[整理] wsl ubuntu 配置备份留存
ubuntu config --default-user root
https://gitee.com/yzpopulation/ubuntuWSLInit/raw/master/sh/wsl_ubuntu_setup.sh
cp /etc/apt/sources.list /etc/apt/sources.list.bak
sed -i 's/http:\/\/security.ubuntu.com/https:\/\/mirrors.tuna.tsinghua.edu.cn/g' /etc/apt/sources.list
#echo -e "deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ focal main restricted universe multiverse\ndeb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ focal-updates main restricted universe multiverse\ndeb #https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ focal-backports main restricted universe multiverse\ndeb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ focal-security main restricted universe #multiverse\n">/etc/apt/sources.list
apt update
apt upgrade -y
apt install language-pack-zh-hans*
apt install manpages
apt install manpages-de
apt install manpages-de-dev
apt install manpages-dev
apt install manpages-zh
echo "LANG=zh_CN.utf8">/etc/default/locale
apt remove libreoffice*
apt remove firefox
apt remove thunderbird
sudo apt install apt-transport-https ca-certificates gnupg lsb-release
#wsl 无效
#wget -qO - https://mirrors.cnnic.cn/docker-ce/linux/ubuntu/gpg | sudo apt-key add -
#echo 'deb https://mirrors.cnnic.cn/docker-ce/linux/ubuntu/ focal stable'>/etc/apt/sources.list.d/docker.list
#sudo apt-get install docker-ce docker-ce-cli containerd.io docker-compose-plugin
curl -fsSL https://get.docker.com -o get-docker.sh
sudo sh get-docker.sh
sudo gpasswd -a ${USER} docker
newgrp - docker
sudo service docker start
# Bug 修复
#sudo service docker start
#grep: /etc/fstab: No such file or directory
#sudo touch /etc/fstab
#sudo update-alternatives --set iptables /usr/sbin/iptables-legacy
#sudo update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy
+ sh -c apt-get update -qq >/dev/null
+ sh -c DEBIAN_FRONTEND=noninteractive apt-get install -y -qq apt-transport-https ca-certificates curl >/dev/null
+ sh -c install -m 0755 -d /etc/apt/keyrings
+ sh -c curl -fsSL "https://download.docker.com/linux/ubuntu/gpg" | gpg --dearmor --yes -o /etc/apt/keyrings/docker.gpg
+ sh -c chmod a+r /etc/apt/keyrings/docker.gpg
+ sh -c echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu jammy stable" > /etc/apt/sources.list.d/docker.list
+ sh -c apt-get update -qq >/dev/null
+ sh -c DEBIAN_FRONTEND=noninteractive apt-get install -y -qq docker-ce docker-ce-cli containerd.io docker-compose-plugin docker-ce-rootless-extras docker-buildx-plugin >/dev/null
+ sh -c docker version
#debain 9->10
#接着修改你的 /etc/apt/sources.list 将里面所有 stretch 全替换成 buster 并保存，接下来进行一阶段更新：
apt update
apt upgrade
apt dist-upgrade
# 10->11
#将源buster 替换为bullseye
apt update
apt full-upgrade
apt install proxychains4 axel git make gcc g++ -y
//https://deb.nodesource.com/setup_current.x
//curl -sL https://deb.nodesource.com/setup_lts.x | sudo -E bash -
curl -s https://deb.nodesource.com/gpgkey/nodesource.gpg.key | apt-key add -
echo 'deb https://deb.nodesource.com/node_15.x focal main' > /etc/apt/sources.list.d/nodesource.list
