Blog rafroma

Disable Consistent Interface Device Naming ethX instead ens

GRUB_CMDLINE_LINUX="net.ifnames=0 biosdevname=0"

Customized boot in Zbook

Add in bios
\EFI\debian\shimx64.efi

debian runlevel / inittab

default runlevel
systemctl get-default

List runlevels
systemctl list-units --type=target

root@hphost:~# systemctl list-units --type=target
UNIT LOAD ACTIVE SUB DESCRIPTION
basic.target loaded active active Basic System
bluetooth.target loaded active active Bluetooth
cryptsetup.target loaded active active Local Encrypted Volumes
getty.target loaded active active Login Prompts
graphical.target loaded active active Graphical Interface
local-fs-pre.target loaded active active Local File Systems (Pre)
local-fs.target loaded active active Local File Systems
multi-user.target loaded active active Multi-User System
network.target loaded active active Network
paths.target loaded active active Paths
remote-fs.target loaded active active Remote File Systems
slices.target loaded active active Slices
sockets.target loaded active active Sockets
sound.target loaded active active Sound Card
swap.target loaded active active Swap
sysinit.target loaded active active System Initialization
time-set.target loaded active active System Time Set
time-sync.target loaded active active System Time Synchronized
timers.target loaded active active Timers
virt-guest-shutdown.target loaded active active Libvirt guests shutdown

Change default to 3
systemctl set-default multi-user.target

wipe all partitions on disk

wipefs --all /dev/sdX

wipefs can erase filesystem, raid or partition-table signatures (magic strings) from the specified device to make the signatures invisible for libblkid.

wipefs does not erase the filesystem itself nor any other data from the device. When used without any options, wipefs lists all visible filesystems and the offsets of their basic signatures.

wipefs calls the BLKRRPART ioctl when it has erased a partition-table signature to inform the kernel about the change.

Install / Reinstall Grub

For UEFI, assuming the system partition is sda2 and the EFI partition is sda1.

sudo mount /dev/sda2 /mnt
sudo mount /dev/sda1 /mnt/boot/efi
for i in /dev /dev/pts /proc /sys; do sudo mount -B $i /mnt$i; done
sudo cp /etc/resolv.conf /mnt/etc
modprobe efivars
sudo chroot /mnt
apt purge grub-common
# for secure boot enabled
apt install grub-efi-amd64-signed os-prober shim-signed
# for secure boot disabled
apt install grub-efi-amd64 os-prober
exit
sudo umount /mnt/boot/efi 
sudo umount -R /mnt

For BIOS, assuming the system partition is sda1:

sudo mount /dev/sda1 /mnt
for i in /dev /dev/pts /proc /sys; do sudo mount -B $i /mnt$i; done
sudo cp /etc/resolv.conf /mnt/etc
sudo chroot /mnt
apt purge grub-common
apt install grub-pc os-prober
exit
sudo umount -R /mnt

short brief from https://forums.linuxmint.com/viewtopic.php?t=320504

iptables log to file

Create new chain:

iptables -N DROP-LOG
iptables -A DROP-LOG -m limit --limit 1/second -j LOG --log-prefix "[iptables-drop] "
iptables -A DROP-LOG -j DROP

Create /etc/rsyslog.d/10-iptables.conf and add lines:

:msg,contains,"[iptables-drop] " /var/log/iptables.log
# stop logging anything that matches the last rule.
# Doing this will stop logging kernel log messages to the file
# normally containing kern.* messages (eg, /var/log/kern.log)
& stop

KVM add device

Add hostdev for VF in <devices>. In <source>/<address> use physical address for VF

<hostdev mode='subsystem' type='pci' managed='yes'>
     <source>        
         <address domain='0x0000' bus='0x5e' slot='0x0e' function='0x0'/>
    </source>      
    <address type='pci' domain='0x0000' bus='0x07' slot='0x01' function='0x0'/>  
</hostdev>

KVM install VM with vnc server

Install from img file (with disk size 15G and bridge name inner)

virt-install \
--name=bull \
--vcpus=8 \
--memory=24576 \
--disk path=/var/lib/libvirt/images/bull.qcow2,size=15 \
--cdrom /var/lib/libvirt/iso/debian-11.6.0-amd64-netinst.iso \
--network bridge=inner,mac=52:54:00:40:4a:5e \
--boot hd,uefi \
--machine q35 \
--osinfo detect=on,require=off \
--graphics vnc,listen=<IP_HOST_TO_LISTEN_TO>,password=<SECRET>

Install from PXE

virt-install \
--name=rhpxe \
--vcpus=4 \
--memory=2048 \
--network bridge=br0,mac=52:54:00:0e:27:FF \
--pxe \
--disk none \
--boot uefi \
--osinfo detect=on,require=off \
--graphics vnc,listen=<IP_HOST_TO_LISTEN_TO>,password=<SECRET> 

Mikrotik port forward / redirect

/ip firewall nat add chain=dstnat dst-port=1234 action=dst-nat protocol=tcp to-address=192.168.1.1 to-port=1234

Delete old files

Find only executable
find

find /path/to/dir/ ( ( -type f -daystart -mtime +8 ) -o -type d -empty ) -delete