{ "type": "BlogKnowledgeIndex", "version": 1, "site": "https://www.hellorx.site/", "generatedAt": "2026-10-25T04:00:24.148Z", "articles": [ { "id": "others/others-university-competition", "title": "大学生必修：焚决", "description": "大学竞赛的生存与修炼之道（焚决篇）。", "published": "2026-09-08T00:00:00.000Z", "url": "https://www.hellorx.site/posts/others/others-university-competition/", "jsonUrl": "https://www.hellorx.site/knowledge/articles/others/others-university-competition.json", "markdownUrl": "https://www.hellorx.site/knowledge/articles/others/others-university-competition.md", "category": "闲臆杂记", "tags": [ "大学", "竞赛" ], "topics": [ "deployment" ], "headings": [ "一、认清现实：专科生天生断一条腿", "二、那竞赛到底还搞不搞？", "三、肘击犹豫：做回自己", "四、怎么加入竞赛" ], "excerpt": "大学竞赛的生存与修炼之道（焚决篇）。", "wordCount": 44 }, { "id": "others/others-university-organization-expansion", "title": "大学生必修：组织扩展篇", "description": "大学里的组织生存指南：学生会、社团那些事（组织扩展篇）。", "published": "2026-09-07T00:00:00.000Z", "url": "https://www.hellorx.site/posts/others/others-university-organization-expansion/", "jsonUrl": "https://www.hellorx.site/knowledge/articles/others/others-university-organization-expansion.json", "markdownUrl": "https://www.hellorx.site/knowledge/articles/others/others-university-organization-expansion.md", "category": "闲臆杂记", "tags": [ "大学", "组织" ], "topics": [ "deployment" ], "headings": [ "校内组织", "1. 学生会 / 团委", "入党", "社团" ], "excerpt": "大学里的组织生存指南：学生会、社团那些事（组织扩展篇）。", "wordCount": 42 }, { "id": "projects/projects-linux-offline-source", "title": "Linux离线源办法", "description": "介绍 Linux 离线环境下的软件源搭建与使用方案。", "published": "2026-09-06T00:00:00.000Z", "url": "https://www.hellorx.site/posts/projects/projects-linux-offline-source/", "jsonUrl": "https://www.hellorx.site/knowledge/articles/projects/projects-linux-offline-source.json", "markdownUrl": "https://www.hellorx.site/knowledge/articles/projects/projects-linux-offline-source.md", "category": "部署文档", "tags": [ "Linux", "运维" ], "topics": [ "deployment" ], "headings": [ "一、Linux本地源", "1. YUM源", "备份默认源（不同系统本地源名字不一样）", "新建本地源", "2. APT源", "检查挂载情况", "备份默认源", "新建本地源", "二、指定源仓库下载", "1. YUM源", "备份默认源，从阿里云下载 yum 配置文件", "安装相关软件包（yum-utils 提供 reposync）", "创建仓库目录（httpd 默认发布目录，无需额外配置）", "根据 CentOS-Base.repo 同步阿里云软件包到本地", "生成仓库元数据（为 rpm 包建立依赖索引，客户端才能解析依赖）", "启动 httpd", "2. APT源", "下载机安装 apt-mirror 与 apache2", "编辑镜像列表", "执行同步（约几十 G，支持断点续传，中断后重新执行即可）", "若中断后无法启动，删除锁文件后重试", "软链接镜像目录到 apache2 默认发布目录", "启动 apache2", "三、总结" ], "excerpt": "介绍 Linux 离线环境下的软件源搭建与使用方案。", "wordCount": 349 }, { "id": "others/others-university-lessons-basics", "title": "大学生必修：炼气篇", "description": "大学四年的少走弯路经验分享（炼气篇）。", "published": "2026-08-29T00:00:00.000Z", "url": "https://www.hellorx.site/posts/others/others-university-lessons-basics/", "jsonUrl": "https://www.hellorx.site/knowledge/articles/others/others-university-lessons-basics.json", "markdownUrl": "https://www.hellorx.site/knowledge/articles/others/others-university-lessons-basics.md", "category": "闲臆杂记", "tags": [ "大学", "基础" ], "topics": [ "deployment" ], "headings": [ "一、打破滤镜的大学真相", "二、为什么大学学不到东西", "三、专科 > 本科", "四、你到底要做什么", "五、你给我跳出来", "六、最后" ], "excerpt": "大学四年的少走弯路经验分享（炼气篇）。", "wordCount": 38 }, { "id": "projects/projects-itai-kylin-20250001", "title": "Kylin进阶教程", "description": "基于银河麒麟Server V10的运维环境实战", "published": "2026-08-27T00:00:00.000Z", "url": "https://www.hellorx.site/posts/projects/projects-itai-kylin-20250001/", "jsonUrl": "https://www.hellorx.site/knowledge/articles/projects/projects-itai-kylin-20250001.json", "markdownUrl": "https://www.hellorx.site/knowledge/articles/projects/projects-itai-kylin-20250001.md", "category": "部署文档", "tags": [ "Linux", "信创", "运维" ], "topics": [ "deployment" ], "headings": [ "一、server1 系统环境配置", "1、修改主机名", "2、创建多级目录并查看", "3、复制文件并改名", "4、查看文件权限并修改为 640", "5、配置 YUM 仓库源", "6、安装配置 vsftpd", "受限用户 chroot", "双份日志", "7、配置 chrony 时间服务器", "8、配置 DNS 正向解析", "9、配置 NFS 网络共享", "二、server1 Docker 容器集群管理", "1、二进制方式部署 Docker 20.10.9", "2、导入镜像并创建容器", "3、容器内安装配置 Mariadb", "4、Mariadb 互为主备", "5、创建数据库与表", "三、server1 Harbor 镜像仓库", "1、docker-compose 离线安装 Harbor", "2、API 创建用户、项目并添加成员", "3、上传镜像到 Harbor", "四、GlusterFS 存储集群（两台主机执行）", "1、格式化磁盘并挂载（两台）", "2、添加信任存储节点", "3、创建复制卷 gv_safe", "4、创建分布式卷 gv_data", "5、启动卷并设置访问控制", "五、server1 Java 应用环境配置", "1、部署 Java 与 Tomcat", "2、创建 tomcat 用户", "3、配置 Java 环境变量", "4、配置两套 Tomcat 端口", "5、配置默认首页", "6、tomcat.service 统一管理两套实例", "六、server1 配置负载均衡 Haproxy", "七、server1 日志管理", "1、Tomcat 日志统一存放并修改前缀", "2、rsyslog 发送日志到 server2", "八、server2 系统环境配置", "1、修改主机名", "2、配置 YUM 源（ftp）", "3、用户组管理与密码策略", "4、目录 SGID 特殊权限", "5、创建 pk.sh 监控脚本", "6、创建 info.sh 参数脚本", "7、配置 chrony 时间同步", "8、指定 DNS 服务器", "9、网络共享", "九、server2 Ansible 自动化部署 nginx", "1、安装 ansible 并配置清单", "2、创建 nginx role", "3、编写 playbook 并执行", "十、server2 PostgreSQL 数据库运维", "1、安装初始化 postgresql", "2、创建数据库并导入", "3、数据库操作（按顺序执行）", "4、挂载 gv_safe 并进行完整备份", "5、配置 crontab 定期备份", "十一、server2 rsyslog 日志服务器" ], "excerpt": "基于银河麒麟Server V10的运维环境实战", "wordCount": 2023 }, { "id": "projects/projects-openeuler-xinchuang-adaptation", "title": "openEuler信创适配与安全管理教程", "description": "基于openEuler的信创运维环境实战", "published": "2026-08-27T00:00:00.000Z", "url": "https://www.hellorx.site/posts/projects/projects-openeuler-xinchuang-adaptation/", "jsonUrl": "https://www.hellorx.site/knowledge/articles/projects/projects-openeuler-xinchuang-adaptation.json", "markdownUrl": "https://www.hellorx.site/knowledge/articles/projects/projects-openeuler-xinchuang-adaptation.md", "category": "部署文档", "tags": [ "Linux", "信创", "运维" ], "topics": [ "auth-security", "deployment" ], "headings": [ "一、信创系统安装（Server3 openEuler）", "二、信创系统管理", "1、网口绑定（Server3）", "2、网络地址与名称配置（所有主机）", "3、网关、防火墙与 SSH 免密", "4、DNS 主备服务（Server1 主、Server2 备）", "5、CA 证书服务（Server1）", "6、Redis 集群（Server1 + Server2）", "7、Apache 服务（Server1）", "itai.org 及三级域名访问时跳转到 www.itai.org", "使用 IP 地址访问时返回 403", "域名访问默认页面", "http 跳转 https", "8、企业应用部署（Server2 LAMP + WordPress）", "9、NFS 文件存储（Server3）", "三、信创系统适配验证", "1、openGauss 部署与建库（Server3）", "2、数据迁移与备份", "四、信创系统安全加固", "1、系统登录加固（所有系统）", "2、SSH 服务加固（所有系统）", "3、渗透测试（FLAG 取证）", "五、材料汇报（PPT）" ], "excerpt": "基于openEuler的信创运维环境实战", "wordCount": 1757 }, { "id": "ai/ai-deepseek-harness-deployment", "title": "使用DeepSeek Harness进行远程服务器运维", "description": "在云服务器上部署 DeepSeek Harness 并通过远程访问让其成为服务器运维助手的完整教程。", "published": "2026-08-15T00:00:00.000Z", "url": "https://www.hellorx.site/posts/ai/ai-deepseek-harness-deployment/", "jsonUrl": "https://www.hellorx.site/knowledge/articles/ai/ai-deepseek-harness-deployment.json", "markdownUrl": "https://www.hellorx.site/knowledge/articles/ai/ai-deepseek-harness-deployment.md", "category": "部署文档", "tags": [ "AI", "运维", "DeepSeek Harness" ], "topics": [ "ai", "deployment" ], "headings": [ "探索未至之境：把 DeepSeek Harness 变成我的远程运维助手", "一、背景与方案选择", "1、为什么要在博客上部署 DeepSeek Harness", "2、踩坑记录：三次典型排障", "问题① 外部可访问但 `/api` 返回 403 → 添加 `--trusted-host`", "问题② 控制台报 `crypto.randomUUID is not a function` → sub_filter 注入 polyfill", "问题③ `/api/settings.describe` 等特权方法仍返回 403 → location /api 伪造回环 Host/Origin", "3、方案选择：Nginx 反代 + Basic Auth", "二、环境准备", "1、克隆官方仓库并固定 commit", "克隆自 deepseek-harness 官方仓库，固定提交", "2、Node 与 pnpm 工具链", "1) 升级全局 pnpm 至 11.7.0（旧版 10.9.0 已备份为 pnpm.bak-10.9.0，未删除，可随时回退）", "2) registry 切换为 npmmirror 国内镜像（加速依赖下载）", "3、依赖安装与构建（小内存服务器务必限制堆内存）", "构建：服务器内存紧张，必须限制 Node 堆内存，避免 OOM", "三、systemd 服务化", "1、服务文件：`dsh-web.service`", "同时信任带端口与无端口两种 Host 形态：", "- nginx 的 $host 变量不含端口，实际转发 Host 为 服务器公网地址", "- 浏览器/直连可能携带 Host: 服务器公网地址:对外端口", "日志追加写入 /var/log/dsh-web.log", "2、关键点说明", "四、Nginx 反代配置", "1、对外端口块（核心对外入口）", "2、Basic Auth 凭据", "生成 Basic Auth 密码文件（账号 admin，密码 you_passwd，htpasswd 加密格式）", "调整属主与权限：root:nginx，nginx worker 可读", "期望：-rw-r----- root nginx dsh-htpasswd（nginx worker 可读 ✅）", "3、`location /api` 为什么要伪造回环 Host/Origin（原理与权衡，务必理解）", "4、生效确认", "五、远程访问控制", "1、浏览器访问入口", "2、验证链路（命令与预期输出）", "无凭据访问 → 401（认证生效）", "HTTP/1.1 401 Unauthorized ✅", "带凭据访问 → 200", "HTTP/1.1 200 OK ✅", "3、WebSocket 实时通信", "4、页面主要功能如何远程操作", "六、管理 deepseek-harness", "1、管理脚本：`dsh-manage.sh`", "用法:", "bash dsh-manage.sh start 开启 DeepSeek Harness", "bash