Eilib Studio

debian 安装完毕添加sudo及更换更新源

Sat, 08 Feb 2025 07:44:20 +0800

Debian安装完毕，未安装sudo，切换到root用户

su

输入密码，切换为root用户

Debian12默认的更新源为光盘源或国外源，速度保障都差强人意。所以安装完系统的第一步就是把源更换为国内源。

备份/etc/apt/sources.list

cp /etc/apt/sources.list /etc/apt/sources.list.bak

编辑/etc/apt/sources.list

nano /etc/apt/sources.list

更换为阿里云镜像源：

deb https://mirrors.aliyun.com/debian/ bookworm main non-free non-free-firmware contrib
deb-src https://mirrors.aliyun.com/debian/ bookworm main non-free non-free-firmware contrib
deb https://mirrors.aliyun.com/debian-security/ bookworm-security main
deb-src https://mirrors.aliyun.com/debian-security/ bookworm-security main
deb https://mirrors.aliyun.com/debian/ bookworm-updates main non-free non-free-firmware contrib
deb-src https://mirrors.aliyun.com/debian/ bookworm-updates main non-free non-free-firmware contrib
deb https://mirrors.aliyun.com/debian/ bookworm-backports main non-free non-free-firmware contrib
deb-src https://mirrors.aliyun.com/debian/ bookworm-backports main non-free non-free-firmware contrib

更换为腾讯云镜像源：

deb https://mirrors.tencent.com/debian/ bookworm main non-free non-free-firmware contrib
deb-src https://mirrors.tencent.com/debian/ bookworm main non-free non-free-firmware contrib
deb https://mirrors.tencent.com/debian-security/ bookworm-security main
deb-src https://mirrors.tencent.com/debian-security/ bookworm-security main
deb https://mirrors.tencent.com/debian/ bookworm-updates main non-free non-free-firmware contrib
deb-src https://mirrors.tencent.com/debian/ bookworm-updates main non-free non-free-firmware contrib
deb https://mirrors.tencent.com/debian/ bookworm-backports main non-free non-free-firmware contrib
deb-src https://mirrors.tencent.com/debian/ bookworm-backports main non-free non-free-firmware contrib

更换为清华镜像源：

deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bookworm main contrib non-free non-free-firmware
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bookworm main contrib non-free non-free-firmware
deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bookworm-updates main contrib non-free non-free-firmware
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bookworm-updates main contrib non-free non-free-firmware
deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bookworm-backports main contrib non-free non-free-firmware
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bookworm-backports main contrib non-free non-free-firmware
deb https://mirrors.tuna.tsinghua.edu.cn/debian-security bookworm-security main contrib non-free non-free-firmware
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian-security bookworm-security main contrib non-free non-free-firmware

更换为中科大镜像源：

deb https://mirrors.ustc.edu.cn/debian/ bookworm main contrib non-free non-free-firmware
deb-src https://mirrors.ustc.edu.cn/debian/ bookworm main contrib non-free non-free-firmware
deb https://mirrors.ustc.edu.cn/debian/ bookworm-updates main contrib non-free non-free-firmware
deb-src https://mirrors.ustc.edu.cn/debian/ bookworm-updates main contrib non-free non-free-firmware
deb https://mirrors.ustc.edu.cn/debian/ bookworm-backports main contrib non-free non-free-firmware
deb-src https://mirrors.ustc.edu.cn/debian/ bookworm-backports main contrib non-free non-free-firmware
deb https://mirrors.ustc.edu.cn/debian-security/ bookworm-security main contrib non-free non-free-firmware
deb-src https://mirrors.ustc.edu.cn/debian-security/ bookworm-security main contrib non-free non-free-firmware

退出保存后执行：

apt-get update
apt-get upgrade

安装sudo

apt-get install sudo

安装完成后，退出root用户

exit

编辑sudoers文件

nano /etc/sudoers

在root ALL=(ALL:ALL) ALL后添加

username ALL=(ALL:ALL) ALL

username替换为你的用户名，保存退出

LEDE 旁路由设置

Sat, 25 Jan 2025 19:13:07 +0800

主路由：ASUS TUF GAMING 小旋风 Pro

双wan：pppoe拨号设置,DNS自动获取即可

LAN IP：192.168.8.1

子网掩码：255.255.255.0

DHCP：网关设置为旁路由IP（192.168.8.2）

DNS设置为旁路由IP（192.168.8.2）

旁路由：PVE虚拟机（硬盘：80G RAM：8G CPU：2核2线程）

LAN IP：192.168.8.2

子网掩码：255.255.255.0

网关：192.168.8.1

DNS：192.168.8.1

IPV6：关闭

网络配置文件：/etc/config/network

nano /etc/config/network
config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fdca:db38:b610::/48'
        option packet_steering '1'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth0'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option netmask '255.255.255.0'
        option gateway '192.168.8.1'
        list dns '192.168.8.1'
        option ipaddr '192.168.8.2'
        option broadcast '192.168.8.255'

config interface 'docker'
        option proto 'none'
        option auto '0'
        option device 'docker0'

config device
        option type 'bridge'
        option name 'docker0'

