http://blok.tydyt.cz/api.php?action=feedcontributions&feedformat=atom&user=Filip Poznámkový blok - Příspěvky uživatele [cs] 2026-04-07T14:29:35Z Příspěvky uživatele MediaWiki 1.28.0 http://blok.tydyt.cz/index.php?title=Docker&diff=2706 Docker 2025-07-21T13:41:38Z <p>Filip: </p> <hr /> <div>== Instalace ==<br /> === Nastavení depositáře ===<br /> sudo apt update<br /> sudo apt install ca-certificates curl gnupg<br /> <br /> sudo install -m 0755 -d /etc/apt/keyrings<br /> curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg<br /> sudo chmod a+r /etc/apt/keyrings/docker.gpg<br /> <br /> echo \<br /> &quot;deb [arch=&quot;$(dpkg --print-architecture)&quot; signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \<br /> &quot;$(. /etc/os-release &amp;&amp; echo &quot;$VERSION_CODENAME&quot;)&quot; stable&quot; | \<br /> sudo tee /etc/apt/sources.list.d/docker.list &gt; /dev/null<br /> sudo apt update<br /> <br /> === Instalace ===<br /> sudo apt update<br /> sudo apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin<br /> <br /> * https://docs.docker.com/engine/install/debian/<br /> == Vytvoření self-signed certifikátu ==<br /> Doporučuji si nachystat prostředí<br /> mkdir /etc/ssl/certs/docker<br /> chmod -v 0444 /etc/ssl/certs/docker<br /> cd /etc/ssl/certs/docker<br /> <br /> Vytváření server certifikát na 10 let (Měnit proměný který obsahují $)<br /> openssl genrsa -aes256 -out ca-key.pem 4096<br /> openssl req -new -x509 -days 3650 -key ca-key.pem -sha256 -out ca.pem<br /> <br /> openssl genrsa -out server-key.pem 4096<br /> openssl req -subj &quot;/CN=$LOCALHOST_DOMAIN&quot; -sha256 -new -key server-key.pem -out server.csr<br /> <br /> echo subjectAltName = DNS:$LOCALHOST_DOMAIN,DNS:$HOST_DOMAIN,IP:127.0.0.1 &gt;&gt; extfile.cnf<br /> echo extendedKeyUsage = serverAuth &gt;&gt; extfile.cnf<br /> openssl x509 -req -days 365 -sha256 -in server.csr -CA ca.pem -CAkey ca-key.pem -CAcreateserial -out server-cert.pem -extfile extfile.cnf<br /> <br /> Vytváření client certifikát na 10 let<br /> openssl genrsa -out key.pem 4096<br /> openssl req -subj '/CN=client' -new -key key.pem -out client.csr<br /> echo extendedKeyUsage = clientAuth &gt; extfile-client.cnf<br /> openssl x509 -req -days 3650 -sha256 -in client.csr -CA ca.pem -CAkey ca-key.pem -CAcreateserial -out cert.pem -extfile extfile-client.cnf<br /> <br /> Změna práv pro certifikáty a pročištění<br /> chmod -v 0400 ca-key.pem key.pem server-key.pem<br /> chmod -v 0444 ca.pem server-cert.pem cert.pem<br /> <br /> rm -v client.csr server.csr extfile.cnf extfile-client.cnf<br /> <br /> * https://medium.com/trabe/using-docker-engine-api-securely-584e0882158e<br /> * https://docs.docker.com/engine/security/protect-access/<br /> <br /> == Otevření socketu ven ==<br /> === Override config ===<br /> sudo mkdir /etc/systemd/system/docker.service.d<br /> nano /etc/systemd/system/docker.service.d/override.conf<br /> <br /> Nastavení pro nešifrovaný otevření socketu, nedoporučeno<br /> [Service]<br /> ExecStart=<br /> ExecStart=/usr/bin/dockerd -H fd:// -H tcp://IP_ADRESA:2735 --ipv6=false --tls=false<br /> <br /> Nastavení pro šifrovaný otevření socketu, doporučeno<br /> [Service]<br /> ExecStart=<br /> ExecStart=/usr/bin/dockerd -H fd:// -H tcp:///IP_ADRESA:2376 --ipv6=false --tlsverify --tlscacert=/CESTA/ca.pem --tlscert=/CESTA/server-cert.pem --tlskey=/CESTA/server-key.pem<br /> <br /> * https://docs.docker.com/config/daemon/remote-access/<br /> * https://stackoverflow.com/questions/57996938/could-not-edit-systemd-service-file<br /> <br /> === Restartování ===<br /> sudo systemctl daemon-reload<br /> sudo systemctl restart docker.service<br /> <br /> === Povolení ufw ===<br /> ufw allow 2375/tcp<br /> nebo<br /> ufw allow 2376/tcp<br /> <br /> <br /> == Číštění ==<br /> Zjištění kolik a co zabírá místo na disku<br /> docker system df<br /> docker system df --verbose<br /> Zjištění kolik místa zabírají logy<br /> &lt;nowiki&gt;sudo du -ch $(docker inspect --format='{{.LogPath}}' $(docker ps -qa)) | sort -h&lt;/nowiki&gt;<br /> &lt;nowiki&gt;sudo du -ch $(docker inspect --format='{{.LogPath}}' $(docker ps -qa)) | sort -h | sed 's/\/var\/lib\/docker\/containers\///' | awk '{if ($1 != &quot;total&quot;) {split($NF, arr, &quot;/&quot;); id = arr[1]; print $1 &quot; &quot; $2 &quot; &quot; id} else {print $1 &quot; &quot; $2 &quot; &quot; $1}}' | while read size unit id; do if [ &quot;$size&quot; != &quot;total&quot; ]; then name=$(docker ps --format &quot;{{.Names}}&quot; --filter id=$id); echo &quot;$size $unit $name&quot;; else echo &quot;$size $unit $id&quot;; fi; done&lt;/nowiki&gt;<br /> Mazání jednotlivých věcí<br /> docker container prune - Smaže všechny zastavený kontejnéry<br /> docker image prune - Smaže nepoužíváné images, který nemají tag<br /> docker image prune -a - Smaže všechny nepoužívané images, který nemají kontejner<br /> docker volume prune - Smaže nepoužívané volume<br /> docker builder prune - Vymaže build cache Removes unused build cache.<br /> docker system prune - Vymaže vše zmíněné (stopped containers, unused networks, dangling images, build cache)</div> Filip http://blok.tydyt.cz/index.php?title=Docker&diff=2705 Docker 2025-07-21T13:40:55Z <p>Filip: </p> <hr /> <div>== Instalace ==<br /> === Nastavení depositáře ===<br /> sudo apt update<br /> sudo apt install ca-certificates curl gnupg<br /> <br /> sudo install -m 0755 -d /etc/apt/keyrings<br /> curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg<br /> sudo chmod a+r /etc/apt/keyrings/docker.gpg<br /> <br /> echo \<br /> &quot;deb [arch=&quot;$(dpkg --print-architecture)&quot; signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \<br /> &quot;$(. /etc/os-release &amp;&amp; echo &quot;$VERSION_CODENAME&quot;)&quot; stable&quot; | \<br /> sudo tee /etc/apt/sources.list.d/docker.list &gt; /dev/null<br /> sudo apt update<br /> <br /> === Instalace ===<br /> sudo apt update<br /> sudo apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin<br /> <br /> * https://docs.docker.com/engine/install/debian/<br /> == Vytvoření self-signed certifikátu ==<br /> Doporučuji si nachystat prostředí<br /> mkdir /etc/ssl/certs/docker<br /> chmod -v 0444 /etc/ssl/certs/docker<br /> cd /etc/ssl/certs/docker<br /> <br /> Vytváření server certifikát na 10 let (Měnit proměný který obsahují $)<br /> openssl genrsa -aes256 -out ca-key.pem 4096<br /> openssl req -new -x509 -days 3650 -key ca-key.pem -sha256 -out ca.pem<br /> <br /> openssl genrsa -out server-key.pem 4096<br /> openssl req -subj &quot;/CN=$LOCALHOST_DOMAIN&quot; -sha256 -new -key server-key.pem -out server.csr<br /> <br /> echo subjectAltName = DNS:$LOCALHOST_DOMAIN,DNS:$HOST_DOMAIN,IP:127.0.0.1 &gt;&gt; extfile.cnf<br /> echo extendedKeyUsage = serverAuth &gt;&gt; extfile.cnf<br /> openssl x509 -req -days 365 -sha256 -in server.csr -CA ca.pem -CAkey ca-key.pem -CAcreateserial -out server-cert.pem -extfile extfile.cnf<br /> <br /> Vytváření client certifikát na 10 let<br /> openssl genrsa -out key.pem 4096<br /> openssl req -subj '/CN=client' -new -key key.pem -out client.csr<br /> echo extendedKeyUsage = clientAuth &gt; extfile-client.cnf<br /> openssl x509 -req -days 3650 -sha256 -in client.csr -CA ca.pem -CAkey ca-key.pem -CAcreateserial -out cert.pem -extfile extfile-client.cnf<br /> <br /> Změna práv pro certifikáty a pročištění<br /> chmod -v 0400 ca-key.pem key.pem server-key.pem<br /> chmod -v 0444 ca.pem server-cert.pem cert.pem<br /> <br /> rm -v client.csr server.csr extfile.cnf extfile-client.cnf<br /> <br /> * https://medium.com/trabe/using-docker-engine-api-securely-584e0882158e<br /> * https://docs.docker.com/engine/security/protect-access/<br /> <br /> == Otevření socketu ven ==<br /> === Override config ===<br /> sudo mkdir /etc/systemd/system/docker.service.d<br /> nano /etc/systemd/system/docker.service.d/override.conf<br /> <br /> Nastavení pro nešifrovaný otevření socketu, nedoporučeno<br /> [Service]<br /> ExecStart=<br /> ExecStart=/usr/bin/dockerd -H fd:// -H tcp://IP_ADRESA:2735 --ipv6=false --tls=false<br /> <br /> Nastavení pro šifrovaný otevření socketu, doporučeno<br /> [Service]<br /> ExecStart=<br /> ExecStart=/usr/bin/dockerd -H fd:// -H tcp:///IP_ADRESA:2376 --ipv6=false --tlsverify --tlscacert=/CESTA/ca.pem --tlscert=/CESTA/server-cert.pem --tlskey=/CESTA/server-key.pem<br /> <br /> * https://docs.docker.com/config/daemon/remote-access/<br /> * https://stackoverflow.com/questions/57996938/could-not-edit-systemd-service-file<br /> <br /> === Restartování ===<br /> sudo systemctl daemon-reload<br /> sudo systemctl restart docker.service<br /> <br /> === Povolení ufw ===<br /> ufw allow 2375/tcp<br /> nebo<br /> ufw allow 2376/tcp<br /> <br /> <br /> == Číštění ==<br /> <br /> === Povolení ufw ===<br /> Zjištění kolik a co zabírá místo na disku<br /> docker system df<br /> docker system df --verbose<br /> Zjištění kolik místa zabírají logy<br /> &lt;nowiki&gt;sudo du -ch $(docker inspect --format='{{.LogPath}}' $(docker ps -qa)) | sort -h&lt;/nowiki&gt;<br /> &lt;nowiki&gt;sudo du -ch $(docker inspect --format='{{.LogPath}}' $(docker ps -qa)) | sort -h | sed 's/\/var\/lib\/docker\/containers\///' | awk '{if ($1 != &quot;total&quot;) {split($NF, arr, &quot;/&quot;); id = arr[1]; print $1 &quot; &quot; $2 &quot; &quot; id} else {print $1 &quot; &quot; $2 &quot; &quot; $1}}' | while read size unit id; do if [ &quot;$size&quot; != &quot;total&quot; ]; then name=$(docker ps --format &quot;{{.Names}}&quot; --filter id=$id); echo &quot;$size $unit $name&quot;; else echo &quot;$size $unit $id&quot;; fi; done&lt;/nowiki&gt;<br /> Mazání jednotlivých věcí<br /> docker container prune - Smaže všechny zastavený kontejnéry<br /> docker image prune - Smaže nepoužíváné images, který nemají tag<br /> docker image prune -a - Smaže všechny nepoužívané images, který nemají kontejner<br /> docker volume prune - Smaže nepoužívané volume<br /> docker builder prune - Vymaže build cache Removes unused build cache.<br /> docker system prune - Vymaže vše zmíněné (stopped containers, unused networks, dangling images, build cache)</div> Filip http://blok.tydyt.cz/index.php?title=MariaDB&diff=2530 MariaDB 2024-10-04T20:38:28Z <p>Filip: </p> <hr /> <div>== Základní příkazy pro práci s MariaDB (MySQL) ==<br /> Připojení na MariaDB v docker<br /> docker exec -ti mariadb mariadb -u root -p<br /> <br /> === Database ===<br /> === Zobrazení Database ===<br /> SHOW DATABASES;<br /> <br /> ==== Vytvoření Database ====<br /> CREATE DATABASE new_database;<br /> FlUSH PRIVILEGES;<br /> <br /> ==== Připojení na Database ====<br /> USE new_database;<br /> <br /> ==== Smazaní Database ====<br /> DROP DATABASE new_database;<br /> FlUSH PRIVILEGES;<br /> <br /> === Uživatel ===<br /> ==== Zobrazení uživatelů ====<br /> SELECT User, Host, authentication_string FROM mysql.user;<br /> <br /> ==== Vytvoření uživatele ====<br /> Adresa určuje odkud se může někdo přihlásit na uživatele, znak '''%''' určuje pro všechny<br /> CREATE USER 'user'@'address' IDENTIFIED BY 'password'; <br /> FlUSH PRIVILEGES;<br /> <br /> ==== Změna hesla ====<br /> ALTER USER 'user'@'address' IDENTIFIED BY 'MyNewPass';<br /> FLUSH PRIVILEGES;<br /> <br /> ==== Změna práv na tabulku/y ====<br /> Jde použít znak '''*''' pro povolení všecho, klidně i všech tabulek<br /> GRANT ALL PRIVILEGES ON new_database.table TO 'user'@'address';<br /> <br /> ==== Smazání uživatele ====<br /> DELETE FROM mysql.user WHERE user='&lt;user&gt;' AND host = 'adrress'<br /> FlUSH PRIVILEGES;<br /> <br /> === Ostatní ===<br /> ==== Promazání binlogu ====<br /> '''x''' nahradit nenovější verzí<br /> PURGE BINARY LOGS TO 'binlog.xxxxxx';<br /> FlUSH PRIVILEGES;<br /> <br /> === Pár příkladů ===<br /> ==== Vytvoření uživatele pro všechny adresy ====<br /> CREATE USER 'filip'@'%' IDENTIFIED BY 'heslo';<br /> FlUSH PRIVILEGES;<br /> <br /> ==== Přidání všech práv uživateli ====<br /> GRANT ALL PRIVILEGES ON *.* TO 'filip'@'%';<br /> FlUSH PRIVILEGES;</div> Filip http://blok.tydyt.cz/index.php?title=MariaDB&diff=2529 MariaDB 2024-10-03T11:17:11Z <p>Filip: Založena nová stránka s textem „== Základní příkazy pro práci s MariaDB (MySQL) == Připojení na MariaDB v docker docker exec -ti mariadb mariadb -u root -p === Database === === Z…“</p> <hr /> <div>== Základní příkazy pro práci s MariaDB (MySQL) ==<br /> Připojení na MariaDB v docker<br /> docker exec -ti mariadb mariadb -u root -p<br /> <br /> === Database ===<br /> === Zobrazení Database ===<br /> SHOW DATABASES;<br /> <br /> ==== Vytvoření Database ====<br /> CREATE DATABASE new_database;<br /> FlUSH PRIVILEGES;<br /> <br /> ==== Připojení na Database ====<br /> USE new_database;<br /> <br /> ==== Smazaní Database ====<br /> DROP DATABASE new_database;<br /> FlUSH PRIVILEGES;<br /> <br /> === Uživatel ===<br /> ==== Zobrazení uživatelů ====<br /> SELECT User, Host, authentication_string FROM mysql.user;<br /> <br /> ==== Vytvoření uživatele ===<br /> Adresa určuje odkud se může někdo přihlásit na uživatele, znak '''%''' určuje pro všechny<br /> CREATE USER 'user'@'address' IDENTIFIED BY 'password'; <br /> FlUSH PRIVILEGES;<br /> <br /> ==== Změna hesla ====<br /> ALTER USER 'user'@'address' IDENTIFIED BY 'MyNewPass';<br /> FLUSH PRIVILEGES;<br /> <br /> ==== Změna práv na tabulku/y ====<br /> Jde použít znak '''*''' pro povolení všecho, klidně i všech tabulek<br /> GRANT ALL PRIVILEGES ON new_database.table TO 'user'@'address';<br /> <br /> ==== Smazání uživatele ====<br /> DELETE FROM mysql.user WHERE user='&lt;user&gt;' AND host = 'adrress'<br /> FlUSH PRIVILEGES;<br /> <br /> === Pár příkladů ===<br /> ==== Vytvoření uživatele pro všechny adresy ====<br /> CREATE USER 'filip'@'%' IDENTIFIED BY 'heslo';<br /> FlUSH PRIVILEGES;<br /> <br /> ==== Přidání všech práv uživateli ====<br /> GRANT ALL PRIVILEGES ON *.