关于 AxionL

 1
 2
 3
 4
 5
 6
 7
 8
 9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154

# 预设了三个变量，方便后续使用
$(hostname) = mail.example.com
$(primary_domain) = example.com
$(local_domains) = $(primary_domain)

# 如果要使用 nginx 反代，这里可以选择 tls off，但如此一来没法生成 dkim 密钥对
# 在之后检查时日志内会有安全警告，故推荐直接用 maddy 管理
# tls off
tls file /etc/letsencrypt/live/$(local_domains)/fullchain.pem /etc/letsencrypt/live/$(local_domains)/privkey.pem

# 数据用 SQLite3 存储较为简单、轻量
auth.pass_table local_authdb {
 table sql_table {
 driver sqlite3
 dsn credentials.db
 table_name passwords
 }
}

storage.imapsql local_mailboxes {
 driver sqlite3
 dsn imapsql.db
}

# ----------------------------------------------------------------------------
# SMTP endpoints + message routing

hostname $(hostname)

table.chain local_rewrites {
 optional_step regexp "(.+)\+(.+)@(.+)" "$1@$3"
 optional_step static {
 entry postmaster postmaster@$(primary_domain)
 }
 optional_step file /etc/maddy/aliases
}

msgpipeline local_routing {
 destination postmaster $(local_domains) {
 modify {
 replace_rcpt &local_rewrites
 }

 deliver_to &local_mailboxes
 }

 default_destination {
 reject 550 5.1.1 "User doesn't exist"
 }
}

# smtp 使用 25 号端口发送邮件
smtp tcp://[::]:25 {
 # tls self_signed
 limits {
 # Up to 20 msgs/sec across max. 10 SMTP connections.
 all rate 20 1s
 all concurrency 10
 }

 dmarc yes
 check {
 require_mx_record
 dkim # 若无则不检查
 spf
 }

 source $(local_domains) {
 reject 501 5.1.8 "Use Submission for outgoing SMTP"
 }
 default_source {
 destination postmaster $(local_domains) {
 deliver_to &local_routing
 }
 default_destination {
 reject 550 5.1.1 "User doesn't exist"
 }
 }
}

# 如果使用 nginx 反代则这里监听到本地端口即可 tcp://127.0.0.1:587
# 不使用则邮件客户端以 SSL/TLS 方式直接访问该地址
submission tls://[::]:465 {
 limits {
 # Up to 50 msgs/sec across any amount of SMTP connections.
 all rate 50 1s
 }

 auth &local_authdb

 source $(local_domains) {
 check {
 authorize_sender {
 prepare_email &local_rewrites
 user_to_email identity
 }
 }

 destination postmaster $(local_domains) {
 deliver_to &local_routing
 }
 default_destination {
 modify {
 dkim $(primary_domain) $(local_domains) default
 }
 deliver_to &remote_queue
 }
 }
 default_source {
 reject 501 5.1.8 "Non-local sender domain"
 }
}

target.remote outbound_delivery {
 limits {
 # Up to 20 msgs/sec across max. 10 SMTP connections
 # for each recipient domain.
 destination rate 20 1s
 destination concurrency 10
 }
 mx_auth {
 dane
 mtasts {
 cache fs
 fs_dir mtasts_cache/
 }
 local_policy {
 min_tls_level encrypted
 min_mx_level none
 }
 }
}

target.queue remote_queue {
 target &outbound_delivery

 autogenerated_msg_domain $(primary_domain)
 bounce {
 destination postmaster $(local_domains) {
 deliver_to &local_routing
 }
 default_destination {
 reject 550 5.0.0 "Refusing to send DSNs to non-local addresses"
 }
 }
}

# ----------------------------------------------------------------------------
# IMAP endpoints
# 同上，使用 nginx 反代则改为监听本地端口 tcp://127.0.0.1:143
imap tls://[::]:993 {
 auth &local_authdb
 storage &local_mailboxes
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

upstream maddy_imaps {
 # 指向本地 Maddy IMAP 监听服务端口
 server 127.0.0.1:143;
}

upstream maddy_smtps {
 # 指向本地 Maddy SMTP 服务监听端口
 server 127.0.0.1:587;
}

server {
 listen 993 ssl;
 proxy_pass maddy_imaps;
 ssl_certificate /etc/letsencrypt/live/<example.com>/fullchain.pem; # 换成自己的域名证书
 ssl_certificate_key /etc/letsencrypt/live/<example.com>/privkey.pem; # 换成自己的域名证书
 ssl_protocols SSLv3 TLSv1.1 TLSv1.2 TLSv1.3;
 ssl_ciphers HIGH:!aNULL:!MD5;
 ssl_session_timeout 4h;
 ssl_handshake_timeout 30s;
}

