Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
7288a7ba8b | ||
|
|
63631e6ad3 | ||
|
|
5ed5ac768b | ||
|
|
ae5b3e1e82 | ||
|
|
b7857fcd66 | ||
|
|
81101cde20 | ||
|
|
99e4a94a9f | ||
|
|
c4294612eb | ||
|
|
38df9bd3e4 | ||
|
|
0019ac0fbc | ||
|
|
1b8caefe58 | ||
|
|
9804c8964e | ||
|
|
861e468aa6 | ||
|
|
90bc8f942b | ||
|
|
09f4738295 | ||
|
|
ea71df8c8c | ||
|
|
1a8c107333 | ||
|
|
c40ba60a6e | ||
|
|
9494d82747 | ||
|
|
f89c38f8d8 | ||
|
|
6a9202a62b | ||
|
|
8a10db07d1 | ||
|
|
17ab25b998 | ||
|
|
17ae656734 | ||
|
|
b28bb464c1 | ||
|
|
0fd5dc83f2 |
@@ -4,17 +4,17 @@ PVE 系统正式安装之前,需要准备 PVE 的安装镜像和一些必要
|
|||||||
|
|
||||||
### 0.1. PVE 镜像下载
|
### 0.1. PVE 镜像下载
|
||||||
|
|
||||||
PVE 下载地址:https://www.proxmox.com/en/downloads
|
PVE 下载地址:[Proxmox Virtual Environment](https://www.proxmox.com/en/downloads/proxmox-virtual-environment)
|
||||||
|
|
||||||
页面中可能有多个 PVE 的安装 ISO ,可以根据需要进行选择,目前以最新的 `Proxmox VE 8.0 ISO` 作为演示。
|
页面中有多个 PVE 相关文件,本文以目前最新的 `Proxmox VE 8.0 ISO Installer` 作为演示。
|
||||||
|
|
||||||

|
点击 `Proxmox VE 8.x ISO Installer` 链接,进入 PVE 下载页面。
|
||||||
|
|
||||||
点击 `Proxmox VE 8.x ISO Installer` 链接。
|

|
||||||
|
|
||||||
下载 ISO 时请注意 `SHA256SUM` ,后续将使用该校验信息对下载下来的 ISO 进行校验,以确保 ISO 文件的完整性。
|
下载 ISO 时请注意 `SHA256SUM` ,后续将使用该校验信息对下载下来的 ISO 进行校验,以确保 ISO 文件的完整性。
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
### 0.2.启动盘制作工具
|
### 0.2.启动盘制作工具
|
||||||
|
|
||||||
@@ -156,7 +156,7 @@ PVE 为最关键的虚拟化层,建议使用强密码,包含大小写字母
|
|||||||
|
|
||||||
FQDN 为 PVE 的域,PVE 将使用 FQDN 中的二级域名作为其主机名。
|
FQDN 为 PVE 的域,PVE 将使用 FQDN 中的二级域名作为其主机名。
|
||||||
|
|
||||||
演示中 FQDN 为 `node01.fox.local` ,因此 PVE 的主机名为 `node01` 。
|
演示中 FQDN 为 `node01.fox.home.arpa` ,因此 PVE 的主机名为 `node01` 。
|
||||||
|
|
||||||
根据规划,PVE 的 IPv4 管理地址为 `172.16.1.254` 。
|
根据规划,PVE 的 IPv4 管理地址为 `172.16.1.254` 。
|
||||||
|
|
||||||
@@ -166,7 +166,7 @@ FQDN 为 PVE 的域,PVE 将使用 FQDN 中的二级域名作为其主机名。
|
|||||||
|
|
||||||
|参数|值|说明|
|
|参数|值|说明|
|
||||||
|--|--|--|
|
|--|--|--|
|
||||||
|Hostname (FQDN)|`node01.fox.local`|设置 PVE `域` 和 `主机名` |
|
|Hostname (FQDN)|`node01.fox.home.arpa`|设置 PVE `域` 和 `主机名` |
|
||||||
|IP Address (CIDR)|`172.16.1.254/24`|设置 PVE IPv4 地址|
|
|IP Address (CIDR)|`172.16.1.254/24`|设置 PVE IPv4 地址|
|
||||||
|Gateway|`172.16.1.1`|设置 PVE IPv4 网关|
|
|Gateway|`172.16.1.1`|设置 PVE IPv4 网关|
|
||||||
|DNS Server|`172.16.1.1`|设置 PVE IPv4 DNS |
|
|DNS Server|`172.16.1.1`|设置 PVE IPv4 DNS |
|
||||||
|
|||||||
@@ -149,7 +149,7 @@ $ apt dist-upgrade
|
|||||||
|
|
||||||
其中 `unattended-upgrades` 为系统自动更新服务,后续会对其进行配置。
|
其中 `unattended-upgrades` 为系统自动更新服务,后续会对其进行配置。
|
||||||
|
|
||||||
`cpufrequtils` 为 CPU 调度器的配置工具,后续会对 CPU 调度算法进行调整。
|
`linux-cpupower` 为 CPU 调度器的配置工具,后续会对 CPU 调度算法进行调整。
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
## 同步镜像仓库
|
## 同步镜像仓库
|
||||||
@@ -162,7 +162,7 @@ $ apt install htop lm-sensors unzip neovim tmux unattended-upgrades powermgmt-ba
|
|||||||
$ apt install iperf iperf3 iftop
|
$ apt install iperf iperf3 iftop
|
||||||
|
|
||||||
## 安装 CPU 调度调整工具
|
## 安装 CPU 调度调整工具
|
||||||
$ apt install cpufrequtils
|
$ apt install linux-cpupower
|
||||||
|
|
||||||
## 根据 CPU 厂商安装 CPU 微码工具
|
## 根据 CPU 厂商安装 CPU 微码工具
|
||||||
$ apt install intel-microcode (amd64-microcode)
|
$ apt install intel-microcode (amd64-microcode)
|
||||||
|
|||||||
@@ -15,7 +15,7 @@ $ apt install htop lm-sensors unzip neovim tmux unattended-upgrades powermgmt-ba
|
|||||||
$ apt install iperf iperf3 iftop
|
$ apt install iperf iperf3 iftop