* TO 'filip'@'%';<br /> FlUSH PRIVILEGES;</div> Filip http://blok.tydyt.cz/index.php?title=Filip&diff=2528 Filip 2024-10-03T11:01:09Z <p>Filip: /* Rozložení */</p> <hr /> <div>== Rozložení ==<br /> * [[ Linux ]]<br /> :- Basic stuff (Užitečný balíčky)<br /> :- Swap &amp; pip3<br /> :- ZSH, Neovim/NvChad, NNN<br /> * [[ MariaDB ]]<br /> :- Basic commands<br /> * [[ Docker ]]<br /> :- Instalace<br /> :- Konfigurace socketu<br /> * [[ Nomad ]]<br /> :- Instalace<br /> :- Konfigurace HCL souboru<br /> * [[ Kubernetes ]] | [[ Kubernetes | K3S ]]<br /> :- Instalace<br /> :- Dashboard<br /> :- Konfigurace<br /> :- [[ WebServer | Trafiek a Ngninx]]</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=2520 Linux 2024-09-21T12:52:00Z <p>Filip: /* NeoVim/NvChad */</p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools psmisc<br /> <br /> === Vypnutí IPv6 ===<br /> Editace systémému pro vypnutí IPv6<br /> sudo nano /etc/sysctl.conf<br /> <br /> net.ipv6.conf.all.disable_ipv6 = 1<br /> net.ipv6.conf.default.disable_ipv6 = 1<br /> net.ipv6.conf.lo.disable_ipv6 = 1<br /> <br /> Vypnutí IPv6 pro ssh<br /> sudo nano /etc/ssh/sshd_config<br /> <br /> AddressFamily inet<br /> <br /> Vypnutí IPv6 pro ufw<br /> sudo nano /etc/default/ufw<br /> <br /> IPV6=no<br /> <br /> * https://www.techrepublic.com/article/how-to-disable-ipv6-on-linux/<br /> * https://superuser.com/questions/326798/unable-to-close-sshd-on-ipv6-tcp-port<br /> * https://www.lightnetics.com/topic/18604/how-do-i-enable-or-disable-ipv6-on-ubuntu-ufw-netfilter-firewall<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> sudo ufw allow ssh<br /> sudo ufw enable<br /> <br /> Zapnutí clamav-deamon<br /> sudo systemctl enable clamav-daemon<br /> sudo systemctl start clamav-daemon<br /> <br /> Zapnutí clamav-freshclam<br /> sudo systemctl enable clamav-freshclam.service<br /> sudo systemctl start clamav-freshclam.service<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix iftop<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Swap ==<br /> === Vypnutí swap ===<br /> Identifikace swap oddílu<br /> cat /proc/swaps<br /> Vypnutí swap<br /> sudo swapoff -a<br /> Odkaz na smazání swap oddílu <br /> sudo nano /etc/fstab<br /> === Zapnutí swap ===<br /> Zapnutí swap<br /> sudo swapon -a<br /> <br /> == Guest tool pro Xen server ==<br /> Nainstalování xen guest tool pro linux systém<br /> curl -sfL https://github.com/clazzor/Xen-guest-autoinstall/releases/download/latest/autoinstall.sh | bash -<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == PS - Process Status == <br /> Process state codes<br /> D uninterruptible sleep (usually IO)<br /> I Idle kernel thread<br /> R running or runnable (on run queue)<br /> S interruptible sleep (waiting for an event to complete)<br /> T stopped by job control signal<br /> t stopped by debugger during the tracing<br /> W paging (not valid since the 2.6.xx kernel)<br /> X dead (should never be seen)<br /> Z defunct (&quot;zombie&quot;) process, terminated but not reaped by its parent<br /> <br /> Věci navíc ke kódům<br /> &lt; high-priority (not nice to other users)<br /> N low-priority (nice to other users)<br /> L has pages locked into memory (for real-time and custom IO)<br /> s is a session leader<br /> l is multi-threaded (using CLONE_THREAD, like NPTL pthreads do)<br /> + is in the foreground process group<br /> <br /> * https://askubuntu.com/questions/360252/what-do-the-stat-column-values-in-ps-mean<br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli novém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> Stáhnutí a nainstalování NeoVimu do /usr/bin<br /> sudo curl -Lo /tmp/nvim-linux64.tar.gz https://github.com/neovim/neovim/releases/latest/download/nvim-linux64.tar.gz<br /> sudo tar -C /opt -xzf /tmp/nvim-linux64.tar.gz<br /> sudo rm /tmp/nvim-linux64.tar.gz<br /> sudo ln -s /opt/nvim-linux64/bin/nvim /usr/bin/nvim<br /> <br /> Nainstalování balíčku pro kompilaci programovací jazyků, potřebuje NvChad<br /> sudo apt update -y<br /> sudo apt install build-essential -y<br /> <br /> Nainstalovíní pluginu NvChad<br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> Poté je potřeba doinstalovat zbytek pluginu pomocí příkazu v NeoVimu<br /> ESC -&gt; SHIFT+: -&gt; MasonInstallAll<br /> <br /> Dále je potřeba pro zobrazení ikon doinstalovat nerd font https://www.nerdfonts.com/font-downloads doporučeno '''CaskaydiaCove Nerd Font''' &lt;br /&gt;<br /> A také nastavit správně zobrazení barev, více zde https://gist.github.com/andersevenrud/015e61af2fd264371032763d4ed965b6<br /> <br /> * https://github.com/neovim/neovim/blob/master/INSTALL.md<br /> * https://nvchad.com/docs/features<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=2519 Linux 2024-09-21T12:48:13Z <p>Filip: /* NeoVim/NvChad */</p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools psmisc<br /> <br /> === Vypnutí IPv6 ===<br /> Editace systémému pro vypnutí IPv6<br /> sudo nano /etc/sysctl.conf<br /> <br /> net.ipv6.conf.all.disable_ipv6 = 1<br /> net.ipv6.conf.default.disable_ipv6 = 1<br /> net.ipv6.conf.lo.disable_ipv6 = 1<br /> <br /> Vypnutí IPv6 pro ssh<br /> sudo nano /etc/ssh/sshd_config<br /> <br /> AddressFamily inet<br /> <br /> Vypnutí IPv6 pro ufw<br /> sudo nano /etc/default/ufw<br /> <br /> IPV6=no<br /> <br /> * https://www.techrepublic.com/article/how-to-disable-ipv6-on-linux/<br /> * https://superuser.com/questions/326798/unable-to-close-sshd-on-ipv6-tcp-port<br /> * https://www.lightnetics.com/topic/18604/how-do-i-enable-or-disable-ipv6-on-ubuntu-ufw-netfilter-firewall<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> sudo ufw allow ssh<br /> sudo ufw enable<br /> <br /> Zapnutí clamav-deamon<br /> sudo systemctl enable clamav-daemon<br /> sudo systemctl start clamav-daemon<br /> <br /> Zapnutí clamav-freshclam<br /> sudo systemctl enable clamav-freshclam.service<br /> sudo systemctl start clamav-freshclam.service<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix iftop<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Swap ==<br /> === Vypnutí swap ===<br /> Identifikace swap oddílu<br /> cat /proc/swaps<br /> Vypnutí swap<br /> sudo swapoff -a<br /> Odkaz na smazání swap oddílu <br /> sudo nano /etc/fstab<br /> === Zapnutí swap ===<br /> Zapnutí swap<br /> sudo swapon -a<br /> <br /> == Guest tool pro Xen server ==<br /> Nainstalování xen guest tool pro linux systém<br /> curl -sfL https://github.com/clazzor/Xen-guest-autoinstall/releases/download/latest/autoinstall.sh | bash -<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == PS - Process Status == <br /> Process state codes<br /> D uninterruptible sleep (usually IO)<br /> I Idle kernel thread<br /> R running or runnable (on run queue)<br /> S interruptible sleep (waiting for an event to complete)<br /> T stopped by job control signal<br /> t stopped by debugger during the tracing<br /> W paging (not valid since the 2.6.xx kernel)<br /> X dead (should never be seen)<br /> Z defunct (&quot;zombie&quot;) process, terminated but not reaped by its parent<br /> <br /> Věci navíc ke kódům<br /> &lt; high-priority (not nice to other users)<br /> N low-priority (nice to other users)<br /> L has pages locked into memory (for real-time and custom IO)<br /> s is a session leader<br /> l is multi-threaded (using CLONE_THREAD, like NPTL pthreads do)<br /> + is in the foreground process group<br /> <br /> * https://askubuntu.com/questions/360252/what-do-the-stat-column-values-in-ps-mean<br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli novém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> Stáhnutí a nainstalování NeoVimu do /usr/bin<br /> sudo curl -Lo /tmp/nvim-linux64.tar.gz https://github.com/neovim/neovim/releases/latest/download/nvim-linux64.tar.gz<br /> sudo tar -C /opt -xzf /tmp/nvim-linux64.tar.gz<br /> sudo rm /tmp/nvim-linux64.tar.gz<br /> sudo ln -s /opt/nvim-linux64/bin/nvim /usr/bin/nvim<br /> <br /> Nainstalování balíčku pro kompilaci programovací jazyků, potřebuje NvChad<br /> sudo apt update -y<br /> sudo apt install build-essential -y<br /> <br /> Nainstalovíní pluginu NvChad<br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> Poté je potřeba doinstalovat zbytek pluginu pomocí příkazu v NeoVimu<br /> ESC -&gt; SHIFT+: -&gt; MasonInstallAll<br /> <br /> Dále je potřeba pro zobrazení ikon doinstalovat nerd font https://www.nerdfonts.com/font-downloads doporučeno '''CaskaydiaCove Nerd Font'''<br /> A také nastavit správně zobrazení barev, více zde https://gist.github.com/andersevenrud/015e61af2fd264371032763d4ed965b6<br /> <br /> * https://github.com/neovim/neovim/blob/master/INSTALL.md<br /> * https://nvchad.com/docs/features<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=2516 Linux 2024-08-16T06:32:01Z <p>Filip: /* Balíčky pro usnadnění práce */</p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools psmisc<br /> <br /> === Vypnutí IPv6 ===<br /> Editace systémému pro vypnutí IPv6<br /> sudo nano /etc/sysctl.conf<br /> <br /> net.ipv6.conf.all.disable_ipv6 = 1<br /> net.ipv6.conf.default.disable_ipv6 = 1<br /> net.ipv6.conf.lo.disable_ipv6 = 1<br /> <br /> Vypnutí IPv6 pro ssh<br /> sudo nano /etc/ssh/sshd_config<br /> <br /> AddressFamily inet<br /> <br /> Vypnutí IPv6 pro ufw<br /> sudo nano /etc/default/ufw<br /> <br /> IPV6=no<br /> <br /> * https://www.techrepublic.com/article/how-to-disable-ipv6-on-linux/<br /> * https://superuser.com/questions/326798/unable-to-close-sshd-on-ipv6-tcp-port<br /> * https://www.lightnetics.com/topic/18604/how-do-i-enable-or-disable-ipv6-on-ubuntu-ufw-netfilter-firewall<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> sudo ufw allow ssh<br /> sudo ufw enable<br /> <br /> Zapnutí clamav-deamon<br /> sudo systemctl enable clamav-daemon<br /> sudo systemctl start clamav-daemon<br /> <br /> Zapnutí clamav-freshclam<br /> sudo systemctl enable clamav-freshclam.service<br /> sudo systemctl start clamav-freshclam.service<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix iftop<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Swap ==<br /> === Vypnutí swap ===<br /> Identifikace swap oddílu<br /> cat /proc/swaps<br /> Vypnutí swap<br /> sudo swapoff -a<br /> Odkaz na smazání swap oddílu <br /> sudo nano /etc/fstab<br /> === Zapnutí swap ===<br /> Zapnutí swap<br /> sudo swapon -a<br /> <br /> == Guest tool pro Xen server ==<br /> Nainstalování xen guest tool pro linux systém<br /> curl -sfL https://github.com/clazzor/Xen-guest-autoinstall/releases/download/latest/autoinstall.sh | bash -<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == PS - Process Status == <br /> Process state codes<br /> D uninterruptible sleep (usually IO)<br /> I Idle kernel thread<br /> R running or runnable (on run queue)<br /> S interruptible sleep (waiting for an event to complete)<br /> T stopped by job control signal<br /> t stopped by debugger during the tracing<br /> W paging (not valid since the 2.6.xx kernel)<br /> X dead (should never be seen)<br /> Z defunct (&quot;zombie&quot;) process, terminated but not reaped by its parent<br /> <br /> Věci navíc ke kódům<br /> &lt; high-priority (not nice to other users)<br /> N low-priority (nice to other users)<br /> L has pages locked into memory (for real-time and custom IO)<br /> s is a session leader<br /> l is multi-threaded (using CLONE_THREAD, like NPTL pthreads do)<br /> + is in the foreground process group<br /> <br /> * https://askubuntu.com/questions/360252/what-do-the-stat-column-values-in-ps-mean<br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli novém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> Stáhnutí a nainstalování NeoVimu do /usr/bin<br /> sudo curl -Lo /tmp/nvim-linux64.tar.gz https://github.com/neovim/neovim/releases/latest/download/nvim-linux64.tar.gz<br /> sudo tar -C /opt -xzf /tmp/nvim-linux64.tar.gz<br /> sudo rm /tmp/nvim-linux64.tar.gz<br /> sudo ln -s /opt/nvim-linux64/bin/nvim /usr/bin/nvim<br /> <br /> Nainstalování balíčku pro kompilaci programovací jazyků, potřebuje NvChad<br /> sudo apt update -y<br /> sudo apt install build-essential -y<br /> <br /> Nainstalovíní pluginu NvChad<br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> Poté je potřeba doinstalovat zbytek pluginu pomocí příkazu v NeoVimu<br /> ESC -&gt; SHIFT+: -&gt; MasonInstallAll<br /> <br /> Dále je potřeba pro zobrazení ikon doinstalovat nerd font https://www.nerdfonts.com/font-downloads doporučeno '''CaskaydiaCove Nerd Font'''<br /> <br /> * https://github.com/neovim/neovim/blob/master/INSTALL.md<br /> * https://nvchad.com/docs/features<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=Docker&diff=2477 Docker 2024-08-09T16:10:53Z <p>Filip: /* Vytvoření self-signed certifikátu */</p> <hr /> <div>== Instalace ==<br /> === Nastavení depositáře ===<br /> sudo apt update<br /> sudo apt install ca-certificates curl gnupg<br /> <br /> sudo install -m 0755 -d /etc/apt/keyrings<br /> curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg<br /> sudo chmod a+r /etc/apt/keyrings/docker.gpg<br /> <br /> echo \<br /> &quot;deb [arch=&quot;$(dpkg --print-architecture)&quot; signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \<br /> &quot;$(. /etc/os-release &amp;&amp; echo &quot;$VERSION_CODENAME&quot;)&quot; stable&quot; | \<br /> sudo tee /etc/apt/sources.list.d/docker.list &gt; /dev/null<br /> sudo apt update<br /> <br /> === Instalace ===<br /> sudo apt update<br /> sudo apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin<br /> <br /> * https://docs.docker.com/engine/install/debian/<br /> == Vytvoření self-signed certifikátu ==<br /> Doporučuji si nachystat prostředí<br /> mkdir /etc/ssl/certs/docker<br /> chmod -v 0444 /etc/ssl/certs/docker<br /> cd /etc/ssl/certs/docker<br /> <br /> Vytváření server certifikát na 10 let (Měnit proměný který obsahují $)<br /> openssl genrsa -aes256 -out ca-key.pem 4096<br /> openssl req -new -x509 -days 3650 -key ca-key.pem -sha256 -out ca.pem<br /> <br /> openssl genrsa -out server-key.pem 4096<br /> openssl req -subj &quot;/CN=$LOCALHOST_DOMAIN&quot; -sha256 -new -key server-key.pem -out server.csr<br /> <br /> echo subjectAltName = DNS:$LOCALHOST_DOMAIN,DNS:$HOST_DOMAIN,IP:127.0.0.1 &gt;&gt; extfile.cnf<br /> echo extendedKeyUsage = serverAuth &gt;&gt; extfile.cnf<br /> openssl x509 -req -days 365 -sha256 -in server.csr -CA ca.pem -CAkey ca-key.pem -CAcreateserial -out server-cert.pem -extfile extfile.cnf<br /> <br /> Vytváření client certifikát na 10 let<br /> openssl genrsa -out key.pem 4096<br /> openssl req -subj '/CN=client' -new -key key.pem -out client.csr<br /> echo extendedKeyUsage = clientAuth &gt; extfile-client.cnf<br /> openssl x509 -req -days 3650 -sha256 -in client.csr -CA ca.pem -CAkey ca-key.pem -CAcreateserial -out cert.pem -extfile extfile-client.cnf<br /> <br /> Změna práv pro certifikáty a pročištění<br /> chmod -v 0400 ca-key.pem key.pem server-key.pem<br /> chmod -v 0444 ca.pem server-cert.pem cert.pem<br /> <br /> rm -v client.csr server.csr extfile.cnf extfile-client.cnf<br /> <br /> * https://medium.com/trabe/using-docker-engine-api-securely-584e0882158e<br /> * https://docs.docker.com/engine/security/protect-access/<br /> <br /> == Otevření socketu ven ==<br /> === Override config ===<br /> sudo mkdir /etc/systemd/system/docker.service.d<br /> nano /etc/systemd/system/docker.service.d/override.conf<br /> <br /> Nastavení pro nešifrovaný otevření socketu, nedoporučeno<br /> [Service]<br /> ExecStart=<br /> ExecStart=/usr/bin/dockerd -H fd:// -H tcp://IP_ADRESA:2735 --ipv6=false --tls=false<br /> <br /> Nastavení pro šifrovaný otevření socketu, doporučeno<br /> [Service]<br /> ExecStart=<br /> ExecStart=/usr/bin/dockerd -H fd:// -H tcp:///IP_ADRESA:2376 --ipv6=false --tlsverify --tlscacert=/CESTA/ca.pem --tlscert=/CESTA/server-cert.pem --tlskey=/CESTA/server-key.pem<br /> <br /> * https://docs.docker.com/config/daemon/remote-access/<br /> * https://stackoverflow.com/questions/57996938/could-not-edit-systemd-service-file<br /> <br /> === Restartování ===<br /> sudo systemctl daemon-reload<br /> sudo systemctl restart docker.service<br /> <br /> === Povolení ufw ===<br /> ufw allow 2375/tcp<br /> nebo<br /> ufw allow 2376/tcp</div> Filip http://blok.tydyt.cz/index.php?title=Docker&diff=2476 Docker 2024-08-09T15:59:17Z <p>Filip: </p> <hr /> <div>== Instalace ==<br /> === Nastavení depositáře ===<br /> sudo apt update<br /> sudo apt install ca-certificates curl gnupg<br /> <br /> sudo install -m 0755 -d /etc/apt/keyrings<br /> curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg<br /> sudo chmod a+r /etc/apt/keyrings/docker.gpg<br /> <br /> echo \<br /> &quot;deb [arch=&quot;$(dpkg --print-architecture)&quot; signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \<br /> &quot;$(. /etc/os-release &amp;&amp; echo &quot;$VERSION_CODENAME&quot;)&quot; stable&quot; | \<br /> sudo tee /etc/apt/sources.list.d/docker.list &gt; /dev/null<br /> sudo apt update<br /> <br /> === Instalace ===<br /> sudo apt update<br /> sudo apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin<br /> <br /> * https://docs.docker.com/engine/install/debian/<br /> == Vytvoření self-signed certifikátu ==<br /> <br /> *https://medium.com/trabe/using-docker-engine-api-securely-584e0882158e<br /> * https://docs.docker.com/engine/security/protect-access/<br /> == Otevření socketu ven ==<br /> === Override config ===<br /> sudo mkdir /etc/systemd/system/docker.service.d<br /> nano /etc/systemd/system/docker.service.d/override.conf<br /> <br /> Nastavení pro nešifrovaný otevření socketu, nedoporučeno<br /> [Service]<br /> ExecStart=<br /> ExecStart=/usr/bin/dockerd -H fd:// -H tcp://IP_ADRESA:2735 --ipv6=false --tls=false<br /> <br /> Nastavení pro šifrovaný otevření socketu, doporučeno<br /> [Service]<br /> ExecStart=<br /> ExecStart=/usr/bin/dockerd -H fd:// -H tcp:///IP_ADRESA:2376 --ipv6=false --tlsverify --tlscacert=/CESTA/ca.pem --tlscert=/CESTA/server-cert.pem --tlskey=/CESTA/server-key.pem<br /> <br /> * https://docs.docker.com/config/daemon/remote-access/<br /> * https://stackoverflow.com/questions/57996938/could-not-edit-systemd-service-file<br /> <br /> === Restartování ===<br /> sudo systemctl daemon-reload<br /> sudo systemctl restart docker.service<br /> <br /> === Povolení ufw ===<br /> ufw allow 2375/tcp<br /> nebo<br /> ufw allow 2376/tcp</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=2475 Linux 2024-08-09T15:55:06Z <p>Filip: </p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools psmisc<br /> <br /> === Vypnutí IPv6 ===<br /> Editace systémému pro vypnutí IPv6<br /> sudo nano /etc/sysctl.conf<br /> <br /> net.ipv6.conf.all.disable_ipv6 = 1<br /> net.ipv6.conf.default.disable_ipv6 = 1<br /> net.ipv6.conf.lo.disable_ipv6 = 1<br /> <br /> Vypnutí IPv6 pro ssh<br /> sudo nano /etc/ssh/sshd_config<br /> <br /> AddressFamily inet<br /> <br /> Vypnutí IPv6 pro ufw<br /> sudo nano /etc/default/ufw<br /> <br /> IPV6=no<br /> <br /> * https://www.techrepublic.com/article/how-to-disable-ipv6-on-linux/<br /> * https://superuser.com/questions/326798/unable-to-close-sshd-on-ipv6-tcp-port<br /> * https://www.lightnetics.com/topic/18604/how-do-i-enable-or-disable-ipv6-on-ubuntu-ufw-netfilter-firewall<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> sudo ufw allow ssh<br /> sudo ufw enable<br /> <br /> Zapnutí clamav-deamon<br /> sudo systemctl enable clamav-daemon<br /> sudo systemctl start clamav-daemon<br /> <br /> Zapnutí clamav-freshclam<br /> sudo systemctl enable clamav-freshclam.service<br /> sudo systemctl start clamav-freshclam.service<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Swap ==<br /> === Vypnutí swap ===<br /> Identifikace swap oddílu<br /> cat /proc/swaps<br /> Vypnutí swap<br /> sudo swapoff -a<br /> Odkaz na smazání swap oddílu <br /> sudo nano /etc/fstab<br /> === Zapnutí swap ===<br /> Zapnutí swap<br /> sudo swapon -a<br /> <br /> == Guest tool pro Xen server ==<br /> Nainstalování xen guest tool pro linux systém<br /> curl -sfL https://github.com/clazzor/Xen-guest-autoinstall/releases/download/latest/autoinstall.sh | bash -<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == PS - Process Status == <br /> Process state codes<br /> D uninterruptible sleep (usually IO)<br /> I Idle kernel thread<br /> R running or runnable (on run queue)<br /> S interruptible sleep (waiting for an event to complete)<br /> T stopped by job control signal<br /> t stopped by debugger during the tracing<br /> W paging (not valid since the 2.6.xx kernel)<br /> X dead (should never be seen)<br /> Z defunct (&quot;zombie&quot;) process, terminated but not reaped by its parent<br /> <br /> Věci navíc ke kódům<br /> &lt; high-priority (not nice to other users)<br /> N low-priority (nice to other users)<br /> L has pages locked into memory (for real-time and custom IO)<br /> s is a session leader<br /> l is multi-threaded (using CLONE_THREAD, like NPTL pthreads do)<br /> + is in the foreground process group<br /> <br /> * https://askubuntu.com/questions/360252/what-do-the-stat-column-values-in-ps-mean<br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli novém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> Stáhnutí a nainstalování NeoVimu do /usr/bin<br /> sudo curl -Lo /tmp/nvim-linux64.tar.gz https://github.com/neovim/neovim/releases/latest/download/nvim-linux64.tar.gz<br /> sudo tar -C /opt -xzf /tmp/nvim-linux64.tar.gz<br /> sudo rm /tmp/nvim-linux64.tar.gz<br /> sudo ln -s /opt/nvim-linux64/bin/nvim /usr/bin/nvim<br /> <br /> Nainstalování balíčku pro kompilaci programovací jazyků, potřebuje NvChad<br /> sudo apt update -y<br /> sudo apt install build-essential -y<br /> <br /> Nainstalovíní pluginu NvChad<br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> Poté je potřeba doinstalovat zbytek pluginu pomocí příkazu v NeoVimu<br /> ESC -&gt; SHIFT+: -&gt; MasonInstallAll<br /> <br /> Dále je potřeba pro zobrazení ikon doinstalovat nerd font https://www.nerdfonts.com/font-downloads doporučeno '''CaskaydiaCove Nerd Font'''<br /> <br /> * https://github.com/neovim/neovim/blob/master/INSTALL.md<br /> * https://nvchad.com/docs/features<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=Docker&diff=2473 Docker 2024-08-09T15:51:42Z <p>Filip: /* Otevření socketu ven */</p> <hr /> <div>== Instalace ==<br /> === Nastavení depositáře ===<br /> sudo apt update<br /> sudo apt install ca-certificates curl gnupg<br /> <br /> sudo install -m 0755 -d /etc/apt/keyrings<br /> curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg<br /> sudo chmod a+r /etc/apt/keyrings/docker.gpg<br /> <br /> echo \<br /> &quot;deb [arch=&quot;$(dpkg --print-architecture)&quot; signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \<br /> &quot;$(. /etc/os-release &amp;&amp; echo &quot;$VERSION_CODENAME&quot;)&quot; stable&quot; | \<br /> sudo tee /etc/apt/sources.list.d/docker.list &gt; /dev/null<br /> <br /> === Instalace (bez compose) ===<br /> sudo apt update<br /> sudo apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin<br /> <br /> * https://docs.docker.com/engine/install/debian/<br /> == Otevření socketu ven ==<br /> === Override config ===<br /> sudo mkdir /etc/systemd/system/docker.service.d<br /> nano /etc/systemd/system/docker.service.d/override.conf<br /> <br /> Nastavení pro nešifrovaný otevření socketu, nedoporučeno<br /> [Service]<br /> ExecStart=<br /> ExecStart=/usr/bin/dockerd -H fd:// -H tcp://IP_ADRESA:2735 --ipv6=false --tls=false<br /> <br /> Nastavení pro šifrovaný otevření socketu, doporučeno<br /> [Service]<br /> ExecStart=<br /> ExecStart=/usr/bin/dockerd -H fd:// -H tcp:///IP_ADRESA:2376 --ipv6=false --tlsverify --tlscacert=/CESTA/ca.pem --tlscert=/CESTA/server-cert.pem --tlskey=/CESTA/server-key.pem<br /> <br /> * https://docs.docker.com/config/daemon/remote-access/<br /> * https://stackoverflow.com/questions/57996938/could-not-edit-systemd-service-file<br /> <br /> === Restartování ===<br /> sudo systemctl daemon-reload<br /> sudo systemctl restart docker.service<br /> <br /> === Povolení ufw ===<br /> ufw allow 2375/tcp<br /> nebo<br /> ufw allow 2376/tcp</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=2472 Linux 2024-08-09T15:46:02Z <p>Filip: </p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools psmisc<br /> <br /> === Vypnutí IPv6 ===<br /> Editace systémému pro vypnutí IPv6<br /> sudo nano /etc/sysctl.conf<br /> <br /> net.ipv6.conf.all.disable_ipv6 = 1<br /> net.ipv6.conf.default.disable_ipv6 = 1<br /> net.ipv6.conf.lo.disable_ipv6 = 1<br /> <br /> Vypnutí IPv6 pro ssh<br /> sudo nano /etc/ssh/sshd_config<br /> <br /> AddressFamily inet<br /> <br /> Vypnutí IPv6 pro ufw<br /> sudo nano /etc/default/ufw<br /> <br /> IPV6=no<br /> <br /> * https://www.techrepublic.com/article/how-to-disable-ipv6-on-linux/<br /> * https://superuser.com/questions/326798/unable-to-close-sshd-on-ipv6-tcp-port<br /> * https://www.lightnetics.com/topic/18604/how-do-i-enable-or-disable-ipv6-on-ubuntu-ufw-netfilter-firewall<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> sudo ufw allow ssh<br /> sudo ufw enable<br /> <br /> Zapnutí clamav-deamon<br /> sudo systemctl enable clamav-daemon<br /> sudo systemctl start clamav-daemon<br /> <br /> Zapnutí clamav-freshclam<br /> sudo systemctl enable clamav-freshclam.service<br /> sudo systemctl start clamav-freshclam.service<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Swap ==<br /> === Vypnutí swap ===<br /> Identifikace swap oddílu<br /> cat /proc/swaps<br /> Vypnutí swap<br /> sudo swapoff -a<br /> Odkaz na smazání swap oddílu <br /> sudo nano /etc/fstab<br /> === Zapnutí swap ===<br /> Zapnutí swap<br /> sudo swapon -a<br /> <br /> == Guest tool pro Xen server ==<br /> Nainstalování xen guest tool pro linux systém<br /> curl -sfL https://github.com/clazzor/Xen-guest-autoinstall/releases/download/latest/autoinstall.sh | bash -<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli novém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> Stáhnutí a nainstalování NeoVimu do /usr/bin<br /> sudo curl -Lo /tmp/nvim-linux64.tar.gz https://github.com/neovim/neovim/releases/latest/download/nvim-linux64.tar.gz<br /> sudo tar -C /opt -xzf /tmp/nvim-linux64.tar.gz<br /> sudo rm /tmp/nvim-linux64.tar.gz<br /> sudo ln -s /opt/nvim-linux64/bin/nvim /usr/bin/nvim<br /> <br /> Nainstalování balíčku pro kompilaci programovací jazyků, potřebuje NvChad<br /> sudo apt update -y<br /> sudo apt install build-essential -y<br /> <br /> Nainstalovíní pluginu NvChad<br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> Poté je potřeba doinstalovat zbytek pluginu pomocí příkazu v NeoVimu<br /> ESC -&gt; SHIFT+: -&gt; MasonInstallAll<br /> <br /> Dále je potřeba pro zobrazení ikon doinstalovat nerd font https://www.nerdfonts.com/font-downloads doporučeno '''CaskaydiaCove Nerd Font'''<br /> <br /> * https://github.com/neovim/neovim/blob/master/INSTALL.md<br /> * https://nvchad.com/docs/features<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=2471 Linux 2024-08-09T15:32:43Z <p>Filip: /* NeoVim/NvChad */</p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools psmisc<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> sudo ufw allow ssh<br /> sudo ufw enable<br /> <br /> Zapnutí clamav-deamon<br /> sudo systemctl enable clamav-daemon<br /> sudo systemctl start clamav-daemon<br /> <br /> Zapnutí clamav-freshclam<br /> sudo systemctl enable clamav-freshclam.service<br /> sudo systemctl start clamav-freshclam.service<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Swap ==<br /> === Vypnutí swap ===<br /> Identifikace swap oddílu<br /> cat /proc/swaps<br /> Vypnutí swap<br /> sudo swapoff -a<br /> Odkaz na smazání swap oddílu <br /> sudo nano /etc/fstab<br /> === Zapnutí swap ===<br /> Zapnutí swap<br /> sudo swapon -a<br /> <br /> == Guest tool pro Xen server ==<br /> Nainstalování xen guest tool pro linux systém<br /> curl -sfL https://github.com/clazzor/Xen-guest-autoinstall/releases/download/latest/autoinstall.sh | bash -<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli novém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> Stáhnutí a nainstalování NeoVimu do /usr/bin<br /> sudo curl -Lo /tmp/nvim-linux64.tar.gz https://github.com/neovim/neovim/releases/latest/download/nvim-linux64.tar.gz<br /> sudo tar -C /opt -xzf /tmp/nvim-linux64.tar.gz<br /> sudo rm /tmp/nvim-linux64.tar.gz<br /> sudo ln -s /opt/nvim-linux64/bin/nvim /usr/bin/nvim<br /> <br /> Nainstalování balíčku pro kompilaci programovací jazyků, potřebuje NvChad<br /> sudo apt update -y<br /> sudo apt install build-essential -y<br /> <br /> Nainstalovíní pluginu NvChad<br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> Poté je potřeba doinstalovat zbytek pluginu pomocí příkazu v NeoVimu<br /> ESC -&gt; SHIFT+: -&gt; MasonInstallAll<br /> <br /> Dále je potřeba pro zobrazení ikon doinstalovat nerd font https://www.nerdfonts.com/font-downloads doporučeno '''CaskaydiaCove Nerd Font'''<br /> <br /> * https://github.com/neovim/neovim/blob/master/INSTALL.md<br /> * https://nvchad.com/docs/features<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=2470 Linux 2024-08-09T15:17:11Z <p>Filip: /* Problém s mc */</p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools psmisc<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> sudo ufw allow ssh<br /> sudo ufw enable<br /> <br /> Zapnutí clamav-deamon<br /> sudo systemctl enable clamav-daemon<br /> sudo systemctl start clamav-daemon<br /> <br /> Zapnutí clamav-freshclam<br /> sudo systemctl enable clamav-freshclam.service<br /> sudo systemctl start clamav-freshclam.service<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Swap ==<br /> === Vypnutí swap ===<br /> Identifikace swap oddílu<br /> cat /proc/swaps<br /> Vypnutí swap<br /> sudo swapoff -a<br /> Odkaz na smazání swap oddílu <br /> sudo nano /etc/fstab<br /> === Zapnutí swap ===<br /> Zapnutí swap<br /> sudo swapon -a<br /> <br /> == Guest tool pro Xen server ==<br /> Nainstalování xen guest tool pro linux systém<br /> curl -sfL https://github.com/clazzor/Xen-guest-autoinstall/releases/download/latest/autoinstall.sh | bash -<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli novém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> curl -JLO https://github.com/neovim/neovim/releases/download/stable/nvim.appimage<br /> <br /> sudo chown root:root nvim.appimage<br /> sudo chmod 755 nvim.appimage<br /> sudo mv nvim.appimage /usr/bin/nvim<br /> <br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> * https://nvchad.com/docs/features<br /> <br /> * https://nvchad.com/docs/config/format_lint<br /> * https://github.com/NvChad/NvChad<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=2469 Linux 2024-08-09T15:14:02Z <p>Filip: /* Firewall &amp; antivirus */</p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools psmisc<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> sudo ufw allow ssh<br /> sudo ufw enable<br /> <br /> Zapnutí clamav-deamon<br /> sudo systemctl enable