AskOverflow.Dev

AskOverflow.Dev Logo AskOverflow.Dev Logo

AskOverflow.Dev Navigation

  • 主页
  • 系统&网络
  • Ubuntu
  • Unix
  • DBA
  • Computer
  • Coding
  • LangChain

Mobile menu

Close
  • 主页
  • 系统&网络
    • 最新
    • 热门
    • 标签
  • Ubuntu
    • 最新
    • 热门
    • 标签
  • Unix
    • 最新
    • 标签
  • DBA
    • 最新
    • 标签
  • Computer
    • 最新
    • 标签
  • Coding
    • 最新
    • 标签
主页 / user-303223

Greg's questions

Martin Hope
Greg
Asked: 2021-06-03 20:09:07 +0800 CST

当 /etc/hosts 或 dns 服务器中不存在 `test.localhost` 时,linux 如何解析通配符 locahost 子域(例如:`ping test.localhost`)?

  • 1

例如在/etc/hosts文件为空的 ubuntu 20.04 LTS 中:

>>> cat /etc/hosts
127.0.0.1       localhost

ping仍然适用于本地主机的任何子域:

>>> ping test.localhost
PING test.localhost(ip6-localhost (::1)) 56 data bytes
64 bytes from ip6-localhost (::1): icmp_seq=1 ttl=64 time=0.058 ms
64 bytes from ip6-localhost (::1): icmp_seq=2 ttl=64 time=0.049 ms
^C
--- test.localhost ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1028ms
rtt min/avg/max/mdev = 0.049/0.053/0.058/0.004 ms

或者:

>>> ping test2.localhost
PING test2.localhost(ip6-localhost (::1)) 56 data bytes
64 bytes from ip6-localhost (::1): icmp_seq=1 ttl=64 time=0.042 ms
64 bytes from ip6-localhost (::1): icmp_seq=2 ttl=64 time=0.063 ms
^C
--- test2.localhost ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1004ms
rtt min/avg/max/mdev = 0.042/0.052/0.063/0.010 ms

这个答案暗示涉及系统解析器,但它实际上是如何发生的?

如果localhostin/etc/hosts被替换为另一个值,则子域不再起作用:

>>> cat /etc/hosts
127.0.0.1       testname


>>> ping testname
PING testname (127.0.0.1) 56(84) bytes of data.
64 bytes from testname (127.0.0.1): icmp_seq=1 ttl=64 time=0.071 ms
64 bytes from testname (127.0.0.1): icmp_seq=2 ttl=64 time=0.080 ms
^C
--- testname ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1011ms
rtt min/avg/max/mdev = 0.071/0.075/0.080/0.004 ms

>>> ping new.testname
ping: new.testname: Name or service not known

为什么它适用于 localhost 而没有其他主机名,它是如何实现的?

domain-name-system subdomain networking hosts localhost
  • 1 个回答
  • 384 Views
Martin Hope
Greg
Asked: 2017-10-29 21:47:47 +0800 CST

在将目录(不包含 .ssh)的 rsync 运行到远程计算机的主文件夹后,以前工作的 ssh 会导致“权限被拒绝”

  • 2

我使用以下rsync命令将目录的内容放入删除机器的主文件夹:

rsync -az directory/ user@IPADDRESS:~/

对于所有 4 台机器,这些文件都已顺利转移。移动文件后,尝试 ssh 进入机器时出现以下错误:Permission denied (publickey).

directory/不包含名为的文件夹.ssh,因此我确定该authorized_keys文件没有被rsync.

执行后可能导致密钥被拒绝的原因是rsync什么?

这是详细的 ssh 输出(机器设置为接受 id_ed25519 密钥 - 没有密码或其他密钥类型):

