PersianGulf's questions

我有以下系统：

root@debian:~# dpkg -l systemd-resolved
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name             Version      Architecture Description
+++-================-============-============-=================================
ii  systemd-resolved 257.4-3      amd64        systemd DNS resolver
root@debian:~# cat /etc/issue
Debian GNU/Linux trixie/sid \n \l

root@debian:~# ls -l /etc/resolv.conf
lrwxrwxrwx 1 root root 39 Mar 26 20:21 /etc/resolv.conf -> ../run/systemd/resolve/stub-resolv.conf

root@debian:~# cat /run/systemd/resolve/stub-resolv.conf 
# This is /run/systemd/resolve/stub-resolv.conf managed by man:systemd-resolved(8).
# Do not edit.
#
# This file might be symlinked as /etc/resolv.conf. If you're looking at
# /etc/resolv.conf and seeing this text, you have followed the symlink.
#
# This is a dynamic resolv.conf file for connecting local clients to the
# internal DNS stub resolver of systemd-resolved. This file lists all
# configured search domains.
#
# Run "resolvectl status" to see details about the uplink DNS servers
# currently in use.
#
# Third party programs should typically not access this file directly, but only
# through the symlink at /etc/resolv.conf. To manage man:resolv.conf(5) in a
# different way, replace this symlink by a static file or a different symlink.
#
# See man:systemd-resolved.service(8) for details about the supported modes of
# operation for /etc/resolv.conf.

nameserver 127.0.0.53
options edns0 trust-ad
search .

然后我安装了Zebedee隧道，它工作正常。
当我设置firefox开启时localhost:81，我对网站的访问被过滤了。

root@debian:~# telnet localhost 81
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.

现在我想使用 DNS over localhost:81。
我该怎么做？

更新： 我的resolvectl是：

root@debian:~# resolvectl status
Global
         Protocols: +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
  resolv.conf mode: stub
       DNS Servers: 8.8.8.8

Link 2 (enp0s31f6)
    Current Scopes: LLMNR/IPv4 mDNS/IPv4
         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
     Default Route: no

Link 3 (wlp58s0)
    Current Scopes: none
         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
     Default Route: no

Link 5 (docker0)
    Current Scopes: none
         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
     Default Route: no

我有两个OU：1. People2. newOU。我的dc是nodomain。我进行了以下搜索，一切正常：

root@debian:~/ldif# ldapsearch  -c  -Y EXTERNAL  -H ldapi:///  -b dc=nodomain -D  cn=admin,dc=nodomain -LLLQ 
dn: dc=nodomain
objectClass: top
objectClass: dcObject
objectClass: organization
o: nodomain
dc: nodomain

dn: uid=mohsen,ou=People,dc=nodomain
uid: mohsen
cn: Pahlevanzadeh
objectClass: account
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
shadowLastChange: 20121
loginShell: /usr/sbin/csh
uidNumber: 130
gidNumber: 137
homeDirectory: /home/mohsen
gecos: A good boy,,,

dn: ou=newOU,dc=nodomain
objectClass: organizationalUnit
ou: newOU
description: Organizational Unit for Sales Department

dn: uid=naghmeh,ou=newOU,dc=nodomain
uid: naghmeh
cn: maleki
objectClass: account
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
shadowLastChange: 20121
loginShell: /usr/sbin/csh
uidNumber: 130
gidNumber: 137
homeDirectory: /home/mohsen
gecos: A good boy,,,

我有两个 uid： 1.mohsen在 下People。 2.naghmeh在 下newOU
当我按上述方式搜索时，但添加"ou=newOU"如下内容：

ldapsearch  -c  -Y EXTERNAL  "ou=newOU" -H ldapi:///  -b dc=nodomain -D  cn=admin,dc=nodomain -LLLQ 

我得到以下结果：

dn: ou=newOU,dc=nodomain
objectClass: organizationalUnit
ou: newOU
description: Organizational Unit for Sales Department

遗憾的是，我没有收到uid其他信息。
我如何通过我的 访问其他信息OU？

我有以下内容ldapsearch：

root@debian:~/ldif# ldapsearch -LLLQ  -Y EXTERNAL -H ldapi:/// -b dc=nodomain   -D  cn=admin,dc=nodomain,cn=Pahlevanzadeh,ou=People,uid=mohsen,loginShell=/usr/bin/csh
dn: dc=nodomain
objectClass: top
objectClass: dcObject
objectClass: organization
o: nodomain
dc: nodomain

dn: ou=People,dc=nodomain
objectClass: organizationalUnit
ou: People
description: Organizational Unit for Sales Department

dn: uid=mohsen,ou=People,dc=nodomain
uid: mohsen
cn: Pahlevanzadeh
objectClass: account
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
shadowLastChange: 20121
loginShell: /usr/sbin/csh
uidNumber: 130
gidNumber: 137
homeDirectory: /home/mohsen
gecos: A good boy,,,