|
||||||
|
|
||||||
## 安装 CPU 调度调整工具
|
## 安装 CPU 调度调整工具
|
||||||
$ apt install cpufrequtils
|
$ apt install linux-cpupower
|
||||||
|
|
||||||
## 根据 CPU 厂商安装 CPU 微码工具
|
## 根据 CPU 厂商安装 CPU 微码工具
|
||||||
$ apt install intel-microcode (amd64-microcode)
|
$ apt install intel-microcode (amd64-microcode)
|
||||||
@@ -82,41 +82,45 @@ MS Name/IP address Stratum Poll Reach LastRx Last sample
|
|||||||
|
|
||||||
## 2. CPU 调度器
|
## 2. CPU 调度器
|
||||||
|
|
||||||
安装好 `cpufrequtils` 后,需检查 CPU 当前调度器。
|
安装 `linux-cpupower` 后,需检查 CPU 当前调度器。
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
## 检查 CPU 当前调度器
|
## 检查 CPU 当前调度器
|
||||||
$ cpufreq-info
|
$ cpupower -c all frequency-info
|
||||||
|
|
||||||
#### 设备 CPU - J4125 示例输出
|
#### 设备 CPU - J4125 示例输出
|
||||||
cpufrequtils 008: cpufreq-info (C) Dominik Brodowski 2004-2009
|
|
||||||
Report errors and bugs to cpufreq@vger.kernel.org, please.
|
|
||||||
analyzing CPU 0:
|
analyzing CPU 0:
|
||||||
driver: intel_cpufreq
|
driver: intel_cpufreq
|
||||||
CPUs which run at the same hardware frequency: 0
|
CPUs which run at the same hardware frequency: 0
|
||||||
CPUs which need to have their frequency coordinated by software: 0
|
CPUs which need to have their frequency coordinated by software: 0
|
||||||
maximum transition latency: 20.0 us.
|
maximum transition latency: 20.0 us
|
||||||
hardware limits: 800 MHz - 2.70 GHz
|
hardware limits: 800 MHz - 2.70 GHz
|
||||||
available cpufreq governors: conservative, ondemand, userspace, powersave, performance, schedutil
|
available cpufreq governors: conservative ondemand userspace powersave performance schedutil
|
||||||
current policy: frequency should be within 800 MHz and 2.70 GHz.
|
current policy: frequency should be within 800 MHz and 2.70 GHz.
|
||||||
The governor "ondemand" may decide which speed to use
|
The governor "ondemand" may decide which speed to use
|
||||||
within this range.
|
within this range.
|
||||||
current CPU frequency is 1.84 GHz.
|
current CPU frequency: Unable to call hardware
|
||||||
|
current CPU frequency: 800 MHz (asserted by call to kernel)
|
||||||
|
boost state support:
|
||||||
|
Supported: yes
|
||||||
|
Active: yes
|
||||||
|
|
||||||
#### 设备 CPU - N6005 示例输出
|
#### 设备 CPU - N6005 示例输出
|
||||||
cpufrequtils 008: cpufreq-info (C) Dominik Brodowski 2004-2009
|
|
||||||
Report errors and bugs to cpufreq@vger.kernel.org, please.
|
|
||||||
analyzing CPU 0:
|
analyzing CPU 0:
|
||||||
driver: intel_pstate
|
driver: intel_pstate
|
||||||
CPUs which run at the same hardware frequency: 0
|
CPUs which run at the same hardware frequency: 0
|
||||||
CPUs which need to have their frequency coordinated by software: 0
|
CPUs which need to have their frequency coordinated by software: 0
|
||||||
maximum transition latency: 4294.55 ms.
|
maximum transition latency: Cannot determine or is not supported.
|
||||||
hardware limits: 800 MHz - 3.30 GHz
|
hardware limits: 800 MHz - 3.30 GHz
|
||||||
available cpufreq governors: performance, powersave
|
available cpufreq governors: performance powersave
|
||||||
current policy: frequency should be within 800 MHz and 3.30 GHz.
|
current policy: frequency should be within 800 MHz and 3.30 GHz.
|
||||||
The governor "performance" may decide which speed to use
|
The governor "performance" may decide which speed to use
|
||||||
within this range.
|
within this range.
|
||||||
current CPU frequency is 2.00 GHz.
