@sskaje

JPEG 自动旋转

By @sskaje
Link: https://sskaje.me/2019/11/jpeg-auto-rotate/

手机拍照的时候，EXIF里会带上Orientation的标记，一般的看图工具能很好地处理拍照方向，但是照片直接用于图像识别就麻烦了，不是所有工具都会认这个EXIF信息。使用手机拍照构建图像学习数据集的时候，务必要让图片正确旋转，否则标注的信息或者识别到的位置都可能会是错的。

使用 jhead http://www.sentex.net/~mwandel/jhead/usage.html

jhead -autorot xxx.jpg

JPEG 自动旋转 by @sskaje: https://sskaje.me/2019/11/jpeg-auto-rotate/

WireGuard as a “Switch”

By @sskaje
Link: https://sskaje.me/2019/11/wireguard-as-a-switch/

Not really a switch, but similar. If you want to exchange data from two network using a host on Internet, this post helps.

In this case, Router 1 want to use Router 2 as gateway for some destinations. All 3 Nodes here have Internet public IP address.

I set-up a network, 192.168.20.0/24, using WireGuard. Our work are all on the Server in the middle.

[Interface]
Address = 192.168.20.100/24
PrivateKey = KEY
ListenPort = 51820

[Peer]
PublicKey = RT1PUBKEY
AllowedIPs = 192.168.20.200/32,192.168.10.0/24
Endpoint = RT1:51820

[Peer]
PublicKey = RT2PUBKEY
AllowedIPs = 0.0.0.0/0
Endpoint = RT2:51820

[Interface]

Address = 192.168.20.100/24

PrivateKey = KEY

ListenPort = 51820

[Peer]

PublicKey = RT1PUBKEY

AllowedIPs = 192.168.20.200/32,192.168.10.0/24

Endpoint = RT1:51820

[Peer]

PublicKey = RT2PUBKEY

AllowedIPs = 0.0.0.0/0

Endpoint = RT2:51820

If I put such config to /etc/wireguard/wg0.conf and run wg-quick up wg0, then I may lost connection to the server, because of the default route.

Now, add a route table to your system and change wg0.conf, let’s name it wgswitch and table id 201.

# if you're not on Ubuntu, echo "201 wgswitch" >> /etc/iproute2/rt_tables
echo "201 wgswitch" >> /etc/iproute2/rt_tables.d/wg_switch.conf

1 2	# if you're not on Ubuntu, echo "201 wgswitch" >> /etc/iproute2/rt_tables echo "201 wgswitch" >> /etc/iproute2/rt_tables.d/wg_switch.conf

Then modify wg0.conf.

[Interface]
Address = 192.168.20.100/24
PrivateKey = KEY
ListenPort = 51820
Table = 201

[Interface]

Address = 192.168.20.100/24

PrivateKey = KEY

ListenPort = 51820

Table = 201

Now when you establish connections, you’ll be able to ping from router1 to router2 using 192.168.20.0/24 network.

But if you want to try a custom network, that’s not enough, you need extra route and ip rule for your network

# PostUp

/sbin/ip route add ROUTE_TO_ROUTER1/16 via LOCAL_GW dev eth0 table 230
/sbin/ip route add ROUTE_TO_ROUTER2/16 via LOCAL_GW dev eth0 table 230
/sbin/ip route add LOCAL_INTERFACE_IP/24 dev eth0 table 230

/sbin/ip route add 192.168.10.0/24 dev wg0

/sbin/ip rule add iif wg0 lookup 201

/bin/ping -c 1 192.168.201.1
/bin/ping -c 1 192.168.201.20

# PostUp

/sbin/ip route add ROUTE_TO_ROUTER1/16 via LOCAL_GW dev eth0 table 230

/sbin/ip route add ROUTE_TO_ROUTER2/16 via LOCAL_GW dev eth0 table 230

/sbin/ip route add LOCAL_INTERFACE_IP/24 dev eth0 table 230

/sbin/ip route add 192.168.10.0/24 dev wg0

/sbin/ip rule add iif wg0 lookup 201

/bin/ping -c 1 192.168.201.1

/bin/ping -c 1 192.168.201.20

WireGuard as a “Switch” by @sskaje: https://sskaje.me/2019/11/wireguard-as-a-switch/

List of macOS Installer Download Links

By @sskaje
Link: https://sskaje.me/2019/11/list-of-macos-installer-download-links/

10.15 Catalina

AppStore only, you need a macOS < 10.15 to download this installer

https://itunes.apple.com/cn/app/macos-catalina/id1466841314?ls=1&mt=12

10.14 Mojave

AppStore only, you need a macOS < 10.14 to download this installer

https://apps.apple.com/cn/app/macos-mojave/id1398502828?mt=12

10.13 High Sierra

AppStore only, you need a macOS < 10.13 to download this installer

https://apps.apple.com/cn/app/macos-high-sierra/id1246284741?ls=1&mt=12

10.9 Mavericks or earlier

Idk

List of macOS Installer Download Links by @sskaje: https://sskaje.me/2019/11/list-of-macos-installer-download-links/

Docker Desktop for Windows on Server 2019 Essentials

By @sskaje
Link: https://sskaje.me/2019/10/docker-desktop-for-windows-on-server-2019-essentials/

Docker Desktop for Windows reports incompatible with Windows Server 2019 Essentials.

Logs indicates that hyper-v is required.

