation', 'explanation')
              property('instructions', 'instructions')
              property('defaultValue', 'defaultValue')
              property('remark', 'remark')
              property('typeDesc', 'typeDesc')
          }
          break
      case PFilterType.VIEW:
          projections {
              property('id', 'id')
              property('twgcbId', 'twgcbId')
              property('cname', 'cname')
              property('explanation', 'explanation')
              property('instructions', 'instructions')
              property('defaultValue', 'defaultValue')
              property('remark', 'remark')
              property('typeDesc', 'typeDesc')
          }
          break
      default:
          projections {
              property('twgcbId', 'twgcbId')
              property('cname', 'cname')
              sqlProjection("(select t.cdesc from bs_select t where t.type = 'twgcb_type' and t.code = this_.type ) typeDesc", ['typeDesc'], [StandardBasicTypes.STRING])
          }
    }

    // 程式碼部份省略

}

更改後

/**
* 查詢
* @param params
* @param filterType
* @return 查詢結果
*/
PFilterResult filter(
    GrailsParameterMap params,
    PFilterType filterType = PFilterType.DEFAULT
) {

    // 程式碼部份省略

    switch (filterType) {
        case PFilterType.QUICK:
            Closure projection = (Closure) quickProjection.clone()
            projection.delegate = delegate
            projection()
            break
        case PFilterType.FULL:
            Closure projection = (Closure) fullProjection.clone()
            projection.delegate = delegate
            projection()
            break
        case PFilterType.VIEW:
            Closure projection = (Closure) viewProjection.clone()
            projection.delegate = delegate
            projection()
            break
        default:
            Closure projection = (Closure) defaultProjection.clone()
            projection.delegate = delegate
            projection()
    }

    // 程式碼部份省略

}

/**
  * 快速顯示欄位
  */
private Closure quickProjection =  {
}

/**
  * 完整顯示欄位
  */
private Closure fullProjection =  {
}

/**
  * 檢視單筆資料欄位
  */
private Closure viewProjection =  {
}

/**
  * 預設顯示欄位
  */
private Closure defaultProjection =  {
}

將查詢條件修飾
#

更改前

/**
* 查詢
* @param params
* @param filterType
* @return 查詢結果
*/
PFilterResult filter(
    GrailsParameterMap params,
    PFilterType filterType = PFilterType.DEFAULT
) {

    // 程式碼部份省略

    if (params?.twgcbId) {
        eq('twgcbId',params?.twgcbId)
    }

    if (params?.type) {
        int type = params?.type as int
        eq('type',type)
    }

    if (params?.id) {
        long id = params?.id as long
        eq('id',id)
    }

    if (params?.cname) {
        ilike('cname', "%${params?.cname}%")
    }

    // 程式碼部份省略

}

更改後

/**
* 查詢
* @param params
* @param filterType
* @return 查詢結果
*/
PFilterResult filter(
    GrailsParameterMap params,
    PFilterType filterType = PFilterType.DEFAULT
) {

    // 程式碼部份省略

    params.each { key, value ->
        if(value){
            switch (key) {
                case 'twgcbId':
                    eq('twgcbId', value)
                    break
                case 'type':
                    eq('type',value as int)
                    break
                case 'id':
                    eq('id', value as long)
                    break
                case 'cname':
                    ilike('cname', "%${value}%")
                    break
            }
        }
    }

    // 程式碼部份省略

}

完整程式碼如下

annotation 與 AOP

Sat, 13 Apr 2024 17:12:49 +0800

範例程式完整專案:

Java 基本內置 annotation
#

@Override
#

重寫父層的方法

Mozilla Public License Version 2.0 中英文對照

Mon, 08 Apr 2024 22:39:41 +0800

英文原文
#

MOZILLA PUBLIC LICENSE
Version 2.0

1. Definitions

1.1. “Contributor” means each individual or legal entity that creates, contributes to the creation of, or owns Covered Software.
1.2. “Contributor Version” means the combination of the Contributions of others (if any) used by a Contributor and that particular Contributor's Contribution.
1.3. “Contribution” means Covered Software of a particular Contributor.
1.4. “Covered Software” means Source Code Form to which the initial Contributor has attached the notice in Exhibit A, the Executable Form of such Source Code Form, and Modifications of such Source Code Form, in each case including portions thereof.
1.5. “Incompatible With Secondary Licenses” means
    (a) that the initial Contributor has attached the notice described in Exhibit B to the Covered Software; or
    (b) that the Covered Software was made available under the terms of version 1.1 or earlier of the License, but not also under the terms of a Secondary License.
1.6. “Executable Form” means any form of the work other than Source Code Form.
1.7. “Larger Work” means a work that combines Covered Software with other material, in a separate file or files, that is not Covered Software.
1.8. “License” means this document.
1.9. “Licensable” means having the right to grant, to the maximum extent possible, whether at the time of the initial grant or subsequently, any and all of the rights conveyed by this License.
1.10. “Modifications” means any of the following:
      (a) any file in Source Code Form that results from an addition to, deletion from, or modification of the contents of Covered Software; or
      (b) any new file in Source Code Form that contains any Covered Software.
1.11. “Patent Claims” of a Contributor means any patent claim(s), including without limitation, method, process, and apparatus claims, in any patent Licensable by such Contributor that would be infringed, but for the grant of the License, by the making, using, selling, offering for sale, having made, import, or transfer of either its Contributions or its Contributor Version.
1.12. “Secondary License” means either the GNU General Public License, Version 2.0, the GNU Lesser General Public License, Version 2.1, the GNU Affero General Public License, Version 3.0, or any later versions of those licenses.
1.13. “Source Code Form” means the form of the work preferred for making modifications.
1.14. “You” (or “Your”) means an individual or a legal entity exercising rights under this License. For legal entities, “You” includes any entity that controls, is controlled by, or is under common control with You. For purposes of this definition, “control” means (a) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (b) ownership of more than fifty percent (50%) of the outstanding shares or beneficial ownership of such entity.

2. License Grants

2.1. Grants of Copyright License. Subject to third party intellectual property claims, each Contributor hereby grants You a world-wide, royalty-free, non-exclusive license
    (a) under intellectual property rights (other than patent or trademark) Licensable by such Contributor to use, reproduce, make available, modify, display, perform, distribute, and otherwise exploit its Contributions, either on an unmodified basis, with Modifications, or as part of a Larger Work; and
    (b) under Patent Claims of such Contributor to make, use, sell, offer for sale, have made, import, and otherwise transfer either its Contributions or its Contributor Version.
    
2.2. Grant of Patent License. Subject to third party intellectual property claims, each Contributor hereby grants You a world-wide, royalty-free, non-exclusive license under Patent Claims of such Contributor to make, use, sell, offer for sale, have made, import, and otherwise transfer either its Contributions or its Contributor Version, if any, in whole or in part. This patent license shall apply to the combination of the Contributions made by that particular Contributor and any portions thereof contained in either its Contributions or its Contributor Version.

2.3. Grants of License. Notwithstanding Section 2.1(b) above, no patent license is granted: (1) for any code that a Contributor has removed from Covered Software; (2) for infringements caused by: (i) Your and any other third party's modifications of Covered Software, or (ii) the combination of its Contributions with other software (except as part of its Contributor Version); or (3) under Patent Claims infringed by Covered Software in the absence of its Contributions.

3. Distribution Obligations

3.1. Availability of Source Code. Any Covered Software that You distribute or otherwise make available in Executable Form must also be made available in Source Code Form and that Source Code Form must be distributed only under the terms of this License. You must include a copy of this License with every copy of the Source Code Form of the Covered Software You distribute or otherwise make available. You must inform recipients of any such Covered Software in Executable Form as to how they can obtain such Covered Software in Source Code Form in a reasonable manner on or through a medium customarily used for software exchange.