LEDE 插件选择

Sat, 25 Jan 2025 09:22:55 +0800

选择samba 4 替换ksmbd

Extra packages  --->
       <*> autosamba............................... Samba autoconfig hotplug script. (NEW)
              Samba Server Selection (SAMBA 4)  --->
                     ( ) KSMBD
                     ( ) SAMBA 3
                     (X) SAMBA 4

选择openssh-sftp-server

Network  --->
    SSH  --->
        <*> openssh-sftp-server.................................. OpenSSH SFTP server

选择nano-full

Utilities  --->
    <*> nano-full................... GNU nano text editor (all features, Unicode)

常用Applications选择

 <*> luci-app-accesscontrol................. LuCI Access Control Configuration
 < > luci-app-acl.............................. LuCI account management module
 < > luci-app-acme.............................. ACME package - LuCI interface
 < > luci-app-adblock................................ LuCI support for Adblock
 < > luci-app-adblock-fast................................ AdBlock-Fast Web UI
 < > luci-app-adguardhome............................ LuCI app for AdGuardHome
 [ ] Include Binary File
 < > luci-app-advanced.............. LuCI Support for advanced and filebrowser
 < > luci-app-advanced-reboot.................. Advanced Linksys Reboot Web UI
 < > luci-app-advancedsetting................ LuCI Support for advancedsetting
 < > luci-app-ahcp..................................... LuCI Support for AHCPd
 < > luci-app-airplay2....................... Luci for Apple Airplay2 Receiver
 < > luci-app-aliddns................................ LuCI Support for aliddns
 < > luci-app-alist.................................... LuCI support for alist
 < > luci-app-aliyundrive-webdav.......... LuCI Support for aliyundrive-webdav
 < > luci-app-amule.................................... LuCI support for Amule
 < > luci-app-apinger............................ LuCI support for the Apinger
 <*> luci-app-argon-config............. LuCI app for Argon theme configuration
 < > luci-app-argone-config....................... LuCI page for Argone Config
 < > luci-app-aria2.................................... LuCI Support for Aria2
 < > luci-app-arpbind............................................. ARP Binding
 < > luci-app-attendedsysupgrade........ LuCI support for attended sysupgrades
 <*> luci-app-autoreboot.................... LuCI support for Scheduled Reboot
 < > luci-app-babeld.................................. LuCI support for babeld
 < > luci-app-banip.................................... LuCI support for banIP
 < > luci-app-bcp38...................................... BCP38 LuCI interface
 < > luci-app-bird1-ipv4.......................... LuCI support for bird1-ipv4
 < > luci-app-bird1-ipv6.......................... LuCI support for bird1-ipv6
 < > luci-app-bmx6........ bmx6 configuration, status and visualization module
 < > luci-app-bmx7...................................... LuCI support for BMX7
 <*> luci-app-bypass.. SS/SSR/Xray/Trojan/NaiveProxy/Socks5/Tun LuCI interface
 [*] Include Shadowsocks Libev Client
 [*] Include Shadowsocks Libev Server
 [*] Include ShadowsocksR Libev Client
 [*] Include ShadowsocksR Libev Server
 [*] Include Shadowsocks Simple Obfs Plugin
 [ ] Include Shadowsocks V2ray Plugin
 [*] Include Xray
 [*] Include Trojan
 [ ] Include NaiveProxy
 [ ] Include Kcptun
 [ ] Include Hysteria
 [ ] Include Socks5 Transparent Proxy
 [*] Include Socks Sever
 < > luci-app-cd8021x..................... a wired IEEE 802.1x client for Luci
 < > luci-app-cifs.............................................. luci-app-cifs
 < > luci-app-cifs-mount.............................. LuCI for SMB/CIFS Mount
 < > luci-app-cjdns............ Encrypted near-zero-conf mesh routing protocol
 < > luci-app-clamav.................................... ClamAV LuCI interface
 < > luci-app-clash........................................ LuCI app for clash
 < > luci-app-cloudflared................................ LuCI for Cloudflared
 < > luci-app-commands.............................. LuCI Shell Command Module
 < > luci-app-cpulimit.......................... cpulimit configuration module
 < > luci-app-crowdsec-firewall-bouncer
 < > luci-app-cshark........................... Cloudshark capture tool Web UI
 < > luci-app-dawn...................................... LuCI support for DAWN
 < > luci-app-dcwapd........ Dual Channel Wi-Fi AP Daemon configuration module
 < > luci-app-ddns......... LuCI Support for Dynamic DNS Client (ddns-scripts) 
 < > luci-app-ddns-go................. LuCI Support for Dynamic ddns-go Client
 < > luci-app-ddnsto.................................. LuCI support for ddnsto
 < > luci-app-design-config....................... LuCI page for Design Config
 < > luci-app-diag-core......................... LuCI Diagnostics Tools (Core) (NEW)
 <*> luci-app-diskman......................... Disk Manager interface for LuCI (NEW)