clamav-daemon<br /> sudo systemctl start clamav-daemon<br /> <br /> Zapnutí clamav-freshclam<br /> sudo systemctl enable clamav-freshclam.service<br /> sudo systemctl start clamav-freshclam.service<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Swap ==<br /> === Vypnutí swap ===<br /> Identifikace swap oddílu<br /> cat /proc/swaps<br /> Vypnutí swap<br /> sudo swapoff -a<br /> Odkaz na smazání swap oddílu <br /> sudo nano /etc/fstab<br /> === Zapnutí swap ===<br /> Zapnutí swap<br /> sudo swapon -a<br /> <br /> == Guest tool pro Xen server ==<br /> Nainstalování xen guest tool pro linux systém<br /> curl -sfL https://github.com/clazzor/Xen-guest-autoinstall/releases/download/latest/autoinstall.sh | bash -<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli nvém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> curl -JLO https://github.com/neovim/neovim/releases/download/stable/nvim.appimage<br /> <br /> sudo chown root:root nvim.appimage<br /> sudo chmod 755 nvim.appimage<br /> sudo mv nvim.appimage /usr/bin/nvim<br /> <br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> * https://nvchad.com/docs/features<br /> <br /> * https://nvchad.com/docs/config/format_lint<br /> * https://github.com/NvChad/NvChad<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=2465 Linux 2024-07-29T15:28:29Z <p>Filip: /* Základní balíčky */</p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools psmisc<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-freshclam clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> sudo ufw allow ssh<br /> sudo ufw enable<br /> <br /> Zapnutí clamav-deamon<br /> sudo systemctl enable clamav-daemon<br /> sudo systemctl start clamav-daemon<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Swap ==<br /> === Vypnutí swap ===<br /> Identifikace swap oddílu<br /> cat /proc/swaps<br /> Vypnutí swap<br /> sudo swapoff -a<br /> Odkaz na smazání swap oddílu <br /> sudo nano /etc/fstab<br /> === Zapnutí swap ===<br /> Zapnutí swap<br /> sudo swapon -a<br /> <br /> == Guest tool pro Xen server ==<br /> Nainstalování xen guest tool pro linux systém<br /> curl -sfL https://github.com/clazzor/Xen-guest-autoinstall/releases/download/latest/autoinstall.sh | bash -<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli nvém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> curl -JLO https://github.com/neovim/neovim/releases/download/stable/nvim.appimage<br /> <br /> sudo chown root:root nvim.appimage<br /> sudo chmod 755 nvim.appimage<br /> sudo mv nvim.appimage /usr/bin/nvim<br /> <br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> * https://nvchad.com/docs/features<br /> <br /> * https://nvchad.com/docs/config/format_lint<br /> * https://github.com/NvChad/NvChad<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=2448 Linux 2024-07-06T19:14:07Z <p>Filip: /* Firewall &amp; antivirus */</p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-freshclam clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> sudo ufw allow ssh<br /> sudo ufw enable<br /> <br /> Zapnutí clamav-deamon<br /> sudo systemctl enable clamav-daemon<br /> sudo systemctl start clamav-daemon<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Swap ==<br /> === Vypnutí swap ===<br /> Identifikace swap oddílu<br /> cat /proc/swaps<br /> Vypnutí swap<br /> sudo swapoff -a<br /> Odkaz na smazání swap oddílu <br /> sudo nano /etc/fstab<br /> === Zapnutí swap ===<br /> Zapnutí swap<br /> sudo swapon -a<br /> <br /> == Guest tool pro Xen server ==<br /> Nainstalování xen guest tool pro linux systém<br /> curl -sfL https://github.com/clazzor/Xen-guest-autoinstall/releases/download/latest/autoinstall.sh | bash -<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli nvém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> curl -JLO https://github.com/neovim/neovim/releases/download/stable/nvim.appimage<br /> <br /> sudo chown root:root nvim.appimage<br /> sudo chmod 755 nvim.appimage<br /> sudo mv nvim.appimage /usr/bin/nvim<br /> <br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> * https://nvchad.com/docs/features<br /> <br /> * https://nvchad.com/docs/config/format_lint<br /> * https://github.com/NvChad/NvChad<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=2447 Linux 2024-07-06T19:10:11Z <p>Filip: /* Firewall &amp; antivirus */</p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-freshclam clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> ufw allow ssh<br /> ufw enable<br /> <br /> Zapnutí clamav-deamon<br /> sudo systemctl enable clamav-daemon<br /> sudo systemctl start clamav-daemon<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Swap ==<br /> === Vypnutí swap ===<br /> Identifikace swap oddílu<br /> cat /proc/swaps<br /> Vypnutí swap<br /> sudo swapoff -a<br /> Odkaz na smazání swap oddílu <br /> sudo nano /etc/fstab<br /> === Zapnutí swap ===<br /> Zapnutí swap<br /> sudo swapon -a<br /> <br /> == Guest tool pro Xen server ==<br /> Nainstalování xen guest tool pro linux systém<br /> curl -sfL https://github.com/clazzor/Xen-guest-autoinstall/releases/download/latest/autoinstall.sh | bash -<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli nvém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> curl -JLO https://github.com/neovim/neovim/releases/download/stable/nvim.appimage<br /> <br /> sudo chown root:root nvim.appimage<br /> sudo chmod 755 nvim.appimage<br /> sudo mv nvim.appimage /usr/bin/nvim<br /> <br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> * https://nvchad.com/docs/features<br /> <br /> * https://nvchad.com/docs/config/format_lint<br /> * https://github.com/NvChad/NvChad<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=2446 Linux 2024-07-06T18:37:02Z <p>Filip: /* Vypnutí swap */</p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-freshclam clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> ufw allow ssh<br /> ufw enable<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Swap ==<br /> === Vypnutí swap ===<br /> Identifikace swap oddílu<br /> cat /proc/swaps<br /> Vypnutí swap<br /> sudo swapoff -a<br /> Odkaz na smazání swap oddílu <br /> sudo nano /etc/fstab<br /> === Zapnutí swap ===<br /> Zapnutí swap<br /> sudo swapon -a<br /> <br /> == Guest tool pro Xen server ==<br /> Nainstalování xen guest tool pro linux systém<br /> curl -sfL https://github.com/clazzor/Xen-guest-autoinstall/releases/download/latest/autoinstall.sh | bash -<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli nvém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> curl -JLO https://github.com/neovim/neovim/releases/download/stable/nvim.appimage<br /> <br /> sudo chown root:root nvim.appimage<br /> sudo chmod 755 nvim.appimage<br /> sudo mv nvim.appimage /usr/bin/nvim<br /> <br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> * https://nvchad.com/docs/features<br /> <br /> * https://nvchad.com/docs/config/format_lint<br /> * https://github.com/NvChad/NvChad<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=2440 Linux 2024-07-06T14:52:04Z <p>Filip: </p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-freshclam clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> ufw allow ssh<br /> ufw enable<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Vypnutí swap ==<br /> Vypnutí swap kvůli virtualizace kontejnerů<br /> sudo swapoff -a; sudo swapon -a<br /> <br /> == Guest tool pro Xen server ==<br /> Nainstalování xen guest tool pro linux systém<br /> curl -sfL https://github.com/clazzor/Xen-guest-autoinstall/releases/download/latest/autoinstall.sh | bash -<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli nvém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> curl -JLO https://github.com/neovim/neovim/releases/download/stable/nvim.appimage<br /> <br /> sudo chown root:root nvim.appimage<br /> sudo chmod 755 nvim.appimage<br /> sudo mv nvim.appimage /usr/bin/nvim<br /> <br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> * https://nvchad.com/docs/features<br /> <br /> * https://nvchad.com/docs/config/format_lint<br /> * https://github.com/NvChad/NvChad<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=WebServer&diff=1998 WebServer 2023-10-15T16:24:55Z <p>Filip: /* Dashboard */</p> <hr /> <div>=Instalace=<br /> ==K3S přeinstalovaný==<br /> K3S už má součástí traefik nainstalovaný, konfigurační soubory jdou najít v ''/var/lib/rancher/k3s/server/manifests/traefik.yaml'', ty ale při aktualizaci se přepíšou, proto se musí vytvořit externí soubor<br /> <br /> ==Helm==<br /> helm repo add traefik https://traefik.github.io/charts<br /> helm repo update<br /> helm install traefik traefik/traefik<br /> <br /> Pokud chceme už změnit nějaký nastavení v helmu tak můžeme pomocí dodatečného souboru ''(override.yml)''<br /> helm install traefik-dev traefik/traefik -f override.yaml<br /> <br /> ==Konfigurace Helm configu==<br /> Vytvoříme si soubor v ''/var/lib/rancher/k3s/server/manifests/''<br /> sudo touch /var/lib/rancher/k3s/server/manifests/traefik-config.yaml<br /> sudo nano /var/lib/rancher/k3s/server/manifests/traefik-config.yaml<br /> Základní struktura configu je<br /> apiVersion: helm.cattle.io/v1<br /> kind: HelmChartConfig<br /> metadata:<br /> name: traefik<br /> namespace: kube-system<br /> spec:<br /> valuesContent: |-<br /> <br /> config se uplatní po restartu nebo aplikování<br /> kubectl apply -f /var/lib/rancher/k3s/server/manifests/traefik-config.yaml<br /> <br /> ===HTTP/3===<br /> experimental:<br /> http3: true<br /> <br /> entryPoints:<br /> name:<br /> http3:<br /> advertisedPort: 443<br /> <br /> ==Problém s duplicitním treafikem==<br /> kubectl api-resources | grep traefik<br /> Pokud se zde nachází dva ty APIVERSION traefiku, znamená to že se zde nachází buď 2 traefiky a nebo jeden byl odstraněn bez smazání api resources, je dobré to smazat a mít jenom ten co funguje, pokud budeme vytvářet middlewares/routes/tls tak si musíme dát pozor na apiversion<br /> viz: https://traefik.io/v1alpha1<br /> <br /> =Aktualizace=<br /> * https://pet2cattle.com/2021/12/k3s-update-traefik-to-v2<br /> Již stažené verze Traefiku pomocí Helm můžeme vidět v /var/lib/rancher/k3s/server/static/charts<br /> sudo ls /var/lib/rancher/k3s/server/static/charts<br /> <br /> =Let's encrypt=<br /> https://doc.traefik.io/traefik/https/acme/<br /> <br /> =Dashboard=<br /> apiVersion: traefik.io/v1alpha1<br /> kind: IngressRoute<br /> metadata:<br /> name: traefik-dashboard<br /> spec:<br /> routes:<br /> - match: Host(`dashboard.clazzor.eu`)<br /> kind: Rule<br /> services:<br /> - name: api@internal<br /> kind: TraefikService<br /> middlewares:<br /> - name: test-auth<br /> ---<br /> apiVersion: traefik.io/v1alpha1<br /> kind: Middleware<br /> metadata:<br /> name: test-auth<br /> spec:<br /> basicAuth:<br /> secret: clazzor-auth<br /> ---<br /> apiVersion: v1<br /> kind: Secret<br /> metadata:<br /> name: clazzor-auth<br /> namespace: default<br /> data:<br /> users: YWRtaW46JDEkY1E0WWl2NWIkS0hQMGFSZkhkTXVGd2Q5RVVyNGZOLgo=<br /> <br /> apiVersion: v1<br /> type: kubernetes.io/tls<br /> kind: Secret<br /> metadata:<br /> name: clazzor.eu-cert<br /> namespace: default<br /> data:<br /> tls.crt: &quot;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&quot;<br /> tls.key: &quot;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&quot;<br /> <br /> apiVersion: traefik.containo.us/v1alpha1<br /> kind: TLSStore<br /> metadata:<br /> name: default<br /> namespace: default<br /> spec:<br /> defaultCertificate:<br /> secretName: clazzor.eu-cert</div> Filip http://blok.tydyt.cz/index.php?title=WebServer&diff=1997 WebServer 2023-10-15T16:23:52Z <p>Filip: </p> <hr /> <div>=Instalace=<br /> ==K3S přeinstalovaný==<br /> K3S už má součástí traefik nainstalovaný, konfigurační soubory jdou najít v ''/var/lib/rancher/k3s/server/manifests/traefik.yaml'', ty ale při aktualizaci se přepíšou, proto se musí vytvořit externí soubor<br /> <br /> ==Helm==<br /> helm repo add traefik https://traefik.github.io/charts<br /> helm repo update<br /> helm install traefik traefik/traefik<br /> <br /> Pokud chceme už změnit nějaký nastavení v helmu tak můžeme pomocí dodatečného souboru ''(override.yml)''<br /> helm install traefik-dev traefik/traefik -f override.yaml<br /> <br /> ==Konfigurace Helm configu==<br /> Vytvoříme si soubor v ''/var/lib/rancher/k3s/server/manifests/''<br /> sudo touch /var/lib/rancher/k3s/server/manifests/traefik-config.yaml<br /> sudo nano /var/lib/rancher/k3s/server/manifests/traefik-config.yaml<br /> Základní struktura configu je<br /> apiVersion: helm.cattle.io/v1<br /> kind: HelmChartConfig<br /> metadata:<br /> name: traefik<br /> namespace: kube-system<br /> spec:<br /> valuesContent: |-<br /> <br /> config se uplatní po restartu nebo aplikování<br /> kubectl apply -f /var/lib/rancher/k3s/server/manifests/traefik-config.yaml<br /> <br /> ===HTTP/3===<br /> experimental:<br /> http3: true<br /> <br /> entryPoints:<br /> name:<br /> http3:<br /> advertisedPort: 443<br /> <br /> ==Problém s duplicitním treafikem==<br /> kubectl api-resources | grep traefik<br /> Pokud se zde nachází dva ty APIVERSION traefiku, znamená to že se zde nachází buď 2 traefiky a nebo jeden byl odstraněn bez smazání api resources, je dobré to smazat a mít jenom ten co funguje, pokud budeme vytvářet middlewares/routes/tls tak si musíme dát pozor na apiversion<br /> viz: https://traefik.io/v1alpha1<br /> <br /> =Aktualizace=<br /> * https://pet2cattle.com/2021/12/k3s-update-traefik-to-v2<br /> Již stažené verze Traefiku pomocí Helm můžeme vidět v /var/lib/rancher/k3s/server/static/charts<br /> sudo ls /var/lib/rancher/k3s/server/static/charts<br /> <br /> =Let's encrypt=<br /> https://doc.traefik.io/traefik/https/acme/<br /> <br /> =Dashboard=<br /> apiVersion: traefik.io/v1alpha1<br /> kind: IngressRoute<br /> metadata:<br /> name: traefik-dashboard<br /> spec:<br /> routes:<br /> - match: Host(`dashboard.clazzor.eu`)<br /> kind: Rule<br /> services:<br /> - name: api@internal<br /> kind: TraefikService<br /> middlewares:<br /> - name: test-auth<br /> ---<br /> apiVersion: traefik.io/v1alpha1<br /> kind: Middleware<br /> metadata:<br /> name: test-auth<br /> spec:<br /> basicAuth:<br /> secret: clazzor-auth<br /> ---<br /> apiVersion: v1<br /> kind: Secret<br /> metadata:<br /> name: clazzor-auth<br /> namespace: default<br /> data:<br /> users: YWRtaW46JDEkY1E0WWl2NWIkS0hQMGFSZkhkTXVGd2Q5RVVyNGZOLgo=</div> Filip http://blok.tydyt.cz/index.php?title=WebServer&diff=1996 WebServer 2023-10-12T08:27:06Z <p>Filip: /* Konfigurace Helm configu */</p> <hr /> <div>=Instalace=<br /> ==K3S přeinstalovaný==<br /> K3S už má součástí traefik nainstalovaný, konfigurační soubory jdou najít v ''/var/lib/rancher/k3s/server/manifests/traefik.yaml'', ty ale při aktualizaci se přepíšou, proto se musí vytvořit externí soubor<br /> <br /> ==Helm==<br /> helm repo add traefik https://traefik.github.io/charts<br /> helm repo update<br /> helm install traefik traefik/traefik<br /> <br /> Pokud chceme už změnit nějaký nastavení v helmu tak můžeme pomocí dodatečného souboru ''(override.yml)''<br /> helm install traefik-dev traefik/traefik -f override.yaml<br /> <br /> ==Konfigurace Helm configu==<br /> Vytvoříme si soubor v ''/var/lib/rancher/k3s/server/manifests/''<br /> sudo touch /var/lib/rancher/k3s/server/manifests/traefik-config.yaml<br /> sudo nano /var/lib/rancher/k3s/server/manifests/traefik-config.yaml<br /> Základní struktura configu je<br /> apiVersion: helm.cattle.io/v1<br /> kind: HelmChartConfig<br /> metadata:<br /> name: traefik<br /> namespace: kube-system<br /> spec:<br /> valuesContent: |-<br /> <br /> config se uplatní po restartu nebo aplikování<br /> kubectl apply -f /var/lib/rancher/k3s/server/manifests/traefik-config.yaml<br /> <br /> ===HTTP/3===<br /> experimental:<br /> http3: true<br /> <br /> entryPoints:<br /> name:<br /> http3:<br /> advertisedPort: 443<br /> <br /> ==Problém s duplicitním treafikem==<br /> kubectl api-resources | grep traefik<br /> Pokud se zde nachází dva ty APIVERSION traefiku, znamená to že se zde nachází buď 2 traefiky a nebo jeden byl odstraněn bez smazání api resources, je dobré to smazat a mít jenom ten co funguje, pokud budeme vytvářet middlewares/routes/tls tak si musíme dát pozor na apiversion<br /> viz: https://traefik.io/v1alpha1<br /> <br /> =Aktualizace=<br /> * https://pet2cattle.com/2021/12/k3s-update-traefik-to-v2<br /> Již stažené verze Traefiku pomocí Helm můžeme vidět v /var/lib/rancher/k3s/server/static/charts<br /> sudo ls /var/lib/rancher/k3s/server/static/charts<br /> <br /> =Let's encrypt=<br /> https://doc.traefik.io/traefik/https/acme/</div> Filip http://blok.tydyt.cz/index.php?title=WebServer&diff=1983 WebServer 2023-10-11T10:20:02Z <p>Filip: /* Konfigurace Helm configu */</p> <hr /> <div>=Instalace=<br /> ==K3S přeinstalovaný==<br /> K3S už má součástí traefik nainstalovaný, konfigurační soubory jdou najít v ''/var/lib/rancher/k3s/server/manifests/traefik.yaml'', ty ale při aktualizaci se přepíšou, proto se musí vytvořit externí soubor<br /> <br /> ==Helm==<br /> helm repo add traefik https://traefik.github.io/charts<br /> helm repo update<br /> helm install traefik traefik/traefik<br /> <br /> Pokud chceme už změnit nějaký nastavení v helmu tak můžeme pomocí dodatečného souboru ''(override.yml)''<br /> helm install traefik-dev traefik/traefik -f override.yaml<br /> <br /> ==Konfigurace Helm configu==<br /> Vytvoříme si soubor v ''/var/lib/rancher/k3s/server/manifests/''<br /> sudo touch /var/lib/rancher/k3s/server/manifests/traefik-config.yaml<br /> sudo nano /var/lib/rancher/k3s/server/manifests/traefik-config.yaml<br /> Základní struktura configu je<br /> apiVersion: helm.cattle.io/v1<br /> kind: HelmChartConfig<br /> metadata:<br /> name: traefik<br /> namespace: kube-system<br /> spec:<br /> <br /> config se uplatní po restartu nebo aplikování<br /> kubectl apply -f /var/lib/rancher/k3s/server/manifests/traefik-config.yaml<br /> <br /> ===HTTP/3===<br /> experimental:<br /> http3: true<br /> <br /> entryPoints:<br /> name:<br /> http3:<br /> advertisedPort: 443<br /> <br /> ==Problém s duplicitním treafikem==<br /> kubectl api-resources | grep traefik<br /> Pokud se zde nachází dva ty APIVERSION traefiku, znamená to že se zde nachází buď 2 traefiky a nebo jeden byl odstraněn bez smazání api resources, je dobré to smazat a mít jenom ten co funguje, pokud budeme vytvářet middlewares/routes/tls tak si musíme dát pozor na apiversion<br /> viz: https://traefik.io/v1alpha1<br /> <br /> =Aktualizace=<br /> * https://pet2cattle.com/2021/12/k3s-update-traefik-to-v2<br /> Již stažené verze Traefiku pomocí Helm můžeme vidět v /var/lib/rancher/k3s/server/static/charts<br /> sudo ls /var/lib/rancher/k3s/server/static/charts<br /> <br /> =Let's encrypt=<br /> https://doc.traefik.io/traefik/https/acme/</div> Filip http://blok.tydyt.cz/index.php?title=WebServer&diff=1982 WebServer 2023-10-11T10:13:00Z <p>Filip: /* Konfigurace Helm configu */</p> <hr /> <div>=Instalace=<br /> ==K3S přeinstalovaný==<br /> K3S už má součástí traefik nainstalovaný, konfigurační soubory jdou najít v ''/var/lib/rancher/k3s/server/manifests/traefik.yaml'', ty ale při aktualizaci se přepíšou, proto se musí vytvořit externí soubor<br /> <br /> ==Helm==<br /> helm repo add traefik https://traefik.github.io/charts<br /> helm repo update<br /> helm install traefik traefik/traefik<br /> <br /> Pokud chceme už změnit nějaký nastavení v helmu tak můžeme pomocí dodatečného souboru ''(override.yml)''<br /> helm install traefik-dev traefik/traefik -f override.yaml<br /> <br /> ==Konfigurace Helm configu==<br /> Vytvoříme si soubor v ''/var/lib/rancher/k3s/server/manifests/''<br /> sudo touch /var/lib/rancher/k3s/server/manifests/traefik-config.yaml<br /> sudo nano /var/lib/rancher/k3s/server/manifests/traefik-config.yaml<br /> Základní struktura configu je<br /> apiVersion: helm.cattle.io/v1<br /> kind: HelmChartConfig<br /> metadata:<br /> name: traefik<br /> namespace: kube-system<br /> spec:<br /> <br /> ==Problém s duplicitním treafikem==<br /> kubectl api-resources | grep traefik<br /> Pokud se zde nachází dva ty APIVERSION traefiku, znamená to že se zde nachází buď 2 traefiky a nebo jeden byl odstraněn bez smazání api resources, je dobré to smazat a mít jenom ten co funguje, pokud budeme vytvářet middlewares/routes/tls tak si musíme dát pozor na apiversion<br /> viz: https://traefik.io/v1alpha1<br /> <br /> =Aktualizace=<br /> * https://pet2cattle.com/2021/12/k3s-update-traefik-to-v2<br /> Již stažené verze Traefiku pomocí Helm můžeme vidět v /var/lib/rancher/k3s/server/static/charts<br /> sudo ls /var/lib/rancher/k3s/server/static/charts<br /> <br /> =Let's encrypt=<br /> https://doc.traefik.io/traefik/https/acme/</div> Filip http://blok.tydyt.cz/index.php?title=WebServer&diff=1981 WebServer 2023-10-11T10:06:48Z <p>Filip: </p> <hr /> <div>=Instalace=<br /> ==K3S přeinstalovaný==<br /> K3S už má součástí traefik nainstalovaný, konfigurační soubory jdou najít v ''/var/lib/rancher/k3s/server/manifests/traefik.yaml'', ty ale při aktualizaci se přepíšou, proto se musí vytvořit externí soubor<br /> <br /> ==Helm==<br /> helm repo add traefik https://traefik.github.io/charts<br /> helm repo update<br /> helm install traefik traefik/traefik<br /> <br /> Pokud chceme už změnit nějaký nastavení v helmu tak můžeme pomocí dodatečného souboru ''(override.yml)''<br /> helm install traefik-dev traefik/traefik -f override.yaml<br /> <br /> ==Konfigurace Helm configu==<br /> Vytvoříme si soubor v ''/var/lib/rancher/k3s/server/manifests/''<br /> sudo touch /var/lib/rancher/k3s/server/manifests/traefik-override.yml<br /> <br /> ==Problém s duplicitním treafikem==<br /> kubectl api-resources | grep traefik<br /> Pokud se zde nachází dva ty APIVERSION traefiku, znamená to že se zde nachází buď 2 traefiky a nebo jeden byl odstraněn bez smazání api resources, je dobré to smazat a mít jenom ten co funguje, pokud budeme vytvářet middlewares/routes/tls tak si musíme dát pozor na apiversion<br /> viz: https://traefik.io/v1alpha1<br /> <br /> =Aktualizace=<br /> * https://pet2cattle.com/2021/12/k3s-update-traefik-to-v2<br /> Již stažené verze Traefiku pomocí Helm můžeme vidět v /var/lib/rancher/k3s/server/static/charts<br /> sudo ls /var/lib/rancher/k3s/server/static/charts<br /> <br /> =Let's encrypt=<br /> https://doc.traefik.io/traefik/https/acme/</div> Filip http://blok.tydyt.cz/index.php?title=WebServer&diff=1980 WebServer 2023-10-11T09:47:07Z <p>Filip: </p> <hr /> <div>=Instalace=<br /> ==K3S přeinstalovaný==<br /> K3S už má součástí traefik nainstalovaný, konfigurační soubory jdou najít v ''/var/lib/rancher/k3s/server/manifests/traefik.yaml'', ty ale při aktualizaci se přepíšou, proto se musí vytvořit externí soubor<br /> <br /> ==Helm==<br /> helm repo add traefik https://traefik.github.io/charts<br /> helm repo update<br /> helm install traefik traefik/traefik<br /> <br /> Pokud chceme už změnit nějaký nastavení v helmu tak můžeme pomocí dodatečného souboru ''(override.yml)''<br /> helm install traefik-dev traefik/traefik -f override.yaml<br /> <br /> ==Konfigurace Helm configu==<br /> Vytvoříme si soubor v ''/var/lib/rancher/k3s/server/manifests/''<br /> sudo touch /var/lib/rancher/k3s/server/manifests/traefik-override.yml<br /> <br /> ==Problém s duplicitním treafikem==<br /> kubectl api-resources | grep traefik<br /> Pokud se zde nachází dva ty APIVERSION traefiku, znamená to že se zde nachází buď 2 traefiky a nebo jeden byl odstraněn bez smazání api resources, je dobré to smazat a mít jenom ten co funguje, pokud budeme vytvářet middlewares/routes/tls tak si musíme dát pozor na apiversion<br /> <br /> =Aktualizace=<br /> * https://pet2cattle.com/2021/12/k3s-update-traefik-to-v2<br /> Již stažené verze Traefiku pomocí Helm můžeme vidět v /var/lib/rancher/k3s/server/static/charts<br /> sudo ls /var/lib/rancher/k3s/server/static/charts<br /> <br /> =Let's encrypt=<br /> https://doc.traefik.io/traefik/https/acme/</div> Filip http://blok.tydyt.cz/index.php?title=Kubernetes&diff=1979 Kubernetes 2023-10-11T09:44:50Z <p>Filip: </p> <hr /> <div>== Instalace ==<br /> === K3S Server ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=&quot;644&quot; INSTALL_K3S_EXEC=&quot;--tls-san DOMAIN_NAME_SERVERU&quot; sh -<br /> <br /> <br /> <br /> '''K3S Server token:'''<br /> cat /var/lib/rancher/k3s/server/node-token<br /> <br /> == Aktualizace ==<br /> https://docs.k3s.io/upgrades<br /> https://pet2cattle.com/2021/05/k3s-autoupgrade<br /> <br /> === K3S Agent ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_URL=https://IP_K3S_SERVERU:6443 K3S_TOKEN=K3S_SERVER_TOKEN sh -<br /> ''IP_K3S_SERVERU odkazuje na k3s serveru kde se musí taky vzít K3S_SERVER_TOKEN''<br /> <br /> ==== Chyba s k3s.yaml ====<br /> Pokud se vyskytne tahle chyba, znamená to že nexistuje potřebný config pro připojení na K3S Server API<br /> E0729 12:28:41.362749 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.363353 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.364959 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.366636 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.368364 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> The connection to the server localhost:8080 was refused - did you specify the right host or port?<br /> <br /> Tento problém se vyřeší zkopírování configu z k3s serveru na daný k3s agenta<br /> sudo cat /etc/rancher/k3s/k3s.yaml<br /> <br /> Zde se přepíše jenom řádek se &quot;'''server: http://localhost:6443'''&quot; na IP_ADDRESSU/DOMAIN K3S_serveru a poté se to opět uloží na stejný místo<br /> sudo mkdir /etc/rancher/k3s<br /> sudo nano /etc/rancher/k3s/k3s.yaml<br /> <br /> Takhle vypadá konfig bez údaju ''k3s.yaml''<br /> apiVersion: v1<br /> clusters:<br /> - cluster:<br /> certificate-authority-data: BASE64_SERVER-CA.CRT<br /> server: https://IP_ADDRESSA:6443<br /> name: default<br /> contexts:<br /> - context:<br /> cluster: default<br /> user: default<br /> name: default<br /> current-context: default<br /> kind: Config<br /> preferences: {}<br /> users:<br /> - name: default<br /> user:<br /> client-certificate-data: BASE64_SERVER-CA.CRT<br /> client-key-data: BASE64_CLIENT-CA.CRT<br /> == Helm ==<br /> curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash<br /> export KUBECONFIG=/etc/rancher/k3s/k3s.yaml<br /> <br /> == Kubernetes proxy ==<br /> Dobré pro testování, nikoliv pro produkci<br /> kubectl proxy --disable-filter=true --address 0.0.0.0<br /> <br /> == Dashboards ==<br /> === Kubernetes dashboard ===<br /> * https://docs.k3s.io/installation/kube-dashboard<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml<br /> <br /> ==== Konfigurace service účtu ====<br /> ===== Dashboard RBAC Configuration =====<br /> ''dashboard.admin-user.yml''<br /> apiVersion: v1<br /> kind: ServiceAccount<br /> metadata:<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ''dashboard.admin-user-role.yml''<br /> apiVersion: rbac.authorization.k8s.io/v1<br /> kind: ClusterRoleBinding<br /> metadata:<br /> name: admin-user<br /> roleRef:<br /> apiGroup: rbac.authorization.k8s.io<br /> kind: ClusterRole<br /> name: cluster-admin<br /> subjects:<br /> - kind: ServiceAccount<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ===== Uplatnění =====<br /> sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml<br /> <br /> ===== Získání Beart tokenu =====<br /> sudo k3s kubectl -n kubernetes-dashboard create token admin-user<br /> <br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> <br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/VERZE/aio/deploy/recommended.yaml<br /> ''VERZE viz: https://github.com/kubernetes/dashboard''<br /> <br /> ==== URL API přes proxy ====<br /> http://IP_ADDRESS:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/.<br /> <br /> === Portainer ===<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns portainer<br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns portainer<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> <br /> == Konfigurace ==<br /> === Firewall ==<br /> https://docs.k3s.io/advanced#ubuntu</div> Filip http://blok.tydyt.cz/index.php?title=WebServer&diff=1978 WebServer 2023-10-11T09:33:26Z <p>Filip: </p> <hr /> <div>=Instalace=<br /> ==K3S přeinstalovaný==<br /> K3S už má součástí traefik nainstalovaný, konfigurační soubory jdou najít v <br /> ==Helm==<br /> helm repo add traefik https://traefik.github.io/charts<br /> helm repo update<br /> helm install traefik traefik/traefik<br /> <br /> Pokud chceme už změnit nějaký nastavení v helmu tak můžeme pomocí dodatečného souboru ''(override.yml)''<br /> helm install traefik-dev traefik/traefik -f override.yaml<br /> <br /> ==Konfigurace Helm konfigu==<br /> ==Problém s duplicitním treafikem==<br /> kubectl api-resources | grep traefik<br /> =Let encrypt=<br /> https://doc.traefik.io/traefik/https/acme/<br /> <br /> <br /> <br /> https://pet2cattle.com/2021/12/k3s-update-traefik-to-v2<br /> https://pet2cattle.com/2021/05/k3s-autoupgrade<br /> https://docs.k3s.io/upgrades<br /> https://docs.k3s.io/networking</div> Filip http://blok.tydyt.cz/index.php?title=WebServer&diff=1976 WebServer 2023-10-10T10:51:40Z <p>Filip: Založena nová stránka s textem „https://pet2cattle.com/2021/12/k3s-update-traefik-to-v2 https://pet2cattle.com/2021/05/k3s-autoupgrade https://docs.k3s.io/upgrades https://docs.k3s.io/net…“</p> <hr /> <div>https://pet2cattle.com/2021/12/k3s-update-traefik-to-v2<br /> https://pet2cattle.com/2021/05/k3s-autoupgrade<br /> https://docs.k3s.io/upgrades<br /> https://docs.k3s.io/networking</div> Filip http://blok.tydyt.cz/index.php?title=Kubernetes&diff=1975 Kubernetes 2023-10-10T10:51:08Z <p>Filip: </p> <hr /> <div>== Instalace ==<br /> === K3S Server ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=&quot;644&quot; INSTALL_K3S_EXEC=&quot;--tls-san DOMAIN_NAME_SERVERU&quot; sh -<br /> <br /> <br /> <br /> '''K3S Server token:'''<br /> cat /var/lib/rancher/k3s/server/node-token<br /> <br /> == Aktualizace ==<br /> https://docs.k3s.io/upgrades<br /> <br /> === K3S Agent ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_URL=https://IP_K3S_SERVERU:6443 K3S_TOKEN=K3S_SERVER_TOKEN sh -<br /> ''IP_K3S_SERVERU odkazuje na k3s serveru kde se musí taky vzít K3S_SERVER_TOKEN''<br /> <br /> ==== Chyba s k3s.yaml ====<br /> Pokud se vyskytne tahle chyba, znamená to že nexistuje potřebný config pro připojení na K3S Server API<br /> E0729 12:28:41.362749 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.363353 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.364959 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.366636 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.368364 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> The connection to the server localhost:8080 was refused - did you specify the right host or port?