|
current CPU frequency: Unable to call hardware
|
||||||
|
current CPU frequency: 2.00 GHz (asserted by call to kernel)
|
||||||
|
boost state support:
|
||||||
|
Supported: yes
|
||||||
|
Active: yes
|
||||||
```
|
```
|
||||||
|
|
||||||
这里面主要关注两个点:
|
这里面主要关注两个点:
|
||||||
@@ -159,30 +163,69 @@ performance powersave
|
|||||||
|
|
||||||
- CPU 驱动为 `intel_pstate` 时,推荐使用 `powersave` 调度器。
|
- CPU 驱动为 `intel_pstate` 时,推荐使用 `powersave` 调度器。
|
||||||
|
|
||||||
本文使用 `powersave` 调度器为演示,使用 `nano` 编辑器来编辑 `cpufrequtils` 的配置文件。
|
本文使用 `powersave` 调度器为演示,使用 `nano` 编辑器创建 `linux-cpupower` 的配置文件。
|
||||||
|
|
||||||
因为该配置文件很长,完整的配置文件可查看 [pve_cpufrequtils.conf](./src/pve_cpufrequtils.conf) 以便对比。
|
|
||||||
|
|
||||||
修改完成后,需要重启 PVE 服务器来使参数生效。
|
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
## 编辑 cpufrequtils 配置文件
|
## 创建 linux-cpupower 配置文件
|
||||||
$ nano /etc/init.d/cpufrequtils
|
$ nano /etc/default/cpupower
|
||||||
```
|
```
|
||||||
|
|
||||||
在配置文件中修改以下配置项,并保存。
|
在配置文件中修改以下配置项,并保存。
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
## cpufrequtils 配置项
|
# This configuration file is customized by fox
|
||||||
|
# Optimize system CPU governors
|
||||||
|
|
||||||
ENABLE="true"
|
CPUPOWER_START_OPTS="frequency-set -g powersave"
|
||||||
GOVERNOR="powersave" ## 修改本行的调度器为 powersave
|
CPUPOWER_STOP_OPTS="frequency-set -g performance"
|
||||||
MAX_SPEED="0"
|
|
||||||
MIN_SPEED="0"
|
|
||||||
|
|
||||||
```
|
```
|
||||||
|
|
||||||
PVE 服务器重启完成后需再次查看 CPU 调度器,检验配置文件是否生效。
|
使用 `nano` 编辑器创建 `linux-cpupower` 服务配置文件,以满足系统自动化设置需求。
|
||||||
|
|
||||||
|
```bash
|
||||||
|
## 创建 linux-cpupower 服务配置文件
|
||||||
|
$ nano /usr/lib/systemd/system/cpupower.service
|
||||||
|
```
|
||||||
|
|
||||||
|
在服务配置文件中修改以下配置项,并保存。
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# This configuration file is customized by fox,
|
||||||
|
# Optimize for cpupower systemd service.
|
||||||
|
|
||||||
|
[Unit]
|
||||||
|
Description=Apply cpupower configuration
|
||||||
|
ConditionVirtualization=!container
|
||||||
|
After=syslog.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=oneshot
|
||||||
|
EnvironmentFile=/etc/default/cpupower
|
||||||
|
ExecStart=/usr/bin/cpupower $CPUPOWER_START_OPTS
|
||||||
|
ExecStop=/usr/bin/cpupower $CPUPOWER_STOP_OPTS
|
||||||
|
RemainAfterExit=yes
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
|
由于修改了服务项,需要使用以下命令进行重载。
|
||||||
|
|
||||||
|
```bash
|
||||||
|
## 服务重载
|
||||||
|
$ systemctl daemon-reload
|
||||||
|
```
|
||||||
|
|
||||||
|
使用以下命令让 `linux-cpupower` 服务开机自启动。
|
||||||
|
|
||||||
|
```bash
|
||||||
|
## 设置 PPPoE 拨号服务开机自启
|
||||||
|
$ systemctl enable cpupower.service
|
||||||
|
```
|
||||||
|
|
||||||
|
修改完成后,需重启 PVE 服务器,并再次查看 CPU 调度器,检验配置文件是否生效。
|
||||||
|
|
||||||
这里提供两个额外命令,方便实时查看 CPU 当前频率和温度状况。
|
这里提供两个额外命令,方便实时查看 CPU 当前频率和温度状况。
|
||||||
|
|
||||||
@@ -198,7 +241,7 @@ $ watch -d sensors
|
|||||||
|
|
||||||
有时需要让 PVE 服务器周期性的定时重启,则可使用以下命令。
|
有时需要让 PVE 服务器周期性的定时重启,则可使用以下命令。
|
||||||
|
|
||||||
参数表示每月 `1` 、 `16` 号的 `5` 点 `0` 分执行系统重启命令。
|
参数表示每月 `1` 、 `16` 号的 `02:30` 执行系统重启命令。
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
## 查看系统定时任务
|
## 查看系统定时任务
|
||||||
@@ -213,7 +256,7 @@ $ crontab -e
|
|||||||
```bash
|
```bash
|
||||||
## 定时任务配置项
|
## 定时任务配置项
|
||||||
|
|
||||||
0 5 1,16 * * /usr/sbin/reboot
|
30 2 1,16 * * /usr/sbin/reboot
|
||||||
|
|
||||||
```
|
```
|
||||||
|
|
||||||
@@ -223,7 +266,7 @@ $ crontab -e
|
|||||||
|
|
||||||
配置系统自动更新之前,需检查系统当前定时器状态。
|
配置系统自动更新之前,需检查系统当前定时器状态。
|
||||||
|
|
||||||
后续将手动调整该定时器的时间,使其每 `5` 天凌晨 `02:00` 进行触发。
|
后续将手动调整该定时器的时间,使其每 `5` 天的 `01:30` 进行触发。
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
## 检查系统定时器
|
## 检查系统定时器
|
||||||
@@ -232,12 +275,11 @@ $ systemctl status apt-daily-upgrade.timer
|
|||||||
#### 系统定时器示例输出
|
#### 系统定时器示例输出
|
||||||
● apt-daily-upgrade.timer - Daily apt upgrade and clean activities
|
● apt-daily-upgrade.timer - Daily apt upgrade and clean activities
|
||||||
Loaded: loaded (/lib/systemd/system/apt-daily-upgrade.timer; enabled; preset: enabled)
|
Loaded: loaded (/lib/systemd/system/apt-daily-upgrade.timer; enabled; preset: enabled)
|
||||||
Active: active (waiting) since Fri 2023-06-23 18:55:58 CST; 1 day 18h ago
|
Active: active (waiting) since Tue 2023-08-01 13:01:19 CST; 27min ago
|
||||||
Until: Fri 2023-06-23 18:55:58 CST; 1 day 18h ago
|
Trigger: Wed 2023-08-02 06:14:50 CST; 16h left
|
||||||
Trigger: Mon 2023-06-26 06:26:25 CST; 16h left
|
|
||||||
Triggers: ● apt-daily-upgrade.service
|
Triggers: ● apt-daily-upgrade.service
|
||||||
|
|
||||||
Jun 23 18:55:58 node01 systemd[1]: Started apt-daily-upgrade.timer - Daily apt upgrade and clean activities.