apt update
apt install -y nodejs
//npm config set registry https://registry.npm.taobao.org
apt install zsh -y
chsh -s /bin/zsh
# yum install util-linux-ng
# dnf install util-linux-user
sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"
#wget https://gitee.com/mirrors/oh-my-zsh/raw/master/tools/install.sh
#sed -i -e 's/REPO=${REPO:-ohmyzsh\/ohmyzsh}/REPO=${REPO:-mirrors\/oh-my-zsh}/' -e 's/REMOTE=${REMOTE:-https:\/\/github.com\/${REPO}.git}/REMOTE=${REMOTE:-https:\/\/gitee.com\/${REPO}.git}/' install.sh
chmod 777 install.sh
bash install.sh
rm -f install.sh
git config --global http.sslVerify false
echo 'precmd () { echo -n "\x1b]1337;CurrentDir=$(pwd)\x07" }' >> ~/.zshrc
# sed -i 's/ZSH_THEME="robbyrussell"/ZSH_THEME="ys"/' ~/.zshrc
cd ~/.oh-my-zsh
git remote set-url origin https://gitee.com/mirrors/oh-my-zsh.git
git pull
git clone --depth=1 https://gitee.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k
sed -i 's/ZSH_THEME="robbyrussell"/ZSH_THEME="powerlevel10k\/powerlevel10k"/' ~/.zshrc
dnf list --installed|awk '{print $1}'|awk -F "." '{print $1}'|xargs -n10 dnf download --downloaddir=/data/package
sudo find /etc -name '*' -type f \( -mmin -5 -a -mmin +0 \)
安装字体
## https://gitee.com/yzpopulation/ubuntuWSLInit/tree/master/powerlevel10kfonts
## restart wsl
## p10k configure
sudo chmod -R 777 /usr/share/fonts/truetype/windows-font
cd /usr/share/fonts/truetype/windows-font
# 如果提示 mkfontscale: command not found
# 在Ubuntu下运行如下命令
# sudo apt-get install ttf-mscorefonts-installer
# 在cent os下运行如下命令
# yum install mkfontscale
sudo mkfontscale
sudo mkfontdir
# 如果提示 fc-cache: command not found
# 在Ubuntu下运行如下命令
# sudo apt-get install fontconfig
# 在cent os下运行如下命令
# yum install fontconfig
sudo fc-cache -fv
yarn
npm install -g yarn
yarn config set registry https://registry.npm.taobao.org --global
yarn config set disturl https://npm.taobao.org/dist --global
conda
axel https://mirrors.cnnic.cn/anaconda/miniconda/Miniconda3-py38_4.9.2-Linux-x86_64.sh
bash Miniconda3-py38_4.9.2-Linux-x86_64.sh
conda config --remove-key channels
cat > ~/.condarc <<EOF
channels:
- defaults
show_channel_urls: true
default_channels:
- https://mirrors.tuna.tsinghua.edu.cn/anaconda/pkgs/main
- https://mirrors.tuna.tsinghua.edu.cn/anaconda/pkgs/free
- https://mirrors.tuna.tsinghua.edu.cn/anaconda/pkgs/r
custom_channels:
conda-forge: https://mirrors.tuna.tsinghua.edu.cn/anaconda/cloud
msys2: https://mirrors.tuna.tsinghua.edu.cn/anaconda/cloud
bioconda: https://mirrors.tuna.tsinghua.edu.cn/anaconda/cloud
menpo: https://mirrors.tuna.tsinghua.edu.cn/anaconda/cloud
pytorch: https://mirrors.tuna.tsinghua.edu.cn/anaconda/cloud
simpleitk: https://mirrors.tuna.tsinghua.edu.cn/anaconda/cloud
EOF
// conda Bug Fix
// conda install brotlipy certifi cffi chardet cryptography idna pip pycosat pycparser pyOpenSSL PySocks requests
conda create -n py2 python=2.7
conda update --all
//bug=> conda update --force conda
conda update ruamel_yaml
pip config set global.index-url https://pypi.tuna.tsinghua.edu.cn/simple
