情文のBLOG 记录点点滴滴 2026-01-16T09:36:28.090Z https://www.mingilin.com/ kingwen0302 Hexo GPG基础使用 https://www.mingilin.com/2026/01/16/shell/shell-gpg/ 2026-01-16T02:59:54.000Z 2026-01-16T09:36:28.090Z

测试环境：alpine:3.22(docker)
基础软件：gpg gpg-agent openssl openssh-client monkeysphere bash

第一部分、第二部分相关的文章比较多，第三部分相对较少。这篇文章基本上都是代码，是一篇完全实操过程的记录。

GPGwindows对应版本是Kleopatra
文中的一些操作有对应的图形界面，有些没有，比如第三部分（也可能是我没有找到）

低版本可导入高版本，反过来不行，因此，第一步先确认使用的环境以及版本。

环境准备

/ # 是命令提示符

1
2
3
4
5
6
7
8
9
10
11
12
13
14
f:/gpgtest> podman run -it -v ./:/app --name gpgtest alpine:3.22 sh
/ # apk add gpg gpg-agent openssl openssh-client monkeysphere bash
fetch https://dl-cdn.alpinelinux.org/alpine/v3.22/main/x86_64/APKINDEX.tar.gz
fetch https://dl-cdn.alpinelinux.org/alpine/v3.22/community/x86_64/APKINDEX.tar.gz
(1/46) Installing ncurses-terminfo-base (6.5_p20250503-r0)
...
(46/46) Installing openssh-client-default (10.0_p1-r10)
Executing busybox-1.37.0-r19.trigger
OK: 65 MiB in 62 packages
/ # exit
f:/gpgtest> podman start -i gpgtest
gpgtest
f:/gpgtest> podman exec -it gpgtest bash 
d661cfbeb503:/#

第一部分（增删Key）

这部分将生成一个key
testa testa@exmaple.com
密码是: testa123456

生成Key(–generate-key)

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
##
## 生成一个Key
## 这个Key可以用于 Sign Certify Encrypt Authenticate
##
d661cfbeb503:/# gpg --expert --full-generate-key
gpg (GnuPG) 2.4.9; Copyright (C) 2025 g10 Code GmbH
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

gpg: directory '/root/.gnupg' created
Please select what kind of key you want:
   (1) RSA and RSA
   (2) DSA and Elgamal
   (3) DSA (sign only)
   (4) RSA (sign only)
   (7) DSA (set your own capabilities)
   (8) RSA (set your own capabilities)
   (9) ECC (sign and encrypt) *default*
  (10) ECC (sign only)
  (11) ECC (set your own capabilities)
  (13) Existing key
  (14) Existing key from card
Your selection? 8

Possible actions for this RSA key: Sign Certify Encrypt Authenticate
Current allowed actions: Sign Certify Encrypt

   (S) Toggle the sign capability
   (E) Toggle the encrypt capability
   (A) Toggle the authenticate capability
   (Q) Finished

Your selection? A

Possible actions for this RSA key: Sign Certify Encrypt Authenticate
Current allowed actions: Sign Certify Encrypt Authenticate

   (S) Toggle the sign capability
   (E) Toggle the encrypt capability
   (A) Toggle the authenticate capability
   (Q) Finished

Your selection? Q
RSA keys may be between 1024 and 4096 bits long.
What keysize do you want? (3072) 4096
Requested keysize is 4096 bits
Please specify how long the key should be valid.
         0 = key does not expire
      <n>  = key expires in n days
      <n>w = key expires in n weeks
      <n>m = key expires in n months
      <n>y = key expires in n years
Key is valid for? (0)
Key does not expire at all
Is this correct? (y/N) y

GnuPG needs to construct a user ID to identify your key.

Real name: testa
Email address: testa@example.com
Comment: testa
You selected this USER-ID:
    "testa (testa) <testa@example.com>"

Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: directory '/root/.gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/root/.gnupg/openpgp-revocs.d/C59DA9100483F2F71C4238464B3A00756CCA7091.rev'
public and secret key created and signed.

pub   rsa4096 2026-01-16 [SCEA]
      C59DA9100483F2F71C4238464B3A00756CCA7091
uid                      testa (testa) <testa@example.com>

d661cfbeb503:/#
d661cfbeb503:/# gpg --quiet --list-key --with-keygrip
[keyboxd]
---------
pub   rsa4096 2026-01-16 [SCEA]
      C59DA9100483F2F71C4238464B3A00756CCA7091
      Keygrip = BB5DEEF5B6EDA9C88276A101687AF84D328CC8F4
uid           [ultimate] testa (testa) <testa@example.com>

导出Key(–export)

1
2
3
4
5
6
7
8
9
10
d661cfbeb503:/# cd /app/
d661cfbeb503:/app# ls
##
## 将Key导出，后面还有一种更加快速的方式
## 导出SECRET的时候会提示输入密码
##
d661cfbeb503:/app# gpg -o testa_public.gpg --export testa
d661cfbeb503:/app# gpg -o testa_SECRET.gpg --export-secret-keys testa
d661cfbeb503:/app# ls
testa_SECRET.gpg  testa_public.gpg

导入Key(–import)

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
#
# 导入公钥
# 加密文件给别人的时候用到
#
d661cfbeb503:/app# gpg --import testa_public.gpg
gpg: key 4B3A00756CCA7091: public key "testa (testa) <testa@example.com>" imported
gpg: Total number processed: 1
gpg:               imported: 1
#
# 导入私钥
# 解密文件的时候用到
#
d661cfbeb503:/app# gpg --import testa_SECRET.gpg
gpg: key 4B3A00756CCA7091: "testa (testa) <testa@example.com>" not changed
gpg: key 4B3A00756CCA7091: secret key imported
gpg: Total number processed: 1
gpg:              unchanged: 1
gpg:       secret keys read: 1
gpg:   secret keys imported: 1
d661cfbeb503:/app# gpg --list-keys --with-keygrip --keyid-format SHORT
[keyboxd]
---------
pub   rsa4096/6CCA7091 2026-01-16 [SCEA]
      C59DA9100483F2F71C4238464B3A00756CCA7091
      Keygrip = BB5DEEF5B6EDA9C88276A101687AF84D328CC8F4
uid         [ unknown] testa (testa) <testa@example.com>

d661cfbeb503:/app#

列出所有的Key(–list-keys)

1
2
3
4
5
6
7
d661cfbeb503:/app# gpg --list-keys --with-keygrip --keyid-format SHORT
[keyboxd]
---------
pub   rsa4096/6CCA7091 2026-01-16 [SCEA]
      C59DA9100483F2F71C4238464B3A00756CCA7091
      Keygrip = BB5DEEF5B6EDA9C88276A101687AF84D328CC8F4
uid         [ultimate] testa (testa) <testa@example.com>

信任Key(–edit-key > trust > save)

新导入的状态是unknown，将其设置为信任ultimately

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
d661cfbeb503:/app# gpg --edit-key testa
gpg (GnuPG) 2.4.9; Copyright (C) 2025 g10 Code GmbH
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Secret key is available.

sec  rsa4096/4B3A00756CCA7091
     created: 2026-01-16  expires: never       usage: SCEA
     trust: unknown       validity: unknown
[ unknown] (1). testa (testa) <testa@example.com>

gpg> trust
sec  rsa4096/4B3A00756CCA7091
     created: 2026-01-16  expires: never       usage: SCEA
     trust: unknown       validity: unknown
[ unknown] (1). testa (testa) <testa@example.com>

Please decide how far you trust this user to correctly verify other users' keys
(by looking at passports, checking fingerprints from different sources, etc.)

  1 = I don't know or won't say
  2 = I do NOT trust
  3 = I trust marginally
  4 = I trust fully
  5 = I trust ultimately
  m = back to the main menu

Your decision? 5
Do you really want to set this key to ultimate trust? (y/N) y

sec  rsa4096/4B3A00756CCA7091
     created: 2026-01-16  expires: never       usage: SCEA
     trust: ultimate      validity: unknown
[ unknown] (1). testa (testa) <testa@example.com>
Please note that the shown key validity is not necessarily correct
unless you restart the program.

gpg> save
Key not changed so no update needed.
d661cfbeb503:/app#

这时候 trust状态已经变成ultimate，不会再有烦人的提示了

1
2
3
4
5
6
7
8
9
10
11
d661cfbeb503:/app# gpg --list-keys
gpg: checking the trustdb
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
[keyboxd]
---------
pub   rsa4096 2026-01-16 [SCEA]
      C59DA9100483F2F71C4238464B3A00756CCA7091
uid           [ultimate] testa (testa) <testa@example.com>

d661cfbeb503:/app#

删除Keys

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
d661cfbeb503:/app# gpg --delete-secret-keys testa
gpg (GnuPG) 2.4.9; Copyright (C) 2025 g10 Code GmbH
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.


sec  rsa4096/4B3A00756CCA7091 2026-01-16 testa (testa) <testa@example.com>

Delete this key from the keyring? (y/N) y
This is a secret key! - really delete? (y/N) y
d661cfbeb503:/app# gpg --list-keys --with-keygrip --keyid-format SHORT
[keyboxd]
---------
pub   rsa4096/6CCA7091 2026-01-16 [SCEA]
      C59DA9100483F2F71C4238464B3A00756CCA7091
      Keygrip = BB5DEEF5B6EDA9C88276A101687AF84D328CC8F4
uid         [ultimate] testa (testa) <testa@example.com>

d661cfbeb503:/app# gpg --delete-keys testa
gpg (GnuPG) 2.4.9; Copyright (C) 2025 g10 Code GmbH
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.


pub  rsa4096/4B3A00756CCA7091 2026-01-16 testa (testa) <testa@example.com>

Delete this key from the keyring? (y/N) y
d661cfbeb503:/app# gpg --list-keys --with-keygrip --keyid-format SHORT
gpg: checking the trustdb
gpg: no ultimately trusted keys found
d661cfbeb503:/app#

第二部分（文件文本加解密）

加密文件(–encrypt)

