apps

[!NOTE|label:references:]
使用ssl模块配置同时支持http和https并存
How To Create an SSL Certificate on Nginx for Ubuntu 14.04
How To Create a Self-Signed SSL Certificate for Nginx in Ubuntu 16.04
Enabling Https with Nginx
Enable SSL for HTTPS Configuration on nginx
Nginx+Https配置
Test an insecure registry
Protect the Docker daemon socket

[!TIP|label:download deb only]
Is there an apt command to download a deb file from the repositories to the current directory?
# get package name
$ sudo apt list --installed | grep <keywords>
$ apt-get install --reinstall --print-uris -qq <package-name> | cut -d"'" -f2

pre-config

dependencies installation

$ sudo apt install -y apt-file \
                      autoconf \
                      automake \
                      bash-completion* \
                      binutils \
                      binutils-doc \
                      bison \
                      build-essential \
                      cmake \
                      cpp \
                      cpp-5 \
                      cpp-doc \
                      curl \
                      debian-keyring \
                      dlocate \
                      dos2unix \
                      dpkg-dev \
                      dstat \
                      fakeroot \
                      flex \
                      g++ \
                      g++-5 \
                      g++-5-multilib \
                      g++-multilib \
                      gcc \
                      gcc-5 \
                      gcc-5-doc \
                      gcc-5-locales \
                      gcc-5-multilib \
                      gcc-doc \
                      gcc-multilib \
                      gdb \
                      git \
                      htop \
                      ifstat \
                      iftop \
                      iptables-persistent \
                      jq \
                      landscape-common \
                      libasan2 \
                      libasan2-dbg \
                      libatomic1 \
                      libatomic1-dbg \
                      libbz2-dev \
                      libc-dev-bin \
                      libc6-dev \
                      libcc1-0 \
                      libcilkrts5 \
                      libcilkrts5-dbg \
                      libexpat-dev \
                      libexpat1-dev \
                      libfakeroot \
                      libgcc1-dbg \
                      libgomp1-dbg \
                      libisl15 \
                      libitm1 \
                      libitm1-dbg \
                      liblsan0 \
                      liblsan0-dbg \
                      liblxc1 \
                      libmpc3 \
                      libmpx0 \
                      libmpx0-dbg \
                      libncurses-dev \
                      libncurses5-dev \
                      libncursesw5-dev \
                      libpython-all-dev \
                      libpython2.7 \
                      libquadmath0 \
                      libquadmath0-dbg \
                      libsensors4 \
                      libssl-dev \
                      libstdc++-5-dev \
                      libstdc++-5-doc \
                      libstdc++6-5-dbg \
                      libtool \
                      libtsan0 \
                      libtsan0-dbg \
                      libubsan0 \
                      libubsan0-dbg \
                      linux-libc-dev \
                      lxc-common \
                      lxcfs \
                      m4 \
                      mailutils \
                      make \
                      manpages-dev \
                      ncurses-doc \
                      net-tools \
                      netfilter-persistent \
                      policycoreutils \
                      python-docutils \
                      python-pip \
                      python-setuptools-doc \
                      ruby \
                      sysstat \
                      texinfo \
                      traceroute \
                      tree \
                      update-motd \
                      update-notifier-common \
                      zlib1g-dev

account

$ sudo usermod -a -G sudo,adm,root,docker devops

PS1

[!NOTE]
Terminals Are Sexy

powerline
[!NOTE|label:powerline]
oh-my-*
[!NOTE|label:oh-my-*]

proxy service

shadowsocks

server

# ubuntu
$ sudo apt install m2crypto git python-pip
# centos
$ sudo yum install m2crypto git python3-pip

$ pip install --upgrade pip
# or
$ pip3 install --upgrade pip
# or
$ sudo /usr/bin/python3 -m pip install --upgrade pip

$ pip install git+https://github.com/shadowsocks/shadowsocks.git@master

$ sudo ln -sf /home/marslo/.local/bin/ssserver /usr/local/bin/ssserver

start

$ sudo bash -c 'cat > /etc/rc.local' << EOF
## ssserver -c /etc/shadowsocks.json -d start
sudo /home/marslo/.local/bin/ssserver -c /etc/shadowsocks.json -d start
EOF

client

ubuntu

$ sudo add-apt-repository ppa:hzwhuang/ss-qt5
 Shadowsocks-Qt5 is a cross-platform Shadowsocks GUI client.

Shadowsocks is a lightweight tool that helps you bypass firewall(s).

This PPA mainly includes packages for Shadowsocks-Qt5, which means it also includes libQtShadowsocks packages.
 More info: https://launchpad.net/~hzwhuang/+archive/ubuntu/ss-qt5
Press [ENTER] to continue or Ctrl-c to cancel adding it.

gpg: keybox '/tmp/tmpaegs6_x4/pubring.gpg' created
gpg: /tmp/tmpaegs6_x4/trustdb.gpg: trustdb created
gpg: key 6DA746A05F00FA99: public key "Launchpad PPA for Symeon Huang" imported
gpg: Total number processed: 1
gpg:               imported: 1
OK

$ sudo apt update
$ sudo apt install shadowsocks-qt5

others

$ sudo apt install python-pip
$ sudo pip install genpac

shadowsocks-libev

service

started by docker image teddysun/shadowsocks-libev

$ mkdir -p /etc/shadowsocks-libev
$ sudo bash -c "cat > /etc/shadowsocks-libev/config.json" << EOF
{
    "server":"0.0.0.0",
    "server_port":1111,
    "password":"password0",
    "timeout":300,
    "user":"nobody",                // optional
    "method":"aes-256-gcm",
    "fast_open":false,
    "nameserver":"8.8.8.8",         // be careful for this in private sub-network
    "mode":"tcp_and_udp",
    "plugin":"obfs-server",
    "plugin_opts":"obfs=http"
}
EOF