$ ssh user@ipaddress -vvvv
OpenSSH_7.5p1 Ubuntu-10, OpenSSL 1.0.2g  1 Mar 2016
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug2: resolving "ipaddress" port 22
debug2: ssh_connect_direct: needpriv 0
debug1: Connecting to ipaddress [159.89.207.176] port 22.
debug1: Connection established.
debug1: key_load_public: No such file or directory
debug1: identity file /home/greg/.ssh/id_rsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/greg/.ssh/id_rsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/greg/.ssh/id_dsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/greg/.ssh/id_dsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/greg/.ssh/id_ecdsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/greg/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/greg/.ssh/id_ed25519 type 4
debug1: key_load_public: No such file or directory
debug1: identity file /home/greg/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_7.5p1 Ubuntu-10
debug1: Remote protocol version 2.0, remote software version OpenSSH_7.2p2 Ubuntu-4ubuntu2.2
debug1: match: OpenSSH_7.2p2 Ubuntu-4ubuntu2.2 pat OpenSSH* compat 0x04000000
debug2: fd 3 setting O_NONBLOCK
debug1: Authenticating to ipaddress:22 as 'user'
debug3: hostkeys_foreach: reading file "/home/greg/.ssh/known_hosts"
debug3: record_hostkey: found key type ECDSA in file /home/greg/.ssh/known_hosts:20
debug3: load_hostkeys: loaded 1 keys from ipaddress
debug3: order_hostkeyalgs: prefer hostkeyalgs: [email protected],[email protected],[email protected],ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
debug3: send packet: type 20
debug1: SSH2_MSG_KEXINIT sent
debug3: receive packet: type 20
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,[email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c
debug2: host key algorithms: [email protected],[email protected],[email protected],ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[email protected],[email protected],ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa
debug2: ciphers ctos: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected],aes128-cbc,aes192-cbc,aes256-cbc
debug2: ciphers stoc: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected],aes128-cbc,aes192-cbc,aes256-cbc
debug2: MACs ctos: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,[email protected],zlib
debug2: compression stoc: none,[email protected],zlib
debug2: languages ctos: 
debug2: languages stoc: 
debug2: first_kex_follows 0 
debug2: reserved 0 
debug2: peer server KEXINIT proposal
debug2: KEX algorithms: [email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1
debug2: host key algorithms: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519
debug2: ciphers ctos: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected]
debug2: ciphers stoc: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected]
debug2: MACs ctos: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,[email protected]
debug2: compression stoc: none,[email protected]
debug2: languages ctos: 
debug2: languages stoc: 
debug2: first_kex_follows 0 
debug2: reserved 0 
debug1: kex: algorithm: [email protected]
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: [email protected] MAC: <implicit> compression: none
debug1: kex: client->server cipher: [email protected] MAC: <implicit> compression: none
debug3: send packet: type 30
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug3: receive packet: type 31
debug1: Server host key: ecdsa-sha2-nistp256 SHA256:PGCROru0DmQIrR6hCS2RHuh1IuPfVTkC2XhTCb2JFHY
debug3: hostkeys_foreach: reading file "/home/greg/.ssh/known_hosts"
debug3: record_hostkey: found key type ECDSA in file /home/greg/.ssh/known_hosts:20
debug3: load_hostkeys: loaded 1 keys from ipaddress
debug3: hostkeys_foreach: reading file "/home/greg/.ssh/known_hosts"
debug3: record_hostkey: found key type ECDSA in file /home/greg/.ssh/known_hosts:18
debug3: load_hostkeys: loaded 1 keys from 159.89.207.176
debug1: Host 'ipaddress' is known and matches the ECDSA host key.
debug1: Found key in /home/greg/.ssh/known_hosts:20
debug3: send packet: type 21
debug2: set_newkeys: mode 1
debug1: rekey after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug3: receive packet: type 21
debug1: SSH2_MSG_NEWKEYS received
debug2: set_newkeys: mode 0
debug1: rekey after 134217728 blocks
debug2: key: /home/greg/.ssh/id_rsa ((nil))
debug2: key: /home/greg/.ssh/id_dsa ((nil))
debug2: key: /home/greg/.ssh/id_ecdsa ((nil))
debug2: key: /home/greg/.ssh/id_ed25519 (0x5563c360b490)
debug3: send packet: type 5
debug3: receive packet: type 7
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<rsa-sha2-256,rsa-sha2-512>
debug3: receive packet: type 6
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug3: send packet: type 50
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey
debug3: start over, passed a different list publickey
debug3: preferred gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /home/greg/.ssh/id_rsa
debug3: no such identity: /home/greg/.ssh/id_rsa: No such file or directory
debug1: Trying private key: /home/greg/.ssh/id_dsa
debug3: no such identity: /home/greg/.ssh/id_dsa: No such file or directory
debug1: Trying private key: /home/greg/.ssh/id_ecdsa
debug3: no such identity: /home/greg/.ssh/id_ecdsa: No such file or directory
debug1: Offering ED25519 public key: /home/greg/.ssh/id_ed25519
debug3: send_pubkey_test
debug3: send packet: type 50
debug2: we sent a publickey packet, wait for reply
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey
debug2: we did not send a packet, disable method
debug1: No more authentication methods to try.
Permission denied (publickey).
ssh
  • 1 个回答
  • 901 Views
Martin Hope
Greg
Asked: 2017-07-04 22:21:25 +0800 CST

如何在 zfs 中“重新平衡”数据?(确保数据分布在所有条带镜像中)

  • 15

以条带镜像(Raid 10)为例,如果将两个磁盘扩展为四个,如何将两个磁盘的数据在两个镜像之间“重新平衡”(分散)?