 [ ] Include btrfs-progs (NEW)                                                      
 [ ] Include lsblk (NEW)                                                            
 [ ] Include mdadm (NEW)                                                            
 < > luci-app-dnscrypt-proxy.................. LuCI support for DNSCrypt-Proxy (NEW)
 < > luci-app-dnsfilter............................ LuCI support for DNSFilter (NEW)
 <*> luci-app-dockerman............................... LuCI Support for docker (NEW)
 < > luci-app-dufs...................................... LuCI support for dufs (NEW)
 < > luci-app-dump1090.............................. LuCI Support for dump1090 (NEW)
 < > luci-app-dynapoint............................ LuCI Support for DynaPoint (NEW)
 < > luci-app-easymesh.............................. LuCI Support for easymesh (NEW)
 < > luci-app-eoip...................................... LuCI Support for EoIP (NEW)
 < > luci-app-eqos...................................... EQOS - LuCI interface (NEW)
 < > luci-app-example...................... LuCI example app for js based luci (NEW)
 < > luci-app-fchomo (NEW)                                                          
 < > luci-app-fileassistant.................... LuCI support for Fileassistant (NEW)
 < > luci-app-filebrowser........................ LuCI Support for FileBrowser (NEW)
 <*> luci-app-filetransfer........................... LuCI page for IPK upload (NEW)
 -*- luci-app-firewall................ Firewall and Portforwarding application      
 < > luci-app-frpc................................ LuCI Support for frp client (NEW)
 < > luci-app-frps................................ LuCI Support for frp server (NEW)
 < > luci-app-fwknopd (NEW)                                                         
 < > luci-app-gost...................................... LuCI support for Gost (NEW)
 < > luci-app-haproxy-tcp.................... luci for haproxy and shadowsocks (NEW)
 < > luci-app-hd-idle......................... Hard Disk Idle Spin-Down module (NEW)
 < > luci-app-hnet............... HNCP Homenet configuration and visualization (NEW)
 < > luci-app-homeproxy. The modern ImmortalWrt proxy platform for ARM64/AMD64 (NEW)
 < > luci-app-https-dns-proxy..................... DNS Over HTTPS Proxy Web UI (NEW)
 < > luci-app-ikoolproxy........................... LuCI support for koolproxy (NEW)
 < > luci-app-ipsec-vpnd (NEW)                                                      
 < > luci-app-istorex................................................. IstoreX (NEW)
 < > luci-app-keepalived...................... LuCI support for the Keepalived (NEW)
 < > luci-app-kodexplorer........................ LuCI support for KodExplorer (NEW)
 < > luci-app-ksmbd.......... Network Shares - Ksmbd the SMB kernel fileserver (NEW)
 < > luci-app-ledtrig-rssi................... LuCI Support for ledtrigger rssi (NEW)
 < > luci-app-ledtrig-switch............... LuCI Support for ledtrigger switch (NEW)
 < > luci-app-ledtrig-usbport............. LuCI Support for ledtrigger usbport (NEW)
 < > luci-app-leigod-acc..................... Luci for Leigod Game Accelerater (NEW)
 < > luci-app-lorawan-basicstation...... LuCI Support for LoRaWAN basicstation (NEW)
 < > luci-app-lucky..................... LuCI Support for Dynamic lucky Client (NEW)
 < > luci-app-lxc....................................... LXC management Web UI (NEW)
 < > luci-app-microsocks.......................... LuCI support for MicroSocks (NEW)
 < > luci-app-minidlna.............................. LuCI Support for miniDLNA (NEW)
 < > luci-app-minieap.......................... minieap 802.1X Client for LuCI (NEW)
 < > luci-app-mjpg-streamer........ MJPG-Streamer service configuration module (NEW)
 < > luci-app-mosdns.................................. LuCI Support for mosdns (NEW)
 < > luci-app-msd_lite.............. LuCI support for Multi stream daemon lite (NEW)
 < > luci-app-music-remote-center................ Luci for Music Remote Center (NEW)
 < > luci-app-mwan3............... LuCI support for the MWAN3 MultiWAN Manager (NEW)
 < > luci-app-mwan3helper....................... LuCI support for MWAN3 Helper (NEW)
 < > luci-app-mwol...................................... LuCI Support for Mwol (NEW)
 < > luci-app-n2n................................ n2n VPN Configuration module (NEW)
 < > luci-app-natmap.................................. LuCI Support for natmap (NEW)
 < > luci-app-netdata................................ LuCI support for netdata (NEW)
 < > luci-app-nextdns................................ LuCI support for NextDNS (NEW)
 < > luci-app-nfs........................................ LuCI support for nfs (NEW)
 < > luci-app-nft-qos....................................... QoS over Nftables (NEW)
 < > luci-app-ngrokc................................. LuCI support for ngrokc. (NEW)