3.2. Modifications. The Modifications that You create or to which You contribute are governed by the terms of this License. You represent that You believe Your Modifications are Your original creation(s) and/or You have sufficient rights to grant the rights conveyed by this License.

3.3. Required Notices. You must include a notice in each of Your Modifications that identifies You as the Contributor of the Modification. You may not remove or alter any copyright, patent, trademark, or other notices contained within the Covered Software, or any of the notices contained in Exhibits A or B.

3.4. Application of Additional Terms. You may not offer or impose any terms on any Covered Software in Source Code Form that alters or restricts the applicable version of this License or the recipients' rights hereunder. You may choose to offer, and to charge a fee for, warranty, support, indemnity or liability obligations to one or more recipients of Covered Software. However, you may do so only on Your own behalf and not on behalf of any Contributor. You must make it absolutely clear that any such warranty, support, indemnity, or liability obligation is offered by You alone, and You hereby agree to indemnify every Contributor for any liability incurred by such Contributor as a result of warranty, support, indemnity or liability terms You offer.

3.5. Distribution of Executable Versions. You may distribute the Executable form of the Covered Software under the terms of this License or under the terms of a license of Your choice, which may contain terms different from this License, provided that You are in compliance with the terms of this License and that the license for the Executable form does not attempt to limit or alter the recipient's rights in the Source Code Form from the rights set forth in this License. If You distribute the Covered Software in Executable form under a different license, You must make it absolutely clear that any terms which differ from this License are offered by You

繁體中文
#

MOZILLA 公共许可證, 版本 2.0

1. 定義

1.1. “貢獻者” 指有權根據本協議授權的個人或法人實體。
1.2. “知識產權” 指專利權、版權、商標權、以及其他相似的權利（無論是否已經註冊）。
1.3. “授權專利權” 指貢獻者擁有的授權他人使用其專利的權利。
1.4. “您”（或 “您的”） 指通過貢獻、發布、複製、展示、或使用本協議所授權的作品或衍生作品而受到本協議約束的個人或法人實體。

2. 授權權利

2.1. 版權條款：主題的版權歸貢獻者所有。您將此主題之任何部分貢獻給授權人時，即表示您同意授權授權人根據本協議使用您的貢獻。
2.2. 授權專利權：主題的每一位貢獻者在此聲明其擁有可對其授權他人的授權專利權。當您使用、複製、修改、發布、展示或分發主題時，即表示您同意接受這些授權專利權。如此授權專利權包括在任何專利許可證中，以授權他人使用貢獻者的專利，但這不構成將授權專利權授予任何其他人的義務。
2.3. 使用權和分發權：授權人授權您符合本協議的條款和條件的有限使用和分發本主題和其衍生作品的權利。

3. 條款

3.1. 源代碼形式的授權條件：如果您發布、複製、分發或展示此主題或其任何衍生作品的副本（整體或部分）以源代碼形式，您必須在每一份副本中包含授權人提供的完整的、準確的、可操作的、不過分修改的副本。
3.2. 修改：您可以修改此主題或其任何衍生作品，但您只能在您的修改中保留足以識別源代碼的信息，並且您必須在您的修改中包含授權人提供的任何修改或添加的原始代碼、原始授權聲明以及適用的通知信息。
3.3. 授權封閉源代碼分發：您可以以任何方式（包括但不限於向第三方許可）分發此主題的源代碼或其衍生作品的源代碼，但只有在遵守本協議的同時，才能通過封閉源代碼分發進行分發。
3.4. 商標：本許可證不授予您使用任何授權人名義的商標的權利。
3.5. 終止：如果您違反本協議的任何條款，您的許可將自動終止，並且任何對本主題或其任何衍生作品的使用、複製、分發、展示或發布的權利均將自動終止。

