Margrop Blog

Open Specific Ports on Ubuntu 22.04 with UFW or iptables

Sun, 26 Feb 2023 20:04:53 +0800

Add firewall rules on Ubuntu 22.04

Check firewall status

ufw status

Open port 22

ufw allow 22

Check firewall status again

ufw status

Proxmox VE 9.0 Daily Maintenance: Remove the No-Subscription Notice and Use China Mirrors (Updated 2025-08-06)

Sun, 26 Feb 2023 20:00:19 +0800

This article collects the most common maintenance tasks for PVE 6.x / 7.x / 8.x / 9.x and fixes duplicated sections and obvious errors from older revisions.

Check the current version first, then follow the instructions that match that version. Do not mix repository settings across different PVE releases.

pveversion

China's Coding Plan Shake-Up: GLM Is Unavailable, Kimi Is Closed—What Is Still Worth Buying?

Tue, 21 Jul 2026 07:00:00 +0800

Bottom line: as of July 20, 2026, the market has split sharply: GLM is a timed, limited flash sale that is practically impossible to buy; Kimi has closed the current membership subscription entry; MiniMax TokenPlan is currently buyable without a purchase cap but delivers a weaker coding experience than scarce plans; Qwen AI has just launched qwen3.8, is currently open with usage discounts, and is one of the better choices to try now, although future restrictions remain possible; Volcengine Ark CodingPlan/AgentPlan are limited but still obtainable in some cases.

Can You Still Buy a Coding Plan? A July 2026 Reality Check on Limits, Quotas, and Lockouts

Mon, 20 Jul 2026 09:00:00 +0800

Short answer: as of July 20, 2026, most mainstream AI coding plans are still purchasable. The confusing part is that “available to buy,” “available in my region,” and “available for heavy coding” are no longer the same statement. Some products have a live checkout but tight quotas; others are visible in marketing pages but not offered to every account; some individual coding experiences have been paused or reshaped during product transitions.

How Did AI Learn to Use Its Hands? From Chatting to Checking, Writing, and Acting

Sun, 19 Jul 2026 22:00:00 +0800

The short answer

AI did not suddenly grow hands. It learned a very practical loop: decide which tool is needed, request that tool with structured arguments, wait for a real result, and then explain the result in human language.

This is usually called Tool Calling. You may also see Function Calling or a Tools API. MCP, the Model Context Protocol, is closer to a universal socket: different AI applications can discover and call files, databases, search engines, ticket systems, browsers, and other capabilities through a common protocol.

This article opens the loop and examines every moving part: what the model does, who actually performs the action, why MCP matters, where permissions belong, and why “can call a tool” does not mean “should receive the keys to everything.” Screenshots come from official OpenAI and MCP pages; the terminal-style evidence images are generated from the real invocation flow. No real private network address or hostname is included.

Stop Installing Another PC Cleaner: What Desktop Software Can an AI Agent Actually Replace?

Sun, 19 Jul 2026 22:00:00 +0800

The short answer

An AI Agent can replace many desktop utilities whose main job is clicking the same buttons over and over. It does not turn every application into a chat box, and it is not a magical “computer doctor.” Its real advantage is orchestration: it can inspect the machine, understand the goal, combine built-in tools, execute a sequence, and explain the evidence.

Across five categories—file conversion, junk scanning, performance optimization, configuration changes, and computer repair—the replacement level is different. File conversion and reporting are highly automatable. Performance work and configuration changes are semi-automatic. Hardware repair remains a human job, with the Agent acting as a diagnostic assistant.

The safety rule for every script in this article is simple: read first, write second; back up first, change second; verify before claiming success. All three scripts are local-only and start in report mode. Destructive actions require an explicit flag and a second confirmation.

Why Does AI Lie So Confidently? — It Is Not Thinking, It Is Playing Supercharged Word Association

Sun, 19 Jul 2026 20:30:00 +0800

The short answer

AI hallucination is not simply an occasional bug. It is a predictable risk of a system whose basic job is to generate the next likely token from context. The model can produce a fluent, confident, highly structured answer without having verified that every claim is supported by evidence.

The easiest analogy is this: a large language model is a supercharged word-association player. It is exceptionally good at continuing a sentence. It is not automatically a fact-checker.

Why Does AI Keep Saying ‘I Forgot’? Tokens, Context Windows, and the Sticky Notes It Must Throw Away

Sun, 19 Jul 2026 18:30:00 +0800

The short version

AI often appears to have a bad memory because only a limited amount of material can be carried into the model for the current request. Think of a context window as a stack of sticky notes with finite capacity. New questions and tool outputs keep adding notes. Once the stack is full, the system must summarize, truncate, filter, or remove older notes. If a note is removed from the current context, the model may no longer be able to use it.

Have you ever told an AI, “Use Python for every code example,” only to receive JavaScript fifteen turns later? Or supplied a long document that the model can summarize accurately at the beginning and end, but cannot answer about the important restriction buried in the middle?

It is tempting to say that the AI “forgot.” A more precise explanation is this: the model can only see what fits inside the current context window, and seeing a piece of text does not guarantee that every part of it receives equal attention.

This article explains tokens and context windows without turning them into intimidating mathematics. The main analogy is a stack of sticky notes. We will look at what tokens are, how a request is assembled, why long conversations become unreliable, why agents fill their context quickly, and how to make AI forget less through simple information management.

TCP Ruled for 40 Years. Why Did HTTP/3 “Dump” It?

Sat, 18 Jul 2026 19:40:00 +0800

TL;DR

Let’s fact-check the title first: TCP has not been abandoned — file downloads, video, email, and SSH still run on it today. But the Web really did change drivers: in June 2022, HTTP/3 became an official standard (RFC 9114), and it no longer uses TCP — web traffic is handed to QUIC, running over UDP.

TCP got “replaced” because of three incurable midlife conditions:

Head-of-line blocking: TCP is a byte stream that must be delivered in order — lose one parcel, and every parcel behind it stands at attention;

Expensive handshakes: before any data flows, 2-3 round trips of “small talk” (TCP handshake + TLS handshake) — half a second gone on intercontinental links;

A protocol welded shut: TCP lives inside the OS kernel, and middleboxes only recognize the “classic model” — improving it is nearly impossible.

QUIC’s fix is beautifully blunt: rebuild all of TCP’s wisdom on top of UDP, where nobody interferes. This is the finale of our networking trilogy — part one covered how to use the network, part two why TCP/IP was designed so well, and this one how even the mighty TCP got replaced by its own heirs. All screenshots come from real systems; IPs and hostnames are masked.

A 1974 Design Still Rules the Internet. Why? The 6 Design Philosophies of TCP/IP

Sat, 18 Jul 2026 09:30:00 +0800

TL;DR

TCP/IP is almost 50 years old. Every one of its rivals — the phone companies’ X.25, IBM’s SNA, the standards body’s OSI — is in a museum, yet it still carries every page you load today. It didn’t win by being the most advanced. It won through six design choices:

Packet switching: no private trains — everyone shares the highway. Cheap, and hard to kill;

Layering: each layer does one job and can be swapped out like a LEGO brick;

The end-to-end principle: keep the network dumb and put the smarts at the edges — so innovation never requires rewiring the network;

Best effort: the core promises nothing, reliability is bought à la carte — simple scales globally;

Rough consensus and running code: no kings, no voting — standards grow by working, not by decree;

Room for the future: from IPv4 to IPv6, from HTTP/1 to HTTP/3 — the foundation stays while everything above is rebuilt.

One sentence: good design doesn’t predict the future; it leaves room for it. This is the companion piece to Why Is Your WiFi Lagging? — that article explained what the network is and how to use it; this one explains why it was designed this way and how it survived half a century. All screenshots come from real systems and real protocol documents; IPs and hostnames are masked.

Why Is Your WiFi Lagging? Networks, TCP vs UDP, and the Two “5Gs” — Explained So a Kid Gets It

Sat, 18 Jul 2026 08:30:00 +0800

TL;DR

A network is a delivery service for computers: data is chopped into “parcels” (packets), labeled with “addresses” (IPs), and relayed by “sorting centers” (routers) hop by hop to the recipient.

TCP is a phone call: connect first, talk later, repeat anything that wasn’t heard — reliable but fussy. UDP is a postcard: drop it in the mailbox and hope — fast, but no delivery guarantee. Live video and games prefer UDP; files and web pages prefer TCP.

The three-way handshake is just the opening of a phone call: “Hello, can you hear me?” — “I can. Can you hear me?” — “I can too. Let’s talk.”

Wired is a private water pipe; WiFi is shouting in a crowded square — when everyone shouts at once, nobody is heard clearly. That is the number-one reason WiFi lags.

WiFi’s “5G” means the 5GHz frequency band (a wider lane). Your phone carrier’s “5G” means the 5th generation of mobile networks (a whole standard). They share a name and nothing else.

No jargon without an everyday analogy, but every number below comes from real measurements on real machines (all IPs and hostnames are masked). A kid can follow most of it; an adult won’t find it shallow.

Docker Pulls Keep Timing Out? How to Choose, Configure, and Verify Chinese Registry Mirrors

Wed, 15 Jul 2026 19:30:00 +0800

The short answer When Docker image pulls fail on a mainland China network, the image is not necessarily missing and DNS is not always the culprit. More often, the public registry path is congested, a mirror is temporarily unavailable, or the configuration was edited but Docker was never restarted. My practical recommendation is simple: open status.anye.xyz first and treat it as a “weather report” for Docker mirrors; select a recently healthy HTTPS endpoint; edit the correct daemon configuration for your operating system; validate the JSON; restart Docker; and finally verify with a real pull of a small image.

Superpowers 6: What Actually Changed, and Why Your Agent Got Harder to Fool

Mon, 13 Jul 2026 15:30:00 +0800

The short answer

If you already write code with Claude Code, OpenCode, or Codex, you have probably heard of Superpowers. It is not another “magic prompt.” It is a skill framework that makes your agent work by process — turning the habits of a good engineer (“think before you act”, “write the test before the code”, “collect evidence before fixing the bug”) into operating procedures the agent must follow.

From v6.0.0 to the latest v6.1.1, Superpowers shipped a dense run of upgrades: Subagent-Driven Development (SDD) lost half its reviewers but got stricter; plans gained a Global Constraints block and per-task Interfaces; the brainstorming companion got a one-time key; Codex can install from the marketplace; and Gemini CLI was dropped after Google EOLed it.

This article unpacks the wave, what you actually get, and why it makes your agent’s output steadier.

Four Hard Resets in One Weekend—and Two Cards: When Tokens Stop Being Scarce, What Are We Actually Missing?

Mon, 13 Jul 2026 07:00:00 +0800

The short version

Codex users spent the weekend inside a restaurant that would not stop refilling the buffet. There was one hard quota reset early Friday morning Beijing time, two more on Saturday, and another waiting on Monday morning. A bankable reset card also appeared. As Tibo celebrated Codex reaching six million active users, he previewed another card for everyone the following day.

At the same time, the five-hour limit was temporarily removed for Codex subscribers, leaving only the weekly limit. I also had a substantial pool of GLM-5.2 quota expiring on Sunday. The old problem was saving tokens. The new problem was stranger: how do I spend them on work that deserves them?

After a weekend that felt busy, surprising, and slightly absurd, my conclusion is simple: the scarce resource in the AI era may not be tokens. It may be worthwhile questions, distinctive ideas, and the ability to turn those ideas into reality quickly.

Stop Running rsync Blindly: Preview Differences Before a Safe Incremental Sync

Sat, 11 Jul 2026 13:30:00 +0800

The short answer

The best rsync habit is not memorizing more switches. It is separating every risky job into two stages: generate a dry-run plan first, review it, and only then perform the real incremental sync. Deletion should be a separate, explicit permission rather than a hidden default.

The common rsync -n -avz --delete --out-format="%n" pattern can list paths that may change, but %n only preserves the name. A safer machine-readable plan uses --itemize-changes together with %i, so each line identifies an addition, update, deletion, or metadata change.

You Bought an Overseas VPS and a Domain. Now What? 12 Things That Make a Public IP Worth Owning

Sat, 11 Jul 2026 13:30:00 +0800

The short answer

An overseas VPS by itself is a powered, connected room without a memorable street address. A top-level domain by itself is only a sign. Put the domain on Cloudflare DNS and point carefully chosen records at the VPS, and you finally own the sign, the map, the storefront, and a standards-based public entrance.

The result is much more useful than “a place to host a blog.” It is a small, always-on piece of Internet infrastructure where you control the code and the migration path: websites, APIs, webhooks, status pages, monitoring, controlled file sharing, password management, remote-access relays, automation jobs, and a personal AI gateway can all grow from the same foundation.

A public IP is also a door facing a busy street. Automated scanners may try the handle shortly after the server appears. This guide therefore covers both the useful projects and the services that should never be exposed directly.

RAID Is Not Backup: How to Choose the Right NAS Layout for Synology, fnOS, and Unraid

Sat, 11 Jul 2026 12:00:00 +0800

The short answer

RAID primarily keeps a NAS available when one or more drives fail. Backup restores data after deletion, ransomware, filesystem damage, theft, fire, or a failed NAS. You normally need both.

On Synology, SHR-1 is the practical default for many homes, while larger and more critical arrays deserve SHR-2 consideration. On fnOS, choose the filesystem, storage mode, drive count, and backup destination as one design. On Unraid, understand that the classic Array is not a conventional striped RAID: data disks keep independent filesystems while one or two parity disks provide failure recovery.

A useful starting rule is: mirror two-drive systems; use single-drive redundancy when capacity matters and a separate backup exists; seriously consider dual-drive redundancy as drive count and individual drive capacity grow. Anything irreplaceable still needs an offline or off-site copy.

Stop Letting AI Guess: Connect MySQL, Prometheus, Loki and Grafana to an Agent, Step by Step

Sat, 11 Jul 2026 08:30:00 +0800

Many teams already run MySQL, Prometheus, Loki and Grafana. Yet when an alert fires, the on-call engineer still jumps between four windows: inspect a dashboard, write a PromQL query, search logs for a trace ID, and finally connect to the database to confirm the business record. It is like a hospital that owns a thermometer, medical records, laboratory reports and a monitoring wall, while the doctor still has to visit four rooms and copy every number by hand.

The Password Was Right—So Why Did Synology Reject It? Rebuilding DSM’s RSA + AES WebAPI Login

Sat, 11 Jul 2026 08:30:00 +0800

The short version

Some Synology WebAPI clients do more than post account and passwd to auth.cgi. The implementation preserved in OpenStack Cinder first calls SYNO.API.Encryption.getinfo, receives an RSA public modulus, server time, and two dynamic field names, then generates a one-use passphrase. RSA PKCS#1 v1.5 encrypts that passphrase; an OpenSSL-compatible AES-256-CBC envelope encrypts the URL-encoded login parameters; both Base64 values are finally placed inside the server-provided cipherkey field.

This is an authorized WebAPI compatibility technique—not a password bypass. A SID for session=DSM is also not automatically the same thing as a complete browser UI login state. Parameter encryption does not replace HTTPS, because TLS still authenticates the server and protects integrity against an active intermediary.

Don't Let Your Mac mini Gather Dust: Run Agents 24/7 from Windows

Sat, 11 Jul 2026 04:00:00 +0800

The short answer

If Windows is your everyday platform but a low-power Mac mini stays on to run OpenClaw, HermesAgent, or macOS-only automation, you do not need to dedicate another monitor, keyboard, and mouse to it. Treat the Mac mini as a quiet Agent server. macOS already includes Screen Sharing, and RealVNC Viewer on Windows can take over the desktop whenever configuration, upgrades, or troubleshooting require a GUI.

This is especially useful in a Windows-first home or studio where the Mac mini runs continuously at relatively low power while the Windows machines remain the daily workstations. The installation is rarely the difficult part. Most failures come from Screen Sharing, user authorization, VNC credentials, network reachability, sleep behavior, or services that do not recover after a restart.

One rule matters more than every convenience tweak in this guide: do not expose TCP port 5900 directly to the public Internet. A same-LAN connection is the simplest starting point. For access across networks, first join a self-hosted VPN or another controlled private network, and only then connect to the Mac.

Stop Reading Logs by Hand: A Practical ELK-to-AI-Agent Guide from Deployment to Assisted Troubleshooting

Sat, 11 Jul 2026 03:30:00 +0800

The traditional incident-response ritual is familiar: open Kibana, choose a time range, write a query, scan pages of logs, copy a few stack traces, and manually assemble a theory. Once several services are involved, the job feels like finding one screw in a warehouse with no clerk. A better design keeps ELK responsible for dependable ingestion, normalization, search, and visualization, then adds an MCP bridge that lets an AI Agent retrieve evidence through tools.

Couldn’t Get the GLM Coding Plan? Volcengine’s ¥9.9 Offer Can Drop to About ¥9.4 with an Invitation

Sat, 11 Jul 2026 03:20:00 +0800

Short answer

If the GLM Coding Plan is unavailable when you need it, refreshing the purchase page is not your only option. Volcengine Ark currently advertises the Coding Plan Lite subscription at ¥9.9 per month for the first two months. The same page lists a regular monthly price of ¥40, making the introductory price roughly 25% of the regular price, or “2.5 zhe” in Chinese discount terminology. The plan page also lists GLM-5.2 and says selected popular models receive a temporary four-times quota boost.

Read the fine print before buying: ¥9.9 is not a permanent price, the third month returns to the displayed ¥40 monthly rate, and Coding Plan quota is intended for supported coding tools rather than arbitrary general-purpose API traffic. This article and its screenshots were prepared on July 11, 2026. The official campaign page displayed an end date of August 7, 2026; always trust the live checkout page if the rules change.

Stop Clicking Through VMs: A Hands-On Guide to Connecting Proxmox VE to an AI Agent Safely

Sat, 11 Jul 2026 02:30:00 +0800

Connecting an AI agent to Proxmox VE sounds like giving a robot administrator the keys to your datacenter. That is exactly what you should not do. The safe starting point is a dedicated, revocable, read-only API token, a locally running MCP server, and a clear approval boundary for every write operation. This guide explains the architecture, shows manual and agent-assisted setup, and provides one-click installers for Windows 11, Ubuntu 26.

Take Back Your Remote Desktop: Deploying an All-in-One RustDesk Server Safely

Fri, 10 Jul 2026 22:00:00 +0800

The short version

RustDesk is an open-source remote desktop application designed with self-hosting in mind. When two clients can reach each other directly, screen and input traffic can use a peer-to-peer path. When that direct path fails, a relay server forwards the encrypted traffic. Hosting the server yourself does not eliminate servers; it puts device registration, relay routing, keys, accounts, and logs back under your control.

This guide uses the community-maintained lejianwen/rustdesk-server-s6 image to place the RustDesk OSS hbbs and hbbr services together with a community API and web administration layer in one container. It is a convenient option for homes, labs, and small teams, but it is not an official RustDesk all-in-one distribution. Evaluate the community image, pin a tested tag or digest, back up its persistent data, and rehearse upgrades and rollbacks before treating it as production infrastructure.

Every address in this article uses example.com. No real IP address, private domain, hostname, device ID, account, key, token, cookie, or private registry is shown. The screenshots come from public official or community project pages.

I Put Docker in a Control Room: Portainer CE 2.39.4 Deployment, Daily Use, and Real Traps

Fri, 10 Jul 2026 15:30:00 +0800

Bottom line first

Portainer does not replace Docker. It is a control room for a Docker host. Docker Engine remains the machinery; Portainer organizes containers, images, networks, volumes, and Compose stacks into a web dashboard.

I ran an isolated deployment of portainer/portainer-ce:2.39.4, initialized it, connected the local Docker environment, inspected the dashboard, filtered a disposable container, and created a demonstration stack. The installation is one docker run command. The important lessons are broader: persist /data, understand that /var/run/docker.sock is highly privileged, and never expose the management interface to an untrusted network without protection.

This article contains no complete IP address, real host name, private domain, administrator password, token, cookie, private registry address, or production container name. The screenshots use disposable names, and the container address is redacted.

Stop Sprinkling API Keys Everywhere: My Self-Hosted NewAPI Relay Station

Fri, 10 Jul 2026 15:30:00 +0800

TL;DR

NewAPI is not a free-model trick and it is not a mysterious proxy. In my setup, it is the front desk for AI usage: every app talks to one endpoint, while the gateway routes requests to authorized upstream providers and handles tokens, quotas, groups, model limits, logs, and usage accounting. For a personal deployment, the big win is not “one more dashboard”; it is no longer scattering upstream keys across every client, script, and agent.

This post explains why I wanted a self-hosted model relay, what people usually misunderstand, how to deploy a minimal Docker Compose version, why I add persistent storage, and how to use one-click scripts for Windows 11, Ubuntu 26.04, and macOS 26. It also includes an agent-driven setup prompt with strict boundaries. No private address, complete machine name, private domain, or real secret is included.

The Self-Hosted Web Clipboard I Kept Is Just One Text Box

Fri, 10 Jul 2026 15:30:00 +0800

Short version

After trying many cross-device clipboard and note tools, the one I kept for personal use is almost embarrassingly small: minimalist-web-notepad. When you open it, there is essentially one text box. It supports plain text only. There is no account system, no rich text editor, no image upload, no folder tree, no dashboard, and no collaboration layer.

That is exactly why it works as a lightweight self-hosted web clipboard. It is good for moving a short command from one device to another, dropping a temporary note into a browser, reading or writing a tiny text value with curl, or keeping a disposable piece of text for a few minutes. It is not a knowledge base. It is not a password vault. It is a piece of scratch paper on the network.

This post uses the ahfeil/minimalist-web-notepad:latest image with Docker Compose. It also includes one-click scripts for Windows 11, Ubuntu 26.04, and macOS 26, plus two operating modes: manual automatic execution and agent-driven configuration. No private network address, private domain, full machine name, or real secret is shown in this article.

One Missing operator.write Took Down the Gateway: The OpenClaw Fallback Failure That Wasn't a Model Problem

Fri, 10 Jul 2026 08:00:00 +0800

This incident looked like a model-provider outage at first. OpenClaw had just received three NewAPI-backed fallback models, but gateway-based model calls started failing with a provider authentication error. After peeling back the outer message, the real error was much more specific:

missing scope: operator.write

That string changed the direction of the investigation. The provider key was not the root problem. The NewAPI endpoint was not the root problem. The model names were not the root problem either. The failure lived inside OpenClaw’s gateway authorization path: when a model override was used, the gateway call switched into a backend/gateway-client mode, but did not force the request to use the already paired stored device identity. The device had operator.write; the request simply did not carry the identity that could prove it.

The shortest version is this: the badge existed, but this entrance did not scan it.

Stop Buying the Wrong Alibaba Cloud Load Balancer: SLB, ALB, NLB, and CLB Explained

Thu, 09 Jul 2026 21:40:00 +0800

Short version

On Alibaba Cloud, do not treat SLB as one single instance type anymore. The more accurate mental model is this: SLB is the Server Load Balancer product family, and the concrete choices are mainly ALB, NLB, and CLB.

ALB is the Application Load Balancer for Layer 7 traffic such as HTTP, HTTPS, QUIC, gRPC, and SSE. If you need routing by domain, path, header, cookie, method, or query string, start here.

NLB is the Network Load Balancer for Layer 4 traffic such as TCP, UDP, and TCPSSL. If you need massive connections, low latency, long-lived sessions, IoT, audio/video, or a message-service entry point, start here.

CLB is the Classic Load Balancer. It supports TCP, UDP, HTTP, and HTTPS, with solid Layer 4 capability and basic Layer 7 features. It is still useful for existing systems, but new designs should usually evaluate ALB or NLB first.

A simple analogy: ALB is a receptionist who understands business rules, NLB is a high-speed toll gate, CLB is an older all-in-one service counter, and SLB is the name of the whole building.

Do Not Just Copy QingLong Into BaiHu: A Real Safe Migration Drill

Thu, 09 Jul 2026 10:30:00 +0800

Bottom line first

Migrating from QingLong Panel to BaiHu Panel is not a directory-copy exercise. I ran a real migration drill in an isolated Docker environment: a fresh QingLong instance with sample environment variables, scripts, labels, and cron jobs; then a fresh BaiHu instance; then an actual conversion and verification pass.