1
2
3
4
5
6
7
8
9
10
11
d661cfbeb503:/app# echo "abc" > in.txt
d661cfbeb503:/app# ls
in.txt
d661cfbeb503:/app# gpg -se -r testa -o out.txt.gpg in.txt
d661cfbeb503:/app# ls
in.txt            out.txt.gpg
d661cfbeb503:/app# cat in.txt
abc
d661cfbeb503:/app# cat out.txt.gpg
....一堆乱码...
d661cfbeb503:/app#

-s sign
-e/–encrypt 加密
若加密文件夹的话，可以使用gpg-zip，也可以先压缩再加密

解密文件(–decrypt)

1
2
3
4
5
6
7
8
9
10
d661cfbeb503:/app# gpg -d -o in2.txt out.txt.gpg
gpg: encrypted with rsa4096 key, ID 4B3A00756CCA7091, created 2026-01-16
      "testa (testa) <testa@example.com>"
gpg: Signature made Fri Jan 16 07:11:54 2026 UTC
gpg:                using RSA key C59DA9100483F2F71C4238464B3A00756CCA7091
gpg: Good signature from "testa (testa) <testa@example.com>" [ultimate]
d661cfbeb503:/app# ls
in.txt            in2.txt           out.txt.gpg
d661cfbeb503:/app# cat in2.txt
abc

-d/–decrypt 解密

加密字符串

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
d661cfbeb503:/app# echo "abc" | gpg -e -r testa --armour
-----BEGIN PGP MESSAGE-----
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=BcqG
-----END PGP MESSAGE-----

解密字符串

1
2
3
4
5
6
7
8
9
10
11
12
d661cfbeb503:/app# echo "abc" | gpg -e -r testa --armour > abc.str.txt
d661cfbeb503:/app# gpg -d abc.str.txt
gpg: encrypted with rsa4096 key, ID 4B3A00756CCA7091, created 2026-01-16
      "testa (testa) <testa@example.com>"
abc
##
## 如果是第一次解密的话
## 可能会卡住，因为需要输入密码
d661cfbeb503:/app# cat abc.str.txt | gpg -d
gpg: encrypted with rsa4096 key, ID 4B3A00756CCA7091, created 2026-01-16
      "testa (testa) <testa@example.com>"
abc

第三部分（替代ssh-agent）

前面的都是相对简单的，这部分才是这篇文章的重点

替代ssh-agent

1、导出ssh-public-key(公钥)

1
2
d661cfbeb503:/app# gpg --export-ssh-key testa
ssh-rsa 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 openpgp:0x6CCA7091

将ssh-rsa …添加到服务器上的~/.ssh/authorized_keys

2、配置sshcontrol

1
2
3
4
5
6
7
d661cfbeb503:/app# gpg --list-keys --with-keygrip
[keyboxd]
---------
pub   rsa4096 2026-01-16 [SCEA]
      C59DA9100483F2F71C4238464B3A00756CCA7091
      Keygrip = BB5DEEF5B6EDA9C88276A101687AF84D328CC8F4
uid           [ultimate] testa (testa) <testa@example.com>

[A] 是Authenticate的意思
Keygrip = BB5DEEF5B6EDA9C88276A101687AF84D328CC8F4 就是指纹

将指纹添加到~/.gnupg/sshcontrol中

echo "BB5DEEF5B6EDA9C88276A101687AF84D328CC8F4" >> ~/.gnupg/sshcontrol

3、启动gpg-agent

1
2
3
d661cfbeb503:/app# gpg-connect-agent --quiet /bye
d661cfbeb503:/app# export SSH_AUTH_SOCK="$(gpgconf --list-dirs agent-ssh-socket)"
### eval $(gpg-agent --daemon --enable-ssh-support)

4、完成

1
2
d661cfbeb503:/app# ssh-add -l
4096 SHA256:TLIjaLIPgJ1D5ifJO6jZkCU0LppcGcnB6pNNgR811iA (none) (RSA)

这是已经是可以使用ssh user@host登录服务器了，似乎已经可以结束了
但是如果已经有了id_rsa怎么处理呢？
用这个新的替换掉旧的，不太合理吧
是不是可以把旧的key添加到gpg中呢？当然可以

将OPENSSH私钥作为subkey添加到gpg中

准备

假设我们已经有一个openssh key 名字是testb

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
d661cfbeb503:/app# ssh-keygen -t rsa -b 4096 -C "testb@exmaple.com"
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): /app/testb
Enter passphrase for "/app/testb" (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /app/testb
Your public key has been saved in /app/testb.pub
The key fingerprint is:
SHA256:wRwKd/0OVS93gZ/tRTU3uVbtVoDIeA2sjxGeTuu4wus testb@exmaple.com
The key's randomart image is:
+---[RSA 4096]----+
|    . . o=.+ o+=*|
|     o =o.* +. oX|
|      ..+= o  ooX|
|        *.. .  B*|
|       oS= o  .o.|
|        + . .   .|
|   .   o         |
|    o . .        |
|   .Eo..         |
+----[SHA256]-----+

将ssh私钥转换为gpg作为subkey添加到其他gpg中

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
##
## 首先将其转换为pem
##
d661cfbeb503:/app# ssh-keygen -f testb -p -m pem
##
## 将testb导入gpg
## 如果有报错提示，可能是版本问题，降版本
## 比如 alpine3.23是有问题的，用alpine3.22先转换再在3.23中导入
##
d661cfbeb503:/app# pem2openpgp testb < testb | gpg --import
gpg: key C69ED8C1A9E1F9EF: public key "testb" imported
gpg: key C69ED8C1A9E1F9EF: secret key imported
gpg: Total number processed: 1
gpg:               imported: 1
gpg:       secret keys read: 1
gpg:   secret keys imported: 1
d661cfbeb503:/app# gpg --list-keys --with-keygrip --keyid-format SHORT
[keyboxd]
---------
pub   rsa4096/A9E1F9EF 2026-01-16 [C]
      A45945D8EE060145F5F4C1FEC69ED8C1A9E1F9EF
      Keygrip = AD30946474C95802071D6A8CBEA8B9779FC8DEA5
uid         [ unknown] testb

pub   rsa4096/6CCA7091 2026-01-16 [SCEA]
      C59DA9100483F2F71C4238464B3A00756CCA7091
      Keygrip = BB5DEEF5B6EDA9C88276A101687AF84D328CC8F4
uid         [ultimate] testa (testa) <testa@example.com>

将testb作为testa的subkey，并且只用于[A]uthenticate

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
d661cfbeb503:/app# gpg --expert --edit-key testa
gpg (GnuPG) 2.4.9; Copyright (C) 2025 g10 Code GmbH
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Secret key is available.

sec  rsa4096/4B3A00756CCA7091
     created: 2026-01-16  expires: never       usage: SCEA
     trust: ultimate      validity: ultimate
[ultimate] (1). testa (testa) <testa@example.com>

gpg> addkey
Please select what kind of key you want:
   (3) DSA (sign only)
   (4) RSA (sign only)
   (5) Elgamal (encrypt only)
   (6) RSA (encrypt only)
   (7) DSA (set your own capabilities)
   (8) RSA (set your own capabilities)
  (10) ECC (sign only)
  (11) ECC (set your own capabilities)
  (12) ECC (encrypt only)
  (13) Existing key
  (14) Existing key from card
Your selection? 13
Enter the keygrip: AD30946474C95802071D6A8CBEA8B9779FC8DEA5

Possible actions for this RSA key: Sign Encrypt Authenticate
Current allowed actions: Sign Encrypt

   (S) Toggle the sign capability
   (E) Toggle the encrypt capability
   (A) Toggle the authenticate capability
   (Q) Finished

Your selection? A

Possible actions for this RSA key: Sign Encrypt Authenticate
Current allowed actions: Sign Encrypt Authenticate

   (S) Toggle the sign capability
   (E) Toggle the encrypt capability
   (A) Toggle the authenticate capability
   (Q) Finished

Your selection? E

Possible actions for this RSA key: Sign Encrypt Authenticate
Current allowed actions: Sign Authenticate

   (S) Toggle the sign capability
   (E) Toggle the encrypt capability
   (A) Toggle the authenticate capability
   (Q) Finished

Your selection? S

Possible actions for this RSA key: Sign Encrypt Authenticate
Current allowed actions: Authenticate

   (S) Toggle the sign capability
   (E) Toggle the encrypt capability
   (A) Toggle the authenticate capability
   (Q) Finished

Your selection? Q
Please specify how long the key should be valid.
         0 = key does not expire
      <n>  = key expires in n days
      <n>w = key expires in n weeks
      <n>m = key expires in n months
      <n>y = key expires in n years
Key is valid for? (0) 10y
Key expires at Mon Jan 14 08:39:48 2036 UTC
Is this correct? (y/N) y
Really create? (y/N) y

sec  rsa4096/4B3A00756CCA7091
     created: 2026-01-16  expires: never       usage: SCEA
     trust: ultimate      validity: ultimate
ssb  rsa4096/8E221B1DB894174B
     created: 2026-01-16  expires: 2036-01-14  usage: A
[ultimate] (1). testa (testa) <testa@example.com>

gpg> save
d661cfbeb503:/app# gpg --list-keys --with-keygrip --keyid-format SHORT
[keyboxd]
---------
pub   rsa4096/446596D5 2026-01-16 [C]
      372D316C8BF04BCA90883B9A13ADAE51446596D5
      Keygrip = AD30946474C95802071D6A8CBEA8B9779FC8DEA5
uid         [ unknown] testb

pub   rsa4096/6CCA7091 2026-01-16 [SCEA]
      C59DA9100483F2F71C4238464B3A00756CCA7091
      Keygrip = BB5DEEF5B6EDA9C88276A101687AF84D328CC8F4
uid         [ultimate] testa (testa) <testa@example.com>
sub   rsa4096/B894174B 2026-01-16 [A] [expires: 2036-01-14]
      Keygrip = AD30946474C95802071D6A8CBEA8B9779FC8DEA5

已经添加完成了，备份下，然后重新导入看下是否真的有效

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
##
## 导出最新的gpg
##
d661cfbeb503:/app# gpg -a --export-secret-keys -o testa_b_SECRET.gpg testa
d661cfbeb503:/app# gpg -a --export -o testa_b_public.gpg testa
##
## 删除旧的gpg
##
d661cfbeb503:/app# gpg --delete-secret-and-public-keys testa testb
gpg (GnuPG) 2.4.9; Copyright (C) 2025 g10 Code GmbH
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.


