CLI on Margrop Blog

Docker Container Crash Loop After v3.7.0? You're Missing One Word: serve

Thu, 02 Jul 2026 19:30:00 +0800

TL;DR

After upgrading Siyuan (SiYuan Note) from v3.6.x to v3.7.0, the Docker container entered an infinite restart loop. docker logs showed Error: unknown flag: --accessAuthCode. The root cause: v3.7.0 introduced a CLI subcommand architecture. The old top-level flags now require a serve subcommand. The fix is adding one word — 'serve' — to the beginning of the command array in docker-compose.yml. Seven characters. From crash loop to running.

This article covers the complete troubleshooting process, one-command fix scripts for Windows 11, Ubuntu 26.04, and macOS 26, plus both manual and AI Agent approaches. All scripts use only Docker CLI and SSH — no third-party services required.

Windows Finally Gets Native Linux Commands: Microsoft Coreutils Replaces WSL, Cygwin, and Git Bash

Sat, 27 Jun 2026 08:00:00 +0800

Let me ask you something:

Have you ever tried to grep a log file in Windows Terminal, only to be told that grep is not a recognized command? Tried to use find to locate files, only to discover that Windows’ find is a completely different beast from Linux’s find? Written a cross-platform script that works perfectly on Linux, then falls apart the moment it touches Windows?

It’s not your fault. It’s the “Berlin Wall” between Windows and Linux command lines.

The good news? Microsoft just tore that wall down. In late 2025, Microsoft open-sourced coreutils on GitHub — a native Windows port of the essential Linux command set. No WSL. No Cygwin. No Git Bash. Just one winget install command, and your Windows terminal suddenly speaks fluent ls, grep, sed, and awk.

Moving Bedtime Out of the Living Room: Letting macOS launchd Disable Your Kids' Synology Accounts at 22:00 and Quietly Re-enable Them at 08:00

Sun, 14 Jun 2026 08:20:00 +0800

Short version

Synology DSM has a “disable this account” checkbox in the Control Panel, but it does not run on a schedule. With macOS’s built-in launchd and a 50-line bash script, you can flip the expired flag on two local accounts at 22:00 every night and flip it back at 08:00. The script does a before-query, a change, an after-query, and exit 1 the moment the after state does not match expectations. launchd writes stdout and stderr to dedicated log files. The interesting part is that the word “parent” quietly leaves the conversation: you no longer have to remind anyone to go to bed, the machine does it for you, on time, every day.

This post is not a comprehensive “family NAS management” guide. It is about one specific thing: turning a manual button click that depends on human memory into a system-level event that just happens on time.

If you only want the picture, the overview diagram in Section 2 is the whole article in one frame.

Stop Dragging Files Around: BaiduPCS-Go CLI and Agent Workflows for Baidu Netdisk

Sat, 16 May 2026 10:06:01 +0800

Bottom line first

If you only download one or two files from Baidu Netdisk once in a while, the web UI and official desktop client are fine. Once you start doing batch downloads, remote server pulls, archive uploads, directory audits, or Agent-assisted workflows with Codex, Claude, OpenClaw, HermesAgent, or similar tools, the graphical UI becomes friction. BaiduPCS-Go is useful not because it is a magic speed booster, but because it turns Baidu Netdisk into something scripts, terminals, and Agents can operate. This article walks through installation checks, BDUSS/STOKEN login, everyday commands, configuration, safety rules, and practical Agent integration.

All accounts, cookies, paths, tasks, and settings in this article are sanitized examples. They do not contain real BDUSS, STOKEN, cookies, private directories, internal addresses, or business information.

Codex 0.130 Removed /approvals? The Fix Is to Move Permissions to Startup Flags

Tue, 12 May 2026 18:50:00 +0800

The short version

If you upgraded to Codex 0.130.0 and noticed that the old /approvals habit no longer works, the practical fix is not to downgrade. Move the permission policy to launch time. Use --ask-for-approval to control when Codex asks, --sandbox to control what commands can touch, and reserve --dangerously-bypass-approvals-and-sandbox for environments that are already isolated outside Codex. The long flag can also be written directly as --yolo, which is easier to remember, easier to type, and more consistent with command habits from tools such as Gemini.