The reliable migration unit is not the whole QingLong data directory. It is a set of assets: script files, environment variables, scheduled tasks, tags, enabled/disabled state, and task-variable relations. QingLong uses numeric IDs; BaiHu uses string IDs and relation tables. QingLong commands such as task daily_check.py also need to become executable BaiHu commands such as python /app/data/scripts/qinglong-migrated/daily_check.py.

This article contains no full private IP address, private registry address, host name, token, cookie, or production secret. The screenshots come from a disposable lab, and the variables are redacted sample data.

Do Not Buy the “Btrfs Drive” Blind: Cheap HM-SMR HDDs Are the 996 Version of Storage

Thu, 09 Jul 2026 10:00:00 +0800

Short version

A hard drive is not just capacity divided by price. CMR behaves like normal lanes on a road: random rewrites are relatively predictable. SMR behaves like roof shingles: tracks overlap, density improves, but changing one small area may require rewriting a larger zone. The most dangerous detail is that SMR is not one thing. Some SMR drives hide the complexity in firmware. Some expose zone controls. Some are host-managed SMR, where the operating system and software stack must obey zone write rules. Recently, some very cheap large HDDs have been marketed as “Feiniu drives” or “Btrfs drives” on PDD-like listings. In many cases, the real risk is that these are host-managed SMR enterprise drives, not ordinary NAS drives.

My buying rule is simple: no exact model, no purchase; no vendor datasheet, no purchase; Linux reports host-managed, normal users should walk away; if the seller talks about Btrfs or Feiniu but avoids the SMR type, walk away.

Should QingLong Panel Still Face the Public Internet? After the 2026 Bypass, I Would Start With BaiHu

Thu, 09 Jul 2026 10:00:00 +0800

Bottom line first

QingLong Panel used to be the default answer for many self-hosted scheduled-script setups. It can run scripts, manage environment variables, show logs, synchronize repositories, and wrap crontab-like workflows in a friendly web UI. But the critical QingLong issues publicly discussed in early 2026 changed the risk calculation: a task scheduler panel is not just another web admin page. It often holds scripts, secrets, notification tokens, and execution privileges. If authentication can be bypassed, the attacker is not merely viewing a dashboard; they may be standing in front of a machine that can run jobs.

For new lightweight deployments, I would now evaluate BaiHu Panel first. BaiHu is a Go + Vue3 automation task scheduling platform focused on low overhead and high performance. Its public README describes Docker / Docker Compose deployment, Mise-based runtime management, repository task synchronization, logs, notifications, and secret handling. It is not a perfect one-to-one replacement for every QingLong workflow, but it is a better starting point for many personal script-hosting cases.

If you must keep using QingLong temporarily because of old jobs, migration cost, or compatibility constraints, do not expose it directly to the public Internet. Put a protection layer in front of it: VPN, zero-trust access, reverse-proxy Basic Auth, an allowlist, WAF rules, or equivalent access control. This article includes one-click scripts for Windows 11, Ubuntu 26.04, and macOS 26. They deploy BaiHu by default, require an explicit switch to deploy QingLong, and put either panel behind Caddy Basic Auth.

Stop Hunting for YOLO Flags: One Launcher for 6 AI Agent Tools

Mon, 06 Jul 2026 09:50:00 +0800

Short version

In AI Agent tools, yolo does not mean “the model is smarter.” It means “ask me fewer questions.” It reduces or skips approval prompts so the Agent can run more like an unattended automation script. The annoying part is that every tool names this differently. Codex exposes a dangerous approval-and-sandbox bypass. Claude Code has a dangerous permission-skip mode and a permission mode. Gemini CLI and Qwen Code use --approval-mode=yolo. OpenCode uses --auto plus permission rules. Aider uses --yes-always.

My recommendation is not to overwrite codex, claude, or gemini with risky aliases. Install an explicit agent-yolo launcher instead. When you really want high autonomy, type agent-yolo codex, agent-yolo claude, or agent-yolo gemini. This article provides Windows 11, Ubuntu 26.04, and macOS 26 scripts. They do not depend on third-party services, do not install missing Agent tools, and do not contain private addresses, full computer names, private domains, tokens, or keys.

Fresh Ubuntu 26.04 Without Snap: A Clean, Reversible Removal Guide

Mon, 06 Jul 2026 09:45:00 +0800

The short version

If you are setting up a fresh Ubuntu 26.04 system and you know you do not want Snap, remove it in the right order: inspect installed snaps, save anything important, remove snaps with snap remove --purge, purge the snapd package with APT, clean the remaining Snap directories, and optionally block accidental reinstall.

This guide explains the background, symptoms, root cause of messy removals, manual execution, AI Agent execution, and three one-click scripts for Windows 11, Ubuntu 26.04, and macOS 26. The scripts default to dry-run mode, require an explicit execution switch, depend only on built-in OS tools, and do not include private IP addresses, hostnames, private domains, tokens, or secrets.

Stop Fighting Over the Remote: Use DSM Scheduled Tasks to Lock a Kids' Video Folder Automatically

Sun, 05 Jul 2026 06:50:00 +0800

Short version

This is not an account lockout guide. The goal is narrower and cleaner: lock one kids’ video folder on a Synology DSM 7.2.1 NAS during selected hours, while leaving the account, password, homework folders, photo folders, and other shares alone. The script inserts one temporary deny ACL entry with synoacltool, removes that entry during open windows, backs up the ACL before each change, and verifies the result after each operation.

Cross-Border VPS Feels Glacial? One Kernel Sysctl Speeds International Links 20×

Thu, 02 Jul 2026 20:00:00 +0800

The short version

You’re accessing your overseas VPS from within China. SSH feels snappy. curl on a small JSON endpoint returns instantly. But downloading a 2 MB HTML file takes over a minute. Convinced it’s “peak-hour international link congestion”? Probably not — you’re being sabotaged by Linux’s default CUBIC congestion control. CUBIC treats every packet loss as “the road ahead is jammed” and immediately backs off. But international links have baseline 5–15% loss from physical-layer imperfections, not congestion. So your TCP flow gets permanently stuck in slow-mo. Switch to Google’s BBR algorithm and the exact same physical path, same moment, same loss rate delivers 15–24× more throughput.

This post walks through a real mesh-VPN investigation: pulling a 2.3 MB page from a US VPS across a Chinese home connection went from 30 KB/s to 500–1000 KB/s after four shell commands. It ships three one-shot scripts (Windows 11 / Ubuntu 26.04 / macOS 26), covering both manual execution and AI-agent-driven deployment. All internal IPs, hostnames, and public IPs have been redacted.

Docker Container Crash Loop After v3.7.0? You're Missing One Word: serve

Thu, 02 Jul 2026 19:30:00 +0800

TL;DR

After upgrading Siyuan (SiYuan Note) from v3.6.x to v3.7.0, the Docker container entered an infinite restart loop. docker logs showed Error: unknown flag: --accessAuthCode. The root cause: v3.7.0 introduced a CLI subcommand architecture. The old top-level flags now require a serve subcommand. The fix is adding one word — 'serve' — to the beginning of the command array in docker-compose.yml. Seven characters. From crash loop to running.

This article covers the complete troubleshooting process, one-command fix scripts for Windows 11, Ubuntu 26.04, and macOS 26, plus both manual and AI Agent approaches. All scripts use only Docker CLI and SSH — no third-party services required.

Stop Treating Passkeys as SSH Passwords: The Right Way to Use SSH Keys and Phone/Desktop Passkeys

Tue, 30 Jun 2026 09:30:00 +0800

Short version

SSH passwordless login and passkeys on phones, Macs, and Windows PCs both use the public-key idea, but they are not the same tool. SSH keys are for logging in to servers, Git remotes, jump boxes, and automation endpoints. Passkeys are for signing in to websites, apps, and account systems. They are like two modern key rings: one opens the machine-room door, the other opens your online account door. The cryptographic idea is related, but the locks are different.

The practical rule is simple: generate a separate SSH key on each client device, keep the private key only on that device or inside a hardware security key, and put only the public key on the server. Verify public-key login before disabling password login. Use passkeys through iPhone, Android, macOS 26, Windows 11, system password managers, or hardware security keys for website and app sign-in. Do not try to paste a phone passkey into authorized_keys. This post includes one-click scripts for Windows 11, Ubuntu 26.04, and macOS 26, plus a manual automation path and an Agent-driven configuration path. The examples do not depend on any third-party service and do not contain real internal addresses, full computer names, private domains, or secrets.

Stop Clicking Update One App at a Time: Let an Agent Upgrade Common Software on Windows 11, Ubuntu 26.04, and macOS 26

Sun, 28 Jun 2026 08:58:00 +0800

Short version

Updating everyday software is painful not because the commands are impossible, but because the update sources are scattered across several worlds. Windows 11 has WinGet, Microsoft Store, and vendor installers. Ubuntu 26.04 has apt, snap, flatpak, and service restarts. macOS 26 has Software Update, App Store, Homebrew, and applications downloaded outside the store. A human can easily miss something. An AI Agent can help, but only if you give it boundaries.

My recommendation is to treat the Agent as an update operator: inventory first, dry-run second, execute third, verify last. This article provides three one-command scripts for Windows 11, Ubuntu 26.04, and macOS 26. They do not depend on third-party update assistants or cloud services. They call only built-in update tools and package managers already installed and configured on the machine. The examples contain no real private address, full computer name, private domain, token, or key.

Is Your Computer Always Full? Use an AI Agent to Safely Clean Junk Files on Windows 11, Ubuntu 26.04, and macOS 26

Sun, 28 Jun 2026 07:15:00 +0800

Short version

Junk cleanup is risky not because it is hard to delete files, but because it is easy to delete too much. On Windows 11, Ubuntu 26.04, and macOS 26, the safe cleanup targets are usually temporary directories, package caches, old logs, recycle bin or trash contents, and files that can be regenerated. A cleanup script should not casually touch documents, photos, browser profiles, keys, certificates, virtual machine images, or application data.

This article gives you two paths: manual automation, where you run the scripts yourself, inspect the dry-run output, and then explicitly enable deletion; and Agent-driven automation, where Codex, Claude, OpenClaw, HermesAgent, or another AI Agent performs the same scan, review, execution, and verification flow for you. The three scripts cover Windows 11, Ubuntu 26.04, and macOS 26. They do not depend on third-party services, do not download cleanup utilities, and do not contain real private addresses, computer names, private domains, or secrets.

Chrome Ate 4GB of Disk Space? Delete the Local AI Model and Stop It Coming Back

Sat, 27 Jun 2026 23:00:00 +0800

Short version

Some Google Chrome installations now download several gigabytes of local generative AI model data in the background. This is usually not malware and not a broken cache. It is Chrome preparing on-device AI models for browser and web features. Deleting the folder only frees disk space temporarily. The durable fix is to disable the local GenAI foundational model download with Chrome policy, then remove the already downloaded model folders.

This guide covers Windows 11, Ubuntu 26.04, and macOS 26. It includes one-click scripts, manual steps, and an agent prompt you can hand to Codex, Claude, OpenClaw, Gemini CLI, or another local operator. The scripts use native OS policy mechanisms and Chrome’s documented policy. They do not depend on third-party services and do not include real IP addresses, hostnames, internal domains, or secrets.

macOS 26 Boot Daemons: Put frp and EasyTier in LaunchDaemons, Not Login Items

Sat, 27 Jun 2026 17:12:00 +0800

Short version

If you want frp, EasyTier, a sync agent, a collector, a bot, or a proxy daemon to start automatically on macOS 26, the key is not “where can I hide this command?” The key is “which native service manager owns its lifecycle?” This article is about unattended background services, not ordinary desktop login apps.

On macOS 26, a daemon that must start before user login belongs in /Library/LaunchDaemons. Login items and LaunchAgents are tools opened after a person enters the room. LaunchDaemons are more like the building’s elevator or water pump: they should run as the machine comes up.

I will show two paths: manual configuration, for understanding every moving part, and agent / one-click automation, for cases where you already know where the binary and config file live. The scripts are self-contained, use built-in OS mechanisms, do not download third-party wrappers, and do not include real addresses, hostnames, private domains, or secrets.

Windows 11/10 Background Autostart: Run frp and EasyTier Unattended Without Third-Party Wrappers

Sat, 27 Jun 2026 17:11:00 +0800

Short version

If you want frp, EasyTier, a sync agent, a collector, a bot, or a proxy daemon to start automatically on Windows 11/10, the key is not “where can I hide this command?” The key is “which native service manager owns its lifecycle?” This article is about unattended background services, not ordinary desktop login apps.

On Windows, the first decision is whether the executable is a real Windows Service. Common command-line daemons such as frp and EasyTier are usually better handled by Task Scheduler at system startup, because it is built in and does not require NSSM, WinSW, or another wrapper.

I will show two paths: manual configuration, for understanding every moving part, and agent / one-click automation, for cases where you already know where the binary and config file live. The scripts are self-contained, use built-in OS mechanisms, do not download third-party wrappers, and do not include real addresses, hostnames, private domains, or secrets.

Ubuntu 26.04 Boot Services Done Right: Let systemd Run frp and EasyTier for You

Sat, 27 Jun 2026 17:10:00 +0800

Short version

If you want frp, EasyTier, a sync agent, a collector, a bot, or a proxy daemon to start automatically on Ubuntu 26.04, the key is not “where can I hide this command?” The key is “which native service manager owns its lifecycle?” This article is about unattended background services, not ordinary desktop login apps.

On Ubuntu 26.04, the standard answer for a background daemon is not a shell startup hack. It is a systemd unit. systemd can wait for the network, start the process before login, collect logs, restart on failure, and stop it in order during shutdown.

I will show two paths: manual configuration, for understanding every moving part, and agent / one-click automation, for cases where you already know where the binary and config file live. The scripts are self-contained, use built-in OS mechanisms, do not download third-party wrappers, and do not include real addresses, hostnames, private domains, or secrets.

Windows Finally Gets Native Linux Commands: Microsoft Coreutils Replaces WSL, Cygwin, and Git Bash

Sat, 27 Jun 2026 08:00:00 +0800

Let me ask you something:

Have you ever tried to grep a log file in Windows Terminal, only to be told that grep is not a recognized command? Tried to use find to locate files, only to discover that Windows’ find is a completely different beast from Linux’s find? Written a cross-platform script that works perfectly on Linux, then falls apart the moment it touches Windows?

It’s not your fault. It’s the “Berlin Wall” between Windows and Linux command lines.

The good news? Microsoft just tore that wall down. In late 2025, Microsoft open-sourced coreutils on GitHub — a native Windows port of the essential Linux command set. No WSL. No Cygwin. No Git Bash. Just one winget install command, and your Windows terminal suddenly speaks fluent ls, grep, sed, and awk.

Docker Images, No More Begging: Build Your Own 13 GB Private Registry From Scratch

Fri, 26 Jun 2026 12:30:00 +0800

TL;DR

My home server runs a single registry:2 container that currently holds 13 GB of cached blobs across 95 repositories. Every NAS, Proxmox node, Mac, and Windows machine on my LAN pulls through it. A cold start of alpine:3.19 finishes in under a second, with zero traffic going out to the public Docker Hub.

This isn’t a one-line “install Docker and run a container” tutorial. I’ll show you the production-grade deployment script I actually run, walk through the Docker v2 auth flow, and call out the four reverse-proxy pitfalls that turn every docker login into a 401 mystery. You’ll leave able to: ① bring up an authenticated registry in 10 minutes; ② explain why the WWW-Authenticate header is sacred; ③ describe the whole thing to a non-technical family member without losing accuracy.

Stop Letting Agents Burn Tokens: Wiring Headroom into NewAPI, OpenClaw, and HermesAgent

Sat, 20 Jun 2026 12:30:00 +0800

TL;DR

I did not replace NewAPI, and I did not point OpenClaw or HermesAgent at an unproven gateway. The actual design is simpler: place Headroom in front of NewAPI, then move only the already validated OpenAI-compatible providers to http://<headroom-host>:8787/v1. The original NewAPI endpoint stays available. Long agent context now goes through Headroom first, gets compressed, then continues to NewAPI for the same routing and model management as before.

The rule that kept the rollout boring was: test first, edit second; migrate only OpenAI-compatible providers that pass; leave non-OpenAI fallbacks alone. This post is both a write-up and a runbook you can hand to an Agent or follow manually.

One sentence let Claude upgrade Ubuntu 22.04 to 24.04: a near-zero-screen-time cross-LTS run

Fri, 19 Jun 2026 10:58:00 +0800

TL;DR

A remote home-lab box had been sitting on Ubuntu 22.04.4 LTS (jammy, kernel 5.15) for a long time. After one sentence — “upgrade the box at 192.168.103.182 to Ubuntu 24.04” — Claude opened a tmux session to babysit the run, brought up a fallback sshd on port 1022 so a mid-upgrade sshd restart would not strand me, then drove do-release-upgrade -f DistUpgradeViewNonInteractive end to end. Twenty-five minutes later the host came back: kernel 6.8.0-124, every service still listening.

This is not a tutorial on do-release-upgrade; the Ubuntu docs already cover that. This is about what an Agent does once it gets an SSH handle on a box, why it does each step, and which pitfalls you have to clear out of the way before letting it loose.

Ubuntu shutdown stuck for 90 seconds? A Python asyncio service that won't honour SIGTERM, and how to fix it

Fri, 19 Jun 2026 10:58:00 +0800

TL;DR

After upgrading my home proxy box to Ubuntu 24.04, systemctl reboot stopped being fast: SSH would hang on for 90 seconds before the box actually shut down. journalctl made it obvious: smart-proxy.service: State 'stop-sigterm' timed out. Killing. — systemd sent SIGTERM, waited 90 seconds, nobody reacted, and SIGKILL was the only option left.

The root cause is not systemd’s fault and not Ubuntu’s fault. It is Python’s asyncio runtime not actually ending its child tasks when SIGTERM arrives — it is parked on a socket.recv and never voluntarily looks at the signal queue.

The fix has two halves, both required: (1) a systemd drop-in that lowers TimeoutStopSec from the default 90s down to 20s on the affected Python units; (2) inside the Python service itself, walk asyncio.all_tasks(), .cancel() the in-flight connection handlers on SIGTERM, and wrap self.stop() in asyncio.wait_for(..., timeout=10) as a safety net. After both halves, the same reboot drops from 90 seconds to one second.

Synology locked root behind three doors — I spent twenty minutes teaching it how to let me back in

Thu, 18 Jun 2026 16:30:00 +0800

TL;DR

Synology DSM, by design, ships with SSH disabled and root login prohibited — both sensible defaults. This guide walks you through “doing it the right way”:

Control Panel → Terminal & SNMP → Enable SSH (open the gate)

Log in as a normal user, then sudo -i to become root (borrow the landlord’s key first)

Edit /etc/ssh/sshd_config and set PermitRootLogin yes (tell the bouncer “root is family”)

synouser --setpw root xxx to set a root password, and append your public key to ~/.ssh/authorized_keys (hand back a key that can never be lost)

Total time: about twenty minutes. I’ll explain why every step exists using a “key and lock” metaphor, give you a 3-second vi crash course, list the error messages you’ll see, and answer the seven most common questions.

I dockerized AnythingLLM and the container turned into a wound-up squirrel — restarting forever until I handed it that magic 1000:1000

Wed, 17 Jun 2026 20:30:00 +0800

TL;DR

AnythingLLM, Mintplex Labs’ “stuff-anything-in-a-LLM” desktop, ships an official Docker image. In the happy path one docker run is all you need. But the in-container user anythingllm is picky: the host directory you bind-mount has to be owned by 1000:1000, otherwise it can’t write its own SQLite file, the Prisma migration step on startup crashes, and the container enters a restart-crash-restart loop. The fix takes under a minute: chown -R 1000:1000 /your/data/dir, then docker compose up -d again, and it dutifully listens on 3001.

I’ll also explain why Prisma’s file:../storage/anythingllm.db relative path is a footgun, give you a Portainer-ready stack file, and finish with a Q&A on the most common gotchas.

Moving Bedtime Out of the Living Room: Letting macOS launchd Disable Your Kids' Synology Accounts at 22:00 and Quietly Re-enable Them at 08:00

Sun, 14 Jun 2026 08:20:00 +0800

Short version

Synology DSM has a “disable this account” checkbox in the Control Panel, but it does not run on a schedule. With macOS’s built-in launchd and a 50-line bash script, you can flip the expired flag on two local accounts at 22:00 every night and flip it back at 08:00. The script does a before-query, a change, an after-query, and exit 1 the moment the after state does not match expectations. launchd writes stdout and stderr to dedicated log files. The interesting part is that the word “parent” quietly leaves the conversation: you no longer have to remind anyone to go to bed, the machine does it for you, on time, every day.

This post is not a comprehensive “family NAS management” guide. It is about one specific thing: turning a manual button click that depends on human memory into a system-level event that just happens on time.

If you only want the picture, the overview diagram in Section 2 is the whole article in one frame.

PhotoPrism Stuck for 5 Minutes on First Boot? A Postmortem on PHOTOPRISM_INIT=intel

Sat, 13 Jun 2026 08:30:00 +0800

TL;DR (The Short Version)

The PHOTOPRISM_INIT: "intel" line in PhotoPrism’s Plus Docker image is not just a flag to enable Intel hardware acceleration at runtime — it’s a one-shot system-level installer that runs apt-get dist-upgrade against archive.ubuntu.com and then installs 8 Intel/VA-API packages before the main process is allowed to start. On a fresh container this takes 5–10 minutes (sometimes more), during which nothing inside the container listens on port 2342.

Meanwhile: docker ps says Up, Portainer is green, ss -ltn on the host shows :2342 LISTEN — but your browser gets ERR_CONNECTION_RESET / Connection reset by peer. Because host-side docker-proxy accepts the connection and then tries to forward to a port inside the container that has no listener, the kernel sends back an RST.

Fix: just remove or empty that one line. If you already pass /dev/dri/renderD128 via devices:, the host’s drivers and userland libraries are perfectly usable from the container — there’s nothing to “install” in there.

The Portainer 500 Error That Wasn't the YAML — A Two-librespeed_default-Network Story

Sat, 13 Jun 2026 08:00:00 +0800

The short version

You update a stack in Portainer. The browser slaps you with a red 500 Internal Server Error. You assume the YAML is wrong, fix the indentation, swap the quotes, drop the image tag. You hit Update again. Same 500. And again. And again.

The real culprit is buried at the deepest level of the HTTP response body: network librespeed_default is ambiguous (2 matches found on name). Two networks with the same name exist in the same Docker engine—two IDs, two Created timestamps, two com.docker.compose.config-hash labels, but a single shared name. Compose asks the engine to look up that name; the engine refuses to pick between them; compose up fails; Portainer wraps the error as a 500 and returns it to your browser.

The fix is embarrassingly simple: delete one of the two orphan networks (docker network rm <id> or click Remove in Portainer’s Networks page), then re-run Update the stack with the exact same content. It just works.

This post is a real debugging session: a stack update that was supposed to be a 30-second mount-path change turned into a 1-hour investigation. All private details (internal addresses, registry URLs, volume paths, container names, credentials) have been replaced with <PLACEHOLDER>. Only public source code, official docs, and the error text itself are preserved.

When a Seagate IronWolf Pro Throws a SMART Alert: My Full Path from Diagnosis to a Free RMA

Sat, 13 Jun 2026 08:00:00 +0800

Short version

A single line in a Synology alert — “Bad sector count on Drive 10 has increased” — was the starting point. The drive that triggered the alert wasn’t the one that actually scared me, and the drive that did turn out to be in trouble turned out to be a Taiwan-boxed IronWolf Pro still under Seagate’s 5-year warranty. This post walks through the entire path I took: SMART triage, fault classification, identifying a hidden link-layer problem on a different drive, the international region-transfer request, the email I actually sent, and the packaging lessons you only learn by reading Seagate’s return policy. If you ever get a similar alert, this is the playbook I wish I had on hand.

A bit of context first: my home NAS is a Synology DS3617xs running DSM 10, up 7x24 with four 10 TB drives — two WD helium “white-label” drives, an HGST Ultrastar He10, and a Seagate IronWolf Pro 10 TB. The day the alert came in, everything had been quietly humming for almost three years.