pip config set global.index-url https://mirrors.aliyun.com/pypi/simple
//recover=>rm -f /root/.config/pip/pip.conf pip install pip-review pip-review --local --interactive
cat ~/.condarc
channels:
- https://mirrors.tuna.tsinghua.edu.cn/anaconda/pkgs/main
- https://mirrors.tuna.tsinghua.edu.cn/anaconda/pkgs/r
- https://mirrors.tuna.tsinghua.edu.cn/anaconda/pkgs/msys2
- https://mirrors.tuna.tsinghua.edu.cn/anaconda/pkgs/free
- https://mirrors.tuna.tsinghua.edu.cn/anaconda/pkgs/pro
- https://mirrors.tuna.tsinghua.edu.cn/anaconda/cloud/conda-forge
- https://mirrors.tuna.tsinghua.edu.cn/anaconda/cloud/msys2
- https://mirrors.tuna.tsinghua.edu.cn/anaconda/cloud/bioconda
- https://mirrors.tuna.tsinghua.edu.cn/anaconda/cloud/menpo
- https://mirrors.tuna.tsinghua.edu.cn/anaconda/cloud/pytorch
- https://mirrors.tuna.tsinghua.edu.cn/anaconda/cloud/simpleitk
- defaults
show_channel_urls: true
miniconda default pkgs
# Name Version Build Channel
_libgcc_mutex 0.1 main https://repo.anaconda.com/pkgs/main
brotlipy 0.7.0 py38h27cfd23_1003 https://repo.anaconda.com/pkgs/main
ca-certificates 2020.10.14 0 https://repo.anaconda.com/pkgs/main
certifi 2020.6.20 pyhd3eb1b0_3 https://repo.anaconda.com/pkgs/main
cffi 1.14.3 py38h261ae71_2 https://repo.anaconda.com/pkgs/main
chardet 3.0.4 py38h06a4308_1003 https://repo.anaconda.com/pkgs/main
conda 4.9.2 py38h06a4308_0 https://repo.anaconda.com/pkgs/main
conda-package-handling 1.7.2 py38h03888b9_0 https://repo.anaconda.com/pkgs/main
cryptography 3.2.1 py38h3c74f83_1 https://repo.anaconda.com/pkgs/main
idna 2.10 py_0 https://repo.anaconda.com/pkgs/main
ld_impl_linux-64 2.33.1 h53a641e_7 https://repo.anaconda.com/pkgs/main
libedit 3.1.20191231 h14c3975_1 https://repo.anaconda.com/pkgs/main
libffi 3.3 he6710b0_2 https://repo.anaconda.com/pkgs/main
libgcc-ng 9.1.0 hdf63c60_0 https://repo.anaconda.com/pkgs/main
libstdcxx-ng 9.1.0 hdf63c60_0 https://repo.anaconda.com/pkgs/main
ncurses 6.2 he6710b0_1 https://repo.anaconda.com/pkgs/main
openssl 1.1.1h h7b6447c_0 https://repo.anaconda.com/pkgs/main
pip 20.2.4 py38h06a4308_0 https://repo.anaconda.com/pkgs/main
pycosat 0.6.3 py38h7b6447c_1 https://repo.anaconda.com/pkgs/main
pycparser 2.20 py_2 https://repo.anaconda.com/pkgs/main
pyopenssl 19.1.0 pyhd3eb1b0_1 https://repo.anaconda.com/pkgs/main
pysocks 1.7.1 py38h06a4308_0 https://repo.anaconda.com/pkgs/main
python 3.8.5 h7579374_1 https://repo.anaconda.com/pkgs/main
readline 8.0 h7b6447c_0 https://repo.anaconda.com/pkgs/main
requests 2.24.0 py_0 https://repo.anaconda.com/pkgs/main
ruamel_yaml 0.15.87 py38h7b6447c_1 https://repo.anaconda.com/pkgs/main
setuptools 50.3.1 py38h06a4308_1 https://repo.anaconda.com/pkgs/main
six 1.15.0 py38h06a4308_0 https://repo.anaconda.com/pkgs/main
sqlite 3.33.0 h62c20be_0 https://repo.anaconda.com/pkgs/main
tk 8.6.10 hbc83047_0 https://repo.anaconda.com/pkgs/main
tqdm 4.51.0 pyhd3eb1b0_0 https://repo.anaconda.com/pkgs/main
urllib3 1.25.11 py_0 https://repo.anaconda.com/pkgs/main
wheel 0.35.1 pyhd3eb1b0_0 https://repo.anaconda.com/pkgs/main
xz 5.2.5 h7b6447c_0 https://repo.anaconda.com/pkgs/main