 < > luci-app-njitclient.......................... NJIT 802.1X Client for LuCI (NEW)
 <*> luci-app-nlbwmon...................... Netlink based bandwidth accounting (NEW)
 < > luci-app-nut............................. Network UPS Tools Configuration (NEW)
 < > luci-app-ocserv......................... LuCI Support for OpenConnect VPN (NEW)
 < > luci-app-olsr....................... OLSR configuration and status module (NEW)
 < > luci-app-olsr-services (NEW)                                                   
 < > luci-app-olsr-viz..................................... OLSR Visualisation (NEW)
 < > luci-app-omcproxy.............................. LuCI support for omcproxy (NEW)
 < > luci-app-openclash................................ LuCI support for clash (NEW)
 < > luci-app-openvpn................................ LuCI Support for OpenVPN (NEW)
 < > luci-app-openvpn-server.................. LuCI support for OpenVPN Server (NEW)
 < > luci-app-openwisp.............................. LuCI support for OpenWISP (NEW)
 -*- luci-app-opkg........................ OPKG package management application      
 < > luci-app-oscam.................................... LuCI Support for oscam (NEW)
 < > luci-app-p910nd........................... p910nd - Printer server module (NEW)
 < > luci-app-pagekitec............................. LuCI Support for PageKite (NEW)
 < > luci-app-partexp.............. LuCI Support for Automatic Partition Mount (NEW)
 < > luci-app-passwall.............................. LuCI support for PassWall (NEW)
 < > luci-app-passwall2........................... LuCI support for PassWall 2 (NEW)
 Configuration  --->                                                            
 < > luci-app-pbr......................... Policy Based Routing Service Web UI (NEW)
 < > luci-app-pcimodem....................................... PCI Modem Server (NEW)
 < > luci-app-pgyvpn...................... LuCI Support for the PuGongYing VPN (NEW)
 < > luci-app-phtunnel.......................... LuCI Support for the PHTunnel (NEW)
 < > luci-app-polipo........................ LuCI Support for the Polipo Proxy (NEW)
 < > luci-app-pppwn.................................... LuCI support for PPPWN (NEW)
 < > luci-app-privoxy...................... LuCI Support for Privoxy WEB proxy (NEW)
 < > luci-app-qbittorrent........................ LuCI support for qBittorrent (NEW)
 < > luci-app-qos..................... Quality of Service configuration module (NEW)
 < > luci-app-quickstart......................... LuCI support for quickstart  (NEW)
 < > luci-app-radicale............... LuCI Support for Radicale CardDAV/CalDAV (NEW)
 < > luci-app-radicale2................... Radicale v2.x CalDAV/CardDAV Server (NEW)
 < > luci-app-ramfree........................................ luci-app-ramfree (NEW)
 < > luci-app-rclone.................................. LuCI support for Rclone (NEW)
 [ ] Include rclone-webui (NEW)                                                     
 [ ] Include rclone-ng (another webui) (NEW)                                        
 < > luci-app-rp-pppoe-server.................... Roaring Penguin PPPoE Server (NEW)
 < > luci-app-samba.................... Network Shares - Samba SMB/CIFS module (NEW)
 -*- luci-app-samba4............. Network Shares - Samba 4 SMB/CIFS fileserver      
 < > luci-app-scutclient.......................... LuCI Support for scutclient (NEW)
 < > luci-app-ser2net................................ LuCI Support for ser2net (NEW)
 < > luci-app-serverchan.......................... LuCI support for serverchan (NEW)
 < > luci-app-shadowsocks-libev............ LuCI Support for shadowsocks-libev (NEW)
 < > luci-app-shairplay............................ LuCI Support for Shairplay (NEW)
 < > luci-app-siitwizard............. SIIT IPv4-over-IPv6 configuration wizard (NEW) 
 < > luci-app-smartdns...................................... LuCI for smartdns (NEW)
 < > luci-app-snmpd................................... Net-SNMP LuCI interface (NEW)
 < > luci-app-socat.................................... LuCI support for Socat (NEW)
 < > luci-app-softether...................... Softether management application (NEW)
 < > luci-app-splash......................... Freifunk DHCP-Splash application (NEW)
 < > luci-app-sqm................................ LuCI Support for SQM Scripts (NEW)
 < > luci-app-squid...................................... Squid LuCI Interface (NEW)
 < > luci-app-sshtunnel...... LuCI support for SSH Tunnels (sshtunnel package) (NEW)
 < > luci-app-ssr-plus (NEW)                                                        
 Uclient SSL Lib Selection (libustream-openssl)  --->                           
 Shadowsocks Client Selection (Shadowsocks-rust)  --->                          
 Shadowsocks Server Selection (Shadowsocks-libev)  --->                         
 V2ray-core Selection (Xray-core)  --->                                         