sec  rsa4096/4B3A00756CCA7091 2026-01-16 testa (testa) <testa@example.com>

Delete this key from the keyring? (y/N) y
This is a secret key! - really delete? (y/N) y

pub  rsa4096/4B3A00756CCA7091 2026-01-16 testa (testa) <testa@example.com>

Delete this key from the keyring? (y/N) y

pub  rsa4096/13ADAE51446596D5 2026-01-16 testb

Delete this key from the keyring? (y/N) y
d661cfbeb503:/app#
##
## 重新导入testa
##
d661cfbeb503:/app# gpg --import testa_b_SECRET.gpg testa_b_public.gpg
gpg: key 4B3A00756CCA7091: public key "testa (testa) <testa@example.com>" imported
gpg: key 4B3A00756CCA7091: secret key imported
gpg: key 4B3A00756CCA7091: "testa (testa) <testa@example.com>" not changed
gpg: Total number processed: 2
gpg:               imported: 1
gpg:              unchanged: 1
gpg:       secret keys read: 1
gpg:   secret keys imported: 1
d661cfbeb503:/app#
d661cfbeb503:/app# gpg --list-keys --with-keygrip --keyid-format SHORT
[keyboxd]
---------
pub   rsa4096/6CCA7091 2026-01-16 [SCEA]
      C59DA9100483F2F71C4238464B3A00756CCA7091
      Keygrip = BB5DEEF5B6EDA9C88276A101687AF84D328CC8F4
uid         [ unknown] testa (testa) <testa@example.com>
sub   rsa4096/B894174B 2026-01-16 [A] [expires: 2036-01-14]
      Keygrip = AD30946474C95802071D6A8CBEA8B9779FC8DEA5

将testb用于登录验证

1
2
3
4
5
6
7
8
9
10
11
12
## 导出testb的公钥
d661cfbeb503:/app# gpg --export-ssh-key B894174B!
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCjV2tQTSqQm9G2guMRqsTIwHEmk5WvMSfQ7w6rOJfI+jzduJJh68i+Icr1FElTJAJ+yYtnZqAFgeA8kAKU3sbKWKK9CjFXZm/SeBMyeIcQqysTZ6dWSQpmkQm4YUJQusYPqCSiyxWsYe5tW9/9d/GkfzTceH/I0CM9OOzUgDzgZd8DL98AsLeW2mbhErG9yUvLoecP2P1crVc8K0/iLMb+PAg+twbo3hHhsWfF2N2ZVcq1oeKGs6WjqnmYCJcWXuIO6J5DcFx5681pErhrD4j7qbwKisEsqOcBIHUF+XcvQ6O5xm/Ua8P5h2oX0vFEt0kQxL7poX2GpKQ9WPBzvKnU8c4MS3gb0xvXj/1bZdO21V0FowDd+6cbavVPkB4S+98mHeJshyKzPRIWwA2tY7d2uFmbbWnu2qoE1ogAD157q5WTCPRlu9VRB6seCzunr5OF7PJ2yQMSWTqXcrXaIY+uPeGHeT3BcI4J/RxNR5QkSYWv8+BDvTPrX5miDrYrUSYRj4QrWrg5tX0nrv5UEzh2hyyld5fDpK8Hp7PAtjpEj3EA8Wxy38jihgOQ9uETb9Qj2MqyH5LTWHJW4vd1tJGA2MglYkBAqVDL1pF0IGHHXQ92b/RGG8oKr+cv0tkqF58MG9T5gPIjldc8xYk2/3QyZ5XggvP5xmHhChdx8oz/PQ== openpgp:0xB894174B
## 设置testb用于ssh登录验证
d661cfbeb503:/app# echo "AD30946474C95802071D6A8CBEA8B9779FC8DEA5" > ~/.gnupg/sshcontrol
d661cfbeb503:/app# cat ~/.gnupg/sshcontrol
AD30946474C95802071D6A8CBEA8B9779FC8DEA5
d661cfbeb503:/app# gpg-connect-agent --quiet /bye
d661cfbeb503:/app# export SSH_AUTH_SOCK="$(gpgconf --list-dirs agent-ssh-socket)"
d661cfbeb503:/app# ssh-add -l
4096 SHA256:wRwKd/0OVS93gZ/tRTU3uVbtVoDIeA2sjxGeTuu4wus (none) (RSA)
d661cfbeb503:/app#

将GPG subkey(testb)转换为Openssh

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
d661cfbeb503:/app# gpg --list-keys --with-keygrip --keyid-format short
[keyboxd]
---------
pub   rsa4096/6CCA7091 2026-01-16 [SCEA]
      C59DA9100483F2F71C4238464B3A00756CCA7091
      Keygrip = BB5DEEF5B6EDA9C88276A101687AF84D328CC8F4
uid         [ unknown] testa (testa) <testa@example.com>
sub   rsa4096/B894174B 2026-01-16 [A] [expires: 2036-01-14]
      Keygrip = AD30946474C95802071D6A8CBEA8B9779FC8DEA5

d661cfbeb503:/app# gpg --export-secret-keys B894174B! | openpgp2ssh B894174B
-----BEGIN RSA PRIVATE KEY-----
MIIJKAIBAAKCAgEAo1drUE0qkJvRtoLjEarEyMBxJpOVrzEn0O8OqziXyPo83biS
...
6x1wVPjwFe8Vvx4hJcWiaVO8Cgi2BxlY3cUxEbaSbBs1c/5dw+LUTc0tzdg=
-----END RSA PRIVATE KEY-----
d661cfbeb503:/app# 
d661cfbeb503:/app# gpg --export-secret-keys B894174B! | openpgp2ssh B894174B > testb_rsa.pub
## 对比testb_rsa和原testb.pub 是一致的
d661cfbeb503:/app# ssh-keygen -y -f testb_rsa.pub
ssh-rsa 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
d661cfbeb503:/app# cat testb.pub
ssh-rsa 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 testb@exmaple.com
d661cfbeb503:/app#

结束

]]> <blockquote> <p>测试环境：alpine:3.22(docker)<br>基础软件：gpg gpg-agent openssl openssh-client monkeysphere bash</p> </blockquote> <p>第一部分、第二部分相关的文章比较多，第三部分相对较少。这篇文章基本上都是代码，是一篇完全实操过程的记录。</p> <blockquote> <p><code>GPG</code>windows对应版本是<code>Kleopatra</code><br>文中的一些操作有对应的图形界面，有些没有，比如第三部分（也可能是我没有找到）</p> </blockquote> <blockquote> <p><font color=red><strong>低版本可导入高版本，反过来不行，因此，第一步先确认使用的环境以及版本。</strong></font></p> </blockquote> 小狼毫输入法从入门到放弃 https://www.mingilin.com/2026/01/15/other/other-rime/ 2026-01-15T02:04:48.000Z 2026-01-15T05:58:15.926Z

RIME是一个输入法引擎，对应windows版本的是小狼毫输入法（实话说名字起得挺难听的），为什么还有人用呢，主要是自由以及不被收集数据，缺点就是没有语音输入

好坏不做过多讨论，我们主要来看下怎么配置
以雾凇拼音为例：https://github.com/iDvel/rime-ice

配置文件：

  • default.yaml 设置输入法、如何切换输入法、翻页等
  • *.schema.yaml 各种输入方案：全拼、双拼、五笔。。。
  • weasel.yaml 小狼毫( Win 版本 ) 主要是输入法皮肤等
  • *.dict.yaml 字典，一般不需要了解

上面的都是默认的配置，如果我想修改怎么办呢？
一种方式是：可以在原文件上修改，但是不推荐
推荐方式是：增加一个配置文件，可以替换掉原配置的部分内容，即*.custom.yaml
例如:

  • double_pinyin_flypy.schema.yaml => double_pinyin_flypy.custom.yaml
  • default.yaml => default.custom.yaml
  • weasel.yaml => weasel.custom.yaml

xxx.custom.yaml配置格式：

1
2
patch:
  xxx

一些命令

  • WeaselSetup.exe /userdir:配置目录 - 修改配置目录
  • WeaselDeployer.exe /deploy - 重新部署
  • WeaselDeployer.exe /sync - 用户资料同步

这些命令都可以在开始菜单中找到

一些常用的配置

候选词个数

1
2
3
4
# default.custom.yaml or *.custom.yaml
patch:
  menu:
    page_size: 10  # 切换候选词个数

候选词横向显示

1
2
3
4
# wasel.custom.yaml
patch:
  style:
    horizontal: true

rime输入法各种版本

  • 薄荷拼音：https://github.com/Mintimate/oh-my-rime.git
    这个版本增加了混输和五笔，但是默认6个候选词，需要修改好多文件
    而且默认的皮肤字体有点不舒服，我是直接用雾凇拼音的weasel.yaml覆盖薄荷拼音的默认配置
  • 雾凇拼音：https://github.com/iDvel/rime-ice.git
    这个版本比较好用，基本上不用改就可以用，就我个人而言，只是增加了模糊音
    如果只使用拼音的话，这个就很好用了
  • 其他版本：自己收集吧

已知的问题

  1. 部分软件适配有问题，输入窗口无法跟随
  2. 有时候会卡

自己实现的中文拼音音调schema

最后分享一个自己实现的快速输入拼音音调的schema

mhome_pinyin_tone.schema.yamlview raw
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
# Rime schema
# encoding: utf-8
# Date: 2026-01-07 15:07:50

schema:
  schema_id: mhome_pinyin_tone
  name: 中文拼音音调
  version: "1.2"
  description: 中文拼音音调快速输入

switches:
  - name: full_shape
    states: [ 半角, 全角 ]
    reset: 0

engine:
  processors:
    - key_binder
    - punctuator
    - selector
    - express_editor
  segmentors:
    - punct_segmentor
  translators:
    - punct_translator
menu:
  # 选择候选词的键，相当于 12345，
  # 因为这个输入方案中的数字已经用于输入文字了，
  # 不能使用12345作为候选词的选择键
  alternative_select_keys: "01234"

key_binder:
  bindings:
    - {accept: semicolon, send: c, when: has_menu}  # 候选2 用分号
    - {accept: apostrophe, send: e, when: has_menu} # 候选3 用单引号

punctuator:
  half_shape:
    "a": [a,ā,á,ǎ,à]
    "o": [o,ō,ó,ǒ,ò]
    "e": [e,ē,é,ě,è]
    "i": [i,ī,í,ǐ,ì]
    "u": [u,ū,ú,ǔ,ù]
    "v": [ü,ǖ,ǘ,ǚ,ǜ]

  full_shape:
    "a": [a,ā,á,ǎ,à]
    "o": [o,ō,ó,ǒ,ò]
    "e": [e,ē,é,ě,è]
    "i": [i,ī,í,ǐ,ì]
    "u": [u,ū,ú,ǔ,ù]
    "v": [ü,ǖ,ǘ,ǚ,ǜ]

