更新
New TurnKey WordPress version (19.0)
变化 :\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
ưμ㼯A更新 WordPress 到最近的上游 - v7.0.4. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 升级基版分布到 Debian 13.x/Trixie. {}}}\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 替换 TurnKey 自定义 Debian- Installer 以新自定义为基础的“ di- live” Name
TurnKey 安装器从零开始建造; “ tkl- installer ”. @ @% 0\% @% 更新的发行签名密钥 & amp; apt repo密钥 - 现在包含为
'turnkey键' 的 db 包。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 替换遗留的“. list” 与 Deb822 的远程配置文件。 sources'
文件. “Proper” IPv6支持。 可能仍有一些空白, 仍然需要化妆品 。
工作但完全正常。 改进的故障2ban配置 :
ưμ㼯A 增加默认查找时间( 10分钟) & amp; 碰顶最大值(3) 以尽量减少
用户意外锁门的风险。 已删除的冗余 v18.x 自定义补丁. {}}\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 默认情况下包含'zstd',以支持更小的可解开更快的initramfs.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 将“ ifupdown” 替换为“ ifupdown- ng”( 和“ ifupdown- ng- compat ”) 。\\\\ \ \ \ \ \ \ \ \ \ 将“ udhcpc”( 仅限 IPv4) 替换为“ dhcpcd- base”( 双堆 ipv4/ 6) 。
包括自定义 TurnKey 配置( 如果上下调为 & amp; 如果下调为 )
'tkl-dhcpcd-ifupd-glue'),以确保DHCP配置与同步
/etc/network/interfaces file. TurnKey 代码的一般代码清理; 构建代码, 构建工具和 TurnKey
自定义工具( amp; 库)。 更新包括林化、 格式化和样式
更新。 仍然为 WIP , 但启动良好。 @ @ info: status 配置控制台( confconsole) :
ưμ㼯A 插件 :
ưμ㼯A 设置静态IP时支持防火墙配置 。
影响了 OpenVPN(默认情况下允许使用防火墙的船舶).
关闭 https://github.com/turnkeylinux/tracker/issues/2037">#2037. .Fix Let's Encrypt集成失败了回转运行。 Closes 特性 :
ưμ㼯A
IPv6 的 “Proper”支持:
ưμ㼯A make ifutil.py 模块代码“ IPv6 意识”,包括可靠
/etc/network/interfaces 管理,使用“ int6” stanza/s. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 在"usage"页面上显示IPv6信息 - 仅在配置 IPv6 时显示 。
特别感谢马科斯:
https://github.com/marcos-mendez - https://popsolutions.co/ 杂项清理和改进代码和包装。见 Confconsole
发布详细说明。 首个启动初始化( inithooks) :
ưμ㼯A 插件 :
ưμ㼯A 确保每个启动脚本每个启动时只运行一次 。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ firstboot.d/15regen-slcert: 爱奇艺的音乐作品
ưμ㼯A 仅需要重新启动已运行的服务
重新启动只应用更新的证书 。 @% 0%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% 首个启动. d/01ipconfig :
ưμ㼯A minor bugfix.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 特性/改进和其他重要变化:
ưμ㼯A 重用一个“ inithooks. service” 并重置组件集成
盖蒂1 延迟启动 inithooks/ confconsole 启动时间,以减少启动机会
启动消息覆盖 inithooks/confconsole.
ưμ㼯A 开发者 - 请注意, 前缀小于“ 30” 的钩
仍然运行较早,所以_永远_应该_不互动. {}}}}}}}}}}}}}}}}}}}}}}}}}}@0}}} 在所有情况下默认运行后创建首启动( 先前为
仅启用于“ 无头” 构建 ) @ 0 @ label新建种子前变量“ AUTO_RUN” 以跳过交互式配置
(重执行前"无头"构建功能). ^ 0. 将遗留的.d 脚本替换为系统d
turnkey-init-fence.service (和amp; 脚本, 由 $ 调用)
服务)。 添加支持“ systemctl reload turnkey- init- fence. service” -
,但会重新启动“ simplehttpd.py” (init-fence 迷你网络服务器)
不禁用防火墙规则。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 支持自定义 init- fence 内容 。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 更新为 IPv6 地址的动态生成 SSH 信息
显示。 Add IPv6 支持迷你服务器。 @ @% 0\% 保证 inithook 'SEC_UPDATES' 种子前变量测试为大小写不灵敏;
消除种子前出现意外行为的风险。 杂项清理和改进代码和包装。见 Inithooks
发布详细说明。 网络管理控制台(webmin):
ưμ㼯A 升级到最近的上游 。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 重构 TurnKey Webmin包装工艺,支持更方便的更新; 3.
