# crontab -e
@reboot sleep 15 && /opt/telegram-integration/start.sh

# cat /opt/telegram-integration/start.sh |grep -v ^#

/bin/sleep 5

source $HOME/.bashrc
source $HOME/.profile

SESSION_NAME=Telegram-Integration
/usr/bin/tmux set-option  -g  default-shell /bin/bash
/usr/bin/tmux new-session -ds $SESSION_NAME "source $HOME/.bashrc; source $HOME/.profile; cd /opt/telegram-integration; ./memogram"
echo "3" >> /tmp/tmux.out
echo `tmux ls` >> /tmp/tmux.out
sleep 3
echo `tmux ls` >> /tmp/tmux.out

# cat /tmp/tmux.out
3
Telegram-Integration: 1 windows (created Wed Jun 5 16:45:08 2024)
Telegram-Integration: 1 windows (created Wed Jun 5 16:45:08 2024)

# tmux ls
no server running on /tmp/tmux-0/default

# ps ax|grep tmux
  18452 pts/1    S+     0:00 grep --color=auto tmux

# cat /etc/danted.conf|grep -v "^$\|^#"
logoutput: stderr
internal: eth0 port = 1080
external: eth0
socksmethod: pam.username
user.privileged: proxy
user.unprivileged: nobody
user.libwrap: nobody
client pass {
    from: 0.0.0.0/0 to: 0.0.0.0/0
    log: error
}
socks pass {
    from: 0.0.0.0/0 to: 0.0.0.0/0
    log: error
    pamservicename: danted
}

# cat /etc/pam.d/danted
#%PAM-1.0
auth required pam_pwdfile.so pwdfile /etc/danted.passwd
account required pam_permit.so

# find /|grep pam_pwdfile.so
/lib/x86_64-linux-gnu/security/pam_pwdfile.so

# ls -al /etc/danted.passwd
-rw-r--r-- 1 proxy proxy 64 Sep  9 13:52 /etc/danted.passwd

danted[24907]: PAM audit_log_acct_message() failed: Operation not permitted

systemd[1]: danted.service: Failed to parse PID from file /var/run/danted.pid: Invalid argument

[root@localhost ~]# uname -a
Linux localhost.localdomain 3.10.0-693.11.6.v7.x86_64 #1 SMP Fri Jan 5 02:51:24 MST 2018 x86_64 x86_64 x86_64 GNU/Linux

[root@localhost ~]# lspci
00:00.0 Host bridge: Intel Corporation 82945G/GZ/P/PL Memory Controller Hub (rev 02)
00:02.0 VGA compatible controller: Intel Corporation 82945G/GZ Integrated Graphics Controller (rev 02)
00:1b.0 Audio device: Intel Corporation NM10/ICH7 Family High Definition Audio Controller (rev 01)
00:1c.0 PCI bridge: Intel Corporation NM10/ICH7 Family PCI Express Port 1 (rev 01)
00:1c.1 PCI bridge: Intel Corporation NM10/ICH7 Family PCI Express Port 2 (rev 01)
00:1d.0 USB controller: Intel Corporation NM10/ICH7 Family USB UHCI Controller #1 (rev 01)
00:1d.1 USB controller: Intel Corporation NM10/ICH7 Family USB UHCI Controller #2 (rev 01)
00:1d.2 USB controller: Intel Corporation NM10/ICH7 Family USB UHCI Controller #3 (rev 01)
00:1d.3 USB controller: Intel Corporation NM10/ICH7 Family USB UHCI Controller #4 (rev 01)
00:1d.7 USB controller: Intel Corporation NM10/ICH7 Family USB2 EHCI Controller (rev 01)
00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev e1)
00:1f.0 ISA bridge: Intel Corporation 82801GB/GR (ICH7 Family) LPC Interface Bridge (rev 01)
00:1f.2 IDE interface: Intel Corporation NM10/ICH7 Family SATA Controller [IDE mode] (rev 01)
00:1f.3 SMBus: Intel Corporation NM10/ICH7 Family SMBus Controller (rev 01)
02:00.0 Ethernet controller: Marvell Technology Group Ltd. 88E8053 PCI-E Gigabit Ethernet Controller (rev 19)
03:00.0 Ethernet controller: VIA Technologies, Inc. VT6105/VT6106S [Rhine-III] (rev 8b)
03:01.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL-8100/8101L/8139 PCI Fast Ethernet Adapter (rev 10)
03:07.0 FireWire (IEEE 1394): Texas Instruments TSB43AB23 IEEE-1394a-2000 Controller (PHY/Link)

[root@localhost ~]# ifconfig -a
enp2s0: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        ether 00:16:e6:42:23:bb  txqueuelen 1000  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
        device interrupt 17

enp3s1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.100.36  netmask 255.255.255.0  broadcast 192.168.100.255
        inet6 fe80::202:44ff:fe0c:b052  prefixlen 64  scopeid 0x20<link>
        ether 00:02:44:0c:b0:52  txqueuelen 1000  (Ethernet)
        RX packets 4960  bytes 310510 (303.2 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 386  bytes 35249 (34.4 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1  (Local Loopback)
        RX packets 239  bytes 512332 (500.3 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 239  bytes 512332 (500.3 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