<br /> <br /> Tento problém se vyřeší zkopírování configu z k3s serveru na daný k3s agenta<br /> sudo cat /etc/rancher/k3s/k3s.yaml<br /> <br /> Zde se přepíše jenom řádek se &quot;'''server: http://localhost:6443'''&quot; na IP_ADDRESSU/DOMAIN K3S_serveru a poté se to opět uloží na stejný místo<br /> sudo mkdir /etc/rancher/k3s<br /> sudo nano /etc/rancher/k3s/k3s.yaml<br /> <br /> Takhle vypadá konfig bez údaju ''k3s.yaml''<br /> apiVersion: v1<br /> clusters:<br /> - cluster:<br /> certificate-authority-data: BASE64_SERVER-CA.CRT<br /> server: https://IP_ADDRESSA:6443<br /> name: default<br /> contexts:<br /> - context:<br /> cluster: default<br /> user: default<br /> name: default<br /> current-context: default<br /> kind: Config<br /> preferences: {}<br /> users:<br /> - name: default<br /> user:<br /> client-certificate-data: BASE64_SERVER-CA.CRT<br /> client-key-data: BASE64_CLIENT-CA.CRT<br /> == Helm ==<br /> curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash<br /> export KUBECONFIG=/etc/rancher/k3s/k3s.yaml<br /> <br /> == Kubernetes proxy ==<br /> Dobré pro testování, nikoliv pro produkci<br /> kubectl proxy --disable-filter=true --address 0.0.0.0<br /> <br /> == Dashboards ==<br /> === Kubernetes dashboard ===<br /> * https://docs.k3s.io/installation/kube-dashboard<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml<br /> <br /> ==== Konfigurace service účtu ====<br /> ===== Dashboard RBAC Configuration =====<br /> ''dashboard.admin-user.yml''<br /> apiVersion: v1<br /> kind: ServiceAccount<br /> metadata:<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ''dashboard.admin-user-role.yml''<br /> apiVersion: rbac.authorization.k8s.io/v1<br /> kind: ClusterRoleBinding<br /> metadata:<br /> name: admin-user<br /> roleRef:<br /> apiGroup: rbac.authorization.k8s.io<br /> kind: ClusterRole<br /> name: cluster-admin<br /> subjects:<br /> - kind: ServiceAccount<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ===== Uplatnění =====<br /> sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml<br /> <br /> ===== Získání Beart tokenu =====<br /> sudo k3s kubectl -n kubernetes-dashboard create token admin-user<br /> <br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> <br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/VERZE/aio/deploy/recommended.yaml<br /> ''VERZE viz: https://github.com/kubernetes/dashboard''<br /> <br /> ==== URL API přes proxy ====<br /> http://IP_ADDRESS:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/.<br /> <br /> === Portainer ===<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns portainer<br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns portainer<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> <br /> == Konfigurace ==<br /> === Firewall ==<br /> https://docs.k3s.io/advanced#ubuntu</div> Filip http://blok.tydyt.cz/index.php?title=Kubernetes&diff=1884 Kubernetes 2023-07-30T18:25:46Z <p>Filip: /* Helm */</p> <hr /> <div>== Instalace ==<br /> === K3S Server ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=&quot;644&quot; INSTALL_K3S_EXEC=&quot;--tls-san DOMAIN_NAME_SERVERU&quot; sh -<br /> <br /> <br /> <br /> '''K3S Server token:'''<br /> cat /var/lib/rancher/k3s/server/node-token<br /> <br /> === K3S Agent ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_URL=https://IP_K3S_SERVERU:6443 K3S_TOKEN=K3S_SERVER_TOKEN sh -<br /> ''IP_K3S_SERVERU odkazuje na k3s serveru kde se musí taky vzít K3S_SERVER_TOKEN''<br /> <br /> ==== Chyba s k3s.yaml ====<br /> Pokud se vyskytne tahle chyba, znamená to že nexistuje potřebný config pro připojení na K3S Server API<br /> E0729 12:28:41.362749 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.363353 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.364959 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.366636 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.368364 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> The connection to the server localhost:8080 was refused - did you specify the right host or port?<br /> <br /> Tento problém se vyřeší zkopírování configu z k3s serveru na daný k3s agenta<br /> sudo cat /etc/rancher/k3s/k3s.yaml<br /> <br /> Zde se přepíše jenom řádek se &quot;'''server: http://localhost:6443'''&quot; na IP_ADDRESSU/DOMAIN K3S_serveru a poté se to opět uloží na stejný místo<br /> sudo mkdir /etc/rancher/k3s<br /> sudo nano /etc/rancher/k3s/k3s.yaml<br /> <br /> Takhle vypadá konfig bez údaju ''k3s.yaml''<br /> apiVersion: v1<br /> clusters:<br /> - cluster:<br /> certificate-authority-data: BASE64_SERVER-CA.CRT<br /> server: https://IP_ADDRESSA:6443<br /> name: default<br /> contexts:<br /> - context:<br /> cluster: default<br /> user: default<br /> name: default<br /> current-context: default<br /> kind: Config<br /> preferences: {}<br /> users:<br /> - name: default<br /> user:<br /> client-certificate-data: BASE64_SERVER-CA.CRT<br /> client-key-data: BASE64_CLIENT-CA.CRT<br /> == Helm ==<br /> curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash<br /> export KUBECONFIG=/etc/rancher/k3s/k3s.yaml<br /> <br /> == Kubernetes proxy ==<br /> Dobré pro testování, nikoliv pro produkci<br /> kubectl proxy --disable-filter=true --address 0.0.0.0<br /> <br /> == Dashboards ==<br /> === Kubernetes dashboard ===<br /> * https://docs.k3s.io/installation/kube-dashboard<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml<br /> <br /> ==== Konfigurace service účtu ====<br /> ===== Dashboard RBAC Configuration =====<br /> ''dashboard.admin-user.yml''<br /> apiVersion: v1<br /> kind: ServiceAccount<br /> metadata:<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ''dashboard.admin-user-role.yml''<br /> apiVersion: rbac.authorization.k8s.io/v1<br /> kind: ClusterRoleBinding<br /> metadata:<br /> name: admin-user<br /> roleRef:<br /> apiGroup: rbac.authorization.k8s.io<br /> kind: ClusterRole<br /> name: cluster-admin<br /> subjects:<br /> - kind: ServiceAccount<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ===== Uplatnění =====<br /> sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml<br /> <br /> ===== Získání Beart tokenu =====<br /> sudo k3s kubectl -n kubernetes-dashboard create token admin-user<br /> <br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> <br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/VERZE/aio/deploy/recommended.yaml<br /> ''VERZE viz: https://github.com/kubernetes/dashboard''<br /> <br /> ==== URL API přes proxy ====<br /> http://IP_ADDRESS:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/.<br /> <br /> === Portainer ===<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns portainer<br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns portainer<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> <br /> == Konfigurace ==<br /> === Firewall ==<br /> https://docs.k3s.io/advanced#ubuntu</div> Filip http://blok.tydyt.cz/index.php?title=Kubernetes&diff=1883 Kubernetes 2023-07-30T17:38:07Z <p>Filip: </p> <hr /> <div>== Instalace ==<br /> === K3S Server ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=&quot;644&quot; INSTALL_K3S_EXEC=&quot;--tls-san DOMAIN_NAME_SERVERU&quot; sh -<br /> <br /> <br /> <br /> '''K3S Server token:'''<br /> cat /var/lib/rancher/k3s/server/node-token<br /> <br /> === K3S Agent ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_URL=https://IP_K3S_SERVERU:6443 K3S_TOKEN=K3S_SERVER_TOKEN sh -<br /> ''IP_K3S_SERVERU odkazuje na k3s serveru kde se musí taky vzít K3S_SERVER_TOKEN''<br /> <br /> ==== Chyba s k3s.yaml ====<br /> Pokud se vyskytne tahle chyba, znamená to že nexistuje potřebný config pro připojení na K3S Server API<br /> E0729 12:28:41.362749 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.363353 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.364959 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.366636 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.368364 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> The connection to the server localhost:8080 was refused - did you specify the right host or port?<br /> <br /> Tento problém se vyřeší zkopírování configu z k3s serveru na daný k3s agenta<br /> sudo cat /etc/rancher/k3s/k3s.yaml<br /> <br /> Zde se přepíše jenom řádek se &quot;'''server: http://localhost:6443'''&quot; na IP_ADDRESSU/DOMAIN K3S_serveru a poté se to opět uloží na stejný místo<br /> sudo mkdir /etc/rancher/k3s<br /> sudo nano /etc/rancher/k3s/k3s.yaml<br /> <br /> Takhle vypadá konfig bez údaju ''k3s.yaml''<br /> apiVersion: v1<br /> clusters:<br /> - cluster:<br /> certificate-authority-data: BASE64_SERVER-CA.CRT<br /> server: https://IP_ADDRESSA:6443<br /> name: default<br /> contexts:<br /> - context:<br /> cluster: default<br /> user: default<br /> name: default<br /> current-context: default<br /> kind: Config<br /> preferences: {}<br /> users:<br /> - name: default<br /> user:<br /> client-certificate-data: BASE64_SERVER-CA.CRT<br /> client-key-data: BASE64_CLIENT-CA.CRT<br /> == Helm ==<br /> curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash<br /> <br /> == Kubernetes proxy ==<br /> Dobré pro testování, nikoliv pro produkci<br /> kubectl proxy --disable-filter=true --address 0.0.0.0<br /> <br /> == Dashboards ==<br /> === Kubernetes dashboard ===<br /> * https://docs.k3s.io/installation/kube-dashboard<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml<br /> <br /> ==== Konfigurace service účtu ====<br /> ===== Dashboard RBAC Configuration =====<br /> ''dashboard.admin-user.yml''<br /> apiVersion: v1<br /> kind: ServiceAccount<br /> metadata:<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ''dashboard.admin-user-role.yml''<br /> apiVersion: rbac.authorization.k8s.io/v1<br /> kind: ClusterRoleBinding<br /> metadata:<br /> name: admin-user<br /> roleRef:<br /> apiGroup: rbac.authorization.k8s.io<br /> kind: ClusterRole<br /> name: cluster-admin<br /> subjects:<br /> - kind: ServiceAccount<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ===== Uplatnění =====<br /> sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml<br /> <br /> ===== Získání Beart tokenu =====<br /> sudo k3s kubectl -n kubernetes-dashboard create token admin-user<br /> <br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> <br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/VERZE/aio/deploy/recommended.yaml<br /> ''VERZE viz: https://github.com/kubernetes/dashboard''<br /> <br /> ==== URL API přes proxy ====<br /> http://IP_ADDRESS:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/.<br /> <br /> === Portainer ===<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns portainer<br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns portainer<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> <br /> == Konfigurace ==<br /> === Firewall ==<br /> https://docs.k3s.io/advanced#ubuntu</div> Filip http://blok.tydyt.cz/index.php?title=Kubernetes&diff=1882 Kubernetes 2023-07-30T16:34:09Z <p>Filip: /* Konfigurace */</p> <hr /> <div>== Instalace ==<br /> === K3S Server ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=&quot;644&quot; INSTALL_K3S_EXEC=&quot;--tls-san DOMAIN_NAME_SERVERU&quot; sh -<br /> <br /> <br /> <br /> '''K3S Server token:'''<br /> cat /var/lib/rancher/k3s/server/node-token<br /> <br /> === K3S Agent ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_URL=https://IP_K3S_SERVERU:6443 K3S_TOKEN=K3S_SERVER_TOKEN sh -<br /> ''IP_K3S_SERVERU odkazuje na k3s serveru kde se musí taky vzít K3S_SERVER_TOKEN''<br /> <br /> ==== Chyba s k3s.yaml ====<br /> Pokud se vyskytne tahle chyba, znamená to že nexistuje potřebný config pro připojení na K3S Server API<br /> E0729 12:28:41.362749 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.363353 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.364959 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.366636 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.368364 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> The connection to the server localhost:8080 was refused - did you specify the right host or port?<br /> <br /> Tento problém se vyřeší zkopírování configu z k3s serveru na daný k3s agenta<br /> sudo cat /etc/rancher/k3s/k3s.yaml<br /> <br /> Zde se přepíše jenom řádek se &quot;'''server: http://localhost:6443'''&quot; na IP_ADDRESSU/DOMAIN K3S_serveru a poté se to opět uloží na stejný místo<br /> sudo mkdir /etc/rancher/k3s<br /> sudo nano /etc/rancher/k3s/k3s.yaml<br /> <br /> Takhle vypadá konfig bez údaju ''k3s.yaml''<br /> apiVersion: v1<br /> clusters:<br /> - cluster:<br /> certificate-authority-data: BASE64_SERVER-CA.CRT<br /> server: https://IP_ADDRESSA:6443<br /> name: default<br /> contexts:<br /> - context:<br /> cluster: default<br /> user: default<br /> name: default<br /> current-context: default<br /> kind: Config<br /> preferences: {}<br /> users:<br /> - name: default<br /> user:<br /> client-certificate-data: BASE64_SERVER-CA.CRT<br /> client-key-data: BASE64_CLIENT-CA.CRT<br /> <br /> == Kubernetes proxy ==<br /> Dobré pro testování, nikoliv pro produkci<br /> kubectl proxy --disable-filter=true --address 0.0.0.0<br /> <br /> == Dashboards ==<br /> === Kubernetes dashboard ===<br /> * https://docs.k3s.io/installation/kube-dashboard<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml<br /> <br /> ==== Konfigurace service účtu ====<br /> ===== Dashboard RBAC Configuration =====<br /> ''dashboard.admin-user.yml''<br /> apiVersion: v1<br /> kind: ServiceAccount<br /> metadata:<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ''dashboard.admin-user-role.yml''<br /> apiVersion: rbac.authorization.k8s.io/v1<br /> kind: ClusterRoleBinding<br /> metadata:<br /> name: admin-user<br /> roleRef:<br /> apiGroup: rbac.authorization.k8s.io<br /> kind: ClusterRole<br /> name: cluster-admin<br /> subjects:<br /> - kind: ServiceAccount<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ===== Uplatnění =====<br /> sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml<br /> <br /> ===== Získání Beart tokenu =====<br /> sudo k3s kubectl -n kubernetes-dashboard create token admin-user<br /> <br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> <br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/VERZE/aio/deploy/recommended.yaml<br /> ''VERZE viz: https://github.com/kubernetes/dashboard''<br /> <br /> ==== URL API přes proxy ====<br /> http://IP_ADDRESS:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/.