|
Aug 01 13:01:19 node01 systemd[1]: Started apt-daily-upgrade.timer - Daily apt upgrade and clean activities.
|
||||||
```
|
```
|
||||||
|
|
||||||
### 4.2.配置更新策略
|
### 4.2.配置更新策略
|
||||||
@@ -305,7 +347,7 @@ $ nano /etc/apt/apt.conf.d/50unattended-upgrades
|
|||||||
|
|
||||||
- 自动重启:开启。
|
- 自动重启:开启。
|
||||||
|
|
||||||
- 自动重启时间:`05:00` 。
|
- 自动重启时间:`02:30` 。
|
||||||
|
|
||||||
因为该配置文件很长,完整的配置文件可查看 [pve_50unattended_upgrades.conf](./src/pve_50unattended_upgrades.conf) 以便对比。
|
因为该配置文件很长,完整的配置文件可查看 [pve_50unattended_upgrades.conf](./src/pve_50unattended_upgrades.conf) 以便对比。
|
||||||
|
|
||||||
@@ -334,7 +376,7 @@ Unattended-Upgrade::Remove-Unused-Dependencies "true";
|
|||||||
|
|
||||||
Unattended-Upgrade::Automatic-Reboot "true";
|
Unattended-Upgrade::Automatic-Reboot "true";
|
||||||
|
|
||||||
Unattended-Upgrade::Automatic-Reboot-Time "05:00";
|
Unattended-Upgrade::Automatic-Reboot-Time "02:30";
|
||||||
|
|
||||||
```
|
```
|
||||||
|
|
||||||
@@ -356,7 +398,7 @@ $ systemctl edit apt-daily-upgrade.timer
|
|||||||
|
|
||||||
[Timer]
|
[Timer]
|
||||||
OnCalendar=
|
OnCalendar=
|
||||||
OnCalendar=02:00
|
OnCalendar=01:30
|
||||||
RandomizedDelaySec=0
|
RandomizedDelaySec=0
|
||||||
|
|
||||||
```
|
```
|
||||||
@@ -375,14 +417,13 @@ $ systemctl status apt-daily-upgrade.timer
|
|||||||
Loaded: loaded (/lib/systemd/system/apt-daily-upgrade.timer; enabled; preset: enabled)
|
Loaded: loaded (/lib/systemd/system/apt-daily-upgrade.timer; enabled; preset: enabled)
|
||||||
Drop-In: /etc/systemd/system/apt-daily-upgrade.timer.d
|
Drop-In: /etc/systemd/system/apt-daily-upgrade.timer.d
|
||||||
└─override.conf
|
└─override.conf
|
||||||
Active: active (waiting) since Sun 2023-06-25 14:35:06 CST; 9s ago
|
Active: active (waiting) since Tue 2023-08-01 13:37:41 CST; 9s ago
|
||||||
Until: Sun 2023-06-25 14:35:06 CST; 9s ago
|
Trigger: Wed 2023-08-02 01:30:00 CST; 11h left
|
||||||
Trigger: Mon 2023-06-26 02:00:00 CST; 11h left
|
|
||||||
Triggers: ● apt-daily-upgrade.service
|
Triggers: ● apt-daily-upgrade.service
|
||||||
|
|
||||||
Jun 25 14:35:06 node01 systemd[1]: Stopped apt-daily-upgrade.timer - Daily apt upgrade and clean activities.
|
Aug 01 13:37:41 node01 systemd[1]: Stopped apt-daily-upgrade.timer - Daily apt upgrade and clean activities.
|
||||||
Jun 25 14:35:06 node01 systemd[1]: Stopping apt-daily-upgrade.timer - Daily apt upgrade and clean activities...
|
Aug 01 13:37:41 node01 systemd[1]: Stopping apt-daily-upgrade.timer - Daily apt upgrade and clean activities...