$ docker run -d -p 1111:1111 \
                -p 1111:1111/udp \
                --name ss-libev \
                --restart=always \
                -v /etc/shadowsocks-libev:/etc/shadowsocks-libev \
                teddysun/shadowsocks-libev
$ docker logs -f ss-libev

started by /etc/init.d/shadowsocks-libev

$ wget --no-check-certificate \
       -O shadowsocks-all.sh \
       https://raw.githubusercontent.com/teddysun/shadowsocks_install/master/shadowsocks-all.sh
$ chmod +x shadowsocks-all.sh
$ ./shadowsocks-all.sh 2>&1 | tee shadowsocks-all.log
...

Which Shadowsocks server you'd select:
1) Shadowsocks-Python
2) ShadowsocksR
3) Shadowsocks-Go
4) Shadowsocks-libev
Please enter a number (Default Shadowsocks-Python): 4
You choose = Shadowsocks-libev
...

[Info] Starting install package autoconf
Do you want install simple-obfs for Shadowsocks-libev? [y/n]
(default: n): y
You choose = y

Please select obfs for simple-obfs:
1) http
2) tls
Which obfs you'd select(Default: http): 1
obfs = http
...

service

$ sudo /etc/init.d/shadowsocks-libev start
$ sudo /etc/init.d/shadowsocks-libev stop
$ sudo /etc/init.d/shadowsocks-libev restart
$ sudo /etc/init.d/shadowsocks-libev status
Shadowsocks-libev (pid 903) is running...

config

$ /etc/shadowsocks-libev/config.json
{
    "server":"0.0.0.0",
    "server_port": 1111,
    "password":"mypassword",
    "timeout":300,
    "user":"nobody",                  // optinal
    "method":"aes-256-cfb",
    "fast_open":false,
    "nameserver":"1.0.0.1",           // be careful for dns resolve in private network
    "mode":"tcp_and_udp",
    "plugin":"obfs-server",
    "plugin_opts":"obfs=http"
}

check status

$ sudo lsof -i:1111
COMMAND   PID   USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
ss-server 903 nobody    8u  IPv4  20522      0t0  UDP *:1111
obfs-serv 909   root    7u  IPv4  20649      0t0  TCP *:1111 (LISTEN)
$ sudo netstatus -tunpla | grep 1111
tcp        0      0 0.0.0.0:1111            0.0.0.0:*               LISTEN      909/obfs-server
udp        0      0 0.0.0.0:1111            0.0.0.0:*                           903/ss-server

client

PLUGIN

PLUGIN OPTS

simple-obfs

obfs=http;obfs-host=www.google.com

squid

[!NOTE|label:references:]
About Squid proxy servers
Squid installation and configuration in Ubuntu
SquidGuard in ubuntu
How to configure an SSH proxy server with Squid
Use Squid as HTTP / HTTPS / SSH Proxy
Tunnelling SSH/SFTP over Squid proxy
How to Set Up a Proxy Server on Your Mac Using SquidMan
brew install squid on macOS but can't run squid

docker client

add insecure-regiestry

$ cat ~/.docker/daemon.json
{
  "debug" : true,
  "experimental" : true,
  "insecure-registries" : ["sample.artifactory.com", "sample.artifactory.com:2500", "sample.artifactory.com:2501", "docker-1.artifactory", "docker-1.artifactory:443"]
}

$ sudo systemctl daemon-reload
$ sudo systemctl restart docker

$ docker --debug -l debug login --username admin  https://docker-1.artifactory
Password:
Login Succeeded

$ docker --debug -l debug logout docker-1.artifactory
Removing login credentials for docker-1.artifactory

docker pull

$ docker pull docker-1.artifactory/nginx:latest
latest: Pulling from nginx
e7bb522d92ff: Pull complete
0f4d7753723e: Pulling fs layer
91470a14d63f: Download complete
0f4d7753723e: Pull complete
91470a14d63f: Pull complete
Digest: sha256:3eff18554e47c4177a09cea5d460526cbb4d3aff9fd1917d7b1372da1539694a
Status: Downloaded newer image for docker-1.artifactory/nginx:latest

docker push

$ docker pull hello-world
$ docker tag hello-world docker-1.artifactory/bello-marslo:2.0
$ docker login --username admin docker-1.artifactory
$ docker push docker-1.artifactory/bello-marslo:2.0

X Windows

show vnc info

# port
$ systemctl --user show-environment | grep -e XAUTHORITY -e DISPLAY
DISPLAY=:3

# xauth
$ xauth list
$ xauth info
Authority file:       /home/marslo/.Xauthority
File new:             no
File locked:          no
Number of entries:    6
Changes honored:      yes
Changes made:         no
Current input:        (argv):1

get screen solution

$ xrandr --verbose
Screen 0: minimum 320 x 200, current 1920 x 1080, maximum 8192 x 8192
XWAYLAND0 connected 1920x1080+0+0 (0x22) normal (normal left inverted right x axis y axis) 480mm x 270mm
    Identifier: 0x21
    Timestamp:  3807
    Subpixel:   unknown
    Gamma:      1.0:1.0:1.0
    Brightness: 0.0
    Clones:
    CRTC:       0
    CRTCs:      0
    Transform:  1.000000 0.000000 0.000000
                0.000000 1.000000 0.000000
                0.000000 0.000000 1.000000
               filter:
  1920x1080 (0x22) 173.000MHz -HSync +VSync *current +preferred
        h: width  1920 start 2048 end 2248 total 2576 skew    0 clock  67.16KHz
        v: height 1080 start 1083 end 1088 total 1120           clock  59.96Hz