4. 知識產權

4.1. 保留所有權利：授權人保留此主題和其衍生作品的所有權利，包括但不限於所有相關的知識產權。
4.2. 沒有任何保證：除非明確聲明，否則授權人不提供任何明示或暗示的保證，包括但不限於適銷性或特定用途的適用性。

5. 責任限制

授權人不對任何直接、間接、特殊、偶然、或後續的損害以及利潤損失或數據丟失等承擔任何責任，即使授權人已被告知此類損害的可能性。

6. 通知

如需與授權人聯繫，請使用以下聯繫方式：

[您的聯繫信息]

7. 適用法律和爭議解決

7.1. 本許可證受[適用法律]的管轄，除了該法律允許的範圍外，不適用任何衝突法。
7.2. 任何與本協議有關的爭議應提交至有管轄權的法院，但無論何時，任何一方均可選擇

windows 透過 CLI 檢查有沒有自動更新

Thu, 28 Mar 2024 22:39:41 +0800

今天突然收到客戶需要檢查windows 有沒有設定自動檢查更新，因為有多台實在懶得一台一台進入，然後一個一個點擊視窗擷圖，因此想說有沒有輸入 CLI 指令檢查的方法。

CNS11643 轉 UTF8 經驗

Thu, 21 Mar 2024 22:02:53 +0800

unicode: 萬國碼，設計上一共有17個平面。在第0的平面中，可以直接用一個 UTF-8 表示。
CNS11643: 中文標準交換碼，是中華民國國家標準11643號，簡稱CNS 11643，舊名通用漢字標準交換碼，是中華民國政府為中文資訊處理製定的字元編碼方案，與許多學術圖書館係統採用的CCCII同屬於中文交換碼。CSIC基於ISO 2022定義，和ASCII相容，其EUC版本為EUC-TW。

最近工作上碰到 Oracle 編碼是 US7ASII ，而存放的有中文資料，於是遇到了轉碼問題。對方的轉碼在Java邏輯大緻上如下：

db-postgresql-note

Fri, 15 Mar 2024 22:13:29 +0800

安裝時設定項目
#

安裝前檢查項目
#

作業系統版本
資料庫空間需要獨立空間
資料庫備份需要獨立空間
稽核確認: 資料庫連線稽核
稽核確認: 資料庫DDL異動紀錄
定期備份排程

資料庫備份
#

定期備份排程

user: postgres

docker-note

Fri, 15 Mar 2024 10:13:29 +0800

檢查內部容器使用狀況
#

`1`	`docker stats`

CONTAINER ID   NAME                                CPU %     MEM USAGE / LIMIT   MEM %     NET I/O           BLOCK I/O         PIDS
59bfcba7ba71   testwebjobmail-testwebJobMail-1       0.89%     2.034GiB / 23GiB    8.84%     22.3MB / 629MB    179MB / 1.38GB    320
4286bd2e6131   testweb-testweb-1                     2.42%     2.506GiB / 23GiB    10.89%    246MB / 1.85GB    161MB / 3.55GB    2316
a46f17a27938   test2-test2-1                         441.62%   9.58GiB / 23GiB     41.65%    21.7GB / 20.8GB   1.08GB / 9.49GB   383
228ff5b678e8   test3public-test3Public-1             0.17%     2.356GiB / 23GiB    10.24%    1.71GB / 12.3GB   239MB / 9.04GB    357
572708a5ac8c   testwebjobsubjob-testwebJobSubJob-1   0.73%     2.155GiB / 23GiB    9.37%     1.81GB / 26.3GB   71.1MB / 48GB     325
d9e7d3c9d350   test3ommap-test3OmMap-1               0.74%     2.093GiB / 23GiB    9.10%     16.6GB / 23GB     413MB / 1.88GB    371