server {
 listen 465 ssl;
 proxy_pass maddy_smtps;
 ssl_certificate /etc/letsencrypt/live/<example.com>/fullchain.pem; # managed by Certbot
 ssl_certificate_key /etc/letsencrypt/live/<example.com>/privkey.pem; # managed by Certbot
 ssl_protocols SSLv3 TLSv1.1 TLSv1.2 TLSv1.3;
 ssl_ciphers HIGH:!aNULL:!MD5;
 ssl_session_timeout 4h;
 ssl_handshake_timeout 30s;
}

1
2
3
4
5
6
7

$ sudo -u maddy -s # 切换到 maddy 用户
$ maddyctl creds create <[email protected]> --password <YourPassword>
$ maddyctl creds list # 查看你刚创建的用户名
$ maddyctl imap-acct create <[email protected]> # 创建一个邮件储存账户
$ maddyctl imap-acct list # 查看刚创建的 imap 储存账户
$ maddyctl imap-mboxes list <[email protected]> # 可以看到该账户下有哪些分类
$ maddyctl imap-msgs list <[email protected]> <INBOX> # 可以查看当前账户对应分类接收到的邮件，一般收件在 INBOX 中

1
2
3

$(primary_domain) = example.com
$(secondary_domain) = example.org
$(local_domains) = $(primary_domain) $(secondary_domain)

1

tls file /etc/letsencrypt/live/$(primary_domain)/fullchain.pem /etc/letsencrypt/live/$(primary_domain)/privkey.pem /etc/letsencrypt/live/$(secondary_domain)/fullchain.pem /etc/letsencrypt/live/$(secondary_domain)/privkey.pem

1
2

$ sudo pacman -S qt5-base
$ sudo pacman -S qt5-doc # 可选

1

$ sudo pacman -S qtcreator

1

$ sudo pacman -S qt5-declarative

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

$ qmake -v
QMake version 3.1
Using Qt version 5.15.2 in /usr/lib

$ pacman -Qs qt5-declarative
local/qt5-declarative 5.15.2+kde+r29-1 (qt qt5)
 Classes for QML and JavaScript languages

$ qtcreator -version

Qt Creator 4.15.2 based on Qt 5.15.2

1

choco install -y qt5-default qtcreato

1
2
3
4
5
6
7

// 基本元素如下
Window { // 窗口一个大盒子
 Box { // 里面套个小盒子
 Title {} // 盒子里面有标题
 Description {} // 标题下面有描述
 }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

Window {
 Box {
 anchors.centerIn: parent // 居中对齐大盒子

 Title {
 anchors.horizontalCenter: parent.horizontalCenter // 水平对齐小盒子
 }

 Description {
 anchors.horizontalCenter: parent.horizontalCenter // 水平对齐小盒子
 }
 }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

Window {
 width: 960 // 窗口宽度
 height: 720 // 窗口高度

 Box {
 anchors.centerIn: parent
 implicitWidth: 360 // 宽度 360 单位（多数情况下理解为像素）
 implicitHeight: 128 // 高度 128 单位

 Title {
 anchors.horizontalCenter: parent.horizontalCenter // 水平对齐小盒子
 font.pixelSize: 24 // 标题一定要大
 }

 Box {
 visible: false // 一个看不见的盒子
 implicitHeight: 16 // 用于拉开标题和描述的间距
 }

 Description {
 anchors.horizontalCenter: parent.horizontalCenter // 水平对齐小盒子
 font.pixelSize: 16 // 精致的描述用小字
 }
 }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

import QtQuick 2.12
import QtQuick.Window 2.12
import QtQuick.Controls 2.12

Window {
 width: 960
 height: 720

 Rectangle {
 anchors.centerIn: parent
 implicitWidth: 360
 implicitHeight: 128
 color: "#ef7e9ceb"

 Text {
 id: title
 anchors.horizontalCenter: parent.horizontalCenter
 text: "这是一个大标题"
 font.pixelSize: 48
 }

 Rectangle {
 color: "transparent"
 implicitHeight: 16
 }

 Text {
 id: description
 anchors.horizontalCenter: parent.horizontalCenter
 text: "我吞下玻璃会伤身体"
 font.pixelSize: 24
 }
 }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

import QtQuick 2.12
import QtQuick.Window 2.12
import QtQuick.Controls 2.12
import QtQuick.Layouts 1.12