enable remote access

##!/bin/bash
export DISPLAY=:0
read -e -p "VNC Password: " -i "ubuntu" password
dconf write /org/gnome/desktop/remote-access/enabled true
dconf write /org/gnome/desktop/remote-access/prompt-enabled false
dconf write /org/gnome/desktop/remote-access/authentication-methods "['vnc']"
dconf write /org/gnome/desktop/remote-access/require-encryption false08/03/2018
dconf write /org/gnome/desktop/remote-access/vnc-password \"\'$(echo -n $password | base64)\'\"
dconf dump /org/gnome/desktop/remote-access/
## sudo service lightdm restart

or
```
$ vino-preference
$ dconf-editor
```

start x server

$ export DISPLAY=:0
$ /usr/lib/vino/vino-server --display=:0 &

reset vnc password

$ echo -n 'awesome' | base64
$ gconftool-2 -s -t string /desktop/gnome/remote_access/vnc_password $(echo -n "<YOURPASSWORD>" | base64)
$ gconftool-2 --type string --set /desktop/gnome/remote_acess/vnc_password '123456'

wayland known error

cat <<EOF | sudo tee /etc/xdg/autostart/xhost.desktop
[Desktop Entry]
Name=xhost
Comment=Fix graphical root applications
Exec="xhost +si:localuser:root"
Terminal=false
Type=Application
EOF

check using wayland or xorg

$ echo $XDG_SESSION_TYPE

Ubuntu: Wayland (Wayland)
Ubuntu on Xorg: Xorg (X11)

tightvncserver

[!NOTE|label:references:]
Setup VNC Server on Ubuntu: Complete Ubuntu Remote Desktop Guide
install_tightvnc_server_on_ubuntu.md
Your Complete VNC Server Installation Guide for Ubuntu
VNC/Servers
tightvncserver
How to Install TightVNC to Access Remote Desktops in Linux

install

desktop environment

# rhel
$ sudo dnf groupinstall "Server with GUI"

# debian
$ sudo apt install xfce4 xfce4-goodies

# or with Xubuntu
$ sudo apt-get install -y xubuntu-core^

# gnome desktop
$ sudo apt-get install --no-install-recommends ubuntu-desktop gnome-panel gnome-settings-daemon metacity nautilus gnome-terminal -y

tightvncserver

# debian
$ sudo apt install tightvncserver

# check details
$ apt-cache policy tightvncserver
tightvncserver:
  Installed: 1.3.10-0ubuntu4
  Candidate: 1.3.10-0ubuntu4
  Version table:
 *** 1.3.10-0ubuntu4 500
        500 http://us.archive.ubuntu.com/ubuntu bionic/universe amd64 Packages
        100 /var/lib/dpkg/status

start vnc server
```
$ vncserver

# or
$ vncserver :1
```
check connection
```
$ sudo netstat -peanut | grep "vnc"
```
change password
```
$ vncpassword
```

clipman

$ xfconf-query -c xfce4-panel -p /plugins/clipman/property -s value
$ xfconf-query -c xfce4-panel -lv | grep /plugins/clipman

icons

$ gtk-update-icon-cache --force /usr/share/icons/<theme-name>

setup

[!TIP|label:references:]
startxfce4 & can be replaced by:
thunar &
xfce4-panel &
xterm &
gnome-session & can be replaced by:
gnome-panel &
gnome-settings-daemon &
metacity &
nautilus &

$ vncserver -kill :1
$ mv ~/.vnc/xstartup ~/.vnc/xstartup.bak
$ vim ~/.vnc/xstartup
#!/bin/sh
def
export XKL_XMODMAP_DISABLE=1
unset SESSION_MANAGER
unset DBUS_SESSION_BUS_ADDRESS
xrdb $HOME/.Xresources
xsetroot -solid grey
startxfce4 &
# gnome-session &

$ chmod +x ~/.vnc/xstartup

# start service
$ vncserver
$ vncserver -geometry 1600x1024 -depth 24

$ cat ~/.vnc/xstartup
#!/bin/bash
xrdb $HOME/.Xresources
startxfce4 &

or: https://help.ubuntu.com/community/VNC/Servers#Customising_your_session

#!/bin/sh

# Change "GNOME" to "KDE" for a KDE desktop, or "" for a generic desktop
MODE="GNOME"

# Uncommment this line if using Gnome and your keyboard mappings are incorrect.
# export XKL_XMODMAP_DISABLE=1

# Load X resources (if any)
if [ -e "$HOME/.Xresources" ]; then
  xrdb "$HOME/.Xresources"
fi

# Try a GNOME session, or fall back to KDE
if [ "GNOME" = "$MODE" ]; then
  if which gnome-session >/dev/null; then
    gnome-session --session=ubuntu-2d &
  else
    MODE="KDE"
  fi
fi

# try a kde session, or fall back to generic
if [ "KDE" = "$MODE" ]; then
  if which startkde >/dev/null; then
    startkde &
  else
    MODE=""
  fi
fi