|
||||||
Jun 25 14:35:06 node01 systemd[1]: Started apt-daily-upgrade.timer - Daily apt upgrade and clean activities.
|
Aug 01 13:37:41 node01 systemd[1]: Started apt-daily-upgrade.timer - Daily apt upgrade and clean activities.
|
||||||
```
|
```
|
||||||
|
|
||||||
## 5.硬件直通
|
## 5.硬件直通
|
||||||
|
|||||||
@@ -215,7 +215,7 @@ Successfully imported disk as 'unused0:local-lvm:vm-1000-disk-0'
|
|||||||
|--|--|--|
|
|--|--|--|
|
||||||
|用户|`fox`|新系统的管理员账户|
|
|用户|`fox`|新系统的管理员账户|
|
||||||
|密码|`********`|使用强密码|
|
|密码|`********`|使用强密码|
|
||||||
|DNS域|`fox.local`|内网域名(可选)|
|
|DNS域|`fox.home.arpa`|内网域名(可选)|
|
||||||
|DNS服务器|`172.16.1.1`|本机 DNS 服务器|
|
|DNS服务器|`172.16.1.1`|本机 DNS 服务器|
|
||||||
|SSH公钥|`无`|使用秘钥登录服务器,暂不使用|
|
|SSH公钥|`无`|使用秘钥登录服务器,暂不使用|
|
||||||
|Upgrade packages|`是`|启动时更新软件包,保持默认即可|
|
|Upgrade packages|`是`|启动时更新软件包,保持默认即可|
|
||||||
@@ -243,7 +243,7 @@ Successfully imported disk as 'unused0:local-lvm:vm-1000-disk-0'
|
|||||||
|
|
||||||
|参数|值|说明|
|
|参数|值|说明|
|
||||||
|--|--|--|
|
|--|--|--|
|
||||||
|DNS域|`fox.local`|内网域名(可选)|
|
|DNS域|`fox.home.arpa`|内网域名(可选)|
|
||||||
|DNS服务器|`172.16.1.1 fdac::1`|本机 DNS 服务器|
|
|DNS服务器|`172.16.1.1 fdac::1`|本机 DNS 服务器|
|
||||||
|IP配置(net0)|`ip=172.16.1.250/24,gw=172.16.1.1,ip6=fdac::fa/64`|模板的 IP 设置|
|
|IP配置(net0)|`ip=172.16.1.250/24,gw=172.16.1.1,ip6=fdac::fa/64`|模板的 IP 设置|
|
||||||
|
|
||||||
|
|||||||
@@ -186,7 +186,7 @@ $ sudo nvim /etc/sysctl.d/99-sysctl.conf
|
|||||||
kernel.panic = 20
|
kernel.panic = 20
|
||||||
kernel.panic_on_oops = 1
|
kernel.panic_on_oops = 1
|
||||||
|
|
||||||
net.core.default_qdisc = fq_codel
|
net.core.default_qdisc = fq
|
||||||
net.ipv4.tcp_congestion_control = bbr
|
net.ipv4.tcp_congestion_control = bbr
|
||||||
|
|
||||||
# Other adjustable system parameters
|
# Other adjustable system parameters
|
||||||
@@ -354,7 +354,7 @@ Unattended-Upgrade::Remove-Unused-Dependencies "true";
|
|||||||
|
|
||||||
Unattended-Upgrade::Automatic-Reboot "true";
|
Unattended-Upgrade::Automatic-Reboot "true";
|
||||||
|
|
||||||
Unattended-Upgrade::Automatic-Reboot-Time "04:30";
|
Unattended-Upgrade::Automatic-Reboot-Time "03:00";
|
||||||
|
|
||||||
```
|
```
|
||||||
|
|
||||||
@@ -379,7 +379,7 @@ RandomizedDelaySec=0
|
|||||||
|
|
||||||
设置完成后,重启自动更新定时器并检查其状态,执行以下命令。
|
设置完成后,重启自动更新定时器并检查其状态,执行以下命令。
|
||||||
|
|
||||||
在输出结果中看到系统自动更新的触发时间为凌晨 `02:00` 则表示设置正确。
|
在输出结果中,看到系统自动更新的触发时间为 `02:00` 则表示设置正确。
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
## 重启触发器
|
## 重启触发器
|
||||||
@@ -406,7 +406,7 @@ $ sudo crontab -e
|
|||||||
```bash
|
```bash
|
||||||
## 定时任务配置项
|
## 定时任务配置项
|
||||||
|
|
||||||
0 6 8,24 * * /usr/sbin/reboot
|
30 4 8,24 * * /usr/sbin/reboot
|
||||||
|
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|||||||
@@ -171,7 +171,7 @@ $ sudo crontab -e
|
|||||||
```bash
|
```bash
|
||||||
## 定时任务配置项
|
## 定时任务配置项
|
||||||
|
|
||||||
0 5 * * * /usr/bin/snap restart adguard-home
|
30 4 * * * /usr/bin/snap restart adguard-home
|
||||||
|
|
||||||
```
|
```
|
||||||
|
|
||||||
@@ -196,10 +196,10 @@ $ mkdir -p /tmp/SmartDNS
|
|||||||
$ cd /tmp/SmartDNS
|
$ cd /tmp/SmartDNS
|
||||||
|
|
||||||
## 下载 SmartDNS 安装包
|
## 下载 SmartDNS 安装包
|
||||||
$ wget https://github.com/pymumu/smartdns/releases/download/Release42/smartdns.1.2023.05.07-1641.x86_64-linux-all.tar.gz
|
$ wget https://github.com/pymumu/smartdns/releases/download/Release43/smartdns.1.2023.08.11-1937.x86_64-linux-all.tar.gz
