Update tech_docs/linux/next_level_debian.md

This commit is contained in:
2025-08-01 02:55:20 -05:00
parent cfce9581df
commit e2f722bab9

View File

@@ -17,7 +17,7 @@ Your document is already well-organized, but here are some suggestions to make i
```
2. **Enhanced Navigation**:
```markdown
## Quick Links
[![Hardening](https://img.shields.io/badge/Go_to-Hardening-blue)](#service-hardening)
[![Passthrough](https://img.shields.io/badge/Go_to-PCIe_Passthrough-green)](#pcie-passthrough-guide-for-debian)
@@ -25,7 +25,7 @@ Your document is already well-organized, but here are some suggestions to make i
### Content Improvements:
1. **Add Risk Indicators**:
```markdown
### :warning: Extreme Measures (Potential Breakage)
```bash
sudo apt purge --auto-remove -y snapd lxd # [!DANGER]
@@ -37,7 +37,7 @@ Your document is already well-organized, but here are some suggestions to make i
```
2. **Version Compatibility**:
```markdown
## Compatibility Matrix
| Debian Version | Kernel Min | Recommended |
|----------------|------------|-------------|
@@ -58,31 +58,31 @@ Your document is already well-organized, but here are some suggestions to make i
```
2. **Include Rollback Procedures**:
```markdown
## Rollback Changes
### Revert SSH Hardening
```bash
sudo sed -i 's/^PermitRootLogin no/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config
```
```
### Visual Improvements:
1. **Add ASCII Diagrams**:
```markdown
## Network Flow
```
```plaintext
[Internet] -> [nftables] -> (DROP)
└─[tcp dport 2222] -> [SSH]
```
2. **Include Hardware-Specific Notes**:
```markdown
### i7-4790 Specifics
```diff
- Avoid assigning all cores to VM
+ Keep at least 1 physical core for host
```
```
### Documentation Hygiene:
1. **Add Change Log**:
@@ -93,16 +93,9 @@ Your document is already well-organized, but here are some suggestions to make i
| 2024-06-01 | 1.1 | Added i350 NIC notes |
```
2. **Include Contributor Guidelines**:
```markdown
## How to Contribute
1. Fork this document
2. Test changes on VM first
3. Submit PR with verification output
```
### Example Improved Section:
```markdown
## :gear: Kernel Protections [!RECOMMENDED]
### Priority Settings
@@ -117,7 +110,7 @@ kernel.unprivileged_userns_clone=0
```
> **Performance Impact**: <5% CPU overhead on synthetic benchmarks
```
Would you like me to:
1. Generate a complete revised version with these improvements?