Canoe

Markdown Attach Base64 Pic

2022-09-03T17:03:25.000Z

Scene

在 markdown 做笔记的时候插入图片，不使用外部链接的方式插入图片

Solution

直接把图片转成base64编码后直接插入即可

格式如下

![image](base64)

base64编码比较长，影响阅读，可以用以下方将base64编码置于最后

![image][image id]
you can write your document here 
[image id]:your image's base64

after ![image][image id] write something

HelpLinks

图片转Base64编码

LightCVM and DB in Tencent Cloud

2022-03-05T08:30:55.000Z

Scene

在使用轻量级应用服务器的时候发现连接不上数据库
查阅得知,腾讯云内部轻量服务器和云数据库默认内网是不通的

Solution

到轻量级应用服务器 console 选择内网互联 tab , 然后选择区域 “关联云联网”
填写信息建立关联后,到私有网络的云联网中进行确认配置即可
值得注意的一点是，云联网的设备是需要付费的，但是如果设备在同一个地域就不需要收费（如：上海一区和上海五区是同一个地域）

Other

👉 内网互联
👉 云联网

Something About VMware

2022-01-01T14:35:16.000Z

Scene

Bulid server in VMware
Some issues encountered

Solution

VMware Workstation and Device/Credential Guard incompatible

👉Device Guard and Credential Guard hardware readiness tool

Set-ExecutionPolicy RemoteSigned

./DG_Readiness_Tool_v3.6.ps1 -Disable -AutoReboot
    
./DG_Readiness_Tool_v3.6.ps1 -Enable -AutoReboot

./DG_Readiness_Tool_v3.6.ps1 -Ready

close Hyper-V bcdedit /set hypervisorlaunchtype off

vmci.sys incompatible

open .vmx file, set vmci0.present = "FALSE"

Other

some setting in dnf

.encoding = "GBK"
config.version = "8"
virtualHW.version = "10"
numvcpus = "4"
cpuid.coresPerSocket = "4"
scsi0.present = "TRUE"
scsi0.virtualDev = "lsisas1068"
sata0.present = "TRUE"
memsize = "4096"
mem.hotadd = "TRUE"
ide0:0.present = "TRUE"
ide0:0.fileName = "vmfordnf.vmdk"
ethernet0.present = "TRUE"
ethernet0.virtualDev = "e1000"
ethernet0.wakeOnPcktRcv = "FALSE"
ethernet0.addressType = "static"
usb.present = "TRUE"
sound.present = "TRUE"
sound.virtualDev = "hdaudio"
sound.fileName = "-1"
sound.autodetect = "TRUE"
mks.enable3d = "TRUE"
pciBridge0.present = "TRUE"
pciBridge4.present = "TRUE"
pciBridge4.virtualDev = "pcieRootPort"
pciBridge4.functions = "8"
pciBridge5.present = "TRUE"
pciBridge5.virtualDev = "pcieRootPort"
pciBridge5.functions = "8"
pciBridge6.present = "TRUE"
pciBridge6.virtualDev = "pcieRootPort"
pciBridge6.functions = "8"
pciBridge7.present = "TRUE"
pciBridge7.virtualDev = "pcieRootPort"
pciBridge7.functions = "8"
vmci0.present = "FALSE"
hpet0.present = "TRUE"
usb.vbluetooth.startConnected = "TRUE"
displayName = "vmfordnf"
guestOS = "windows7"
nvram = "vmfordnf.nvram"
virtualHW.productCompatibility = "hosted"
powerType.powerOff = "soft"
powerType.powerOn = "soft"
powerType.suspend = "soft"
powerType.reset = "soft"
hypervisor.cpuid.v0="FALSE"
extendedConfigFile = "vmfordnf.vmxf"
uuid.bios = "56 4d 87 ee d7 81 67 f3-2d 2e 3a db bc 71 88 24"
uuid.location = "56 4d 87 ee d7 81 67 f3-2d 2e 3a db bc 71 88 24"
replay.supported = "FALSE"
replay.filename = ""
ide0:0.redo = ""
pciBridge0.pciSlotNumber = "17"
pciBridge4.pciSlotNumber = "21"
pciBridge5.pciSlotNumber = "22"
pciBridge6.pciSlotNumber = "23"
pciBridge7.pciSlotNumber = "24"
scsi0.pciSlotNumber = "160"
usb.pciSlotNumber = "32"
ethernet0.pciSlotNumber = "33"
sound.pciSlotNumber = "34"
vmci0.pciSlotNumber = "36"
sata0.pciSlotNumber = "37"
scsi0.sasWWID = "50 05 05 6e d7 81 67 f0"
ethernet0.generatedAddressOffset = "0"
vmci0.id = "-1549065039"
monitor.phys_bits_used = "40"
vmotion.checkpointFBSize = "134217728"
cleanShutdown = "TRUE"
softPowerOff = "TRUE"
usb:1.speed = "2"
usb:1.present = "TRUE"
usb:1.deviceType = "hub"
usb:1.port = "1"
usb:1.parent = "-1"
tools.syncTime = "FALSE"
disable_acceleration = "TRUE"
mce.enable = "TRUE"
monitor_control.vt32 = "TRUE"
prefvmx.useRecommendedLockedMemSize = "TRUE"
MemTrimRate = "0"
monitor.virtual_mmu = "automatic"
monitor.virtual_exec = "automatic"
ethernet0.address = "20:50:56:37:0D:A5"
tools.remindInstall = "TRUE"
ehci.present = "TRUE"
SMBIOS.reflectHost = "TRUE"
ehci.pciSlotNumber = "35"
ethernet0.linkStatePropagation.enable = "FALSE"
vhv.enable = "TRUE"
cpuid.1.eax = "00001111111010111111101111111111"
cpuid.1.ebx = "00000000000000000000011011110001"
cpuid.1.ecx = "0--------------0----------------"
cpuid.1.edx = "-----------0---------0----------"