Window {
 width: 960
 height: 720

 Rectangle {
 anchors.centerIn: parent
 implicitWidth: 360
 implicitHeight: 128
 color: "#ef7e9ceb"

 ColumnLayout { // 一个上下布局的模板
 anchors.fill: parent // 沾满小盒子的空间
 spacing: 16 // 原先看不见的盒子用默认提供的间距属性实现

 Text {
 id: title
 Layout.alignment: Qt.AlignHCenter | Qt.AlignVCenter // 换成 Layout 下的居中对齐模式
 text: "这是一个大标题"
 font.pixelSize: 48
 }

 Text {
 id: description
 Layout.alignment: Qt.AlignHCenter | Qt.AlignVCenter
 text: "我吞下玻璃会伤身体"
 font.pixelSize: 24
 }
 }
 }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

import QtQuick.Controls 2.12

Rectangle {
 width: 16
 height: 16
 radius: 8 // 圆角半径
 color: "white" // 颜色
 border.width: 1 // 边框宽度
 border.color: "whitesmoke" // 边框颜色
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

import QtQuick.Controls 2.12
import QtGraphicalEffects 1.0 // 包含 DropShadow 效果

Rectangle {
 // ...

 layer.enabled: true
 layer.effect: DropShadow {
 horizontalOffset: 1 // 横向偏移
 verticalOffset: 1 // 纵向偏移
 radius: 16 // 阴影半径
 samples: 17 // 采样率（越高效果越好，性能消耗也增大）
 color: "#10000000" // ARGB（透明度，红，绿，蓝）
 }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

Rectangle {
 // ...

 rotation: 0 // 渐变角度
 gradient: Gradient {
 GradientStop {
 position: 0
 color: "#ef7e9ceb" // 起始颜色
 }

 // 可以添加多段

 GradientStop {
 position: 1
 color: "#c5000000" // 结束颜色
 }
 }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

Rectangle {
 id: background

 // ...

 Image {
 anchors.fill: background // 填充背景矩形
 source: "qrc:/background.png" // 图片资源
 fillMode: Image.PreserveAspectCrop // 填充方式
 z:-1 // 由于需要将渐变色作为滤镜效果，所以图片的层级下调
 }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

Rectangle {
 id: button
 implicitHeight: 48
 implicitWidth: 156
 radius: implicitHeight / 2
 border.color: "white" // 边框颜色
 color: "#ef7e9ceb" // 背景颜色

 Text {
 anchors.verticalCenter: parent.verticalCenter // 居中对齐
 anchors.horizontalCenter: parent.horizontalCenter

 text: "初等記憶體" // 文字内容
 color: "white" // 文字颜色
 }

 // 大小和位置覆盖全按钮的鼠标动作区域
 MouseArea {
 anchors.fill: parent
 Layout.alignment: Qt.AlignHCenter | Qt.AlignVCenter
 hoverEnabled: true // 允许响应鼠标停留

 onEntered: {
 parent.color = Qt.lighter(button.color, 0.8); // 进入颜色变深
 parent.opacity = 1.0; // 不透明
 }

 onExited: {
 parent.color = Qt.lighter(button.color, 0.9); // 退出颜色变浅
 parent.opacity = 0.7;
 }

 onClicked: {
 parent.color = Qt.lighter(button.color, 1.1); // 点击颜色变亮
 }
 }
}

1
2
3
4
5
6
7

Rectangle {
 // ...
 property string buttonColor: "#ef7e9ceb"
 property string buttonText

 color: buttonColor // 引用属性值
}

1
2
3
4
5
6
7
8
9

Rectangle {
 property string url: "https://axionl.me"

 text: "ClickMe!"

 onClicked: {
 openURL(url); // 我们需要实现一个形如这样的方法
 }
}

1
2
3
4
5
6
7
8
9

Rectangle {
 property string url: "https://axionl.me"

 text: "ClickMe!"

 onClicked: {
 Qt.openUrlExternally(url); // 使用默认提供的方法
 }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

// my_button.hpp
class MyButton : public QObject
{
 Q_OBJECT
public:
 explicit MyButton(QObject *parent = nullptr) {};

 Q_INVOKABLE void openUrl(const QUrl& url) {
 bool err = QDesktopServices::openUrl(url);
 if (err) {
 qDebug() << "Failed to open url";
 }
 };
};

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

// main.cpp
import "my_button.hpp"

int main(int argc, char *argv[])
{
 QGuiApplication app(argc, argv);

 // ...