# Run a generic session
if [ -z "$MODE" ]; then
  xsetroot -solid "#DAB082"
  x-terminal-emulator -geometry "80x24+10+10" -ls -title "$VNCDESKTOP Desktop" &
  x-window-manager &
fi

list vnc servers

$ ps auxfww | grep Xtightvnc
marslo    1040 29.8  0.1 208052 66872 pts/1    S    18:57  23:57 Xtightvnc :3 -desktop X -auth /home/marslo/.Xauthority -geometry 1600x1080 -depth 24 -rfbwait 120000 -rfbauth /home/marslo/.vnc/passwd -rfbport 5903 -fp /usr/share/fonts/X11/misc/,/usr/share/fonts/X11/Type1/,/usr/share/fonts/X11/75dpi/,/usr/share/fonts/X11/100dpi/ -co /etc/X11/rgb

# or
$ pgrep -a Xtightvnc
1040 Xtightvnc :3 -desktop X -auth /home/marslo/.Xauthority -geometry 1600x1080 -depth 24 -rfbwait 120000 -rfbauth /home/marslo/.vnc/passwd -rfbport 5903 -fp /usr/share/fonts/X11/misc/,/usr/share/fonts/X11/Type1/,/usr/share/fonts/X11/75dpi/,/usr/share/fonts/X11/100dpi/ -co /etc/X11/rgb

kill service

$ vncserver -kill :3

# or
$ rm -rf /tmp/.X3-lock
# - or -
$ rm -rf /tmp/.X11-unix/X3

configure

$ ps auxfww | grep -i x11
Xtightvnc :3 -desktop X -auth /home/marslo/.Xauthority -geometry 1600x1024 -depth 24 -rfbwait 120000 -rfbauth /home/marslo/.vnc/passwd -rfbport 5903 -fp /usr/share/fonts/X11/misc/,/usr/share/fonts/X11/Type1/,/usr/share/fonts/X11/75dpi/,/usr/share/fonts/X11/100dpi/ -co /etc/X11/rgb
 \_ /bin/sh /etc/xdg/xfce4/xinitrc -- /etc/X11/xinit/xserverrc

$ which -a Xtightvnc
/usr/bin/Xtightvnc

$ echo $XDG_MENU_PREFIX
xfce-

$ echo $DESKTOP_SESSION
xfce

$ echo $XDG_CONFIG_DIRS
/etc/xdg

$ cat /etc/xdg/xfce4/Xft.xrdb
! Those are fallback settings, use the ui plugin to change it
! or add your overrides to ~/.Xresources
! Xft.hintstyle: hintnone/hintslight/hintmedium/hintfull
! Xft hinting: 1/0

Xft.hinting: 1
Xft.hintstyle: hintmedium

tools

$ xfdesktop-settings
$ xfce4-settings-manager

$ xfce4-session-settings
$ xfce4-session-editor

$ sudo cat /etc/X11/xinit/xserverrc
#!/bin/sh

exec /usr/bin/X -nolisten tcp "$@"

$ cat /etc/xdg/xfce4/xinitrc
#!/bin/sh

# fix broken $UID on some system...
if test "x$UID" = "x"; then
  if test -x /usr/xpg4/bin/id; then
    UID=`/usr/xpg4/bin/id -u`;
  else
    UID=`id -u`;
  fi
fi

# set $XDG_MENU_PREFIX to "xfce-" so that "xfce-applications.menu" is picked
# over "applications.menu" in all Xfce applications.
if test "x$XDG_MENU_PREFIX" = "x"; then
  XDG_MENU_PREFIX="xfce-"
  export XDG_MENU_PREFIX
fi

# set DESKTOP_SESSION so that one can detect easily if an Xfce session is running
if test "x$DESKTOP_SESSION" = "x"; then
  DESKTOP_SESSION="xfce"
  export DESKTOP_SESSION
fi

# set XDG_CURRENT_DESKTOP so that Qt 5 applications can identify user set Xfce theme
if test "x$XDG_CURRENT_DESKTOP" = "x"; then
  XDG_CURRENT_DESKTOP="XFCE"
  export XDG_CURRENT_DESKTOP
fi

# $XDG_CONFIG_HOME defines the base directory relative to which user specific
# configuration files should be stored. If $XDG_CONFIG_HOME is either not set
# or empty, a default equal to $HOME/.config should be used.
if test "x$XDG_CONFIG_HOME" = "x" ; then
  XDG_CONFIG_HOME=$HOME/.config
fi
[ -d "$XDG_CONFIG_HOME" ] || mkdir "$XDG_CONFIG_HOME"

# $XDG_CACHE_HOME defines the base directory relative to which user specific
# non-essential data files should be stored. If $XDG_CACHE_HOME is either not
# set or empty, a default equal to $HOME/.cache should be used.
if test "x$XDG_CACHE_HOME" = "x" ; then
  XDG_CACHE_HOME=$HOME/.cache
fi
[ -d "$XDG_CACHE_HOME" ] || mkdir "$XDG_CACHE_HOME"

# set up XDG user directores.  see
# http://freedesktop.org/wiki/Software/xdg-user-dirs
if which xdg-user-dirs-update >/dev/null 2>&1; then
    xdg-user-dirs-update
fi

# Modify libglade and glade environment variables so that
# it will find the files installed by Xfce
GLADE_CATALOG_PATH="$GLADE_CATALOG_PATH:"
GLADE_PIXMAP_PATH="$GLADE_PIXMAP_PATH:"
GLADE_MODULE_PATH="$GLADE_MODULE_PATH:"
export GLADE_CATALOG_PATH
export GLADE_PIXMAP_PATH
export GLADE_MODULE_PATH