最后，没时间折腾的同学还是放弃吧。

]]> <p><a href="https://rime.im/">RIME</a>是一个输入法引擎，对应windows版本的是小狼毫输入法（实话说名字起得挺难听的），为什么还有人用呢，主要是自由以及不被收集数据，缺点就是没有语音输入</p> Centos7 SSH增加多因子验证(google-authenticator) https://www.mingilin.com/2024/11/07/centos/centos7-2fa/ 2024-11-07T02:00:00.000Z 2026-01-15T05:33:18.370Z

按照一些文章开启ssh的多因子验证，发现不起作用，参考了一些国外的文章才起作用，记录下。

安装

1
2
yum install epel-release
yum install google-authenticator

配置

google-authenticator

1
2
3
4
5
6
google-authenticator
Do you want authentication tokens to be time-based (y/n) y
Do you want me to update your "/root/.google_authenticator" file? (y/n) y
your chances to notice or even prevent man-in-the-middle attacks (y/n) y
Do you want to do so? (y/n) y
Do you want to enable rate-limiting? (y/n) y

用2FA客户端(比如：Stratum - Authenticator APP)扫描二维码，保存

记得备份下/root/.google_authenticator文件

配置/etc/pam.d/sshd

1
2
3
4
5
#%PAM-1.0
## 添加 pam_google_authenticator.so
auth       required     pam_google_authenticator.so
## 注释掉 password-auth
#auth       substack     password-auth

#auth substack password-auth 注释掉很关键
很多文章中没有这一步！！！

配置/etc/ssh/sshd_config

1
2
3
4
5
6
# ChallengeResponseAuthentication设置为yes
ChallengeResponseAuthentication yes
#ChallengeResponseAuthentication no

# 添加一行
AuthenticationMethods publickey,password publickey,keyboard-interactive

AuthenticationMethods publickey,password publickey,keyboard-interactive新加的一行很关键
很多文章中没有这一步！！！

运行

systemctl restart sshd

1
2
3
ssh -p 22 root@xxxx
Verification code:
Last login: xxxxx

需要注意的是，默认情况下一个code最多只能验证3次。
验证不通过的话就等下一个code

参考文档

  1. https://www.digitalocean.com/community/tutorials/how-to-set-up-multi-factor-authentication-for-ssh-on-centos-7
]]> <p>按照一些文章开启ssh的多因子验证，发现不起作用，参考了一些国外的文章才起作用，记录下。</p> 分割A3文档为A4 https://www.mingilin.com/2024/11/04/other/other-a3-to-a4/ 2024-11-04T10:00:00.000Z 2026-01-15T05:33:18.386Z

最近需要将A3文档（PDF）分割成A4，毕竟家里只有可以打印A4的打印机

网上找了很多方案，要么广告要么收费

使用PDF-XChange Viewer打印文档，打印机选择虚拟打印机

第一步：先设置纸张类型

第二步：配置打印

缩放类型：并排大型页面
重叠：0

]]> <p>最近需要将A3文档（PDF）分割成A4，毕竟家里只有可以打印A4的打印机</p> elixir hexpm 镜像搭建 https://www.mingilin.com/2024/11/04/elixir/elixir-hexpm-mirror/ 2024-11-04T07:00:00.000Z 2026-01-15T05:33:18.372Z

搭建一个https://repo.hex.pm镜像站，用于加速mix deps.get

方式1：子目录

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
## https://xxx/hexpm/
rewrite ^/hexpm$ /hexpm/ permanent;
location ~ "^/hexpm/(.*)" {
    proxy_request_buffering off;

    proxy_buffer_size 64k;
    proxy_buffers   32 64k;
    proxy_busy_buffers_size 128k;

    proxy_http_version 1.1;
    proxy_connect_timeout 10s;
    proxy_read_timeout 10s;
    proxy_socket_keepalive on;

    proxy_ssl_server_name on;
    proxy_ssl_name repo.hex.pm;
    proxy_ssl_verify off;
    proxy_set_header Host repo.hex.pm;
    proxy_pass https://repo.hex.pm/$1;
}

方式2：域名

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
## https://xxxxx
server {
    listen 443 ssl http2;
    server_name xxxxx;
    root /data/github;

    client_max_body_size 2G;

    error_page 497  https://$host$request_uri;

    location / {
        proxy_request_buffering off;

        proxy_buffer_size 64k;
        proxy_buffers   32 64k;
        proxy_busy_buffers_size 128k;

        proxy_http_version 1.1;
        proxy_connect_timeout 10s;
        proxy_read_timeout 10s;
        proxy_socket_keepalive on;

        proxy_ssl_server_name on;
        proxy_ssl_name repo.hex.pm;
        proxy_ssl_verify off;
        proxy_set_header Host repo.hex.pm;
        proxy_pass https://repo.hex.pm;
    }
    ## 其他配置
    ## ...
}
]]> <p>搭建一个<a href="https://repo.hex.pm/">https://repo.hex.pm</a>镜像站，用于加速<code>mix deps.get</code></p> 微信8.0.50回退到旧版本8.0.46，取消服务号折叠 https://www.mingilin.com/2024/07/15/other/other-wechat-service/ 2024-07-15T08:00:00.000Z 2026-01-15T05:33:18.391Z

微信最新版本8.0.50开启了服务号折叠内测，非常不友好，这个教程将微信回退到旧版本。经测试，回退到8.0.49是没有用的，看版本记录在8.0.48包大了很多，保险起见，将版本回退到8.0.46。

第一步下载旧版本

8.0.46版本的下载地址：https://www.wandoujia.com/apps/596157/history_v2540

使用adb安装

前提：确保PC上已经安装了adb
下载地址：https://developer.android.com/tools/releases/platform-tools?hl=zh-cn
下载完成后添加环境变量，具体百度吧。

  1. 打开开发者模式
    我用的是小米的手机
    在设置->我的设备->全部参数->MIUI版本
    连续点击`MIUI版本

  2. 配对
    在设置->更多设置->开发者选项->无线调试中打开无线调试，再点击使用配对码配对设备
    命令行界面输入：adb pair IP:端口

  3. 连接
    在无线调试中，查看IP地址和端口
    命令行界面输入：adb connect IP:端口
    正常情况下，使用adb devices就可以看到刚才添加的设备了

  4. 安装
    命令行界面输入：adb install -r -d 刚刚下载的微信.apk
    等待Success提示成功。

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
PS C:\Users\Administrator> adb pair 192.168.50.31:32985
Enter pairing code: 038184
Successfully paired to 192.168.50.31:32985 [guid=adb-7lgm5p7xcqjbww9l-05Nyrj]

PS C:\Users\Administrator> adb connect 192.168.50.31:46233
connected to 192.168.50.31:46233

PS C:\Users\Administrator> adb devices
List of devices attached
192.168.50.31:46233     device

PS C:\Users\Administrator> cd D:\Downloads\

PS D:\Downloads> adb install -r -d .\106_5e9203c6c5072b07d2a39f9ceac2a0ed.apk
Performing Streamed Install
Success

后续

已经折叠的服务号需要重新设置才行，比如置顶。。。
还要记得在应用商店设置禁止更新。。。

参考文档

  1. https://www.bilibili.com/read/cv28823105/?jump_opus=1
]]> <p>微信最新版本<code>8.0.50</code>开启了服务号折叠内测，非常不友好，这个教程将微信回退到旧版本。经测试，回退到<code>8.0.49</code>是没有用的，看版本记录在<code>8.0.48</code>包大了很多，保险起见，将版本回退到<code>8.0.46</code>。<br><img src="/downloads/assets/20240715163702.png"></p> erlang使用rsa实现sign/verify https://www.mingilin.com/2023/11/02/erlang/erlang-rsa-sign-verify/ 2023-11-02T01:20:00.000Z 2026-01-15T05:33:18.379Z

最近需要erlang使用rsa实现签名验证
在网上搜了好久终于拼接成一份完整的代码

rsa常用的格式

私钥

  • 格式1
    1
    2
    3
    4
    5
    6
    -----BEGIN PRIVATE KEY-----
    MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDDxRpuKIdYQ3lR
    ...
    mXCNDx5bSbbPL+WMY8c7F7K0krOfl8Vtzg5cCfo45+IsLCM16sDT0MhLCPUMWj0k
    cd4bKcAc3CENaL3U03oLE58r
    -----END PRIVATE KEY-----
  • 格式2
    1
    MIIEvgI...0kcd4bKcAc3CENaL3U03oLE58r

公钥

  • 格式1
    1
    2
    3
    4
    5
    6
    -----BEGIN PUBLIC KEY-----
    MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8UabiiHWEN5UR5SByS2
    ...
    oK5jmjNnFsCrWbkd68H6tsm9dGPcUMgNWxeahU/8tSOtX94AaTfU4cp846Yn7dH4
    JQIDAQAB
    -----END PUBLIC KEY-----
  • 格式2
    1
    ssh-rsa MIIEvgI...0kcd4bKcAc3CENaL3U03oLE58r

贴代码

简单逻辑就是将各种格式的key转换如下格式：

1
2
3
-----BEGIN XXXX KEY-----
...
-----END XXXX KEY-----

然后调用public_key:pem_decode/1, public_key:pem_entry_decode/1加载key
若是从目录下加载，目录下的key名字必须是ssh_host_rsa_key,ssh_host_rsa_key.pub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
-module(rsa_sign_verify).

-include_lib("public_key/include/public_key.hrl").