也就是说,如何将写入一个镜像的文件写入两个镜像以利用条带磁盘?

linux
  • 2 个回答
  • 10039 Views
Martin Hope
Greg
Asked: 2017-07-03 20:09:39 +0800 CST

/etc/network/interfaces.d/* 在 /etc/network/interfaces 文件的顶部做什么?

  • 7

我注意到默认情况下,以下行包含在/etc/network/interfaces:

source /etc/network/interfaces.d/*

这条线的目的是什么,它实际上是做什么的?

linux
  • 2 个回答
  • 29817 Views
Martin Hope
Greg
Asked: 2017-06-22 05:32:13 +0800 CST

运行 lxd_container 模块的示例时,Ansible 返回任务中未检测到的操作

  • 0

我使用以下页面https://docs.ansible.com/ansible/lxd_container_module.html提取以下 lxd 示例并将其放入 YAML 文件中:

>>> cat play.yaml

---
# An example for creating a Ubuntu container and install python
- hosts: localhost
  connection: local
  tasks:
    - name: Create a started container
      lxd_container:
        name: mycontainer
        state: started
        source:
          type: image
          mode: pull
          server: https://images.linuxcontainers.org
          protocol: lxd
          alias: ubuntu/xenial/amd64
        profiles: ["default"]
        wait_for_ipv4_addresses: true
        timeout: 600

但是在运行它时,我收到以下错误:

>>> ansible-playbook play.yaml 
ERROR! no action detected in task

The error appears to have been in '/root/play': line 6, column 7, but may
be elsewhere in the file depending on the exact syntax problem.

The offending line appears to be:

  tasks:
    - name: Create a started container
      ^ here

YAML 文件看起来格式正确。我也检查了ansible-doc -l | grep "lxd"但是没有返回结果。

是什么导致任务无法运行?

ansible
  • 1 个回答
  • 2892 Views
Martin Hope
Greg
Asked: 2017-06-17 23:39:57 +0800 CST

zfs-auto-snapshot 仅对频繁的快照进行快照,即使每小时、每日、每周和每月快照设置为 True

  • 0

zfs-auto-snapshot已安装并应用了以下设置:

# zfs get all backup
NAME    PROPERTY                        VALUE                           SOURCE
backup  com.sun:auto-snapshot           true                            local
backup  com.sun:auto-snapshot:monthly   true                            local
backup  com.sun:auto-snapshot:weekly    true                            local
backup  com.sun:auto-snapshot:hourly    true                            local
backup  com.sun:auto-snapshot:frequent  true                            local
backup  com.sun:auto-snapshot:daily     true                            local

从安装到现在已经半周了,当检查快照时,只存在四个最频繁的快照:

# zfs list -t snapshot
NAME                                            USED  AVAIL  REFER  MOUNTPOINT
backup@zfs-auto-snap_frequent-2017-06-17-0645  3.06M      -   123G  -
backup@zfs-auto-snap_frequent-2017-06-17-0700  1.57M      -   123G  -
backup@zfs-auto-snap_frequent-2017-06-17-0715  1.43M      -   123G  -
backup@zfs-auto-snap_frequent-2017-06-17-0730   928K      -   123G  -
linux
  • 1 个回答
  • 1506 Views
Martin Hope
Greg
Asked: 2017-04-14 07:14:55 +0800 CST

如何向镜像 vdev 添加更多物理磁盘(以增加冗余)?

  • 5

创建 zpool 后,是否可以将更多物理驱动器添加到镜像 vdev?

例如,如果使用以下命令创建 zpool:

zpool create test_pool mirror /dev/sd0 /dev/sd1 mirror /dev/sd2 /dev/sd3

是否可以将更多驱动器添加到 vdev 以增加其冗余?即镜像驱动器的数量可以从1个增加到2个吗?

linux
  • 1 个回答
  • 5312 Views
Martin Hope
Greg
Asked: 2017-04-05 07:59:11 +0800 CST

如何执行 zfs 池的增量/连续备份?