[root@localhost ~]# lspci -s 02:00.0 -vv
02:00.0 Ethernet controller: Marvell Technology Group Ltd. 88E8053 PCI-E Gigabit Ethernet Controller (rev 19)
        Subsystem: Gigabyte Technology Co., Ltd Marvell 88E8053 Gigabit Ethernet Controller (Gigabyte)
        Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
        Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
        Latency: 0, Cache Line Size: 32 bytes
        Interrupt: pin A routed to IRQ 26
        Region 0: Memory at e1000000 (64-bit, non-prefetchable) [size=16K]
        Region 2: I/O ports at 9000 [size=256]
        [virtual] Expansion ROM at e0000000 [disabled] [size=128K]
        Capabilities: [48] Power Management version 2
                Flags: PMEClk- DSI- D1+ D2+ AuxCurrent=0mA PME(D0+,D1+,D2+,D3hot+,D3cold+)
                Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=1 PME-
        Capabilities: [50] Vital Product Data
                Product Name: Marvell Yukon 88E8053 Gigabit Ethernet Controller
                Read-only fields:
                        [PN] Part number: Yukon 88E8053
                        [EC] Engineering changes: Rev. 1.9
                        [MN] Manufacture ID: 4d 61 72 76 65 6c 6c
                        [SN] Serial number: AbCdEfG4223BB
                        [CP] Extended capability: 01 10 cc 03
                        [RV] Reserved: checksum good, 9 byte(s) reserved
                Read/write fields:
                        [RW] Read-write area: 121 byte(s) free
                End
        Capabilities: [5c] MSI: Enable+ Count=1/2 Maskable- 64bit+
                Address: 00000000fee0300c  Data: 4142
        Capabilities: [e0] Express (v1) Legacy Endpoint, MSI 00
                DevCap: MaxPayload 128 bytes, PhantFunc 0, Latency L0s unlimited, L1 unlimited
                        ExtTag- AttnBtn- AttnInd- PwrInd- RBE- FLReset-
                DevCtl: Report errors: Correctable- Non-Fatal- Fatal- Unsupported-
                        RlxdOrd- ExtTag- PhantFunc- AuxPwr+ NoSnoop-
                        MaxPayload 128 bytes, MaxReadReq 512 bytes
                DevSta: CorrErr+ UncorrErr- FatalErr- UnsuppReq- AuxPwr+ TransPend-
                LnkCap: Port #0, Speed 2.5GT/s, Width x1, ASPM L0s, Exit Latency L0s <256ns, L1 unlimited
                        ClockPM- Surprise- LLActRep- BwNot- ASPMOptComp-
                LnkCtl: ASPM Disabled; RCB 128 bytes Disabled- CommClk-
                        ExtSynch- ClockPM- AutWidDis- BWInt- AutBWInt-
                LnkSta: Speed 2.5GT/s, Width x1, TrErr- Train- SlotClk+ DLActive- BWMgmt- ABWMgmt-
        Capabilities: [100 v1] Advanced Error Reporting
                UESta:  DLP- SDES- TLP- FCP- CmpltTO- CmpltAbrt- UnxCmplt- RxOF- MalfTLP- ECRC- UnsupReq- ACSViol-
                UEMsk:  DLP- SDES- TLP- FCP- CmpltTO- CmpltAbrt- UnxCmplt- RxOF- MalfTLP- ECRC- UnsupReq- ACSViol-
                UESvrt: DLP+ SDES- TLP- FCP+ CmpltTO- CmpltAbrt- UnxCmplt- RxOF+ MalfTLP+ ECRC- UnsupReq- ACSViol-
                CESta:  RxErr- BadTLP- BadDLLP- Rollover- Timeout- NonFatalErr-
                CEMsk:  RxErr- BadTLP- BadDLLP- Rollover- Timeout- NonFatalErr-
                AERCap: First Error Pointer: 1f, GenCap- CGenEn- ChkCap- ChkEn-
        Kernel driver in use: sky2
        Kernel modules: sky2

