Update tech_docs/linux/next_level_debian.md

This commit is contained in:
2025-08-01 02:55:20 -05:00
parent cfce9581df
commit e2f722bab9

View File

@@ -17,7 +17,7 @@ Your document is already well-organized, but here are some suggestions to make i
``` ```
2. **Enhanced Navigation**: 2. **Enhanced Navigation**:
```markdown
## Quick Links ## Quick Links
[![Hardening](https://img.shields.io/badge/Go_to-Hardening-blue)](#service-hardening) [![Hardening](https://img.shields.io/badge/Go_to-Hardening-blue)](#service-hardening)
[![Passthrough](https://img.shields.io/badge/Go_to-PCIe_Passthrough-green)](#pcie-passthrough-guide-for-debian) [![Passthrough](https://img.shields.io/badge/Go_to-PCIe_Passthrough-green)](#pcie-passthrough-guide-for-debian)
@@ -25,7 +25,7 @@ Your document is already well-organized, but here are some suggestions to make i
### Content Improvements: ### Content Improvements:
1. **Add Risk Indicators**: 1. **Add Risk Indicators**:
```markdown
### :warning: Extreme Measures (Potential Breakage) ### :warning: Extreme Measures (Potential Breakage)
```bash ```bash
sudo apt purge --auto-remove -y snapd lxd # [!DANGER] sudo apt purge --auto-remove -y snapd lxd # [!DANGER]
@@ -37,7 +37,7 @@ Your document is already well-organized, but here are some suggestions to make i
``` ```
2. **Version Compatibility**: 2. **Version Compatibility**:
```markdown
## Compatibility Matrix ## Compatibility Matrix
| Debian Version | Kernel Min | Recommended | | Debian Version | Kernel Min | Recommended |
|----------------|------------|-------------| |----------------|------------|-------------|
@@ -58,31 +58,31 @@ Your document is already well-organized, but here are some suggestions to make i
``` ```
2. **Include Rollback Procedures**: 2. **Include Rollback Procedures**:
```markdown
## Rollback Changes ## Rollback Changes
### Revert SSH Hardening ### Revert SSH Hardening
```bash ```bash
sudo sed -i 's/^PermitRootLogin no/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config sudo sed -i 's/^PermitRootLogin no/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config
``` ```
```
### Visual Improvements: ### Visual Improvements:
1. **Add ASCII Diagrams**: 1. **Add ASCII Diagrams**:
```markdown
## Network Flow ## Network Flow
``` ```plaintext
[Internet] -> [nftables] -> (DROP) [Internet] -> [nftables] -> (DROP)
└─[tcp dport 2222] -> [SSH] └─[tcp dport 2222] -> [SSH]
``` ```
2. **Include Hardware-Specific Notes**: 2. **Include Hardware-Specific Notes**:
```markdown
### i7-4790 Specifics ### i7-4790 Specifics
```diff ```diff
- Avoid assigning all cores to VM - Avoid assigning all cores to VM
+ Keep at least 1 physical core for host + Keep at least 1 physical core for host
``` ```
```
### Documentation Hygiene: ### Documentation Hygiene:
1. **Add Change Log**: 1. **Add Change Log**:
@@ -93,16 +93,9 @@ Your document is already well-organized, but here are some suggestions to make i
| 2024-06-01 | 1.1 | Added i350 NIC notes | | 2024-06-01 | 1.1 | Added i350 NIC notes |
``` ```
2. **Include Contributor Guidelines**:
```markdown
## How to Contribute
1. Fork this document
2. Test changes on VM first
3. Submit PR with verification output
```
### Example Improved Section: ### Example Improved Section:
```markdown
## :gear: Kernel Protections [!RECOMMENDED] ## :gear: Kernel Protections [!RECOMMENDED]
### Priority Settings ### Priority Settings
@@ -117,7 +110,7 @@ kernel.unprivileged_userns_clone=0
``` ```
> **Performance Impact**: <5% CPU overhead on synthetic benchmarks > **Performance Impact**: <5% CPU overhead on synthetic benchmarks
```
Would you like me to: Would you like me to:
1. Generate a complete revised version with these improvements? 1. Generate a complete revised version with these improvements?