jmeter CLI 模式

Thu, 14 Mar 2024 22:41:21 +0800

前幾個月在幫專案做壓力測試，因為對方主機執行壓力測試環境是 Linux，於是我尋找一下JMeter 有沒有 CLI 模式下執行測試，順手紀錄一下。

壓力測試 CLI 範例
#

先廢話不多說，先線上範例，windows 跟 Linux 各舉例一個，Windows是後來順手寫一下，因為這樣我久可以不用開啟GUI介面操作啦。

git CLI

Wed, 28 Feb 2024 19:20:17 +0800

commit
#

`1`	`git commit -m "描述"`

add
#

新增要紀錄的檔案

html轉pdf-wkhtmltopdf

Wed, 28 Feb 2024 19:20:17 +0800

官方網站-wkhtmltopdf

安裝檔
#

`1`	`wkhtmltox_0.12.6.1-2.bullseye_amd64.deb`

CLI
#

`1`	`wkhtmltopdf 附件二-OS-作業系統日誌-差異備份-20231026_tmp.html 附件二-OS-作業系統日誌-差異備份-20231026.pdf`

Linux 壓縮相關

Wed, 28 Feb 2024 19:20:17 +0800

7z
#

安裝
#

`1`	`sudo apt-get install p7zip-full p7zip-rar`

解壓縮到指定輸出目錄
#

`1`	`7z x "dir1.zip" -o "dir1"`

zip
#

安裝
#

`1`	`apt install zip unzip`

解壓縮到指定輸出目錄
#

`1`	`unzip -q test.zip -d /tmp`

參考資料
#

Linux 安裝 7zip

Linux 字型安裝

Wed, 28 Feb 2024 19:20:17 +0800

019.字型安裝
#

apt 安裝
#

1
2

sudo apt install ttf-mscorefonts-installer
sudo apt install ttf-wqy-microhei ttf-wqy-zenhei # 中文字型

cd ~/下載
sudo mkdir -p /usr/share/fonts/custom &&\
sudo wget -P /usr/share/fonts/custom https://github.com/romkatv/powerlevel10k-media/raw/master/MesloLGS%20NF%20Regular.ttf &&\
sudo wget -P /usr/share/fonts/custom https://github.com/romkatv/powerlevel10k-media/raw/master/MesloLGS%20NF%20Bold.ttf &&\
sudo wget -P /usr/share/fonts/custom https://github.com/romkatv/powerlevel10k-media/raw/master/MesloLGS%20NF%20Italic.ttf &&\
sudo fc-cache -v -f

Linux 硬體檢測相關指令

Wed, 28 Feb 2024 19:20:17 +0800

檢查住機板型號
#

❯ sudo dmidecode -t 2
# dmidecode 3.3
Getting SMBIOS data from sysfs.
SMBIOS 3.0.0 present.

Handle 0x0002, DMI type 2, 15 bytes
Base Board Information
	Manufacturer: ASUSTeK COMPUTER INC.
	Product Name: PRIME B250M-K
	Version: Rev X.0x
	Serial Number: 161190432104045
	Asset Tag: Default string
	Features:
		Board is a hosting board
		Board is replaceable
	Location In Chassis: Default string
	Chassis Handle: 0x0003
	Type: Motherboard
	Contained Object Handles: 0

檢查USB 等設備
#

`1`	`udevadm monitor`

KERNEL[3434.892293] add      /devices/pci0000:00/0000:00:14.0/usb1/1-1 (usb)
KERNEL[3434.893220] add      /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0 (usb)
KERNEL[3434.893454] bind     /devices/pci0000:00/0000:00:14.0/usb1/1-1 (usb)
UDEV  [3434.935105] add      /devices/pci0000:00/0000:00:14.0/usb1/1-1 (usb)
KERNEL[3435.021095] add      /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/host2 (scsi)
KERNEL[3435.022326] add      /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/host2/scsi_host/host2 (scsi_host)
KERNEL[3435.022768] bind     /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0 (usb)

