commit b3f70260d00c3515f48c13256b857609b977a883
parent 6c53b8c77a48ce0654440893a092d68c9dfa5968
Author: pyratebeard <root@pyratebeard.net>
Date: Tue, 23 Jan 2024 11:58:57 +0000
major re-org started
Diffstat:
25 files changed, 374 insertions(+), 174 deletions(-)
diff --git a/Home.md b/Home.md
@@ -5,22 +5,25 @@
* [vim](/software/vim)
* [git](/vcs/git)
* [tmux](/software/tmux)
-* [more...](/tech-index#everyday-tools)
+* [mutt](/software/mutt)
### operating systems
* [linux](linux/index)
* [openbsd](/unix/openbsd)
-* [more...](/tech-index#operating-systems)
+* [freebsd](/unix/freebsd)
+* [solaris](/unix/solaris)
### programming
-* [shell_scripts](/programming/shell_scripts)
* [nubbins](programming/nubbins)
-* [more...](/tech-index#programming)
+* [shell_scripts](/programming/shell_scripts)
+* [more...](/programming/index)
### other
-* [software](/tech-index#software)
-* [hardware](/tech-index#hardware)
-* [cloud_and_saas](/tech-index#cloud-and-saas)
+* [infrastructure-as-code](/iac/index)
+* [networking](/networking/index)
+* [software](/software/index)
+* [hardware](/hardware/index)
+* [cloud_and_saas](/cloud_saas/index.md)
## course notes
* [udmey](/udmey/index)
@@ -31,3 +34,5 @@
* [longbox](/unsorted/longbox)
* [new_blog](/unsorted/new_blog)
* [pinterest_ignore](/unsorted/pinterest_ignore)
+
+* [glossary](/glossary)
diff --git a/cloud_saas/index.md b/cloud_saas/index.md
@@ -0,0 +1,4 @@
+## cloud and saas
+* [azure](/cloud_saas/azure)
+* [openshift](/cloud_saas/openshift)
+
diff --git a/linux/btrfs.md b/filesystems/btrfs.md
diff --git a/glossary.md b/glossary.md
@@ -0,0 +1,152 @@
+# glossary
+## a
+* [alsa](/linux/alsa)
+* [android](/programming/android)
+* [apt_dpkg](/linux/apt_dpkg)
+* [arduino](/hardware/arduino)
+* [at](/linux/at)
+* [azure](/cloud_saas/azure)
+## b
+* [bash](/shells/bash)
+* [bin](/linux/bin)
+* [bluetooth](/software/bluetooth)
+* [borg](/software/borg)
+* [btrfs](filesystems/btrfs)
+## c
+* [c](/programming/c)
+* [certbot](/software/certbot)
+* [csgo](/linux/csgo)
+## d
+* [dhcpcd](/linux/dhcpcd)
+* [dig](/networking/dig)
+* [django](/software/django)
+* [dmidecode](/linux/dmidecode)
+* [docker](/virtualisation/docker)
+* [durdraw](/software/durdraw)
+## e
+* [envoy](/networking/envoy)
+* [esxi](/software/esxi)
+* [exim4](/software/exim4)
+## f
+* [fallout4](/linux/fallout4)
+* [ffmpeg](/linux/ffmpeg)
+* [firewalld](/networking/firewalld)
+* [flatpak](/linux/flatpak)
+* [fonts](/linux/fonts)
+* [freebsd](/unix/freebsd)
+* [ftp](/software/ftp)
+## g
+* [git](/vcs/git)
+* [gollum](/software/gollum)
+* [gopher](/software/gopher)
+* [gpg](/software/gpg)
+* [grafana](/software/grafana)
+## h
+* [haproxy](/networking/haproxy)
+* [httpd](/software/httpd)
+## i
+* [i3lock](/linux/i3lock)
+* [index](/linux/index)
+* [init](/linux/init)
+* [iptables](/networking/iptables)
+* [irc](/software/irc)
+## j
+* [journalctl](/linux/journalctl)
+## k
+* [k8s](/virtualisation/kubernetes)
+* [keymaps](/linux/keymaps)
+* [ksh](/shells/ksh)
+## l
+* [latex](/software/latex)
+* [ldap](/software/ldap)
+* [linux](/linux/index)
+* [logrotate](/linux/logrotate)
+* [lvm](/linux/lvm)
+* [lxc](/virtualisation/lxc)
+## m
+* [mail](/software/mail)
+* [mailstack](software/mailstack)
+* [man_pages](/linux/man_pages)
+* [mariadb](/software/mariadb)