  • 31

如何在异地连续/增量备份 zfs 池?

我认识到send/receiveover ssh 是一种方法,但是它需要手动管理快照。

我发现了一些工具,但大多数不再受支持。

一个看起来很有前途的工具是https://github.com/jimsalterjrs/sanoid但是我担心非广为人知的工具可能弊大于利,因为它可能会损坏/删除数据。

如何执行连续/增量 zfs 备份?

backup
  • 3 个回答
  • 40922 Views
Martin Hope
Greg
Asked: 2017-01-18 18:16:34 +0800 CST

在 ZFS raidz 中使用奇异的设置来最大化容量(使用不同大小的磁盘时)

  • 3

我有 2 个 4TB 磁盘和 3 个 6TB 磁盘,我想与 ZFS 一起使用。我的目标是最大化可用存储空间,同时允许单个磁盘发生故障。

理想情况下,将使用 raidz 设置,但是根据我的研究,不同大小的驱动器会导致较大的驱动器未得到充分利用。也就是说,6TB 中只有 4TB 将用于较大的驱动器。

是否可以对以下内容进行条带化(raid 0):

  • 两个 4TB 镜像(raid 1)配置
  • raidz (raid 5) 配置中的三个 6TB 磁盘

或者,是否可以将两个 4TB 条带化,然后将条带用于 6TB 驱动器的 raidz 配置?那是:

  • 条带化两个 4TB 驱动器
  • Raidz 3 x 6TB 和条带化 4TB 磁盘
zfs mirror zfsonlinux raidz
  • 2 个回答
  • 6475 Views
Martin Hope
Greg
Asked: 2017-01-02 21:31:54 +0800 CST

如何将两个戴尔存储阵列连接到戴尔 Poweredge 服务器(菊花链与直接)?

  • 6

我购买了两个 Dell MD1000 存储阵列和一个 Dell Poweredge 1950 服务器,需要帮助设置它们(我是 SAN/iSCSI 的新手)。

Poweredge 服务器有两个 SAS SFF-8470 连接器。两个存储阵列(每个都有一个 *EMM)应该通过菊花链连接还是直接连接到 Poweredge 服务器?

此外,如何访问 Dell OpenManage 软件?它是一个 webgui,可以远程访问还是需要从服务器本身访问?我还没有打开它们,因为我还在等待交货。

*EMM:机箱管理模块

dell storage-area-network iscsi sas dell-poweredge
  • 1 个回答
  • 1242 Views
Martin Hope
Greg
Asked: 2016-11-17 02:50:09 +0800 CST

新 ZFS 镜像 (raid1) 中的随机读取性能糟糕(~1.4 倍与预期的~2 倍)

  • 4

我正在使用 FIO(灵活 I/O 测试仪)测试 ZFS 镜像,以了解 ZFS 镜像的随机读取可扩展性。当我使用的应用程序执行它自己的缓存时,主缓存和辅助缓存已设置为无。

出于测试目的,我使用的是磁盘/dev/sdb,/dev/sdc它有大约 100 个随机读取 IOPS。使用单磁盘 ZFS 挂载时,从 FIO 获得单磁盘数据。

我的理解 ZFS 镜像应该经历大约 200 (100 + 100) 随机读取 IOPS。不过,在测试时,我只遇到了大约 140 次随机读取 IOPS。完整结果如下:

test@pc:/mnt/zfs-raid1# fio --name=randread --ioengine=libaio --iodepth=16 --rw=randread --bs=4k --direct=0 --size=512M --numjobs=8 --runtime=240 --group_reporting