|
||||||
|
|
||||||
## 解压缩 SmartDNS 安装包
|
## 解压缩 SmartDNS 安装包
|
||||||
$ tar zxf smartdns.1.2023.05.07-1641.x86_64-linux-all.tar.gz
|
$ tar zxf smartdns.1.2023.08.11-1937.x86_64-linux-all.tar.gz
|
||||||
|
|
||||||
## 进入安装包目录
|
## 进入安装包目录
|
||||||
$ cd smartdns
|
$ cd smartdns
|
||||||
@@ -254,13 +254,23 @@ $ sudo nvim /etc/smartdns/smartdns.conf
|
|||||||
|
|
||||||
- 检查配置文件中关于本地域名及其上游 DNS 服务器相关配置,请根据实际情况进行调整。
|
- 检查配置文件中关于本地域名及其上游 DNS 服务器相关配置,请根据实际情况进行调整。
|
||||||
|
|
||||||
- 若仅需 `DoT` / `DoH` 作为上游 DNS 服务器,可移除 `server-tcp` 相关配置项。
|
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
# This configuration file is customized by fox,
|
# This configuration file is customized by fox,
|
||||||
# Optimize SmartDNS parameters for local DNS server.
|
# Optimize SmartDNS parameters for local DNS server.
|
||||||
|
#
|
||||||
|
# For use common DNS server as upstream DNS server,
|
||||||
|
# please modify 'server' parameter according to
|
||||||
|
# your network environment.
|
||||||
|
#
|
||||||
|
# eg:
|
||||||
|
# server 119.29.29.29
|
||||||
|
# server 223.5.5.5
|
||||||
|
# server 114.114.114.114
|
||||||
|
# server 2402:4e00::
|
||||||
|
# server 2400:3200::1
|
||||||
|
|
||||||
conf-file /etc/smartdns/anti-ad-smartdns.conf
|
conf-file /etc/smartdns/anti-ad-smartdns.conf
|
||||||
|
cache-file /tmp/smartdns.cache
|
||||||
|
|
||||||
bind [::]:53
|
bind [::]:53
|
||||||
bind-tcp [::]:53
|
bind-tcp [::]:53
|
||||||
@@ -275,33 +285,24 @@ speed-check-mode ping,tcp:80,tcp:443
|
|||||||
|
|
||||||
force-qtype-SOA 65
|
force-qtype-SOA 65
|
||||||
|
|
||||||
log-level warn
|
log-level notice
|
||||||
|
|
||||||
server 119.29.29.29 -group dnspod
|
server-tcp 119.29.29.29 -group dnspod -exclude-default-group
|
||||||
server 2402:4e00:: -group dnspod
|
server-tcp 2402:4e00:: -group dnspod -exclude-default-group
|
||||||
server 223.5.5.5 -group alidns
|
|
||||||
server 2400:3200::1 -group alidns
|
|
||||||
nameserver /doh.pub/dnspod
|
nameserver /doh.pub/dnspod
|
||||||
nameserver /dot.pub/dnspod
|
nameserver /dot.pub/dnspod
|
||||||
|
|
||||||
|
server-tcp 223.5.5.5 -group alidns -exclude-default-group
|
||||||
|
server-tcp 2400:3200::1 -group alidns -exclude-default-group
|
||||||
nameserver /dns.alidns.com/alidns
|
nameserver /dns.alidns.com/alidns
|
||||||
|
|
||||||
server 172.16.1.1 -group fox
|
server 172.16.1.1 -group intranet -exclude-default-group
|
||||||
server fdac::1 -group fox
|
server fdac::1 -group intranet -exclude-default-group
|
||||||
nameserver /fox.local/fox
|
nameserver /fox.home.arpa/intranet
|
||||||
domain-rules /fox.local/ -no-cache -speed-check-mode none
|
domain-rules /fox.home.arpa/ -speed-check-mode none -no-cache
|
||||||
|
|
||||||
server-tcp 119.29.29.29
|
server-tls dot.pub
|
||||||
server-tcp 223.5.5.5
|
server-tls dns.alidns.com
|
||||||
server-tcp 114.114.114.114
|
|
||||||
|
|
||||||
server-tcp 2402:4e00::
|
|
||||||
server-tcp 2400:3200::1
|
|
||||||
server-tcp 2400:3200:baba::1
|
|
||||||
|
|
||||||
server-tls 1.12.12.12 -spki-pin 5TIMjgyMhA0qmPdK+AM9LX6vNI/9EPBydh/ZXdfcYmI= -host-name dot.pub