# For now, start with an empty list
XRESOURCES=""

# Has to go prior to merging Xft.xrdb, as its the "Defaults" file
test -r "/etc/xdg/xfce4/Xft.xrdb" && XRESOURCES="$XRESOURCES /etc/xdg/xfce4/Xft.xrdb"
test -r $HOME/.Xdefaults && XRESOURCES="$XRESOURCES $HOME/.Xdefaults"

BASEDIR=$XDG_CONFIG_HOME/xfce4
if test -r "$BASEDIR/Xft.xrdb"; then
  XRESOURCES="$XRESOURCES $BASEDIR/Xft.xrdb"
elif test -r "$XFCE4HOME/Xft.xrdb"; then
  mkdir -p "$BASEDIR"
  cp "$XFCE4HOME/Xft.xrdb" "$BASEDIR"/
  XRESOURCES="$XRESOURCES $BASEDIR/Xft.xrdb"
fi

# merge in X cursor settings
test -r "$BASEDIR/Xcursor.xrdb" && XRESOURCES="$XRESOURCES $BASEDIR/Xcursor.xrdb"

# ~/.Xresources contains overrides to the above
test -r "$HOME/.Xresources" && XRESOURCES="$XRESOURCES $HOME/.Xresources"

# load all X resources (adds /dev/null to avoid an empty list that would hang the process)
cat /dev/null $XRESOURCES | xrdb -merge -

# load local modmap
test -r $HOME/.Xmodmap && xmodmap $HOME/.Xmodmap

# run xfce4-session if installed
if which xfce4-session >/dev/null 2>&1; then

  # check if we start xfce4-session with ck-launch-session. this is only
  # required for starting from a console, not a login manager
  if test "x$XFCE4_SESSION_WITH_CK" = "x1"; then
    if which ck-launch-session >/dev/null 2>&1; then
      ck-launch-session xfce4-session
    else
      echo
      echo "You have tried to start Xfce with consolekit support, but"
      echo "ck-launch-session is not installed."
      echo "Aborted startup..."
      echo

      exit 1
    fi
  else
    # start xfce4-session normally
    xfce4-session
  fi

  exit 0
fi

##################
# IMPORTANT NOTE #
##################

# Everything below here ONLY gets executed if you are NOT using xfce4-session
# (Xfce's session manager).  If you are using the session manager, everything
# below is handled by it, and the code below is not executed at all.  If you're
# not sure if you're using the session manager, type 'ps -e|grep xfce4-session'
# in a terminal while Xfce is running.

##################

# Use dbus-launch if installed.
if test x"$DBUS_SESSION_BUS_ADDRESS" = x""; then
  if which dbus-launch >/dev/null 2>&1; then
    eval `dbus-launch --sh-syntax --exit-with-session`
    # some older versions of dbus don't export the var properly
    export DBUS_SESSION_BUS_ADDRESS
  else
    echo "Could not find dbus-launch; Xfce will not work properly" >&2
    fi
fi

# this is only necessary when running w/o xfce4-session
xsetroot -solid black -cursor_name watch

# or use old-fashioned startup script otherwise

xfsettingsd &
xfwm4 --daemon

# start up stuff in $XDG_CONFIG_HOME/autostart/
if test -d "$XDG_CONFIG_HOME/autostart"; then
  for i in ${XDG_CONFIG_HOME}/autostart/*.desktop; do
    grep -q -E "^Hidden=true" "$i" && continue
    if grep -q -E "^OnlyShowIn=" "$i"; then
      # need to test twice, as lack of the line entirely means we still run it
      grep -E "^OnlyShowIn=" "$i" | grep -q 'XFCE;' || continue
    fi
    grep -E "^NotShowIn=" "$i" | grep -q 'XFCE;' && continue

    # check for TryExec
    trycmd=`grep -E "^TryExec=" "$i" | cut -d'=' -f2`
    if test "$trycmd"; then
      which "$trycmd" >/dev/null 2>&1 || continue
    fi

    cmd=`grep -E "^Exec=" "$i" | cut -d'=' -f2`
    if test "$cmd" && which "$cmd" >/dev/null 2>&1; then
      $cmd &
    fi
  done
fi

xfdesktop&
orage &

panel=`which xfce4-panel`
case "x$panel" in
  x|xno*)
    ;;
  *)
    $panel
    ret=$?
    while test $ret -ne 0; do
      xmessage -center -file - -timeout 20 -title Error <<EOF
A crash occured in the panel
Please report this to the xfce4-dev@xfce.org list
or on http://bugs.xfce.org
Meanwhile the panel will be restarted
EOF
      cat >&2 <<EOF
A crash occured in the panel
Please report this to the xfce4-dev@xfce.org list
or on http://bugs.xfce.org
Meanwhile the panel will be restarted
EOF
      $panel
      ret=$?
    done
    ;;
esac

xsetroot -bg white -fg red  -solid black -cursor_name watch

tips

gnome-session

$ sudo apt-get install ubuntu-gnome-desktop

# revert
$ sudo apt-get remove ubuntu-gnome-desktop
$ sudo dpkg-reconfigure lightdm                  # select lightdm

ssh tunnel for vnc on linux client

$ vncserver -localhost

$ ssh -L 5901:localhost:5901 -C -N -l <username> <remote-ip-address>
# ssh tunnel
$ ssh -L 5901:localhost:5901 -N -f -l USER IP/DOMAINNAME

services

[!TIP|label:references:]
Running VNC as a System Service

$ sudo vim /etc/systemd/system/atavncserver.service
[Unit]
Description=VNC Server
After=syslog.target network.target

