问题[debian-wheezy](server)

我正在尝试为某些开发设置 Dockerized Wheezy，而生产服务器仍然使用这个旧的、未维护的 Debian 版本。

我遇到的主要问题是检查官方存档存储库的 GPG 签名。

从官方 docker 镜像开始，将 /etc/apt/sources.list 替换为

deb http://archive.debian.org/debian wheezy main

如果我尝试apt-get update我会得到结果：

W: GPG error: http://archive.debian.org wheezy Release: The following signatures were invalid: KEYEXPIRED 1587841717 KEYEXPIRED 1668891673 KEYEXPIRED 1557241909

检查 GPG 密钥apt-key list | grep expired

gpg: /etc/apt//trustdb.gpg: trustdb created
pub   4096R/2B90D010 2014-11-21 [expired: 2022-11-19]
pub   4096R/C857C906 2014-11-21 [expired: 2022-11-19]
pub   4096R/518E17E1 2013-08-17 [expired: 2021-08-15]
pub   4096R/473041FA 2010-08-27 [expired: 2018-03-05]
pub   4096R/B98321F9 2010-08-07 [expired: 2017-08-05]
pub   4096R/46925553 2012-04-27 [expired: 2020-04-25]
pub   4096R/65FFB764 2012-05-08 [expired: 2019-05-07]

所以我更新了其中的大部分apt-key adv --recv-keys --keyserver keyserver.ubuntu.com $(apt-key list | grep expired | sed -E 's=[^/]+/([^ ]+).*=\1=g' | tr '\n' ' ')，但仍然从 apt-key 列表中得到了这个结果：

pub   4096R/518E17E1 2013-08-17 [expired: 2021-08-15]
pub   4096R/B98321F9 2010-08-07 [expired: 2017-08-05]
pub   4096R/65FFB764 2012-05-08 [expired: 2019-05-07]

现在打电话apt-get update给W: GPG error: http://archive.debian.org wheezy Release: The following signatures were invalid: KEYEXPIRED 1587841717 KEYEXPIRED 1587841717 KEYEXPIRED 1587841717 KEYEXPIRED 1587841717 KEYEXPIRED 1587841717 KEYEXPIRED 1668891673 KEYEXPIRED 1557241909

然后我尝试获取官方的 debian keyring deb 但看起来无法安装

dpkg -i /tmp/debian-archive-keyring_2023.4_all.deb 
dpkg-deb: error: archive '/tmp/debian-archive-keyring_2023.4_all.deb' contains not understood data member control.tar.xz, giving up
dpkg: error processing /tmp/debian-archive-keyring_2023.4_all.deb (--install):
subprocess dpkg-deb --control returned error exit status 2
Errors were encountered while processing:
  /tmp/debian-archive-keyring_2023.4_all.deb

apt-get --allow-unauthenticated update不起作用，将 source.list 文件内容替换为

deb [trusted=yes] http://archive.debian.org/debian wheezy main

那么有没有办法更新这些 GPG 密钥或使其不检查它们？

如果您有可用的 docker，那么遇到该问题的最简单方法是：

>docker run -it debian:7.11 bash
root@f391e03326c6:/# echo "deb http://archive.debian.org/debian wheezy main" > /etc/apt/sources.list
root@f391e03326c6:/# apt-get update --allow-unauthenticated

我有一个 cisco ftd 发送带有 local3(19) 标记的日志，但是我仍然看到一些消息最终出现在我的 users.log 中，而不是我将它们配置为发送的位置。如果不加标签，他们会到哪里去？或者有没有办法验证他们被标记为“用户”或设施代码 1？我没有在我的 rsyslog.conf 中注释掉用户。（Debian wheezy，rsyslog v5）

root@PHOENILOGOP2:/etc# more rsyslog.conf
#  /etc/rsyslog.conf    Configuration file for rsyslog.
#
#                       For more information see
#                       /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html


########################
### TROUBLESHOOTING ####
########################

$template myFormat,"%rawmsg%\n"
$ActionFileDefaultTemplate myFormat


#################
#### MODULES #### 
#################

$ModLoad imuxsock # provides support for local system logging
$ModLoad imklog   # provides kernel logging support
#$ModLoad immark  # provides --MARK-- message capability