The Docker Container Is Running, the Port Is Dead: A Complete Walkthrough of a Silent Host-Bind Failure

Sat, 13 Jun 2026 07:30:00 +0800

TL;DR:

docker ps says everything is fine. docker inspect’s HostConfig.PortBindings clearly says 203.0.113.14:3001:3000. But on the host, no docker-proxy is listening, the iptables nat/DOCKER chain has no DNAT rule, and NetworkSettings.Networks and Ports are both empty {}. This “container alive, port dead” state is what happens when libnetwork silently rolls back the endpoint creation because the target interface wasn’t up at attach time — and Docker doesn’t bother to tell you that the port publish never actually happened. The fix is a single 30-second command: docker network connect <net> <ctr>.

From 5m14s to 0.6s: How I Rebuilt My Docker Hub Mirror After Hitting Three Walls

Sat, 13 Jun 2026 07:20:00 +0800

TL;DR

My home lab had a registry:2 pull-through cache fronting Docker Hub for years, and it was fine. Then one day pulling a 5 MB alpine:3.19 took 5 minutes and 14 seconds. This post is the full forensic log of how I traced the slowdown, evaluated 8 candidate mirrors with real measurements (not vibes), and finished with a 5-line bash script on cron that auto-fails-over when the primary mirror goes down. Every number in this article was captured on my own hardware, in my own network, at one specific moment in time.

If you also self-host a Docker Hub mirror, or your team runs an internal registry, the Q&A at the bottom will probably save you 3 hours of pain.

The Markdown Throne Falls: When AI Agents Step Out of the Chat Box, HTML Becomes the New Answer

Wed, 10 Jun 2026 10:00:00 +0800

If 2023 was the “chatbox era” of ChatGPT and Markdown, then 2026 is heralding the arrival of a new phase: AI no longer merely “answers” you—it is set to “take over” your interface. As Agents begin directly controlling browsers, operating SaaS, and building interactive application prototypes, Markdown—long the de facto standard for LLM output, that elegant format prized for its simplicity, readability, and token-friendliness—is rapidly revealing its fatal shortcoming as the “last mile.

OpenClaw TUI Keeps Repeating Itself? A Temporary Patch for Duplicate Thinking and Replies

Tue, 02 Jun 2026 10:42:00 +0800

The short version

If OpenClaw TUI shows the same thinking block twice and repeats the final answer, do not immediately delete every session or rebuild every model provider. In many OpenAI-compatible setups, the real issue is a streaming compatibility edge case: the upstream stream emits normal delta chunks and then an extra full message tail. Some OpenClaw paths may aggregate both, so the TUI and the persisted session both end up with duplicated content.

The practical temporary fix is to back up the local OpenClaw installation, add a conservative dedupe guard in the OpenClaw aggregation layer, restart the gateway, and verify with a unique marker that both the visible reply and the session file contain only one copy.

This is a privacy-safe incident note. All endpoints, model names, tokens, internal addresses, and session identifiers are replaced by placeholders. Use your own installation path and model identifiers when applying the workaround.

MiniMax M3 Officially Released: Demystifying the MSA Sparse Attention Architecture, Plus a Look Inside the Mavis Sandbox

Mon, 01 Jun 2026 22:00:00 +0800

On June 1st, MiniMax (Xiyu Technology) officially released its next-generation general-purpose model, MiniMax M3. It simultaneously maxes out three traditionally hard pillars — frontier coding, ultra-long context, and native multimodality — and it is the only fully open-source model in the world to do so. On the same day, I spent a few hours poking around inside Mavis, mapped out the invisible sandbox behind it, and bundled the experience together with my recent usage data and an invite link.

Disclaimer: This article is 100% written and generated by MiniMax-M3 (including all code blocks, technical diagrams, and structure), without any manual edits or changes.

Update (2026-06-01 22:00): A few hours after this post went live, the team published a follow-up announcement acknowledging that the original Token Plan migration was communicated poorly and that weekly-quota handling for long-time users wasn’t done right. They’ve laid out compensation, more quota, and a refund channel. I’ve added Section 9 — “Token Plan Revamp: Latest Announcement” at the bottom of this post. If you’re on Token Plan, or about to subscribe, read it before you spend another yuan.

VPN Connected, But Internal Hostnames Won't Resolve? A Complete macOS Routing Table Walkthrough

Mon, 01 Jun 2026 18:00:00 +0800

TL;DR:

When two VPNs run side-by-side on macOS (e.g. utun0 and utun15), an aggregate 10.0.0.0/8 route pushed by one of them can silently “swallow” every address in the 10.x.x.x range — including the one you actually wanted to reach on the other VPN. DNS resolves fine; TCP/ICMP just hangs. route -n get is the first knife you should reach for.

Your Mac App Is Not Broken: Gatekeeper May Just Distrust an Unsigned Tool

Mon, 01 Jun 2026 07:35:00 +0800

The short version

When a macOS utility refuses to launch after being downloaded, the first conclusion should not be “the app is broken.” A very common cause is a combination of two facts: the app still has the com.apple.quarantine extended attribute that marks it as downloaded from the internet, and the app bundle does not have a usable signature that Gatekeeper can trust. For first launch, “downloaded from the web + no usable signature” is enough for macOS to block it.

For a tool whose source you understand and trust, the smallest local repair is straightforward: inspect the quarantine attribute, verify the signing state, apply a local ad-hoc signature to that one app bundle, remove quarantine from that one app, and then verify the result. The point is not to turn off macOS security globally. The point is to fix one known local tool while keeping the safety boundary clear.

This post is based on a real local troubleshooting session, but all private details have been removed. There are no real internal addresses, usernames, tokens, private download locations, hostnames, or machine-specific paths. The examples use placeholders such as /Applications/<App>.app and <App>. The goal is to share a repeatable diagnostic method, not to expose an environment.

Your Background Process Keeps Dying After Shell Exit? Stop Blaming nohup — Understand setsid and Unix Process Lifecycle

Mon, 01 Jun 2026 07:00:00 +0800

The short version

You launched a background service. You used nohup. You added &. You redirected output. Everything looked fine. But when you closed the terminal, disconnected SSH, or—more insidiously—when an automation tool finished executing its script, the process silently vanished. You checked ps—nothing. You checked the port—nothing. No error in the logs. If this has happened to you, you’re not alone.

The root cause isn’t SIGHUP—at least, not entirely. The real issue is process group and session membership. nohup merely tells the process to ignore the SIGHUP signal, but the process still belongs to the same session and process group as the parent shell. When the shell exits and sends SIGHUP to the entire process group, nohup helps—but only if the signal delivery chain stops there. If the controlling terminal is destroyed, if stdin/stdout pipes break, or if the parent’s process group is collectively reaped, the process can still die. The proper fix is setsid: it creates a brand-new session, detaches from the controlling terminal, and places the process in its own process group—so SIGHUP from the parent shell never reaches it in the first place.

This post is based on a real debugging session of the CLIProxyAPI service. The service was started with nohup but kept disappearing every time an automation script finished. The management panel kept showing “connection failed.” The culprit turned out to be a subtle Unix process lifecycle issue. This class of problem is common in cloud dev machines, CI runners, SSH jump hosts, and containerized workflows, but it’s often misdiagnosed because the underlying process model is poorly understood.

All private details have been removed. No real internal addresses, tokens, or paths appear in this article.

Double-Consumed Streaming: Debugging a NewAPI v1.0.0-rc.10 MiniMax Proxy Bug

Sun, 31 May 2026 18:00:00 +0800

TL;DR

An AI Agent was producing duplicated replies in DingTalk — not two separate messages, but a single message whose content appeared twice. The root cause traced back to a streaming bug in NewAPI (the QuantumNous fork of OneAPI) v1.0.0-rc.10: when proxying MiniMax through the OpenAI Chat Completions protocol, the finish chunk contained both delta.content and message.content with identical values. The Agent’s stream handler consumed both as “visible text,” concatenating the content twice. The fix was straightforward: switch the OpenClaw provider protocol from openai-completions to anthropic-messages, which OneAPI natively supports and where streaming behaves correctly.

No internal IPs, tokens, model IDs, or private paths appear in this article. All configuration snippets have been sanitized.

Why HermesAgent Would Not Reply in WeChat or WeCom: The Real Culprit Was a Local Relay With a 3-Second Timeout

Sun, 31 May 2026 08:00:00 +0800

The short version This incident looked like a model problem or a broken messaging channel, but the real failure happened one layer lower: my local relay cut the upstream request off after 3 seconds. That was fine for quick health checks, but it was wrong for real WeChat and WeCom turns, which often take longer to produce a complete answer from the NewAPI gateway. Once the relay disconnected too early, HermesAgent could only see Connection error, RemoteProtocolError, and then exhausted fallback attempts.

Mystery: Where Did That http_proxy Come From in My New Tmux Session?

Sat, 30 May 2026 16:00:00 +0800

Preface

Today I ran into a truly bizarre problem: in a freshly created tmux session, echo $http_proxy showed a valid proxy address. But I distinctly remember that my .zshrc only defines two aliases — proxy_on and proxy_off — both of which require manual invocation and don’t run automatically.

The weirdest part: my main shell shows http_proxy as empty, but as soon as I enter tmux, it’s there. I spent nearly an hour tracking this down, so I’m documenting it for posterity.

You Can SSH Out, but Not Back In: A Fail2Ban False Positive That Broke Reverse Access

Sat, 30 May 2026 15:45:00 +0800

Bottom line

The symptom looked simple: I could SSH from the local machine into a remote internal host, but the reverse SSH path failed when the remote host tried to connect back. sshd was listening, the route table looked fine, and the failure still happened.

The real root cause was not a broken SSH daemon. Fail2Ban had banned the VPN gateway address that represented the return path. From the local machine’s point of view, the incoming SSH session did not appear to come directly from the remote host. It appeared to come from the gateway, so the ban cut off the whole reverse path.

Home Network 1000Mbps but Games Stutter? A Complete Guide to Diagnosing and Fixing Bufferbloat

Sat, 30 May 2026 09:00:00 +0800

The Short Version

Your router has a hidden enemy called Bufferbloat — and it’s likely the reason your games lag even when your bandwidth test shows perfect speeds. When a router buffers too aggressively, download traffic fills up the queue and real-time traffic (games, video calls) gets stuck waiting behind thousands of buffered packets. Your speedtest stays at 950Mbps, but your game ping explodes from 50ms to 500ms.

In this article, I walk through the complete diagnosis and resolution of a Bufferbloat problem in a real home network environment using a multi-WAN iKuai gateway + ImmortalWrt soft router setup. The fix: deploying SQM (Smart Queue Management) + Cake qdisc on the ImmortalWrt layer, which reduced latency under full-speed download from ~300ms+ down to a stable ~12ms with zero configuration complexity.

All internal IP addresses, device hostnames, and network topologies have been sanitized for privacy.

Python App in macOS LaunchAgent Can't Reach the Internet? Here's the httpx Proxy Trap You Need to Know

Sat, 30 May 2026 09:00:00 +0800

TL;DR:

When a Python application using httpx with trust_env=True runs inside a macOS LaunchAgent, it silently picks up the system proxy settings from scutil --proxy. But the LaunchAgent process may not be able to reach that proxy server at all — resulting in All connection attempts failed or No route to host errors.

The fix is one line: add NO_PROXY=* to the LaunchAgent’s plist EnvironmentVariables.

This article documents the full debugging journey: from discovering that my AI Agent’s WeChat Enterprise (WeCom) messages weren’t being replied to, through methodical proxy troubleshooting, to finally pinning down the root cause — macOS system proxy + LaunchAgent network isolation. We’ll dive deep into Python httpx source code, macOS proxy architecture, and the many gotchas of LaunchAgent runtime environments.

The Complete AI Agent Migration Guide: A Real-World Journey from Scratch with 9 Pitfalls and Fixes

Sat, 30 May 2026 08:00:00 +0800

TL;DR:

Migrating from one AI Agent platform to another sounds like a “copy and paste” job. In reality, it’s a systems engineering challenge involving data migration, channel integration, scheduled tasks, auto-start configuration, proxy settings, and module compatibility.

This article documents my complete migration journey: from installing the new platform, migrating memories and skills, configuring messaging channels, debugging mysterious failures, to achieving fully automated operation. 9 pitfalls encountered, 9 solutions found — all shared here.

Claude Code Upgrade Broke Every Model? Before You Rotate Keys, Check the Compatibility Gateway

Fri, 29 May 2026 15:30:00 +0800

The short version

After a Claude Code upgrade, every model call failed with the same error: API Error: 400 invalid params, chat content has invalid message role: system (2013). At first glance this looks like a bad API key, a dead model, an exhausted account, a broken proxy, or a provider-wide outage. The root cause was different: a newer Claude Code request shape crossed an Anthropic-compatible model gateway that had not caught up with the client-side protocol behavior. The gateway, or a downstream chat validation layer behind it, rejected a system role in a place where it did not expect one.

The practical fix was not to randomly reinstall things. I reproduced the failure with the smallest possible prompt, tested adjacent Claude Code versions, and found the last known good version. 2.1.150 returned OK; 2.1.154 and 2.1.156 reproduced the 400. Pinning the global Claude Code installation back to 2.1.150 restored the existing provider path.

This post is a troubleshooting write-up for a local Claude Code environment. The fix itself was small, but the incident is useful because it shows a pattern that is becoming common in AI agent tooling: the CLI, environment settings, model gateway, API compatibility layer, and actual model backend are often separate moving pieces. When one layer changes its request structure, the terminal may only show a vague 400.

All private details have been removed. This article does not include real internal addresses, usernames, tokens, private provider names, local absolute paths, or private service domains. Configuration examples use placeholders such as <PLACEHOLDER>, <MODEL_GATEWAY>, and <MODEL_NAME>. The goal is to document a reusable debugging method, not to expose a specific environment.

Why My AI Assistant Repeated One Reply Four Times: Debugging an OpenClaw WeChat Channel Issue

Fri, 29 May 2026 11:24:29 +0800

Short version

The symptom looked like a messaging-channel bug: an AI assistant connected to a personal chat channel appeared to repeat the same reply multiple times. The real bug was earlier in the chain. Before the reply ever reached the message-sending layer, the OpenClaw agent had already produced duplicated visible text. The useful fix was not to patch the chat sender blindly, but to split the path into transport, session, model-routing, and provider layers, then compare the OpenAI-compatible gateway path with the native provider path. Once the faulty compatible provider candidate was removed from the visible model set and the personal IM channel was pinned to the native provider, the same minimal prompt returned exactly once.

This post is deliberately privacy-safe. It contains no real internal addresses, account IDs, tokens, session IDs, personal chat identifiers, or private file paths. Configuration examples use placeholders. The value is the debugging method, not the private environment.

OpenClaw Upgrade Guide: From Beginner to Expert

Fri, 29 May 2026 09:00:00 +0800

The short version

OpenClaw is a powerful personal AI assistant that supports multiple messaging channels and AI models. Upgrading OpenClaw is actually very simple — the most recommended way is to use the openclaw update command. This article will详细介绍 various upgrade methods, including switching from npm package installation to git source installation, as well as verification and rollback strategies after upgrading.

All examples in this article use public projects, public links, and placeholders. No real server addresses, accounts, tokens, business configuration, or private network details are included. The figures are taken from the official OpenClaw repository and documentation, and are referenced under the project’s MIT license.

Migrating from OpenClaw to HermesAgent: A Smooth AI Agent Migration in Practice

Fri, 29 May 2026 08:00:00 +0800

Introduction: Why Am I “Moving”?

In 2026, the AI agent landscape is evolving at an incredible pace. Tools that were cutting-edge six months ago might already be surpassed by more powerful alternatives. As someone who relies heavily on AI agents for daily work, I’ve been closely following the latest developments in this field.

Recently, I completed a full migration from OpenClaw to HermesAgent. This wasn’t an impulsive decision, but a thoughtful choice made after experiencing the differences between the two tools in real-world usage.

This article will share in detail:

Background: What OpenClaw and HermesAgent are
Migration Reasons: Why I decided to migrate
Migration Process: Step-by-step guide to complete the migration
Pitfalls Encountered: Problems and solutions during migration
Post-Migration Cleanup: How to completely remove OpenClaw residuals
Post-Migration Experience: New capabilities gained from HermesAgent
Q&A: Frequently asked questions

Avoiding the Trap: Why Fail2Ban Fails on Ubuntu 26.04 & PVE 9.2 (And How to Fix It)

Tue, 26 May 2026 22:20:00 +0800

The Bottom Line

With the releases of Ubuntu 26.04 LTS and Proxmox VE (PVE) 9.2, many system administrators, DevOps engineers, and self-hosting enthusiasts have eagerly upgraded or clean-installed these latest systems. However, during the post-installation security hardening phase, you may encounter a highly frustrating scenario: simply copying over your legacy Fail2Ban configuration files from older versions (such as Ubuntu 20.04/22.04 or PVE 7.x/8.x) will either cause the Fail2Ban service to crash during startup or, worse, run silently in the background while completely failing to block external brute-force attacks!

This issue is not caused by a bug in Fail2Ban itself. Instead, it is the result of three “invisible bombs” hidden beneath the surface of these modern Linux distributions, namely changes in the logging architecture, service activation mechanisms, and firewall backends. This article provides an in-depth analysis of these three architectural shifts and introduces a modern, bulletproof Fail2Ban configuration guide fully integrated with systemd-journald and nftables.

Forget Bloated VPNs! Step-by-Step EasyTier Setup on Ubuntu 26.04 for a Decentralized Virtual LAN

Tue, 26 May 2026 21:40:00 +0800

TL;DR

In today’s multi-device environment, virtual private networking has become an absolute necessity. While classic tools like ZeroTier and Tailscale are excellent, they are fundamentally constrained by centralized controllers and overseas relay servers, leading to slow handshakes and lower NAT hole-punching success rates. On the other hand, self-hosting frp or nps requires a public IP address, and all traffic must pass through the proxy server, severely limiting bandwidth.

EasyTier is a completely decentralized virtual LAN tool written in Rust. Its defining feature is peer symmetry (peer-to-peer equivalence). Once nodes are introduced, they maintain stable P2P communication even if the initial bootstrap/relay server goes offline. Even more exciting, it natively supports subnet proxying (network-to-network) and a built-in WireGuard portal. This step-by-step guide will walk you through installing, configuring, and managing the latest EasyTier via Systemd on the newly released Ubuntu 26.04 LTS.

All configurations, commands, and network topologies in this article use generic placeholders and do not contain any real private or sensitive information.

Don't Rush After Installing Ubuntu 26.04 LTS! Swiftly Configure Domestic Mirrors (Huawei & Alibaba Cloud APT Sources DEB822 Tutorial)

Tue, 26 May 2026 21:00:00 +0800

TL;DR

Ubuntu 26.04 LTS (Resolute Raccoon) has officially been released. If you have just installed it, the very first thing you should do is replace the default APT sources with fast domestic mirror servers (such as Alibaba Cloud or Huawei Cloud). Note that starting from Ubuntu 24.04, the system has transitioned entirely to the new DEB822 format for APT source configurations (stored in /etc/apt/sources.list.d/ubuntu.sources), making the traditional /etc/apt/sources.list inactive by default.

This tutorial provides a step-by-step guide on how to safely change to Alibaba Cloud and Huawei Cloud mirrors in Ubuntu 26.04 LTS, along with deep troubleshooting analysis for potential pitfalls like dependency conflicts and version codename mismatches.

Seamless Homelab Networking: Deploying Tailscale on Ubuntu 26.04 for Effortless Remote Access

Tue, 26 May 2026 14:00:00 +0800

The Short Version

Cross-carrier connectivity, lack of public IPv4 addresses, and multi-device connection management have always been the ultimate pain points for Homelab enthusiasts and enterprise sysadmins alike. This article provides a comprehensive, step-by-step guide on how to cleanly and securely install and configure the latest version of Tailscale on the newly released Ubuntu 26.04 (Resolute Raccoon) using the modern APT Keyring standards. Beyond a clean command-line install walkthrough, we delve into the architectural design of Tailscale, Subnet Router routing, and Exit Node proxying to establish a seamless, encrypted mesh network linking your home Synology NAS, Proxmox VE hypervisors, remote laptops, and mobile devices.

All setups and commands documented here have been rigorously tested on a clean Ubuntu 26.04 (Resolute Raccoon) environment. To prioritize safety and avoid leakage, all internal IP addresses, access tokens, routing tables, and server domains have been fully masked using generic placeholders.

Stop Using Old Methods! Deploying the Latest Docker CE on Ubuntu 26.04 LTS with Ultra-fast Mirror Setup

Tue, 26 May 2026 10:00:00 +0800

Foreword

With the official release of Ubuntu 26.04 LTS (Resolute Raccoon), developers and system administrators worldwide are upgrading their development, testing, and production environments to this long-term support version. However, setting up Docker—the cornerstone of modern containerization and microservices architecture—on a brand-new LTS release can sometimes present unexpected friction.

If you are still relying on legacy commands like apt-get install docker.io, or copy-pasting outdated tutorials meant for Ubuntu 20.04 or 22.04, you are likely to run into issues. These issues range from outdated software packages to APT repository format mismatches (especially with the widespread adoption of the new DEB822 format), or network timeouts when pulling images from container registries in restricted environments.

This article provides a comprehensive, step-by-step, and highly detailed guide to installing Docker Community Edition (Docker CE) on Ubuntu 26.04 LTS. We will delve into modern DEB822 repository configurations, non-root system privilege separation, systemd service tweaks, and advanced network acceleration (both HTTP/HTTPS proxies and private registry mirrors).

Do Not Waste Your Codex Quota Before the Reset: Meet Codex Reset Radar

Sun, 24 May 2026 08:10:00 +0800

The short version

Codex resets have recently become more important to watch. Sometimes the reset is part of the normal usage cycle. Sometimes it is a compensation reset after an incident. Sometimes it follows a fix for abnormal limit consumption. For heavy Codex users, the painful part is not that the quota resets. The painful part is discovering that you still had useful weekly quota left, but you did not use it before the reset overwrote the old window.

Codex Reset Radar is a small public dashboard that turns scattered public signals into a practical warning: if a Codex quota reset window is likely or already open, it tells you to use your remaining weekly quota on valuable work before it expires.

This article discusses only public pages, public status signals, and public references. It does not include private accounts, tokens, internal systems, private network details, or personal usage data. Any discussion of quota, reset windows, and early warnings is a user-side workflow analysis, not an official statement about OpenAI billing, subscription policy, or service guarantees.

Stop Worshipping Agent Frameworks: 12-Factor Agents as an Engineering Baseline

Sat, 23 May 2026 14:50:00 +0800

The short version

12-Factor Agents is not an installable agent framework, and it is not a Skill for Codex, Claude, Cursor, or any other agent runtime. It is better understood as a set of engineering principles for the AI era. When a system made from a large model, a tool list, and a while loop reaches the familiar 70% or 80% quality bar but refuses to become production-grade, these principles tell you where to look: prompts, context, structured outputs, state, human approval, error compaction, control flow, and recovery.

The best part is that it does not romanticize agents. It says, in effect, that reliable agents are mostly software. The LLM is powerful, but it should live inside a system that is observable, interruptible, recoverable, auditable, and testable.

All examples in this article use public projects, public links, and placeholders. No real server addresses, accounts, tokens, business configuration, or private network details are included. The figures are taken from the official humanlayer/12-factor-agents repository and are referenced under the project author’s CC BY-SA 4.0 content license statement. Code license details should be checked in the upstream repository.

Proxmox VE 9.2 Is Out: Not Just a New Kernel, but a Cluster That Can Start Balancing Itself

Sat, 23 May 2026 12:46:00 +0800

Short version

Proxmox VE 9.2 was officially released on May 21, 2026. On the surface it is a platform refresh: Debian 13.5 Trixie, Linux kernel 7.0, QEMU 11.0, LXC 7.0, ZFS 2.4, and updated Ceph options. The more interesting story is operational: dynamic load balancing through CRS, safer HA maintenance with arm/disarm, a much stronger SDN fabric story, web-based custom CPU model management, and many smaller fixes around guests, storage, security, and automation.

If you run a single-node homelab, Proxmox VE 9.2 may not feel dramatic on day one. If you operate a multi-node cluster with HA resources, Ceph, software-defined networking, custom CPU compatibility requirements, Windows secure boot, external automation, or strict maintenance windows, this release deserves a careful read.