[Service]
Type=forking
User=USERNAME
PAMName=login
PIDFile=/home/USERNAME/.vnc/%H:3.pid
ExecStartPre=-/usr/bin/vncserver -kill :%i > /dev/null 2>&1
ExecStart=/usr/bin/vncserver -geometry 1600x1080 -depth 24 -nolisten tcp -localhost :%i
ExecStop=/usr/bin/vncserver -kill :%i

[Install]
WantedBy=multi-user.target

$ sudo systemctl daemon-reload
$ sudo systemctl enable atavncserver.service
$ sudo systemctl start atavncserver
$ sudo systemctl status atavncserver

$ sudo vim /etc/systemd/system/vncserver@.service
[Unit]
Description=Start TightVNC server at startup
After=syslog.target network.target

[Service]
Type=forking
User=sammy
Group=sammy
WorkingDirectory=/home/sammy

PIDFile=/home/sammy/.vnc/%H:%i.pid
ExecStartPre=-/usr/bin/vncserver -kill :%i > /dev/null 2>&1
ExecStart=/usr/bin/vncserver -depth 24 -geometry 1280x800 -localhost :%i
ExecStop=/usr/bin/vncserver -kill :%i

[Install]
WantedBy=multi-user.target

$ sudo systemctl daemon-reload
$ sudo systemctl enable vncserver@1.service
$ sudo systemctl start vncserver@1.service

change vncserver default geometry

$ vncserver -geometry 1600x1024 -depth 24
# or
$ vncserver -geometry 1600x1080 -depth 24 :3

$ echo "geometry=1920x1080" >> ~/.vnc/config
$ vncserver -kill :1 && vncserver

$ xrandr -s 1680x1050 # or
$ xrandr -s 3

autostart vnc session using cron

$ crontab -e
@reboot vncserver -geometry 1600x1024 -depth 24 :3

open vnc ports on firewall

$ sudo iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 5901 -j ACCEPT
# or
$ sudo firewall-cmd --zone=public --add-port=5901/tcp
# or
$ sudo ufw allow 5901/tcp

# for multiple users
$ sudo iptables -I INPUT 5 -m state --state NEW -m tcp -p tcp -m multiport --dports 5902:5904 -j ACCEPT
# or
$ sudo firewall-cmd --zone=public --add-port=5902-5904/tcp
# or
$ sudo ufw allow 5901:5910/tcp

# restart iptable service
$ sudo service iptables save
$ sudo service iptables restart
# or
$ sudo firewall-cmd --reload
$ sudo systemctl restart firewalld

$ xfconf-query -c xfce4-panel -lv
/configver                         2
/panels                            <<UNSUPPORTED>>
/panels/panel-1/length             100
/panels/panel-1/plugin-ids         <<UNSUPPORTED>>
/panels/panel-1/position           p=6;x=0;y=0
/panels/panel-1/position-locked    true
/panels/panel-1/size               30
/panels/panel-2/plugin-ids         <<UNSUPPORTED>>
/panels/panel-2/position           p=10;x=0;y=0
/panels/panel-2/position-locked    true
/plugins/plugin-1                  applicationsmenu
/plugins/plugin-10                 launcher
/plugins/plugin-10/items           <<UNSUPPORTED>>
/plugins/plugin-11                 launcher
/plugins/plugin-11/items           <<UNSUPPORTED>>
/plugins/plugin-12                 launcher
/plugins/plugin-12/items           <<UNSUPPORTED>>
/plugins/plugin-13                 separator
/plugins/plugin-13/style           1
/plugins/plugin-14                 directorymenu
/plugins/plugin-14/base-directory  /home/marslo
/plugins/plugin-15                 separator
/plugins/plugin-15/expand          true
/plugins/plugin-15/style           0
/plugins/plugin-2                  actions
/plugins/plugin-3                  tasklist
/plugins/plugin-4                  pager
/plugins/plugin-5                  clock
/plugins/plugin-6                  systray
/plugins/plugin-7                  showdesktop
/plugins/plugin-8                  separator
/plugins/plugin-8/style            1
/plugins/plugin-9                  launcher
/plugins/plugin-9/items            <<UNSUPPORTED>>

TigerVNC

# rhel
$ sudo yum -y install tigervnc-server xorg-x11-fonts-Type1

# debian
$ sudo apt install tigervnc-standalone-server tigervnc-viewer
# or
$ wget https://bintray.com/artifact/download/tigervnc/stable/ubuntu-14.04LTS/amd64/tigervncserver_1.6.0-3ubuntu1_amd64.deb
$ sudo dpkg -i tigervncserver_1.6.0-3ubuntu1_amd64.deb
$ sudo apt-get -f install

replace x11vnc to attach the local display
```
$ x0vncserver -display :0
```

x11vnc

tips

#!/bin/sh

ssh -C -f -L 5900:localhost:5900 rebecca@rebeccas-pc.dyndns.org \
        x11vnc -safer -localhost -nopw -once -display :0 \
        && sleep 5 \
        && vncviewer localhost:0

AppleRemoteDesktop

Unknown authentication scheme

$ sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -verbose -activate -restart -agent -allowAccessFor -allUsers -privs -all -clientopts -setvnclegacy -vnclegacy yes -setvncpw -vncpw passwordYouWantToUse

utility

[!NOTE🏷️reference:]
Nam Huy Linux Blog
Stackoverflow answers

konsole

installation

$ sudo apt install konsole

restore the settings

copy mylinux/confs/home/konsole to ~/.kde/share/apps/konsole

$ cp -r mylinux/confs/home/konsole/ ~/.kde/share/apps/konsole

shortcuts in Konsole

Alt + J: scroll down one line
Alt + K: scroll up one line

Gnome-Terminal

inspired from askubuntu

move context menu items [Open Terminal, Open Tab, Close window]