檢查 SCSI 總線上有哪些串流設備
#

1
2
3

> sudo lsscsi
[2:0:0:0]    disk    General  UDisk            5.00  /dev/sda 
[N:0:0:1]    disk    CT500P1SSD8__1                             /dev/nvme0n1

參考資料
#

Linux 如何查看主機板型號

Linux 筆電常用命令

Wed, 28 Feb 2024 19:20:17 +0800

檢查電池容量
#

`1`	`upower -i /org/freedesktop/UPower/devices/battery_BAT0`

Linux 系統時間

Wed, 28 Feb 2024 19:20:17 +0800

`1`	`sudo date -s "2022/05/05 18:44:15"`

若要查詢硬體時鐘（RTC）的時間，可以使用 hwclock：

若要將系統時間寫入硬體時鐘，可以使用 -w 參數：

`1`	`sudo hwclock -w`

係統時區校正
#

先設定時區
#

`1`	`sudo timedatectl set-timezone Asia/Taipei`

╰─ timedatectl
               Local time: Wed 2022-05-04 16:21:52 CST
           Universal time: Wed 2022-05-04 08:21:52 UTC
                 RTC time: Wed 2022-05-04 08:21:52
                Time zone: Asia/Taipei (CST, +0800)
System clock synchronized: yes
              NTP service: active
          RTC in local TZ: no

校時查詢
#

[aaa@test ~]$ ntpq -p
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
*172.18.10.1     118.163.81.61    4 u  817 1024  377    0.426    3.246   2.106

參數說明
#

remote：回響這個請求的NTP服務器的名稱。

Linux 連接iPhone讀取照片

Wed, 28 Feb 2024 19:20:17 +0800

安裝 iFuse
#

jameschang@debian:~$ sudo apt-get install ifuse
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following NEW packages will be installed:
  ifuse
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 15.7 kB of archives.
After this operation, 48.1 kB of additional disk space will be used.
Get:1 http://deb.debian.org/debian bullseye/main amd64 ifuse amd64 1.1.4~git20181007.3b00243-1 [15.7 kB]
Fetched 15.7 kB in 2s (7,099 B/s)
Selecting previously unselected package ifuse.
(Reading database ... 335631 files and directories currently installed.)
Preparing to unpack .../ifuse_1.1.4~git20181007.3b00243-1_amd64.deb ...
Unpacking ifuse (1.1.4~git20181007.3b00243-1) ...
Setting up ifuse (1.1.4~git20181007.3b00243-1) ...
Processing triggers for man-db (2.9.4-2) ...

掛載
#

# 1. 選擇或新造要掛載的目錄

jameschang@debian:~$ mkdir ~/iphone


# 2. 掛載
jameschang@debian:~$ ifuse ~/iphone

How To Access Photos & Videos On Your iPhone On Linux

linux與windows共享目錄 samba

Wed, 28 Feb 2024 19:20:17 +0800

安裝samba
#

`1`	`sudo apt install samba`

設定共享目錄
#

sudo vim /etc/samba/smb.conf

sell 日誌 function

Wed, 28 Feb 2024 19:20:17 +0800

日誌時間
#

#日誌名稱
log="./log/checkWbsite.log"  #操作日誌存放路徑 
fsize=2000000      #如果日誌大小超過上限，則儲存舊日誌，重新生成日誌檔案    
exec 2>>$log  #如果執行過程中有錯誤資訊均輸出到日誌檔案中 
#日誌函式
#引數
#引數一，級別，INFO ,WARN,ERROR
#引數二，內容
#返回值
function zc_log(){
    
    #判斷格式
    if [ 2 -gt $# ]
    then
        echo "parameter not right in zc_log function" ;
        return ;
    fi

    if [ -e "$log" ]
    then
        touch $log
    fi

    #當前時間
    local curtime;
    curtime=`date +%Y%m%d%H%M%S`
    

    #判斷檔案大小
    local cursize ;
    cursize=`cat $log | wc -c` ;

    if [ $fsize -lt $cursize ]
    then
        mv $log $curtime".out"
        touch $log ;
    fi