This article summarizes the official Proxmox VE 9.2 release and adds an operator’s view: what changed, what problem each change addresses, what to test before upgrading, and when it is reasonable to wait. All hostnames, addresses, cluster names, accounts, and command outputs are placeholders. No private environment details are included.

Your MCP Config Was Fine. The Server Died Before the Handshake.

Sat, 23 May 2026 06:10:00 +0800

The short version

The misleading part of this incident was the surface error. Codex reported that an MCP client could not initialize and that the MCP server handshake failed. That naturally pushes you toward MCP configuration, JSON-RPC initialization, plugin settings, authentication, network transport, or stale tool caches. But the root cause was lower than the MCP protocol: one local MCP server binary was killed by the macOS dynamic linker before it could answer the initialize request. The client only saw a closed connection. The useful evidence was in the server stderr: dyld: Symbol not found, pointing at a missing Swift Concurrency runtime symbol.

In other words, MCP did not really get a chance to fail. The server process died first.

This article walks through a real troubleshooting pattern around Codex, MCP clients, and MCP servers. The failure looked like a protocol startup problem, but the root cause lived in a native macOS binary and its Swift runtime compatibility.

All private details have been removed. This article does not include real internal addresses, usernames, session IDs, full local paths, tokens, private repository names, or business system names. Paths use placeholders such as ~, <USER_HOME>, <PLUGIN_DIR>, and <PROJECT>. Log snippets keep only the technical fields needed to explain the diagnosis.

Stop Letting Agents Guess UI: Installing and Using UI UX Pro Max the Right Way

Fri, 22 May 2026 22:50:00 +0800

The short version

UI UX Pro Max is not a magic prompt that suddenly gives an agent taste. It is a searchable UI/UX design intelligence Skill for AI coding assistants such as Claude Code, Codex, Cursor, Windsurf, Gemini, OpenCode, and similar tools. It packages product patterns, UI styles, color palettes, typography pairings, landing page structures, chart recommendations, UX guidelines, and stack-specific implementation advice into files and scripts that an agent can actually query.

The right way to use it is not to install it and keep asking for “a beautiful page.” The right way is to make the agent generate a design system first, then query UX, chart, web, or stack-specific guidance, and only then implement the page. That workflow reduces generic AI gradients, weak contrast, crowded mobile layouts, decorative dashboards, missing focus states, and many other common agent-generated UI problems.

This article uses only public references, a public repository, and a clean temporary verification directory. Commands, paths, project names, and examples are generic. No private addresses, credentials, internal project names, account names, or personal configuration are included. Screenshots are taken from public reference pages and sanitized verification work.

Ubuntu 26.04 After Install: Set Up Chinese Display and Chinese Input the Right Way

Fri, 22 May 2026 16:05:00 +0800

Short version

After installing Ubuntu 26.04 Desktop, do not treat Chinese support as “just install one input method package.” The stable sequence is: update the system, install full Chinese language support, install CJK fonts, decide whether the desktop UI itself should be Chinese, add a Chinese input source, and only then choose between the GNOME-friendly IBus Intelligent Pinyin path and the more customizable Fcitx5 path.

Ubuntu 26.04 LTS is a very usable desktop system out of the box, but Chinese users usually hit the same three issues soon after installation: the interface is partly translated or not translated at all, Chinese text looks thin or falls back to poor fonts, and the input method either does not appear or cannot be switched reliably.

Those issues should not be fixed separately. On Ubuntu Desktop, language support and input methods are connected. Language packages provide translations, regional formats, fonts, dictionaries, and related desktop resources. The input method framework converts keyboard events into Chinese candidates. GNOME Settings connects those engines to the active desktop session. If you only install ibus-libpinyin or only install fcitx5, you may end up with a system that can technically type Chinese but still feels unfinished.

This article is for users who have just installed Ubuntu 26.04 Desktop, and also for people who routinely prepare Linux laptops or desktops for family, coworkers, or new machines. The goal is not to build the most complicated input method setup. The goal is a clean baseline: Chinese text displays correctly, Chinese input switches reliably, and the English desktop can remain available if you prefer it.

All screenshots in this article are real operation screenshots from public references and are stored locally on this site. One screenshot was cropped before being included to remove an unrelated remote-desktop title bar. Ubuntu 26.04 daily images, final release images, OEM builds, and later point releases may use slightly different labels, but the workflow and troubleshooting logic are the same.

After Buying a Domain, Use Cloudflare Tunnel to Turn Home Services into Public HTTPS

Thu, 21 May 2026 11:38:00 +0800

Short version

The previous two posts covered the cheap-domain part and the Cloudflare DNS part: buy a low-cost .xyz domain for personal lab use, then move the domain to Cloudflare for nameservers, DNS, DDNS, email routing, and basic automation. This post continues with the next practical step: use Cloudflare Tunnel to expose an internal web service as a public https:// hostname. The important point is that visitors use standard HTTPS on port 443, while your home router does not need to forward ports 80 or 443 and your origin IP does not need to be exposed.

This article follows these two posts:

“Ten Years for 80 Yuan: Why I Prefer 6-Digit .xyz Domains for Personal Sites”
Original link: https://mp.weixin.qq.com/s/tbefnWGFI0QBFlRVcYjVEw
“Do Not Waste That 80-Yuan Ten-Year Domain: Put It on Cloudflare First”
Original link: https://mp.weixin.qq.com/s/h0o-vtGB_zj1aptaumBztQ

Those posts already covered buying a cheap .xyz domain, moving nameservers to Cloudflare, creating DNS records, using DDNS, and setting up email-related records. This post assumes that your domain is already active on Cloudflare. We will focus on one thing: publishing an internal web service through Cloudflare Tunnel with a clean public HTTPS hostname.

All examples in this article use documentation placeholders such as example.xyz, nas.speedtest.example.xyz, 192.0.2.10, localhost, and <TUNNEL_TOKEN>. No real domain, account, token, zone ID, private network address, or personal information is included.

Gemini 3.5 Is Not Just Faster: Google I/O Moves AI Into the Agent Era

Wed, 20 May 2026 07:05:00 +0800

The short version

The most important Google I/O 2026 announcement is not merely another chat model. Google is moving Gemini 3.5 into the action layer. The first public model, Gemini 3.5 Flash, is now part of the Gemini app, Search AI Mode, Google Antigravity, the Gemini API, Android Studio, Gemini Enterprise Agent Platform, and Gemini Enterprise. Google’s phrase is frontier intelligence with action. In practical terms, the model is meant to do more than answer: it is expected to operate across tools, code, files, search, and enterprise workflows.

This article is based on Google’s official public announcements and adds industry analysis on top of them. All images are from Google’s public blog posts. The article contains no private account information, internal network details, secrets, private system screenshots, or non-public data.

Shanghai Telecom Users: Claim 25 Million AI Tokens for Free, Valid for 1 Month

Mon, 18 May 2026 15:08:00 +0800

Bottom line

If you are a Shanghai Telecom user, there is currently a 0-yuan offer to claim 25 million tokens for the AI STORE Tianyi intelligent inference service quota edition, valid for 31 days, roughly 1 month. The entry point comes from a public Shanghai Telecom WeChat article. I have personally verified the process and successfully claimed it. After a successful claim, China Telecom sends an SMS saying the AI STORE Tianyi Intelligent Inference Service Quota Edition (one-time) has taken effect immediately.

Claim link: https://emall.sh.189.cn/stock/#/weChat/junior/handle/113238?cx=YUELIN

This post only summarizes the public claim link, practical reminders, and source attribution. It does not include phone numbers, account information, private SMS details, internal addresses, or any private configuration. This is a time-sensitive offer, so the official Shanghai Telecom page you see at the time of access is the final reference.

New Chrome Could Not Log In to Bitwarden, but Old Machines Still Worked: A Vaultwarden Compatibility Trap

Mon, 18 May 2026 10:05:00 +0800

TL;DR

The failure looked like a Chrome or Bitwarden extension problem: newly installed computers could not log in to a self-hosted Vaultwarden instance, while existing computers continued to work with the same Bitwarden 2026.4.1 browser extension. The actual root cause was server-side compatibility: the clients were using a newer prelogin endpoint, while the Vaultwarden server was still running vaultwarden/server:1.35.4-alpine, which did not provide /identity/accounts/prelogin/password.

Existing machines were likely protected by an already established login state and local cache. They did not prove that the full first-login API path was still compatible. The correct fix was to back up the Vaultwarden data, upgrade the server image to 1.36.0 or newer, and confirm from logs that the prelogin endpoint no longer returned 404.

All domains, paths, usernames, and deployment details in this article are sanitized. Examples use placeholders such as vault.example.com and /opt/vaultwarden; no internal network or private information is included.

[Clickbait Alert] Switching to a Chinese Mirror Nearly Broke My Ubuntu: A Real Story of apt Dependency Hell

Sun, 17 May 2026 10:00:00 +0800

TL;DR

I switched to a domestic Chinese mirror for Ubuntu and thought it would take 10 minutes. It took two hours. This article documents the entire journey from “mirror sync delay causing version mismatch” to “dpkg forced downgrade” to “apt fully restored.” The core lesson: switching a mirror is not a one-click fix—version consistency is everything. If you swap mirrors on a system that’s been running for months, you have a 99% chance of hitting dependency conflicts.

All operations in this article are based on Ubuntu 26.04 (Plucky). All IPs, hostnames, and paths are sanitized examples and contain no internal network addresses or sensitive information.

Stop Dragging Files Around: BaiduPCS-Go CLI and Agent Workflows for Baidu Netdisk

Sat, 16 May 2026 10:06:01 +0800

Bottom line first

If you only download one or two files from Baidu Netdisk once in a while, the web UI and official desktop client are fine. Once you start doing batch downloads, remote server pulls, archive uploads, directory audits, or Agent-assisted workflows with Codex, Claude, OpenClaw, HermesAgent, or similar tools, the graphical UI becomes friction. BaiduPCS-Go is useful not because it is a magic speed booster, but because it turns Baidu Netdisk into something scripts, terminals, and Agents can operate. This article walks through installation checks, BDUSS/STOKEN login, everyday commands, configuration, safety rules, and practical Agent integration.

All accounts, cookies, paths, tasks, and settings in this article are sanitized examples. They do not contain real BDUSS, STOKEN, cookies, private directories, internal addresses, or business information.

After Buying an 80-Yuan 10-Year Domain, Hand the Rest to Cloudflare

Wed, 13 May 2026 08:46:06 +0800

The short version

Buying a cheap domain is only the first step. The real value starts when you move authoritative DNS to Cloudflare: DNS records, dynamic DNS, business email verification, mail forwarding, certificate automation, and even Agent-assisted configuration through scoped API Tokens can all live behind one clean control plane. The previous article covered how to buy a low-cost .xyz domain for roughly 80 RMB for 10 years. This one continues from there: how to connect that domain to Cloudflare, the generous infrastructure provider many people jokingly call a public good of the Internet, and how to use it efficiently without leaking secrets.

All screenshots and examples in this article use safe placeholders such as example.xyz, 203.0.113.10, and 2001:db8::10. They do not contain real domains, real IP addresses, Cloudflare account identifiers, Zone IDs, API Tokens, or private network information. Replace the placeholders with your own values when you follow the steps.

Stop Clicking Remote Desktop: Let AI Agents SSH into Windows Instead

Wed, 13 May 2026 08:10:00 +0800

The short version

An AI agent does not need Remote Desktop, VNC, or a proprietary remote-control tool to operate a Windows machine. For many workstations, lab machines, development PCs, and internal servers, the cleanest path is to enable the built-in OpenSSH Server on Windows and connect from Linux or macOS with a normal command: ssh <user>@<windows-host>.

There are only three things to get right. First, install and enable OpenSSH Server on Windows 10 or Windows 11. Second, generate an SSH key on Linux or macOS and place the public key on Windows. Third, if the target account belongs to the Windows Administrators group, put the public key in C:\ProgramData\ssh\administrators_authorized_keys and lock down the ACL with icacls. After that, an AI agent can run PowerShell, copy scripts, collect logs, install tools, and perform repeatable maintenance through the same SSH workflow it already uses for Linux.

All hostnames, addresses, usernames, screenshots, and commands in this article use generic placeholders. No real internal addresses, usernames, machine names, tokens, keys, or private paths are included. Replace placeholders such as <user>, <windows-host>, and <windows-ip> with values from your own environment.

Ten Years for 80 Yuan: Why a 6-Digit .xyz Domain Is Good Enough for Personal Labs

Tue, 12 May 2026 19:10:00 +0800

Short version

If the domain is for a home lab, personal testing, temporary demos, API callbacks, development services, or other non-formal websites, I would first look at low-cost .xyz domains. In China, Tencent Cloud often makes this especially convenient for domestic users. For some pure numeric .xyz names with six or more digits, the checkout page may show a very low first-year and renewal price. If the price is 8 RMB per year, buying 10 years costs only 80 RMB.

This is not a recommendation for company websites, public products, serious brands, payment systems, or long-term marketing pages. For those, a readable and trustworthy brand domain is still worth the money.

When people start building a personal website, home lab, NAS callback endpoint, temporary API, reverse proxy, monitoring page, or small side project, they often overthink the domain name. Should it be a .com? Should it be short? Should it look like a real company? Should it use pinyin, English words, initials, or a private nickname?

My practical answer is: first decide what the domain is supposed to do.

If it is a serious public identity, choose the name carefully. If it is just a personal utility domain, do not spend too much money or attention on the name. In that case, the domain is not a brand asset. It is a stable handle for DNS, HTTPS, reverse proxy rules, ACME certificates, third-party callbacks, object storage, and temporary services.

Upgrading PVE 8 to 9 Without Brute Force: Let an Agent Drive It, or Follow This Manual Checklist

Tue, 12 May 2026 19:00:00 +0800

Short version

Upgrading Proxmox VE 8 to 9 is not just copying a few commands. It is a major system upgrade from Debian Bookworm to Trixie, from PVE 8.4 to PVE 9.x, with kernel, storage, networking, Ceph, and HA behavior in the blast radius. The fastest practical path is to let Codex, Claude, OpenClaw, HermesAgent, or a similar Agent handle checks, command sequencing, logging, and post-upgrade verification. The human operator still needs to approve repository changes, package removals, configuration prompts, reboot timing, and recovery decisions. If you prefer doing everything by hand, the second half of this article gives a concrete manual checklist.

This article is for two groups of operators. The first group already uses Agents over SSH and wants a scoped one-sentence task for upgrading PVE. The second group prefers typing every command manually and wants a clear, ordered procedure with the main risk points called out.

All hostnames, addresses, repositories, tokens, and accounts in this article are placeholders. Replace values such as <PVE_NODE>, <BACKUP_TARGET>, and <ADMIN_CONSOLE> with your own environment. Before touching a production host, read the official Proxmox documentation and verify that your backups are restorable.

Codex 0.130 Removed /approvals? The Fix Is to Move Permissions to Startup Flags

Tue, 12 May 2026 18:50:00 +0800

The short version

If you upgraded to Codex 0.130.0 and noticed that the old /approvals habit no longer works, the practical fix is not to downgrade. Move the permission policy to launch time. Use --ask-for-approval to control when Codex asks, --sandbox to control what commands can touch, and reserve --dangerously-bypass-approvals-and-sandbox for environments that are already isolated outside Codex. The long flag can also be written directly as --yolo, which is easier to remember, easier to type, and more consistent with command habits from tools such as Gemini.

In other words, stop treating approval mode as an in-session toggle. Treat it as part of the way you start the agent.

This article only discusses public Codex CLI flags and generic workflows. It does not include real hostnames, internal addresses, usernames, tokens, private paths, or project names. Commands use placeholders such as <PROJECT> and <TASK>.

Ubuntu 26.04 Upgrade Guide: Let an Agent Do It, or Run It by Hand

Tue, 12 May 2026 07:30:00 +0800

The short version

Upgrading Ubuntu 22.04 or 24.04 to Ubuntu 26.04 is not about memorizing one command. It is about following the supported upgrade path. Ubuntu 22.04 LTS should not be jumped directly to Ubuntu 26.04 LTS. Upgrade 22.04 LTS to 24.04 LTS first, then move from 24.04 LTS to 26.04 LTS. As of 2026-05-12, Ubuntu 26.04 LTS has already been released, but the normal LTS-to-LTS upgrade prompt from 24.04 LTS to 26.04 LTS is typically enabled after the first point release. The official 26.04 schedule lists the 26.04.1 point release on 2026-07-09. Production systems should usually wait for the regular upgrade path; test systems can evaluate an early upgrade only with explicit risk acceptance.

If you already use agents such as Code, Claude, OpenClaw, HermesAgent, Codex, or OpenCode, this is a good task to delegate. But do not just say “upgrade Ubuntu.” Give the agent a bounded job: inspect first, back up, follow the supported path, keep logs, ask before risky choices, reboot, verify services, and report evidence. This article gives both a ready-to-copy agent prompt and a manual procedure.

All examples in this article are generic. No private hostnames, internal addresses, accounts, credentials, tokens, business system names, or personal paths are included. Replace placeholders such as <HOST>, <SERVICE>, and <BACKUP_DIR> with values from your own environment.

[Transfer] Installing and Configuring an ImmortalWrt Bypass Router

Mon, 11 May 2026 21:10:55 +0800

This article is a full English translation of Egg Targaryen’s “ImmortalWrt旁路由安装与配置”. The original article is published under the CC BY-NC-SA 4.0 license. The operation order and screenshots are preserved, with minor formatting adjustments for this site.

Small Models Make Agents Drift. Superpowers Gives Them Rails.

Thu, 07 May 2026 16:43:10 +0800

The short version

When an agent powered by a smaller or weaker model behaves unpredictably, the problem is not always solved by writing a longer prompt. Smaller models often struggle with long-horizon consistency, tool discipline, evidence tracking, and multi-step execution. Superpowers does not turn a weak model into a frontier model. What it does is more practical: it gives the agent an external engineering workflow made of reusable Skills, checkpoints, testing habits, debugging rules, review steps, and completion verification.

For agents such as OpenClaw, HermesAgent, Codex, Claude, Gemini, OpenCode, Droid, Cursor, and similar tools, Superpowers is best understood as an engineering-discipline layer. It makes the agent less dependent on improvisation and more likely to follow a repeatable process.

This article is about a very common failure mode in modern agent workflows: the model can talk fluently, but the agent does not behave reliably once the task becomes long, stateful, tool-heavy, or distributed across multiple agents.

The issue becomes more visible when using smaller domestic models, local models, quantized models, or cost-optimized models. They may answer normal questions well enough, but once they need to read a repository, follow a constraint, modify files, run tests, interpret logs, preserve privacy, and report only verified results, the instability becomes obvious.

All examples in this article are generic. No private hostnames, internal addresses, credentials, project names, or personal paths are included.

Adding Proxmox VE local-lvm Usage and Link-Speed Monitoring to Uptime Kuma

Tue, 05 May 2026 17:20:00 +0800

Short version

Proxmox VE local-lvm is usually an LVM-thin pool, not a normal mounted directory, so df -h is not enough to catch it before it becomes full. Network link speed is another quiet failure mode: services may stay online while a NAS or router uplink falls back to 100 Mb/s and turns large file transfers into a crawl. A practical fix is to feed both checks into the Uptime Kuma you already use: expose a small HTTP health endpoint for local-lvm, and push link-speed status from the Proxmox host with an ethtool script.

This article walks through the design, the problems in a naive implementation, improved scripts, systemd units, Uptime Kuma configuration, verification steps, and safety notes. All addresses, tokens, host names, and environment-specific values are placeholders. Replace <PVE_HOST>, <KUMA_URL>, <PUSH_TOKEN>, and <INTERFACE> with values from your own environment.

How to Prompt OpenClaw, HermesAgent, Codex, Claude, Gemini, OpenCode, and Droid to Write Articles and Publish WeChat Drafts

Tue, 05 May 2026 16:00:00 +0800

Short version

If you want an agent such as OpenClaw, HermesAgent, Codex, Claude, Gemini, OpenCode, or Droid to write an article, prepare a Hugo blog post, convert the Chinese version into WeChat-compatible HTML, preview it, fix layout issues, and create a WeChat Official Account draft, the prompt cannot simply say “write and publish an article.” A useful prompt must define the goal, source material, paths, account constraints, fixed-IP requirements, conversion steps, preview checks, failure recovery, privacy boundaries, and final verification evidence.

This post describes a reusable prompting pattern for article automation. It explains how to prepare the WeChat draft API, why a Linux machine with a fixed public IP is often required, how to tell an agent to try local API access first and then fall back to a fixed-egress host, how to use a Markdown-to-WeChat-HTML converter, and how to make the agent check for invisible white text, strange indentation, broken images, and accidental leaks before declaring the job done.

All examples are privacy-safe. They use placeholders rather than real secrets, private IP addresses, hostnames, repository URLs, tokens, cookies, or personal paths. Replace placeholders with your own values only in a protected runtime environment, never in a public article, public repository, or screenshot.

Integrating Synology Operations as an OpenClaw / HermesAgent Skill: From One Sentence to Auditable NAS Automation

Tue, 05 May 2026 12:20:00 +0800

I have already written two Synology CLI references on this blog:

Those posts answer the question: “What commands can a human run on a Synology NAS?” This article answers a different question: if I already use OpenClaw / HermesAgent, how can I turn those commands into an operations Skill so that I can ask the agent, in one sentence, to inspect the NAS, summarize evidence, prepare a maintenance plan, and execute approved commands only when the risk is acceptable?

The short answer is: yes, but the Skill must not become an unrestricted root shell. The right design is:

Make Synology SSH access controlled, testable, and revocable.
Put common Synology CLI operations into a Skill, together with command categories, risk levels, and output rules.
Allow read-only diagnostics by default.
Require explicit approval for service restarts, permission changes, user changes, network changes, deletion, and storage operations.
Preserve commands, output, and reasoning so each operation remains auditable.

If you only want the big picture, the diagram below summarizes the whole article.

[Transfer] Synology NAS CLI Administration Guide

Thu, 30 Apr 2026 18:20:04 +0800

This guide contains command tools that allow your applications to make use of the resources on Synology DiskStation and also includes a list of Synology Error Numbers for reference.

[Transfer] Synology DiskStation Administration CLI Guide: Reading Notes and Command Cheatsheet

Thu, 30 Apr 2026 18:14:05 +0800

Short version

Synology’s official CLI administration guide is not a beginner manual for the DSM web interface. It is a compact reference for scripting, automation, and system integration. The useful parts cover local users, local groups, shared folders, network configuration, service management, Windows workgroup or ADS domain settings, and DSM error numbers.

This post is an English reading note and command cheatsheet based on Synology’s official PDF, CLI Administrator Guide for Synology NAS. Because the original PDF is a copyrighted Synology document, this post does not reproduce or translate the full document verbatim. Instead, it reorganizes the material into a bilingual blog-friendly guide for quick reading and daily operations. For exact wording, parameter definitions, version-specific behavior, and legal notices, use the official PDF linked at the end.

[Translation] Synology SSH Commands Cheatsheet

Thu, 30 Apr 2026 10:00:00 +0800

Warning: Running these SSH commands may damage your system/hard drive. Do not execute them if you don’t understand what they do!

The Best Home for OpenClaw / HermesAgent: Proxmox VE

Wed, 29 Apr 2026 10:00:00 +0800

The Best Home for OpenClaw / HermesAgent: Proxmox VE

If you treat OpenClaw or HermesAgent as just another chatbot, the installation target looks unimportant. It can run on a physical machine, a VPS, a Docker host, or even a daily laptop.

That changes the moment the agent starts receiving messages, running shell commands, reading and writing files, launching browser automation, storing long-term memory, and executing scheduled tasks. At that point, the question is no longer “where can it run?” The real question is: what boundary should contain it?

My conclusion is simple: for long-running personal agents such as OpenClaw and HermesAgent, the most reliable home is not the physical host itself, but a dedicated virtual machine on Proxmox VE.

This is not because Proxmox VE is fashionable. It is because it solves the three problems that matter most for agent infrastructure: data isolation, compute isolation, and backup/restore.