dsh-manage.sh stop 关闭 DeepSeek Harness", "bash dsh-manage.sh restart 重启 DeepSeek Harness", "bash dsh-manage.sh status 查看运行状态", "2、日志位置速查", "3、常见操作速查", "七、总结", "八、最终效果" ], "excerpt": "在云服务器上部署 DeepSeek Harness 并通过远程访问让其成为服务器运维助手的完整教程。", "wordCount": 1851 }, { "id": "ai/ai-embodied-isaaclab-first-project", "title": "半小时入门具身智能：手动创建第一个 Isaac Lab 项目", "description": "具身智能零基础入门教程，从创建 IsaacSim 仿真项目、完成 MDP 配置与 Gym 环境注册，到训练、验证、可视化及奖励函数优化的完整闭环。", "published": "2026-08-13T00:00:00.000Z", "url": "https://www.hellorx.site/posts/ai/ai-embodied-isaaclab-first-project/", "jsonUrl": "https://www.hellorx.site/knowledge/articles/ai/ai-embodied-isaaclab-first-project.json", "markdownUrl": "https://www.hellorx.site/knowledge/articles/ai/ai-embodied-isaaclab-first-project.md", "category": "学习文档", "tags": [ "具身智能", "IsaacLab", "强化学习", "Robotics" ], "topics": [ "deployment" ], "headings": [ "一、基础知识", "1、强化学习扫盲", "2、领域术语", "3、MDP 与 Isaac Lab 工作流", "二、项目创建", "1、创建项目", "2、官方示例与仓库", "三、项目配置", "1、基本配置", "2、MDP 类配置", "2.1 场景配置类 scene", "环境配置", "定义模型路径", "Go2机器人配置", "导入自定义机器人配置", "传感器", "2.2 观测配置类 observations", "2.3 动作配置类 actions", "动作配置", "2.4 指令配置类 commands", "2.5 奖励配置类 rewards", "奖励函数", "2.6 终止条件配置类 terminations", "终止条件", "2.7 事件配置类 events", "事件配置", "2.8 课程学习配置类 curriculum", "3、注册 Gym 环境", "4、调整 PPO 网络", "四、验证与训练", "1、验证环境", "2、正式训练", "3、参数可视化", "4、评估策略", "五、优化策略", "奖励函数", "六、总结" ], "excerpt": "具身智能零基础入门教程，从创建 IsaacSim 仿真项目、完成 MDP 配置与 Gym 环境注册，到训练、验证、可视化及奖励函数优化的完整闭环。", "wordCount": 1141 }, { "id": "projects/projects-kylin-v10-basic-env-setup", "title": "Kylin 基础环境配置", "description": "VMware 安装麒麟 V10 后的基础环境配置教程，覆盖主机名配置、本地镜像 yum 源搭建、iSCSI 协议 2G 存储共享、防火墙放行、vsftpd 服务部署、chrony 时间同步与 DNS 正向解析。", "published": "2026-08-13T00:00:00.000Z", "url": "https://www.hellorx.site/posts/projects/projects-kylin-v10-basic-env-setup/", "jsonUrl": "https://www.hellorx.site/knowledge/articles/projects/projects-kylin-v10-basic-env-setup.json", "markdownUrl": "https://www.hellorx.site/knowledge/articles/projects/projects-kylin-v10-basic-env-setup.md", "category": "部署文档", "tags": [ "Linux", "信创", "运维" ], "topics": [ "deployment" ], "headings": [ "一、环境准备", "1、虚拟机要求", "2、配置 IP", "二、主机名配置", "刷新 bash 会话使主机名立即生效", "三、本地镜像 yum 源仓库", "备份默认源", "新建本地源", "四、通过 iSCSI 协议共享 2G 文件存储", "1、启动 target 服务", "2、进入 targetcli 配置界面", "3、创建后端存储文件", "4、创建 iSCSI 目标", "5、创建 LUN 并关联存储文件", "6、设置访问控制", "7、配置监听地址与端口", "8、保存并退出", "五、防火墙", "六、验证", "七、FTP 服务", "1、启用匿名登录与本地用户登录", "2、使用 SSL 加密传输", "3、创建受限 FTP 用户", "4、启用双份日志", "八、chrony 时间同步", "九、DNS 正向解析", "十、所需镜像资源" ], "excerpt": "VMware 安装麒麟 V10 后的基础环境配置教程，覆盖主机名配置、本地镜像 yum 源搭建、iSCSI 协议 2G 存储共享、防火墙放行、vsftpd 服务部署、chrony 时间同步与 DNS 正向解析。", "wordCount": 494 } ] }