 // 声明自定义对象
 qmlRegisterType<MyButton>("MyApp", 1, 0, "MyButton");

 // ...

 QQmlApplicationEngine engine;

 return app.exec();
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

import MyApp 1.0

Item {
 // 以对象名为组件名
 MyButton {
 id: myButton // 实例化对象
 }

 Rectangle {
 property string url: "https://axionl.me"

 text: "ClickMe!"

 onClicked: {
 myButton.openUrl(url); // 使用自己实现的方法
 }
 }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

// main.cpp
import "my_button.hpp"

int main(int argc, char *argv[])
{
 QGuiApplication app(argc, argv);

 // ...


 // 实例化一个对象
 MyButton my_button;

 // ...

 QQmlApplicationEngine engine;

 // 传入对象引用
 engine.rootContext()->setContextProperty(QStringLiteral("myButtonObject"), &my_button); // 全局使用时，设置唯一名称

 return app.exec();
}

1
2
3
4
5
6
7
8
9

Rectangle {
 property string url: "https://axionl.me"

 text: "ClickMe!"

 onClicked: {
 myButtonObjecton.openUrl(url); // 直接调用对象方法
 }
}

1
2
3

if not contains $PATH $USER
 export (/usr/lib/systemd/user-environment-generators/30-systemd-environment-d-generator)
end

1

$ kwriteconfig5 --file startkderc --group General --key systemdBoot true

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

$ systemctl --user set-property app-telegramdesktop-b9317feb02e54b4c93dd1c97a06711a4.scope MemoryMax=1500M MemoryLimit=1G
$ systemctl --user status app-telegramdesktop-b9317feb02e54b4c93dd1c97a06711a4.scope
 ● app-telegramdesktop-b9317feb02e54b4c93dd1c97a06711a4.scope - Telegram Desktop
 Loaded: loaded (/usr/share/applications/telegramdesktop.desktop; transient)
 Transient: yes
 Drop-In: /run/user/1000/systemd/transient/app-telegramdesktop-b9317feb02e54b4c93dd1c97a06711a4.scope.d
 └─50-MemoryLimit.conf, 50-MemoryMax.conf
 Active: active (running) since Tue 2021-02-23 21:02:37 CST; 5min ago
 Tasks: 44 (limit: 18425)
 Memory: 351.0M (max: 1.4G limit: 1.0G)
 CPU: 20.056s
 CGroup: /user.slice/user-1000.slice/user@1000.service/app.slice/app-telegramdesktop-b9317feb02e54b4c93dd1c97a06711a4.scope
 └─15363 /usr/bin/telegram-desktop --

1

$ curl -sfL https://git.io/chezmoi | sh

1

$ chezmoi init --apply

1

$ chezmoi completion fish > ~/.config/fish/completions/chezmoi.fish

1
2
3
4
5
6

$ chezmoi add .nanorc # 添加文件
$ chezmoi add -x .config/fish/functions/ # 添加文件夹
$ chezmoi add -xa .config/fish/functions # 递归添加文件夹和子目录下的全部内容
$ chezmoi add -T .xprofile # 添加临时内容
$ chezmoi add .tmux.conf --follow # 添加软链接对应的原始内容，而不是软链接符号
$ chezmoi managed # 列出所管理的内容路径

1

$ chezmoi edit ~/.bashrc --apply

1
2

$ chezmoi source pull -- --rebase && chezmoi diff
$ chezmoi apply --verbose

1
2

$ chezmoi source add .nanorc
$ chezmoi source commit -- -m "Initial commit"

1
2
3
4
5

# ~/.config/chezmoi/chezmoi.toml

[sourceVCS]
 autoCommit = true
 autoPush = false

1

$ chezmoi archive --output=dotfiles.tar

1
2
3

[user]
 name = axionl
 email = axionl@example.com

1
2
3
4

# ~/.local/share/chezmoi/dot_gitconfig.tmpl
[user]
 name = "{{ .name }}"
 email = "{{ .email }}"

1

$ chezmoi add --autotemplate ~/.gitconfig

1
2
3
4
5
6
7
8

# ~/.local/share/chezmoi/dot_gitconfig.tmpl
{{ if eq .chezmoi.os "linux" -}}
[core]
 editor = nvim
{{ else }}
[core]
 editor = {{ .github.editor }}
{{ end -}}