$ sudo cp mylinux/confs/terminal/usr/share/gnome-terminal/terminal.xml /usr/share/gnome-terminal/

settings

adjust Chinese font

modified by manual

$ cat /etc/fonts/conf.d/49-sansserif.conf
....
18       <string>WenQuanYi Micro Hei</string>
....

copy the template file to the conf.d folder

$ sudo cp Configs/etc/fonts/49-sansserif.conf /etc/fonts/conf.d/

install system monitor indicator

$ sudo add-apt-repository ppa:indicator-multiload/stable-daily
$ sudo apt update
$ sudo apt install indicator-multiload

install ubuntu theme

(nokto-theme) Official Website

$ sudo add-apt-repository ppa:noobslab/themes
$ sudo apt update
$ sudo apt install nokto-theme

# OR:

$ sudo cat >> /etc/apt/sources.list << EOF
> deb http://ppa.launchpad.net/noobslab/themes/ubuntu trusty main
> deb-src http://ppa.launchpad.net/noobslab/themes/ubuntu trusty main
EOF

$ sudo apt update

ambiance-dark

$ sudo add-apt-repository ppa:noobslab/themes
$ sudo apt update
$ sudo apt install ambiance-dark

specified cursor

$ cat /usr/share/icons/default/index.theme
[Icon Theme]
Inherits=handhelds

specified font for tty1-6

$ sudo dpkg-reconfigure console-setup

UTF-8 -> Combined - Latin: Cyrillic: Greek -> Terminus -> 24x12
UTF-8 -> Combined - Latin: Cyrillic: Greek -> TerminusBold -> 24x12

specified size and scroolback for TTY 1-6

$ sudo mv /etc/default/grub.cfg{,_bak}
$ sudo cp Configs/Grub/etc/default/grub /etc/default
$ sudo update-grub && sudo reboot

disable bluetooth booting

to stop bluetooth service

$ sudo service bluetooth stop

disable bluetooth service on startup

$ cat /etc/rc.local
....
# Turn off bluetooth
rfkill block bluetooth
exit 0

disable the bluetooth driver on startup

$ cat /etc/modprob.d/blacklist.conf
....
# Turn off bluetooth
blacklist btusb

cut power source for bluetooth to run

$ cat /etc/bluetooth/main.conf
...
4 DisablePlugins = network,input
...
37 nitiallyPowered = false

[DANGEROUS]: REMOVE BLUETOOTH MANAGER AND ALL DEPENDENCIES

$ sudo apt remove bluez* bluetooth
$ sudo apt autoremove

ALSA Settings:

Informations

Check the type of Sound Card:

$ head -1 /proc/asound/card0/codec#0
Realtek ALC262

Check the version of Sound Card:

$ /proc/asound/version
Advanced Linux Sound Archite chue Driver Version 1.0.24

Check the configuration about Sound Card
```
$ vim /etc/modprobe.d/alsa-base.conf
```

Install extra libs (ubuntu 13.04)

$ sudo apt install build-essential ncurses-dev gettext libncursesw5-dev
$ sudo apt install xmlto

Update ALSA in Ubuntu (<= 12.10)

Download alsa driver, alsa lib and alsa utils

$ wget ftp://ftp.alsa-project.org/pub/driver/alsa-driver-1.0.25.tar.bz2
$ wget ftp://ftp.alsa-project.org/pub/lib/alsa-lib-1.0.25.tar.bz2
$ wget ftp://ftp.alsa-project.org/pub/utils/alsa-utils-1.0.25.tar.bz2
$ tar xjvf alsa-driver-1.0.25.tar.bz2
$ tar xjvf alsa-lib-1.0.25.tar.bz2
$ tar xjvf alsa-utils-1.0.25.tar.bz2

Upgrade alsa dirver

$ cd alsa-driver-1.0.25
$ sudo ./configure
$ sudo make
$ sudo make install

Upgrade alsa lib

$ cd ../alsa-lib-1.0.25
$ sudo ./configure
$ sudo make
$ sudo make install

Upgrade alsa utils

$ cd ../alsa-utils-1.0.25
$ sudo ln -s libpanelw.so.5 /usr/lib/libpanelw.so
$ sudo ln -s libformw.so.5 /usr/lib/libformw.so
$ sudo ln -s libmenuw.so.5 /usr/lib/libmenuw.so
$ sudo ln -s libncursesw.so.5 /lib/libncursesw.so
$ ./configure --with-curses=ncurses
$ sudo make
$ sudo make install

Reboot
```
$ sudo shutdown -r now
```

Change settings in Sound Card

Input alsamixer, and input F6 to select sound card:
```
$ alsamixer
```

Startup Settings

Name: [Everything_You_Want]
Command: /sbin/alsactl restore

build and install moc (music on console) by source code

precondiction:

download source code from official web site
moc-2.5.0-beta1
DEB packages FTP

moc config:

Check details at marslo/moc-cmus

errors and solutions

error: BerkeleyDB (libdb) not found

$ sudo apt install libdb++-dev libdb-dev

decoder.c:22:18: fatal error: ltdl.h
```
$ sudo apt install libltdl-dev
```

FATAL_ERROR: No valid sound driver!

