TURNKEYGNU / LINUX
中文

更新

新的 TurnKey CakePHP 版本 (19. 0)

变化 :\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ ưμ㼯A
  • 更新 CakePHP 到最新上游版本 - v5. 4.0. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  • 通过作曲家安装 CakePHP 骨架 App - 关闭 替换遗留的“. list” 与 Deb822 的远程配置文件。 sources' 文件.
  • “Proper” IPv6支持。 可能仍有一些空白, 仍然需要化妆品 。 工作但完全正常。
  • 改进的故障2ban配置 : ưμ㼯A
  • 增加默认查找时间( 10分钟) & amp; 碰顶最大值(3) 以尽量减少 用户意外锁门的风险。
  • 已删除的冗余 v18.x 自定义补丁. {}}\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • 默认情况下包含'zstd',以支持更小的可解开更快的initramfs.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • 将“ ifupdown” 替换为“ ifupdown- ng”( 和“ ifupdown- ng- compat ”) 。\\\\ \ \ \ \ \ \ \ \ \
  • 将“ udhcpc”( 仅限 IPv4) 替换为“ dhcpcd- base”( 双堆 ipv4/ 6) 。 包括自定义 TurnKey 配置( 如果上下调为 & amp; 如果下调为 ) 'tkl-dhcpcd-ifupd-glue'),以确保DHCP配置与同步 /etc/network/interfaces file.
  • TurnKey 代码的一般代码清理; 构建代码, 构建工具和 TurnKey 自定义工具( amp; 库)。 更新包括林化、 格式化和样式 更新。 仍然为 WIP , 但启动良好。 @ @ info: status
  • 配置控制台( confconsole) : ưμ㼯A
  • 插件 : ưμ㼯A
  • 设置静态IP时支持防火墙配置 。 影响了 OpenVPN(默认情况下允许使用防火墙的船舶). 关闭 https://github.com/turnkeylinux/tracker/issues/2037">#2037.
    • .
  • Fix Let's Encrypt集成失败了回转运行。 Closes
  • 特性 : ưμ㼯A IPv6 的
  • “Proper”支持: ưμ㼯A
  • make ifutil.py 模块代码“ IPv6 意识”,包括可靠 /etc/network/interfaces 管理,使用“ int6” stanza/s. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  • 在"usage"页面上显示IPv6信息 - 仅在配置 IPv6 时显示 。 特别感谢马科斯: https://github.com/marcos-mendez - https://popsolutions.co/
  • 杂项清理和改进代码和包装。见 Confconsole 发布详细说明。
  • 首个启动初始化( inithooks) : ưμ㼯A
  • 插件 : ưμ㼯A
  • 确保每个启动脚本每个启动时只运行一次 。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • firstboot.d/15regen-slcert: 爱奇艺的音乐作品 ưμ㼯A
  • 仅需要重新启动已运行的服务 重新启动只应用更新的证书 。 @% 0%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
  • 首个启动. d/01ipconfig : ưμ㼯A
  • minor bugfix.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • 特性/改进和其他重要变化: ưμ㼯A
  • 重用一个“ inithooks. service” 并重置组件集成 盖蒂1
  • 延迟启动 inithooks/ confconsole 启动时间,以减少启动机会 启动消息覆盖 inithooks/confconsole. ưμ㼯A
  • 开发者 - 请注意, 前缀小于“ 30” 的钩 仍然运行较早,所以_永远_应该_不互动. {}}}}}}}}}}}}}}}}}}}}}}}}}}@0}}}
    • 在所有情况下默认运行后创建首启动( 先前为 仅启用于“ 无头” 构建 ) @ 0 @ label
  • 新建种子前变量“ AUTO_RUN” 以跳过交互式配置 (重执行前"无头"构建功能). ^ 0.
  • 将遗留的.d 脚本替换为系统d turnkey-init-fence.service (和amp; 脚本, 由 $ 调用) 服务)。
  • 添加支持“ systemctl reload turnkey- init- fence. service” - ,但会重新启动“ simplehttpd.py” (init-fence 迷你网络服务器) 不禁用防火墙规则。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • 支持自定义 init- fence 内容 。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • 更新为 IPv6 地址的动态生成 SSH 信息 显示。
  • Add IPv6 支持迷你服务器。 @ @% 0\%
  • 保证 inithook 'SEC_UPDATES' 种子前变量测试为大小写不灵敏; 消除种子前出现意外行为的风险。