yaml 0.2.5 h7b6447c_0 https://repo.anaconda.com/pkgs/main
zlib 1.2.11 h7b6447c_3 https://repo.anaconda.com/pkgs/main
fail2ban(ssh 防护)
yum install fail2ban
apt install fail2ban
//centos 7
firewall-cmd --zone=public --add-prot=22/tcp --permanent
firewall-cmd --reload
firewall-cmd --zone=public --list-ports
yum install epel-release
yum install fail2ban
mv /etc/fail2ban/jail.conf /etc/fail2ban/jail.conf.bak
vim /etc/fail2ban/jail.local
[DEFAULT]
ignoreip=127.0.0.1/8
bantime = 86400
findtime =600
maxretry 5
banaction = firewallcmd-ipset
action= %(action_mwl)s
[sshd]
enable=true
filter = sshd
port=22
action= %(action_mwl)s
logpath=/var/log/secure
//fail2ban-client status sshd
kali
#apt install -y kali-linux-default
#apt install kali-tools-top10
apt install -y kali-win-kex
# 启动
cd ~
kex
# 关闭
kex stop
# 窗口模式
kex --win -s
# 无缝模式
kex --sl -s
#将 Kali 和 Win-KeX 整合进 Terminal。
// {
// "list": [
// {
// "guid": "{46ca431a-3a87-5fb3-83cd-11ececc031d2}",
// "hidden": false,
// "name": "Kali",
// "icon": "file:///c:/users/ci/pictures/icons/kali.png",
// "source": "Windows.Terminal.Wsl"
// },
// {
// "guid": "{55ca431a-3a87-5fb3-83cd-11ececc031d2}",
// "hidden": false,
// "name": "KaTex",
// "icon": "file:///c:/users/ci/pictures/icons/kali.png",
// // 窗口模式启动
// "commandline": "wsl -d kali-linux kex --wtstart -s"
// }
// ]
// }
sudo apt install python2 file openjdk-11-jdk android-sdk-libsparse-utils vim libz-dev cmake gedit f2fs-tools ncat gcc-aarch64-linux-gnu gcc-arm-linux-gnueabihf fcitx fcitx-pinyin exploitdb sslstrip dsniff ssldump ettercap-common pciutils libncurses5 aptitude
sudo apt install locales
sudo dpkg-reconfigure locales
##增加 ： netsh interface portproxy add v4tov4 listenport=4444 listenaddress=* connectport=4444 connectaddress=172.22.11.22 protocol=tcp
##删除： netsh interface portproxy delete v4tov4 listenport=* listenaddress=*
##查看：netsh interface portproxy show all
//压缩
wsl --shutdown
diskpart
# open window Diskpart
select vdisk file="C:\Users\Ci\AppData\Local\Packages\CanonicalGroupLimited.Ubuntu20.04onWindows_79rhkp1fndgsc\LocalState\ext4.vhdx"
# select vdisk file="C:\Users\Ci\AppData\Local\Packages\KaliLinux.54290C8133FEE_ey8k8hqnwqnmg\LocalState\ext4.vhdx"
attach vdisk readonly
compact vdisk
detach vdisk
$home/.wslconfig
[wsl2]
memory=4GB
swap=0
# 快捷方式
java -jar ja-*****.jar -r
/usr/bin/google-chrome-stable %U --user-data-dir=/root/.config/google-chrome --no-sandbox --password-store=basic --test-type
/usr/lib/firefox %u
/opt/Tabby/tabby --no-sandbox
# GPG error: http://kali.download/kali kali-rolling InRelease: The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository <devel@kali.org>
wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2022.1_all.deb
sudo dpkg -i kali-archive-keyring_2022.1_all.deb
sudo apt update
sudo apt-get install x11vnc –y
x11vnc -storepasswd
/usr/bin/x11vnc -ncache 10 -auth guess -nap -forever -loop -repeat -rfbauth /root/.vnc/passwd -rfbport 5901
sudo vim /lib/systemd/system/x11vnc.service
[Unit]
Description=Start x11vnc at startup.