 [ ] Include ChinaDNS-NG (NEW)                                                      
 [ ] Include MosDNS (NEW)                                                           
 [ ] Include Hysteria (NEW)                                                         
 [ ] Include Tuic-Client (NEW)
 [ ] Include Shadow-TLS (NEW)                                                       
 [ ] Include IPT2Socks (NEW)                                                        
 [ ] Include Kcptun (NEW)                                                           
 [ ] Include NaiveProxy (NEW)                                                       
 [ ] Include Redsocks2 (NEW)                                                        
 [ ] Include Shadowsocks Simple Obfs Plugin (NEW)                                   
 [ ] Include Shadowsocks V2ray Plugin (NEW)                                         
 [ ] Include ShadowsocksR Libev Client (NEW)                                        
 [ ] Include ShadowsocksR Libev Server (NEW)                                        
 [ ] Include Trojan (NEW)                                                           
 < > luci-app-statistics.......................... LuCI Statistics Application (NEW)
 < > luci-app-store...................................... LuCI based ipk store (NEW)
 < > luci-app-syncdial........................... Virtual WAN config generator (NEW)
 < > luci-app-syncthing............................ LuCI support for syncthing (NEW)
 < > luci-app-sysuh3c......................... SYSU H3C 802.1X Client for LuCI (NEW)
 < > luci-app-tailscale.................................... LuCI for Tailscale (NEW)
 < > luci-app-timecontrol....................... LuCI support for Time Control (NEW)
 < > luci-app-timewol................................ LuCI support for Timewol (NEW)
 < > luci-app-tinyproxy............... Tinyproxy - HTTP(S)-Proxy configuration (NEW)
 < > luci-app-tor................................... LuCI app to configure Tor (NEW)
 < > luci-app-transmission...................... LuCI Support for Transmission (NEW)
 < > luci-app-travelmate.......................... LuCI support for Travelmate (NEW)
 < > luci-app-trojan-server.................... LuCI support for Trojan Server (NEW)
 <*> luci-app-ttyd. ttyd - Command-line tool for sharing terminal over the web (NEW)
 <*> luci-app-turboacc.............................. LuCI support for FastPath (NEW)
 FastPath Engine (Use flow offloading)  --->                                    
 [*] Enable BBR CCA (NEW)                                                           
 < > luci-app-ua2f...................................... LuCI support for ua2f (NEW)
 < > luci-app-udpxy.................................... LuCI Support for udpxy (NEW)
 < > luci-app-uhttpd........................... uHTTPd Webserver Configuration (NEW)
 < > luci-app-unblockneteasemusic........ LuCI support for UnblockNeteaseMusic (NEW)
 < > luci-app-unbound............ Unbound Recursive DNS Resolver Configuration (NEW)
 <*> luci-app-upnp................. Universal Plug & Play configuration module (NEW)
 < > luci-app-usb-printer........................ USB Printer Share via TCP/IP (NEW)
 < > luci-app-usbmodem........................................... Modem Server (NEW)
 < > luci-app-usteer........................ LuCI usteer app for js based luci (NEW)
 < > luci-app-uugamebooster.................... LuCI support for UUgamebooster (NEW)
 < > luci-app-v2ray-server...................... LuCI support for V2ray Server (NEW)
 < > luci-app-v2raya.................................. LuCI support for v2rayA (NEW)
 < > luci-app-verysync.............................. LuCI support for Verysync (NEW)
 < > luci-app-vlmcsd........................................ LuCI page for KMS (NEW)   
 < > luci-app-vnstat.................................. LuCI Support for VnStat (NEW)
 < > luci-app-vnstat2............................... LuCI Support for vnStat 2 (NEW)
 < > luci-app-vsftpd.................................. LuCI support for VSFTPD (NEW)
 < > luci-app-watchcat.............................. LuCI Support for Watchcat (NEW)
 < > luci-app-webadmin................................ LuCI page for Web Admin (NEW)
 < > luci-app-webrestriction.................. LuCI support for Webrestriction (NEW)
 < > luci-app-wifischedule...... Turns WiFi on and off according to a schedule (NEW)
 <*> luci-app-wol................................ LuCI Support for Wake-on-LAN (NEW)
 < > luci-app-xfrpc.................................... LuCI Support for xfrpc (NEW)
 < > luci-app-xinetd.................................. LuCI Support for xinetd (NEW)
 < > luci-app-xlnetacc.............................. LuCI Support for XLNetAcc (NEW)
 < > luci-app-xupnpd..................................... LuCI page for XUPNPD (NEW)
 < > luci-app-zerotier...................................... LuCI for Zerotier (NEW)