<br /> <br /> === Portainer ===<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns portainer<br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns portainer<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> <br /> == Konfigurace ==<br /> === Firewall ==<br /> https://docs.k3s.io/advanced#ubuntu</div> Filip http://blok.tydyt.cz/index.php?title=Filip&diff=1881 Filip 2023-07-30T15:59:24Z <p>Filip: /* Rozložení */</p> <hr /> <div>== Rozložení ==<br /> * [[ Linux ]]<br /> :- Basic stuff (Užitečný balíčky)<br /> :- Swap &amp; pip3<br /> :- ZSH, Neovim/NvChad, NNN<br /> * [[ Docker ]]<br /> :- Instalace<br /> :- Konfigurace socketu<br /> * [[ Nomad ]]<br /> :- Instalace<br /> :- Konfigurace HCL souboru<br /> * [[ Kubernetes ]] | [[ Kubernetes | K3S ]]<br /> :- Instalace<br /> :- Dashboard<br /> :- Konfigurace<br /> :- [[ WebServer | Trafiek a Ngninx]]</div> Filip http://blok.tydyt.cz/index.php?title=Kubernetes&diff=1880 Kubernetes 2023-07-30T15:24:14Z <p>Filip: /* K3S Server */</p> <hr /> <div>== Instalace ==<br /> === K3S Server ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=&quot;644&quot; INSTALL_K3S_EXEC=&quot;--tls-san DOMAIN_NAME_SERVERU&quot; sh -<br /> <br /> <br /> <br /> '''K3S Server token:'''<br /> cat /var/lib/rancher/k3s/server/node-token<br /> <br /> === K3S Agent ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_URL=https://IP_K3S_SERVERU:6443 K3S_TOKEN=K3S_SERVER_TOKEN sh -<br /> ''IP_K3S_SERVERU odkazuje na k3s serveru kde se musí taky vzít K3S_SERVER_TOKEN''<br /> <br /> ==== Chyba s k3s.yaml ====<br /> Pokud se vyskytne tahle chyba, znamená to že nexistuje potřebný config pro připojení na K3S Server API<br /> E0729 12:28:41.362749 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.363353 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.364959 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.366636 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.368364 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> The connection to the server localhost:8080 was refused - did you specify the right host or port?<br /> <br /> Tento problém se vyřeší zkopírování configu z k3s serveru na daný k3s agenta<br /> sudo cat /etc/rancher/k3s/k3s.yaml<br /> <br /> Zde se přepíše jenom řádek se &quot;'''server: http://localhost:6443'''&quot; na IP_ADDRESSU/DOMAIN K3S_serveru a poté se to opět uloží na stejný místo<br /> sudo mkdir /etc/rancher/k3s<br /> sudo nano /etc/rancher/k3s/k3s.yaml<br /> <br /> Takhle vypadá konfig bez údaju ''k3s.yaml''<br /> apiVersion: v1<br /> clusters:<br /> - cluster:<br /> certificate-authority-data: BASE64_SERVER-CA.CRT<br /> server: https://IP_ADDRESSA:6443<br /> name: default<br /> contexts:<br /> - context:<br /> cluster: default<br /> user: default<br /> name: default<br /> current-context: default<br /> kind: Config<br /> preferences: {}<br /> users:<br /> - name: default<br /> user:<br /> client-certificate-data: BASE64_SERVER-CA.CRT<br /> client-key-data: BASE64_CLIENT-CA.CRT<br /> <br /> == Kubernetes proxy ==<br /> Dobré pro testování, nikoliv pro produkci<br /> kubectl proxy --disable-filter=true --address 0.0.0.0<br /> <br /> == Dashboards ==<br /> === Kubernetes dashboard ===<br /> * https://docs.k3s.io/installation/kube-dashboard<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml<br /> <br /> ==== Konfigurace service účtu ====<br /> ===== Dashboard RBAC Configuration =====<br /> ''dashboard.admin-user.yml''<br /> apiVersion: v1<br /> kind: ServiceAccount<br /> metadata:<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ''dashboard.admin-user-role.yml''<br /> apiVersion: rbac.authorization.k8s.io/v1<br /> kind: ClusterRoleBinding<br /> metadata:<br /> name: admin-user<br /> roleRef:<br /> apiGroup: rbac.authorization.k8s.io<br /> kind: ClusterRole<br /> name: cluster-admin<br /> subjects:<br /> - kind: ServiceAccount<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ===== Uplatnění =====<br /> sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml<br /> <br /> ===== Získání Beart tokenu =====<br /> sudo k3s kubectl -n kubernetes-dashboard create token admin-user<br /> <br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> <br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/VERZE/aio/deploy/recommended.yaml<br /> ''VERZE viz: https://github.com/kubernetes/dashboard''<br /> <br /> ==== URL API přes proxy ====<br /> http://IP_ADDRESS:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/.<br /> <br /> === Portainer ===<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns portainer<br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns portainer<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> <br /> == Konfigurace ==</div> Filip http://blok.tydyt.cz/index.php?title=Kubernetes&diff=1879 Kubernetes 2023-07-29T11:31:00Z <p>Filip: /* Chyba s k3s.yaml */</p> <hr /> <div>== Instalace ==<br /> === K3S Server ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=&quot;644&quot; sh -<br /> <br /> '''K3S Server token:'''<br /> cat /var/lib/rancher/k3s/server/node-token<br /> <br /> === K3S Agent ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_URL=https://IP_K3S_SERVERU:6443 K3S_TOKEN=K3S_SERVER_TOKEN sh -<br /> ''IP_K3S_SERVERU odkazuje na k3s serveru kde se musí taky vzít K3S_SERVER_TOKEN''<br /> <br /> ==== Chyba s k3s.yaml ====<br /> Pokud se vyskytne tahle chyba, znamená to že nexistuje potřebný config pro připojení na K3S Server API<br /> E0729 12:28:41.362749 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.363353 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.364959 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.366636 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.368364 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> The connection to the server localhost:8080 was refused - did you specify the right host or port?<br /> <br /> Tento problém se vyřeší zkopírování configu z k3s serveru na daný k3s agenta<br /> sudo cat /etc/rancher/k3s/k3s.yaml<br /> <br /> Zde se přepíše jenom řádek se &quot;'''server: http://localhost:6443'''&quot; na IP_ADDRESSU/DOMAIN K3S_serveru a poté se to opět uloží na stejný místo<br /> sudo mkdir /etc/rancher/k3s<br /> sudo nano /etc/rancher/k3s/k3s.yaml<br /> <br /> Takhle vypadá konfig bez údaju ''k3s.yaml''<br /> apiVersion: v1<br /> clusters:<br /> - cluster:<br /> certificate-authority-data: BASE64_SERVER-CA.CRT<br /> server: https://IP_ADDRESSA:6443<br /> name: default<br /> contexts:<br /> - context:<br /> cluster: default<br /> user: default<br /> name: default<br /> current-context: default<br /> kind: Config<br /> preferences: {}<br /> users:<br /> - name: default<br /> user:<br /> client-certificate-data: BASE64_SERVER-CA.CRT<br /> client-key-data: BASE64_CLIENT-CA.CRT<br /> <br /> == Kubernetes proxy ==<br /> Dobré pro testování, nikoliv pro produkci<br /> kubectl proxy --disable-filter=true --address 0.0.0.0<br /> <br /> == Dashboards ==<br /> === Kubernetes dashboard ===<br /> * https://docs.k3s.io/installation/kube-dashboard<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml<br /> <br /> ==== Konfigurace service účtu ====<br /> ===== Dashboard RBAC Configuration =====<br /> ''dashboard.admin-user.yml''<br /> apiVersion: v1<br /> kind: ServiceAccount<br /> metadata:<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ''dashboard.admin-user-role.yml''<br /> apiVersion: rbac.authorization.k8s.io/v1<br /> kind: ClusterRoleBinding<br /> metadata:<br /> name: admin-user<br /> roleRef:<br /> apiGroup: rbac.authorization.k8s.io<br /> kind: ClusterRole<br /> name: cluster-admin<br /> subjects:<br /> - kind: ServiceAccount<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ===== Uplatnění =====<br /> sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml<br /> <br /> ===== Získání Beart tokenu =====<br /> sudo k3s kubectl -n kubernetes-dashboard create token admin-user<br /> <br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> <br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/VERZE/aio/deploy/recommended.yaml<br /> ''VERZE viz: https://github.com/kubernetes/dashboard''<br /> <br /> ==== URL API přes proxy ====<br /> http://IP_ADDRESS:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/.<br /> <br /> === Portainer ===<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns portainer<br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns portainer<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> <br /> == Konfigurace ==</div> Filip http://blok.tydyt.cz/index.php?title=Kubernetes&diff=1878 Kubernetes 2023-07-29T11:24:06Z <p>Filip: /* Instalace */</p> <hr /> <div>== Instalace ==<br /> === K3S Server ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=&quot;644&quot; sh -<br /> <br /> '''K3S Server token:'''<br /> cat /var/lib/rancher/k3s/server/node-token<br /> <br /> === K3S Agent ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_URL=https://IP_K3S_SERVERU:6443 K3S_TOKEN=K3S_SERVER_TOKEN sh -<br /> ''IP_K3S_SERVERU odkazuje na k3s serveru kde se musí taky vzít K3S_SERVER_TOKEN''<br /> <br /> ==== Chyba s k3s.yaml ====<br /> Pokud se vyskytne tahle chyba, znamená to že nexistuje potřebný config pro připojení na K3S Server API<br /> E0729 12:28:41.362749 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.363353 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.364959 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.366636 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> E0729 12:28:41.368364 136411 memcache.go:265] couldn't get current server API group list: Get &quot;http://localhost:8080/api?timeout=32s&quot;: dial tcp [::1]:8080: connect: connection refused<br /> The connection to the server localhost:8080 was refused - did you specify the right host or port?<br /> <br /> Tento problém se vyřeší zkopírování configu z k3s serveru na daný k3s agenta<br /> sudo cat /etc/rancher/k3s/k3s.yaml<br /> <br /> Zde se přepíše jenom řádek se &quot;'''server: http://localhost:6443'''&quot; na IP_ADDRESSU/DOMAIN K3S_serveru a poté se to opět uloží na stejný místo<br /> sudo nano /etc/rancher/k3s/k3s.yaml<br /> <br /> Takhle vypadá konfig bez údaju ''k3s.yaml''<br /> apiVersion: v1<br /> clusters:<br /> - cluster:<br /> certificate-authority-data: BASE64_SERVER-CA.CRT<br /> server: https://IP_ADDRESSA:6443<br /> name: default<br /> contexts:<br /> - context:<br /> cluster: default<br /> user: default<br /> name: default<br /> current-context: default<br /> kind: Config<br /> preferences: {}<br /> users:<br /> - name: default<br /> user:<br /> client-certificate-data: BASE64_SERVER-CA.CRT<br /> client-key-data: BASE64_CLIENT-CA.CRT<br /> <br /> == Kubernetes proxy ==<br /> Dobré pro testování, nikoliv pro produkci<br /> kubectl proxy --disable-filter=true --address 0.0.0.0<br /> <br /> == Dashboards ==<br /> === Kubernetes dashboard ===<br /> * https://docs.k3s.io/installation/kube-dashboard<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml<br /> <br /> ==== Konfigurace service účtu ====<br /> ===== Dashboard RBAC Configuration =====<br /> ''dashboard.admin-user.yml''<br /> apiVersion: v1<br /> kind: ServiceAccount<br /> metadata:<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ''dashboard.admin-user-role.yml''<br /> apiVersion: rbac.authorization.k8s.io/v1<br /> kind: ClusterRoleBinding<br /> metadata:<br /> name: admin-user<br /> roleRef:<br /> apiGroup: rbac.authorization.k8s.io<br /> kind: ClusterRole<br /> name: cluster-admin<br /> subjects:<br /> - kind: ServiceAccount<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ===== Uplatnění =====<br /> sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml<br /> <br /> ===== Získání Beart tokenu =====<br /> sudo k3s kubectl -n kubernetes-dashboard create token admin-user<br /> <br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> <br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/VERZE/aio/deploy/recommended.yaml<br /> ''VERZE viz: https://github.com/kubernetes/dashboard''<br /> <br /> ==== URL API přes proxy ====<br /> http://IP_ADDRESS:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/.<br /> <br /> === Portainer ===<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns portainer<br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns portainer<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> <br /> == Konfigurace ==</div> Filip http://blok.tydyt.cz/index.php?title=Kubernetes&diff=1877 Kubernetes 2023-07-29T10:26:37Z <p>Filip: </p> <hr /> <div>== Instalace ==<br /> === K3S Server ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=&quot;644&quot; sh -<br /> <br /> '''K3S Server token:'''<br /> cat /var/lib/rancher/k3s/server/node-token<br /> <br /> === K3S Agent ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_URL=https://IP_K3S_SERVERU:6443 K3S_TOKEN=K3S_SERVER_TOKEN sh -<br /> ''IP_K3S_SERVERU odkazuje na k3s serveru kde se musí taky vzít K3S_SERVER_TOKEN''<br /> <br /> == Kubernetes proxy ==<br /> Dobré pro testování, nikoliv pro produkci<br /> kubectl proxy --disable-filter=true --address 0.0.0.0<br /> <br /> == Dashboards ==<br /> === Kubernetes dashboard ===<br /> * https://docs.k3s.io/installation/kube-dashboard<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml<br /> <br /> ==== Konfigurace service účtu ====<br /> ===== Dashboard RBAC Configuration =====<br /> ''dashboard.admin-user.yml''<br /> apiVersion: v1<br /> kind: ServiceAccount<br /> metadata:<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ''dashboard.admin-user-role.yml''<br /> apiVersion: rbac.authorization.k8s.io/v1<br /> kind: ClusterRoleBinding<br /> metadata:<br /> name: admin-user<br /> roleRef:<br /> apiGroup: rbac.authorization.k8s.io<br /> kind: ClusterRole<br /> name: cluster-admin<br /> subjects:<br /> - kind: ServiceAccount<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ===== Uplatnění =====<br /> sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml<br /> <br /> ===== Získání Beart tokenu =====<br /> sudo k3s kubectl -n kubernetes-dashboard create token admin-user<br /> <br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> <br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/VERZE/aio/deploy/recommended.yaml<br /> ''VERZE viz: https://github.com/kubernetes/dashboard''<br /> <br /> ==== URL API přes proxy ====<br /> http://IP_ADDRESS:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/.