# provides UDP syslog reception
$ModLoad imudp
$UDPServerRun 514

# provides TCP syslog reception
$ModLoad imtcp
$InputTCPServerRun 514



###########################
#### GLOBAL DIRECTIVES ####
###########################

#
# Use traditional timestamp format.
# To enable high precision timestamps, comment out the following line.
#
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat

#
# Set the default permissions for all log files.
#
$FileOwner root
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022

#
# Where to place spool and state files
#
$WorkDirectory /var/spool/rsyslog

#
# Include all config files in /etc/rsyslog.d/
#
$IncludeConfig /etc/rsyslog.d/*.conf


###############
#### RULES ####
###############
$template Firewall,"/var/log/prd/fwlog-%$YEAR%-%$MONTH%-%$DAY%"
$template Switch,"/var/log/prd/rslog-%$YEAR%-%$MONTH%-%$DAY%"
$template Ironport,"/var/log/prd/iplog-%$YEAR%-%$MONTH%-%$DAY%"
# $template ACS,"/var/log/prd/acslog-%$YEAR%-%$MONTH%-%$DAY%"
$template FTD,"/var/log/prd/ftdlog-%$YEAR%-%$MONTH%-%$DAY%"
$template ISE,"/var/log/prd/iselog-%$YEAR%-%$MONTH%-%$DAY%
$template Meraki,"/var/log/prd/merakilog-%$YEAR%-%$MONTH%-%$DAY%
# $template Umbrella,"/var/log/prd/umbrellalog-%$YEAR%-%$MONTH%-%$DAY%"

#
# First some standard log files.  Log by facility.
#
Local7.* -?Firewall
# Local6.* -?Ironport
Local5.* -?Meraki
Local4.* -?Switch
Local3.* -?FTD
Local2.* -?ISE
# Local1.* -?Umbrella

auth,authpriv.*                 /var/log/auth.log
#*.*;auth,authpriv.none         -/var/log/syslog
#cron.*                         /var/log/cron.log
#daemon.*                       -/var/log/daemon.log
kern.*                          -/var/log/kern.log
#lpr.*                          -/var/log/lpr.log
#mail.*                         -/var/log/mail.log
user.*                          -/var/log/user.log;myFormat

#
# Logging for the mail system.  Split it up so that
# it is easy to write scripts to parse these files.
#
#mail.info                      -/var/log/mail.info
#mail.warn                      -/var/log/mail.warn
#mail.err                       /var/log/mail.err

#
# Logging for INN news system.
#
#news.crit                      /var/log/news/news.crit
#news.err                       /var/log/news/news.err
#news.notice                    -/var/log/news/news.notice
#
#
# Some "catch-all" log files.
#
#*.=debug;\
#       auth,authpriv.none;\
#       news.none;mail.none     -/var/log/debug
#*.=info;*.=notice;*.=warn;\
#       auth,authpriv.none;\
#       cron,daemon.none;\
#       mail,news.none          -/var/log/messages
#
#
# Emergencies are sent to everybody logged in.
#
*.emerg                         :omusrmsg:*
#
#
# I like to have messages displayed on the console, but only on a virtual
# console I usually leave idle.
#
#daemon,mail.*;\
#       news.=crit;news.=err;news.=notice;\
#       *.=debug;*.=info;\
#       *.=notice;*.=warn       /dev/tty8
#
# The named pipe /dev/xconsole is for the `xconsole' utility.  To use it,
# you must invoke `xconsole' with the `-file' option:
# 
#    $ xconsole -file /dev/xconsole [...]
#
# NOTE: adjust the list below, or you'll go crazy if you have a reasonably
#      busy site..
#
#daemon.*;mail.*;\
#       news.err;\
#       *.=debug;*.=info;\
#       *.=notice;*.=warn       |/dev/xconsole



