Update tech_docs/linux/next_level_debian.md
This commit is contained in:
@@ -17,7 +17,7 @@ Your document is already well-organized, but here are some suggestions to make i
|
|||||||
```
|
```
|
||||||
|
|
||||||
2. **Enhanced Navigation**:
|
2. **Enhanced Navigation**:
|
||||||
```markdown
|
|
||||||
## Quick Links
|
## Quick Links
|
||||||
[](#service-hardening)
|
[](#service-hardening)
|
||||||
[](#pcie-passthrough-guide-for-debian)
|
[](#pcie-passthrough-guide-for-debian)
|
||||||
@@ -25,7 +25,7 @@ Your document is already well-organized, but here are some suggestions to make i
|
|||||||
|
|
||||||
### Content Improvements:
|
### Content Improvements:
|
||||||
1. **Add Risk Indicators**:
|
1. **Add Risk Indicators**:
|
||||||
```markdown
|
|
||||||
### :warning: Extreme Measures (Potential Breakage)
|
### :warning: Extreme Measures (Potential Breakage)
|
||||||
```bash
|
```bash
|
||||||
sudo apt purge --auto-remove -y snapd lxd # [!DANGER]
|
sudo apt purge --auto-remove -y snapd lxd # [!DANGER]
|
||||||
@@ -37,7 +37,7 @@ Your document is already well-organized, but here are some suggestions to make i
|
|||||||
```
|
```
|
||||||
|
|
||||||
2. **Version Compatibility**:
|
2. **Version Compatibility**:
|
||||||
```markdown
|
|
||||||
## Compatibility Matrix
|
## Compatibility Matrix
|
||||||
| Debian Version | Kernel Min | Recommended |
|
| Debian Version | Kernel Min | Recommended |
|
||||||
|----------------|------------|-------------|
|
|----------------|------------|-------------|
|
||||||
@@ -58,31 +58,31 @@ Your document is already well-organized, but here are some suggestions to make i
|
|||||||
```
|
```
|
||||||
|
|
||||||
2. **Include Rollback Procedures**:
|
2. **Include Rollback Procedures**:
|
||||||
```markdown
|
|
||||||
## Rollback Changes
|
## Rollback Changes
|
||||||
### Revert SSH Hardening
|
### Revert SSH Hardening
|
||||||
```bash
|
```bash
|
||||||
sudo sed -i 's/^PermitRootLogin no/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config
|
sudo sed -i 's/^PermitRootLogin no/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config
|
||||||
```
|
```
|
||||||
```
|
|
||||||
|
|
||||||
### Visual Improvements:
|
### Visual Improvements:
|
||||||
1. **Add ASCII Diagrams**:
|
1. **Add ASCII Diagrams**:
|
||||||
```markdown
|
|
||||||
## Network Flow
|
## Network Flow
|
||||||
```
|
```plaintext
|
||||||
[Internet] -> [nftables] -> (DROP)
|
[Internet] -> [nftables] -> (DROP)
|
||||||
└─[tcp dport 2222] -> [SSH]
|
└─[tcp dport 2222] -> [SSH]
|
||||||
```
|
```
|
||||||
|
|
||||||
2. **Include Hardware-Specific Notes**:
|
2. **Include Hardware-Specific Notes**:
|
||||||
```markdown
|
|
||||||
### i7-4790 Specifics
|
### i7-4790 Specifics
|
||||||
```diff
|
```diff
|
||||||
- Avoid assigning all cores to VM
|
- Avoid assigning all cores to VM
|
||||||
+ Keep at least 1 physical core for host
|
+ Keep at least 1 physical core for host
|
||||||
```
|
```
|
||||||
```
|
|
||||||
|
|
||||||
### Documentation Hygiene:
|
### Documentation Hygiene:
|
||||||
1. **Add Change Log**:
|
1. **Add Change Log**:
|
||||||
@@ -93,16 +93,9 @@ Your document is already well-organized, but here are some suggestions to make i
|
|||||||
| 2024-06-01 | 1.1 | Added i350 NIC notes |
|
| 2024-06-01 | 1.1 | Added i350 NIC notes |
|
||||||
```
|
```
|
||||||
|
|
||||||
2. **Include Contributor Guidelines**:
|
|
||||||
```markdown
|
|
||||||
## How to Contribute
|
|
||||||
1. Fork this document
|
|
||||||
2. Test changes on VM first
|
|
||||||
3. Submit PR with verification output
|
|
||||||
```
|
|
||||||
|
|
||||||
### Example Improved Section:
|
### Example Improved Section:
|
||||||
```markdown
|
|
||||||
## :gear: Kernel Protections [!RECOMMENDED]
|
## :gear: Kernel Protections [!RECOMMENDED]
|
||||||
|
|
||||||
### Priority Settings
|
### Priority Settings
|
||||||
@@ -117,7 +110,7 @@ kernel.unprivileged_userns_clone=0
|
|||||||
```
|
```
|
||||||
|
|
||||||
> **Performance Impact**: <5% CPU overhead on synthetic benchmarks
|
> **Performance Impact**: <5% CPU overhead on synthetic benchmarks
|
||||||
```
|
|
||||||
|
|
||||||
Would you like me to:
|
Would you like me to:
|
||||||
1. Generate a complete revised version with these improvements?
|
1. Generate a complete revised version with these improvements?
|
||||||
|
|||||||
Reference in New Issue
Block a user