After=multi-user.target
[Service]
Type=simple
ExecStart=/usr/bin/x11vnc -ncache 10 -auth guess -nap -forever -loop -repeat -rfbauth /root/.vnc/passwd -rfbport 5901
[Install]
WantedBy=multi-user.target
systemctl enable x11vnc.service
systemctl start x11vnc.service
Git
git config --global http.sslVerify false
precmd () { echo -n "\x1b]1337;CurrentDir=$(pwd)\x07" }
Fedora
wsl --shutdown
wsl --unregister Fedora
wsl --import Fedora D:\wsl C:\Users\admin\Downloads\fedora-36-x86_64.tar
dnf install langpacks-zh_CN
#文件来源https://github.com/fedora-cloud/docker-brew-fedora
#根据不同分支下载不同版本文件
curl http://mirrors.163.com/.help/fedora-163.repo -o /etc/yum.repos.d/fedora.repo
curl http://mirrors.163.com/.help/fedora-updates-163.repo -o /etc/yum.repos.d/fedora-updates-163.repo
curl https://mirrors.cnnic.cn/docker-ce/linux/fedora/docker-ce.repo -o /etc/yum.repos.d/docker-ce.repo
sed -i "s/mirrorlist/#mirrorlist/g" *.repo
sed -i 's/https:\/\/download.docker.com/https:\/\/mirrors.cnnic.cn\/docker-ce/' *.repo
sed -i 's/updates\/$releasever\/$basearch/updates\/$releasever\/Everything\/$basearch/' *.repo
dnf install https://github.com/arkane-systems/genie/releases/download/v2.4/genie-2.4-1.fc36.x86_64.rpm
wsl
genie -s
systemctl set-default multi-user.target
systemctl edit systemd-sysusers.service（/etc/systemd/system/systemd-sysusers.service.d/override.conf）
添加
[Service]
LoadCredential=
#其他
ssh-keygen -A
df
e2label /dev/sdc cloudimg-rootfs
/etc/genie.ini
systemd-timeout=20 # 调小至 20
wsl
# https://raw.githubusercontent.com/microsoft/WSL/master/distributions/DistributionInfo.json
sudo sed -i "s@http://http.kali.org/kali@https://mirrors4.bfsu.edu.cn/kali@g" /etc/apt/sources.list
sudo apt update
sudo apt install manpages manpages-zh locales apt-transport-https ca-certificates gnupg lsb-release wget curl zsh git make gcc g++ zstd
echo "LANG=zh_CN.utf8" | \
sudo tee /etc/default/locale
sudo dpkg-reconfigure --frontend noninteractive locales
echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://mirrors.bfsu.edu.cn/docker-ce/linux/debian bookworm stable" | \
sudo tee /etc/apt/sources.list.d/docker.list
curl -fsSL https://mirrors.bfsu.edu.cn/docker-ce/linux/debian/gpg |
sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
sudo apt update
sudo apt install -y docker-ce docker-ce-cli containerd.io
sudo usermod -aG docker $USER
sudo sh /etc/init.d/docker start
sudo apt install -y kali-win-kex
#To start Win-KeX in Window mode with sound support, run either:
#Inside of Kali WSL: kex --win -s
#To start Win-KeX in Enhanced Session Mode with sound support and ARM workaround, run either:
#Inside of Kali WSL: kex --esm --ip -s
#To start Win-KeX in Seamless mode with sound support, run, run either:
#Inside of Kali WSL: kex --sl -s
/usr/bin/java8
#!/bin/bash
# 设置 Java 路径
JAVA_HOME=/opt/jdk8
JAVA_BIN=$JAVA_HOME/bin/java
CLASSPATH=.:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar
# 检查 Java 路径是否存在
if [ ! -x "$JAVA_BIN" ]; then