|
|
||||||
server-tls 120.53.53.53 -spki-pin 5TIMjgyMhA0qmPdK+AM9LX6vNI/9EPBydh/ZXdfcYmI= -host-name dot.pub
|
|
||||||
server-tls 223.5.5.5 -spki-pin ZwR21gnCMTzsM6VWtnb/azufgYegWWuhE9reP5tamWU= -host-name dns.alidns.com
|
|
||||||
server-tls 223.6.6.6 -spki-pin ZwR21gnCMTzsM6VWtnb/azufgYegWWuhE9reP5tamWU= -host-name dns.alidns.com
|
|
||||||
|
|
||||||
server-https https://doh.pub/dns-query
|
server-https https://doh.pub/dns-query
|
||||||
server-https https://dns.alidns.com/dns-query
|
server-https https://dns.alidns.com/dns-query
|
||||||
|
|||||||
@@ -28,7 +28,7 @@
|
|||||||
|
|
||||||
**额外说明:**
|
**额外说明:**
|
||||||
|
|
||||||
1. 计划中的 `*-01,16 03:30` 表示每个月的 1、16 日凌晨 03:30 进行备份。
|
1. 计划中的 `*-01,16 03:30` 表示每月 `1` 、`16` 号的 `03:30` 执行备份任务。
|
||||||
|
|
||||||
2. `备份作业` 在正确配置收件人邮箱之前,并不能发出邮件。
|
2. `备份作业` 在正确配置收件人邮箱之前,并不能发出邮件。
|
||||||
|
|
||||||
|
|||||||
|
Before Width: | Height: | Size: 205 KiB After Width: | Height: | Size: 405 KiB |
|
Before Width: | Height: | Size: 272 KiB After Width: | Height: | Size: 162 KiB |
|
Before Width: | Height: | Size: 283 KiB After Width: | Height: | Size: 168 KiB |
|
Before Width: | Height: | Size: 339 KiB After Width: | Height: | Size: 236 KiB |
|
Before Width: | Height: | Size: 279 KiB After Width: | Height: | Size: 167 KiB |
|
Before Width: | Height: | Size: 269 KiB After Width: | Height: | Size: 161 KiB |
|
Before Width: | Height: | Size: 247 KiB After Width: | Height: | Size: 147 KiB |
|
Before Width: | Height: | Size: 216 KiB After Width: | Height: | Size: 121 KiB |
|
Before Width: | Height: | Size: 274 KiB After Width: | Height: | Size: 164 KiB |
|
Before Width: | Height: | Size: 131 KiB After Width: | Height: | Size: 314 KiB |
|
Before Width: | Height: | Size: 204 KiB After Width: | Height: | Size: 118 KiB |
|
Before Width: | Height: | Size: 169 KiB After Width: | Height: | Size: 127 KiB |
|
Before Width: | Height: | Size: 263 KiB After Width: | Height: | Size: 157 KiB |
|
Before Width: | Height: | Size: 413 KiB After Width: | Height: | Size: 401 KiB |
|
Before Width: | Height: | Size: 239 KiB After Width: | Height: | Size: 133 KiB |
|
Before Width: | Height: | Size: 221 KiB After Width: | Height: | Size: 122 KiB |
|
Before Width: | Height: | Size: 74 KiB After Width: | Height: | Size: 73 KiB |
|
Before Width: | Height: | Size: 76 KiB After Width: | Height: | Size: 78 KiB |
|
Before Width: | Height: | Size: 72 KiB After Width: | Height: | Size: 73 KiB |
|
Before Width: | Height: | Size: 101 KiB After Width: | Height: | Size: 99 KiB |
|
Before Width: | Height: | Size: 108 KiB After Width: | Height: | Size: 107 KiB |
|
Before Width: | Height: | Size: 86 KiB After Width: | Height: | Size: 86 KiB |
|
Before Width: | Height: | Size: 88 KiB After Width: | Height: | Size: 88 KiB |
@@ -173,5 +173,5 @@ Unattended-Upgrade::Remove-Unused-Dependencies "true";
|
|||||||
|
|
||||||
Unattended-Upgrade::Automatic-Reboot "true";
|
Unattended-Upgrade::Automatic-Reboot "true";
|
||||||
|
|
||||||
Unattended-Upgrade::Automatic-Reboot-Time "04:30";
|
Unattended-Upgrade::Automatic-Reboot-Time "03:00";