In other words, stop treating approval mode as an in-session toggle. Treat it as part of the way you start the agent.

This article only discusses public Codex CLI flags and generic workflows. It does not include real hostnames, internal addresses, usernames, tokens, private paths, or project names. Commands use placeholders such as <PROJECT> and <TASK>.

Integrating Synology Operations as an OpenClaw / HermesAgent Skill: From One Sentence to Auditable NAS Automation

Tue, 05 May 2026 12:20:00 +0800

I have already written two Synology CLI references on this blog:

Those posts answer the question: “What commands can a human run on a Synology NAS?” This article answers a different question: if I already use OpenClaw / HermesAgent, how can I turn those commands into an operations Skill so that I can ask the agent, in one sentence, to inspect the NAS, summarize evidence, prepare a maintenance plan, and execute approved commands only when the risk is acceptable?

The short answer is: yes, but the Skill must not become an unrestricted root shell. The right design is:

Make Synology SSH access controlled, testable, and revocable.
Put common Synology CLI operations into a Skill, together with command categories, risk levels, and output rules.
Allow read-only diagnostics by default.
Require explicit approval for service restarts, permission changes, user changes, network changes, deletion, and storage operations.
Preserve commands, output, and reasoning so each operation remains auditable.

If you only want the big picture, the diagram below summarizes the whole article.

[Transfer] Synology NAS CLI Administration Guide

Thu, 30 Apr 2026 18:20:04 +0800

This guide contains command tools that allow your applications to make use of the resources on Synology DiskStation and also includes a list of Synology Error Numbers for reference.

[Transfer] Synology DiskStation Administration CLI Guide: Reading Notes and Command Cheatsheet

Thu, 30 Apr 2026 18:14:05 +0800

Short version

Synology’s official CLI administration guide is not a beginner manual for the DSM web interface. It is a compact reference for scripting, automation, and system integration. The useful parts cover local users, local groups, shared folders, network configuration, service management, Windows workgroup or ADS domain settings, and DSM error numbers.

This post is an English reading note and command cheatsheet based on Synology’s official PDF, CLI Administrator Guide for Synology NAS. Because the original PDF is a copyrighted Synology document, this post does not reproduce or translate the full document verbatim. Instead, it reorganizes the material into a bilingual blog-friendly guide for quick reading and daily operations. For exact wording, parameter definitions, version-specific behavior, and legal notices, use the official PDF linked at the end.

Debugging Chinese Text Turning into Underscores in tmux + opencode: The Real Culprit Was client_utf8=0

Tue, 28 Apr 2026 18:40:00 +0800

Short version

This was not an opencode Chinese rendering bug, and it was not a broken terminal font. The tmux client had been detected as not supporting UTF-8. The decisive evidence was tmux display-message -p 'client_utf8=#{client_utf8}', which returned client_utf8=0. In that state, tmux replaces non-ASCII output with underscores, so every Chinese character inside the opencode TUI appeared as _.

This post documents a small but very typical terminal debugging session. On the same Mac, running opencode directly displayed Chinese text correctly. But after starting a tmux session first and then running opencode, all Chinese text became underscores.

This kind of problem is easy to misdiagnose. The first instinct is often to blame the font, the terminal emulator, the opencode version, a color theme, Nerd Font configuration, Unicode width handling, or a bug in the TUI framework. In this case, however, the key question was much narrower: does the current tmux client believe it can write UTF-8 back to the outer terminal?

To avoid exposing private environment details, all examples below are generalized. They do not include real hostnames, private addresses, session names, credentials, usernames, or project paths. The only things preserved are the technical facts needed to understand the failure and the fix.