Debugging Chinese Text Turning into Underscores in tmux + opencode: The Real Culprit Was client_utf8=0

Tue, 28 Apr 2026 18:40:00 +0800

Short version

This was not an opencode Chinese rendering bug, and it was not a broken terminal font. The tmux client had been detected as not supporting UTF-8. The decisive evidence was tmux display-message -p 'client_utf8=#{client_utf8}', which returned client_utf8=0. In that state, tmux replaces non-ASCII output with underscores, so every Chinese character inside the opencode TUI appeared as _.

This post documents a small but very typical terminal debugging session. On the same Mac, running opencode directly displayed Chinese text correctly. But after starting a tmux session first and then running opencode, all Chinese text became underscores.

This kind of problem is easy to misdiagnose. The first instinct is often to blame the font, the terminal emulator, the opencode version, a color theme, Nerd Font configuration, Unicode width handling, or a bug in the TUI framework. In this case, however, the key question was much narrower: does the current tmux client believe it can write UTF-8 back to the outer terminal?

To avoid exposing private environment details, all examples below are generalized. They do not include real hostnames, private addresses, session names, credentials, usernames, or project paths. The only things preserved are the technical facts needed to understand the failure and the fix.

Proxmox VE VM Creation and Ubuntu 26.04 Unattended Installation: A Practical Guide

Sat, 25 Apr 2026 10:00:00 +0800

Proxmox VE VM Creation and Ubuntu 26.04 Unattended Installation: A Practical Guide

Creating virtual machines and installing operating systems are among the most fundamental and frequent tasks in server operations and maintenance. While traditional interactive installation via VNC or IPMI is intuitive, it is inefficient—especially when deploying multiple servers in batches. This article provides a detailed walkthrough of how to leverage Proxmox VE (PVE) combined with Cloud-init technology to achieve fully automated unattended installation of Ubuntu 26.04 Server.

Why a NAS hostname with `speedtest` can sometimes be much faster

Fri, 24 Apr 2026 09:00:00 +0800

Short version

If your NAS is painfully slow when accessed from outside your home, and you control both your domain name and your reverse-proxy entry, putting speedtest into the subdomain can sometimes make a dramatic difference.
This is not magic and it is not guaranteed, but it often appears to hit a more permissive carrier policy path for “speed-test-like” traffic.

This post was inspired by a discussion on the fnNAS forum. The original thread makes a very direct claim: some home broadband lines seem to throttle ordinary NAS access quite aggressively, but once the hostname contains speedtest, the connection can suddenly behave much better.

I am not repeating the forum post word for word. Instead, I am turning the idea into a longer-lived technical note that answers three questions:

Why this trick can work
How to set it up with the least amount of moving parts
When it will not work, or is not worth the effort

[Repost] Google Cloud Free VM, 2-core 1 GB RAM, 30 GB disk, 200 GB traffic/month

Mon, 20 Apr 2026 08:28:00 +0800

[Repost] Google Cloud Free VM, 2-core 1 GB RAM, 30 GB disk, 200 GB traffic/month

I have introduced several free cloud servers before. In fact, the three major overseas cloud providers (Google, Amazon, and Microsoft) all have free tiers. The latter two are time-limited and not very interesting. In addition to a three-month trial of regular-priced machines, Google also offers a permanent free server.It comes with 2 cores, 1 GB of memory, 30 GB of disk, and 200 GB of traffic per month. That is still enough to play around with.

I. Google Cloud Trial & Free

Google Cloud, as the name suggests, is a cloud server made by Google. The current Google Cloud trial is only three months, and the quota seems to be 300 US dollars. If you buy a regular-price machine, it will be used up all at once, so it is better to use a free server.

This article does not involve Google Cloud registration and trial use. Anyone with a Google account can register for this thing. It is not difficult. Moreover, I registered it several years ago. I don’t remember the specific details. If you don’t know, you can Google it yourself. Even if the new account is still on trial, it will not affect the trial of the free instance in this article.

Mainly Google Cloud’s free servers. Google Cloud has given free quotas to corresponding regions.Oregon, Iowa, South Carolinae2-micro instance, 2-core CPU + 1g memory + 30g hard disk, with public network IPv4, 200g traffic per month. This traffic is not limited to regions. Some people will say that the picture does not say "1 per month" GB outbound traffic?" Yes, first of all, Google Cloud only counts outbound traffic, not two-way traffic. Secondly, the free 1g traffic in the picture is "advanced tier", not "standard tier" traffic. The advanced tier is a little better than the standard tier network quality, of course, it is only a little better (although it was not before), and the standard tier is global 200g traffic.

OpenClaw Backup Failure Investigation and Fix: From Two Broken Schedules to a Fully Restored Automation Pipeline

Mon, 13 Apr 2026 09:30:00 +0800

This post is a full incident review, not because the failure was dramatic, but because it was a very typical automation problem.

Two machines lost their automatic OpenClaw backups at the same time: a local macOS machine and a remote VPS. Manual runs worked on both sides, and the archives could still be synchronized to the NAS, but the scheduled jobs were unreliable. At first glance it looked like “the scheduler did not fire.” In reality, the root cause was spread across scheduling, permissions, locking, logging, and even the way I validated the schedule.

That combination is what makes these incidents annoying: every individual piece looks almost fine, yet the full pipeline still fails.

When Docker Networks Collide with the Home LAN: Moving Auto-Allocated Subnets Back to 172

Mon, 13 Apr 2026 08:00:00 +0800

This post records a very practical Docker networking failure: the number of containers kept growing, Docker’s auto-assigned user-defined bridge networks eventually started landing in 192.168.x.x, and those networks began colliding with the real home LAN. The symptoms were not dramatic at first. Nothing looked “broken” in the usual sense. Containers were still running, the host was still alive, and the dashboard still looked normal. But parts of the home network became unreliable, and once I dug into it on my NAS, the root cause turned out to be the Docker network allocation strategy rather than any single bad container.

The fix was straightforward in principle, but important in practice: I moved Docker’s automatic network pool to 172.16.0.0/12, migrated the existing 192.168.* networks onto the 172 private range, and made sure future networks created through Portainer, Dockhand, or plain docker compose would follow the same rule.

Using WoClaw to Solve Shared Memory for Multi-Agent Workflows: OpenClaw, Codex, Claude, and Gemini on the Same Table

Sun, 05 Apr 2026 20:10:00 +0800

What matters most in a multi-agent system is often not “which model is smarter”, but “which agent still remembers what happened five minutes ago”.

When I put OpenClaw, OpenAI Codex, Claude, and Gemini into the same workflow, the most painful problem was not raw answer quality. It was context fragmentation:

OpenClaw remembered scheduling decisions, Codex remembered implementation details, Claude remembered review conclusions, and Gemini remembered external references, but none of them knew what the others knew.
Each tool had its own session lifecycle, so yesterday’s discussion was often gone by tomorrow.
As soon as a project entered a multi-round, multi-tool stage, repeating the same background became more expensive than solving the problem itself.
Without a shared memory layer, the final result was not collaboration, but several partial answers that looked similar and still failed to line up.

This post is about how I used WoClaw to place all of those tools on the same shared memory layer, so they could stop talking past each other and start working from the same state.

To avoid leaking private information, all examples below are abstracted. They do not include real hostnames, account names, addresses, tokens, or internal project codes.

Clawd Code Quick Architecture Read: One Page to Understand the Python-First Rewrite Workspace

Tue, 31 Mar 2026 21:30:00 +0800

The latest margrop/clawd-code codebase is no longer just a preserved source archive. It is now a very explicit Python-first porting workspace: src/ is the active implementation surface, tests/ is the verification layer, archive/claude_code_ts_snapshot/ is an optional local archive, and src/reference_data/ is the source of mirrored command and tool inventories.

This short post answers one question only: how is the workspace organized right now?

Clawd Code Latest Code Analysis: How a Python-First Claude Code Rewrite Organizes Commands, Tools, Sessions, and Audit

Tue, 31 Mar 2026 20:30:00 +0800

After reading the latest code in margrop/clawd-code, the main change is obvious: this repository is no longer just an archive of the leaked Claude Code tree. It is now a Python-first porting workspace. The tracked tree centers on src/ as active implementation, tests/ as verification, archive/claude_code_ts_snapshot/ as an optional local archive, and src/reference_data/ as the mirrored data source for commands, tools, and surface coverage.

That changes the question. We are no longer asking only “what did the original source look like?” We are asking:

can the old system be reorganized into a maintainable Python workspace?
can commands, tools, sessions, permissions, and startup order be modeled explicitly?
how much of the original surface is mirrored today?
which parts are already runnable, and which parts are still skeletal?

That is why I rewrote this post. The previous version still revolved around the leaked snapshot itself. This version needs to talk about the new engineering object: the rewrite workspace.

Adding Proxy Support to Antigravity and Claude on macOS: Safely Wrapping Electron Apps Without Patching Them

Wed, 25 Mar 2026 10:00:00 +0800

Before You Start This post documents a pattern that has already been validated in a real macOS environment: do not patch the original application bundle, and do not publish your real proxy endpoint. Instead, place a tiny wrapper app in front of the original Electron application. That wrapper becomes the stable place where proxy settings, launch flags, and Node-side bootstrap logic live.

When people first hit this problem, the instinct is usually to edit /Applications/Claude.app or /Applications/Antigravity.app directly. That can work once, but it is a poor long-term operational choice for three reasons:

You may break code signing behavior and make future launches or permission prompts more fragile.
Auto-updates can overwrite your local modifications at any time.
If you hardcode a real proxy endpoint into the app bundle, screenshots, scripts, or a public post, you can leak private infrastructure details that never needed to be exposed.

The approach that proved much more stable was:

Leave the original Claude.app and Antigravity.app untouched.
Create Claude (Proxy).app and Antigravity (Proxy).app under ~/Applications.
Let each wrapper app do only three things: load a private proxy.env, export upper/lower-case proxy variables, and launch the original Electron binary with --proxy-server.
If the target app also uses Node/undici fetch, inject a very small NODE_OPTIONS=--require=... bootstrap so Node-side requests follow the same proxy path.

All proxy endpoints in this article are intentionally redacted and replaced with placeholders such as:

http://127.0.0.1:PORT

Replace that value with your own local proxy entrypoint. Do not publish real proxy hosts, internal IP addresses, usernames, passwords, tokens, or internal domains in a public article, repository, or screenshot.

Upgrading OpenClaw to 2026.3.23-2: A Real Compatibility Upgrade Playbook

Tue, 24 Mar 2026 21:20:00 +0800

This post documents a real OpenClaw upgrade, not a laboratory demo. The goal was not simply to change a version string. The real goal was to move a small multi-node environment from 2026.3.8 / 2026.3.13 to 2026.3.23-2 while keeping message channels, external plugins, service startup behavior, and rollback paths under control.

In practice, the most difficult part was not the OpenClaw core package. The hardest part was everything around it: plugin SDK compatibility, JIT cache reuse, mixed installation layouts, restricted outbound access on an edge node, and differences in bind mode that changed what health probes actually meant. If you do not identify those variables first, an upgrade can easily look successful while one or more production channels are already broken.

Resize the disk of an Ubuntu VM in PVE — the complete workflow from Web UI to guest OS

Mon, 23 Mar 2026 10:30:00 +0800

Preface When you manage a virtualized environment with Proxmox VE, running out of disk space is only a matter of time. Maybe your Ubuntu VM keeps pulling more Docker images, or maybe database logs fill up the root partition. In short, disk expansion is a must-have skill for PVE operations. This article walks through the entire process, from resizing the virtual disk in the PVE Web UI to expanding LVM inside the Ubuntu guest, step by step.

1 Why do we need to resize?

PVE usually allocates a fixed-size virtual disk when a VM is created, for example 32 GB. As the workload grows, that space may no longer be enough. Fortunately, PVE supports online disk expansion, and Ubuntu’s default LVM setup also supports dynamic logical volume expansion. Together, they make the process very convenient.

One Month with OpenClaw on MiniMax: Stable, Fast Enough, and Valuable Because It Lasts

Thu, 19 Mar 2026 10:30:00 +0800

Over the past month, I have kept MiniMax as the primary model behind OpenClaw and used it across a full set of automation tasks: routine inspections, connectivity troubleshooting, health checks, security hardening, scheduled-task cleanup, and even blog writing support. Looking back, the biggest gain was not “how much work AI can replace,” but a more practical conclusion: for a system like OpenClaw that needs to run continuously, cooperate with tools, and handle a large amount of Chinese context, the most important thing is not raw benchmark strength. It is the balance between stability, response speed, integration cost, and long-term maintainability.

A Very Practical Trick: Export Yuque Documents to Markdown Without a Membership

Fri, 06 Mar 2026 16:56:43 +0800

Many people use Yuque for technical notes, product documentation, or reading notes. But when it is time to move that content into a blog system such as Hugo, Hexo, or Jekyll, or sync it into a Git repository, the most annoying step is usually getting clean Markdown. If you have run into that problem, here is a small trick I have used for a long time: no paid membership, no plugin, just append a URL suffix and you get the full Markdown body directly.

OpenAI GPT-5.4 Explained: Positioning, Capabilities, Cost, and Practical Adoption (As of 2026-03-06)

Fri, 06 Mar 2026 08:20:00 +0800

On March 5, 2026, OpenAI officially released GPT-5.4. The first question many people asked was simple: is this just another small point release, or is it a real shift in how much productive work the model can finish?

If you only look at the version number, 5.4 looks like the next iteration after 5.2 and 5.3. But once you line up the official launch notes, model docs, API capability matrix, and the ChatGPT-side product updates, the core value of GPT-5.4 is not “how many more parameters it has.” The real change is that it pulls three lines of capability into a much more usable center point:

Reasoning
Coding and engineering execution
Tool ecosystem coordination, including computer use

The past and present life of SSH key algorithm Ed25519 and RSA, and how to use it today

Mon, 02 Mar 2026 09:00:00 +0800

Many people’s first contact with SSH starts with a line of commands: There is nothing wrong with this command, but there is an often overlooked issue behind it: Are we talking about “RSA key type” or ssh-rsa “signature algorithm”? These two concepts are used interchangeably in many old tutorials, leading many people to think that they are “still using old and unsafe solutions” and at the same time don’t know how to migrate, and even repeatedly step into pitfalls between new systems and old devices.

Gitalk Broken After Migration from Gridea to Hugo: Complete Troubleshooting and Fix Log

Sun, 01 Mar 2026 09:30:00 +0800

Background

After migrating the blog entirely from Gridea to Hugo, pages load normally, but the comment section Gitalk appears to be malfunctioning:

No obvious errors are reported on the page, but the comment section doesn’t load or display historical comments.
Historical articles are not associated with their original issues.

This article documents a complete troubleshooting and fix process for future reference when migrating similar sites.

How to Completely Migrate Gridea to Hugo (Including Pitfalls and Fixes)

Sat, 28 Feb 2026 21:00:00 +0800

I recently migrated my blog from Gridea to Hugo. It might seem like a simple “static blog framework switch”, but there are quite a few pitfalls. This post documents the entire process in full, especially those issues you only discover after migration.

[2025-08-21 Emergency] Microsoft KB5063878 Patch May Cause Failures in Solid-State Drives (SSDs) and Hard Disk Drives (HDDs) Under Specific Circumstances

Thu, 21 Aug 2025 16:40:49 +0800

Microsoft KB5063878 Patch May Cause Failures in Solid-State Drives (SSDs) and Hard Disk Drives (HDDs) Under Specific Circumstances

Operating System: Microsoft Windows 11 There are already many news reports on the internet about the Microsoft KB5063878 patch potentially causing failures in solid-state drives (SSDs) and hard disk drives (HDDs) under specific circumstances. For detailed information, please refer to the news links at the bottom; we won’t elaborate further here. The key question is: how do we solve this problem if we encounter it?

ProxmoxVE Upgrade from 8 to 9 How to upgrade to PVE9

Wed, 06 Aug 2025 13:28:55 +0800

参考文档：https://pve.proxmox.com/wiki/Upgrade_from_8_to_9 Preparation before upgrading pve8to9 apt update apt dist-upgrade pveversion #reboot 建议更新完毕后重启1次 Operation step one (back up existing files) cp /etc/apt/sources.list /etc/apt/sources.list_202508_bak cp /etc/apt/sources.list.d/pve-install-repo.list /etc/apt/sources.list.d/pve-install-repo.list_202508_bak Operation step two (start upgrading) sed -i 's/bookworm/trixie/g' /etc/apt/sources.list sed -i 's/bookworm/trixie/g' /etc/apt/sources.list.d/pve-install-repo.list apt update apt dist-upgrade Operation step three (remove unsubscribed prompts) sed -i_orig "s/data.status === 'Active'/true/g" /usr/share/pve-manager/js/pvemanagerlib.js sed -i_orig "s/if (res === null || res === undefined || \!res || res/if(/g" /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js sed -i_orig "s/.

PVE disk inspection connected to UptimeKuma - the 404 pitfall and the final script

Wed, 14 May 2025 22:16:48 +0800

Read first The previous article showed how to push the PVE host’s LVM-Thin usage to UptimeKuma. After following the instructions, some readers got a 404 when the script used curl. This article explains the cause, fixes the script, and provides an optional upgrade path. Follow along from scratch and you should succeed on the first try. 1 Phenomenon: curl ... 404 curl -fsS --retry 3 \ "${PUSH_URL}?status=up&msg=OK" \ -H 'Content-Type: application/json' \ --data-raw "$result" # ↳ curl: (22) The requested URL returned error: 404 The same URL works in a browser or with curl GET:

PVE host disk space monitoring - from pitfalls to UptimeKuma

Wed, 14 May 2025 22:11:33 +0800

Target Reader This article is written for readers who have just started using Proxmox VE (referred to as PVE) and want to copy the steps and get it running. The article aims to: explain why the problem happens provide the full command at each step give troubleshooting ideas when something goes wrong 0 Background - What went wrong? The official PVE installation wizard defaults to putting the VM disk into the LVM-Thin pool (commonly pve/data)

Use LXC containers to build V2Ray and Caddy services on Alpine Linux to provide IPv6-based SSL WebSocket proxy

Wed, 03 Jul 2024 15:32:41 +0800

Preface In the modern Internet environment, proxy services are becoming more and more important, especially when it is necessary to break through geographical restrictions and improve privacy protection. This article will introduce in detail how to use V2Ray and Caddy to build an SSL WebSocket proxy service provided through IPv6 and domain name on the LXC container of the Alpine Linux 3.19 operating system. Environment preparation Make sure your LXC container is running and has an IPv6 address assigned.

A Python-based way to keep China Telecom Cloud PC awake

Tue, 18 Jun 2024 17:41:35 +0800

Principle: Regularly connect to China Telecom Cloud Desktop (interval must be less than 1 hour)

Step 1: Obtain Request Data

Open Chrome browser’s Developer Tools:
- In Chrome browser, press F12 or right-click and select Inspect to open Developer Tools.
Visit and log in to China Telecom Cloud Desktop:
- Visit https://pc.ctyun.cn and log in to Cloud PC with your account.
Copy the curl command for the connect request:
- In Developer Tools, select the Network tab, find and click on the request named connect.
- Right-click on this request and select Copy as cURL (cmd).
Obtain authData from localStorage:
- In Developer Tools, select the Application tab.
- In the left sidebar, find Local Storage and select https://pc.ctyun.cn.
- Find the authData key and copy its corresponding value.

An Effective Method to Quickly Set Up Fail2ban in Proxmox VE to Prevent Multiple Failed Login Attempts

Tue, 18 Jun 2024 15:33:01 +0800

This briefly introduces how to set up Fail2ban in Proxmox VE to temporarily block IP addresses with multiple failed login attempts.

Install Fail2ban

Execute the following commands as root on the Proxmox VE host:

apt update
apt install fail2ban

Configure Basic Settings

It is recommended to use the /etc/fail2ban/jail.local file, whose settings take precedence over jail.conf. Use the following command to copy the template:

cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local

IPTV source collection from GitHub - updated on 2024/6/10

Mon, 10 Jun 2024 16:49:07 +0800

IPTV source collection

Source lists:

https://epg.pw/test_channel_page.html
iptv.org
YueChan/Live
YanG-1989/m3u
fanmingming/live
qwerttvv/Beijing-IPTV
joevess/IPTV
~~Meroser/IPTV~~ The project content has been removed by Author

EPG sources:

For more source lists, see https://m3u.ibert.me.

Using Cloudflare to Build gh-proxy for GitHub Acceleration

Mon, 10 Jun 2024 15:26:32 +0800

In previous episodes, I’ve experimented with Qinglong Panel. However, when trying to pull GitHub repositories, you may encounter network issues leading to pull failures. Regular GitHub file downloads are also extremely slow. So I used the free Cloudflare to build gh-proxy for GitHub acceleration.

I. Prerequisites

You need to prepare a Cloudflare account and a domain name (optional) in advance. For free domains, you can refer to the previous article ‘免费申请注册eu.org二级域名’

Using Cloudflare Workers to Solve Docker Image Pull Issues

Mon, 10 Jun 2024 14:16:26 +0800

Due to certain reasons, Docker images cannot be pulled normally in China. The method I wrote last year for accelerating image pulls is also no longer functional. Where there’s a will, there’s a way (not really). So I’ve written a new tutorial to solve the Docker image pull issue using Cloudflare Workers.

This article uses Cloudflare Workers to solve the problem of being unable to pull images. I won’t go into too much detail about Cloudflare here, and Cloudflare Workers is also a free service. If you’re not familiar with it, you can check out previous articles like “cloudflare加快github下载”. If you don’t want to follow this guide, you can reply with “jsdc” in the background to get the public service address I’ve set up.

China Telecom Cloud Computer Configuration and Never Sleep Method

Tue, 04 Jun 2024 12:27:39 +0800

Windows software download: https://download.margrop.net/#/EXE

China Telecom Cloud Computer: https://desk.ctyun.cn/html/download/ Scheduler software: http://www.everauto.net/ China Telecom Cloud Computer default path: C:\Program Files (x86)\CtyunClouddeskUniversal\CtyunClouddeskUniversal.exe BtPanel: https://www.bt.cn/new/product_windows.html BtPanel Legacy Version: http://download.bt.cn/win/update/net/BtSoft-Win.zip frp: https://github.com/fatedier/frp NSSM: http://www.nssm.cc/download Notepad++: https://download.margrop.net/d/oneindex/EXE/npp.8.6.7.Installer.x64.exe RustDesk: https://download.margrop.net/d/oneindex/EXE/rustdesk-1.2.3-2-x86_64.exe

N5105 Proxmox VE 8.2 version, solving the problem of frequent virtual machine crashes

Sat, 04 May 2024 07:55:22 +0800

1. Problem background Recently, major PT websites were developed and registered on May Day, so I registered several websites, and then downloaded and uploaded them like crazy in order to complete novice tasks. As soft routers, N5105 and iKuai, when under high load for a long time, the virtual machine crashed randomly, and the CPU remained at 100% for a long time. The virtual machine could only be killed and restarted, which greatly affected the completion of novice tasks.

IDEA License Server Search Method

Wed, 01 May 2024 13:34:09 +0800

Please search for yourself using the search engines and keywords below

Fofa

header="https://account.jetbrains.com/fls-auth"

Shodan

Location: https://account.jetbrains.com/fls-auth

Censys

services.http.response.headers.location: account.jetbrains.com/fls-auth

[Transfer] How to set up xiaoya’s docker and tvbox configuration

Tue, 30 Apr 2024 21:18:55 +0800

Article source: https://xiaoyaliu.notion.site/xiaoya-docker-69404af849504fa5bcf9f2dd5ecaa75f How to set up xiaoya’s docker To get the latest information about Xiaoya, please follow Xiaoya’s tg channel https://t.me/xiaoyaliu If you have any difficulties in using it, you can come here to find me or others for help https://t.me/PlutoPlayer Table of contents What do you need to install xiaoya’s docker The soft routing box is similar to n1, etc., with openwrt environment (can be configured with one click on the terminal) NAS and other devices have docker plug-ins (it is impossible or difficult to log in to the terminal and requires graphical self-configuration) Cloud servers are also commonly known as vps (can be configured with one click on the terminal) How to install Install under openwrt or vps, call up the terminal command line The left side of the openwrt control panel (find “TTY Terminal” under “System” or “Services”)

Ubuntu 24.04 LTS Noble Numbat Upgrade Guide

Tue, 30 Apr 2024 19:55:19 +0800

Thanks to ChatGPT for translating from the official website, 原文入口 IMPORTANT: Ubuntu 22.04 LTS目前无法直接升级到 Ubuntu 24.04 LTS，请等到2024年8月再进行升级操作 Ubuntu 24.04 LTS - “Noble Numbat” Upgrade Guide Ubuntu 24.04 LTS is the version of the Ubuntu operating system released in April 2024. The development code name for this version is “Noble Numbat”. Before you begin You can upgrade directly to Ubuntu 24.04 LTS (“Noble Numbat”) from Ubuntu 22.04 LTS (“Jammy Jellyfish”) or Ubuntu 23.

