AdminSysGNULinux

Outils pour utilisateurs

Outils du site

Piste : • blog
blog

Table des matières

4 billet(s) pour juillet 2026

Procédure simple augmentation de la SWAP2026/07/17 15:49Jean-Baptiste
Exemple git clone avec Ansible2026/07/16 14:47Jean-Baptiste
Windows exe - Comparaison de fichiers binaires2026/07/16 10:25Jean-Baptiste
Pb git2026/07/01 17:36Jean-Baptiste

Trunk 8021q plusieurs VLAN sur une seule carte réseau

Voir : 

modprobe 8021q
echo "8021q" >> /etc/modules

/etc/network/interfaces 

allow-hotplug eno1
iface eno1 inet manual

auto eno1.98
iface eno1.98 inet manual

auto eno1-vbr98
iface eno1-vbr98 inet static
        address 0.0.0.0
        netmask 255.255.255.255
        bridge_ports eno1.98
        bridge_stp off
        bridge_fd 0
ifup eno1-vbr98
2025/03/24 15:06
,

Trouver des liens symboliques en erreur / Trouver les liens symboliques morts

Voir aussi : 

find / -type l | perl -lne 'print if ! -e'

Source : http://www.tux-planet.fr/trouver-des-liens-symboliques-en-erreur/

Ou encore 

diff <(find . -type l -print0 | xargs -0 -I {} readlink -e {}) <(find . -type l -print0 | xargs -0 -I {} readlink -m {})

Avec le paquet debian fslint
Placer vous avant dans le répertoire à vérifier 

/usr/share/fslint/fslint/findbl
find -L dossier/ -not -readable

Ou plus simplement 

find . -xtype l
2025/03/24 15:06
,

Trier et effacer les vidéos

find /home/$USER/Téléchargements/ -type f \( -iname "*.webm" -o -iname "*.mp4" -o -iname "*.avi" \) -print0 -ok rm {} \; | xargs -0 -I '{}' mplayer {} >/dev/null 2>&1

[Esc] pour fermer la vidéo Puis y pour effacer la vidéo ou [Entrée] pour passer à la suivante

2025/03/24 15:06
,

Serveur FTP Debian ftpd

Voir aussi :

File Transfer Protocol (FTP) server
This is the netkit ftp server. You are recommended to use one of its alternatives, such as vsftpd, proftpd, or pure-ftpd.

Install, config et chroot 

apt-get install ftpd

/etc/passwd 

john:x:1002:1003:FTP access,,,:/ftp:/bin/false

/etc/ftpchroot 

# /etc/ftpchroot: list of users who needs to be chrooted. See ftpchroot(5).
john

/etc/ftpusers 

# /etc/ftpusers: list of users disallowed ftp access. See ftpusers(5).
root
ftp
anonymous

Comme c'est chrooté, la commande ls ne fonctionne pas

Pour la faire fonctionner : 

ldd /bin/ls
mkdir /ftp/bin
mkdir /ftp/lib
cp -p /bin/ls /ftp/bin/
cp -a /lib/x86_64-linux-gnu/ /ftp/lib/

Pour changer le numéro de port /etc/services 

#ftp             21/tcp
ftp            2121/tcp
systemctl restart inetd

Autres

vsftpd
echo "chroot_local_user=YES" >> /etc/vsftpd/vsftpd.conf
2025/03/24 15:06
, ,

Traefik - un reverse proxy pour Docker

Voir aussi :

traefik.yml 

entryPoints:
  web:
    address: ":80"
  websecure:
    address: ":443"

serversTransport:
  insecureSkipVerify: true
#  rootCAs:
#    - certs/inter-chain.pem

providers:
  file:
    filename: dynamic_conf.yml
    watch: true
  docker:
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false

log:
  #level: DEBUG
  level: INFO

api:
  dashboard: true
  #debug: true
  #insecure: true

dynamic_conf.yml 

tls:
  certificates:
    - certFile: certs/registry.docker.local.crt
      keyFile: certs/registry.docker.local.key