1
2

# symlink_dot_bashrc.tmpl
.bashrc_{{ .chezmoi.os }}

1
2
3
4
5
6
7

# .chezmoiignore
{{ if ne .chezmoi.os "darwin" }}
.bashrc_darwin
{{ end }}
{{ if ne .chezmoi.os "linux" }}
.bashrc_linux
{{ end }}

1
2
3
4
5

# ~/.config/chezmoi/chezmoi.toml
[data]

[data.github]
editor = "nano"

1
2

$ chezmoi execute-template '{{- .github.editor -}}'
nano⏎

1
2
3
4

# ~/test.tmpl
{{- $email := promptString "email" -}}
[data]
 email = "{{ $email }}"

1
2
3
4

$ chezmoi execute-template --init --promptString email=[email protected] < ~/test.tmpl

[data]
 email = "[email protected]"

1
2
3
4

$ gpg --list-public-keys
pub ed25519 2019-07-04 [SC] [expires: 2024-07-02]
 1FDBDCE2D26BD8F100EE2E73B1B9AAD8BE7E7326
uid [ultimate] ArielAxionL <[email protected]>

1
2
3

# ~/.config/chezmoi/chezmoi.toml
[gpg]
 recipient = "ArielAxionL"

1

$ chezmoi add --encrypt test.toml

1
2
3
4

# ~/.config/chezmoi/chezmoi.toml

[gpg]
 symmetric = true

1
2

$ chezmoi secret keyring set --service=github --user=<github-user>
Password: <github-token>

1
2
3
4
5

# ~/.local/share/chezmoi/dot_gitconfig.tmpl

[github]
 user = "{{ .github.user }}"
 token = "{{ keyring "github" .github.user }}"

1
2
3
4
5

# ~/.config/chezmoi/chezmoi.toml

[keepassxc]
 args = ["--key-file", "/path/to/your/key"]
 database = "/path/to/your/kdbx"

1

$ chezmoi execute-template '{{ (keepassxc "<YourEntry>").Password }}'

1

$ chezmoi execute-template '{{ keepassxcAttribute "VPS Keyring" "public-key" }}'

1

toolkit.legacyUserProfileCustomizations.stylesheets = true

1

browser.tabs.tabClipWidth = 83

1
2

media.ffmpeg.vaapi.enabled = true
media.ffvpx.enabled = false

1
2

devtools.editor.tabsize = 4
devtools.debugger.remote-enabled = true

1

accessibility.typeaheadfind.enablesound = false

1
2

$ LC_ALL=C lscpu | grep Virtualization
Virtualization: AMD-V

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

$ zgrep CONFIG_KVM /proc/config.gz
CONFIG_KVM_GUEST=y
CONFIG_KVM_MMIO=y
CONFIG_KVM_ASYNC_PF=y
CONFIG_KVM_VFIO=y
CONFIG_KVM_GENERIC_DIRTYLOG_READ_PROTECT=y
CONFIG_KVM_COMPAT=y
CONFIG_KVM_XFER_TO_GUEST_WORK=y
CONFIG_KVM=m
CONFIG_KVM_INTEL=m
CONFIG_KVM_AMD=m # 可以看到有该模块
CONFIG_KVM_AMD_SEV=y
CONFIG_KVM_MMU_AUDIT=y

1
2
3
4
5

$ lsmod |grep kvm
kvm_amd 114688 8
ccp 118784 1 kvm_amd
kvm 933888 1 kvm_amd
irqbypass 16384 1 kvm

1
2

$ sudo modprobe kvm
$ sudo modprobe kvm_amd # 对应你的 CPU 类型

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

$ zgrep VIRTIO /proc/config.gz
CONFIG_BLK_MQ_VIRTIO=y
CONFIG_VIRTIO_VSOCKETS=m
CONFIG_VIRTIO_VSOCKETS_COMMON=m
CONFIG_NET_9P_VIRTIO=m
CONFIG_VIRTIO_BLK=m
CONFIG_SCSI_VIRTIO=m
CONFIG_VIRTIO_NET=m
CONFIG_VIRTIO_CONSOLE=m
CONFIG_HW_RANDOM_VIRTIO=m
CONFIG_DRM_VIRTIO_GPU=m
CONFIG_VIRTIO=y
CONFIG_VIRTIO_MENU=y
CONFIG_VIRTIO_PCI=m
CONFIG_VIRTIO_PCI_LEGACY=y
CONFIG_VIRTIO_VDPA=m
CONFIG_VIRTIO_PMEM=m
CONFIG_VIRTIO_BALLOON=m
CONFIG_VIRTIO_MEM=m
CONFIG_VIRTIO_INPUT=m
CONFIG_VIRTIO_MMIO=m
CONFIG_VIRTIO_MMIO_CMDLINE_DEVICES=y
CONFIG_VIRTIO_DMA_SHARED_BUFFER=m
CONFIG_RPMSG_VIRTIO=m
CONFIG_VIRTIO_FS=m
CONFIG_CRYPTO_DEV_VIRTIO=m

1

$ sudo pacman -S qemu

1

$ sudo dmesg | grep -i -e DMAR -e IOMMU

1

$ sudo pacman -S libvirt virt-manager dnsmasq edk2-ovmf

1

$ sudo usermod -aG libvirt <YourUserName>

1
2
3
4
5

unix_sock_group = "libvirt"
unix_sock_ro_perms = "0777" # set to 0770 to deny on-group libvirt users
unix_sock_rw_perms = "0770"
auth_unix_ro = "none"
auth_unix_rw = "none"

1

$ sudo echo 'net.ipv4.ip_forward = 1' >> /etc/sysctl.d/00-network.conf

1

$ sudo systemctl enable --now libvirtd.service

1

$ sudo cfdisk /dev/vda

1
2
3
4

$ sudo mkfs.fat -F32 /dev/vda1
$ sudo mkswap /dev/vda2
$ sudo swapon
$ sudo mkfs.xfs -L root /dev/vda3

1
2
3

$ sudo mount /dev/vda3 /mnt
$ sudo mkdir -p /mnt/boot
$ sudo mount /dev/vda1 /mnt/boot

1
2

$ sudo nixos-generate-config --root /mnt
$ sudo nano /mnt/etc/nixos/configuration.nix

1

$ sudo nix-channel --add https://mirrors.tuna.tsinghua.edu.cn/nix-channels/nixos-20.09 nixos

1
2
3
4
5
6
7
8

$ sudo nixos-install
...
setting root password...
Enter new UNIX password: ***
Retype new UNIX password: ***

$ sudo umount -r /mnt
$ reboot

1

$ sudo bootctl status

 1
 2
 3
 4
 5
 6
 7
 8
 9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116

# Edit this configuration file to define what should be installed on
# your system. Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

{ config, pkgs, ... }:

{
 imports =
 [ # Include the results of the hardware scan.
 ./hardware-configuration.nix
 ];

 # Use the systemd-boot EFI boot loader.
 boot.loader.systemd-boot.enable = true;
 boot.loader.efi.canTouchEfiVariables = true;

 networking.hostName = "axionl"; # 设置 hostname.
 # networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.

 # Set your time zone.
 time.timeZone = "Asia/Shanghai"; # 设置时区

 # The global useDHCP flag is deprecated, therefore explicitly set to false here.
 # Per-interface useDHCP will be mandatory in the future, so this generated config
 # replicates the default behavior.
 networking.useDHCP = false;
 networking.interfaces.enp1s0.useDHCP = false;
 networking.networkmanager.enable = true; # 启用 NetworkManager 替代默认的 DHCP

 # Configure network proxy if necessary
 networking.proxy.default = "http://192.168.122.1:8888"; # 设置一个外部代理（可选）
 # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";

 # Select internationalisation properties.
 i18n.defaultLocale = "en_US.UTF-8"; # 默认语言环境
 # console = {
 # font = "Lat2-Terminus16";
 # keyMap = "us";
 # };



 # Configure keymap in X11
 services.xserver.layout = "us"; # 设置键盘布局
 # services.xserver.xkbOptions = "eurosign:e";

 # Enable CUPS to print documents.
 services.printing.enable = false; # 启用打印服务（不需要可禁止）

 # Enable sound.
 sound.enable = true; # 允许声音
 hardware.pulseaudio.enable = true;

 # Enable touchpad support (enabled default in most desktopManager).
 services.xserver.libinput.enable = true; # 允许触摸板

 # Define a user account. Don't forget to set a password with ‘passwd’.
 # 创建用户并添加到用户组
 users.users.axionl = {
 isNormalUser = true;
 extraGroups = [ "wheel" "networkmanager" ]; # Enable ‘sudo’ for the user.
 shell = pkgs.fish; # 指定终端（默认为 bash）
 };