root@PHOENILOGOP2:/etc# service --status-all
 [ + ]  acpid
 [ + ]  atd
 [ - ]  bootlogs
 [ ? ]  bootmisc.sh
 [ ? ]  checkfs.sh
 [ ? ]  checkroot-bootclean.sh
 [ - ]  checkroot.sh
 [ - ]  console-setup
 [ + ]  cron
 [ - ]  exim4
 [ - ]  hostname.sh
 [ ? ]  hwclock.sh
 [ - ]  kbd
 [ - ]  keyboard-setup
 [ ? ]  killprocs
 [ ? ]  kmod
 [ - ]  lvm2
 [ - ]  motd
 [ ? ]  mountall-bootclean.sh
 [ ? ]  mountall.sh
 [ ? ]  mountdevsubfs.sh
 [ ? ]  mountkernfs.sh
 [ ? ]  mountnfs-bootclean.sh
 [ ? ]  mountnfs.sh
 [ ? ]  mpt-statusd
 [ ? ]  mtab.sh
 [ ? ]  networking
 [ + ]  nfs-common
 [ ? ]  open-vm-tools
 [ - ]  procps
 [ ? ]  rc.local
 [ - ]  rmnologin
 [ + ]  rpcbind
 [ + ]  rsyslog
 [ ? ]  sendsigs
 [ + ]  ssh
 [ - ]  sudo
 [ + ]  tftpd-hpa
 [ + ]  udev
 [ ? ]  udev-mtab
 [ ? ]  umountfs
 [ ? ]  umountnfs.sh
 [ ? ]  umountroot
 [ - ]  urandom


user.log example(should be tagged Local3(Facility 19) but is actually being tagged Local7(Facility 23), which doesn't explain why it is in user.log(Facility 1):
Aug 13 2020 13:21:23 TPK-COMCAST-FTD-01  %FTD-6-430003: EventPriority: Low, DeviceUUID: <DeviceUUID obsfucation), InstanceID: 3, FirstPacketSecond: 2020-08-13T13:21:23Z, ConnectionID: 6910, AccessControlRuleAction: Allow, SrcIP: 192.168.91.252, DstIP: 208.67.220.220, SrcPort: 40311, DstPort: 53, Protocol: udp, IngressInterface: TPK-COMCAST-INSIDE, EgressInterface: TPK-COMCAST-OUTSIDE, IngressZone: TPK-COMCAST-INSIDE, EgressZone: TPK-COMCAST-OUTSIDE, IngressVRF: Global, EgressVRF: Global, ACPolicy: TPK-COMCAST-FTD-ACCESS-POLICY, AccessControlRuleName: Umbrella VA DNS Outbound, Prefilter Policy: Default Prefilter Policy, Client: DNS client, ApplicationProtocol: DNS, ConnectionDuration: 0, InitiatorPackets: 1, ResponderPackets: 1, InitiatorBytes: 127, ResponderBytes: 101, NAPPolicy: Balanced Security and Connectivity, DNSQuery: kdp.amazon.com, DNSRecordType: a host address, DNSResponseType: No Error, DNS_TTL: 24

我有点苦恼。我试图升级一个 chroot 的环境，似乎我在这个过程中破坏了 dpkg。

我不知道问题的原因是 apt-get 无法处理 qmail 升级还是其他原因（似乎 snmpd 在上一轮也没有“完成”）。

我认为我要解决的错误是：

E: Sub-process /usr/bin/dpkg returned an error code (1)

看来我有一个非常旧的 qmail 版本，升级到我的 apt 镜像中的那个改变太大了。我用谷歌搜索过，还没有找到 1.03-38 和 1.06-5 之间的任何东西。

（删除了几行并在格式上苦苦挣扎）

# apt-get install qmail

The following extra packages will be installed:
  qmail-run qmail-uids-gids
Suggested packages:
  dot-forward qmail-tools
The following NEW packages will be installed:
  qmail-run qmail-uids-gids
The following packages will be upgraded:
  qmail
1 upgraded, 2 newly installed, 0 to remove and 1 not upgraded.
107 not fully installed or removed.