randread: (groupid=0, jobs=8): err= 0: pid=4293: Wed Nov 16 21:02:08 2016
  read : io=137040KB, bw=584482B/s, iops=142, runt=240091msec
    slat (usec): min=222, max=2246.9K, avg=56047.94, stdev=85252.98
    clat (usec): min=2, max=5142.9K, avg=838922.05, stdev=443521.12
     lat (msec): min=5, max=5401, avg=894.97, stdev=460.94
    clat percentiles (msec):
     |  1.00th=[   75],  5.00th=[  269], 10.00th=[  396], 20.00th=[  529],
     | 30.00th=[  619], 40.00th=[  693], 50.00th=[  766], 60.00th=[  848],
     | 70.00th=[  947], 80.00th=[ 1090], 90.00th=[ 1336], 95.00th=[ 1614],
     | 99.00th=[ 2507], 99.50th=[ 2835], 99.90th=[ 3720], 99.95th=[ 3884],
     | 99.99th=[ 4621]
    bw (KB  /s): min=    1, max=  851, per=12.92%, avg=73.67, stdev=43.13
    lat (usec) : 4=0.01%, 10=0.01%
    lat (msec) : 10=0.11%, 20=0.05%, 50=0.34%, 100=0.85%, 250=3.16%
    lat (msec) : 500=12.49%, 750=30.99%, 1000=26.12%, 2000=23.48%, >=2000=2.38%
  cpu          : usr=0.02%, sys=0.14%, ctx=99221, majf=0, minf=202
  IO depths    : 1=0.1%, 2=0.1%, 4=0.1%, 8=0.2%, 16=99.6%, 32=0.0%, >=64=0.0%
     submit    : 0=0.0%, 4=100.0%, 8=0.0%, 16=0.0%, 32=0.0%, 64=0.0%, >=64=0.0%
     complete  : 0=0.0%, 4=100.0%, 8=0.0%, 16=0.1%, 32=0.0%, 64=0.0%, >=64=0.0%
     issued    : total=r=34260/w=0/d=0, short=r=0/w=0/d=0, drop=r=0/w=0/d=0
     latency   : target=0, window=0, percentile=100.00%, depth=16

Run status group 0 (all jobs):
   READ: io=137040KB, aggrb=570KB/s, minb=570KB/s, maxb=570KB/s, mint=240091msec, maxt=240091msec

镜像是使用以下方法创建的:

zpool create zfs-raid1 mirror /dev/sdb /dev/sdc

这是预期的可扩展性水平吗?还是我缺少什么?

performance zfs mirror iops
  • 1 个回答
  • 655 Views
Martin Hope
Greg
Asked: 2016-09-15 11:07:04 +0800 CST

HDFS 可以安装在 ZFS 或 BTRFS 硬盘上吗?

  • 2

我是 hadoop 新手,对 HDFS 如何与 ZFS 或 BTRFS 一起工作感到困惑。

可以使用 ZFS 安装物理驱动器,然后将 HDFS 安装在 ZFS 之上吗?

还是可以直接安装HDFS?

zfs hdfs btrfs
  • 2 个回答
  • 1018 Views
Martin Hope
Greg
Asked: 2016-04-20 00:07:55 +0800 CST

KVM/QEMU:“存储参数错误:远程主机上未管理目录”从已安装驱动器导入现有映像时

  • 1

我远程管理的服务器有一个 KVM/QEMU 映像存储在非操作系统的挂载驱动器上/mnt/drive。

当我使用virt-manager导入磁盘映像时,出现以下错误:

Storage parameter error.
Cannot use storage '/mnt/drive/vms/vm1.img': '/mnt/drive/vms' is not managed on the remote host.

我检查了目录权限,它们应该没问题。这可能是什么原因造成的?

kvm-virtualization qemu virt-manager
  • 1 个回答
  • 809 Views
Martin Hope
Greg
Asked: 2016-03-18 13:19:04 +0800 CST

带有 RMM4 (IPMI BMC) 的英特尔服务器是否需要两个 IP 地址/电缆?

  • 1

我正在管理一个已重新启动且尚未重新打开的位于同一位置的服务器。它位于数据中心且难以访问,因此我将英特尔的RMM4(与服务器主板兼容)作为解决方案。

我是否必须从 ISP 的交换机上连接两条电缆,或者是否有办法拆分单根电缆?我假设 IPMI BMC 需要拥有自己的 IP 地址?

请注意,服务器是一个计算服务器,它连接到共享防火墙并具有虚拟化网络(防火墙 + 虚拟服务器),因此有一根以太网电缆连接到它。

此外,IPMI BMC 的安全含义是什么?如何最好地保护?我了解英特尔允许使用 IP 地址限制访问,还有什么我应该注意或做的吗?

remote-access
  • 1 个回答
  • 1587 Views
Martin Hope
Greg
Asked: 2015-12-12 03:27:09 +0800 CST

如何使驱动器安装在容器内可用?

  • 1

我打算将容器内的挂载用于 postgres 数据库。

我无法使驱动器在容器内可用。到目前为止,我有:

  1. 安装/dev/sdb到/mnt/psql主机设备上。
  2. 在容器中创建/mnt/psql目录。
  3. 添加lxc.mount.entry = /mnt/psql mnt/psql none bind 0 0到 lxc 容器配置文件中。

重新启动容器后,挂载仍然不可用。我该如何让它可用?

lxc
  • 1 个回答
  • 3318 Views
Martin Hope
Greg
Asked: 2015-12-08 21:04:36 +0800 CST

如何要求所有网络活动在到达主机之前通过 KVM 访客防火墙?