-export([sign/2, verify/3]).

ttt() ->
    Message = <<"1">>,
    Sign1 = sign(Message, {dir, "d:/Downloads/x7mall_test"}),
    io:format("sign1:~p~n", [Sign1]),
    Verify1 = verify(Message, Sign1, {dir, "d:/Downloads/x7mall_test"}),
    io:format("verify1:~p~n", [Verify1]),

    Sign2 = sign(Message, "d:/Downloads/x7mall_test_key"),
    io:format("sign2:~p~n", [Sign2]),
    Verify2 = verify(Message, Sign2, "d:/Downloads/x7mall_test_key.pub"),
    io:format("verify2:~p~n", [Verify2]),

    Sign3 = sign(Message, {dir, "d:/Downloads/x7mall_test"}),
    io:format("sign3:~p~n", [Sign3]),
    Verify3 = verify(Message, Sign3, "d:/Downloads/x7mall_test/ssh_host_rsa_key.pub"),
    io:format("verify3:~p~n", [Verify3]),
    
    Sign4 = sign(Message, "d:/Downloads/x7mall_test/ssh_host_rsa_key"),
    io:format("sign4:~p~n", [Sign4]),
    Verify4 = verify(Message, Sign4, {dir, "d:/Downloads/x7mall_test"}),
    io:format("verify4:~p~n", [Verify4]),

    Sign5 = sign(Message, "d:/Downloads/x7mall_test/ssh_host_rsa_key"),
    io:format("sign5:~p~n", [Sign5]),
    Verify5 = verify(Message, Sign5, "d:/Downloads/x7mall_test/ssh_host_rsa_key.pub"),
    io:format("verify5:~p~n", [Verify5]),
    ok.

%% 签名
sign(Message, PrivateKeyFile) ->
    PrivateKey = load_private_key(PrivateKeyFile),
    Sign = public_key:sign(Message, sha256, PrivateKey),
    base64:encode(Sign).

%% 验证
verify(Message, Sign, PublicKeyFile) ->
    Sign1 = base64:decode(Sign),
    PublicKey = load_public_key(PublicKeyFile),
    public_key:verify(Message, sha256, Sign1, PublicKey).

%% 加载private key
load_private_key({file, File}) ->
    %% private key格式1
    %% -----BEGIN PRIVATE KEY-----
    %% MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDDxRpuKIdYQ3lR
    %% ...
    %% mXCNDx5bSbbPL+WMY8c7F7K0krOfl8Vtzg5cCfo45+IsLCM16sDT0MhLCPUMWj0k
    %% cd4bKcAc3CENaL3U03oLE58r
    %% -----END PRIVATE KEY-----
    %% 
    %% private key格式2
    %% MIIEvgI...0kcd4bKcAc3CENaL3U03oLE58r
    %% 
    {ok, Data} = file:read_file(File),
    load_private_key({binary, Data});

load_private_key({binary, Data}) ->
    PrivateData = 
    case re:run(Data, "^-----BEGIN") of
        {match, _} -> Data;
        _ ->
            <<"-----BEGIN PRIVATE KEY-----\n", (format_data(Data))/binary, "\n-----END PRIVATE KEY-----">>
    end,
    [PrivatePEMEntry | _] = public_key:pem_decode(PrivateData),
    #'RSAPrivateKey'{} = PrivateKey = public_key:pem_entry_decode(PrivatePEMEntry),
    PrivateKey;
load_private_key({dir, Dir}) ->
    %% 目录下文件名字:
    %% ssh_host_rsa_key
    %% ssh_host_rsa_key.pub
    %%
    %% private key格式
    %% -----BEGIN PRIVATE KEY-----
    %% MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDDxRpuKIdYQ3lR
    %% ...
    %% mXCNDx5bSbbPL+WMY8c7F7K0krOfl8Vtzg5cCfo45+IsLCM16sDT0MhLCPUMWj0k
    %% cd4bKcAc3CENaL3U03oLE58r
    %% -----END PRIVATE KEY-----
    %%
    %% public key格式
    %% ssh-rsa MIIEvgI...0kcd4bKcAc3CENaL3U03oLE58r
    %%
    Algorithm = 'ssh-rsa',
    Options = [{system_dir, Dir}],
    {ok, PrivateKey} = ssh_file:host_key(Algorithm, Options),
    PrivateKey;
load_private_key(File) ->
    case filelib:is_dir(File) of
        true -> load_private_key({dir, File});
        false -> load_private_key({file, File})
    end.

%% 加载public key
load_public_key({file, File}) ->
    %% public key格式1
    %% -----BEGIN PUBLIC KEY-----
    %% MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8UabiiHWEN5UR5SByS2
    %% ...
    %% oK5jmjNnFsCrWbkd68H6tsm9dGPcUMgNWxeahU/8tSOtX94AaTfU4cp846Yn7dH4
    %% JQIDAQAB
    %% -----END PUBLIC KEY-----
    %%
    %% public key格式2
    %% MIIBIjA...AaTfU4cp846Yn7dH4JQIDAQAB
    %%
    {ok, Data} = file:read_file(File),
    load_public_key({binary, Data});

load_public_key({binary, Data}) ->
    PublicData = 
    case re:run(Data, "^-----BEGIN") of
        {match, _} -> Data;
        _ ->
            NewData = 
            case re:split(Data, " ") of
                [<<"ssh-rsa">>, Data1|_] -> Data1;
                _ -> Data
            end,
            <<"-----BEGIN PUBLIC KEY-----\n", (format_data(NewData))/binary, "\n-----END PUBLIC KEY-----">>
    end,
    [PublicPEMEntry | _] = public_key:pem_decode(PublicData),
    #'RSAPublicKey'{} = PublicKey = public_key:pem_entry_decode(PublicPEMEntry),
    PublicKey;
load_public_key({dir, Dir}) ->
    %% 同 load_private_key({dir, Dir})
    {ok, PublicData} = file:read_file(Dir ++ "/ssh_host_rsa_key.pub"),
    [<<"ssh-rsa">>, Data|_] = re:split(PublicData, " "),
    load_public_key({binary, Data});

load_public_key(File) ->
    case filelib:is_dir(File) of
        true -> load_public_key({dir, File});
        false -> load_public_key({file, File})
    end.

%% 其实不需要格式化也是ok的
%% 主要是为了debug时打印好看
format_data(Data) when is_binary(Data) ->
    List = erlang:binary_to_list(Data),
    format_data(List);
format_data(List) when is_list(List) ->
    NewList = format_data(List, []),
    NewList1 = lists:reverse(NewList),
    NewList2 = string:join(NewList1, "\n"),
    Binary = erlang:list_to_binary(NewList2),
    Binary.

format_data(List, NewList) ->
    case length(List) > 64 of
        true ->
            {List1, List2} = lists:split(64, List),
            format_data(List2, [List1|NewList]);
        false ->
            [List|NewList]
    end.

参考文档

  1. https://github.com/potatosalad/erlang-crypto_rsassa_pss
  2. https://elixirforum.com/t/verifying-web-crypto-signatures-in-erlang-elixir/20727
  3. https://blog.csdn.net/huangshihaont/article/details/82849920
]]> <p>最近需要erlang使用rsa实现签名验证<br>在网上搜了好久终于拼接成一份完整的代码</p> CENTOS下命令行播放音乐 https://www.mingilin.com/2021/12/28/centos/centos-aplay/ 2021-12-28T08:00:00.000Z 2026-01-15T05:33:18.354Z

最近需要盘点公司的资产
部分centos主机关联不上具体的IP
又不方便关机

想到一个简单的方式：ssh远程后，播放音乐，用耳机听下

搜索了linux下的命令行播放器，发现大部分在centos6上没法使用yum安装

最后发现了aplay，自带的，只是听个声，够用了

安装

yum install alsa-utils -y
本来机器上已经有了，忽略

显示设备列表

1
2
3
4
5
6
7
8
9
10
11
12
13
14
[root@platform ~]# aplay -l
**** List of PLAYBACK Hardware Devices ****
card 0: MID [HDA Intel MID], device 3: HDMI 0 [HDMI 0]
  Subdevices: 1/1
  Subdevice #0: subdevice #0
card 0: MID [HDA Intel MID], device 7: HDMI 1 [HDMI 1]
  Subdevices: 1/1
  Subdevice #0: subdevice #0
card 0: MID [HDA Intel MID], device 8: HDMI 2 [HDMI 2]
  Subdevices: 1/1
  Subdevice #0: subdevice #0
card 1: PCH [HDA Intel PCH], device 0: ALC887-VD Analog [ALC887-VD Analog]
  Subdevices: 1/1
  Subdevice #0: subdevice #0

显示有4个设备：
3个HDMI
1个ALC887-VD Analog，虽然名字不知道什么意思，但是很明显这个就是音频设备，Analog-模拟

播放

找个歌曲，比如国歌，上传上去

1
2
3
4
5
6
7
## -D 指定设备
## 1 - card 1
## 0 - device 0
[root@platform ~]# aplay -D hw:1,0 国歌.wav
Playing WAVE '国歌.wav' : Signed 16 bit Little Endian, Rate 44100 Hz, Stereo

## 卡在这儿表示正常播放了

开始播放了，找个耳机去机器上听下，现在可以确定IP了，😄

参考文档

  1. https://blog.csdn.net/wangji163163/article/details/51625961
]]> <p>最近需要盘点公司的资产<br>部分centos主机关联不上具体的IP<br>又不方便关机</p> <p>想到一个简单的方式：ssh远程后，播放音乐，用耳机听下</p> 使用fpm打包 https://www.mingilin.com/2021/11/24/centos/centos-fpm/ 2021-11-24T02:00:00.000Z 2026-01-15T05:33:18.356Z

fpm
The goal of fpm is to make it easy and quick to build packages such as rpms, debs, OSX packages, etc.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
yum install ruby-devel gcc make rpm-build rubygems
gem sources -a https://mirrors.aliyun.com/rubygems/
gem sources --list
gem install fpm

fpm -p outdir -s dir -t rpm -n website --iteration 1.el6 -d aaa -d psmisc -v 1.0.1 -C ~/hello/