echo "Java not found at $JAVA_BIN"
exit 1
fi
# 将所有参数传递给 Java 命令
"$JAVA_BIN" "$@"
wsl 已弃用 备份留存
wsl --shutdown
wsl --unregister Ubuntu
wsl --import Ubuntu D:\wsl\ubuntu22 D:\Ubuntu20230310.tar
wsl genie -s
wsl --export Ubuntu D:\Ubuntudfix.tar
wsl --import Kali D:\wsl\kali2 D:\Kali.tar
wsl --shutdown
wsl --unregister Fedora
#文件来源https://github.com/fedora-cloud/docker-brew-fedora
wsl --import Fedora D:\wsl\fedora37 D:\fedora-37-x86_64.tar
curl http://mirrors.163.com/.help/fedora-163.repo -o /etc/yum.repos.d/fedora.repo
curl http://mirrors.163.com/.help/fedora-updates-163.repo -o /etc/yum.repos.d/fedora-updates-163.repo
curl https://mirrors.cnnic.cn/docker-ce/linux/fedora/docker-ce.repo -o /etc/yum.repos.d/docker-ce.repo
sed -i "s/mirrorlist/#mirrorlist/g" *.repo
sed -i 's/https:\/\/download.docker.com/https:\/\/mirrors.cnnic.cn\/docker-ce/' *.repo
sed -i 's/updates\/$releasever\/$basearch/updates\/$releasever\/Everything\/$basearch/' *.repo
sed -i "s/mirrors.163.com/mirrors.bfsu.edu.cn/g" *.repo
sed -i "s/mirrors.cnnic.cn/mirrors.bfsu.edu.cn/g" *.repo
sed -i "s/https:/http:/g" *.repo
sed -i "s/#mirrors.bfsu.edu.cn/mirrors.bfsu.edu.cn/g" *.repo
dnf install https://github.com/arkane-systems/genie/releases/download/v2.4/genie-2.4-1.fc36.x86_64.rpm
wsl --export Fedora D:\Fedora.tar
wsl --unregister Alpine
wsl --import Alpine D:\wsl\alpine D:\alpine-minirootfs-20230329-x86_64.tar
wsl -s Alpine
echo "https://mirrors.bfsu.edu.cn/alpine/edge/testing" >>/etc/apk/repositories
sed -i "s/dl-cdn.alpinelinux.org/mirrors.bfsu.edu.cn/g" /etc/apk/repositories
apk add alpine-conf
setup-alpine
setup-dns
1. 修改 systemd 默认目标
WSL2 它使用的是 default.target，我们要将其改为 multi-user.target。
执行如下命令：
systemctl set-default multi-user.target
2. 修复 ssh.service
这是 WSL2 从来没有从 ssh 连接过造成的，没有密钥，需要生成。
执行如下命令：
sudo ssh-keygen -A
3. 修复 systemd-remount-fs.service
因为根目录的标签应该是 cloudimg-rootfs，但是 WSL2 的是空的。
首先使用 df 命令确定一下根目录所在的磁盘名：
可以得知根目录所在的磁盘为 /dev/sdc。
添加 label：
sudo e2label /dev/sdc cloudimg-rootfs
4. 修复 systemd-sysusers.service
systemctl edit systemd-sysusers.service
由于该 service 配置文件中的 LoadCredential 需要内核模块 sg 和 crypto_user，而这些模块无法在 WSL 中加载。所以它会导致 systemd-sysusers.service 启动失败。LoadCredential 条目如下：
# Optionally, pick up a root password and shell for the root user from a
# credential passed to the service manager. This is useful for importing this
# data from nspawn's --set-credential= switch.
LoadCredential=passwd.hashed-password.root
LoadCredential=passwd.plaintext-password.root
LoadCredential=passwd.shell.root
使用文本编辑器例如 vim 编辑，在 LoadCredential=passwd.shell.root 后面，回车再加一行让它们失效：
LoadCredential=
5. 修改 systemd 等待启动时间
最后，编辑 /etc/genie.ini，将 systemd-timeout 值的时间调小至 20 以下：
[genie]
systemd-timeout=20 # 调小至 20
clone-env=WSL_DISTRO_NAME,WSL_INTEROP,WSLENV,DISPLAY,WAYLAND_DISPLAY,PULSE_SERVER
secure-path=/lib/systemd:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
clone-path=false
target-warning=true
update-hostname=true
update-hostname-suffix=-wsl
resolved-stub=false