Do you want to continue [Y/n]?
Get:1 http://10.105.176.67/debian/ wheezy/main snmpd i386 5.4.3~dfsg-2.8+deb7u1 [964 kB]
Fetched 964 kB in 0s (6,685 kB/s)
Can not write log, openpty() failed (/dev/pts not mounted?)
(Reading database ... 1852018 files and directories currently installed.)
Preparing to replace qmail 1.03-38 (using .../archives/qmail_1.06-5_i386.deb) ...
Upgrading from qmail version 1.03-38 is not yet supported.
dpkg: error processing /var/cache/apt/archives/qmail_1.06-5_i386.deb (--unpack):
 subprocess new pre-installation script returned error exit status 1
rmdir: failed to remove `/var/lib/qmail': Directory not empty
insserv: warning: script 'K01qmail' missing LSB tags and overrides
insserv: warning: script 'qmail' missing LSB tags and overrides
dpkg: regarding .../qmail-uids-gids_1.06-5_all.deb containing qmail-uids-gids:
 qmail conflicts with qmail-uids-gids
  qmail-uids-gids (version 1.06-5) is to be installed.

dpkg: error processing /var/cache/apt/archives/qmail-uids-gids_1.06-5_all.deb (--unpack):
 conflicting packages - not installing qmail-uids-gids
dpkg: regarding .../qmail-run_2.0.2_all.deb containing qmail-run:
 qmail-run conflicts with mail-transport-agent
  qmail provides mail-transport-agent and is present and installed.

dpkg: error processing /var/cache/apt/archives/qmail-run_2.0.2_all.deb (--unpack):
 conflicting packages - not installing qmail-run
Errors were encountered while processing:
 /var/cache/apt/archives/qmail_1.06-5_i386.deb
 /var/cache/apt/archives/qmail-uids-gids_1.06-5_all.deb
 /var/cache/apt/archives/qmail-run_2.0.2_all.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)

很抱歉打扰你。我实际上对我的服务器配置失去了理智。

更多信息：我有一个来自 Kimsufi (OVH-lowcost:D) 的专用服务器，带有 Debian 7.1，还有一些来自 OVH 的域名。我正在使用 BIND9 来设置这些域/区域。

我的主域是“vaeserveur.fr”，这也是我的服务器名称。我这么说是因为我开始认为这可能是个问题。（是的，如您所见，它是法语）

所以我所有的域都指向 vaeserveur.fr 服务器，它们的配置似乎还可以。

另一方面，关于 vaeserveur.fr 的 DNS 配置似乎并不正常。您可以在这里自己查看：https ://intodns.com/vaeserveur.fr （例如）

Looks like your nameservers do not agree on the SOA serial. Ths SOA records as reported by your nameservers: 
91.121.166.194 ->  2017040410
213.186.33.199 ->  4135514717
This can cause some serious problems that is why you should fix this asap.

当我刚刚设置 vaeserveur.fr 区域时，它怎么可能是 2 个 SOA 记录？（顺便说一句，报价中的第二个 IP 是ns.kimsufi.com（来自注册商的辅助服务器）。）

不要犹豫，告诉我我可以给你什么信息来帮助我，如果它适合你的话。

多谢...

我在配置为通过 PHP-FCGI 运行 PHP 的 Debian Wheezy 系统上运行 nginx Web 服务器。除了适当地设置权限之外，出于安全原因，我想禁止 nginx 和 PHP创建与 ... 规则匹配的文件（或相应地重命名其他文件）location ~ \.php，即以 .PHP 结尾的文件。我该如何处理？

在我们的生产系统上，我们最近删除了一个 1TB 表。删除完成后，表在 mysql 中消失了，但文件仍然存在于 /lib/mysql/dbname/ 文件夹中。（我们使用每个表设置一个文件）我删除了与表关联的文件。

所以我检查了

lsof  | grep crawl_link | grep deleted

发现mysql进程还有打开的句柄

mysqld    38115            mysql   11uW     REG                8,3 1016938364928  182524780 /var/lib/mysql/seobility/_crawl_links_new.ibd (deleted)
mysqld    38115  2110      mysql   11uW     REG                8,3 1016938364928  182524780 /var/lib/mysql/seobility/_crawl_links_new.ibd (deleted)
mysqld    38115  4530      mysql   11uW     REG                8,3 1016938364928  182524780 /var/lib/mysql/seobility/_crawl_links_new.ibd (deleted)
mysqld    38115  8192      mysql   11uW     REG                8,3 1016938364928  182524780 /var/lib/mysql/seobility/_crawl_links_new.ibd (deleted)
(Total 120 Lines)