修改Adguard Home用户名及密码

Mon, 20 Jan 2025 00:38:33 +0800

1、修改用户名

2、修改密码

访问https://www.bejson.com/encrypt/bcrpyt_encode/

输入密码
Rounds输入5

点击“生成”

复制生成的加密串到配置文件

Adguard Home DNS设置

Mon, 20 Jan 2025 00:24:42 +0800

推荐上游DNS设置

#阿里DNS <10ms
223.5.5.5
223.6.6.6
https://dns.alidns.com/dns-query
tls://dns.alidns.com
#百度DNS <40ms
180.76.76.76
#腾讯DNS <50ms
119.29.29.29
https://dns.pub/dns-query
https://doh.pub/dns-query
tls://dot.pub
#Neustar Recursive DNS <40ms
156.154.70.1
156.154.71.1
156.154.70.5
156.154.71.5
#谷歌DNS <50ms
8.8.8.8
https://dns.google/dns-query
tls://dns.google
#Cisco OpenDNS <60ms
208.67.222.222
208.67.220.220
https://doh.opendns.com/dns-query
tls://dns.opendns.com

后备DNS设置

101.226.4.6
218.30.118.6
123.125.81.6
140.207.198.6

Bootstrap DNS设置

223.5.5.5
119.29.29.29
8.8.8.8

上游DNS平均响应时间

tls://dns.alidns.com:853                    7 ms
223.5.5.5:53                                7 ms
223.6.6.6:53                                8 ms
https://dns.alidns.com:443/dns-query        8 ms
119.29.29.29:53                             35 ms
180.76.76.76:53                             35 ms
8.8.8.8:53                                  35 ms
156.154.71.5:53                             38 ms
tls://dot.pub:853                           41 ms
https://doh.pub:443/dns-query               43 ms
tls://dns.opendns.com:853                   43 ms
https://dns.google:443/dns-query            50 ms
https://doh.opendns.com:443/dns-query       57 ms
156.154.70.5:53                             59 ms
tls://dns.google:853                        60 ms
https://dns.pub:443/dns-query               75 ms
156.154.70.1:53                             241 ms

Openwrt 更新源

Mon, 20 Jan 2025 00:22:30 +0800

nano /etc/opkg/distfeeds.conf

官方

src/gz openwrt_core https://downloads.openwrt.org/releases/24.10.0/targets/x86/64/packages
src/gz openwrt_base https://downloads.openwrt.org/releases/24.10.0/packages/x86_64/base
src/gz openwrt_luci https://downloads.openwrt.org/releases/24.10.0/packages/x86_64/luci
src/gz openwrt_packages https://downloads.openwrt.org/releases/24.10.0/packages/x86_64/packages
src/gz openwrt_routing https://downloads.openwrt.org/releases/24.10.0/packages/x86_64/routing
src/gz openwrt_telephony https://downloads.openwrt.org/releases/24.10.0/packages/x86_64/telephony

中科大

src/gz openwrt_core https://mirrors.ustc.edu.cn/openwrt/releases/24.10.0/targets/x86/64/packages
src/gz openwrt_base https://mirrors.ustc.edu.cn/openwrt/releases/24.10.0/packages/x86_64/base
src/gz openwrt_luci https://mirrors.ustc.edu.cn/openwrt/releases/24.10.0/packages/x86_64/luci
src/gz openwrt_packages https://mirrors.ustc.edu.cn/openwrt/releases/24.10.0/packages/x86_64/packages
src/gz openwrt_routing https://mirrors.ustc.edu.cn/openwrt/releases/24.10.0/packages/x86_64/routing
src/gz openwrt_telephony https://mirrors.ustc.edu.cn/openwrt/releases/24.10.0/packages/x86_64/telephony

清华

src/gz openwrt_core https://mirrors.tuna.tsinghua.edu.cn/openwrt/releases/24.10.0/targets/x86/64/packages
src/gz openwrt_base https://mirrors.tuna.tsinghua.edu.cn/openwrt/releases/24.10.0/packages/x86_64/base
src/gz openwrt_luci https://mirrors.tuna.tsinghua.edu.cn/openwrt/releases/24.10.0/packages/x86_64/luci
src/gz openwrt_packages https://mirrors.tuna.tsinghua.edu.cn/openwrt/releases/24.10.0/packages/x86_64/packages
src/gz openwrt_routing https://mirrors.tuna.tsinghua.edu.cn/openwrt/releases/24.10.0/packages/x86_64/routing
src/gz openwrt_telephony https://mirrors.tuna.tsinghua.edu.cn/openwrt/releases/24.10.0/packages/x86_64/telephony

教育网

src/gz openwrt_core https://openwrt.proxy.ustclug.org/releases/24.10.0/targets/x86/64/packages
src/gz openwrt_base https://openwrt.proxy.ustclug.org/releases/24.10.0/packages/x86_64/base
src/gz openwrt_luci https://openwrt.proxy.ustclug.org/releases/24.10.0/packages/x86_64/luci
src/gz openwrt_packages https://openwrt.proxy.ustclug.org/releases/24.10.0/packages/x86_64/packages
src/gz openwrt_routing https://openwrt.proxy.ustclug.org/releases/24.10.0/packages/x86_64/routing
src/gz openwrt_telephony https://openwrt.proxy.ustclug.org/releases/24.10.0/packages/x86_64/telephony

腾讯网

src/gz openwrt_core https://mirrors.cloud.tencent.com/openwrt/releases/24.10.0/targets/x86/64/packages
src/gz openwrt_base https://mirrors.cloud.tencent.com/openwrt/releases/24.10.0/packages/x86_64/base
src/gz openwrt_luci https://mirrors.cloud.tencent.com/openwrt/releases/24.10.0/packages/x86_64/luci
src/gz openwrt_packages https://mirrors.cloud.tencent.com/openwrt/releases/24.10.0/packages/x86_64/packages
src/gz openwrt_routing https://mirrors.cloud.tencent.com/openwrt/releases/24.10.0/packages/x86_64/routing
src/gz openwrt_telephony https://mirrors.cloud.tencent.com/openwrt/releases/24.10.0/packages/x86_64/telephony

