Table des matières
- 2026:
- 2025:
4 billet(s) pour septembre 2026
| Notes HTTP Strict Transport Security - HSTS | 2026/09/18 11:04 | Jean-Baptiste |
| Notes GNU Linux GPU carte graphiques | 2026/09/08 15:49 | Jean-Baptiste |
| Notes GNU Linux graphique | 2026/09/08 15:42 | Jean-Baptiste |
| Notes urlencoding - passer des mots de passe en HTTPS | 2026/09/03 17:58 | Jean-Baptiste |
Notes formatage mkfs mount file system
XFS
# ls -l /dev/mapper/ | grep part | awk '{print $9}'
3624a937043be47c12334399b00016d73-part1
3624a937043be47c12334399b00016d74-part1
3624a937043be47c12334399b00016d75-part1
# parts=`ls -l /dev/mapper/ | grep part | awk '{print $9}'`
# for i in $parts
> do
> mkfs.xfs -d su=131072,sw=8 -i size=1024 $i
> done
You can verify that the underlying filesystem has the correct values for stripe unit and stripe width by using the xfs_info command:
mount -t xfs -o nobarrier,noatime,nodiratime,inode64 /dev/mapper/3624a937043be47c12334399b00016d73-part1 /disk1
# xfs_info /disk1
meta-data=/dev/mapper/3624a937043be47c12334399b00016d73-part1 isize=1024 agcount=4, agsize=83623808 blks
= sectsz=512 attr=2
data = bsize=4096 blocks=334495232, imaxpct=5
= sunit=32 swidth=256 blks
naming =version 2 bsize=4096 ascii-ci=0
log =internal bsize=4096 blocks=163328, version=2
= sectsz=512 sunit=32 blks, lazy-count=1
realtime =none extsz=4096 blocks=0, rtextents=0
sunit and swidth are shown in bsize (block size) units in the xfs_info command output.
stripe unit= 32 sunits * 4096 bsize (block size)= 131072 bytes = 128K stripe width= 256 blocks * 4096 bsize = 1M = 128K * 8 drives
The sysctl fs.xfs.rotorstep can be used to change how many files are put into an XFS allocation group. Increasing the default number from 1 to 255 reduces seeks to multiple allocation groups. Improved performance has been observed in some cases by increasing this number. You can put the following line in /etc/sysctl.conf to ensure this change is affected on each boot of the system:
fs.xfs.rotorstep = 255
When mounting the XFS filesystem that resides on the LUNs offered from the FlashArray, be sure to use the following mount options:
mount –t xfs –o “discard,nobarrier,noatime,nodiratime,inode64” \ /dev/mapper/nodeX /srv/node/sdb1
Source : https://pure-storage-openstack-docs.readthedocs.io/en/wallaby/swift/section_swift-partitioning.html
The overlay2 driver is supported on xfs backing filesystems, but only with d_type=true enabled.
Autres /mkfs.xfs -m reflink=1 /dev/sdc
mkfs.xfs -n ftype=1 -m reflink=1 /dev/mapper/vg_data-data
Lazy pulling of container images can run more efficiently when the file system has reflink support. The file systems XFS and BTRFS have reflink support. Source : podman
Notes firmwares
Brouillon
Voir : Firmware SPI boot UEFI et autres
Voir :
- Heads https://osresearch.net/
hw-detect /bin/check-missing-firmware https://packages.debian.org/fr/testing/amd64/hw-detect/download
Voir fwupd
Notes firewalld firewall-cmd
Voir :
Voir aussi:
Voir la conf
firewall-cmd --list-all
Les règles sont enregistrées ici
/usr/lib/firewalld/zones//etc/firewalld/zones/
Autoriser un port
firewall-cmd --add-port=80/tcp # Pour garder le changement après redémarrage firewall-cmd --add-port=80/tcp --permanent
firewall-cmd --permanent --add-service=high-availability firewall-cmd --add-service=high-availability
Firewalld avec Docker
PS : RedHat propose Podman à la place de Docker
firewall-cmd --permanent --zone=trusted --add-interface=docker0 for bridge in $(ip link | awk '/: br-/ { gsub(":", "") ; print $2 }') do firewall-cmd --permanent --zone=trusted --add-interface=${bridge} done firewall-cmd --reload systemctl restart docker
Autres
firewall-cmd --permanent --zone=trusted --add-interface=virbr0 firewall-cmd --reload firewall-cmd --add-masquerade firewall-cmd --add-forward-port=port=8888:proto=tcp:toport=8888:toaddr=192.168.122.101
Notes Firefox
Voir :
- CIS Mozilla Firefox ESR Benchmark
Certificats
$ debsums -as firefox debsums: Error: symlink loop detected in path 'usr/lib/firefox/libnssckbi.so'. Please file a bug against firefox $ ls -l /usr/lib/firefox/libnssckbi.so* lrwxrwxrwx 1 root root 49 Jul 2 17:27 /usr/lib/firefox/libnssckbi.so -> /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so -rw-r--r-- 1 root root 545208 Aug 14 2019 /usr/lib/firefox/libnssckbi.so.orig $ debsums -as firefox debsums: changed file /usr/lib/firefox/libnssckbi.so (from firefox package) debsums: changed file /etc/firefox/syspref.js (from firefox package) $ ls -l /usr/lib/firefox/libnssckbi.so.* -rw-r--r-- 1 root root 545208 Aug 14 2019 /usr/lib/firefox/libnssckbi.so.orig
Setting config about:config
| Description | Clef | Valeur |
|---|---|---|
| GIF animés | image.animation_mode | “once”, “none” |
| geo.enabled | false |
Notes commande GNU find
Voir :
Voir aussi
- fd (fdfind)
Find perm. Chmod, permission : http://www.tutonics.com/2012/12/find-files-based-on-their-permissions.html
find . -type f -exec bash -c 'echo $1 "/mnt/plop/${1#/path}" ' -- '{}' \;
Sortir au premier fichier trouvé
Sortir au 1er résultat Exit on first matched file
find / -perm -2000 | head -n 1 find / -perm -2000 -print -quit
Liens symboliques cible
Trouver tous les liens symboliques pointant sur systemctl
find /usr/sbin/ -type l -exec ls -ald {} \; | grep '\-> .*/systemctl'