<br /> <br /> === Portainer ===<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns portainer<br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns portainer<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> <br /> == Konfigurace ==</div> Filip http://blok.tydyt.cz/index.php?title=Kubernetes&diff=1876 Kubernetes 2023-07-29T10:24:48Z <p>Filip: </p> <hr /> <div>== Instalace ==<br /> === K3S Server ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=&quot;644&quot; sh -<br /> <br /> '''K3S Server token:'''<br /> cat /var/lib/rancher/k3s/server/node-token<br /> <br /> === K3S Agent ===<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_URL=https://IP_K3S_SERVERU:6443 K3S_TOKEN=K3S_SERVER_TOKEN sh -<br /> ''IP_K3S_SERVERU odkazuje na k3s serveru kde se musí taky vzít K3S_SERVER_TOKEN''<br /> <br /> === Kubernetes proxy ===<br /> Dobré pro testování, nikoliv pro produkci<br /> kubectl proxy --disable-filter=true --address 0.0.0.0<br /> <br /> == Dashboards ==<br /> === Kubernetes dashboard ===<br /> * https://docs.k3s.io/installation/kube-dashboard<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml<br /> <br /> ==== Konfigurace service účtu ====<br /> ===== Dashboard RBAC Configuration =====<br /> ''dashboard.admin-user.yml''<br /> apiVersion: v1<br /> kind: ServiceAccount<br /> metadata:<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ''dashboard.admin-user-role.yml''<br /> apiVersion: rbac.authorization.k8s.io/v1<br /> kind: ClusterRoleBinding<br /> metadata:<br /> name: admin-user<br /> roleRef:<br /> apiGroup: rbac.authorization.k8s.io<br /> kind: ClusterRole<br /> name: cluster-admin<br /> subjects:<br /> - kind: ServiceAccount<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> ===== Uplatnění =====<br /> sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml<br /> <br /> ===== Získání Beart tokenu =====<br /> sudo k3s kubectl -n kubernetes-dashboard create token admin-user<br /> <br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> <br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/VERZE/aio/deploy/recommended.yaml<br /> ''VERZE viz. https://github.com/kubernetes/dashboard''<br /> <br /> ==== URL API přes proxy ====<br /> http://IP_ADDRESS:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/.<br /> <br /> === Portainer ===<br /> ==== Instalace ====<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> ==== Smazání ====<br /> sudo k3s kubectl delete ns portainer<br /> ==== Upgrade ====<br /> sudo k3s kubectl delete ns portainer<br /> sudo k3s kubectl apply -n portainer -f https://raw.githubusercontent.com/portainer/k8s/master/deploy/manifests/portainer/portainer.yaml<br /> <br /> == Konfigurace ==</div> Filip http://blok.tydyt.cz/index.php?title=Kubernetes&diff=1875 Kubernetes 2023-07-29T10:01:09Z <p>Filip: </p> <hr /> <div>== Instalace ==<br /> <br /> K3S server:<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=&quot;644&quot; sh -<br /> <br /> K3S server token:<br /> cat /var/lib/rancher/k3s/server/node-token<br /> <br /> K3S Agent:<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_URL=https://IP_K3S_SERVERU:6443 K3S_TOKEN=TOKEN_K3S_SERVERU sh -<br /> <br /> == Konfigurace ==<br /> kubernetes proxy:<br /> kubectl proxy --disable-filter=true --address IP_ADDRESA<br /> <br /> === Dashboard ===<br /> ==== Kubernetes dashboard ====<br /> Instalace:<br /> kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml<br /> <br /> Dashboard RBAC Configuration:<br /> ''dashboard.admin-user.yml''<br /> apiVersion: v1<br /> kind: ServiceAccount<br /> metadata:<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> ''dashboard.admin-user-role.yml''<br /> apiVersion: rbac.authorization.k8s.io/v1<br /> kind: ClusterRoleBinding<br /> metadata:<br /> name: admin-user<br /> roleRef:<br /> apiGroup: rbac.authorization.k8s.io<br /> kind: ClusterRole<br /> name: cluster-admin<br /> subjects:<br /> - kind: ServiceAccount<br /> name: admin-user<br /> namespace: kubernetes-dashboard<br /> <br /> sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml<br /> <br /> sudo k3s kubectl -n kubernetes-dashboard create token admin-user<br /> <br /> sudo k3s kubectl delete ns kubernetes-dashboard<br /> <br /> <br /> UI URL: http://IP_ADDRESS:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/.<br /> <br /> * https://docs.k3s.io/installation/kube-dashboard</div> Filip http://blok.tydyt.cz/index.php?title=Kubernetes&diff=1874 Kubernetes 2023-07-29T01:25:12Z <p>Filip: </p> <hr /> <div>== Instalace ==<br /> <br /> K3S server:<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=&quot;644&quot; sh -<br /> <br /> K3S server token:<br /> cat /var/lib/rancher/k3s/server/node-token<br /> <br /> K3S Agent:<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_URL=https://IP_K3S_SERVERU:6443 K3S_TOKEN=TOKEN_K3S_SERVERU sh -<br /> <br /> == Konfigurace ==<br /> kubernetes proxy:<br /> kubectl proxy --disable-filter=true --address IP_ADDRESA</div> Filip http://blok.tydyt.cz/index.php?title=Kubernetes&diff=1873 Kubernetes 2023-07-25T22:34:59Z <p>Filip: Založena nová stránka s textem „== Instalace == K3S server: sudo su - curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=&quot;644&quot; sh - K3S server token: cat /var/lib/rancher/k3s/server/…“</p> <hr /> <div>== Instalace ==<br /> <br /> K3S server:<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=&quot;644&quot; sh -<br /> <br /> K3S server token:<br /> cat /var/lib/rancher/k3s/server/node-token<br /> <br /> K3S Agent:<br /> sudo su -<br /> curl -sfL https://get.k3s.io | K3S_URL=https://IP_K3S_SERVERU:6443 K3S_TOKEN=TOKEN_K3S_SERVERU sh -</div> Filip http://blok.tydyt.cz/index.php?title=Nomad&diff=1872 Nomad 2023-07-25T21:41:33Z <p>Filip: </p> <hr /> <div>== Instalace ==<br /> sudo apt-get update &amp;&amp; \ sudo apt-get install wget gpg coreutils<br /> wget -O- https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg<br /> sudo apt-get update &amp;&amp; sudo apt-get install nomad<br /> <br /> * https://developer.hashicorp.com/nomad/docs/install<br /> <br /> == CNI Pluginy ==<br /> curl -L -o cni-plugins.tgz &quot;https://github.com/containernetworking/plugins/releases/download/v1.2.0/cni-plugins-linux-$( [ $(uname -m) = aarch64 ] &amp;&amp; echo arm64 || echo amd64)&quot;-v1.2.0.tgz &amp;&amp; \<br /> sudo mkdir -p /opt/cni/bin &amp;&amp; \<br /> sudo tar -C /opt/cni/bin -xzf cni-plugins.tgz<br /> <br /> * https://developer.hashicorp.com/nomad/docs/install#post-installation-steps<br /> <br /> == Konfigurační hcl soubor ==<br /> mkdir /var/log/nomad<br /> <br /> # Full configuration options can be found at https://www.nomadproject.io/docs/configuration<br /> <br /> bind_addr = &quot;0.0.0.0&quot;<br /> data_dir = &quot;/opt/nomad/data&quot;<br /> datacenter = &quot;NAZEV_TOHO_SERVER&quot; <br /> <br /> enable_syslog = true<br /> log_level = &quot;INFO&quot;<br /> log_file = &quot;/var/log/nomad/&quot;<br /> <br /> advertise {<br /> http = &quot;&lt;nowiki&gt;{{GetInterfaceIP \&quot;ens192\&quot;}}&lt;/nowiki&gt;&quot;<br /> rpc = &quot;&lt;nowiki&gt;{{GetInterfaceIP \&quot;ens192\&quot;}}&lt;/nowiki&gt;&quot;<br /> serf = &quot;&lt;nowiki&gt;{{GetInterfaceIP \&quot;ens192\&quot;}}&lt;/nowiki&gt;&quot;<br /> }<br /> <br /> server {<br /> enabled = true<br /> bootstrap_expect = 2<br /> server_join {<br /> retry_join = [ &quot;IP_ADDRESA_JEDNOHO_SERVER&quot;, &quot;IP_ADDRESA_DRUHEHO_SERVER&quot; ]<br /> retry_interval = &quot;15s&quot;<br /> }<br /> }<br /> <br /> client {<br /> enabled = true<br /> servers = [ &quot;localhost&quot; ]<br /> cni_path = &quot;/opt/cni/bin&quot;<br /> }<br /> <br /> plugin &quot;raw_exec&quot; {<br /> config {<br /> enabled = true<br /> }<br /> }<br /> <br /> plugin &quot;docker&quot; {<br /> config {<br /> gc {<br /> dangling_containers {<br /> enabled = false<br /> }<br /> }<br /> }<br /> }<br /> <br /> * https://blog.pavelsklenar.com/two-node-nomad-cluster/<br /> * https://thekevinwang.com/2022/11/20/nomad-cluster/<br /> <br /> == Restartování ==<br /> systemctl enable nomad<br /> systemctl restart nomad<br /> <br /> == Odkazy ==<br /> * https://traefik.io/blog/traefik-proxy-fully-integrates-with-hashicorp-nomad/<br /> * https://developer.hashicorp.com/nomad/tutorials/load-balancing/load-balancing-traefik<br /> * https://www.larrymyers.com/posts/nomad-and-traefik/<br /> * https://developer.hashicorp.com/nomad/docs/job-specification</div> Filip http://blok.tydyt.cz/index.php?title=Filip&diff=1871 Filip 2023-07-25T21:39:46Z <p>Filip: /* Rozložení */</p> <hr /> <div>== Rozložení ==<br /> * [[ Linux ]]<br /> :- Basic stuff (Užitečný balíčky)<br /> :- Swap &amp; pip3<br /> :- ZSH, Neovim/NvChad, NNN<br /> * [[ Docker ]]<br /> :- Instalace<br /> :- Konfigurace socketu<br /> * [[ Nomad ]]<br /> :- Instalace<br /> :- Konfigurace HCL souboru<br /> * [[ Kubernetes ]] | [[ Kubernetes | K3S ]]<br /> :- Instalace<br /> :- Konfigurace jobs</div> Filip http://blok.tydyt.cz/index.php?title=Filip&diff=1870 Filip 2023-07-25T21:39:08Z <p>Filip: /* Rozložení */</p> <hr /> <div>== Rozložení ==<br /> * [[ Linux ]]<br /> :- Basic stuff (Užitečný balíčky)<br /> :- Swap &amp; pip3<br /> :- ZSH, Neovim/NvChad, NNN<br /> * [[ Docker ]]<br /> :- Instalace<br /> :- Konfigurace socketu<br /> * [[ Nomad ]]<br /> :- Instalace<br /> :- Konfigurace HCL souboru<br /> * [[ Kubernetes | K3S ]]<br /> :- Instalace<br /> :- Konfigurace jobs</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=1869 Linux 2023-07-25T21:31:55Z <p>Filip: /* NeoVim/NvChad */</p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools open-vm-tools<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-freshclam clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> ufw allow ssh<br /> ufw enable<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Vypnutí swap ==<br /> Vypnutí swap kvůli virtualizace kontejnerů<br /> sudo swapoff -a; sudo swapon -a<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli nvém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> curl -JLO https://github.com/neovim/neovim/releases/download/stable/nvim.appimage<br /> <br /> sudo chown root:root nvim.appimage<br /> sudo chmod 755 nvim.appimage<br /> sudo mv nvim.appimage /usr/bin/nvim<br /> <br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> * https://nvchad.com/docs/features<br /> <br /> * https://nvchad.com/docs/config/format_lint<br /> * https://github.com/NvChad/NvChad<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=1868 Linux 2023-07-25T17:27:26Z <p>Filip: </p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools open-vm-tools<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-freshclam clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> ufw allow ssh<br /> ufw enable<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Vypnutí swap ==<br /> Vypnutí swap kvůli virtualizace kontejnerů<br /> sudo swapoff -a; sudo swapon -a<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli nvém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> curl -JLO https://github.com/neovim/neovim/releases/download/stable/nvim.appimage<br /> <br /> sudo chown root:root nvim.appimage<br /> sudo chmod 755 nvim.appimage<br /> sudo mv nvim.appimage /usr/bin/nvim<br /> <br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> <br /> * https://nvchad.com/docs/config/format_lint<br /> * https://github.com/NvChad/NvChad<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn<br /> * https://www.youtube.com/watch?v=-knZwdd1ScU&amp;t=353s<br /> * https://github.com/jarun/nnn/tree/master/plugins#installation<br /> * https://github.com/jarun/nnn/wiki/Usage#configuration<br /> * https://github.com/jarun/nnn/wiki/Troubleshooting#tmux-configuration<br /> * https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-cd-on-quit<br /> * https://github.com/jarun/nnn/wiki/Live-previews<br /> * https://github.com/luukvbaal/nnn.nvim</div> Filip http://blok.tydyt.cz/index.php?title=Linux&diff=1867 Linux 2023-07-25T17:25:08Z <p>Filip: /* NeoVim/NvChad */</p> <hr /> <div>== První nastavení serveru ==<br /> === Základní balíčky ===<br /> sudo apt update<br /> sudo apt install htop ssh sudo wget curl git net-tools open-vm-tools<br /> <br /> === Firewall &amp; antivirus ===<br /> sudo apt update<br /> sudo apt install clamav clamav-freshclam clamav-daemon ufw<br /> <br /> Povolení SSH portu pro ufw<br /> ufw allow ssh<br /> ufw enable<br /> <br /> * https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall<br /> <br /> == Balíčky pro usnadnění práce ==<br /> sudo apt update<br /> sudo apt install fzf ncdu dos2unix<br /> <br /> * '''fzf''' - Fuzzy finder better find<br /> * '''ncdu''' - NCurses disk usage better du<br /> * '''dos2unix''' - Smaže divný '''^M''' ze souboru<br /> <br /> * '''ll''' - Je to ls -l, musí se vytvořit alias<br /> <br /> == Vypnutí swap ==<br /> Vypnutí swap kvůli virtualizace kontejnerů<br /> sudo swapoff -a; sudo swapon -a<br /> <br /> == Instalace pip3 ==<br /> sudo apt update<br /> sudo apt install python3-pip<br /> <br /> == TUI &amp; CLI ==<br /> === ZSH ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install zsh<br /> <br /> Pro přenastavení BASH na ZSH pro účet<br /> sh -c &quot;$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)&quot;<br /> <br /> ==== Pluginy a vzhled ====<br /> ===== Stáhnutí =====<br /> Stáhnutí theme a plugins<br /> git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k<br /> git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions<br /> git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting<br /> <br /> ===== Konfigurace =====<br /> Propojení theme a plugins v configu '''.zshrc'''<br /> ZSH_THEME=&quot;powerlevel10k/powerlevel10k&quot;<br /> plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)<br /> <br /> ==== Problém s mc ====<br /> MC blbné s zsh kvůli nvém shellu, načítá se dlouho, tohle jde vyřešit aliasem v '''.zshrc'''<br /> Další možnost je použít NNN<br /> * viz: https://graffino.com/til/ZLcOA4Zcaq-fix-slow-loading-or-freezing-midnight-commander-mc-with-zsh<br /> <br /> alias mc=&quot;mc --nosubshell&quot;<br /> <br /> === NeoVim/NvChad ===<br /> ==== Instalace ====<br /> curl -JLO https://github.com/neovim/neovim/releases/download/stable/nvim.appimage<br /> <br /> sudo chown root:root nvim.appimage<br /> sudo chmod 755 nvim.appimage<br /> sudo mv nvim.appimage /usr/bin/nvim<br /> <br /> git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 &amp;&amp; nvim<br /> <br /> <br /> * https://nvchad.com/docs/config/format_lint<br /> * https://github.com/NvChad/NvChad<br /> * https://docs.rockylinux.org/books/nvchad/install_nvchad/<br /> <br /> === NNN ===<br /> === NNN ===<br /> ==== Instalace ====<br /> sudo apt update<br /> sudo apt install nnn<br /> <br /> Pro plugin preview-tui potřebujeme '''tmux'''<br /> sudo apt install tmux<br /> <br /> Pro aktualizaci/stažení pluginu:<br /> sh -c &quot;$(curl -Ls https://raw.githubusercontent.com/jarun/nnn/master/plugins/getplugs)&quot;<br /> <br /> * https://github.com/jarun/nnn</div> Filip