阿里 (x86_64)

src/gz openwrt_core https://mirrors.aliyun.com/openwrt/releases/24.10.0/targets/x86/64/packages
src/gz openwrt_base https://mirrors.aliyun.com/openwrt/releases/24.10.0/packages/x86_64/base
src/gz openwrt_luci https://mirrors.aliyun.com/openwrt/releases/24.10.0/packages/x86_64/luci
src/gz openwrt_packages https://mirrors.aliyun.com/openwrt/releases/24.10.0/packages/x86_64/packages
src/gz openwrt_routing https://mirrors.aliyun.com/openwrt/releases/24.10.0/packages/x86_64/routing
src/gz openwrt_telephony https://mirrors.aliyun.com/openwrt/releases/24.10.0/packages/x86_64/telephony 
src/gz openwrt_kmod https://mirrors.aliyun.com/openwrt/releases/24.10.0/targets/x86/64/kmods/6.6.73-1-a21259e4f338051d27a6443a3a7f7f1f
src/gz oldopenwrt_packages https://mirrors.aliyun.com/openwrt/releases/23.05.5/packages/x86_64/packages 
src/gz ddlkids https://op.dllkids.xyz/packages/x86_64

阿里（MT7981）
Cudy TR3000 Glinet MT3000等

src/gz openwrt_core https://mirrors.aliyun.com/openwrt/releases/24.10.0/targets/mediatek/filogic/packages
src/gz openwrt_base https://mirrors.aliyun.com/openwrt/releases/24.10.0/packages/aarch64_cortex-a53/base
src/gz openwrt_luci https://mirrors.aliyun.com/openwrt/releases/24.10.0/packages/aarch64_cortex-a53/luci
src/gz openwrt_packages https://mirrors.aliyun.com/openwrt/releases/24.10.0/packages/aarch64_cortex-a53/packages 
src/gz openwrt_routing https://mirrors.aliyun.com/openwrt/releases/24.10.0/packages/aarch64_cortex-a53/routing
src/gz openwrt_telephony https://mirrors.aliyun.com/openwrt/releases/24.10.0/packages/aarch64_cortex-a53/telephony  
src/gz openwrt_kmod https://mirrors.aliyun.com/openwrt/releases/24.10.0/targets/mediatek/filogic/kmods/6.6.73-1-d649d775435da5a8637f7a955a80d331
src/gz oldopenwrt_packages https://mirrors.aliyun.com/openwrt/releases/23.05.5/packages/aarch64_cortex-a53/packages
src/gz ddlkids https://op.dllkids.xyz/packages/aarch64_cortex-a53

其他软件包(kwrt)

src/gz kwrt_core https://dl.openwrt.ai/releases/24.10/targets/x86/64/6.6.73
src/gz kwrt_base https://dl.openwrt.ai/releases/24.10/packages/x86_64/base
src/gz kwrt_packages https://dl.openwrt.ai/releases/24.10/packages/x86_64/packages
src/gz kwrt_luci https://dl.openwrt.ai/releases/24.10/packages/x86_64/luci
src/gz kwrt_routing https://dl.openwrt.ai/releases/24.10/packages/x86_64/routing
src/gz kwrt_kiddin9 https://dl.openwrt.ai/releases/24.10/packages/x86_64/kiddin9
src/gz ddlkids https://op.dllkids.xyz/packages/x86_64

https://istore.istoreos.com/repo/all/compat
https://istore.istoreos.com/repo/all/meta 
https://istore.istoreos.com/repo/all/nas_luci 
https://istore.istoreos.com/repo/all/store

注意：

更换更新源时注意版本号

部分依赖v24.10.0未提供需要23.05.5

根据不同的硬件平台替换 x86_64 如：

aarch64_cortex-a53

编译LEDE

Mon, 04 Nov 2024 03:20:45 +0800

1、安装编译依赖

sudo apt update -y
sudo apt full-upgrade -y
sudo apt install -y ack antlr3 asciidoc autoconf automake autopoint binutils bison build-essential \
bzip2 ccache clang cmake cpio curl device-tree-compiler flex gawk gcc-multilib g++-multilib gettext \
genisoimage git gperf haveged help2man intltool libc6-dev-i386 libelf-dev libfuse-dev libglib2.0-dev \
libgmp3-dev libltdl-dev libmpc-dev libmpfr-dev libncurses5-dev libncursesw5-dev libpython3-dev \
libreadline-dev libssl-dev libtool llvm lrzsz msmtp ninja-build p7zip p7zip-full patch pkgconf \
python3 python3-pyelftools python3-setuptools qemu-utils rsync scons squashfs-tools subversion \
swig texinfo uglifyjs upx-ucl unzip vim wget xmlto xxd zlib1g-dev