hgfs.mapRootShare = "TRUE"
usb.generic.autoconnect = "FALSE"
bios.forceSetupOnce = "FALSE"
toolsInstallManager.updateCounter = "1"
sharedFolder0.present = "TRUE"
sharedFolder0.enabled = "TRUE"
sharedFolder0.readAccess = "TRUE"
sharedFolder0.writeAccess = "TRUE"
gui.exitOnCLIHLT = "TRUE"
monitor_control.restrict_backdoor = "TRUE"
monitor_control.enable_fullcpuid = "TRUE"
board-id.reflectHost = "TRUE"
hw.model.reflectHost = "TRUE"
serialNumber.reflectHost = "TRUE"
SMBIOS.noOEMStrings = "TRUE"
svga.autodetect = "TRUE"
msg.autoAnswer = "FALSE"
mks.noBeep = "FALSE"
sched.mem.pshare.enable = "FALSE"
sched.mem.maxmemctl = "0"
MemAllowAutoScaleDown = "FALSE" 
mem.ShareScanTotal = "0"
mem.ShareScanVM = "0"
vmi.present.getPtrLocation.disable = "TRUE"
isolation.tools.setPtrLocation.disable = "TRUE"
isolation.tools.setVersion.disable = "TRUE"
isolation.tools.getVersion.disable = "TRUE"
monitor_control.disable_directexec = "TRUE"
monitor_control.disable_chksimd = "TRUE"
monitor_control.disable_ntreloc = "TRUE"
monitor_control.disable_selfmod = "TRUE"
monitor_control.disable_reloc = "TRUE"
monitor_control.disable_btinout = "TRUE"
monitor_control.disable_btmemspace = "TRUE"
monitor_control.disable_btpriv = "TRUE"
monitor_control.disable_btseg = "TRUE"
svga.guestBackedPrimaryAware = "TRUE"
vmx.buildType = "release"
priority.grabbed = "high"
mainMem.useNamedFile = "FALSE"
ethernet0.connectionType = "nat"
usb:0.present = "TRUE"
usb:0.deviceType = "hid"
usb:0.port = "0"
usb:0.parent = "-1"
sata0:0.present = "FALSE"
ide0:1.present = "FALSE"
sata0:1.present = "FALSE"
floppy0.present = "FALSE"