+* [mastodon](/software/mastodon)
+* [mbox](/linux/mbox)
+* [mdadm](/linux/mdadm)
+* [mosh](/networking/mosh)
+* [mount](/linux/mount)
+* [mpd](/linux/mpd)
+* [mpv](/linux/mpv)
+## n
+* [nagios](/software/nagios)
+* [neos_smartcam](/hardware/neos_smartcam)
+* [nginx](/software/nginx)
+* [nmcli](/networking/nmcli)
+* [ntfy](/software/ntfy)
+* [nubbins](programming/nubbins)
+## o
+* [openbsd](/unix/openbsd)
+* [openshift](/cloud_saas/openshift)
+* [openssl](/software/openssl)
+* [openssl](/software/openssl)
+* [openvpn](/networking/openvpn)
+* [oracle](/software/oracle)
+## p
+* [pacman](/linux/pacman)
+* [pacmd](/linux/pacmd)
+* [pactl](/linux/pactl)
+* [pandoc](/software/pandoc)
+* [peertube](/software/peertube)
+* [pf](/networking/pf)
+* [postgresql](/software/postgresql)
+* [processes](/linux/processes)
+* [python](/linux/python)
+## q
+* [qemu](/virtualisation/qemu)
+## r
+* [rdp](/networking/rdp)
+* [ricing](/linux/ricing)
+* [rpm](/linux/rpm)
+* [rsync](/linux/rsync)
+* [rtv](/linux/rtv)
+## s
+* [samba](/linux/samba)
+* [sar](/linux/sar)
+* [scanning](/software/scanning)
+* [sed](/linux/sed)
+* [shell_scripts](/programming/shell_scripts)
+* [snmp](/software/snmp)
+* [solaris](/unix/solaris)
+* [spotifyd](/linux/spotifyd)
+* [ssh](/networking/ssh)
+* [subnet_cheatsheet](/networking/subnet_cheatsheet)
+* [svn](/vcs/svn)
+* [systemctl](/linux/systemctl)
+* [sysv](/linux/sysv)
+## t
+* [tcpdump](/software/tcpdump)
+* [tmux](/software/tmux)
+* [trezor](/hardware/trezor)
+* [truncate](/linux/truncate)
+## u
+* [usenet](/software/usenet)
+## v
+* [veracrypt](/software/veracrypt)
+* [vim](/software/vim)
+* [vimwiki](/software/vimwiki)
+* [virsh](virtualisation/virsh)
+## w
+* [w3m](/linux/w3m)
+* [wacom](/hardware/wacom)
+* [wagtail](/software/wagtail)
+* [wifi_connect](/networking/wifi_connect)
+## x
+* [xclip](/linux/xclip)
+* [xdotool](/linux/xdotool)
+* [xev](/linux/xev)
+* [xinput](/linux/xinput)
+* [xmodmap](/linux/xmodmap)
+* [xprop](/linux/xprop)
+## y
+## z
+* [zfs](filesystems/zfs)
+* [znc](/software/znc)
+* [zsh](/shells/zsh)
diff --git a/hardware/index.md b/hardware/index.md
@@ -1,2 +1,6 @@
-# hardware
+## hardware
+* [arduino](/hardware/arduino)
+* [trezor](/hardware/trezor)
+* [neos_smartcam](/hardware/neos_smartcam)
+* [wacom](/hardware/wacom)
diff --git a/iac/index.md b/iac/index.md
@@ -0,0 +1,4 @@
+### infrastructure-as-code
+* [ansible](iac/ansible)
+
+
diff --git a/linux/index.md b/linux/index.md
@@ -1,58 +1,77 @@
# linux
-
+## a
* [alsa](/linux/alsa)
* [apt_dpkg](/linux/apt_dpkg)
* [at](/linux/at)
-* [bash](/linux/bash)
+## b
* [bin](/linux/bin)
-* [btrfs](/linux/btrfs)
+## c
* [csgo](/linux/csgo)
+## d
* [dhcpcd](/linux/dhcpcd)
-* [dig](/linux/dig)
* [dmidecode](/linux/dmidecode)
+## e
+## f
* [fallout4](/linux/fallout4)
* [ffmpeg](/linux/ffmpeg)
* [flatpak](/linux/flatpak)
* [fonts](/linux/fonts)
+## g
+## h
+## i
* [i3lock](/linux/i3lock)
* [index](/linux/index)
* [init](/linux/init)
+## j
* [journalctl](/linux/journalctl)
+## k
* [keymaps](/linux/keymaps)
+## l
* [logrotate](/linux/logrotate)
* [lvm](/linux/lvm)
+## m
* [man_pages](/linux/man_pages)
* [mbox](/linux/mbox)
* [mdadm](/linux/mdadm)
* [mount](/linux/mount)
* [mpd](/linux/mpd)
* [mpv](/linux/mpv)
-* [nmcli](/linux/nmcli)
+## n
+## o
+## p
* [pacman](/linux/pacman)