Error shows:

$ mocp
Running the server...
Trying OSS...
FATAL_ERROR: No valid sound driver!
FATAL_ERROR: Server exited!
[marslo@iMarslo ~]

$ gdb mocp core
GNU gdb (GDB) 7.6.1-ubuntu
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i686-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /home/marslo/Tools/Software/SourceCode/Moc/moc-2.5.0-beta1/mocp...done.
/home/marslo/Tools/Software/SourceCode/Moc/moc-2.5.0-beta1/core: No such file or directory.
(gdb) run
Starting program: /home/marslo/Tools/Software/SourceCode/Moc/moc-2.5.0-beta1/mocp
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
Running the server...
Trying OSS...
FATAL_ERROR: No valid sound driver!
FATAL_ERROR: Server exited!
[Inferior 1 (process 18165) exited with code 02]
(gdb) exit
Undefined command: "exit".  Try "help".
(gdb) quit

soluction

$ sudo apt install autoconf automake1.9 libasound2-dev libavcodec-dev libavformat-dev libcurl4-gnutls-dev libflac-dev libid3tag0-dev libltdl3-dev libmad0-dev libmodplug-dev libmpcdec-dev libncurses5-dev libncursesw5-dev libogg-dev libresid-builder-dev libsamplerate0-dev libsidplay2-dev libsidutils-dev libsndfile1-dev libspeex-dev libtagc0-dev libtool libvorbis-dev libwavpack-dev zlib1g-dev
Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'libltdl-dev' instead of 'libltdl3-dev'
libltdl-dev is already the newest version.
libncurses5-dev is already the newest version.
libncursesw5-dev is already the newest version.
libogg-dev is already the newest version.
libogg-dev set to manually installed.
libtool is already the newest version.
libtool set to manually installed.
libvorbis-dev is already the newest version.
zlib1g-dev is already the newest version.
libavcodec-dev is already the newest version.
libavcodec-dev set to manually installed.
libavformat-dev is already the newest version.
The following packages were automatically installed and are no longer required:
librcc0 librcd0 linux-headers-generic linux-image-generic
Use 'apt autoremove' to remove them.
The following extra packages will be installed:
comerr-dev krb5-multidev libgssrpc4 libidn11-dev libkadm5clnt-mit8 libkadm5srv-mit8 libkdb5-6
libkrb5-dev libldap2-dev librtmp-dev libsigsegv2 libtag1-dev m4
Suggested packages:
autoconf2.13 autoconf-archive gnu-standards autoconf-doc automake1.9-doc krb5-doc libasound2-doc
libcurl4-doc libcurl3-dbg krb5-user
Recommended packages:
automake automaken
The following NEW packages will be installed:
autoconf automake1.9 comerr-dev krb5-multidev libasound2-dev libcurl4-gnutls-dev libflac-dev libgssrpc4
libid3tag0-dev libidn11-dev libkadm5clnt-mit8 libkadm5srv-mit8 libkdb5-6 libkrb5-dev libldap2-dev
libmad0-dev libmodplug-dev libmpcdec-dev libresid-builder-dev librtmp-dev libsamplerate0-dev
libsidplay2-dev libsidutils-dev libsigsegv2 libsndfile1-dev libspeex-dev libtag1-dev libtagc0-dev
libwavpack-dev m4
0 upgraded, 30 newly installed, 0 to remove and 16 not upgraded.
Need to get 6,250 kB of archives.
After this operation, 16.9 MB of additional disk space will be used.
....

Check alas-base and alas-utils

$ dpkg -l alsa-base
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                 Version         Architecture    Description
+++-====================-===============-===============-==============================================
ii  alsa-base            1.0.25+dfsg-0ub all             ALSA driver configuration files

$ dpkg -l alsa-utils
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                 Version         Architecture    Description
+++-====================-===============-===============-==============================================
ii  alsa-utils           1.0.27.1-1ubunt i386            Utilities for configuring and using ALSA

Previousauthorization Nextx11

Last updated 10 months ago

hashtagpre-config

hashtagdependencies installation

hashtagaccount

hashtagPS1

hashtagproxy service

hashtagshadowsocks

hashtagshadowsocks-libev

hashtagsquidarrow-up-right

hashtagdocker client

hashtagadd insecure-regiestry

hashtagdocker login & logout

hashtagdocker pull

hashtagdocker push

hashtagX Windows

hashtagshow vnc info

hashtagget screen solution

hashtagdesktop sharing

hashtagtightvncserver

hashtagor: https://help.ubuntu.com/community/VNC/Servers#Customising_your_session

hashtagTigerVNCarrow-up-right

hashtagx11vncarrow-up-right

hashtagAppleRemoteDesktoparrow-up-right

hashtagutility

hashtagkonsole

hashtagGnome-Terminal

hashtagsettings

hashtagadjust Chinese font

hashtaginstall system monitor indicator

hashtaginstall ubuntu theme

hashtagspecified cursor

hashtagspecified font for tty1-6

hashtagspecified size and scroolback for TTY 1-6

hashtagdisable bluetooth booting

hashtagALSA Settings:

hashtagbuild and install moc (music on console) by source code

hashtagprecondiction:

hashtagmoc config:

hashtagerrors and solutions

pre-config

dependencies installation

account

PS1

proxy service

shadowsocks

shadowsocks-libev

squid

docker client

add insecure-regiestry

docker login & logout

docker pull

docker push

X Windows

show vnc info

get screen solution

desktop sharing

tightvncserver

or: https://help.ubuntu.com/community/VNC/Servers#Customising_your_session

TigerVNC

x11vnc

AppleRemoteDesktop

utility

konsole

Gnome-Terminal

settings

adjust Chinese font

install system monitor indicator

install ubuntu theme

specified cursor

specified font for tty1-6

specified size and scroolback for TTY 1-6

disable bluetooth booting

ALSA Settings:

build and install moc (music on console) by source code

precondiction:

moc config:

errors and solutions