another

isolation.tools.setVersion.disable = "TRUE"
isolation.tools.getVersion.disable = "TRUE"
monitor_control.enable_fullcpuid = TRUE
cpuid.1.eax = "00001111111010111111101111111111"
cpuid.1.ebx = "00000000000000000000011011110001"
cpuid.80000002.0.eax="0110:0101:0111:0100:0110:1110:0100:1001"
cpuid.80000002.0.ebx="0010:1001:0101:0010:0010:1000:0110:1100"
cpuid.80000002.0.ecx="0110:1111:0110:0101:0101:1000:0010:0000"
cpuid.80000002.0.edx="0010:1001:0101:0010:0010:1000:0110:1110"
cpuid.80000003.0.eax="0101:0101:0101:0000:0100:0011:0010:0000"
cpuid.80000003.0.ebx="0010:0000:0010:0000:0010:0000:0010:0000"
cpuid.80000003.0.ecx="0010:0000:0010:0000:0010:0000:0010:0000"
cpuid.80000003.0.edx="0101:1000:0010:0000:0010:0000:0010:0000"
cpuid.80000004.0.eax="0011:0101:0011:0111:0011:0110:0011:0101"
cpuid.80000004.0.ebx="0010:0000:0100:0000:0010:0000:0010:0000"
cpuid.80000004.0.ecx="0011:0111:0011:0000:0010:1110:0011:0011"
cpuid.80000004.0.edx="0000:0000:0111:1010:0100:1000:0100:0111"

Fiddler About Phone Proxy

2021-12-20T14:13:40.000Z

Scene

Fiddler 手机抓包的一些设置
通过 Fiddler 获取手机应用的网络请求数据
不通端网络的设置方式

Solution

外部网络 / Fiddler 宿主机网络

手机和 Fiddler 宿主机连接在同一个外部网络中
Fiddler 宿主机连接外部网络,然后宿主机开放热点, 手机连接该热点

然后在手机的 WLAN 连接里配置宿主机上 Fiddler 的代理地址和端口
连上后,手机浏览器打开该代理地址和端口下载证书
最后打开手机应用,即可在 Fiddler 里看到网络数据了

手机共享网络

手机通过开启热点,把移动网络分享出来,然后宿主机连接该网络

打开手机移动网络设置,找到 APN , 设置代理地址和端口为宿主机上 Fiddler 的代理地址和端口
最后打开手机应用,同样的可以在 Fiddler 里看到网络请求包了

Other

Fiddler 抓包的常规配置开启
下图右上角查看该代理地址信息

RoboCopy In Win10 Task About(0x1/0x10)

2021-12-18T10:58:13.000Z

Scene

RoboCopy bat 脚本添加到 win10 定时任务中
出现上次运行结果为 0x1,0x10

Solution

因为脚本中使用到网络磁盘的原因
手动执行脚本没问题,但是添加到定时任务就不行
原因是在定时任务中的网络磁盘账户信息和本地执行的网络磁盘账户并不是一致的
解决方法:
1. 在定时任务的常规-安全选项-选择【只在用户登录时运行】,这样就使用了和本地执行一致的网络磁盘账户信息
2. 在脚本中添加网络磁盘账户信息 net use j: \\RemoteHost\Files RemotePassword /user:RemoteUser

Other

Use ArchiveBox For Daily

2021-12-11T19:20:46.000Z

Sence

由于经常发现一些站点或文章很不错,每次都只是手动保存链接
偶尔回头看的话,原本保存的链接的站点或文章已经消失了
所以需要一个服务在保存站点链接的时候,把站点抓取保存成文件
这样日后翻看就很方便

Solution

ArchiveBox 可以很好的满足这个日常的需求 👉 ArchiveBox

Easy Setup With Docker

切换到非 root 账户下安装
mkdir ~/archivebox && cd ~/archivebox ## 创建目录
docker run -v $PWD:/data -it archivebox/archivebox init --setup # 初始化
docker run -v $PWD:/data -p 8000:8000 archivebox/archivebox # 启动容器

Account About

登录后台需要修改下默认密码
docker exec -it [容器id] /bin/bash 进入容器
ArchiveBox 修改用户信息需要在非 root 账户下
进入容器后默认的是 root 用户,需要创建新用户
- useradd -d /home/elias elias
- passwd elias
su elias 接着切换用户执行操作
archivebox manage changepassword USERNAME 修改账户密码
archivebox manage changepassword admin 修改默认的 admin 密码

Other

容器里需要给目录赋权限

$ archivebox manage changepassword USERNAME
[i] [2021-12-11 19:17:32] ArchiveBox v0.6.2: archivebox manage changepassword USERNAME
    > /data