* [pacmd](/linux/pacmd)
* [pactl](/linux/pactl)
* [processes](/linux/processes)
* [python](/linux/python)
-* [rdp](/linux/rdp)
+## q
+## r
* [ricing](/linux/ricing)
* [rpm](/linux/rpm)
* [rsync](/linux/rsync)
* [rtv](/linux/rtv)
+## s
* [samba](/linux/samba)
* [sar](/linux/sar)
* [sed](/linux/sed)
* [spotifyd](/linux/spotifyd)
-* [ssh](/linux/ssh)
* [systemctl](/linux/systemctl)
* [sysv](/linux/sysv)
+## t
* [truncate](/linux/truncate)
+## u
+## v
+## w
* [w3m](/linux/w3m)
+## x
* [xclip](/linux/xclip)
* [xdotool](/linux/xdotool)
* [xev](/linux/xev)
* [xinput](/linux/xinput)
* [xmodmap](/linux/xmodmap)
* [xprop](/linux/xprop)
+## y
+## z
echo 1 > /sys/class/scsi_device/2:0:1:0/device/rescan
diff --git a/linux/ssh.md b/linux/ssh.md
@@ -1,56 +0,0 @@
-# ssh
-
-## tunnel
-[tunnel][] through jump server
-```
-ssh -t L7070:localhost:7071 user@jumphost ssh -t -D7071 user@furtherhost
-```
-
-```
-ssh -A -t -l user jump-host \
--L 8080:localhost:8080 \
-ssh -A -t -l user webserver.dmz \
--L 8080:localhost:8080
-```
-
-open [socks proxy][] on port 443 (hide as https) - requires sudo
-```
-sudo ssh -o ServerAliveInterval=60 -D443 -l pyratebeard -i ~/lib/key/ssh_tunnel -N -C -q -t -4 -f ftp.pyratebeard.net
-```
-- `-o ServerAliveInterval=60` -
-- `-D443` -
-- `-l pyratebeard` -
-- `-i ~/lib/key/ssh_tunnel` -
-- `-N` - do not execute remote command
-- `-C` - compress data
-- `-q` - quiet
-- `-t` - force pseudo-terminal
-- `-4` - use ipv4 only
-- `-f` - go to background
-
-## X11 forwarding
-```
-ssh -X user@host
-```
-- on server side `X11Forwarding` must be set to `yes` in '/etc/ssh/sshd_config'
-
-## ssh host fingerprint
-to find the fingerprint of a host
-```
-sudo ssh-keygen -l -f /etc/ssh/ssh_host_rsa_key
-sudo ssh-keygen -l -f /etc/ssh/ssh_host_ecdsa_key
-```
-
-## remote host id has changed
-if the fingerprint for the remote host has changed (and you are sure it's not
-a mitm attack) run the following to remove from 'known_hosts'
-```
-ssh-keygen -f $HOME/.ssh/known_hosts -R <hostname>
-```
-
-## ref
-[ssh][] guide
-
-[tunnel]: http://digitalcrunch.com/linux/how-to-use-an-ssh-tunnel-through-a-jump-host/
-[socks proxy]: https://ma.ttias.be/socks-proxy-linux-ssh-bypass-content-filters/
-[ssh]: http://lackof.org/taggart/hacking/ssh/
diff --git a/linux/dig.md b/networking/dig.md
diff --git a/networking/firewall-cmd.md b/networking/firewalld.md
diff --git a/networking/firewalls.md b/networking/firewalls.md
@@ -1,6 +0,0 @@
-# firewalls
-
-## linux
-- [iptables](iptables)
-- [firewall cmd](firewall-cmd)
-* [pf](pf)
diff --git a/networking/index.md b/networking/index.md
@@ -0,0 +1,23 @@
+## networking
+### adminstration
+* [dig](/networking/dig)
+* [nmcli](/networking/nmcli)
+* [subnet_cheatsheet](/networking/subnet_cheatsheet)
+* [wifi_connect](/networking/wifi_connect)
+
+### connections
+* [mosh](/networking/mosh)
+* [rdp](/networking/rdp)
+* [ssh](/networking/ssh)
+
+### firewalls
+* [iptables](/networking/iptables)
+* [firewalld](/networking/firewalld)
+* [pf](/networking/pf)
+
+### proxy
+* [haproxy](/networking/haproxy)
+* [envoy](/networking/envoy)
+
+### vpn
+* [openvpn](/networking/openvpn)
diff --git a/networking/iptables.md b/networking/iptables.md
@@ -0,0 +1 @@
+# iptables
diff --git a/linux/nmcli.md b/networking/nmcli.md
diff --git a/linux/rdp.md b/networking/rdp.md