但是当我使用以下内容时ldapsearch，我没有上述结果：

root@debian:~/ldif# ldapsearch  -Y EXTERNAL -H ldapi:/// -b dc=nodomain,cn=Pahlevanzadeh   -D  cn=admin,dc=nodomain,cn=Pahlevanzadeh
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
# extended LDIF
#
# LDAPv3
# base <dc=nodomain,cn=Pahlevanzadeh> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 32 No such object

# numResponses: 1

如何使用‘-b’创建查询以获得第一个结果？

我不知道/etc/shadowLinux中存储密码的算法是什么。
我通过python通过以下脚本进行了测试：

import hashlib
message = b"123"

md5_hash = hashlib.md5(message).hexdigest()
sha1_hash = hashlib.sha1(message).hexdigest()
sha256_hash = hashlib.sha256(message).hexdigest()
sha384_hash = hashlib.sha384(message).hexdigest()
sha512_hash = hashlib.sha512(message).hexdigest()

print(f"MD5: {md5_hash}")
print(f"SHA-1: {sha1_hash}")
print(f"SHA-256: {sha256_hash}")
print(f"SHA-384: {sha384_hash}")
print(f"SHA-512: {sha512_hash}")

但是我没有看到我的密码。我的密码是123。

1. 卷影存储是否为 HASH？如果是，我应该放弃获取密码。
   
2. 如果密码没有以哈希形式存储，我该如何获取它？

首先我使用以下内容定义一个新的LDIFOU ldapadd -x -D "cn=admin,dc=nodomain" -W -f ./ou.ldif：

root@debian:~# cat ou.ldif 
dn: OU=People,DC=nodomain
objectClass: organizationalUnit
ou: People
description: Organizational Unit for Sales Department

身份验证后，ldap 将我的 OU 添加到 ldap。

然后我通过以下方式将我的 users.ldif 添加到 ldap 中：

root@debian:~#  ldapadd -x -H ldap:/// -D "cn=admin,dc=nodomain" -W -f ./users.ldif
Enter LDAP Password: 
adding new entry "uid=root,ou=People,dc=nodomain"
adding new entry "uid=daemon,ou=People,dc=nodomain"
adding new entry "uid=man,ou=People,dc=nodomain"
adding new entry "uid=noody,ou=People,dc=nodomain"
adding new entry "uid=systemd_network,ou=People,dc=nodomain"
adding new entry "uid=tss,ou=People,dc=nodomain"
adding new entry "uid=systemd-coredump,ou=People,dc=nodomain"
adding new entry "uid=systemd-timesync,ou=People,dc=nodomain"
adding new entry "uid=messagebus,ou=People,dc=nodomain"
adding new entry "uid=usbmux,ou=People,dc=nodomain"
adding new entry "uid=sshd,ou=People,dc=nodomain"
adding new entry "uid=dnsmasq,ou=People,dc=nodomain"
adding new entry "uid=avahi,ou=People,dc=nodomain"
adding new entry "uid=speech-dispacher,ou=People,dc=nodomain"
adding new entry "uid=fwupd-refresh,ou=People,dc=nodomain"
adding new entry "uid=saned,ou=People,dc=nodomain"
adding new entry "uid=sddm,ou=People,dc=nodomain"
adding new entry "uid=geoclue,ou=People,dc=nodomain"
adding new entry "uid=polkitd,ou=People,dc=nodomain"
adding new entry "uid=rtkit,ou=People,dc=nodomain"
adding new entry "uid=colord,ou=People,dc=nodomain"
adding new entry "uid=gnome-initial-setup,ou=People,dc=nodomain"
adding new entry "uid=tcpdump,ou=People,dc=nodomain"
adding new entry "uid=postgres,ou=People,dc=nodomain"
adding new entry "uid=mohsen,ou=People,dc=nodomain"
adding new entry "uid=redis,ou=People,dc=nodomain"
adding new entry "uid=pulse,ou=People,dc=nodomain"
adding new entry "uid=Debian-gdm,ou=People,dc=nodomain"
adding new entry "uid=hplip,ou=People,dc=nodomain"
adding new entry "uid=strongswan,ou=People,dc=nodomain"
adding new entry "uid=libvirt-qemu,ou=People,dc=nodomain"
adding new entry "uid=nobody,ou=People,dc=nodomain"
adding new entry "uid=systemd-network,ou=People,dc=nodomain"
adding new entry "uid=mysql,ou=People,dc=nodomain"
adding new entry "uid=avahi-autoipd,ou=People,dc=nodomain"
adding new entry "uid=_galera,ou=People,dc=nodomain"
adding new entry "uid=ftp,ou=People,dc=nodomain"
adding new entry "uid=speech-dispatcher,ou=People,dc=nodomain"
adding new entry "uid=Debian-exim,ou=People,dc=nodomain"
adding new entry "uid=gnome-remote-desktop,ou=People,dc=nodomain"
adding new entry "uid=cups-pk-helper,ou=People,dc=nodomain"