## -p 输出目录
## -d 依赖
## -v 版本
## -n name
## -C 包目录,~/hello/ => /
##          ~/hello/usr/bin/hello => /usr/bin/hello

]]> <link rel="stylesheet" class="aplayer-secondary-style-marker" href="\assets\css\APlayer.min.css"><script src="\assets\js\APlayer.min.js" cla ios15 修复websocket ssl连接失败的问题 https://www.mingilin.com/2021/09/29/erlang/erlang-ios15-wss/ 2021-09-29T04:00:00.000Z 2026-01-15T05:33:18.376Z

玩家反馈，ios15无法登录游戏，android和ios其他版本没有问题

分析发现，ios15将原本是一条数据内容分成三份发送

1
2
3
4
5
6
7
8
## 本来这应该是一条数据的
## FIN - Payload len
websocket:request:53 [mfa:proc_lib:init_p/5] parse_frames:{ssl,hybi,<<130,131>>,{ssl,{sslsocket,{gen_tcp,#Port<0.17851>,tls_connection,<0.533.0>},<0.6628.124>}}}
## Masking-key
websocket:request:53 [mfa:proc_lib:init_p/5] parse_frames:{ssl,hybi,<<153,193,1,85>>,{ssl,{sslsocket,{gen_tcp,#Port<0.17851>,tls_connection,<0.533.0>},<0.6628.124>}}}
## Payload Data
websocket:request:53 [mfa:proc_lib:init_p/5] parse_frames:{ssl,hybi,<<190,209,15>>,{ssl,{sslsocket,{gen_tcp,#Port<0.17851>,tls_connection,<0.533.0>},<0.6628.124>}}}

对应的协议格式：

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
 0                   1                   2                   3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-------+-+-------------+-------------------------------+
|F|R|R|R| opcode|M| Payload len |    Extended payload length    |
|I|S|S|S|  (4)  |A|     (7)     |             (16/63)           |
|N|V|V|V|       |S|             |   (if payload len==126/127)   |
| |1|2|3|       |K|             |                               |
+-+-+-+-+-------+-+-------------+ - - - - - - - - - - - - - - - +
|     Extended payload length continued, if payload len == 127  |
+ - - - - - - - - - - - - - - - +-------------------------------+
|                               |Masking-key, if MASK set to 1  |
+-------------------------------+-------------------------------+
| Masking-key (continued)       |          Payload Data         |
+-------------------------------- - - - - - - - - - - - - - - - +
:                     Payload Data continued ...                :
+ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +
|                     Payload Data continued ...                |
+---------------------------------------------------------------+

对于使用mochiweb的websocket只要增加

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
parse_hybi_frames(_, <<>>, Acc) ->
    lists:reverse(Acc);

......此处省略N行

%% 数据不完整，继续收
parse_hybi_frames(Socket, PartFrame, Acc) ->
    %%  io:format("3 ~p ~n",[{_Fin,_Rsv,_Opcode,_Mask,_PayloadLen,_MaskKey}]),
    ok = mochiweb_socket:exit_if_closed(mochiweb_socket:setopts(Socket, [{packet, 0}, {active, once}])),
    receive
        {tcp_closed, _} ->
            mochiweb_socket:close(Socket),
            exit(normal);
        {ssl_closed, _} ->
            mochiweb_socket:close(Socket),
            exit(normal);
        {tcp_error, _, _} ->
            mochiweb_socket:close(Socket),
            exit(normal);
        {Proto, _, Continuation} when Proto =:= tcp orelse Proto =:= ssl ->
            parse_hybi_frames(Socket, <<PartFrame/binary, Continuation/binary>>,
                Acc);
        _ ->
            mochiweb_socket:close(Socket),
            exit(normal)
    after
        5000 ->
            mochiweb_socket:close(Socket),
            exit(normal)
    end.

其他语言也差不多的逻辑，数据不全就继续等待数据了

参考文档

  1. https://datatracker.ietf.org/doc/html/draft-ietf-hybi-thewebsocketprotocol-10
]]> <link rel="stylesheet" class="aplayer-secondary-style-marker" href="\assets\css\APlayer.min.css"><script src="\assets\js\APlayer.min.js" cla 运行中的mongo减少内存占用 https://www.mingilin.com/2021/09/17/centos/centos-mongo-memory/ 2021-09-17T09:17:07.000Z 2026-01-15T05:33:18.360Z

最近查看公司机器的内存占用情况，发现mongod大约占了50%的内存。
命令：ps auxc|head -1;ps auxc|grep -v PID|sort -rn -k +4|head;
原来内存默认使用的是(系统内存-1GB)*50%（据说是3.4版本+）。

这也太坑了，服务器又不是专门用作DB的，还有其他进程也要吃内存。

运行中的mongod，也不敢restart，查询了可能的运行中清理内存。
注意：没有在正式环境中执行过，仅作参考。

方法1(这个应该可以)

关闭所有的数据库:
db.adminCommand({closeAllDatabases: 1})
或者use admin; db.runCommand({closeAllDatabases: 1})

使用crontab定时执行mongo --eval "db.adminCommand({closeAllDatabases: 1})"?也许可以

有新的数据进来的话,会重新开数据库的

方法2(没试过,不知道进程是否会重启)

要安装cgroups，正式环境中没有，没试过，不清楚进程会不会重启

  1. cgcreate -g memory:DBLimitedGroup
  2. echo 16G > /sys/fs/cgroup/memory/DBLimitedGroup/memory.limit_in_bytes
  3. sync; echo 3 > /proc/sys/vm/drop_caches
  4. cgclassify -g memory:DBLimitedGroup $(pidof mongod)

方法3(应该要重启的，没有试过)

mongod.conf增加wiredTigerCacheSizeGB=8，然后mongod reload
或者
/usr/bin/mongod --config /etc/mongod.conf --fork --wiredTigerCacheSizeGB 8

参考文档

  1. https://www.techpaste.com/2016/04/limit-mongodb-memory-usage/
  2. https://www.cnblogs.com/On-my-way/p/9708225.html
  3. https://www.cnblogs.com/wt11/p/9291583.html
  4. https://stackoverflow.com/questions/6861184/is-there-any-option-to-limit-mongodb-memory-usage
  5. https://mongodb-documentation.readthedocs.io/en/latest/reference/command/listDatabases.html#gsc.tab=0
  6. https://segmentfault.com/q/1010000002953588
]]> <p>最近查看公司机器的内存占用情况，发现mongod大约占了50%的内存。<br>命令：<code>ps auxc|head -1;ps auxc|grep -v PID|sort -rn -k +4|head;</code><br>原来<code>内存默认使用的是(系统内存-1GB)*50%</code>（据说是3.4版本+）。</p> <p>这也太坑了，服务器又不是专门用作DB的，还有其他进程也要吃内存。</p> <p>运行中的mongod，也不敢restart，查询了可能的运行中清理内存。<br><font color=red>注意：没有在正式环境中执行过，仅作参考。</font></p> 共享Android手机上的音视频到智能电视上 https://www.mingilin.com/2021/08/13/mobile/mobile-dlna-server/ 2021-08-13T06:00:00.000Z 2026-01-15T05:33:18.385Z

server端

下载地址:

安装到自己的手机上，然后点击右上角的+，添加需要共享的视频/音频
确保可以后台运行

client端

下载VLC for Android
安装到某盒子或者智能电视上
确保server端和client端在同一个局域网中

打开VLC，稍等片刻就可以在本地网络中看到了
如果看不到的话,就重启下server端

]]> <link rel="stylesheet" class="aplayer-secondary-style-marker" href="\assets\css\APlayer.min.css"><script src="\assets\js\APlayer.min.js" cla 农历公历转换 https://www.mingilin.com/2021/08/09/other/other-lunar2solar/ 2021-08-09T00:00:00.000Z 2026-01-15T05:33:18.389Z

农历转公历是没有规律的，所以只能根据已有的数据转换
香港天文台的数据：https://www.hko.gov.hk/tc/gts/time/conversion1_text.htm#

自己转换出了一个lunar.db(点击下载)，用sqilte3打开

1
2
3
>sqlite3 lunar.db "SELECT solar from lunar2solar where lunar=\"2023-02-22\""
2023-03-13
2023-04-12

自己随便写了一个农历转公历的接口，其实就是从lunar.db中查询数据而已
很随意的，性能没法保证的
https://tools.web.mingilin.com/lunar2solar/lunar2solar.php?lunar=2023-02-22
日期格式必须是YYYY-MM-DD

1
2
3
$ curl --silent https://tools.web.mingilin.com/lunar2solar/lunar2solar.php?lunar=2023-02-22 | jq -r '.data | .[].solar'
2023-03-13
2023-04-12
]]> <link rel="stylesheet" class="aplayer-secondary-style-marker" href="\assets\css\APlayer.min.css"><script src="\assets\js\APlayer.min.js" cla Win10下git clone ssh免密 https://www.mingilin.com/2021/08/08/windows/windows-git-clone-nopass/ 2021-08-08T10:00:00.000Z 2026-01-15T05:33:18.398Z

git for windows

  1. 启动ssh-agent服务
    1. Win+s搜索服务,以管理员身份运行
    2. 设置OpenSSH Authentication Agent为开机启动
  2. ssh-add增加私钥
    私钥放到C:\Users\用户名目录下,ssh-add %USERPROFILE%\ssh_keys\id_rsa
    可以创建一个开机启动.bat(Win+R->shell:startup)
    1
    2
    3
    4
    5
    echo 启动win10_ssh-agent
    echo 环境变量增加GIT_SSH=C:\WINDOWS\System32\OpenSSH\ssh.exe
    C:\WINDOWS\System32\OpenSSH\ssh-agent.exe
    ssh-add %USERPROFILE%\ssh_keys\id_rsa
    ssh-add %USERPROFILE%\ssh_keys\id_rsa2
  3. 修改git配置
    1. Win+s搜索编辑系统环境变量
    2. 增加系统环境变量GIT_SSH=C:\WINDOWS\System32\OpenSSH\ssh.exe
  4. 完成
    git clone ssh://xxx应该就可以正常工作了