diff --git a/networking/ssh.md b/networking/ssh.md
@@ -0,0 +1,63 @@
+# ssh
+
+## tunnel
+[tunnel][] through jump server
+```
+ssh -t L7070:localhost:7071 user@jumphost ssh -t -D7071 user@furtherhost
+```
+
+```
+ssh -A -t -l user jump-host \
+-L 8080:localhost:8080 \
+ssh -A -t -l user webserver.dmz \
+-L 8080:localhost:8080
+```
+
+open [socks proxy][] on port 443 (hide as https) - requires sudo
+```
+sudo ssh -o ServerAliveInterval=60 -D443 -l pyratebeard -i ~/lib/key/ssh_tunnel -N -C -q -t -4 -f ftp.pyratebeard.net
+```
+- `-o ServerAliveInterval=60` -
+- `-D443` -
+- `-l pyratebeard` -
+- `-i ~/lib/key/ssh_tunnel` -
+- `-N` - do not execute remote command
+- `-C` - compress data
+- `-q` - quiet
+- `-t` - force pseudo-terminal
+- `-4` - use ipv4 only
+- `-f` - go to background
+
+## X11 forwarding
+```
+ssh -X user@host
+```
+- on server side `X11Forwarding` must be set to `yes` in '/etc/ssh/sshd_config'
+
+## ssh host fingerprint
+to find the fingerprint of a host
+```
+sudo ssh-keygen -l -f /etc/ssh/ssh_host_rsa_key
+sudo ssh-keygen -l -f /etc/ssh/ssh_host_ecdsa_key
+```
+
+## remote host id has changed
+if the fingerprint for the remote host has changed (and you are sure it's not
+a mitm attack) run the following to remove from 'known_hosts'
+```
+ssh-keygen -f $HOME/.ssh/known_hosts -R <hostname>
+```
+
+## ref
+[ssh][] guide
+
+[tunnel]: http://digitalcrunch.com/linux/how-to-use-an-ssh-tunnel-through-a-jump-host/
+[socks proxy]: https://ma.ttias.be/socks-proxy-linux-ssh-bypass-content-filters/
+[ssh]: http://lackof.org/taggart/hacking/ssh/
+
+
+
+
+* must have dns resolv on greyskull (and nublar for lxc)
+* must have short name in ssh/config on nublar for lxc
+* must have cert-auth known host on nublar for lxc
diff --git a/programming/index.md b/programming/index.md
@@ -0,0 +1,5 @@
+## programming
+* [android](/programming/android)
+* [c](/programming/c)
+* [nubbins](programming/nubbins)
+* [shell_scripts](/programming/shell_scripts)
diff --git a/linux/bash.md b/shells/bash.md
diff --git a/shells/ksh.md b/shells/ksh.md
@@ -0,0 +1 @@
+# ksh
diff --git a/shells/zsh.md b/shells/zsh.md
@@ -0,0 +1 @@
+# zsh
diff --git a/software/index.md b/software/index.md
@@ -1,2 +1,43 @@
# software
+* [bluetooth](bluetooth)
+* [borg](borg)
+* [certbot](certbot)
+* [django](django)
+* [durdraw](durdraw)
+* [esxi](esxi)
+* [exim4](exim4)
+* [ftp](ftp)
+* [gollum](gollum)
+* [gopher](gopher)
+* [gpg](gpg)
+* [grafana](grafana)
+* [httpd](httpd)
+* [index](index)
+* [iptables](iptables)
+* [irc](irc)
+* [latex](latex)
+* [ldap](ldap)
+* [mail](mail)
+* [mailstack](mailstack)
+* [mariadb](mariadb)
+* [mastodon](mastodon)
+* [mutt](mutt)
+* [nagios](nagios)
+* [nginx](nginx)
+* [ntfy](ntfy)
+* [openssl](openssl)
+* [oracle](oracle)
+* [pandoc](pandoc)
+* [peertube](peertube)
+* [postgresql](postgresql)
+* [scanning](scanning)
+* [snmp](snmp)
+* [tcpdump](tcpdump)
+* [tmux](tmux)
+* [usenet](usenet)
+* [veracrypt](veracrypt)
+* [vim](vim)
+* [vimwiki](vimwiki)
+* [wagtail](wagtail)
+* [znc](znc)
diff --git a/software/mailstack.md b/software/mailstack.md
@@ -0,0 +1,16 @@
+# mailstack
+
+* [2.5admins 128: some value](https://2.5admins.com/2-5-admins-128/)
+
+| component | software | |
+| --- | --- | --- |
+| smtp | postfix | |
+| imap | dovecot | |