Installing minikube-dashboard + Auto-start and External Network Access

Tue, 30 Apr 2024 19:42:36 +0800

1. Installing minikube-dashboard

Refer to the official documentation: https://minikube.sigs.k8s.io/docs/start/ Execute the command minikube dashboard

2. Installing the Minikube Background Service

If you want minikube to start only once under systemctl management and exit automatically after successful startup, you can modify the service file for systemctl to prevent automatic restart of minikube. This can be achieved by setting Restart=no, and ensuring the service is started manually only when needed.

Below is a basic systemctl service file example suitable for this scenario:

Installing a Minimal k8s Environment with Minikube

Tue, 30 Apr 2024 19:37:29 +0800

Deploying Minikube on Proxmox VE (a Debian-based virtualization environment) requires consideration of Proxmox’s characteristics, as it is essentially a virtual machine and container management platform. You will need to create a virtual machine (VM) on Proxmox VE and then install Minikube within that VM. Below are the detailed steps:

Upgrade ProxmoxVE 7.4 to 8.0, detailed steps

Sat, 08 Jul 2023 10:25:13 +0800

Step 1: Read the official documentation in detail Notice: If you use ssh connection remotely, it is recommended to use the screen command first to avoid various problems caused by network instability and operation interruption. Step 2: Upgrade to the latest version 7.4 The latest version is 7.4.15 apt update -y && apt dist-upgrade -y sed -i_orig "s/data.status === 'Active'/true/g" /usr/share/pve-manager/js/pvemanagerlib.js sed -i_orig "s/if (res === null || res === undefined || \!

TVBOX long-term maintenance apk download address and interface

Mon, 03 Jul 2023 21:11:04 +0800

#TVBOX download address Download:https://www.lanzoul.com/iANk409bj7fc Password: 5q1m The following interfaces are from Fat Cat Collection (Fat Cat official website) #fatcat The rice is too hard #云星 #artifact #lenice qiaoer #junge #小雅

TV Box TVBox takagen version 99, v20230307_2315 (with the latest interface address)

Mon, 03 Jul 2023 21:09:41 +0800

Open source, free, self-configured interface, used for both live broadcast and on-demand, Android devices. The takagen99 version has a new UI appearance and richer functions. It supports mounting WebDav and local disks, player display resolution, network speed, time screen display and other functions. 2. TVbox usage tutorial Click “Settings” on the homepage, select “Configure Address”, enter the “Data Source Address”, enable storage permissions, select the data source after “OK”, and then you can use it.

Using FFmpeg to Batch Remove Opening and Ending Sections from Audio and Video Files

Sun, 02 Apr 2023 11:51:41 +0800

Steps

1. Download FFmpeg

Steps omitted

2. Edit the Batch Script

@echo off & setlocal enabledelayedexpansion

rem ===================需手动设置===================
rem 设定片头片尾长度，格式为 HH:mm:ss.fff
set "s1=00:01:07.0"
set "s2=00:01:30.0"
rem ================================================

for /f "tokens=1-4delims=:." %%a in ("%s2%") do (
    set /a "t2=(1%%a %% 100 *3600 + 1%%b %% 100 * 60 + 1%%c %% 100) * 1000 + 1%%d %% 1000"
)

md myvideo 2>nul
for %%i in (*.avi *.mkv *.mp4 *.flv) do (
    for /f "tokens=2-5delims=:., " %%a in ('ffmpeg -i "%%i" 2^>^&1 ^| find "Duration:"') do (
        set /a "t=(1%%a%%100*3600+1%%b%%100*60+1%%c%%100)*1000+1%%d0%%1000,t-=t2,ms=t%%1000,t/=1000"
        set /a h=t/3600,m=t%%3600/60,s=t%%60,h+=100,m+=100,s+=100,ms+=1000
        set "t=!h:~1!:!m:~1!:!s:~1!.!ms:~1!"
        ffmpeg -ss !s1! -to !t! -accurate_seek -i "%%i"  -c copy -avoid_negative_ts 1 "myvideo\%%i" -y
    )
)
pause

GitLab CI YML Configuration Guide (Official Documentation Translation)

Sun, 02 Apr 2023 09:02:29 +0800

Important Built-in Variables

CI_COMMIT_REF_NAME: The branch or tag name for which project is built. CI_CONFIG_PATH: The path to the CI/CD configuration file. Defaults to .gitlab-ci.yml. Read-only inside a running pipeline. CI_PROJECT_PATH: The project namespace with the project name included. CI_BUILDS_DIR: The top-level directory where builds are executed. CI_PROJECT_DIR: The full path the repository is cloned to, and where the job runs from. If the GitLab Runner builds_dir parameter is set, this variable is set relative to the value of builds_dir. For more information, see the Advanced GitLab Runner configuration.

Logback custom adds logstash field

Sun, 02 Apr 2023 08:57:41 +0800

steps If you want to add custom fields to the output JSON, you need to configure the arguments parameter. <encoder class="net.logstash.logback.encoder.LoggingEventCompositeJsonEncoder"> <providers> <pattern> <pattern> { "timestamp": "%date{\"yyyy-MM-dd HH:mm:ss\"}", "log_level": "%level", "class_name": "%class", "thread": "%thread", "message": "%message", "stack_trace": "%exception{5}" } </pattern> </pattern> <arguments/> </providers> </encoder> Markers provided by Markers import static net.logstash.logback.marker.Markers.* /* * Add "name":"value" to the JSON output. */ logger.info(append("name", "value"), "log message"); /* * Add "name1":"value1","name2":"value2" to the JSON output by using multiple markers.

MySQL Online DDL: Add Indexes Without Locking

Sun, 02 Apr 2023 08:51:17 +0800

Steps

You can only use ALTER TABLE, not CREATE INDEX

ALTER TABLE tbl_name ADD INDEX (column), ALGORITHM=INPLACE, LOCK=NONE;

Recommended GitHub Open Source Projects

Sat, 25 Mar 2023 18:29:55 +0800

BBDown

A command-line downloader for Bilibili. https://github.com/nilaoda/BBDown

Improved iOS calendar for Chinese public holidays and make-up workdays

Chinese holiday calendar. https://github.com/lanceliao/china-holiday-calender

CPU single-core benchmark ranking

This chart collects benchmark data for common CPU models, including Intel Core desktop processors, Intel Core mobile processors, and AMD Ryzen processors. https://github.com/mediv01/CPU-Single-Core-Benchmark

Fast Homebrew installer for users in mainland China

https://github.com/ineo6/homebrew-install

Use v2ray to configure intranet access based on a public IP

Sat, 25 Mar 2023 15:44:58 +0800

Prerequisites

A public IP address

Requirements

Secure intranet access
Encrypted traffic
Support TCP/UDP

Online expansion of Ubuntu/CentOS disk root directory & modification of partition inode number

Sat, 25 Mar 2023 13:42:44 +0800

When Ubuntu is used as a server system, the system disk may not have enough space. If apt apt is used, the root directory will be full. Granted, adding a disk/partition and mounting it is a solution, but it doesn’t solve all problems (like apt). At the same time, some servers running on cloud platforms do not have good means of operating disks offline. At this time, online expansion is extremely necessary.

Scheduled Reboot for a Specific VM on PVE

Sun, 12 Mar 2023 20:59:38 +0800

Background

It was observed that the HomeAssistant VM’s memory usage kept increasing over time and eventually hit OOM. This happened no matter how many versions were upgraded, so it is suspected that HomeAssistant has a memory leak.

Solution

At the VM layer, reboot the VM periodically (once a day)
Log in to the server where PVE is running
Run crontab -e and enter the following:

PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin

0 12 * * * qm stop 2007 ; sleep 10 ; qm start 2007

Note: 2007 in the command is the vmid, the globally unique ID of the VM

Persistent iptables Rules

Sun, 12 Mar 2023 20:43:10 +0800

Install iptables on Debian if Needed

apt-get install iptables

Clear Existing Rules

iptables -F;iptables -X;iptables -Z

Open Ports

iptables -A INPUT -i lo -j ACCEPT;iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

WOW TrinityCore installation tutorial (based on 10.0.2.47657)

Sun, 12 Mar 2023 20:28:58 +0800

WOW TrinityCore installation tutorial Related references Environment setup: Ubuntu 20.04 Switch apt to the Alibaba Cloud mirror: https://developer.aliyun.com/mirror/ubuntu?spm=a2c6h.13651102.0.0.3e221b11KR1TWB Change the root password: Run sudo passwd and enter the current user’s password when prompted. Press Enter, then type and confirm the new password. That password becomes the new root password. After that, run su root and log in with the new root password. Set up passwordless SSH login: cd ~ mkdir .

Baidu Netdisk Resource Collection for Talking Pens

Sun, 12 Mar 2023 20:26:01 +0800

All Oxford resources

Link: https://pan.baidu.com/s/1LwytSBYw4ymiTeOchDw0aA Extract code: 4dm4

Fixing CORS Issues When Upgrading from Spring 2.3.x to a Newer Version

Sun, 12 Mar 2023 20:20:01 +0800

Exception Message:

When allowCredentials is true, allowedOrigins cannot contain the special value "*" since that cannot be set on the "Access-Control-Allow-Origin" response header. To allow credentials to a set of origins, list them explicitly or consider using "allowedOriginPatterns" instead.

Solution:

CORS configuration error, simply replace .allowedOrigins with .allowedOriginPatterns.

Fixing SpringFox 3.0.0 Incompatibility with SpringBoot 2.6.4

Sun, 12 Mar 2023 17:56:57 +0800

Error Message:

Failed to start bean 'documentationPluginsBootstrapper'; nested exception is java.lang.NullPointerException

Root Cause Analysis:

SpringFox 3.0.0 is not compatible with SpringBoot 2.6.4

Solution:

Reference Links https://stackoverflow.com/questions/40241843/failed-to-start-bean-documentationpluginsbootstrapper-in-spring-data-rest https://github.com/springfox/springfox/issues/3462#issuecomment-1010721223

Auto-Add N2N Route Table on CentOS 7 Boot

Sun, 06 Feb 2022 19:50:38 +0800

1. Edit the `systemctl` Auto-Start File

vim /etc/systemd/system/n2route.service

[Transfer] The use of Mybatis-Plus general enumeration types

Wed, 02 Feb 2022 20:20:58 +0800

Some fields, such as gender, marital status, and other iconic fields, are often stored in the database in the form of numbers, 0 or 1. The advantage of this is that it has high access efficiency and saves space. However, the front-end cannot be displayed directly during display. A judgment is required, but it is inappropriate to place the judgment logic on the front-end, so the back-end should convert the value in advance and return it to the front-end.

Solutions for External 2K Display and Font Blurring/Aliasing on macOS Big Sur in 2021

Tue, 25 Jan 2022 21:45:33 +0800

1. Disable System SIP

https://zhuanlan.zhihu.com/p/343151907

Before executing the command, you need to disable SIP (System Integrity Protection). The specific steps are: Enter Recovery Mode (hold Command+R during startup), open the system terminal in the upper right corner, and enter the csrutil disable (disable) command. After enabling HiDPI, you can use the csrutil enable (enable) command again to re-enable it. For more details, refer to »传送门

One-click Installation of swagger2markup via Brew and Generating Markdown Documentation

Tue, 25 Jan 2022 21:43:39 +0800

1. One-click Installation

brew install swagger2markup-cli

OpenCore's config.plist file, how to print logs?

Tue, 14 Dec 2021 20:37:35 +0800

Preparation start Use PlistEdit Pro to open the config.plist file Expand NVRAM -> ADD -> 7C436110-AB2A-4BBB-A880-FE41995C9F82 Modify the boot-args parameter and add -v at the end More parameter reference

How to Edit GRUB2 Boot Parameters During Linux Startup

Wed, 08 Dec 2021 09:29:58 +0800

To edit Grub2 during the boot process try the following:

To edit GRUB2 during boot, you can try the following steps

Immediately after the BIOS splash screen during boot, press and hold the SHIFT button. This will display you grub containing a list of kernels and recovery options After the BIOS splash screen appears during the boot process, immediately press and hold the SHIFT key. This will display the grub containing a list of kernels and recovery options.

Chrome Extension Download Links for China

Sat, 04 Dec 2021 14:08:39 +0800

Due to some reasons, the official Chrome browser extension download center is also inaccessible. Fortunately, there are mirror service websites that can download extensions on your behalf by simply entering the name or URL, such as:

https://crxextractor.com https://www.crx4chrome.com https://yurl.sinaapp.com/crx.php https://yurl.sinaapp.com/crx2.php

Use a Separate settings.xml for Maven with Aliyun Mirrors in China

Sat, 04 Dec 2021 14:06:23 +0800

<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0
                          https://maven.apache.org/xsd/settings-1.0.0.xsd">

      <mirrors>
        <mirror>  
            <id>alimaven</id>  
            <name>aliyun maven</name>  
            <url>https://maven.aliyun.com/repository/public</url>
            <mirrorOf>central</mirrorOf>          
        </mirror>  
      </mirrors>
</settings>

Shanghai Bell E-140W-P, optical modem configuration

Sat, 04 Dec 2021 13:46:58 +0800

Telnet telnet command: telnet 192.168.1.1 Telnet account password: telnetadmin / telnetadmin #Default password telnet password Hardware configuration BCM6838 chip supports the following interfaces and functions: 4 built-in Gigabit PHYs Built-in GPON MAC, EPON MAC, MIPS 32-bit processor, 400M dual core (64K×2 instruction cache, 32K data cache) Built-in voip processor 2 channels support 802.11n WLAN PCIE interface, which can be connected to PCIE AP or USB AP 2 USB 2.0 interfaces, 1 can be used as HOST, and 1 can be configured as HOST or DEVICE.

Gridea GitHub Sync Failure - Final Solution

Sat, 04 Dec 2021 11:36:32 +0800

Preface

Enough chitchat. The core idea to solve this problem is to use a proxy. If you don’t have a circumvention tool, there’s no point in reading further. You might want to try coding.

Important Notice

Gridea official’s pinned issue version 2021.10.23更新，关于检测远程链接成功，但同步错误的案例收集与修复测试包 has a serious BUG in the sync feature and cannot sync to Github properly. The following is tested with the official 0.9.2 version of Gridea.

OpenWRT / LEDE set up cross-segment access method

Sat, 04 Dec 2021 11:17:47 +0800

1. Static IPv4 routing, add routing table Visit the Network -> Static Routes page. Need to fill in Target network, IPv4 subnet mask, and IPv4 gateway. 2. Firewall, add firewall permission rules Visit the Network -> Firewall -> Communication Rules page. Need to fill in Name, Match rule, and Action. Name Just fill in the name as you like, for example ALLOW-LAN Matching rules Forward IPv4 from lan to lan, IP {target network}.

Compiling N2N Components SuperNode and Edge on Mac

Tue, 09 Nov 2021 20:21:05 +0800

Reference: https://www.jianshu.com/p/5021b70c3ff9

Installing Required Software with Brew

brew install openssl
brew tap homebrew/cask
brew install --cask tuntap

Mac compiles N2N components SuperNode and Edge

Tue, 09 Nov 2021 20:21:05 +0800

Reference: https://www.jianshu.com/p/5021b70c3ff9 Install required tools with Homebrew Tip: If the command line reports that tuntap failed to install, open Security & Privacy in System Settings and click Allow. brew install openssl brew tap homebrew/cask brew install --cask tuntap Clone and build from GitHub cd ~ git clone https://github.com/ntop/n2n cd n2n git checkout 2.8-stable mkdir build cd build cmake .. make Copy Edge to /usr/local/bin/edge and make it executable cp edge /usr/local/bin/ chmod +x /usr/local/bin/edge Verify that it starts correctly .

MacOS custom login and logout scripts

Thu, 04 Nov 2021 10:44:50 +0800

Login and Logout Scripts 重要提示: There are many reasons to avoid using login and logout scripts: Login and logout scripts are a deprecated technique. In most cases, you should use a launchd job instead, as described in Creating a Launch Daemon and Agent. Login and logout scripts run as root, which is a security risk. Only one of each script can be installed at a time. They are intended for system administrators; application developers should not use them in released software.

How to Connect to the Host Machine's MySQL Server from Inside a Docker Container

Thu, 30 Sep 2021 13:08:50 +0800

The blogger recently encountered a situation where they copied a database from a server onto the host machine’s MySQL server, wanting to use the local database to test the correctness of their code. However, the project programs are all deployed with a single click via Docker, so it’s necessary to access the local database from within the Docker container. During the exploration, they encountered problems and found solutions.

On the Importance of Mac Computers and TimeMachine

Tue, 14 Sep 2021 16:55:10 +0800

Today is September 14, 2021. As of today, I have been using MacOS as my main system for about 2 years. I have to say that I am deeply in love with MacOS now. If I need to buy my next laptop, I will definitely buy the MacBookPro high-end configuration. #Main differences between MacOS and Windows 1. Shortcut keys Windows The well-known Ctrl + C and Ctrl + V below MacOS becomes Command(Win key) + C and Command(Win key) + V

Hackintosh core graphics or non-core graphics processor, how to modify the OpenCore configuration file

Mon, 13 Sep 2021 16:48:17 +0800

Note: The following is only for models with similar configurations, that is, 9th generation Intel CPUs. Please avoid other models. IMPORTANT NOTE The configuration in OpenCorebinary is in reverse order, such as the following platform-id. If you need to modify other models, you need to fill in platform-id in reverse order. Here is Coffee Lake帧缓冲区补丁及UHD630 Coffee Lake ig-platform-id数据整理 compiled by 黑果小兵 Here is 黑苹果必备：Intel核显platform ID整理及smbios速查表 compiled by 黑果小兵 General instructions: How to modify the three codes After downloading the entire package, if you have used the iMac19,1 model before in Clover, you can directly use the previous three codes, or use Clover Configurator (other tools are also available) to select the iMac19,1 model to generate a new three codes + ROM, use ProperTree to open the /EFI/OC/config.

Analysis of sports events in the Provincial Games - Classification of sports events

Sat, 11 Sep 2021 15:30:06 +0800

0. General requirements Provide RESTful interface and data files Specific data of competition events (historical records, historical results), Competition venue information Participating delegation information, athlete numbers, order list Results announcement, order sheet (finals), medal announcement, points announcement, record-breaking documents 1. Racing category In racing events, the order in which athletes pass the finish line is used as the main criterion to determine the ranking of athletes. The main racing events include: track and field (track events), swimming, cycling, rowing, canoeing, speed skating, short track speed skating, etc.

Overview of home network architecture based on PVE + soft routing + NAS (for technical personnel)

Fri, 03 Sep 2021 09:50:49 +0800

Home Network Overview The home network will not separate the “business plane”, “management plane” and “data plane” like a regular virtualization platform. What home networks need is convenience, so the three planes mentioned above need to be integrated together to share the network in order to facilitate management. The security of the home network is also very important. No one wants the network door at home to be open to the outside world all the time.

Use of Telecom Optical Cat HGU421N_V3

Thu, 02 Sep 2021 10:59:03 +0800

Note: Ethernet port 4: 1000Mb/s, others 10/100Mb/s Password of TTY might NOT be 以用户名：admin，密码：v2mprt 登录 Any powerful Route compatible with ChinaTelecom EPON and has 2 1000Mb/s ports at least? e8-C Terminal User Manual: Product technical specifications: Huaqin HGU421N v3.0 broadband modem crack: pplc #1 Old 2015-01-02, 17:39:43 Default new version of Huaqin HGU421N V3 optical cat crack Recently, I found some old version of HGU421N V3 cracking information on the Internet, and based on the reference, I cracked the new version of HGU421N V3, and it also has IPTV on it.

Enable Version Control for Node-RED Flows

Sat, 28 Aug 2021 14:40:50 +0800

Problem Description

I used to back up Node-RED flows by copying ~/.node-red/flows_xxx.json and keeping multiple versions. That was annoying, and even comparing unformatted JSON with tools like Beyond Compare was a mess.

Solution: Pretty-Print JSON

I found that by changing the setting in ~/.node-red/settings.js, the flows_xxx.json file can be saved in a pretty-printed format.

Error deleting remote branch in git: remote ref does not exist

Fri, 27 Aug 2021 10:48:48 +0800

Problem Description

When trying to delete a remote branch in the view, it displays: remote ref does not exist

Solution

The solution is to first clear the local cache of the remote branch: git fetch -p origin As you can see, the remote branch we were trying to delete has actually already been deleted.

Analysis of sports events in the Provincial Games - athletes and representative teams athletes & nocs

Tue, 24 Aug 2021 13:27:05 +0800

Analysis of sports events in the Provincial Games - Schedule and results

Tue, 24 Aug 2021 13:27:05 +0800

Analysis of sports events in the Provincial Games - sports events

Tue, 24 Aug 2021 13:27:05 +0800

Fix GitLab Push Failures After Repository Data Recovery: error: unpack failed: unable to create temporary object directory

Tue, 24 Aug 2021 10:05:20 +0800

Problem Description

After the GitLab server just finished a data recovery,

all old repositories failed to accept git push.

The error message was error: unpack failed: unable to create temporary object directory.

However, newly created repositories could still accept git push normally.

Synology Docker Gitlab suite update

Mon, 23 Aug 2021 17:30:14 +0800

warn Environment settings will be cleared during upgrade Synology has a bit of this. . . Basically just put Add it back Then change the port number from 80 to 443 Install certificate The default path where the gitlab application is configured to look for SSL certificates is /home/git/data/certs, but this can be changed using the SSL_KEY_PATH, SSL_CERTIFICATE_PATH, and SSL_DHPARAM_PATH configuration options. GITLAB_HTTPS=true SSL_SELF_SIGNED=true How to enable HTTPS support HTTPS support can be enabled by setting the GITLAB_HTTPS option to true.

Solve the problem of PostgreSQL 10 to 11, Permissions should be u=rwx (0700)

Mon, 23 Aug 2021 16:45:41 +0800

#Problem description Today I plan to upgrade Gitlab from version 11 to version 12. I have tried the default steps many times without success. I was really unwilling to give it up. After searching for a long time, I finally found an error in the PostgreSQL log. The key two lines of log are as follows: Search questions Use Google to search “data directory has group or world access” The first result is the solution, Postgres exits with “Permissions should be u=rwx (0700)” #45

On the Importance of Backups and RAID 1

Mon, 23 Aug 2021 10:47:13 +0800

The first hard drive is damaged The first time I lost data due to a damaged hard drive was around 2010. At that time, the price of BTC was about 7-8 dollars, which is equivalent to about 40-50 RMB. At that time, many websites were giving away small amounts of BTC for free, and I also received 0.02 BTC at that time. At that time, the laptop hard drive was suddenly damaged, and all the data, course materials, homework, and BTC were lost.

How to Upgrade from Proxmox VE 6.4 to Proxmox VE 7.0

Mon, 16 Aug 2021 14:52:58 +0800

I haven’t followed the official Proxmox VE site for a while.

Until a few days ago, when I recommended PVE to a colleague, I suddenly realized there was another major version upgrade.

As an upgrade obsessive, of course I chose to upgrade to the latest version immediately.

I had already gone through the process of upgrading from PVE 5.x to 6.0 long ago, and now it was time for PVE 6.4 to 7.0.

In short, just follow the official tutorial honestly.

Official tutorials for each major PVE upgrade:

Upgrade from Proxmox VE 6.x to 7.0

Upgrade from Proxmox VE 5.x to 6.0

Upgrade from Proxmox VE 4.x to 5.0

Upgrade from Proxmox VE 3.x to 4.0

Life Events - The Milestone

Mon, 16 Aug 2021 14:40:52 +0800

The day before yesterday, we finally reached a time point. According to the regulations, we took the number, queued up, paid the money, and received the certificate. I finally got the book. Although I have been complaining about it, I have nothing to regret.