TortoiseGIT

  1. 方法1:
    1. 先设置好git for windows
    2. 修改配置(Settings -> Network -> SSH Client)
      修改为C:\WINDOWS\System32\OpenSSH\ssh.exe
  2. 方法2:
    1. 启动Pageant，添加私钥.ppk
    2. 修改配置(Settings -> Network -> SSH Client)
      修改为Your\TortoiseGit\Path\bin\TortoisePlink.exe
]]> <link rel="stylesheet" class="aplayer-secondary-style-marker" href="\assets\css\APlayer.min.css"><script src="\assets\js\APlayer.min.js" cla 【转】DAVx5无法开启OpenTasks/Tasks.org权限的问题 https://www.mingilin.com/2021/07/30/other/other-davx5-sync/ 2021-07-30T10:00:00.000Z 2026-01-15T05:33:18.387Z

原文链接: https://blog.wanfajie.com/2021/02/566

小米6手机（MIUI 11 20.1.16）中使用 DAVx5 显示缺少权限、无法同步 Tasks/OpenTasks 中任务。并且在 “设置” -> “应用权限” 中点击 “OpenTasks权限”/“Tasks权限” 开关无法打开。查看 DAVx5 日志发现以下四项权限被禁止：

  • org.dmfs.permission.READ_TASKS: denied
  • org.dmfs.permission.WRITE_TASKS: denied
  • org.tasks.permission.READ_TASKS: denied
  • org.tasks.permission.WRITE_TASKS: denied

令人困惑的是，MIUI 既不给出授权提示，在权限管理中也找不到自定义应用权限授权的地方。对 MIUI 的“设置”地毯式搜索后，终于找到了解决方法。

  1. 首先安装好 DAVx5 及 OpenTasks/Tasks.org 应用。
  2. 在“全部参数”中点击5次“MIUI 版本”，开启开发者模式。
  3. 在“开发者选项”中，关闭位于最下面的几个选项中的“启用MIUI优化”。
  4. 回到桌面，长按 DAVx5 应用的图标，点击“应用信息”。
    P.S.: 此时，应用信息界面变了个样子。如果是通过“设置”进入“应用信息”的话，界面将保持 MIUI 的原状。
  5. 然后，点击“应用信息”界面中的“权限”。进入“应用权限”界面后，你会在最下方看到“其他权限”选项。
  6. 进入“其他权限”，权限列表中将出现 “Tasks” 之类的权限，打开权限开关。
    进入 DAVx5 的 “设置” -> “应用权限”，此时就可以开启 “OpenTasks权限”/“Tasks权限” 开关并正常同步 OpenTasks 中的数据。

最后，建议再重新开启“启用MIUI优化”。关闭优化后，许多设置像是重置了一样，一来重新设置嫌麻烦，二来开启MIUI优化手机使用起来于我而言也没什么不足。网络上对MIUI优化众说纷纭，就看各位自行判断了。

  1. 在Google Play上DAVx5需要米，在F-Droid免费；
  2. 按照原文的方法，第一次重新“开启MIUI优化”后，DAVx5权限被重置了，
    又重新关闭再开启，DAVx5可以用了，
    可能成功与否要看人品；
  3. Tasks.org需要订购后才能使用DAVx5同步，没米，果断放弃，用OpenTasks；
  4. 使用Radicale自建CalDAV和CardDAVServer，真香，
    如果配合docker就更香；
  5. PC上用Thunder Bird+TbSync插件，管理日程和联系人；
]]> <link rel="stylesheet" class="aplayer-secondary-style-marker" href="\assets\css\APlayer.min.css"><script src="\assets\js\APlayer.min.js" cla Termux(Android)配置 https://www.mingilin.com/2021/07/29/centos/centos-termux/ 2021-07-29T10:00:00.000Z 2026-01-15T05:33:18.367Z

最近要接手一些运维的工作
有时候需要远程更新下
对比了几个安卓的ssh客户端,发现termux最好用了(可以很方便的将迁移sessions)(Termius也挺好的)

修改源

termux-change-repo

根目录地址

1
2
$ echo $PREFIX
/data/data/com.termux/files/usr

安装sshd服务

1
2
3
4
pkg install termux-services
pkg install openssh
sv-enable sshd
sv start sshd

默认端口 8022
现在就可以用ssh登录了,用sftp发送文件了

设置Termux软键盘

1
2
3
4
5
6
## ~/.termux/termux.properties
extra-keys = [ \
 ['|', '~', '/', '.', '-', '_', 'ENTER'], \
 ['ESC', 'TAB', 'HOME','UP','END','DEL', 'exit'], \
 ['CTRL','ALT','LEFT','DOWN','RIGHT', 'BKSP', 'KEYBOARD'] \
]

问题

参考文档

  1. https://mirrors.tuna.tsinghua.edu.cn/help/termux/
  2. https://wiki.termux.com/wiki/Termux-services
  3. https://wiki.termux.com/wiki/Touch_Keyboard

附带自动生成的远程登录的脚本

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
#!/bin/bash
eval "$(curl --silent https://www.mingilin.com/downloads/code/printcolor.sh)"
CACHE_DIR=~/.cache/
mkdir -p $CACHE_DIR
CFG_FILE=${CACHE_DIR}/ssh_test_cfg.cfg
if [ "$(uname -o)" == "Android" ];then
    GREP="busybox grep"
else
    GREP=grep
fi
MYSSH_KEY_DIR=~/myssh
cat > $CFG_FILE <<EOF
{"id":"7", "group":["","0. 内网机器"], "name":"DNS服务器-192.168.50.12", "user":"root", "host":"192.168.50.12", "port":"9022"}
{"id":"63", "group":["","Z101. vagrant"], "name":"192.168.56.10", "user":"root", "host":"192.168.56.10", "port":"22"}
{"id":"64", "group":["","Z101. vagrant"], "name":"192.168.56.11", "user":"root", "host":"192.168.56.11", "port":"22"}
EOF

function show_list() {
    filter=$1
    group=""
    while read line_t; do
        if [ "$filter" == "" ]; then
            line=$line_t
        else
            line=$(echo $line_t | ${GREP} "$filter")
        fi
        if [ "$line" == "" ]; then
            continue
        fi
        group1=$(echo $line | jq '.group | join("")')
        port=$(echo $line | jq .port | sed 's/"//g')
        if [ "$port" == "0" ]; then
            continue
        fi
        if [ "$group" == "$group1" ]; then
            echo -n " "
            echo $line | jq '[.id,.name] | join(" ===> ")' | sed 's/"//g'
        else
            group=$group1
            echo ""
            print_info "======================================================="
            _print_info ">>> "
            print_info $(echo $line | jq -r '.group | .[1:] | join(" > ")')
            print_info "-------------------------------------------------------"
            echo -n " "
            echo $line | jq -r '[.id,.name] | join(" ===> ")'
        fi
    done < $CFG_FILE
}

function login() {
    id=$1
    line=$(cat $CFG_FILE | ${GREP} "\"id\":\"$id\"")
    sshhost=$(echo $line | jq -r .host)
    sshport=$(echo $line | jq -r .port)
    sshuser=$(echo $line | jq -r .user)
    print_info "===> login $sshuser@$sshhost port:$sshport"
    ssh -o GSSAPIAuthentication=no -o StrictHostKeyChecking=no -p $sshport $sshuser@$sshhost
}

function start_sshagent() {
    [ ! -d $MYSSH_KEY_DIR ] && echo "[error] not found dir: $MYSSH_KEY_DIR" && exit

    eval $(ssh-agent)
    for i in $(find $MYSSH_KEY_DIR -type f); do
        ssh-add -q $i
    done
    ssh-add -l
}

function stop_sshagent() {
    eval $(ssh-agent -k)
}

function help() {
    print_info "======================================="
    print_info "show_list         - list all sessions  "
    print_info "show_list group   - list group sessions"
    print_info "login id          - login"
    print_info "======================================="
}

case $1 in
    "login")
        start_sshagent
        login $2
        stop_sshagent
        ;;
    "show_list")
        show_list $2
        ;;
    *) 
        help
        ;;
esac
]]> <p>最近要接手一些运维的工作<br>有时候需要远程更新下<br>对比了几个安卓的ssh客户端,发现<code>termux</code>最好用了(可以很方便的将迁移sessions)(<code>Termius</code>也挺好的)</p> screen https://www.mingilin.com/2021/07/04/centos/centos-screentool/ 2021-07-04T03:30:00.000Z 2026-01-15T05:33:18.365Z

个人经常使用的是tmux, 使用tmuxinator管理session

现在需要接手一些运维工作，但是默认安装的是screen，因此需要一些screen的知识

用惯了tmuxinator，也想使用类似的工具管理screen的session

其实就是简单的生成不同的screenrc配置，使用screen -c xxx.rc调用不同的配置

效果图

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
$ screentool

>>>>> COMMAND <<<<<
new session      # create new session
ls               # list all session
edit session     # edit session config
rm session       # remove session config
start session    # start session
stop session     # stop session
status session   # status session
install binname  # install screentool
exec session cmd # exec "cmd"(use quotes)
  cmd:
    1. a command(ex. python)
    2. -t python 10 python

>>>>> KEYBINDINGS <<<<<
+---------------+---------------------+
| ctrl-a d      | detach              |
| ctrl-a c      | 创建 window         |
| ctrl-a k      | 关闭 window         |
| ctrl-a A      | 重命名 windows      |
| ctrl-a w      | 显示所有窗口        |
|---------------+---------------------|
| ctrl-a 0~9    | 切换窗口            |
| ctrl-a ctrl-a | 快速切换窗口        |
| ctrl-a Tab    | 切换到另一个(分屏)  |
| ctrl-a p      | prev window         |
| ctrl-a n      | next window         |
|---------------+---------------------|
| ctrl-a S      | 水平分屏            |
| ctrl-a |      | 垂直分屏            |
| ctrl-a Q      | 去除分屏            |
|---------------+---------------------|
| ctrl-a [      | copy                |
|               | 空格是开始/结束选择 |
| ctrl-a ]      | paste               |
+---------------+---------------------+

附带源码

]]> <link rel="stylesheet" class="aplayer-secondary-style-marker" href="\assets\css\APlayer.min.css"><script src="\assets\js\APlayer.min.js" cla 推荐两个安卓下的桌面股票插件 https://www.mingilin.com/2020/12/04/other/other-deskstock-android/ 2020-12-04T08:07:42.000Z 2026-01-15T05:33:18.387Z