Traceback (most recent call last):
  File "/usr/local/lib/python3.9/logging/config.py", line 564, in configure
    handler = self.configure_handler(handlers[name])
  File "/usr/local/lib/python3.9/logging/config.py", line 745, in configure_handler
    result = factory(**kwargs)
  File "/usr/local/lib/python3.9/logging/handlers.py", line 153, in __init__
    BaseRotatingHandler.__init__(self, filename, mode, encoding=encoding,
  File "/usr/local/lib/python3.9/logging/handlers.py", line 58, in __init__
    logging.FileHandler.__init__(self, filename, mode=mode,
  File "/usr/local/lib/python3.9/logging/__init__.py", line 1146, in __init__
    StreamHandler.__init__(self, self._open())
  File "/usr/local/lib/python3.9/logging/__init__.py", line 1175, in _open
    return open(self.baseFilename, self.mode, encoding=self.encoding,
PermissionError: [Errno 13] Permission denied: '/data/logs/errors.log'

切换到 root 账户, 到 /data 目录下
chmod -R 777 ./ 给 data 目录下所有文件赋予权限

CentOS8 About Docker

2021-12-11T19:03:25.000Z

Sence

安装 ArchiveBox 遇到了一些问题

由于是用 Docker 安装的, 容器启动失败

Emulate Docker CLI using podman. Create /etc/containers/nodocker to quiet msg.
ERRO[0001] unable to get systemd connection to add healthchecks: dial unix /tmp/podman-run-1003/systemd/private: connect: connection refused
ERRO[0001] unable to get systemd connection to start healthchecks: dial unix /tmp/podman-run-1003/systemd/private: connect: connection refused
4

Solution

查了一下发现在 CentOS8 里直接使用 yum install docker -y ,安装的是 podman-docker
虽说命令兼,但是有些问题,所以把它卸了重新装 Docker
yum remove docker 卸载当前装的 podman
curl https://download.docker.com/linux/centos/docker-ce.repo -o /etc/yum.repos.d/docker-ce.repo 下载 docker-ce 源
yum install docker-ce -y 安装 docker-ce

Other

docker: Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?.

添加用户到 docker 组
gpasswd -a $USER docker root用户下添加当前登录用户(root)到 docker 组
gpasswd -a elias docker root用户下添加 elias 用户到 docker 组
systemctl restart docker 重启 docker

Apache Log4j2 Fixbug

2021-12-11T14:25:22.000Z

Sence

Apache Log4j 2.x < 2.15.0 存在远程代码执行
结合了 JNDI , 本地利用 Log4j2 构造函数, 调用远程服务端 Log4j2 的函数,导致本地函数可以注入远程服务端代码
详细 👉【漏洞预警】Apache Log4j2 远程代码执行漏洞（CVE-2021-44228）

Solution

到 maven 官方仓库下载最新修复该漏洞的 jar 👉 org/apache/logging/log4j
在官方站点可查看哪些 jar 引用了涉及该漏洞版本的log4j2 jar , 如 👉 mvnrepository/Artifacts using log4j-core version 2.14.1
在项目里替换一下已修复漏洞的 jar 的引用即可

Raw Github Connection Refused

2021-12-11T09:38:53.000Z

Sence

root@raspberrypi /h/pi# curl -sSL 'https://get.archivebox.io' | sh
curl: (7) Failed to connect to raw.githubusercontent.com port 443: Connection refused
root@raspberrypi /h/pi# ping raw.githubusercontent.com
PING raw.githubusercontent.com (127.0.0.1) 56(84) bytes of data.
64 bytes from localhost (127.0.0.1): icmp_seq=1 ttl=64 time=0.180 ms
64 bytes from localhost (127.0.0.1): icmp_seq=2 ttl=64 time=0.156 ms
64 bytes from localhost (127.0.0.1): icmp_seq=3 ttl=64 time=0.114 ms
64 bytes from localhost (127.0.0.1): icmp_seq=4 ttl=64 time=0.118 ms
64 bytes from localhost (127.0.0.1): icmp_seq=5 ttl=64 time=0.102 ms
64 bytes from localhost (127.0.0.1): icmp_seq=6 ttl=64 time=0.105 ms
64 bytes from localhost (127.0.0.1): icmp_seq=7 ttl=64 time=0.128 ms
^C
--- raw.githubusercontent.com ping statistics ---
7 packets transmitted, 7 received, 0% packet loss, time 234ms
rtt min/avg/max/mdev = 0.102/0.129/0.180/0.026 ms
root@raspberrypi /h/pi#