旨在尽可能密切跟踪上游释放情况
(通过TurnKey apt repo提供). ^ 0. 更新默认 Webmin 配置 :
ưμ㼯A 默认情况下聆听 IPv6。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 预设了匹配 IPv4 规则的 IPv6 防火墙( 但未启用 - as
每一次历史IPv4默认值). ^ 0. 自动重定向 http QQgt; https. QQ0X> 默认 30 分钟用户登录( 通过登录页面“ 记住” 即可覆盖)
$% 0============================================================================================================================================================================================================================================================ 更新的日志路径和固定日志文件旋转 。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 备份( tklbam) :
ưμ㼯A 插件 :
ưμ㼯A Fix 已断开的帮助呼叫器( 不确定它已断开多久 !) 。 @ @ 0\% @% Fix 中断的焦油命令( Debian 中删除的功能已折旧)
崔克茜(英语:Trixie)). 温度/改进:
ưμ㼯A 移动核心程序以及直接依赖的 python2 运行时间从
cpython2(EOL)改为Pypy(仍然支持 - 由TurnKey包装). X> X> X>将所有其他组件迁移到蟒蛇3。
注:其余的蟒蛇2 TKLBAM代码端口至蟒蛇3正在进行中,但
no ETA yet... 杂项清理和改进代码和包装。 见 TKLBAM 发布
详细情况请注解。 杂项代码清理和改进。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 彻底检修 TurnKey 管理员集成, 包括移动 TurnKey
定制文件到 /etc/adminer(来自 /usr/share). )多重错误修补/ 改进默认管理员主题。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 更新的网络服务器配置; 包括硬化和管理员特定日志
文件. fail2ban 规则保护管理员日志 in. {}\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 有限地访问除本地安装的数据库以外的任何其他数据库。
保护免受行政官被用作攻击残酷政党的工具
服务器。 \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 在构建时修改默认 Apache mod_sl conf, 而不是覆盖
确保只进行文字编辑,避免今后出现风险
Debian 更新被覆盖 。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 更新 SSL/ TLS 密码列表 - 建议的“ 中间” 级别
Mozilla. 旨在平衡对老年客户的安全和支持. 明确设置 ECDH 密钥交换的椭圆曲线。\\ 1\% 已调用 mod_security 默认值 :
ưμ㼯A 锁定默认访问所有'.' 路径( 如 '. env' , '. git' 等) 至
强化安全性,避免意外泄露秘密。请注意,
将使用 HTTP-01 打破第三方 Let's Encrypt 集成
验证 - 例如 certbot. TurnKey 的集成在使用时没有受到影响
用于服务挑战的自定义 HTTP 服务器。 @% 1%% 1 设置额外的安全头 :
X-Content-Type-option:"鼻音":
ưμ㼯A 防止文件被解释为非此内容
由内容类型声明。
内容- 安全政策 “ 框架- 祖先' ; ” : ++++ 防止其他网站在框架内嵌入页面, 维护
以打击劫持攻击。 可能情况下可启用 HTTP/2。 注 HTTP/2 与 Apache 无法兼容
mod_php - 这是TurnKey LAMP 的默认方法
应用设备主机 PHP 应用程序. TurnKey 将迁移到使用 PHP- FPM in
未来。 直接HTTP QXgt; HTTPS 默认。\\\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ 注: TLSv1.2 将在未来的 TurnKey 发布中默认禁用。\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 创建默认的 /var/lib/php/sessions' 缓存目录并确保其可写
由web服务器(一些 PHP 应用程序的默认 PHP 会话缓存位置) 。\\ 2\\\\ 释放元文件(签名,表)