效果图

上面是：桌面股票
下面是：机灵股票

插件是极好的，就是股票不赚钱😂
原来股票精灵挺好用的，现在已经废掉了😂

]]> <link rel="stylesheet" class="aplayer-secondary-style-marker" href="\assets\css\APlayer.min.css"><script src="\assets\js\APlayer.min.js" cla 自用的NGINX+MYSQL+PHP集成环境 https://www.mingilin.com/2020/12/04/other/other-mywnmp/ 2020-12-04T07:36:00.000Z 2026-01-15T05:33:18.390Z

分享一个自用的web集成环境
在其他人的基础上修改的，现在实在找不到是在哪个基础上修改的，抱歉
只要有点开发基础，就可以快速的自定义组件，目前包括：

  • NGINX + PHP + MYSQL
  • MONGO
  • REDIS + MEMCACHED
  • XLIGHT(FTP SERVER)
  • OpenSSH-Win64

链接: https://pan.baidu.com/s/1xi2MzcR6P7lNrQ3JItYXUQ 提取码: w15d
二维码

]]> <link rel="stylesheet" class="aplayer-secondary-style-marker" href="\assets\css\APlayer.min.css"><script src="\assets\js\APlayer.min.js" cla ERLANG解决“证书出错，请登录微信支付商户平台下载证书” https://www.mingilin.com/2020/12/04/erlang/erlang-wx-pay/ 2020-12-04T06:55:00.000Z 2026-01-15T05:33:18.381Z

解决“证书出错，请登录微信支付商户平台下载证书”的核心代码

1
2
3
4
5
6
7
8
9
10
11
12
request_post(Url, Path, {data, Str}) ->
    ReqUrl = lists:concat([Url, Path]),
    %% +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    %% 😊这个是核心的核心😊
    SSLOptions = [
        {keyfile,"apiclient_key.pem"},
        {certfile,"apiclient_cert.pem"}
    ],
    HTTPOptions = [{ssl, SSLOptions}, {timeout, 5000}, {version, "HTTP/1.1"}],
    %% +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    Request = {ReqUrl, [], "application/x-www-form-urlencoded", iolist_to_binary(Str)},
    httpc:request(post, Request, HTTPOptions, []).

使用xmerl解析xml

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
scan_str(Str) ->
    {XmlElement, _Rest} = xmerl_scan:string(Str, [{space, normalize}]),
    [XmlElement1] = xmerl_lib:remove_whitespace([XmlElement]),
    XmlElement1.

value_of(Key, #xmlElement{} = X) ->
    case xmerl_xs:select(Key, X) of
        [#xmlElement{} = Find] ->
            de_cdata(xmerl_xs:value_of(Find));
        [] ->
            []
    end.
de_cdata("![CDATA[" ++ Data) ->
    [_,_|Data1] = lists:reverse(Data),
    unescape_str(lists:reverse(Data1));
de_cdata(Data) ->
    unescape_str(Data).

unescape_str(Str) ->
    Str1 = unicode:characters_to_binary(Str),
    GtEsc  = re:replace(Str1, "&amp;", "\\&", [global]),
    LtEsc  = re:replace(GtEsc,  "&gt;",  ">",   [global]),
    AmpEsc = re:replace(LtEsc,  "&lt;",  "<",   [global]),
    Text   = re:replace(AmpEsc, "&amp;", "\\&", [global]),
    util:to_list(Text).

将proplists转换为xml

1
2
3
4
5
6
7
export_xml(List) ->
    Fields = lists:map(
               fun({Key, Value}) ->
                       {Key, [], [util:to_list(Value)]}
               end, List),
    Xml = xmerl:export_simple([{xml, Fields}], xmerl_xml, [{prolog, ""}]),
    Xml.

相对完整的逻辑代码

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
notice_wx(UserName, PlayerId, Amount, OrderNum) ->
    %% 插入日志
    insert_extract_log(OrderNum, Amount),

    Url = "https://api.mch.weixin.qq.com/mmpaymkttransfers/promotion/transfers",

    MchAppId = "wx1234567890",
    MchId = 1234567890,
    Key = "key1234567890",
    Desc = "",
    %% 生成随机字符串
    RandStr = util:rand_str(16, "ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789"),
    DataT = [
            {mch_appid, MchAppId},
            {mchid, MchId},
            {device_info, config:server_id()},
            {nonce_str, RandStr},
            {partner_trade_no, OrderNum},
            {openid, UserName},
            {check_name, "NO_CHECK"},
            {amount, Amount},
            {desc, Desc}
           ],
    Data = lists:sort(DataT),
    DataStrList = lists:map( 
                    fun({K, V}) ->
                            io_lib:format("~p=~s", [K, util:to_list(V)])
                    end, Data),
    DataStr1 = string:join(DataStrList, "&"),
    DataStr = lists:concat([DataStr1, "&key=", Key]),
    Sign = util:md5(DataStr),
    Data1 = [{sign, util:to_upper(Sign)}|Data],
    Str = export_xml(Data1),

    %% POST请求
    case request_post(Url, "", {data, Str}) of
        {ok, {{_,200,"OK"}, _, Content}} ->
            Xml = scan_str(Content),
            Val = value_of("return_code", Xml),
            case Val of
                "SUCCESS" -> 
                    Code = value_of("result_code", Xml),
                    case Code of
                        "SUCCESS" -> 
                            WxPayNo = value_of("payment_no", Xml),
                            %% 更新日志
                            update_extract_log(OrderNum, WxPayNo, ?WX_REDBAT_EXTRACT_STATE_SUCC, "");
                        "FAIL" ->
                            ErrCode = value_of("err_code", Xml),
                            ErrCodeDesc = value_of("err_code_des", Xml),
                            %% 更新日志
                            update_extract_log(OrderNum, "", ErrCode, ErrCodeDesc)
                    end;
                "FAIL" ->
                    Msg = value_of("return_msg", Xml),
                    update_extract_log(OrderNum, "", "FAIL", Msg),
                    ?ERROR_MSG("return_msg: ~ts", [utf8_list_to_string(Msg)])
            end;
        Ret ->
            ?ERROR_MSG("ret:~p", [Ret])
    end.

request_post(Url, Path, {data, Str}) ->
    ReqUrl = lists:concat([Url, Path]),
    SSLOptions = [
        {keyfile,"apiclient_key.pem"},
        {certfile,"apiclient_cert.pem"}
    ],
    HTTPOptions = [{ssl, SSLOptions}, {timeout, 5000}, {version, "HTTP/1.1"}],
    Request = {ReqUrl, [], "application/x-www-form-urlencoded", iolist_to_binary(Str)},
    httpc:request(post, Request, HTTPOptions, []).

scan_str(Str) ->
    {XmlElement, _Rest} = xmerl_scan:string(Str, [{space, normalize}]),
    [XmlElement1] = xmerl_lib:remove_whitespace([XmlElement]),
    XmlElement1.

value_of(Key, #xmlElement{} = X) ->
    case xmerl_xs:select(Key, X) of
        [#xmlElement{} = Find] ->
            de_cdata(xmerl_xs:value_of(Find));
        [] ->
            []
    end.
de_cdata("![CDATA[" ++ Data) ->
    [_,_|Data1] = lists:reverse(Data),
    unescape_str(lists:reverse(Data1));
de_cdata(Data) ->
    unescape_str(Data).

unescape_str(Str) ->
    Str1 = unicode:characters_to_binary(Str),
    GtEsc  = re:replace(Str1, "&amp;", "\\&", [global]),
    LtEsc  = re:replace(GtEsc,  "&gt;",  ">",   [global]),
    AmpEsc = re:replace(LtEsc,  "&lt;",  "<",   [global]),
    Text   = re:replace(AmpEsc, "&amp;", "\\&", [global]),
    util:to_list(Text).

export_xml(List) ->
    Fields = lists:map(
               fun({Key, Value}) ->
                       {Key, [], [util:to_list(Value)]}
               end, List),
    Xml = xmerl:export_simple([{xml, Fields}], xmerl_xml, [{prolog, ""}]),
    Xml.

utf8_list_to_string(List) ->
    unicode:characters_to_list(list_to_binary(List)).

参考文档

  1. https://pay.weixin.qq.com/wiki/doc/api/tools/mch_pay.php?chapter=14_2
]]> <h3 id="解决“证书出错，请登录微信支付商户平台下载证书”的核心代码"><a href="#解决“证书出错，请登录微信支付商户平台下载证书”的核心代码" class="headerlink" title="解决“证书出错，请登录微信支付商户平台下载证书”的核心代码"></a>解决“证书出错，请登录微信支付商户平台下载证书”的核心代码</h3><figure class="highlight erlang"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br><span class="line">6</span><br><span class="line">7</span><br><span class="line">8</span><br><span class="line">9</span><br><span class="line">10</span><br><span class="line">11</span><br><span class="line">12</span><br></pre></td><td class="code"><pre><span class="line"><span class="function"><span class="title">request_post</span><span class="params">(Url, Path, &#123;data, Str&#125;)</span> -&gt;</span></span><br><span class="line"> ReqUrl = lists:concat([Url, Path]),</span><br><span class="line"> <span class="comment">%% +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++</span></span><br><span class="line"> <span class="comment">%% 😊这个是核心的核心😊</span></span><br><span class="line"> SSLOptions = [</span><br><span class="line"> &#123;keyfile,<span class="string">&quot;apiclient_key.pem&quot;</span>&#125;,</span><br><span class="line"> &#123;certfile,<span class="string">&quot;apiclient_cert.pem&quot;</span>&#125;</span><br><span class="line"> ],</span><br><span class="line"> HTTPOptions = [&#123;ssl, SSLOptions&#125;, &#123;timeout, <span class="number">5000</span>&#125;, &#123;version, <span class="string">&quot;HTTP/1.1&quot;</span>&#125;],</span><br><span class="line"> <span class="comment">%% +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++</span></span><br><span class="line"> Request = &#123;ReqUrl, [], <span class="string">&quot;application/x-www-form-urlencoded&quot;</span>, iolist_to_binary(Str)&#125;,</span><br><span class="line"> httpc:request(post, Request, HTTPOptions, []).</span><br></pre></td></tr></table></figure>