Here is a bat enabling all hyper-v related feature on Windows.

pushd "%~dp0"
dir /b %SystemRoot%\servicing\Packages\*Hyper-V*.mum >hyper-v.txt
for /f %%i in ('findstr /i . hyper-v.txt 2^>nul') do dism /online /norestart /add-package:"%SystemRoot%\servicing\Packages\%%i"
del hyper-v.txt
Dism /online /enable-feature /featurename:Microsoft-Hyper-V -All /LimitAccess /ALL
pause

pushd "%~dp0"

dir /b %SystemRoot%\servicing\Packages\*Hyper-V*.mum >hyper-v.txt

for /f %%i in ('findstr /i . hyper-v.txt 2^>nul') do dism /online /norestart /add-package:"%SystemRoot%\servicing\Packages\%%i"

del hyper-v.txt

Dism /online /enable-feature /featurename:Microsoft-Hyper-V -All /LimitAccess /ALL

pause

Also, Container

pushd "%~dp0"
dir /b %SystemRoot%\servicing\Packages\*containers*.mum >containers.txt
for /f %%i in ('findstr /i . containers.txt 2^>nul') do dism /online /norestart /add-package:"%SystemRoot%\servicing\Packages\%%i"
del containers.txt
Dism /online /enable-feature /featurename:Containers -All /LimitAccess /ALL
pause

pushd "%~dp0"

dir /b %SystemRoot%\servicing\Packages\*containers*.mum >containers.txt

for /f %%i in ('findstr /i . containers.txt 2^>nul') do dism /online /norestart /add-package:"%SystemRoot%\servicing\Packages\%%i"

del containers.txt

Dism /online /enable-feature /featurename:Containers -All /LimitAccess /ALL

pause

But I tried Docker EE on Windows Server 2019 Essentials, still not working.

https://forums.docker.com/t/installing-docker-on-windows-10-home/11722/25

Docker Desktop for Windows on Server 2019 Essentials by @sskaje: https://sskaje.me/2019/10/docker-desktop-for-windows-on-server-2019-essentials/

Azure Site-to-Site VPN with Dynamic Client IP

By @sskaje
Link: https://sskaje.me/2019/08/azure-site-to-site-vpn-with-dynamic-client-ip/

以前自己用 strongswan 等软件配 IPSec site-to-site 的时候，可以直接指定客户端的 IP 是 0.0.0.0，Azure 的 site-to-site IPSec VPN 必须要指定客户端 IP。

PowerShell 爱好者可以参考 https://www.hayesjupe.com/using-azure-rm-site-to-site-vpn-with-a-dynamic-ip/ 这篇文章。

我还是习惯用 Linux，于是使用 Azure CLI 来解决这个问题。

在 VPN 的 Virtual Network 里放置一台 Linux 虚拟机。按照上述连接里的说明安装软件。接下来开始操作。

1 登录

SSH 登录虚拟机后，执行命令，并按照输出，用浏览器登录 Azure 账号，完成认证。

$ az login
To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code XXXXXXX to authenticate.

1 2	$ az login To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code XXXXXXX to authenticate.

如果是中国区 Azure，先需要设置服务器

$ az cloud set -n AzureChinaCloud
Switched active cloud to 'AzureChinaCloud'.
Use 'az login' to log in to this cloud.
Use 'az account set' to set the active subscription.

$ az cloud set -n AzureChinaCloud

Switched active cloud to 'AzureChinaCloud'.

Use 'az login' to log in to this cloud.

Use 'az account set' to set the active subscription.

如果需要切换回海外版本

$ az cloud set -n AzureCloud

1	$ az cloud set -n AzureCloud

2 添加更新服务

参考 DDNS 的玩法，让客户端定期更新IP。服务端可以简单地将数据记录到数据库、文件、或者任何地方，配置一个 cron 来执行更新检测和 Gateway IP 更新。

3 更新 Gateway IP

# 更新 IP
$ az network local-gateway update -g RGNAME -n GWNAME --gateway-ip-address IP.ADD.RE.SS
# 查看 Gateway
$ az network local-gateway list -g RGNAME

# 更新 IP

$ az network local-gateway update -g RGNAME -n GWNAME --gateway-ip-address IP.ADD.RE.SS

# 查看 Gateway

$ az network local-gateway list -g RGNAME

这里会有个问题，如果源 IP 和新 IP 相同，update 可能会出一个莫名其妙的404 错误。

Operation failed with status: 'Not Found'. Details: 404 Client Error: Not Found for url: https://management.chinacloudapi.cn/subscriptions/SUBSCRIPTION_ID/providers/Microsoft.Network/locations/chinanorth/operations/OPERATION_ID?api-version=2019-04-01

1	Operation failed with status: 'Not Found'. Details: 404 Client Error: Not Found for url: https://management.chinacloudapi.cn/subscriptions/SUBSCRIPTION_ID/providers/Microsoft.Network/locations/chinanorth/operations/OPERATION_ID?api-version=2019-04-01

看了眼 –verbose –debug 的输出，这个 update 命令先发送了一条命令到服务端，然后轮询等待任务更新。可能这个任务服务端直接判定不需要执行，所以返回的 operation id 无效。

Azure Site-to-Site VPN with Dynamic Client IP by @sskaje: https://sskaje.me/2019/08/azure-site-to-site-vpn-with-dynamic-client-ip/