    #寫入檔案
    echo "$curtime $*" >> $log;
}

在CLI 製作開機USB

Wed, 28 Feb 2024 19:20:17 +0800

最近再把我自己的另一台筆電重新安裝。趁重新安裝時，安裝Debian，因為我已經很習慣用這個作業系統工作了。安裝完成之後，發現原本抓的有臭蟲，所以就上網重新安裝一次。

安裝Docker

Wed, 28 Feb 2024 19:20:17 +0800

OS: Debian 10 Debian 11

初次安裝先移除舊相關套件
#

`1`	`sudo apt-get remove docker docker-engine docker.io containerd runc`

安裝
#

加入 gpg
#

sudo apt-get update

sudo apt-get install \
    apt-transport-https \
    ca-certificates \
    curl \
    gnupg \
    lsb-release

curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg

echo \
  "deb [arch=amd64 signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian \
  $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

安裝docker 引擎
#

1
2

sudo apt-get update
sudo apt-get install docker-ce docker-ce-cli containerd.io

將使用者加入docker群組
#

`1`	`sudo usermod -aG docker [userName]`

安裝docker-compose
#

https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-x86_64
sudo curl -L "https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-$(uname -s)-$(uname -m)" -o /usr/bin/docker-compose
sudo chmod +x /usr/bin/docker-compose
sudo ln -s /usr/bin/docker-compose /usr/local/bin/docker-compose

開機時自動啟動docker
#

`1`	`sudo systemctl enable docker`

參考資料
#

Install Docker Engine on Debian

我的linux日常生活-6.安裝開發工具

Wed, 28 Feb 2024 19:20:17 +0800

我的linux日常生活-6.安裝開發工具
#

tags: `我的linux日常生活`
#

git
#

下面是git 安裝指令與設定方式

筆記型電腦安裝 Debian 調整

Wed, 28 Feb 2024 19:20:17 +0800

筆記型電腦調整
#

筆記型電腦插入滑鼠裝置自動關閉滑鼠板 Gnome
#

`1`	`gsettings set org.gnome.desktop.peripherals.touchpad send-events disabled-on-external-mouse`

我發現在 Debian 10 (Gnome3.30.2) 不會正常作用

電源管理 tlp
#

sudo apt install tlp tlp-rdw
sudo tlp start
sudo tlp-stat -s
sudo systemctl enable tlp