[  357.553151] sky2 0000:02:00.0 enp2s0: disabling interface
[  358.383320] sky2 0000:02:00.0 enp2s0: enabling interface
[  358.383393] IPv6: ADDRCONF(NETDEV_UP): enp2s0: link is not ready
[  374.166389] sky2 0000:02:00.0 enp2s0: disabling interface
[  374.986098] sky2 0000:02:00.0 enp2s0: enabling interface
[  374.986170] IPv6: ADDRCONF(NETDEV_UP): enp2s0: link is not ready
[  390.765733] sky2 0000:02:00.0 enp2s0: disabling interface
[  391.589953] sky2 0000:02:00.0 enp2s0: enabling interface
[  391.590051] IPv6: ADDRCONF(NETDEV_UP): enp2s0: link is not ready
[  407.358849] sky2 0000:02:00.0 enp2s0: disabling interface
[  408.181702] sky2 0000:02:00.0 enp2s0: enabling interface
[  408.181776] IPv6: ADDRCONF(NETDEV_UP): enp2s0: link is not ready
[  423.962485] sky2 0000:02:00.0 enp2s0: disabling interface
[  424.778977] sky2 0000:02:00.0 enp2s0: enabling interface
[  424.779075] IPv6: ADDRCONF(NETDEV_UP): enp2s0: link is not ready
[  440.561238] sky2 0000:02:00.0 enp2s0: disabling interface
[  441.379278] sky2 0000:02:00.0 enp2s0: enabling interface
[  441.379350] IPv6: ADDRCONF(NETDEV_UP): enp2s0: link is not ready

сен 03 18:45:52 example.com unix_chkpwd[1816]: password check failed for user (root)
сен 03 18:45:52 example.com sshd[1814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.88.13  user=root
сен 03 18:45:52 example.com sshd[1814]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
сен 03 18:45:53 example.com sshd[1814]: Failed password for root from 192.168.88.13 port 5840 ssh2

# cat /etc/pam.d/system-auth
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      pam_env.so
auth        sufficient    pam_unix.so nullok try_first_pass
#auth        requisite     pam_succeed_if.so uid >= 1000 quiet_success
auth        requisite     pam_succeed_if.so
auth        required      pam_deny.so

account     required      pam_unix.so
account     sufficient    pam_localuser.so
account     sufficient    pam_succeed_if.so uid < 1000 quiet
account     required      pam_permit.so

password    requisite     pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=
password    sufficient    pam_unix.so sha512 shadow nullok try_first_pass use_authtok
password    required      pam_deny.so

session     optional      pam_keyinit.so revoke
session     required      pam_limits.so
-session     optional      pam_systemd.so
session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session     required      pam_unix.so

Nov 20 00:37:27 rpi ovpn-tcp[12251]: 37.21.122.9:53480 TLS Error: reading acknowledgement record from packet
Nov 20 00:37:27 rpi ovpn-tcp[12251]: 37.21.122.9:53480 Fatal TLS error (check_tls_errors_co), restarting
Nov 20 00:37:30 rpi ovpn-tcp[12251]: TCP connection established with [AF_INET]176.114.16.35:40356

port 1194
proto tcp
dev tun1

server 10.10.0.0 255.255.255.0
ifconfig-pool-persist /etc/openvpn/ovpn/ipp.txt
client-config-dir /etc/openvpn/ovpn/ccd
ccd-exclusive

keepalive 10 60
cipher AES-256-CBC   # AES

client-to-client

#max-clients 20
user vpn
group vpn

persist-key
persist-tun
ping-timer-rem
status /etc/openvpn/ovpn/status-tcp.log
status-version 2

verb 1
mute 20

script-security 2

## ca.crt
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>

## server.crt
<cert>
SKIP, SKIP, SKIP
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
SKIP, SKIP, SKIP
</cert>

## server.key
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>

## dh*.pem
<dh>
-----BEGIN DH PARAMETERS-----
-----END DH PARAMETERS-----
</dh>

client
dev tun
port 1194
proto tcp-client
remote domain.ru 1194
keepalive 10 60
cipher AES-256-CBC   # AES

persist-key
verb 1
script-security 3 system

## ca.crt
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>

## client.crt
<cert>
=== SKIP, SKIP, SKIP ===
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication
=== SKIP, SKIP, SKIP ===
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>

## client.key
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>

## dh*.pem
<dh>
-----BEGIN DH PARAMETERS-----
-----END DH PARAMETERS-----
</dh>

# update-grub
/usr/sbin/grub-probe: error: cannot find a device for / (is /dev mounted?).

/dev/sda1 /boot
/dev/sda5 (LVM, внутри него вся система в одном lv сидит)

# cat smb.conf
[global]
   workgroup = WORKGROUP
   dns proxy = no
   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog = 0
   panic action = /usr/share/samba/panic-action %d
   security = user
   encrypt passwords = true
   passdb backend = tdbsam
   obey pam restrictions = yes
   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
   pam password change = yes
   map to guest = bad user
   usershare allow guests = yes
[printers]
   comment = All Printers
   browseable = no
   path = /var/spool/samba
   printable = yes
   guest ok = no
   read only = yes
   create mask = 0700
[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   browseable = yes
   read only = yes
   guest ok = no
[public]
   browseable = yes
   read only = no
   create mask = 0666
   directory mask = 0777
   path = /mnt/public
   guest ok = yes
[private]
   browseable = yes
   read only = no
   create mask = 0666
   directory mask = 0777
   path = /mnt/private
   guest ok = no
   valid users = vech
[private001]
   browseable = yes
   read only = no
   create mask = 0666
   directory mask = 0777
   path = /mnt/private001
   guest ok = no
   valid users = vech