  • 3

我遇到的大部分信息都倾向于使用桥接连接来设置 KVM 防火墙。

据我了解,如果网络流量无需先通过防火墙即可到达主机,这是一种安全风险。

我已经看到主网卡(例如eth0)被设置为虚拟机网卡,但这是否排除了主机访问eth0?

想到的另一个选项是 NIC 的 PCI 直通,但是我遇到了该方法的问题。

是否有任何其他方法要求主机流量首先通过防火墙?你推荐使用什么方法?

linux
  • 2 个回答
  • 1107 Views
Martin Hope
Greg
Asked: 2015-12-08 04:28:31 +0800 CST

pfSense 安全性:当网络接口已分配给 pfSense 时,是否可以通过 ssh 访问虚拟 pfSense 防火墙的主机?

  • 1

当 WAN 接口分配给 pfSense 时,是否可以访问虚拟 pfSense 机器的主机(通过 ssh)?

驱动程序是否需要安装在主机、来宾或两者上?

它会响应 ping 吗?如果是,如何禁用对主机的访问,以便所有流量都必须通过防火墙?

virtualization
  • 1 个回答
  • 476 Views
Martin Hope
Greg
Asked: 2015-12-08 04:08:29 +0800 CST

Proxmox 是否支持使用 ssh 密钥登录主机和来宾?

  • 0

Proxmox 是否允许使用 RSA 等密钥保护访客登录,还是仅基于密码?

主机也可以使用 ssh 密钥吗?

proxmox
  • 1 个回答
  • 2347 Views
Martin Hope
Greg
Asked: 2015-12-05 01:38:05 +0800 CST

对网络所需的虚拟网络接口感到困惑

  • 0

我对网络比较陌生,并且对这个主题进行了很多研究,但是我仍然对我需要什么样的虚拟设置感到困惑。

我在这里链接了一个网络图:网络图。除 pfSense 外的所有机器都是 ubuntu 14.04。

目的是让所有机器都可以相互访问,并可以访问互联网(通过交换机)。我的理解是 virtual_machine_0 和 virtual_machine_1 必须连接到虚拟网桥。

我感到困惑的是 pfSense 机器如何适应图片?它是否连接到 WAN 的 eth0,然后连接到 VLAN 的网桥(虚拟机连接到的)?以这种方式连接的所有机器是否会出现在同一个网络上?

networking
  • 1 个回答
  • 68 Views

Sidebar

Stats

  • 问题 205573
  • 回答 270741
  • 最佳答案 135370
  • 用户 68524
  • 热门
  • 回答
  • Marko Smith

    新安装后 postgres 的默认超级用户用户名/密码是什么?

    • 5 个回答
  • Marko Smith

    SFTP 使用什么端口?

    • 6 个回答
  • Marko Smith

    命令行列出 Windows Active Directory 组中的用户?

    • 9 个回答
  • Marko Smith

    什么是 Pem 文件,它与其他 OpenSSL 生成的密钥文件格式有何不同?

    • 3 个回答
  • Marko Smith

    如何确定bash变量是否为空?

    • 15 个回答
  • Martin Hope
    Tom Feiner 如何按大小对 du -h 输出进行排序 2009-02-26 05:42:42 +0800 CST
  • Martin Hope
    Noah Goodrich 什么是 Pem 文件,它与其他 OpenSSL 生成的密钥文件格式有何不同? 2009-05-19 18:24:42 +0800 CST
  • Martin Hope
    Brent 如何确定bash变量是否为空? 2009-05-13 09:54:48 +0800 CST
  • Martin Hope
    cletus 您如何找到在 Windows 中打开文件的进程? 2009-05-01 16:47:16 +0800 CST

热门标签

linux nginx windows networking ubuntu domain-name-system amazon-web-services active-directory apache-2.4 ssh

Explore

  • 主页
  • 问题
    • 最新
    • 热门
  • 标签
  • 帮助

Footer

AskOverflow.Dev

关于我们

  • 关于我们
  • 联系我们

Legal Stuff

  • Privacy Policy

Language

  • Pt
  • Server
  • Unix

© 2023 AskOverflow.DEV All Rights Reserve