Update tech_docs/linux/next_level_debian.md
This commit is contained in:
@@ -17,7 +17,7 @@ Your document is already well-organized, but here are some suggestions to make i
|
||||
```
|
||||
|
||||
2. **Enhanced Navigation**:
|
||||
```markdown
|
||||
|
||||
## Quick Links
|
||||
[](#service-hardening)
|
||||
[](#pcie-passthrough-guide-for-debian)
|
||||
@@ -25,7 +25,7 @@ Your document is already well-organized, but here are some suggestions to make i
|
||||
|
||||
### Content Improvements:
|
||||
1. **Add Risk Indicators**:
|
||||
```markdown
|
||||
|
||||
### :warning: Extreme Measures (Potential Breakage)
|
||||
```bash
|
||||
sudo apt purge --auto-remove -y snapd lxd # [!DANGER]
|
||||
@@ -37,7 +37,7 @@ Your document is already well-organized, but here are some suggestions to make i
|
||||
```
|
||||
|
||||
2. **Version Compatibility**:
|
||||
```markdown
|
||||
|
||||
## Compatibility Matrix
|
||||
| Debian Version | Kernel Min | Recommended |
|
||||
|----------------|------------|-------------|
|
||||
@@ -58,31 +58,31 @@ Your document is already well-organized, but here are some suggestions to make i
|
||||
```
|
||||
|
||||
2. **Include Rollback Procedures**:
|
||||
```markdown
|
||||
|
||||
## Rollback Changes
|
||||
### Revert SSH Hardening
|
||||
```bash
|
||||
sudo sed -i 's/^PermitRootLogin no/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config
|
||||
```
|
||||
```
|
||||
|
||||
|
||||
### Visual Improvements:
|
||||
1. **Add ASCII Diagrams**:
|
||||
```markdown
|
||||
|
||||
## Network Flow
|
||||
```
|
||||
```plaintext
|
||||
[Internet] -> [nftables] -> (DROP)
|
||||
└─[tcp dport 2222] -> [SSH]
|
||||
```
|
||||
|
||||
2. **Include Hardware-Specific Notes**:
|
||||
```markdown
|
||||
|
||||
### i7-4790 Specifics
|
||||
```diff
|
||||
- Avoid assigning all cores to VM
|
||||
+ Keep at least 1 physical core for host
|
||||
```
|
||||
```
|
||||
|
||||
|
||||
### Documentation Hygiene:
|
||||
1. **Add Change Log**:
|
||||
@@ -93,16 +93,9 @@ Your document is already well-organized, but here are some suggestions to make i
|
||||
| 2024-06-01 | 1.1 | Added i350 NIC notes |
|
||||
```
|
||||
|
||||
2. **Include Contributor Guidelines**:
|
||||
```markdown
|
||||
## How to Contribute
|
||||
1. Fork this document
|
||||
2. Test changes on VM first
|
||||
3. Submit PR with verification output
|
||||
```
|
||||
|
||||
### Example Improved Section:
|
||||
```markdown
|
||||
|
||||
## :gear: Kernel Protections [!RECOMMENDED]
|
||||
|
||||
### Priority Settings
|
||||
@@ -117,7 +110,7 @@ kernel.unprivileged_userns_clone=0
|
||||
```
|
||||
|
||||
> **Performance Impact**: <5% CPU overhead on synthetic benchmarks
|
||||
```
|
||||
|
||||
|
||||
Would you like me to:
|
||||
1. Generate a complete revised version with these improvements?
|
||||
|
||||
Reference in New Issue
Block a user