 # List packages installed in system profile. To search, run:
 # $ nix search wget
 # 在系统层面安装软件包
 environment.systemPackages = with pkgs; [
 htop
 neofetch
 fish
 spice-vdagent
 virglrenderer
 ];

 # Some programs need SUID wrappers, can be configured further or are
 # started in user sessions.
 # programs.mtr.enable = true;
 # programs.gnupg.agent = {
 # enable = true;
 # enableSSHSupport = true;
 # };

 # List services that you want to enable:

 # Enable the OpenSSH daemon.
 # services.openssh.enable = true;

 # Open ports in the firewall.
 # networking.firewall.allowedTCPPorts = [ ... ];
 # networking.firewall.allowedUDPPorts = [ ... ];
 # Or disable the firewall altogether.
 # networking.firewall.enable = false;

 # This value determines the NixOS release from which the default
 # settings for stateful data, like file locations and database versions
 # on your system were taken. It‘s perfectly fine and recommended to leave
 # this value at the release version of the first install of this system.
 # Before changing this value read the documentation for this option
 # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
 system.stateVersion = "20.09"; # Did you read the comment?

 # X Windows Server
 # 启动 X 显示服务
 services.xserver.enable = true;
 # services.qemuGuest.enable = true;
 # services.spice-vdagentd.enable = true;
 # 允许 SDDM 作为窗口管理器
 services.xserver.displayManager.sddm.enable = true;
 # 安装 Plasma KDE 作为桌面环境
 services.xserver.desktopManager.plasma5.enable = true;

 # Packages
 # 允许第三方闭源软件包
 nixpkgs.config.allowUnfree = true;
}

1

$ sudo nixos-rebuild switch --upgrade

1
2
3
4
5

$ nix search <软件包名称> # 搜索
$ nix-env -i <软件包名称> # 安装
$ nix-env -qa # 列出可安装的包
$ nix-env -e <软件包名称> # 卸载软件包
$ nix-env --rollback # 软件包回滚

1
2
3
4
5
6
7
8
9

syntax = "proto3";
option go_package = "example.com/user/grpcGoExample"

message HelloMessage {} // 公共消息体，未包含任何字段

/* 通讯服务声明，类似于我们常说的接口 */
service Greeter {
 rpc SayHello(HelloMessage) returns (HelloMessage);
}

1
2
3
4
5

message Person {
 string name = 1;
 int32 id = 2;
 bool has_ponycopter = 3;
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

import (
 ...
 pb "example.com/user/grpcGoExample"
)

// 具体方法实现
func (g *Greeter) sayHello() {
 // 生成上下文
 ctx, cancel := context.WithTimeout(context.Background(), time.Second)
 defer cancel()

 // 获取服务端响应，在执行这条指令后可以看到进入了服务端对应的方法
 response, err := g.client.SayHello(ctx, &pb.HelloMessage{})
 if err != nil {
 log.Fatalf("Failed to get the response: %v", err)
 }
 if response != nil {
 fmt.Print("Hello Server")
 }
}

func main() {
 // 本地临时创建一个不安全的链接(socks5)
 const Address = "localhost:50051"
 conn, err := grpc.Dial(Address, grpc.WithInsecure(), grpc.WithBlock())
 if err != nil {
 log.Fatalf("Failed to connect: %v", err)
 }
 defer conn.Close()

 var client = pb.NewGreeterClient(conn)
 greeter := Greeter{client: client}
 greeter.sayHello() // 调用方法
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

import (
 ...
 pb "example.com/user/grpcGoExample"
)

type server struct {
 pb.UnimplementedGreeterServer
}

// 方法具体实现
func (s *server) SayHello(ctx context.Context, message *pb.HelloMessage) (*pb.HelloMessage, error) {
 // 请求陷入该方法后输出字符串，表示服务器已经收到该指令
 log.Println("Hello Client!")

 // 返回响应
 return &pb.HelloMessage{}, nil
}

func main() {
 // 监听一个本地端口
 lis, err := net.Listen("tcp", "0.0.0.0:50051")
 if err != nil {
 log.Fatalf("failed to listen: %v", err)
 } else {
 log.Printf("Listen on: %v...", Address)
 }