2、克隆源代码

git clone https://github.com/coolsnowwolf/lede

3、添加软件包

3.1 用nano编辑器编辑feeds.conf.default文件

cd lede
nano feeds.conf.default

3.2 将如下代码中的#去掉，并保存

#src-git helloworld https://github.com/fw876/helloworld

或者直接使用

sed -i 's/#src-git helloworld/src-git helloworld/g' feeds.conf.default

或者加入其他大佬的插件包

sed -i '1i src-git kenzo https://github.com/kenzok8/openwrt-packages' feeds.conf.default
sed -i '2i src-git small https://github.com/kenzok8/small' feeds.conf.default

加入iStoreOS插件包

sed -i '3i src-git nas   feeds.conf.default

4、修改默认ip设置

nano package/base-files/files/bin/config_generate
lan) ipad=${ipaddr:-"192.168.1.1"} ;;  #修改lan口ip

或者直接使用

sed -i 's/192.168.1.1/192.168.8.2/g' package/base-files/files/bin/config_generate

注：实际编译时上述方法未起效

/package/base-files/files/lib/functions/uci-defaults.sh

5、更新 feeds 并选择配置

./scripts/feeds update -a
./scripts/feeds install -a
make menuconfig

6、下载 dl 库，编译固件（-j 后面是线程数，第一次编译推荐用单线程）

make download -j8
make V=s -j1

二次编译：

cd lede
git pull
./scripts/feeds update -a
./scripts/feeds install -a
make defconfig
make download -j8
make V=s -j$(nproc)

重新配置：

rm -rf .config
make menuconfig
make V=s -j$(nproc)

清理插件：

./scripts/feeds update -a
rm -rf feeds/luci/applications/luci-app-mosdns
rm -rf feeds/packages/net/{alist,adguardhome,mosdns,xray*,v2ray*,v2ray*,sing*,smartdns}
rm -rf feeds/packages/utils/v2dat
rm -rf feeds/packages/lang/golang
git clone https://github.com/kenzok8/golang feeds/packages/lang/golang
./scripts/feeds install -a
make menuconfig

修正boot分区<1MB

sed -i 's/256/1024/g' target/linux/x86/image/Makefile

替换 golang 为 1.22.x 版本

rm -rf feeds/packages/lang/golang
git clone https://github.com/sbwml/packages_lang_golang -b 22.x feeds/packages/lang/golang

https://github.com/openwrt/openwrt
https://github.com/coolsnowwolf/lede
https://github.com/haiibo/openwrt-packages
https://github.com/kenzok8/openwrt-packages
https://github.com/sirpdboy/sirpdboy-package

http://op.dllkids.xyz/packages/
https://dl.openwrt.ai/releases/24.10/packages/

Keil C51 汉字0xFD补丁

Sat, 31 Aug 2024 10:04:44 +0800

KeilFix Release.zip

点击修正

选择一个exe文件

使用diskpart命令挂载EFI分区

Fri, 30 Aug 2024 06:23:32 +0800

使用管理员模式进入cmd或Powershell

diskpart
diskpart> list disk       # 列出磁盘清单
diskpart> select disk 0      # 选择目标磁盘
diskpart> list partition       # 列出分区清单
diskpart> select partition 0   # 选择目标分区
diskpart> set id=ebd0a0a2-b9e5-4433-87c0-68b6b72699c7   #把分区id 改为系统能识别的id ，不影响使用
diskpart> assign letter=x     # x为手动分配的盘符）
diskpart> set id=c12a7328-f81f-11d2-ba4b-00a0c93ec93b   #把挂载的EFI分区隐藏成真正的EFI系统分区

Apache 部署SSL

Fri, 30 Aug 2024 06:17:26 +0800

第一步：申请证书

申请证书，如亚信的证书。

在/etc/ssl目录下建立目录用于放置证书

cd /etc/ssl
mkdir xxx.com     #xxx.com<--域名
cd xxx.com

将证书拷贝到/etc/ssl/xxx.com里

证书修改为:/etc/ssl/xxx.com/cert.pem

私钥修改为:/etc/ssl/xxx.com/key.pem

第二步：修改/etc/apache2/sites-available/default-ssl.conf设置

nano /etc/apache2/sites-available/default-ssl.conf
SSLEngine on
#替换成你的证书文件路径
SSLCertificateFile /etc/ssl/xxx.com/cert.pem
#替换成你的私钥文件路径
SSLCertificateKeyFile /etc/ssl/xxx.com/key.pem

保存设置

将配置文件连接至/etc/apache2/sites-enabled/default-ssl.conf

ln -s /etc/apache2/sites-available/default-ssl.conf /etc/apache2/sites-enabled/default-ssl.conf
#开启ssl模块
sudo a2enmod ssl
#重启apache2
sudo systemctl restart apache2

第三步：测试SSL配置是否正常

https://myssl.com 测试证书

第四步：修改/etc/apache2/mods-available/ssl.conf 提高安全安全评级

nano /etc/apache2/mods-available/ssl.conf

修改以下内容:

SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4:!DH:!DHE
ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3
SSLHonorCipherOrder on