一切正常，但是当我想通过以下方式搜索时：

root@debian:~# ldapsearch -L  -H ldap:/// -b cn=People,dc=nodomain,cn=admin ou
SASL/SCRAM-SHA-512 authentication started
Please enter your password: 
ldap_sasl_interactive_bind: Invalid credentials (49)
    additional info: SASL(-13): user not found: no secret in database

在定义 OU 和添加用户之前，我没有遇到任何身份验证问题。

我该如何解决这个问题？

信息：
我安装了ldap-utils，slapd在安装 slapd 时，ncurses我使用对话框输入了管理员密码。
然后我通过以下方式更改了密码

ldapmodify -Q -Y EXTERNAL -H ldapi:/// << E0F
dn: olcDatabase={1}mdb,cn=config
changetype: modify
replace: olcRootPW
olcRootPW: {SSHA}qUoTRPwppaedqHQTgYOPYWokr3SiXjbK
E0F

但ldapadd -x -D "cn=admin,dc=example,dc=com" -W -f ./users.ldif我收到以下消息：

Enter LDAP Password: 
ldap_bind: Invalid credentials (49)

顺便说一句，我没有slapd.conf。
如何通过 ldap 程序进行身份验证？

更新：

root@debian:~# cat /etc/ldap/slapd.d/cn\=config/olcDatabase\=\{1\}mdb.ldif 
# AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
# CRC32 73bfb3a8
dn: olcDatabase={1}mdb
objectClass: olcDatabaseConfig
objectClass: olcMdbConfig
olcDatabase: {1}mdb
olcDbDirectory: /var/lib/ldap
olcSuffix: dc=nodomain
olcAccess: {0}to attrs=userPassword by self write by anonymous auth by * none
olcAccess: {1}to attrs=shadowLastChange by self write by * read
olcAccess: {2}to * by * read
olcLastMod: TRUE
olcRootDN: cn=admin,dc=nodomain
olcDbCheckpoint: 512 30
olcDbIndex: objectClass eq
olcDbIndex: cn,uid eq
olcDbIndex: uidNumber,gidNumber eq
olcDbIndex: member,memberUid eq
olcDbMaxSize: 1073741824
structuralObjectClass: olcMdbConfig
entryUUID: 10bd0d0a-82d1-103f-92a4-058be6d2a441
creatorsName: cn=admin,cn=config
createTimestamp: 20250219054944Z
olcRootPW:: MTIzMTIzMTIz
entryCSN: 20250219060430.002303Z#000000#000#000000
modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
modifyTimestamp: 20250219060430Z

我已经从 debian 的 repoDebian GNU/Linux trixie/sid安装了publican。(publican 正在为 进行写入和发布DocBook)
当我运行时publican，它会收到以下消息：

Attempt to call undefined import method with arguments ("abs2rel") via package "File::Spec" (Perhaps you forgot to load the package?) at /usr/share/perl5/Publican/TreeView.pm line 12.
Duplicate specification "help" for option "help"
Can't open publican: No such file or directory at /usr/bin/publican line 646.

我的 publican 版本是4.3.2-4。
我还libfile-spec-native-perl从 repo 安装了软件包。

然后我通过以下方式下载源代码：

apt source publican

然后运行publican，出现以下错误：

mohsen@debian:~/src-compiled/publican/publican-4.3.2/bin$ ./publican 
Attempt to call undefined import method with arguments ("abs2rel") via package "File::Spec" (Perhaps you forgot to load the package?) at /usr/share/perl5/Publican/TreeView.pm line 12.
Duplicate specification "help" for option "help"

Action required!