[Transfer] Android implements the hiding and display function of the system status bar

Fri, 09 Jul 2021 20:41:13 +0800

#Problem description Especially for video apps, it is necessary to hide the system status bar and display it in full screen after switching to horizontal screen, so that you can watch videos with a larger screen. when switching back to After the screen is turned vertically, the status bar is displayed again. So how to achieve it?

There are many methods circulating on the Internet

for example

Modify theme in the AndroidManifest.xml file to
Execute the following code before the setContentView method:
Through the setSystemUiVisibility method of View
Use the following code to hide and display the status bar: In my project, I want to achieve the following requirements: in the current Activity, after switching to landscape screen, Activity cannot be destroyed and re-initialized, and the system status bar can be hidden and displayed in full screen; after switching back to vertical screen, the status bar can be displayed again. Also, I don’t need to hide the title bar.

Therefore, neither method 1 nor 2 is suitable for me. Method 3, which I have used, calls the setSystemUiVisibility method. The parameters passed in by this method can be:

View.SYSTEM_UI_FLAG_VISIBLE: Display the status bar, and the Activity is not displayed in full screen (returning to the normal state with state).
View.INVISIBLE: Hide the status bar and the Activity will stretch to full screen.
View.SYSTEM_UI_FLAG_FULLSCREEN: Activity is displayed in full screen, and the status bar is hidden and covered.
View.SYSTEM_UI_FLAG_LAYOUT_FULLSCREEN: The Activity is displayed in full screen, but the status bar will not be hidden and covered. The status bar is still visible, and the top layout part of the Activity will be covered by the status.
View.SYSTEM_UI_FLAG_LAYOUT_HIDE_NAVIGATION: The effect is the same as View.SYSTEM_UI_FLAG_LAYOUT_FULLSCREEN
View.SYSTEM_UI_LAYOUT_FLAGS: The effect is the same as View.SYSTEM_UI_FLAG_LAYOUT_FULLSCREEN
View.SYSTEM_UI_FLAG_HIDE_NAVIGATION: Hide virtual buttons (navigation bar). Some mobile phones use virtual buttons instead of physical buttons.
View.SYSTEM_UI_FLAG_LOW_PROFILE: The status bar display is in a low-power display state (low profile mode), and some icons on the status bar will be hidden.

What I need to pass in here is View.SYSTEM_UI_FLAG_FULLSCREEN, but when I pass in this parameter, the result is: just the status bar disappears, but the position is still there. (Test mobile phones: Huawei Honor 8 system is EMUI 5.0 based on Android 7.0; Samsung Galaxy S6 system is Android 6.0)

Finally, use method 4 to successfully meet the needs.

Summarize

The above is the Android implementation of hiding and displaying the system status bar function introduced by the editor. I hope it will be helpful to you. If you have any questions, please leave me a message and the editor will reply to you in time. I would also like to thank everyone for your support of the ZaLou.Cn website!

android:theme="@android:style/Theme.NoTitleBar.Fullscreen"

requestWindowFeature(Window.FEATURE_NO_TITLE) 
 getWindow().setFlags(WindowManager.LayoutParams.FLAG_FULLSCREEN,WindowManager.LayoutParams.FLAG_FULLSCREEN);

3、通过View的setSystemUiVisibility方法

4、通过如下代码实现状态栏的隐藏和显示：

在我的项目中是要实现如下需求：在当前Activity中，切换到横屏后，不能销毁Activity再重新初始化，并且实现隐藏系统状态栏，全屏显示；当切换回竖屏后，又显示状态栏。另外，我不需要隐藏标题栏。

Issue where pip becomes unusable after pip install --upgrade pip on CentOS 7: ImportError: No module named typing

Wed, 16 Jun 2021 11:13:46 +0800

Problem Description

pip安装某第三方 SDK，提示升级 pip，按提示升级 pip 后报错

pip Upgrade Command that Causes the Error

pip install --upgrade pip

pip Error Message

Traceback (most recent call last):
  File "/usr/bin/pip", line 9, in <module>
    load_entry_point('pip==21.1.2', 'console_scripts', 'pip')()
  File "/usr/lib/python2.7/site-packages/pkg_resources.py", line 378, in load_entry_point
    return get_distribution(dist).load_entry_point(group, name)
  File "/usr/lib/python2.7/site-packages/pkg_resources.py", line 2566, in load_entry_point
    return ep.load()
  File "/usr/lib/python2.7/site-packages/pkg_resources.py", line 2260, in load
    entry = __import__(self.module_name, globals(),globals(), ['__name__'])
  File "/usr/lib/python2.7/site-packages/pip/__init__.py", line 1, in <module>
    from typing import List, Optional
ImportError: No module named typing

The Great Event - The Great Event

Mon, 07 Jun 2021 08:57:06 +0800

There are very few opportunities in life to do big things. I did one yesterday As for the result, we have to wait for time to test it.

Synology Chat download and installation address

Mon, 07 Jun 2021 08:31:39 +0800

Due to well-known reasons, Chat has now disappeared However, the international version of the Synology site can still be downloaded and used normally. Use and cherish DS3617xsInternational Version Download Center Chat Kit download address Chat Android version download address *Chat Apple users must find an overseas iCloud account to install it. The above Chat package and APK have been backed up to the download center of this site

How to Install Homebrew on Mac OS X Lion 10.7.4

Sat, 29 May 2021 17:30:33 +0800

Reference articles:

How to Install Homebrew on Mac OS X Lion 10.7.4 http://ocdman.github.io/2018/10/08/Mac-OS-X-Lion-10-7-4-%E5%A6%82%E4%BD%95%E5%AE%89%E8%A3%85Homebrew/
[macOS] brew installation https://www.jianshu.com/p/1e5e72089a84

Preparation

Manually compile and install OpenSSL 1.1.1k
Manually compile and install the latest curl, and note that compilation requires OpenSSL and the cacert.pem certificate
Download and install the latest git from http://git-scm.com/ yourself

Important Special Steps

mkdir -p /usr/local/opt/curl/bin
mkdir -p /usr/loca/opt/git/bin
ln -s /usr/local/bin/curl /usr/local/opt/curl/bin/curl
ln -s /usr/local/bin/git /usr/local/opt/git/bin/git

mv /usr/bin/curl /usr/bin/curl_bak
cp /usr/local/bin/curl /usr/bin/curl

AppDaemon (HADashboard) Installation Guide

Sat, 29 May 2021 14:22:56 +0800

Installation Prerequisites

HomeAssistant access address and permanent Token
Linux runtime environment
Python3 runtime environment (the following is based on CentOS 7)

yum install python3
pip install -U pip3 setuptools

Vim opens the file with Chinese garbled characters

Sat, 15 May 2021 16:27:00 +0800

Solution Edit the ~/.vimrc file (create it manually if it doesn’t exist) and add the following lines set fileencodings=utf-8,ucs-bom,gb18030,gbk,gb2312,cp936 set termencoding=utf-8 set encoding=utf-8

Fix HAVCS Failing to Start on the Latest Home Assistant: AttributeError: 'ApiConfig' object has no attribute 'base_url'

Wed, 12 May 2021 18:12:02 +0800

Do Not Upgrade HA Too Frequently [Updated May 15, 2021]

I strongly do not recommend upgrading to core-2021.3.1 and later, including core-2021.5.3 From core-2021.3.1 onward there are some strange bugs. The version that is currently stable for the author is still core-2021.2.3

Problem Description

After the author upgraded Home Assistant to the latest version, HAVCS could no longer start normally.

Home Assistant version that can run HAVCS normally: core-2021.2.3 Home Assistant version that cannot run HAVCS: core-2021.5.3

Checking the Home Assistant logs showed this error:

AttributeError: 'ApiConfig' object has no attribute 'base_url'

Home Assistant: Add a Custom IR Remote and Support Tmall Genie and Xiaodu

Wed, 12 May 2021 16:09:09 +0800

Preparation

An online Mi Home universal remote already added to Home Assistant
The IP address and token of the Mi Home universal remote

How do you get the IP address? Open the Mi Home app on your phone, select the device bound to your Xiaomi account, enter it, then tap the ... in the top right -> More settings -> Network information to view the device IP address.

How do you get the token? Reference 1: Use an open-source tool to export Xiaomi Token Reference 2: Retrieving the Access Token

Integrating HomeAssistant with Tmall Genie, 2021 Version

Mon, 10 May 2021 22:19:34 +0800

Avoid Frequent HA Upgrades [Updated May 15, 2021] 强烈不建议升级到 core-2021.3.1 以及之后的版本，包括 core-2021.5.3 从 core-2021.3.1 以后的版本有一些莫名的 bug，目前博主稳定使用的版本还是 core-2021.2.3 Tmall Genie Platform: https://iot.aligenie.com/skill/home Alibaba Life IoT Platform: https://living.aliyun.com/

Essential Chrome Plugins for Developers

Mon, 10 May 2021 09:18:24 +0800

Note: You will need to resolve the issue of being unable to access chrome.google.com on your own.

Enable Automatic Startup for Docker Services and Containers After Reboot

Tue, 06 Apr 2021 14:39:32 +0800

After rebooting the operating system, I found that the Docker service did not start and the containers did not start either. How do you make them start automatically after reboot?

Solve Two Problems

Enable automatic restart for the Docker service

systemctl enable docker.service

Installing and Using gperftools to Analyze Java Off-Heap Memory

Tue, 30 Mar 2021 09:54:54 +0800

CentOS

Install using yum

yum install gperftools libunwind

Optional, PDF support

yum install graphviz

Set environment variables

export LD_PRELOAD=/usr/lib64/libtcmalloc.so
export HEAPPROFILE=/DATA1/admin_tmp/gzip

Proxmox VE 6.4 daily upgrade commands

Mon, 29 Mar 2021 08:23:52 +0800

Remove unused Linux kernel pvekclean Update software: apt update -y && apt dist-upgrade -y Remove the unsubscribed prompt and support PVE 6.3 / 6.4 sed -i_orig "s/data.status === 'Active'/true/g" /usr/share/pve-manager/js/pvemanagerlib.js sed -i_orig "s/if (res === null || res === undefined || \!res || res/if(/g" /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js sed -i_orig "s/.data.status.toLowerCase() !== 'active'/false/g" /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js systemctl restart pveproxy After confirming that everything is correct, restart the server. reboot Solve software upgrade problems Added Alibaba Cloud’s Debian image source

Java Spring Boot JNI Native Library Loader

Sat, 27 Mar 2021 16:37:31 +0800

Because Java needs to stay cross-platform, I wrote a cross-platform JNI native library loader.

Simple Implementation

Determine whether the current system is Windows, Linux, or MacOS from the os.name environment property.
If it is Linux, further determine whether it is CentOS or Debian.
Read the library files inside the jar package.
Filter the matching platform library files by file suffix: dll, so, jnilib, and dylib.
Copy the current platform’s library file to the system temporary directory java.io.tmpdir.
Load the library using System.load.

Spring Boot + Undertow upload file cannot find temporary directory

Sat, 27 Mar 2021 11:17:26 +0800

The problem occurs Two days ago, the company’s SpringBoot project suddenly had a problem of being unable to upload Excel files. After checking the Java log, I found a large number of exceptions: java.nio.file.NoSuchFileException: /tmp/undertow.12020.9432679758080410942/undertow17157208698492118168upload Detailed exception information is as follows: org.springframework.web.multipart.MultipartException: Failed to parse multipart servlet request; nested exception is java.lang.RuntimeException: java.nio.file.NoSuchFileException: /tmp/undertow.12020.9432679758080410942/undertow17157208698492118168upload at org.springframework.web.multipart.support.StandardMultipartHttpServletRequest.handleParseFailure(StandardMultipartHttpServletRequest.java:124) at org.springframework.web.multipart.support.StandardMultipartHttpServletRequest.parseRequest(StandardMultipartHttpServletRequest.java:115) at org.springframework.web.multipart.support.StandardMultipartHttpServletRequest.<init>(StandardMultipartHttpServletRequest.java:88) at org.springframework.web.multipart.support.StandardServletMultipartResolver.resolveMultipart(StandardServletMultipartResolver.java:87) at org.springframework.web.servlet.DispatcherServlet.checkMultipart(DispatcherServlet.java:1199) at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:1033) at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:961) at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:1006) at org.

Troubleshooting a Network Storm in My Home Network

Fri, 26 Mar 2021 09:37:21 +0800

March 7th, Sunday. It was supposed to be a day for rest and relaxation.

Around 10 AM

The XiaoAi speaker at home suddenly stopped working, showing “Network Connection Failed”.

I initially thought it was just a minor issue, but after some inspection, I discovered that all networked devices at home had lost connectivity???

MySQL Date and DST Conversion Error HOUR_OF_DAY: 0 -> 1 and How to Fix It

Thu, 25 Mar 2021 10:53:15 +0800

Error Occurred When Exporting User Data: HOUR_OF_DAY: 0 -> 1

Exception in thread “main” java.lang.IllegalArgumentException: HOUR_OF_DAY: 0 -> 1 The full error message is as follows:

HomeAssistant: Common HACS, Github Third-party Support Library Repos

Mon, 15 Mar 2021 08:56:00 +0800

HACS

HACS Official Website

https://github.com/hacs/integration https://hacs.xyz/

HACS Installation Documentation

https://hacs.xyz/docs/installation/installation

HomeAssistant Configuration: Auto-Reminder When Security Door is Left Open for Extended Period

Tue, 09 Mar 2021 18:18:37 +0800

Required devices: 小米门窗传感器, 小米Aqara网关, 小米触屏音箱 When the door remains open for 1 minute and for 2 minutes, the speaker will automatically give a voice reminder to close the door description: '' trigger: - type: opened platform: device device_id: 000000f29088665d7b820e7d4000000 entity_id: binary_sensor.door_window_sensor_158d0002000000 domain: binary_sensor for: hours: 0 minutes: 1 seconds: 0 milliseconds: 0 - type: opened platform: device device_id: 000000f29088665d7b820e7d4000000 entity_id: binary_sensor.door_window_sensor_158d0002000000 domain: binary_sensor for: hours: 0 minutes: 2 seconds: 0 milliseconds: 0 condition: [] action: - service: zhimsg.

Feign usage examples: @Body annotation, http request body

Fri, 05 Mar 2021 18:25:23 +0800

There is a situation where the interface uses the http request body to pass parameters, so I studied feign and found that the @Body annotation can generally be implemented. Although it is said that the request body is used to pass parameters, in fact, the request body still contains data in json format. Of course, if you don’t want to be limited to the json format, you can set it to a universal format. See the end of the article for details.

WeChat Old Version Installation Method - Version Too Low, Please Upgrade to the Latest Version

Fri, 05 Mar 2021 11:22:11 +0800

First install the latest version of WeChat and log in.

Uninstall the app using the cmd command while preserving user data:

adb shell pm uninstall -k com.tencent.mm

Restart your phone

adb root

This step is very important, otherwise you will get an error message adb: failed to install xxxxxx Failure [INSTALL_FAILED_VERSION_DOWNGRADE]

Install the old version APK using the cmd command (followed by the installation package path):

adb install -r -d

Log into your WeChat account on the old version.

Python3 object-oriented programming

Thu, 04 Mar 2021 22:23:55 +0800

Object-oriented programming Access restrictions Private variables start with __ class Student(object): def __init__(self, name, score): self.name = name self.score = score def print_score(self): print('%s: %s' % (self.name, self.score)) Inheritance and polymorphism Inheritance: Dog inherits from Animal class Student(object): def __init__(self, name, score): self.__name = name self.__score = score def print_score(self): print('%s: %s' % (self.__name, self.__score)) Get object information Basic object types Object type of a function or class Type checking Reflection: use dir() to get all properties and methods of an object Reflection: getattr(), setattr(), and hasattr() Interfaces and duck typing class Animal(object): def run(self): print('Animal is running.

The biggest pitfall of SpringBoot DevTools, none of them

Wed, 03 Mar 2021 18:23:39 +0800

Recently, a lot of changes have been added to the SpringBoot project, and then I encountered a very strange problem. HibernateDatabase query error This is simply weird Expected type and actual value are exactly the same, but Hibernate thinks they are different. How can this be fixed? After struggling with this strange problem for a day, I found that this only occurs on my local machine. The same code is completely normal on the test server.

Python3 bugs, debugging and testing

Mon, 01 Mar 2021 17:27:07 +0800

Error handling Common mistakes in inheritance relationships Log errors throw error try: print('try...') r = 10 / 0 print('result:', r) except ZeroDivisionError as e: print('except:', e) finally: print('finally...') print('END') BaseException +-- SystemExit +-- KeyboardInterrupt +-- GeneratorExit +-- Exception +-- StopIteration +-- StopAsyncIteration +-- ArithmeticError | +-- FloatingPointError | +-- OverflowError | +-- ZeroDivisionError +-- AssertionError +-- AttributeError +-- BufferError +-- EOFError +-- ImportError +-- ModuleNotFoundError +-- LookupError | +-- IndexError | +-- KeyError +-- MemoryError +-- NameError | +-- UnboundLocalError +-- OSError | +-- BlockingIOError | +-- ChildProcessError | +-- ConnectionError | | +-- BrokenPipeError | | +-- ConnectionAbortedError | | +-- ConnectionRefusedError | | +-- ConnectionResetError | +-- FileExistsError | +-- FileNotFoundError | +-- InterruptedError | +-- IsADirectoryError | +-- NotADirectoryError | +-- PermissionError | +-- ProcessLookupError | +-- TimeoutError +-- ReferenceError +-- RuntimeError | +-- NotImplementedError | +-- RecursionError +-- SyntaxError | +-- IndentationError | +-- TabError +-- SystemError +-- TypeError +-- ValueError | +-- UnicodeError | +-- UnicodeDecodeError | +-- UnicodeEncodeError | +-- UnicodeTranslateError +-- Warning +-- DeprecationWarning +-- PendingDeprecationWarning +-- RuntimeWarning +-- SyntaxWarning +-- UserWarning +-- FutureWarning +-- ImportWarning +-- UnicodeWarning +-- BytesWarning +-- ResourceWarning import logging def foo(s): return 10 / int(s) def bar(s): return foo(s) * 2 def main(): try: bar('0') except Exception as e: logging.

Three JavaScript Quirks Java/C Developers Should Know

Sun, 28 Feb 2021 22:28:36 +0800

JavaScript can be a deceptive language and can cause a lot of pain because it’s not 100% consistent. It is known that it does have some bad, confusing or redundant features: the infamous with statement, 隐式全局变量 and 不稳定的比较 are probably the most famous. JavaScript is one of the most successful flame generators in history! Aside from its flaws (which are partially addressed in the new ECMAScript specification), most programmers hate JavaScript for two reasons:

Python 3 I/O Programming

Fri, 26 Feb 2021 10:29:31 +0800

File Reading and Writing

`read()`: reads the entire file at once

with is similar to try...catch, but simpler, and it automatically calls close

with open('/path/to/file', 'r') as f:
    print(f.read())

How to Run Multiple Python Scripts on Mac with One Command

Thu, 25 Feb 2021 15:52:15 +0800

There are currently 4 Python scripts, and I want to execute all 4 scripts with a single command. How can I do that? My current approach is rather crude. I used 5 shell scripts to achieve it, but I don’t know whether there is a better way.

shell script `runAll.sh`

#!/bin/bash
ls
open -a Terminal.app run17688821.sh
open -a Terminal.app run49763693.sh
open -a Terminal.app run857413.sh
open -a Terminal.app run856853.sh

Python3 regular expressions

Wed, 24 Feb 2021 08:38:22 +0800

re module s = r'ABC\-001' # Python的字符串 # 对应的正则表达式字符串不变： # 'ABC\-001' Determine whether a regular expression matches >>> import re >>> re.match(r'^\d{3}\-\d{3,8}$', '010-12345') <_sre.SRE_Match object; span=(0, 9), match='010-12345'> >>> re.match(r'^\d{3}\-\d{3,8}$', '010 12345') >>> Split a string Group >>> 'a b c'.split(' ') ['a', 'b', '', '', 'c'] Greedy matching >>> m = re.match(r'^(\d{3})-(\d{3,8})$', '010-12345') >>> m <_sre.SRE_Match object; span=(0, 9), match='010-12345'> >>> m.group(0) '010-12345' >>> m.group(1) '010' >>> m.group(2) '12345' Compile a regular expression >>> re.

How to Install HACS in Home Assistant

Fri, 19 Feb 2021 10:53:04 +0800

If Using a Virtual Machine Environment (Home Assistant OS)

Go to the Supervisor panel
Install an SSH add-on (enable advanced mode in your user profile first)
Configure the selected SSH add-on
Start the SSH add-on
Connect to the SSH add-on
Run the HACS installation script

wget -q -O - https://hacs.xyz/install | bash -

CentOS 7.4 NFS Auto-Mount

Wed, 17 Feb 2021 21:15:19 +0800

On-Demand Auto-Mount

Automatically mount NFS shared directory /home/share to local path /mnt/share upon user login

yum install -y autofs
vi /etc/auto.master
/mnt /etc/auto.conf（这个配置文件本身就没有要自己创建）
vi /etc/auto.conf
share  192.168.1.22:/etc/letsencrypt/live/margrop.net-0001/（nfs服务器上共享文件）
service autofs restart

Deploy Your Own Bitwarden Password Management Server

Wed, 17 Feb 2021 20:20:06 +0800

Many people are not comfortable storing their passwords online with services like LastPass. Even though the official claim is that passwords are encrypted and the server cannot see user passwords, some still feel uneasy. In that case, you can deploy the open-source Bitwarden to set up your own password management server.

Prerequisites: A VPS server and a domain name with the IP address already resolved to the server.

[Repost] Method to Export TOTP Tokens from Authy

Wed, 17 Feb 2021 19:53:14 +0800

Based on Ubuntu 18.04 (regular user), other Linux systems are similar. Golang official website: https://golang.org/ Github repository: https://github.com/alexzorin/authy

Download and Install Golang (Mac System, Using Brew)

brew install go

Python 3 Built-in Module: HTMLParser

Mon, 15 Feb 2021 11:07:02 +0800

HTMLParser

Python3 common string operations

Sun, 14 Feb 2021 22:33:22 +0800

python print

No line breaks (add, end=’’ at the end)

print(string,end='')

Update the rule address of KoolProxyR, updated on February 12, 2021

Fri, 12 Feb 2021 19:43:55 +0800

The KoolProxyR rule URLs had not been updated for a long time, so many ads could no longer be filtered. I had to change the update URLs myself. Edit the update script Modify the URLs Update the url_koolproxy field to: Update the url_yhosts field to: Update the url_easylist field to: Reference cd /koolshare/scripts vim KoolProxyR_rule_update.sh Modify the URL Change the url_koolproxy field to: url_koolproxy="http://bobohome.f3322.net:8880/files/KoolProxyRules/koolproxy.txt" Change the url_yhosts field to: url_yhosts="https://github.com/VeleSila/yhosts/blob/master/hosts" Change the url_easylist field to:

Python3 basics

Fri, 12 Feb 2021 14:28:13 +0800

Python3 tutorial Python download Python3 built-in functions Base Use indentation instead of {} The end of the statement is not required; list=[…] method len()/append()/insert() tuple=() immutable list map={key:value,key:value…} method key in map/get(key,defaultValue)/pop(key) set=set([…]) method add(key)/remove(key) function Data type: int(v), float(v), str(v), bool(v) Empty statement: pass Immutable object: None Variable parameters: *args, receives 1 tuple Keyword parameter: **kw, receives 1 dict

Latest Synology 6.17: How to Gain Root Access, Set Root Password and Enable SSH Passwordless Login

Wed, 10 Feb 2021 20:40:26 +0800

1. Enable SSH Function

In 控制面板->终端机和SNMP, enable the SSH function

2. Log in to Synology via SSH Using the Default System User

My default user is admin, so I enter the following command. Modify admin and IP地址 to match your own settings.

ssh admin@192.168.1.5

Kodi IPTV live source m3u8 collection - 2021 edition

Mon, 08 Feb 2021 10:08:34 +0800

Because of copyright restrictions, many live TV apps stutter during playback and the picture quality is often poor. Today, most broadband providers offer IPTV services, so you can watch TV in high definition without lag and without installing cable TV. If you have not activated IPTV, you can still use live source URLs shared by other users and copy them to your computer, TV box, or other devices. If you are comfortable with packet capture, you can also collect the live source URLs yourself.