參考資料
#

GNOME: How To Disable The Touchpad When A Mouse Is Plugged In And While Typing

輸入法相關

Wed, 28 Feb 2024 19:20:17 +0800

設定中文輸入法
#

在windows時我習慣是使用微軟新注音輸入法，轉到Linux 的替代方案是新酷音。以下是我安裝新酷音的步驟。

關閉IPv6

Wed, 28 Feb 2024 19:20:17 +0800

設定文件: /etc/sysctl.conf

1
2
3

net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1

讓設定生效

`1`	`sudo sysctl -p`

檢驗

`1`	`ip a \| grep inet6`

參考資料
#

關閉 Ubuntu 的 Ipv6

為什麼要學 Markdown

Fri, 01 Sep 2023 20:53:54 +0800

為什麼要學 Markdown
#

架設部落格
寫 wiki

markdown 其實可以存放圖片的，如果你願意可以透過base64-image 工具

工作雜記 on PolloChang 工作筆記

讓 AI 成為您的專屬編輯部：一套基於 Linux 的自動化報紙系統設計

讓 AI 成為您的專屬編輯部：一套基於 Linux 的自動化報紙系統設計 #

hermes deploy recard

hermes-deploy recard #

system requirements #

Official Minimum Server Requirements (Recommended) #

Minimum Functional Requirements (Minimalist Setup) #

Software & Deployment Prerequisites #

My System #

install step by step #

打開你的Chrome AI

手動開啟方式 #

1. 檢查硬體與版本門檻 #

SQL tunning task common

第一步：設計與建立資料表 (DDL) #

SQL tunning task MES

第一步：MES 系統資料表設計 (DDL) #

Redo test

Test Summary #

測試環境 #

測試前準備 #

2024 CWE Top 25

參考資料 #

GDPR-通用資料保護條例

簡述 #

修補 CVE-2025-26465

CVE-2025-26465 #

Tomcat Attachment Error

各式檔案雜湊

oracle #

jasperReports #

lnav 使用方式

安裝 #

使用方式 #

Goaccess 日誌分析

安裝 #

使用方式 #

報告解讀 #

如何解讀 GoAccess 報告 #

Worknot 20241113 1

剛剛 commit 想要反悔 #

修補 CVE-2023-41080

contentDescription #

處理方式 #

資訊工程職務必經之路

初階工程師 #

big-ip client linux 安裝

參考資料 #

telnet 替代方案: curl

硬體設備-hba

Prometheus Node Exporter 設定

安裝環境 #

安裝步驟 #

01. 新增帳號 #

02. 下載 Node Exporter 及部署程式 #

AI幻覺導致我操作系統錯誤了

TL;DR #

Redmine Api

pdns-server 安裝

環境 #

事前準備 #

docker overlay2

尋找作業系統帳號建立日期

weindows #

Linux #

故障排除: Linux 連接 windows AD

環境 #

症狀: 無法抓取 AD 新資訊 #

問題排除步驟 #

檢查 #

Oracle OCFS2 初學

指令 #

手動掛載 #

Docker Network 網路問題排除

狀況 #

檢查步驟 #

錯誤訊息處理 #

bridge-nf-call-iptables is disabled #

修補 CVE-2023-48795

讓 AI 成為您的專屬編輯部：一套基於 Linux 的自動化報紙系統設計
#

hermes-deploy recard
#

system requirements
#

Official Minimum Server Requirements (Recommended)
#

Minimum Functional Requirements (Minimalist Setup)
#

Software & Deployment Prerequisites
#

My System
#

install step by step
#

手動開啟方式
#

1. 檢查硬體與版本門檻
#

第一步：設計與建立資料表 (DDL)
#

第一步：MES 系統資料表設計 (DDL)
#

Test Summary
#

測試環境
#

測試前準備
#

參考資料
#

簡述
#

CVE-2025-26465
#

oracle
#

jasperReports
#

安裝
#

使用方式
#

安裝
#

使用方式
#

報告解讀
#

如何解讀 GoAccess 報告
#

剛剛 commit 想要反悔
#

contentDescription
#

處理方式
#

初階工程師
#

參考資料
#

安裝環境
#

安裝步驟
#

01. 新增帳號
#

02. 下載 Node Exporter 及部署程式
#

TL;DR
#

環境
#

事前準備
#

weindows
#

Linux
#

環境
#

症狀: 無法抓取 AD 新資訊
#

問題排除步驟
#

檢查
#

指令
#

手動掛載
#

狀況
#

檢查步驟
#

錯誤訊息處理
#

bridge-nf-call-iptables is disabled
#

系統環境
#

檢測方式
#

問題
#

說明
#

執行
#

參考資料
#

curl
#

openssl
#

分析 message IP
#

一開始寫的
#

第一次優化
#

將顯示欄位邏輯拉出
#

將查詢條件修飾
#

Java 基本內置 annotation
#

@Override
#

英文原文
#

繁體中文
#

安裝時設定項目
#

安裝前檢查項目
#

資料庫備份
#

檢查內部容器使用狀況
#

壓力測試 CLI 範例
#

commit
#

add
#

安裝檔
#

CLI
#

7z
#

安裝
#

解壓縮到指定輸出目錄
#

zip
#