    - certFile: certs/wildcard.docker.local.crt
      keyFile: certs/wildcard.docker.local.key
      stores:
        - default

  stores:
    default:
      defaultCertificate:
        certFile: certs/wildcard.docker.local.crt
        keyFile: certs/wildcard.docker.local.key

  options:
    default:
      minVersion: VersionTLS12
      sniStrict: true

docker-compose.yml 

version: '3.7'
services:
  traefik:
    image: traefik
    #restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock
      - $PWD/traefik.yml:/traefik.yml:ro
      - $PWD/dynamic_conf.yml:/dynamic_conf.yml:ro
      - $PWD/certs:/certs:ro
#    environment:
#      PUID: ${PUID}
#      PGID: ${PGID}
#      TZ: ${TZ}
    labels:
      - traefik.enable=true
      - traefik.http.routers.dashboard.entrypoints=web
      - traefik.http.routers.dashboard.rule=Host(`traefik.docker.local`)
      #- traefik.http.services.s-dashboard.loadbalancer.server.port=8080
      - traefik.port=8080
      - traefik.http.routers.s-dashboard.entrypoints=websecure
      - traefik.http.routers.s-dashboard.rule=Host(`traefik.docker.local`)
      - traefik.http.routers.s-dashboard.service=api@internal
      - traefik.http.routers.s-dashboard.middlewares=auth@docker
      # mkpasswd -m md5 |sed -e 's/\$/$$/g'
      - traefik.http.middlewares.auth.basicauth.users=jean:$$1$$qvbVKuOn$$qKZpjcMQuMFWNgC9vtycL1
      - traefik.http.routers.s-dashboard.tls=true
      - traefik.http.routers.dashboard.middlewares=https-redirect@docker
      - traefik.http.middlewares.https-redirect.redirectscheme.scheme=https
      - traefik.http.middlewares.https-redirect.redirectscheme.permanent=true
 
#  hello:
#    image: osones/helloworld
#    labels:
#      - traefik.enable=true
#      - traefik.http.routers.hw.entrypoints=web
#      - traefik.http.routers.hw.rule=Host(`hw.docker.local`)
#      - traefik.http.routers.s-hw.entrypoints=websecure
#      - traefik.http.routers.s-hw.rule=Host(`hw.docker.local`)
#      - traefik.http.routers.s-hw.tls=true
#      - traefik.http.routers.hw.middlewares=https-redirect@docker
#      - traefik.http.middlewares.https-redirect.redirectscheme.scheme=https
#      - traefik.http.middlewares.https-redirect.redirectscheme.permanent=true
#      #- "traefik.port=80"
#      #- "traefik.backend=hello"

  redis:
    image: redis
    #restart: unless-stopped
    restart: always
  registry:
    image: registry:2
    depends_on:
      - redis
    environment:
    environment:
      - REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY=/data
      - REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR=redis
      - REGISTRY_REDIS_ADDR=redis:6379
    volumes:
      - $PWD/data:/data
    labels:
      - traefik.enable=true
      - traefik.port=5000
      - traefik.http.routers.s-registry.rule=Host(`registry.docker.local`)
      - traefik.http.routers.s-registry.entrypoints=websecure
      - traefik.http.routers.s-registry.tls=true

  registry-ui:
    image: konradkleine/docker-registry-frontend:v2
    #restart: unless-stopped
    depends_on:
      - registry
    environment:
      ENV_DOCKER_REGISTRY_HOST: 'registry'
      ENV_DOCKER_REGISTRY_PORT: 5000
      #ENV_DOCKER_REGISTRY_USE_SSL: 1
      ENV_DEFAULT_REPOSITORIES_PER_PAGE: 50
    labels:
      - traefik.enable=true
      - traefik.port=80
      - traefik.http.routers.s-registry-ui.rule=Host(`registry-ui.docker.local`)
      - traefik.http.routers.s-registry-ui.entrypoints=websecure
      - traefik.http.routers.s-registry-ui.tls=true
      - traefik.http.routers.s-registry-ui.middlewares=auth@docker
      - traefik.http.middlewares.auth.basicauth.users=jean:$$1$$qvbVKuOn$$qKZpjcMQuMFWNgC9vtycL1

Exemple de génération de certificats. Notez que Traefik est capable d'utiliser Let's Encrypt 

mkdir certs
openssl req -newkey rsa:4096 -nodes -sha256 -keyout certs/wildcard.docker.local.key -x509 -days 365 -out certs/wildcard.docker.local.crt
docker-compose up -d
2025/03/24 15:06
, ,

<< Billets récents | Anciens billets >>

blog.txt · Dernière modification : de 127.0.0.1
Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki