curl -sSL get-docker.geekery.cn | bash
sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<EOF
{
  "registry-mirrors": [
    "https://docker.zhai.cm",
    "https://a.ussh.net",
    "https://hub.littlediary.cn",
    "https://hub.rat.dev",
    "https://atomhub.openatom.cn",
    "https://docker.m.daocloud.io",
    "https://docker.1ms.run",
    "https://dytt.online",
    "https://func.ink",
    "https://lispy.org",
    "https://docker.xiaogenban1993.com",
    "https://docker.mybacc.com",
    "https://docker.yomansunter.com",
    "https://dockerhub.websoft9.com"
  ]
}
EOF
sudo systemctl daemon-reload
sudo systemctl restart docker

#使用root增加docker组.rpm或deb包默认已经创建
sudo groupadd docker

# 方法①
# 普通用户加到docker组中
sudo gpasswd -a ${USER} docker
# 必须切换或者退出当前账户再从新登入才会生效

# 方法②
# 给ugo都增加读写权限
sudo chmod a+rw /var/run/docker.sock

docker run \
      --name mysql  \
      --privileged=true \
      -p 3306:3306 \
      -v /home/mysql:/val/lib/mysql \
      -e MYSQL_ROOT_PASSWORD="1mysql." \
      --restart=always \
      -d mysql:5.7

docker run  -d \
     --name mongodb \
     -v /data/mongo:/data/db \
     -p 27017:27017 \
     --restart=always \
     mongo

#进入 `mongo`
mongosh
#进入 admin 的数据库
use admin
#创建管理员用户
db.createUser(
   {
     user: "root",
     pwd: "mongo",
     roles: [ { role: "root", db: "admin" } ]
   }
 )

docker run -d \
 --restart=always \
 -v /opt/alist:/opt/alist/data \
 -p 5244:5244 \
 --name="alist" \
 xhofe/alist:latest

docker exec -it alist ./alist admin

docker run -p 8000:8000 -d --name jupyterhub  --restart=always --gpus all muaimingjun/jupyterhub:1.2.0

docker run -d \
  --name=wg-easy \
  -e WG_HOST=🚨YOUR_SERVER_IP \
  -e PASSWORD=🚨YOUR_ADMIN_PASSWORD \
  -v ~/.wg-easy:/etc/wireguard \
  -p 51820:51820/udp \
  -p 51821:51821/tcp \
  --cap-add=NET_ADMIN \
  --cap-add=SYS_MODULE \
  --sysctl="net.ipv4.conf.all.src_valid_mark=1" \
  --sysctl="net.ipv4.ip_forward=1" \
  --restart unless-stopped \
  weejewel/wg-easy

docker run -it -d \
 --restart always \
 -p 50000-50004:50000-50004 \
 -v ./frps.toml:/etc/frp/frps.toml \
 --name frp-20240111 \
 snowdreamtech/frps:0.52.3

NAME=frps
IMAGE=snowdreamtech/frps

docker stop $NAME
docker rm $NAME

docker run --restart=on-failure:3 --network host -v /home/docker/frp/frps.ini:/etc/frp/frps.ini -d --name $NAME $IMAGE

[common]
bind_port = 7000
# 启用面板
dashboard_port = 7500
# 面板登录名和密码
dashboard_user = admin
dashboard_pwd = xxxxxxx
# 使用http代理并使用8888端口进行穿透
vhost_http_port = 8889
# 使用https代理并使用9999端口进行穿透
vhost_https_port = 9999
# 日志路径
log_file = ./frps.log
# 日志级别
log_level = info
# 日志最大保存天数
log_max_days = 2
# 认证超时时间
authentication_timeout = 900
# 认证token，客户端需要和此对应
token=123123123
# 最大连接数
max_pool_count = 5
max_ports_per_client = 0

useradd -m user
passwd user # 123

yum install -y sshpass
#编辑/etc/ssh/sshd_config

Match User user
  ForceCommand sshpass -p password ssh -v -o StrictHostKeyChecking=no [email protected] -p 2222 $SSH_ORIGINAL_COMMAND $@

# 一段登陆脚本
#!/bin/sh

ssh -i /home/git/.ssh/id_rsa -p 4022 -o StrictHostKeyChecking=no [email protected] # "SSH_ORIGINAL_COMMAND=\"$SSH_ORIGINAL_COMMAND\" $0 $@"



宿主机 ~/.ssh/authorized_keys: 格式
command="脚本.sh" ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3... [email protected]


PS1='$ PWD $'

docker run \
    --net=host \
    -itd \
    -e TZ=Asia/Shanghai \
    -v ./data:/data \
    --name "mailserver" \
    -h "mail.itgpt.com" \
    -t analogic/poste.io:2.3.13