根据以上Action Required!字符串添加到输出。

我不知道该如何解决。
如果你解决了我的问题，我会很高兴。

为什么 Debian 将一些不稳定的软件包从 重命名orig_name为orig_namet64？其他一些问题：

• 在哪里可以找到 Debian Unstable 的官方政策？
• 我在哪里可以了解 Debian 用户社区的整体动态？

最近的更名：

$ dpkg -l "*t64" |head -n 50
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                                Version                     Architecture Description
+++-===================================-===========================-============-=======================================================================
ii  libabsl20220623t64:amd64            20220623.1-3.1              amd64        extensions to the C++ standard library
ii  libappimage1.0abi1t64:amd64         1.0.4-5-3.1                 amd64        Core library for appimage
ii  libapr1t64:amd64                    1.7.2-3.2                   amd64        Apache Portable Runtime Library
ii  libaprutil1t64:amd64                1.6.3-2                     amd64        Apache Portable Runtime Utility Library
ii  libapt-pkg6.0t64:amd64              2.7.13+b1                   amd64        package management runtime library
ii  libarchive13t64:amd64               3.7.2-1.1                   amd64        Multi-format archive and compression library (shared library)
ii  libaribb24-0t64:amd64               1.0.3-2.1+b1                amd64        library for ARIB STD-B24 decoding (runtime files)
ii  libasound2t64:amd64                 1.2.11-1+b1                 amd64        shared library for ALSA applications
ii  libatk-bridge2.0-0t64:amd64         2.51.90-4                   amd64        AT-SPI 2 toolkit bridge - shared library
ii  libatk1.0-0t64:amd64                2.51.90-4                   amd64        ATK accessibility toolkit
ii  libatopology2t64:amd64              1.2.11-1+b1                 amd64        shared library for handling ALSA topology definitions
ii  libatspi2.0-0t64:amd64              2.51.90-4                   amd64        Assistive Technology Service Provider Interface - shared library
ii  libboost-chrono1.83.0t64:amd64      1.83.0-2.1                  amd64        C++ representation of time duration, time point, and clocks
ii  libburn4t64:amd64                   1.5.6-1.1                   amd64        library to provide CD/DVD/BD writing functions
ii  libcamel-1.2-64t64:amd64            3.50.3-2.2                  amd64        Evolution MIME message handling library
ii  libcanberra-gtk3-0t64:amd64         0.30-12.2                   amd64        GTK+ 3.0 helper for playing widget event sounds with libcanberra
ii  libcanberra0t64:amd64               0.30-12.2                   amd64        simple abstract interface for playing event sounds
ii  libcdio-cdda2t64:amd64              10.2+2.0.1-1.1              amd64        library to read and control digital audio CDs
ii  libcdio-paranoia2t64:amd64          10.2+2.0.1-1.1              amd64        library to read digital audio CDs with error correction
ii  libcdio19t64:amd64                  2.1.0-4.1                   amd64        library to read and control CD-ROM
ii  libcfitsio10t64:amd64               4.3.1-1.1+b1                amd64        shared library for I/O with FITS format data files
ii  libclang1-15t64                     1:15.0.7-14                 amd64        C interface to the Clang library
ii  libclang1-16t64                     1:16.0.6-23                 amd64        C interface to the Clang library
ii  libclucene-contribs1t64:amd64       2.3.3.4+dfsg-1.2            amd64        language specific text analyzers (runtime)
ii  libclucene-core1t64:amd64           2.3.3.4+dfsg-1.2            amd64        core library for full-featured text search engine (runtime)
ii  libcmis-0.6-6t64                    0.6.2-2.1+b1                amd64        CMIS protocol client library
ii  libcolord-gtk4-1t64:amd64           0.3.1-1                     amd64        GTK4 convenience library for interacting with colord
ii  libcom-err2t64:amd64                1.47.0-2.3+b1               amd64        common error description library
ii  libcrypto++8t64:amd64               8.9.0-1.1                   amd64        General purpose cryptographic library - shared library
ii  libcups2t64:amd64                   2.4.7-1.2+b1                amd64        Common UNIX Printing System(tm) - Core library
ii  libcupsfilters1t64:amd64            1.28.17-3.1+b1              amd64        OpenPrinting CUPS Filters - Shared library
ii  libcurl4t64:amd64                   8.6.0-4                     amd64        easy-to-use client-side URL transfer library (OpenSSL flavour)
ii  libdb5.3t64:amd64                   5.3.28+dfsg2-6              amd64        Berkeley v5.3 Database Libraries [runtime]
ii  libdirectfb-1.7-7t64:amd64          1.7.7-13                    amd64        direct frame buffer graphics (shared libraries)
ii  libdmapsharing-4.0-3t64:amd64       3.9.13-2                    amd64        DMAP client and server library - runtime
ii  libdmtx0t64:amd64                   0.7.7-1.2                   amd64        Data Matrix barcodes (runtime library)
ii  libdv4t64:amd64                     1.0.0-17.1                  amd64        software library for DV format digital video (runtime lib)
ii  libdvdread8t64:amd64                6.1.3-1.1                   amd64        library for reading DVDs
ii  libdw1t64:amd64                     0.191-1                     amd64        library that provides access to the DWARF debug information
ii  libebackend-1.2-11t64:amd64         3.50.3-2.2                  amd64        Utility library for evolution data servers
ii  libebook-1.2-21t64:amd64            3.50.3-2.2                  amd64        Client library for evolution address books
ii  libebook-contacts-1.2-4t64:amd64    3.50.3-2.2                  amd64        Client library for evolution contacts books
ii  libecal-2.0-2t64:amd64              3.50.3-2.2                  amd64        Client library for evolution calendars
ii  libedata-book-1.2-27t64:amd64       3.50.3-2.2                  amd64        Backend library for evolution address books
ii  libedata-cal-2.0-2t64:amd64         3.50.3-2.2                  amd64        Backend library for evolution calendars