  • 杂项清理和改进代码和包装。见 Inithooks 发布详细说明。
  • 网络管理控制台(webmin): ưμ㼯A
  • 升级到最近的上游 。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • 重构 TurnKey Webmin包装工艺,支持更方便的更新; 3. 旨在尽可能密切跟踪上游释放情况 (通过TurnKey apt repo提供). ^ 0.
  • 更新默认 Webmin 配置 : ưμ㼯A
  • 默认情况下聆听 IPv6。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • 预设了匹配 IPv4 规则的 IPv6 防火墙( 但未启用 - as 每一次历史IPv4默认值). ^ 0.
  • 自动重定向 http QQgt; https. QQ0X>
  • 默认 30 分钟用户登录( 通过登录页面“ 记住” 即可覆盖) $% 0============================================================================================================================================================================================================================================================
  • 更新的日志路径和固定日志文件旋转 。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • 备份( tklbam) : ưμ㼯A
  • 插件 : ưμ㼯A
  • Fix 已断开的帮助呼叫器( 不确定它已断开多久 !) 。 @ @ 0\% @%
  • Fix 中断的焦油命令( Debian 中删除的功能已折旧) 崔克茜(英语:Trixie)).
  • 温度/改进: ưμ㼯A
  • 移动核心程序以及直接依赖的 python2 运行时间从 cpython2(EOL)改为Pypy(仍然支持 - 由TurnKey包装). X> X> X>
  • 将所有其他组件迁移到蟒蛇3。 注:其余的蟒蛇2 TKLBAM代码端口至蟒蛇3正在进行中,但 no ETA yet...
  • 杂项清理和改进代码和包装。 见 TKLBAM 发布 详细情况请注解。
  • 杂项代码清理和改进。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • 彻底检修 TurnKey 管理员集成, 包括移动 TurnKey 定制文件到 /etc/adminer(来自 /usr/share).
    • )
  • 多重错误修补/ 改进默认管理员主题。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • 更新的网络服务器配置; 包括硬化和管理员特定日志 文件.
  • fail2ban 规则保护管理员日志 in. {}\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • 有限地访问除本地安装的数据库以外的任何其他数据库。 保护免受行政官被用作攻击残酷政党的工具 服务器。 \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • 在构建时修改默认 Apache mod_sl conf, 而不是覆盖 确保只进行文字编辑,避免今后出现风险 Debian 更新被覆盖 。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • 更新 SSL/ TLS 密码列表 - 建议的“ 中间” 级别 Mozilla. 旨在平衡对老年客户的安全和支持.
  • 明确设置 ECDH 密钥交换的椭圆曲线。\\ 1\%
  • 已调用 mod_security 默认值 : ưμ㼯A
  • 锁定默认访问所有'.' 路径( 如 '. env' , '. git' 等) 至 强化安全性,避免意外泄露秘密。请注意, 将使用 HTTP-01 打破第三方 Let's Encrypt 集成 验证 - 例如 certbot. TurnKey 的集成在使用时没有受到影响 用于服务挑战的自定义 HTTP 服务器。 @% 1%% 1
  • 设置额外的安全头 : X-Content-Type-option:"鼻音": ưμ㼯A
  • 防止文件被解释为非此内容 由内容类型声明。 内容- 安全政策 “ 框架- 祖先' ; ” : ++++
  • 防止其他网站在框架内嵌入页面, 维护 以打击劫持攻击。
  • 可能情况下可启用 HTTP/2。 注 HTTP/2 与 Apache 无法兼容 mod_php - 这是TurnKey LAMP 的默认方法 应用设备主机 PHP 应用程序. TurnKey 将迁移到使用 PHP- FPM in 未来。
  • 直接HTTP QXgt; HTTPS 默认。\\\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \
  • 注: TLSv1.2 将在未来的 TurnKey 发布中默认禁用。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
  • 创建默认的 /var/lib/php/sessions' 缓存目录并确保其可写 由web服务器(一些 PHP 应用程序的默认 PHP 会话缓存位置) 。\\ 2\\\\

    链接\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ ưμ㼯A
  • 释放元文件(签名,表)