由上可知,由于 DNS 污染问题, raw.githubusercontent.com 经常访问不了

Solution

打开 ipaddress , 输入 raw.githubusercontent.com 查看目前 DNS 解析到的 IP
如 ipaddress ,翻看可见解析到的 IP

最后在机器上配置 hosts 解析即可, 刷 DNS 缓存

199.108.133 raw.githubusercontent.com
199.109.133 raw.githubusercontent.com
199.110.133 raw.githubusercontent.com
199.111.133 raw.githubusercontent.com

Other

on pi 重启网络

pi@raspberrypi ~> /etc/init.d/networking restart
[....] Restarting networking (via systemctl): networking.service==== AUTHENTICATING FOR org.freedesktop.systemd1.manage-units ===
Authentication is required to restart 'networking.service'.
Authenticating as: ,,, (pi)
Password:
==== AUTHENTICATION COMPLETE ===
. ok

使用工具刷新 DNS
- sudo apt-get install nscd
- sudo /etc/init.d/nscd restart
改变机器 DNS 解析服务器 sudo nano /etc/resolv.conf
- nameserver 8.8.8.8 修改

Git Reset Commit Without Change Code

2021-12-10T18:56:21.000Z

Scene

因为设置了定时提交 github 脚本,偶尔在目录下打包了大的压缩包忘了删除
定时任务提交 git commit 到本地仓库了

今天手动 push 到 github 发现文件过大

F:\Code\Temp>git push
    Enumerating objects: 1193, done.
    Counting objects: 100% (1193/1193), done.
    Delta compression using up to 12 threads
    Compressing objects: 100% (812/812), done.
    Writing objects: 100% (1177/1177), 146.10 MiB | 461.00 KiB/s, done.
    Total 1177 (delta 212), reused 1111 (delta 175), pack-reused 0
    remote: Resolving deltas: 100% (212/212), completed with 14 local objects.
    remote: error: Trace: 64c7aa0d8f24426987252f0fa81b8013929e07d5a0f4f52abfff441e541eee51
    remote: error: See http://git.io/iEPt8g for more information.
    remote: error: File vue/vue.zip is 161.24 MB; this exceeds GitHub's file size limit of 100.00 MB 
    remote: error: GH001: Large files detected. You may want to try Git Large File Storage - https://git-lfs.github.com.
    To github.com:OrekiYuta/Temp.git
    ! [remote rejected]   master -> master (pre-receive hook declined)
    error: failed to push some refs to 'github.com:OrekiYuta/Temp.git'

Solution

解决方法是回退本地 commit 到大文件提交记录之前的 commit

以下方法只是回退本地 commit 记录,并不会对本地代码修改回退

F:\Code\Temp>git log
commit 137833d814c302e03e806aa0dd297c66cbfe26f8 (HEAD -> master)
Author: OrekiYuta 
Date:   Sat Dec 11 02:49:13 2021 +0800

    on

commit 05d5ba83c4d0ee2678ab7ad0fe71f36456b3d548
Author: OrekiYuta 
Date:   Sat Dec 11 02:30:57 2021 +0800

    2021-12-11/ 2:30:54.50 by auto commit

commit 4d09030accde17e9f9b1551fbbea06511683d635
Author: OrekiYuta 
Date:   Fri Dec 10 23:30:55 2021 +0800

    2021-12-10/23:30:54.05 by auto commit

commit f0089c3aa837e7fb7a820717f1e5f529f352890e
Author: OrekiYuta 
Date:   Fri Dec 10 02:32:18 2021 +0800

    2021-12-10/ 2:31:49.91 by auto commit

commit f4fe5830c92e3a0240c6606f6b35bea74b951f35 # commit id 标识
Author: OrekiYuta 
Date:   Thu Dec 9 23:31:11 2021 +0800

    2021-12-09/23:31:01.07 by auto commit

定位到想要回退 commit 的记录 id 标识

git reset id 执行即可

F:\Code\Temp\vue>git reset a389eb06aa841e79c734f361a25b77b4c177e964
Unstaged changes after reset:
M       python/amos/.idea/amos.iml
M       python/amos/.idea/misc.xml
M       python/amos/.idea/modules.xml
M       python/amos/.idea/vcs.xml
M       python/lab/app/service/github_commit_service.py
D       python/lab/test.md
D       vue/kasrc/.editorconfig

最后重新提交 push 代码到 github 即可