 // 创建服务端
 s := grpc.NewServer()
 pb.RegisterGreeterServer(s, &server{})

 if err := s.Serve(lis); err != nil {
 log.Fatalf("failed to serve: %v", err)
 }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

message PersonalInfo {
 int32 id = 1; 
 string name = 2;
 int32 score = 3;
 enum Hobby {
 GAMES = 1;
 MUSIC = 2;
 }
 Hobby hobby = 4;
}

message PersonalResponse {
 string msg = 1;
}

message ClassInfo {
 repeated PersonalInfo c_info = 1;
}

service SearchInfo {
 rpc Add(stream PersonalInfo) returns (PersonalResponse);
}

1

$ protoc --plugin=protoc-gen-go-grpc --go_out=. --go-grpc_out=. -I=. info.proto

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

# Find Protobuf
find_package(Protobuf REQUIRED) # 如果没有需要自行安装

# Find Generator Executable # 找到两个用于生成库文件的可执行文件
find_program(PROTOBUF_PROTOC_EXECUTABLE protoc)
find_program(GRPC_CC_PLUGIN_EXECUTABLE grpc_cpp_plugin) # 对应所需要生成的语言

# Set Proto File Name
list(APPEND PROTO_NAME_LISTS
 "api"
 )

# Generate gRPC and protobuf Sources
foreach(PROTO_NAME ${PROTO_NAME_LISTS})
 set(GRPC_SOURCE "${CMAKE_CURRENT_BINARY_DIR}/${PROTO_NAME}.grpc.pb.cc")
 set(GRPC_HEADER "${CMAKE_CURRENT_BINARY_DIR}/${PROTO_NAME}.grpc.pb.h")
 set(PB_SOURCE "${CMAKE_CURRENT_BINARY_DIR}/${PROTO_NAME}.pb.cc")
 set(PB_HEADER "${CMAKE_CURRENT_BINARY_DIR}/${PROTO_NAME}.pb.h")
 set(PROTO_DIR "${CMAKE_SOURCE_DIR}/misc/")
 set(PROTO_FILE "${PROTO_DIR}/${PROTO_NAME}.proto")

 add_custom_command(
 OUTPUT "${GRPC_SOURCE}" "${GRPC_HEADER}" "${PB_SOURCE}" "${PB_HEADER}"
 COMMAND "${PROTOBUF_PROTOC_EXECUTABLE}"
 ARGS
 --grpc_out="${CMAKE_CURRENT_BINARY_DIR}"
 --cpp_out="${CMAKE_CURRENT_BINARY_DIR}"
 -I="${PROTO_DIR}"
 --plugin=protoc-gen-grpc="${GRPC_CC_PLUGIN_EXECUTABLE}"
 "${PROTO_FILE}"
 DEPENDS "${PROTO_FILE}")

 list(APPEND GRPC_HEADERS "${GRPC_HEADER}")
 list(APPEND GRPC_SOURCES "${GRPC_SOURCE}")

 list(APPEND PROTO_HEADERS "${PB_HEADER}")
 list(APPEND PROTO_SOURCES "${PB_SOURCE}")
endforeach()

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

syntax = "proto3";

package v2ray.core;
option csharp_namespace = "V2Ray.Core";
option go_package = "v2ray.com/core";
option java_package = "com.v2ray.core";
option java_multiple_files = true;

import "common/serial/typed_message.proto";
import "transport/config.proto";
...

1
2
3
4
5
6

message TypedMessage {
 // The name of the message type, retrieved from protobuf API.
 string type = 1;
 // Serialized proto message.
 bytes value = 2;
}

1
2

$ cd dnsmasq-china-list
$ make smartdns SERVER=china

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

 # （可选）引入额外的规则列表，用绝对路径
conf-file /etc/smartdns/accelerated-domains.china.smartdns.conf
conf-file /etc/smartdns/apple.china.smartdns.conf
conf-file /etc/smartdns/google.china.smartdns.conf

# 本地监听端口
bind [::]:53

# 缓存大小
cache-size 4096

# 重启时读取之前的缓存
cache-persist yes

# 缓存文件存放位置
cache-file /var/cache/smartdns.cache

# 传统 UDP 协议（以阿里 DNS 为例）
server 223.5.5.5

# DNS Over TLS （以 CloudFlare DNS 为例）
server-tls 1.0.0.1

# DNS Over Https (以烧饼 DNS 为例)
server-https https://doh.dns.sb/dns-query -group china -group example

1
2
3

# smartdns -c smartdns.conf
or
# systemctl enable --now smartdns.service

1
2
3
4

$ cat /etc/resolv.conf

# DNS managed by SmartDNS
nameserver 127.0.0.1

1
2
3
4

...
Use this token to access the HTTP API:
`<1145141919810:TheWholeSentenceIsToken>`
Keep your token secure and store it safely, ...