我知道这个问题可以通过重新启动 MySql 来解决，但是我们的数据库运行在 2TB+，我真的很想避免停机。

有没有办法删除文件句柄并释放占用的磁盘空间？

我在服务器 linux（Wheezy 服务器版本）中部署了一个网页，该网页使用 Arial 字体生成 PDF 文件。我看过

/usr/share/fonts/truetype/ 

并且那里没有找到 Arial 字体。仅有的：

DejaVuSans-Bold.ttf
DejaVuSansMono-Bold.ttf
DejaVuSansMono.ttf
DejaVuSans.ttf
DejaVuSerif-Bold.ttf
DejaVuSerif.ttf

如何安装 Arial 字体？

我有一段时间没有更新的 Debian 系统（虚拟开发盒，无法从 Internet 访问）。现在我想弥补这一点，但似乎资源不再可用：

$ sudo -s
> LANG=C apt-get update
...
Ign http://backports.debian.org squeeze-backports/non-free Translation-de_DE
Err http://backports.debian.org squeeze-backports/main amd64 Packages
  301  Moved Permanently [IP: 128.31.0.62 80]
Err http://backports.debian.org squeeze-backports/contrib amd64 Packages
  301  Moved Permanently [IP: 128.31.0.62 80]
Err http://backports.debian.org squeeze-backports/non-free amd64 Packages
  301  Moved Permanently [IP: 128.31.0.62 80]
Fetched 13.5 kB in 8s (1512 B/s)
W: Failed to fetch http://backports.debian.org/debian-backports/dists/squeeze-backports/main/binary-amd64/Packages  301  Moved Permanently [IP: 128.31.0.62 80]

W: Failed to fetch http://backports.debian.org/debian-backports/dists/squeeze-backports/contrib/binary-amd64/Packages  301  Moved Permanently [IP: 128.31.0.62 80]

W: Failed to fetch http://backports.debian.org/debian-backports/dists/squeeze-backports/non-free/binary-amd64/Packages  301  Moved Permanently [IP: 128.31.0.62 80]

E: Some index files failed to download. They have been ignored, or old ones used instead.

我dist-upgrade今天能从 7.4 到 7.11，但这似乎是我所能得到的。

Jessie，有没有办法成功地将update我的系统升级到 Debian 8？dist-upgrade我的主要目标是以这种方式获得 apache 2.4。

更新： 这是我的/etc/apt/sources.list文件，删除了空行和注释掉的行：

deb http://debian.uni-duisburg-essen.de/debian/ wheezy main
deb-src http://debian.uni-duisburg-essen.de/debian/ wheezy main
deb http://security.debian.org/ wheezy/updates main
deb-src http://security.debian.org/ wheezy/updates main
deb http://debian.uni-duisburg-essen.de/debian/ wheezy-updates main
deb-src http://debian.uni-duisburg-essen.de/debian/ wheezy-updates main
deb http://opensource.wandisco.com/debian wheezy svn18

我在我的 apache 上遇到了一个奇怪的行为，在 debian wheezy 系统上设置了 php。

在我尝试用php创建图像并直接输出时发现。它永久失败，浏览器说某事。像损坏的图像文件。经过 3 小时左右的大量尝试和错误后，我发现在我的图像内容的开头添加了一个 TAB 字符，它不属于那里。

为了证明它是 apache-php 设置的一部分，我创建了一个 test.php 文件，它只包含字母“a”并将这个文件复制到 test.html。所以这两个文件都只包含字母 a。您可以在此处查看生成的选项卡：

http://www.activeroom.net/test.php

http://www.activeroom.net/test.html

甚至在基本 url 本身 - 它也是一个 php 文件。希望任何人都可以指出我正确的方向。顺便提一句。在控制台上一切都很好：php test.php 只返回一个 a。也许这与 Apache MimeTypes 或一般标题有关？！

文件prindi.sh包含

/usr/bin/lpr –P SL-M3325ND <teade.pdf

它的调用返回错误

/usr/bin/lpr: Error - unable to access "–P" - No such file or directory

如果直接从命令行调用此命令，它将起作用：

# /usr/bin/lpr -P SL-M3325ND <teade.pdf
# lpq
SL-M3325ND is ready
no entries

如何解决这个问题，以便它也可以从 prindi.sh 打印？