Swagger-UI adds project dependencies and modifies index.html

Sat, 06 Feb 2021 09:13:39 +0800

swagger-bundle packaging First enter the swagger-ui directory npm install npm run build How to modify The url in index.html is modified to: and add functions url: "/v2/api-docs?group=" + getUrlParam("group"), function getUrlParam(name) { var reg = new RegExp("(^|&)" + name + "=([^&]*)(&|$)"); //构造一个含有目标参数的正则表达式对象 var r = window.location.search.substr(1).match(reg); //匹配目标参数 if (r != null) return unescape(r[2]); return ""; //返回参数值 }

How to add MD5 verification and project dependencies in Swagger-JS

Sat, 06 Feb 2021 09:05:25 +0800

swagger-bundle packaging First enter the swagger-js directory npm install npm run build How to modify Add code to the src/execute.js file: Add code before the export function buildRequest({ method class mergeInQueryOrForm(req) statement: package.json needs to add support for cross-platform compilation import md5 from 'md5'; //calcSn for server var req = request console.log(req.body); if (req.body) { let bodyObj = JSON.parse(req.body); bodyObj['header']['token'] = req['headers']['token']; bodyObj['header']['snTime'] = (new Date()).valueOf(); let allData = Object.assign(JSON.parse(JSON.stringify(bodyObj['body'])), { token: bodyObj['header']['token'], snTime: bodyObj['header']['snTime'] }); bodyObj['header']['sn'] = calcSn(allData); req.

How to Install Jike AC Virtual Machine in Proxmox VE Environment?

Wed, 03 Feb 2021 16:18:33 +0800

According to 恩山的集客AC AP扫盲贴:

Q: Can I skip AC and have two AP connect directly to the main router for roaming? A: Yes, but roaming works better with AC than without it. With ac present, roaming performance won’t disappoint. Jike’s roaming is not a simple weak-signal kick. With ac in place, excellent roaming effects are achieved regardless of whether Jike ap supports kvr, because ac+ap is proactive roaming, which does not rely on kvr protocol and has very low requirements on clients. Micro ac only handles configuration distribution and cannot perform proactive roaming; roaming effectiveness depends on the client.

Let's Encrypt automatically synchronizes Proxmox VE and DSM certificates after automatic renewal

Tue, 02 Feb 2021 19:19:38 +0800

Last time we talked about Let’s Encrypt通过DNS TXT记录来验证域名有效性, and the last part of the article was about how to use certbot renew for automatic renewal. Then the automatic renewal is successful, how to synchronize it to PVE and DSM? Below we use a script to perform automatic synchronization. Need to configure SSH password-free login on Proxmox VE and DSM servers Automatically synchronize Proxmox VE certificate Proxmox VE synchronized to this machine Proxmox VE synchronized to LAN cp /etc/letsencrypt/live/blog.

How to Import a Third-Party VM Image into Proxmox VE

Mon, 01 Feb 2021 15:12:47 +0800

In the example below, the VM ID is always 100; change it as needed.

File Format Conversion

Use qemu-img to convert virtual disk files in other formats to qcow2
For example, the following converts vmdk to qcow2

How to Install Node-RED with NPM

Mon, 01 Feb 2021 09:57:07 +0800

What Is `Node-RED`

Node-RED is a low-code/no-code programming tool for connecting hardware devices, APIs, and online services in a novel and interesting way. It is especially suitable for smart home scenarios.

Node-RED provides a browser-based flow editor, making it easy to connect various nodes in the panel. You can then deploy the flow to runtime with a single click.

How to Build an Open Source Web Flowchart Tool Diagrams.net (formerly draw.io)

Sat, 30 Jan 2021 17:59:08 +0800

ProcessOn are now well-known web 流程图, UML drawing tools. However, ProcessOn is a paid service with too many free-tier restrictions. So, is there a free option available?

Yes, it’s Diagrams.net. Completely free with powerful features~

How to Configure a Freshly Installed Ubuntu 20.04 Server VM on PVE

Sat, 30 Jan 2021 15:33:44 +0800

Download the Installation ISO

Aliyun Ubuntu 20.04 live server download Aliyun Ubuntu 18.04 live server download

How to Map JSON Objects Using Generic Hibernate Types

Fri, 29 Jan 2021 16:06:09 +0800

Introduction

In this article, we’ll see how to map JSON columns to JPA entity attributes using the Hibernate Types open-source project.

While you can create your own custom Hibernate type to map JSON column types on Oracle, SQL Server, PostgreSQL, or MySQL, you don’t need to implement your own Hibernate Type since the Hibernate Types project already provides this functionality.

Upgrading or Fresh Installing MariaDB 10.5 on CentOS 7 Using Aliyun Mirror

Fri, 29 Jan 2021 15:42:20 +0800

Update the System First

yum update -y

Edit the yum Configuration File Using Aliyun Mirror

Here MariaDB 10.5 is used as an example

vim /etc/yum.repos.d/MariaDB10.repo

#http://downloads.mariadb.org/mariadb/repositories/
[mariadb]
name = MariaDB
baseurl = https://mirrors.aliyun.com/mariadb/yum/10.5/centos7-amd64
gpgkey = https://mirrors.aliyun.com/mariadb/yum/RPM-GPG-KEY-MariaDB
gpgcheck = 1

How to run N2N using Windows-Run

Fri, 29 Jan 2021 13:43:19 +0800

Here I only talk about how to run the N2N client edge. In fact, it is easier to run the supernode, so I won’t repeat it here. Download and unzip N2N Contains edge, supernode, openssl链接库 (necessary for n2n operation), tap-windows安装包 (necessary for n2n operation, Win7&Win10) Install Tap-Windows Depending on your platform, select the installation file of Win10 or Win7 and use 一路回车法 to install it. Trial run edge service The following takes the decompression path as D:\TOOLS\ as an example.

Installing Docker on CentOS 7 and Configuring Aliyun Mirror Source

Fri, 29 Jan 2021 11:40:18 +0800

Docker Version

Since Docker version 1.13, Docker has adopted a timeline-based versioning approach, dividing releases into Community Edition (CE) and Enterprise Edition (EE). Docker CE is the free community edition, while Docker EE is the paid enterprise version.

How to Install a Certificate on iOS for HTTPS Packet Capture

Thu, 28 Jan 2021 15:33:23 +0800

Download the Certificate on iOS

Export the PEM certificate from Charles and place it on any web server
The PEM certificate I use below is only an example. Do not install it.

Installing the Latest Version of Node and NPM on CentOS 7

Wed, 27 Jan 2021 11:28:59 +0800

Downloading Node:

The download uses the Aliyun mirror

mkdir ~/nodejs
cd ~/nodejs
wget https://npm.taobao.org/mirrors/node/latest-v15.x/node-v15.7.0-linux-x64.tar.gz
tar -xvzf node-v15.7.0-linux-x64.tar.gz

Bypassing the Firewall or Setting Up a Server Farm: V2Ray Configuration with WebSocket + TLS + Web + CDN

Tue, 26 Jan 2021 13:44:36 +0800

v2ray The most secure configuration currently is WebSocket + TLS + Web + CDN. It uses port 443: direct access shows a website, but after connecting with a client it becomes a proxy tool. From the outside it looks like an electric shaver, but it is actually a hair dryer.

China Telecom, How to Contact Customer Service to Apply for a Public IP

Mon, 25 Jan 2021 22:12:32 +0800

Currently, among the three major carriers in China, China Telecom has the most abundant 公网IP. However, as global IPv4 resources have been completely exhausted, even the wealthy families are running out of grain.

Recommendations and downloads of commonly used Windows software, no recommendations

Sun, 24 Jan 2021 22:22:47 +0800

Here we recommend some software commonly used in the Windows environment of this site. There are no recommendations. If you don’t like it, please close the page. This software is equivalent to Windows version 应用市场, but does not include any bundled software. *Tencent officially closed the download of this independent version of the software N years ago (N>3). For the application market, it is obviously not cost-effective to install an additional Tencent Computer Manager.

Python3 web environment, including third-party and self-built

Sun, 24 Jan 2021 13:07:30 +0800

I needed to use the Python3 Web environment because of some family matters, so I collected them. The environment of the third-party website is very simple to use, but the shortcomings are also obvious. The last Python code cannot be saved. Python3 environment provided by third-party websites So I built an environment myself, and after struggling for a long time, I finally used Docker to build it, and it was done in just a few lines of code.

Installing Frp Client on CentOS with SSH Access

Sat, 23 Jan 2021 17:22:58 +0800

Download and Extract Frp

Latest Frp download address: https://github.com/fatedier/frp/releases/

mkdir ~/frp
cd ~/frp
wget https://github.com/fatedier/frp/releases/download/v0.35.0/frp_0.35.0_linux_amd64.tar.gz
tar -xvzf frp_0.35.0_linux_amd64.tar.gz

Ubuntu installs Frp server, non-client

Sat, 23 Jan 2021 13:43:20 +0800

Download and extract FRP Latest FRP release: https://github.com/fatedier/frp/releases/ cd ~ mkdir frp cd frp wget https://github.com/fatedier/frp/releases/download/v0.35.0/frp_0.35.0_linux_amd64.tar.gz tar -xvzf frp_0.35.0_linux_amd64.tar.gz cd frp_0.35.0_linux_amd64 Configure FRP Remove the default client configuration file Create the server configuration file cd ~/frp/frp_0.35.0_linux_amd64/ rm frpc rm frpc.ini rm frpc_full.ini ls -a sudo su rm frps.ini cat>/etc/frps.ini<<EOF [common] # FRP server bind port bind_port = 1000 # Set the HTTP access port to 1001 vhost_http_port = 1001 # Set the domain name (make sure it is reachable) subdomain_host = frp.

Enable Intel GVT-g Graphics Virtualization on Proxmox VE

Sat, 23 Jan 2021 11:23:04 +0800

Note: Intel GVT-g is currently only supported by fifth, sixth, and seventh generation Intel Core processors and Xeon E3 v4/v5/v6 processors on PVE. My tests show that 8th generation and newer CPUs are not supported for now -_-! If this changes, feel free to contact me. Reference: https://pve.proxmox.com/wiki/PCI(e)_Passthrough

Proxmox VE commonly used local paths, and how to modify hosts, host name, IP address and DNS configuration

Fri, 22 Jan 2021 17:02:01 +0800

PVE local ISO file directory: /var/lib/vz/template/iso PVE local OVZ file directory: /var/lib/vz/template/cache Modify hosts file Effective after restart vi /etc/hosts Modify hostname Effective after restart vi /etc/hostname Modify IP address and DNS configuration Effective after restart Reference DNS configuration vi /etc/network/interfaces dns-nameservers 114.114.114.114,223.5.5.5

Initialization script after Proxmox VE installation

Fri, 22 Jan 2021 16:42:46 +0800

In order to facilitate the installation of PVE, I compiled the relevant commands myself. Please modify them according to your own environment.

ProxmoxVE 6.3 uses commands to back up Synology virtual machines

Thu, 21 Jan 2021 18:16:22 +0800

Since the Synology virtual machine in my ProxmoxVE runs on a LUN passthrough disk, I cannot click backup directly in the Web interface. DSM virtual machine backup process: Stop the virtual machine -> Unmount the hard disk -> Back up the virtual machine -> Mount the hard disk -> Start the virtual machine It is really troublesome and error-prone to do this entirely through the Web interface. So I studied the command-line workflow.

Does Synology DSM Support QEMU Guest Agent?

Wed, 20 Jan 2021 13:19:28 +0800

Install the Power Button Package in Synology DSM and disable the qemu agent option in PVE.

Where to Download the Power Button Package

Note that DSM 6.1 and DSM 6.2 use different spk packages

img2KVM, Convert IMG Format to KVM Format, Install DSM Synology Virtual Machine

Wed, 20 Jan 2021 08:32:25 +0800

Install img2kvm

cd /root
wget -c https://download.margrop.net/d/oneindex/network/PVE/img2kvm -O img2kvm
chmod +x img2kvm

【Transfer】The latest method of half-washing Synology

Tue, 19 Jan 2021 18:10:53 +0800

I recently built a new NAS. After installing it, I found that the semi-whitewashing solution provided before no longer worked. Previous Posthttp://blog.lixx.vip/黑群晖（synology）nas-6-22-折腾记-半洗白/ Mainly because Synology’s new version of Docker 18.09.0-0506 has closed the installation of DDSM Download old version of Docker *Old version of Docker download address (Docker-x64-17.05.0-0401.spk): DDSM’s PAT download address (DSM_VirtualDSM_15284.pat): It can also be downloaded at 我的网盘 You need to uninstall the newly installed Docker in the package center, and then install the downloaded old version

Let's Encrypt verifies domain name validity through DNS TXT records

Tue, 19 Jan 2021 10:39:58 +0800

When we use letsencrypt to obtain the free HTTPS certificate, letsencrypt needs to verify the domain name. By default it authenticates like this: The certbot program places a file in the root directory of the web directory. The server of letsencrypt accesses this file through the domain name to verify that the domain name you applied for belongs to you. But sometimes we want to set HTTPS for a certain host on the intranet.

Activate Windows 10 with KMS, Including Third-Party and Self-Hosted Services

Mon, 18 Jan 2021 22:12:43 +0800

Third-Party Service Activation

Use Administrator privileges and run two commands:

slmgr /skms kms.03k.org
slmgr /ato

Solution to NumberFormatException when using SpringFox 3.0.0 version

Mon, 18 Jan 2021 16:39:34 +0800

I recently upgraded SpringFox to version 3.0.0, and a bunch of exceptions occurred when accessing the interface documentation. The detailed exception stack is as follows 2021-01-18 16:25:35.824 WARN 62082 --- [ XNIO-2 task-1] i.s.m.p.AbstractSerializableParameter : Illegal DefaultValue null for parameter type integer java.lang.NumberFormatException: For input string: "" at java.base/java.lang.NumberFormatException.forInputString(NumberFormatException.java:65) at java.base/java.lang.Long.parseLong(Long.java:702) at java.base/java.lang.Long.valueOf(Long.java:1144) at io.swagger.models.parameters.AbstractSerializableParameter.getExample(AbstractSerializableParameter.java:412) at jdk.internal.reflect.GeneratedMethodAccessor220.invoke(Unknown Source) at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.base/java.lang.reflect.Method.invoke(Method.java:566) at com.fasterxml.jackson.databind.ser.BeanPropertyWriter.serializeAsField(BeanPropertyWriter.java:689) at com.fasterxml.jackson.databind.ser.std.BeanSerializerBase.serializeFields(BeanSerializerBase.java:755) at com.fasterxml.jackson.databind.ser.BeanSerializer.serialize(BeanSerializer.java:178) at com.fasterxml.jackson.databind.ser.impl.IndexedListSerializer.serializeContents(IndexedListSerializer.java:119) at com.

Install Frp client on Mac and use remote desktop

Mon, 18 Jan 2021 13:28:26 +0800

You can install it with Homebrew. The following section shows the old manual extraction method. Keep reading if you want that approach. brew install frpc vi /usr/local/etc/frp/frpc.ini brew services start frpc Download the Darwin package from FRP releases and unzip it omitted Copy the executable sudo mv ~/Downloads/frp_0.34.3_darwin_amd64/frpc /usr/local/bin/ Add the frpc configuration file Adjust server_addr, server_port, and remote_port as needed. Edit the auto-start configuration Commands related to auto-start sudo su cat>/etc/frpc.

Install Frp client on Windows and use remote desktop

Sun, 17 Jan 2021 19:36:38 +0800

As the usage restrictions of TeamViewer become more and more strict, it will be regarded as an enterprise user from time to time. After all, there is no free lunch in the world. The following is a method to use the Frp client for intranet penetration and remote control. Please prepare your own Frp server and consider the security risks of exposing port 3389 to the public network. Download Frp client #Configure Frp client

Solution to PVE upgrade failure due to insufficient boot space

Sun, 17 Jan 2021 19:25:59 +0800

During the default installation, the space allocated by proxmox to /boot is less than 300M. The iteration of proxmox is very fast, and /boot can easily be filled up. If you are not careful, the upgrade will fail. The only way is to manually delete the old kernel. Delete old kernel proxmox is based on debian. Every time you use apt update && apt dist-upgrade, debian’s linux-image and pve-kernel will be automatically installed.

Common Git Commands

Sun, 17 Jan 2021 12:59:53 +0800

git reflog Display recent Git operation records

git reflog head@{0}

Proxy Only for GitHub git clone

Sun, 17 Jan 2021 12:53:12 +0800

git config --global http.https://github.com.proxy socks5://127.0.0.1:1080
git config --global https.https://github.com.proxy socks5://127.0.0.1:1080

How to Run N2N on CentOS 7 — Edge Edition

Sat, 16 Jan 2021 14:00:18 +0800

边缘节点（node）：The node that will become part of the virtual network.

[Transfer] Solve the problem that the Gridea client cannot be opened/opens very slowly and cannot be synchronized

Fri, 15 Jan 2021 16:48:39 +0800

Recently, the Gridea client has been very slow to open, and synchronization often fails. In the upper left corner, edit–>Developer Tools–>console, you can see that widget.js cannot be loaded. This is because cdn.headwayapp.co is blocked, so you need to use magic or put widget.js on other CDNs. If you switch to another CDN, you need to modify the client Edit index.html search Below is mine \Gridea\resources\app\index.html https://cdn.headwayapp.co/widget.js https://cdn.jsdelivr.net/gh/XYZ1024-alt/CDN/widget.js

Customize LEDE router KoolProxyR blocking advertising rules, 20200705

Fri, 15 Jan 2021 15:05:48 +0800

How to install KoolProxyR Refer to KoolProxyR项目官网 Execute the following code in SSH to implement online installation. (please copy all) wget -4 -O /tmp/KoolProxyR_install.sh https://shaoxia1991.coding.net/p/koolproxyr/d/koolproxyr/git/raw/master/KoolProxyR_install.sh && chmod 777 /tmp/KoolProxyR_install.sh && sh /tmp/KoolProxyR_install.sh Ad blocking rules The following are the router ad blocking rules I use Used in custom rules based on soft routing LEDE, KoolProxyR. ! https://gist.github.com/itspig/e22bd240cff35fbb4b29fafd2539de27 api.ad.xiaomi.com sdkconfig.ad.xiaomi.com ad.mi.com ad.xiaomi.com ad1.xiaomi.com adv.sec.miui.com test.ad.xiaomi.com new.api.ad.xiaomi.com cdn.ad.xiaomi.com e.ad.xiaomi.com test.new.api.ad.xiaomi.com ssp.ad.xiaomi.com o2o.api.xiaomi.com !

How to run N2N-compilation using Windows

Fri, 15 Jan 2021 14:26:49 +0800

According to Building说明 of N2N官方网站, the software required for Windows compilation is Visual Studio,Cmake,OpenSSL。 I got a headache when I saw Visual Studio. This software is very difficult to install. So I chose cross-compilation, that is, using the Linux environment to compile Windows exe and dll files. #Compiled files Compilation environment: Contains edge, supernode, openssl链接库 (necessary for n2n operation), tap-windows安装包 (necessary for n2n operation, Win7&Win10) Prepare the compilation environment Use yum to install necessary software, the following is the author’s reference document wget https://download.

How to Run N2N on Synology (DSM) - Compilation Guide

Fri, 15 Jan 2021 13:18:07 +0800

Synology (abbreviated as DSM below) is currently the most famous NAS system, bar none. How to run N2N directly on DSM? Of course, cross-compilation is needed again 😂. The following cross-compilation operations require a basic understanding of Linux and proficiency in vim operations.

How to use CentOS 7 to run N2N—supernode

Fri, 15 Jan 2021 09:15:03 +0800

超级节点（supernode）: It allows edge nodes to announce and discover other nodes. It must have a port that is publicly accessible on the Internet. First review the basic elements of n2n n2n is a lightweight VPN software that makes it easy to create virtual networks that bypass intervening firewalls. In order to start using n2n, two elements are required: 一个超级节点（supernode）: It allows edge nodes to announce and discover other nodes. It must have a port that is publicly accessible on the Internet.

Jike AP and AC Firmware Download Links

Thu, 14 Jan 2021 21:28:52 +0800

Common Download Links

AP230EP: AP245P: AP246ND:

Links, Software, Mirrors, and Useful Chrome Extensions

Thu, 14 Jan 2021 21:05:24 +0800

Common Windows software downloads https://download.margrop.net/d/oneindex/EXE/ A very effective Microsoft activation script https://massgrave.dev/ # Run the following command in an elevated PowerShell session irm https://massgrave.dev/get | iex Common Android software downloads https://download.margrop.net/d/oneindex/APK/ Convert Google Play links into direct APK downloads https://apkcombo.com/apk-downloader/ Markdown learning https://xianbai.me/learn-md/index.html String and regex tools https://regex101.com/ http://www.renrensousuo.com/quchuchongfu/ https://www.bejson.com/ Proxmox VE, an open source virtualization platform https://www.proxmox.com/en/downloads/category/iso-images-pve Bitwarden, an open source cross-platform password manager with Docker support https://bitwarden.com/ Online diagram tools https://draw.

[Transfer] Spring AOP intercepts classes or methods with specified annotation identifiers

Thu, 14 Jan 2021 15:29:41 +0800

Instructions for scanning specific annotations in AOP: (1) @annotation: intercepts all methods annotated with the target annotation. (2) @within: intercepts all classes annotated with the target annotation. (3) within: limits the package scope to scan. Code Demo @Aspect @Component @Order(10) public class BidAuthorityProxy { /** * Scan classes under the specified package that are annotated with `@EnableRoleAuthority`. */ @Around("@within(com.core.annotation.EnableRoleAuthority) && within(com.bid..*)") public Object verifyRoleExecuteCommand(ProceedingJoinPoint pjp) throws Throwable { // Get the intercepted method MethodSignature msig = (MethodSignature) pjp.

How to Run N2N on CentOS 7 — Compilation Guide

Thu, 14 Jan 2021 14:26:49 +0800

If you are interested in the complete compilation process, you can browse at your leisure. Of course, you can also directly download the pre-compiled files.

About

Wed, 13 Jan 2021 17:34:15 +0800

Margrop Blog AI Infrastructure Engineer This site documents my long-term work across AI agents, cloud platforms, self-hosting, and engineering practice. I care about whether a system can actually run, remain stable, and be diagnosed and repaired when it fails. The posts here therefore come from real deployments, migrations, incidents, automation work, and postmortems—not only from polished tutorials. What I work on AI Agent: coding agents, MCP, shared memory, model gateways, and agent workflows Self-hosting: Docker, NAS, Proxmox VE, homelab systems, and networking Engineering: Linux, Java, Go, databases, performance, observability, and incidents Cloud Platform: deployment, automation, permissions, token management, and production practice These areas are connected.

What is N2N?

Wed, 13 Jan 2021 16:27:39 +0800

N2N is an open source P2P encryption networking tool The open source project address is: https://github.com/ntop/n2n The latest version is 2.8-stable The following introduction comes from the official website n2n is a lightweight VPN software that makes it easy to create virtual networks that bypass intervening firewalls. In order to start using n2n, two elements are required: 一个超级节点（supernode）: It allows edge nodes to announce and discover other nodes. It must have a port that is publicly accessible on the Internet.

Why use Github Page?

Wed, 13 Jan 2021 13:24:27 +0800

That was more than ten years ago. I used 163Blog more than ten years ago. Because the blog reposted several articles about building airports and airplanes, 163Blog was permanently banned. All the articles on 163Blog were instantly wiped out, and I was also hit hard. It is true that once bitten by a snake, I will be afraid of well ropes for ten years. Later, I used 有道云笔记 to accumulate technology, but 有道云笔记 was too closed.

Hello World

Wed, 13 Jan 2021 11:00:06 +0800

After various preparations in terms of ideas and environment, my personal blog has finally officially opened for business.

Hello Gridea

Wed, 12 Dec 2018 00:00:00 +0800

👏 Welcome to Gridea!
✍️ Gridea - a static blog writing client. You can use it to record your life, thoughts, knowledge, notes, ideas… …