|
||||||
|
|
||||||
|
|||||||
@@ -4,7 +4,7 @@
|
|||||||
kernel.panic = 20
|
kernel.panic = 20
|
||||||
kernel.panic_on_oops = 1
|
kernel.panic_on_oops = 1
|
||||||
|
|
||||||
net.core.default_qdisc = fq_codel
|
net.core.default_qdisc = fq
|
||||||
net.ipv4.tcp_congestion_control = bbr
|
net.ipv4.tcp_congestion_control = bbr
|
||||||
|
|
||||||
# Other adjustable system parameters
|
# Other adjustable system parameters
|
||||||
|
|||||||
@@ -1,7 +1,19 @@
|
|||||||
# This configuration file is customized by fox,
|
# This configuration file is customized by fox,
|
||||||
# Optimize SmartDNS parameters for local DNS server.
|
# Optimize SmartDNS parameters for local DNS server.
|
||||||
|
#
|
||||||
|
# For use common DNS server as upstream DNS server,
|
||||||
|
# please modify 'server' parameter according to
|
||||||
|
# your network environment.
|
||||||
|
#
|
||||||
|
# eg:
|
||||||
|
# server 119.29.29.29
|
||||||
|
# server 223.5.5.5
|
||||||
|
# server 114.114.114.114
|
||||||
|
# server 2402:4e00::
|
||||||
|
# server 2400:3200::1
|
||||||
|
|
||||||
conf-file /etc/smartdns/anti-ad-smartdns.conf
|
conf-file /etc/smartdns/anti-ad-smartdns.conf
|
||||||
|
cache-file /tmp/smartdns.cache
|
||||||
|
|
||||||
bind [::]:53
|
bind [::]:53
|
||||||
bind-tcp [::]:53
|
bind-tcp [::]:53
|
||||||
@@ -16,33 +28,24 @@ speed-check-mode ping,tcp:80,tcp:443
|
|||||||
|
|
||||||
force-qtype-SOA 65
|
force-qtype-SOA 65
|
||||||
|
|
||||||
log-level warn
|
log-level notice
|
||||||
|
|
||||||
server 119.29.29.29 -group dnspod
|
server-tcp 119.29.29.29 -group dnspod -exclude-default-group
|
||||||
server 2402:4e00:: -group dnspod
|
server-tcp 2402:4e00:: -group dnspod -exclude-default-group
|
||||||
server 223.5.5.5 -group alidns
|
|
||||||
server 2400:3200::1 -group alidns
|
|
||||||
nameserver /doh.pub/dnspod
|
nameserver /doh.pub/dnspod
|
||||||
nameserver /dot.pub/dnspod
|
nameserver /dot.pub/dnspod
|
||||||
|
|
||||||
|
server-tcp 223.5.5.5 -group alidns -exclude-default-group
|
||||||
|
server-tcp 2400:3200::1 -group alidns -exclude-default-group
|
||||||
nameserver /dns.alidns.com/alidns
|
nameserver /dns.alidns.com/alidns
|
||||||
|
|
||||||
server 172.16.1.1 -group fox
|
server 172.16.1.1 -group intranet -exclude-default-group
|
||||||
server fdac::1 -group fox
|
server fdac::1 -group intranet -exclude-default-group
|
||||||
nameserver /fox.local/fox
|
nameserver /fox.home.arpa/intranet
|
||||||
domain-rules /fox.local/ -no-cache -speed-check-mode none
|
domain-rules /fox.home.arpa/ -speed-check-mode none -no-cache
|
||||||
|
|
||||||
server-tcp 119.29.29.29
|
server-tls dot.pub
|
||||||
server-tcp 223.5.5.5
|
server-tls dns.alidns.com
|
||||||
server-tcp 114.114.114.114
|
|
||||||
|
|
||||||
server-tcp 2402:4e00::
|
|
||||||
server-tcp 2400:3200::1
|
|
||||||
server-tcp 2400:3200:baba::1
|
|
||||||
|
|
||||||
server-tls 1.12.12.12 -spki-pin 5TIMjgyMhA0qmPdK+AM9LX6vNI/9EPBydh/ZXdfcYmI= -host-name dot.pub
|
|
||||||
server-tls 120.53.53.53 -spki-pin 5TIMjgyMhA0qmPdK+AM9LX6vNI/9EPBydh/ZXdfcYmI= -host-name dot.pub
|
|
||||||
server-tls 223.5.5.5 -spki-pin ZwR21gnCMTzsM6VWtnb/azufgYegWWuhE9reP5tamWU= -host-name dns.alidns.com
|
|
||||||
server-tls 223.6.6.6 -spki-pin ZwR21gnCMTzsM6VWtnb/azufgYegWWuhE9reP5tamWU= -host-name dns.alidns.com
|
|
||||||
|
|
||||||
server-https https://doh.pub/dns-query
|
server-https https://doh.pub/dns-query
|
||||||
server-https https://dns.alidns.com/dns-query
|
server-https https://dns.alidns.com/dns-query
|
||||||
|
|||||||
@@ -175,5 +175,5 @@ Unattended-Upgrade::Remove-Unused-Dependencies "true";
|
|||||||
|
|
||||||
Unattended-Upgrade::Automatic-Reboot "true";
|
Unattended-Upgrade::Automatic-Reboot "true";
|
||||||
|
|
||||||
Unattended-Upgrade::Automatic-Reboot-Time "05:00";
|
Unattended-Upgrade::Automatic-Reboot-Time "02:30";
|
||||||
|
|
||||||
|
|||||||
@@ -3,7 +3,7 @@
|
|||||||
|
|
||||||
[Timer]
|
[Timer]
|
||||||
OnCalendar=
|
OnCalendar=
|
||||||
OnCalendar=02:00
|
OnCalendar=01:30
|
||||||
RandomizedDelaySec=0
|
RandomizedDelaySec=0
|
||||||
|
|
||||||
### Lines below this comment will be discarded
|
### Lines below this comment will be discarded
|
||||||
|
|||||||
@@ -0,0 +1,6 @@
|
|||||||
|
# This configuration file is customized by fox
|
||||||
|
# Optimize system CPU governors
|
||||||
|
|
||||||
|
CPUPOWER_START_OPTS="frequency-set -g powersave"
|
||||||
|
CPUPOWER_STOP_OPTS="frequency-set -g performance"
|
||||||
|
|
||||||
@@ -0,0 +1,18 @@
|
|||||||
|
# This configuration file is customized by fox,
|
||||||
|
# Optimize for cpupower systemd service.
|
||||||
|
|
||||||
|
[Unit]
|
||||||
|
Description=Apply cpupower configuration
|
||||||
|
ConditionVirtualization=!container
|
||||||
|
After=syslog.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=oneshot
|
||||||
|
EnvironmentFile=/etc/default/cpupower
|
||||||
|
ExecStart=/usr/bin/cpupower $CPUPOWER_START_OPTS
|
||||||
|
ExecStop=/usr/bin/cpupower $CPUPOWER_STOP_OPTS
|
||||||
|
RemainAfterExit=yes
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
|
||||||