我通过以下方式在笔记本电脑中创建隧道：

ssh -p 22 -CfND 7777 mohsen@myserver

输入我的密码后，连接就建立了。
通过我使用的firefox中的socks5 127.0.0.1:7777 ，我可以浏览许多经过过滤的网站。
但是谷歌或某些网站知道我使用隧道，我如何配置我的 ssh 服务器来告诉谷歌或其他网站我不是假的？

我有一个 pcap 文件，需要将其发送到特定接口。
我该怎么做？

我有一个 shell 脚本，它有 3 个程序：

#!/bin/bash
x
y
z

以上每个程序都是二进制的，必须按顺序运行。程序y是一个守护进程。当 bash 运行时x，它是好的，当y运行时，z不能运行。我运行 y 等nohup y &但z无法运行。

我怎样才能在诸如非阻塞编程z之后运行？y

我的机器上有以下分区：

我想调整大小/dev/sda5并将其粘贴到sda4，但gparted不允许我这样做。
我该怎么做？

假设我有 10 个进程，例如：

process p0 with PID 1.
process p1 with PID 2.
process p2 with PID 3.
process p3 with PID 4.
process p4 with PID 5.
process p5 with PID 6.
process p6 with PID 7.
process p7 with PID 8.
process p8 with PID 9.
process p9 with PID 10.

当我杀死一个进程时，例如：

kill 7

并且进程 p6 被成功杀死，进程 p5 和 p7 之间为空，当我将 p10 作为进程运行时，内核将 PID 11 分配给 p10。

问题是为什么内核（linux和freebsd）分配一个增量PID而不是分配PID 7给进程p11？

我有以下yaml文件：

---
apiVersion: v1
kind: pod
metadata:
    name: Tesing_for_Image_pull -----------> 1
    spec:
        containers:
        - name: mysql ------------------------> 2
          image: mysql ----------> 3
          imagePullPolicy: Always ------------->4
          command: ["echo", "SUCCESS"]  -------------------> 5

运行后kubectl create -f my_yaml.yaml出现以下错误：

error: error converting YAML to JSON: yaml: line 10: did not find expected key

更新：yamllint我收到以下错误：

root@debian:~# yamllint my_yaml.yaml
my_yaml.yaml
  8:9       error    wrong indentation: expected 12 but found 8  (indentation)
  11:41     error    syntax error: expected <block end>, but found '<scalar>'

我的问题在哪里，我该如何解决？

我有 Debian 和 Linux 5.x 内核。我收到以下错误：

# /etc/init.d/tpm2-abrmd status
● tpm2-abrmd.service - TPM2 Access Broker and Resource Management Daemon
   Loaded: loaded (/lib/systemd/system/tpm2-abrmd.service; enabled; vendor preset: enabled)
   Active: activating (auto-restart) (Result: exit-code) since Wed 2019-11-27 08:45:01 +0330; 2s ago
  Process: 5385 ExecStart=/usr/sbin/tpm2-abrmd (code=exited, status=1/FAILURE)
 Main PID: 5385 (code=exited, status=1/FAILURE)

/dev/tpm0文件不存在。

Linux 需要 TPM 吗？
Linux是强制性的吗？

如果需要，我该如何解决我的问题？

我iptables -F熟悉iptables.
我需要iptables从内核中禁用，当然我更喜欢禁用sysctl而不是重新编译内核。

我不想清理/var/cache/apt/archives/，我需要把我的 deb 文件留在那里。哪个 apt 选项适合我？