AlliotHexohttps://wiki.iots.vip/All rights reserved 2026, AlliotAlliot's Wiki2026-07-19T12:43:23.364ZAlliothttps://wiki.iots.vip/Clippings/Dev%20Startup%20Kit/2026-07-18T16:00:00.000ZA tool that connects everyday work into one space. It gives you and your teams AI tools—search, writing, note-taking—inside an all-in-one, flexible workspace.tittle2026-07-19T12:43:23.364ZAlliot
未测试：
# ---------------------------- # clone-ec2.sh # Clone an EC2 instance via AMI + run-instances (no jq required). # # Usage: # ./clone-ec2.sh i-0123456789abcdef0 "clone-ec2" [--reboot] [--copy-eip] # # Notes: # - By default uses --no-reboot when creating AMI (faster, but may be inconsistent for DB workloads). # - If you want filesystem consistency, pass --reboot to allow reboot during AMI creation. # ----------------------------
SRC_INSTANCE_ID="${1:-}" NEW_NAME="${2:-}"
shift || true shift || true
ALLOW_REBOOT="false" COPY_EIP="false"
while [[ $# -gt 0 ]]; do case "$1" in --reboot) ALLOW_REBOOT="true"; shift ;; --copy-eip) COPY_EIP="true"; shift ;; *) echo "Unknown option: $1" exit 1 ;; esac done
if [[ -z "${SRC_INSTANCE_ID}" || -z "${NEW_NAME}" ]]; then echo "Usage: $0 <source-instance-id> <new-instance-name> [--reboot] [--copy-eip]" exit 1 fi
# Instance shutdown behavior SHUTDOWN_BEHAVIOR="$(aws ec2 describe-instance-attribute --instance-id "$SRC_INSTANCE_ID" \ --attribute instanceInitiatedShutdownBehavior \ --query "InstanceInitiatedShutdownBehavior.Value" --output text 2>/dev/null || true)" if [[ "$SHUTDOWN_BEHAVIOR" == "None" || -z "$SHUTDOWN_BEHAVIOR" ]]; then SHUTDOWN_BEHAVIOR="stop"; fi
# Termination protection DISABLE_API_TERMINATION="$(aws ec2 describe-instance-attribute --instance-id "$SRC_INSTANCE_ID" \ --attribute disableApiTermination \ --query "DisableApiTermination.Value" --output text 2>/dev/null || true)" if [[ "$DISABLE_API_TERMINATION" == "None" || -z "$DISABLE_API_TERMINATION" ]]; then DISABLE_API_TERMINATION="False"; fi
# CPU options (may be None depending on instance type) CPU_CORES="$(aws ec2 describe-instances --instance-ids "$SRC_INSTANCE_ID" \ --query "Reservations[0].Instances[0].CpuOptions.CoreCount" --output text 2>/dev/null || true)" CPU_THREADS="$(aws ec2 describe-instances --instance-ids "$SRC_INSTANCE_ID" \ --query "Reservations[0].Instances[0].CpuOptions.ThreadsPerCore" --output text 2>/dev/null || true)"
# Placement group (optional) PLACEMENT_GROUP="$(aws ec2 describe-instances --instance-ids "$SRC_INSTANCE_ID" \ --query "Reservations[0].Instances[0].Placement.GroupName" --output text 2>/dev/null || true)" if [[ "$PLACEMENT_GROUP" == "None" ]]; then PLACEMENT_GROUP=""; fi
# Elastic IP association info (optional) SRC_PUBLIC_IP="$(aws ec2 describe-instances --instance-ids "$SRC_INSTANCE_ID" \ --query "Reservations[0].Instances[0].PublicIpAddress" --output text 2>/dev/null || true)" if [[ "$SRC_PUBLIC_IP" == "None" ]]; then SRC_PUBLIC_IP=""; fi
echo "[3/7] Waiting AMI to become available..." aws ec2 wait image-available --image-ids "$AMI_ID" echo " AMI is available."
echo "[4/7] Copying instance tags to AMI (best effort)..." # Copy tags from source instance to AMI (excluding AWS-reserved tags if any) # We will also set Name tag on the new instance (not AMI) later. TAG_SPEC_AMI="$(aws ec2 describe-tags \ --filters "Name=resource-id,Values=${SRC_INSTANCE_ID}" \ --query "Tags[?Key!='Name'].{Key:Key,Value:Value}" --output json 2>/dev/null || echo "[]")"
# Tag the AMI with source tags (excluding Name), and add a helpful tag aws ec2 create-tags --resources "$AMI_ID" --tags Key=ClonedFrom,Value="$SRC_INSTANCE_ID" >/dev/null 2>&1 || true # Apply source tags if any # aws ec2 create-tags expects flat list; easiest is loop (no jq) TAG_KEYS="$(aws ec2 describe-tags --filters "Name=resource-id,Values=${SRC_INSTANCE_ID}" \ --query "Tags[?Key!='Name'].Key" --output text 2>/dev/null || true)" if [[ -n "$TAG_KEYS" && "$TAG_KEYS" != "None" ]]; then while read -r K; do [[ -z "$K" ]] && continue V="$(aws ec2 describe-tags --filters "Name=resource-id,Values=${SRC_INSTANCE_ID}" "Name=key,Values=${K}" \ --query "Tags[0].Value" --output text 2>/dev/null || true)" [[ -z "$V" || "$V" == "None" ]] && continue aws ec2 create-tags --resources "$AMI_ID" --tags "Key=${K},Value=${V}" >/dev/null 2>&1 || true done <<< "$(printf '%s\n' $TAG_KEYS)" fi
echo "[5/7] Launching new instance from AMI..." RUN_ARGS=(--image-id "$AMI_ID" --instance-type "$INSTANCE_TYPE" --subnet-id "$SUBNET_ID" --security-group-ids $SEC_GRP_IDS)
if [[ -n "$KEY_NAME" ]]; then RUN_ARGS+=(--key-name "$KEY_NAME") fi
if [[ -n "$IAM_PROFILE_ARN" ]]; then # run-instances requires Name or Arn; use Arn to avoid parsing. RUN_ARGS+=(--iam-instance-profile "Arn=${IAM_PROFILE_ARN}") fi
if [[ -n "$USER_DATA" ]]; then RUN_ARGS+=(--user-data "$USER_DATA") fi
if [[ "$MONITORING_ENABLED" == "enabled" ]]; then RUN_ARGS+=(--monitoring "Enabled=true") fi
if [[ "$EBS_OPTIMIZED" == "True" ]]; then RUN_ARGS+=(--ebs-optimized) fi
if [[ -n "$PLACEMENT_GROUP" ]]; then RUN_ARGS+=(--placement "GroupName=${PLACEMENT_GROUP}") fi
# CPU options (only if present) if [[ "$CPU_CORES" != "None" && "$CPU_THREADS" != "None" && -n "$CPU_CORES" && -n "$CPU_THREADS" ]]; then RUN_ARGS+=(--cpu-options "CoreCount=${CPU_CORES},ThreadsPerCore=${CPU_THREADS}") fi
# Tag the new instance: # - Copy all source tags (excluding Name) + set Name to NEW_NAME + ClonedFrom # Use tag-specifications with fixed set: Name + ClonedFrom, then apply the rest with create-tags after instance created. RUN_ARGS+=(--tag-specifications "ResourceType=instance,Tags=[{Key=Name,Value=${NEW_NAME}},{Key=ClonedFrom,Value=${SRC_INSTANCE_ID}}]")
man page says that you can use -e option to convert private and public keys to other formats, that seems to be wrong. Instead you can use -p option to request changing the password but not actually setting the password.
ssh-keygen -p -f id_rsa -m pem
将 PEM 转换为 OpenPGP
Monkeysphere project includes a pem2openpgp command that can be used to import ssh private keys to gnupg keyring.
After importing you can use normal gpg --edit-key command to change parameters on this key. GnuPG 2.1 also allows you to move the imported key to be one of your subkeys for authentication. https://security.stackexchange.com/a/160847
@echo off pushd %~dp0 REM Enable ANSI escape codes in Windows 10 (Version 1511 or later) for /f "tokens=4 delims=[] " %%iin ('ver') dosetver=%%i if%ver%geq10.0.10586 ( reg add HKCU\Console /v VirtualTerminalLevel /t REG_DWORD /d 1 /f >nul2>&1 ) REM Define language support (default to English) setlocal enabledelayedexpansion set LANG=en REM ANSI color codes set RED=[31m set GREEN=[32m set YELLOW=[33m set NC=[0m REM Check if the current directory is a Git repository ifnotexist .git ( GOTO NOT_GIT ) REM Check if Git is installed where /q git.exe if%ERRORLEVEL%EQU0 ( GOTO PULL ) GOTO MISS_GIT
:PULL REM Configure Git to use HTTPS instead of other protocols call git config --local url."https://".insteadOf git:// call git config --local url."https://github.com/".insteadOf git@github.com: call git config --local url."https://".insteadOf ssh:// REM Pull the latest changes with rebase call git pull --rebase --autostash if%ERRORLEVEL%neq0 ( if "%LANG%"=="en" ( echo [!RED!]Error updating repository[!NC!] ) else ( echo [!RED!]更新仓库时出错[!NC!] ) ) else ( if "%LANG%"=="en" ( echo [!GREEN!]Repository updated successfully[!NC!] ) else ( echo [!GREEN!]仓库更新成功[!NC!] ) ) GOTO END
:MISS_GIT if "%LANG%"=="en" ( echo [!RED!]Please install Git to update the repository[!NC!] ) else ( echo [!RED!]请安装 Git 以更新仓库[!NC!] ) GOTO END
:NOT_GIT if "%LANG%"=="en" ( echo [!YELLOW!]This script can only update if you clone the repository using Git. Example:[!NC!] echo [!YELLOW!]git clone https://github.com/example/repo.git[!NC!] ) else ( echo [!YELLOW!]此脚本只能在使用 Git 克隆仓库时更新。例如：[!NC!] echo [!YELLOW!]git clone https://github.com/example/repo.git[!NC!] ) GOTO END
#!/bin/bash # Define language support (default to English) LANG="en" # ANSI color codes RED='\033[0;31m' GREEN='\033[0;32m' YELLOW='\033[1;33m' NC='\033[0m' # No Color # Check if Git is installed if ! command -v git &> /dev/null then if [ "$LANG" == "en" ]; then echo -e "${RED}Please install Git to update the repository${NC}" else echo -e "${RED}请安装 Git 以更新仓库${NC}" fi exit 1 fi # Check if the current directory is a Git repository if [ -d ".git" ] then # Configure Git to use HTTPS instead of other protocols git config --local url."https://".insteadOf git:// git config --local url."https://github.com/".insteadOf git@github.com: git config --local url."https://".insteadOf ssh://
# Pull the latest changes with rebase if git pull --rebase --autostash; then if [ "$LANG" == "en" ]; then echo -e "${GREEN}Repository updated successfully${NC}" else echo -e "${GREEN}仓库更新成功${NC}" fi else if [ "$LANG" == "en" ]; then echo -e "${RED}Error updating repository${NC}" else echo -e "${RED}更新仓库时出错${NC}" fi fi else if [ "$LANG" == "en" ]; then echo -e "${YELLOW}This script can only update if you clone the repository using Git. Example:${NC}" echo -e "${YELLOW}git clone https://github.com/example/repo.git${NC}" else echo -e "${YELLOW}此脚本只能在使用 Git 克隆仓库时更新。例如：${NC}" echo -e "${YELLOW}git clone https://github.com/example/repo.git${NC}" fi fi
安装报错误的话比如：“C compiler cc is not found”，这个就是缺少编译环境，安装一下就可以了 yum -y install gcc make gcc-c++ openssl-devel
如果没有error信息，就可以执行下边的安装了：
1 2
make make install
Nginx 测试
运行下面命令会出现两个结果，一般情况nginx会安装在/usr/local/nginx目录中
1 2 3 4 5
cd /usr/local/nginx/sbin/ ./nginx -t
# nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok # nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
brew install nginx # Updating Homebrew... # ==> Auto-updated Homebrew! # Updated 2 taps (homebrew/core, homebrew/cask). # ==> Updated Formulae # ==> Installing dependencies for nginx: openssl, pcre # ==> Installing nginx dependency: openssl # ==> Downloading https://homebrew.bintray.com/bottles/openssl-1.0.2o_1.high_sierra.bottle.tar.gz # ######################################################################## 100.0% # ==> Pouring openssl-1.0.2o_1.high_sierra.bottle.tar.gz # ==> Caveats # A CA file has been bootstrapped using certificates from the SystemRoots # keychain. To add additional certificates (e.g. the certificates added in # the System keychain), place .pem files in # /usr/local/etc/openssl/certs # # and run # /usr/local/opt/openssl/bin/c_rehash # # This formula is keg-only, which means it was not symlinked into /usr/local, # because Apple has deprecated use of OpenSSL in favor of its own TLS and crypto libraries. # # If you need to have this software first in your PATH run: # echo 'export PATH="/usr/local/opt/openssl/bin:$PATH"' >> ~/.zshrc # # For compilers to find this software you may need to set: # LDFLAGS: -L/usr/local/opt/openssl/lib # CPPFLAGS: -I/usr/local/opt/openssl/include # For pkg-config to find this software you may need to set: # PKG_CONFIG_PATH: /usr/local/opt/openssl/lib/pkgconfig # # ==> Summary # 🍺 /usr/local/Cellar/openssl/1.0.2o_1: 1,791 files, 12.3MB # ==> Installing nginx dependency: pcre # ==> Downloading https://homebrew.bintray.com/bottles/pcre-8.42.high_sierra.bottle.tar.gz # ######################################################################## 100.0% # ==> Pouring pcre-8.42.high_sierra.bottle.tar.gz # 🍺 /usr/local/Cellar/pcre/8.42: 204 files, 5.3MB # ==> Installing nginx # ==> Downloading https://homebrew.bintray.com/bottles/nginx-1.13.12.high_sierra.bottle.tar.gz # ######################################################################## 100.0% # ==> Pouring nginx-1.13.12.high_sierra.bottle.tar.gz # ==> Caveats # Docroot is: /usr/local/var/www # # The default port has been set in /usr/local/etc/nginx/nginx.conf to 8080 so that # nginx can run without sudo. # # nginx will load all files in /usr/local/etc/nginx/servers/. # # To have launchd start nginx now and restart at login: # brew services start nginx # Or, if you don't wacd /usr/local/Cellar/nginx/1.13.12/n just run: # cd /usr/local/Cellar/nginx/1.13.12/
-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
重启服务即可:
1 2 3
service iptables restart # 命令进行查看目前nat iptables -t nat -L
重启服务防火墙报错解决
1 2 3
service iptables restart # Redirecting to /bin/systemctl restart iptables.service # Failed to restart iptables.service: Unit iptables.service failed to load: No such file or directory.
Whether or not to enable the poll module. This module is enabled by, default if a more suitable method such as kqueue, epoll, rtsig or /dev/poll is not discovered by configure.
–with-http_ssl_module
Enable ngx_http_ssl_module. Enables SSL support and the ability to handle HTTPS requests. Requires OpenSSL. On Debian, this is libssl-dev. 开启HTTP SSL模块，使NGINX可以支持HTTPS请求。这个模块需要已经安装了OPENSSL，在DEBIAN上是libssl
–with-http_realip_module
启用 ngx_http_realip_module
–with-http_addition_module
启用 ngx_http_addition_module
–with-http_sub_module
启用 ngx_http_sub_module
–with-http_dav_module
启用 ngx_http_dav_module
–with-http_flv_module
启用 ngx_http_flv_module
–with-http_stub_status_module
启用 “server status” 页
–without-http_charset_module
禁用 ngx_http_charset_module
–without-http_gzip_module
禁用 ngx_http_gzip_module. 如果启用，需要 zlib 。
–without-http_ssi_module
禁用 ngx_http_ssi_module
–without-http_userid_module
禁用 ngx_http_userid_module
–without-http_access_module
禁用 ngx_http_access_module
–without-http_auth_basic_module
禁用 ngx_http_auth_basic_module
–without-http_autoindex_module
禁用 ngx_http_autoindex_module
–without-http_geo_module
禁用 ngx_http_geo_module
–without-http_map_module
禁用 ngx_http_map_module
–without-http_referer_module
禁用 ngx_http_referer_module
–without-http_rewrite_module
禁用 ngx_http_rewrite_module. 如果启用需要 PCRE 。
–without-http_proxy_module
禁用 ngx_http_proxy_module
–without-http_fastcgi_module
禁用 ngx_http_fastcgi_module
–without-http_memcached_module
禁用 ngx_http_memcached_module
–without-http_limit_zone_module
禁用 ngx_http_limit_zone_module
–without-http_empty_gif_module
禁用 ngx_http_empty_gif_module
–without-http_browser_module
禁用 ngx_http_browser_module
–without-http_upstream_ip_hash_module
禁用 ngx_http_upstream_ip_hash_module
–with-http_perl_module
启用 ngx_http_perl_module
–with-perl_modules_path=PATH
指定 perl 模块的路径
–with-perl=PATH
指定 perl 执行文件的路径
–http-log-path=PATH
Set path to the http access log
–http-client-body-temp-path=PATH
Set path to the http client request body temporary files
–http-proxy-temp-path=PATH
Set path to the http proxy temporary files
–http-fastcgi-temp-path=PATH
Set path to the http fastcgi temporary files
–without-http
禁用 HTTP server
–with-mail
启用 IMAP4/POP3/SMTP 代理模块
–with-mail_ssl_module
启用 ngx_mail_ssl_module
–with-cc=PATH
指定 C 编译器的路径
–with-cpp=PATH
指定 C 预处理器的路径
–with-cc-opt=OPTIONS
Additional parameters which will be added to the variable CFLAGS. With the use of the system library PCRE in FreeBSD, it is necessary to indicate –with-cc-opt=”-I /usr/local/include”. If we are using select() and it is necessary to increase the number of file descriptors, then this also can be assigned here: –with-cc-opt=”-D FD_SETSIZE=2048”.
–with-ld-opt=OPTIONS
Additional parameters passed to the linker. With the use of the system library PCRE in - FreeBSD, it is necessary to indicate –with-ld-opt=”-L /usr/local/lib”.
超文本传输安全协议（缩写：HTTPS，英语：Hypertext Transfer Protocol Secure）是超文本传输协议和SSL/TLS的组合，用以提供加密通讯及对网络服务器身份的鉴定。HTTPS连接经常被用于万维网上的交易支付和企业信息系统中敏感信息的传输。HTTPS不应与在RFC 2660中定义的安全超文本传输协议（S-HTTP）相混。HTTPS 目前已经是所有注重隐私和安全的网站的首选，随着技术的不断发展，HTTPS 网站已不再是大型网站的专利，所有普通的个人站长和博客均可以自己动手搭建一个安全的加密的网站。
创建SSL证书，如果你购买的证书，就可以直接下载
1 2 3 4 5 6 7 8 9 10 11
sudomkdir /etc/nginx/ssl # 创建了有效期100年，加密强度为RSA2048的SSL密钥key和X509证书文件。 sudo openssl req -x509 -nodes -days 36500 -newkey rsa:2048 -keyout /etc/nginx/ssl/nginx.key -out /etc/nginx/ssl/nginx.crt # 上面命令，会有下面需要填写内容 Country Name (2 letter code) [AU]:US State or Province Name (full name) [Some-State]:New York Locality Name (eg, city) []:New York City Organization Name (eg, company) [Internet Widgits Pty Ltd]:Bouncy Castles, Inc. Organizational Unit Name (eg, section) []:Ministry of Water Slides Common Name (e.g. server FQDN or YOUR name) []:your_domain.com Email Address []:admin@your_domain.com