+| webmail | roundcube | |
+| spam filter | spam assassin | do spam filter while smtp connection open - run spamd |
+| glue | postprox | |
+| antivirus | none | don't use clamav |
+| domain key signing | opendkim | |
+| get notifications about spam | dmarc | |
+
+* https://www.bsdhowto.ch/mxpop3.html
diff --git a/tech-index.md b/tech-index.md
@@ -1,97 +0,0 @@
-# tech
-## everyday tools
-* [vim](/software/vim)
-* [git](/vcs/git)
-* [tmux](/software/tmux)
-* [mutt](/software/mutt)
-* [vimwiki](/software/vimwiki)
-* [irc](/software/irc)
-* [mail](/software/mail)
-
-## operating systems
-* [linux](/linux/index)
-* [openbsd](/unix/openbsd)
-* [freebsd](/unix/freebsd)
-
-## programming
-* [shell_scripts](/programming/shell_scripts)
-* [c](/programming/c)
-* [android](/programming/android)
-
-## software
-
-### vcs
-* [svn](/vcs/svn)
-
-### containers
-* [lxc](/virtualisation/lxc)
-* [docker](/virtualisation/docker)
-* [k8s](/virtualisation/kubernetes)
-
-### virtual machines
-* [virsh](virtualisation/virsh)
-* [qemu](/virtualisation/qemu)
-
-### filesystems
-* [zfs](filesystems/zfs)
-
-### infrastructure-as-code
-* [ansible](iac/ansible)
-
-### firewalls
-* [firewalls](/networking/firewalls)
-
-* [durdraw](/software/durdraw)
-* [gollum](/software/gollum)
-* [pandoc](/software/pandoc)
-* [latex](/software/latex)
-* [scanning](/software/scanning)
-* [grafana](/software/grafana)
-* [ldap](/software/ldap)
-* [exim4](/software/exim4)
-* [ftp](/software/ftp)
-* [mosh](/networking/mosh)
-* [usenet](/software/usenet)
-* [znc](/software/znc)
-* [mariadb](/software/mariadb)
-* [oracle](/software/oracle)
-* [postgresql](/software/postgresql)
-* [gpg](/software/gpg)
-* [openssl](/software/openssl)
-* [veracrypt](/software/veracrypt)
-* [nagios](/software/nagios)
-* [ntfy](/software/ntfy)
-* [snmp](/software/snmp)
-* [tcpdump](/software/tcpdump)
-* [bluetooth](/software/bluetooth)
-* [haproxy](/networking/haproxy)
-* [openssl](/software/openssl)
-* [openvpn](/networking/openvpn)
-* [envoy](/networking/envoy)
-* [subnet_cheatsheet](/networking/subnet_cheatsheet)
-* [wifi_connect](/networking/wifi_connect)
-* [esxi](/software/esxi)
-* [certbot](/software/certbot)
-* [django](/software/django)
-* [gopher](/software/gopher)
-* [httpd](/software/httpd)
-* [mastodon](/software/mastodon)
-* [nginx](/software/nginx)
-* [peertube](/software/peertube)
-* [wagtail](/software/wagtail)
-* [borg](/software/borg)
-
-iwgetid wlp6s0 -r
-
-
-## hardware
-* [arduino](/hardware/arduino)
-* [trezor](/hardware/trezor)
-* [neos_smartcam](/hardware/neos_smartcam)
-* [wacom](/hardware/wacom)
-
-## cloud and saas
-* [azure](/cloud_saas/azure)
-* [openshift](/cloud_saas/openshift)
-
-* [mailstack](software/mailstack)
diff --git a/unix/solaris.md b/unix/solaris.md
@@ -0,0 +1,14 @@
+# solaris
+
+* see port in use by process
+```
+pfiles <pid>
+```
+* check if zone or not - 'global' == host
+```
+zonename
+```
+
+## 10
+
+## 11
diff --git a/virtualisation/lxc.md b/virtualisation/lxc.md
@@ -295,3 +295,9 @@ gollum haproxy log pastebin radicale site stagit znc ftp
cd /var/www/html
git clone https://git.renre.com/infrastructure/linux-patching.github.io.git .
```
+
+## bindmount
+* mount a dir on lxc, add follwoing to container conf
+```
+mp0: /path/on/host,mp=/mount/path/on/container
+```
