生产变更复盘 on Zayn's Bloghttps://blog.treesir.pub/series/%E7%94%9F%E4%BA%A7%E5%8F%98%E6%9B%B4%E5%A4%8D%E7%9B%98/Recent content in 生产变更复盘 on Zayn's BlogHugo -- gohugo.iozh-cnyangzun@treesir.pub (Zayn)yangzun@treesir.pub (Zayn)2021-2026 ZaynWed, 10 Jun 2026 15:40:00 +0800RouterOS WiFi 企业认证https://blog.treesir.pub/posts/routeros-wifi-radius-user-manager/Wed, 10 Jun 2026 15:40:00 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/routeros-wifi-radius-user-manager/一份 RouterOS WiFi 企业认证配置 runbook：先确认版本和架构，再安装 User Manager，最后把无线认证接到本机 RADIUS。EasyTier 私有共享节点部署https://blog.treesir.pub/posts/easytier-supervisor-public-node/Wed, 10 Jun 2026 15:35:00 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/easytier-supervisor-public-node/一份 EasyTier 私有组网 runbook：公网共享节点负责监听和中转，客户端用固定虚拟 IP 主动接入，进程由 Supervisor 托管。AMD VAAPI 审计视频压缩https://blog.treesir.pub/posts/amd-vaapi-video-compression/Wed, 10 Jun 2026 15:30:00 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/amd-vaapi-video-compression/一份 AMD VAAPI 视频压缩 runbook：先确认驱动和 <code>/dev/dri</code>，再用 ffmpeg 按文件大小和分辨率动态选择 QP，最后用 ffprobe 验证编码结果。Outline 自用部署：Keycloak、MinIO 和 OpenRestyhttps://blog.treesir.pub/posts/outline-keycloak-minio-compose/Wed, 10 Jun 2026 15:25:00 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/outline-keycloak-minio-compose/一份 Outline 自托管部署 runbook：PostgreSQL 提供数据库和扩展，Keycloak 提供 OIDC 登录，MinIO 提供附件存储，OpenResty 统一 HTTPS 入口。K8S 使用 Multus 接入 Macvlanhttps://blog.treesir.pub/posts/k8s-multus-macvlan/Wed, 10 Jun 2026 15:20:00 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/k8s-multus-macvlan/一份 Kubernetes Multus + macvlan 部署 runbook：先验证宿主机 VLAN，再部署 Multus，最后用 NetworkAttachmentDefinition 给 Pod 追加二层网络。EasyTier Supervisor 部署https://blog.treesir.pub/posts/easytier-supervisor-deployment/Wed, 10 Jun 2026 10:29:53 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/easytier-supervisor-deployment/记录一套 EasyTier 私有虚拟网络的可复现部署方式：一台公网共享节点负责发现和中转，两台客户端通过 Supervisor 托管加入同一网络。Restic 备份实践https://blog.treesir.pub/posts/restic-rest-server-backup/Tue, 09 Jun 2026 23:20:00 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/restic-rest-server-backup/整理一套 Restic + rest-server 的可复用备份方案，包括 macOS 客户端、Docker 定时备份、快照保留策略、恢复演练和 private-repos 路径规则。用 Docker Compose 部署 Draw.io 并接入 GitLab 存储https://blog.treesir.pub/posts/drawio-docker-compose-deployment/Tue, 09 Jun 2026 22:40:00 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/drawio-docker-compose-deployment/记录一套 Draw.io 自托管部署：用 Docker Compose 运行 Draw.io、PlantUML 和图片导出服务，通过 Nginx 暴露 HTTPS 入口，并接入 GitLab OAuth 与仓库存储。用 Docker Compose 部署 ALLinSSL 并接入 Nginx 反向代理https://blog.treesir.pub/posts/allinssl-docker-compose-deployment/Tue, 09 Jun 2026 22:00:00 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/allinssl-docker-compose-deployment/记录 ALLinSSL 的 Docker Compose 部署方式：容器监听本机端口，Nginx 负责 HTTPS 入口，数据持久化到本地目录，并补齐验证、备份和回滚路径。Docker Compose 部署 Keycloak 并接入 LDAPhttps://blog.treesir.pub/posts/keycloak-docker-compose-ldap-deployment/Tue, 09 Jun 2026 21:40:00 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/keycloak-docker-compose-ldap-deployment/一份 Keycloak 单实例部署和 LDAP 接入 runbook：从 Compose、数据库、管理员恢复开始，到邮件、LDAP 同步、密码策略和自助改密验证。用 Docker Compose 部署 Scrutiny：NVMe 健康监控的最小可用方案https://blog.treesir.pub/posts/scrutiny-docker-compose-deployment/Tue, 09 Jun 2026 17:10:00 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/scrutiny-docker-compose-deployment/一份 Scrutiny 单机部署 runbook：用 master-omnibus 镜像采集多块 NVMe 的 SMART 指标，并给出上线前检查、验证矩阵和回滚方式。华为 UPS2000 接入 NUT Server：编译 huawei-ups2000 驱动并完成联动https://blog.treesir.pub/posts/huawei-ups2000-nut-server-integration/Mon, 08 Jun 2026 23:10:00 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/huawei-ups2000-nut-server-integration/一份 Huawei UPS2000G 接入 NUT Server 的生产复盘：先用独立测试程序确认串口通信，再从 NUT 源码编译 huawei-ups2000 驱动，并配置 upsd、upsmon 和 upssched 完成联动。生产级 DNS 集群从零部署：dnsdist 与 Technitium 三节点架构https://blog.treesir.pub/posts/production-dns-cluster-deployment/Mon, 08 Jun 2026 22:30:00 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/production-dns-cluster-deployment/一份生产级 DNS 集群部署手册：三台机器如何关联成集群，如何从零安装 Docker、部署 Technitium 和 dnsdist，以及如何验证 DNS 与 DDNS 的性能。基于 macvlan 的 JupyterLab GPU 调试实例部署复盘https://blog.treesir.pub/posts/jupyterlab-gpu-macvlan-deployment/Mon, 08 Jun 2026 21:45:00 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/jupyterlab-gpu-macvlan-deployment/记录一个用于 AI 数据集调试的 JupyterLab 实例：容器通过 macvlan 获得独立内网 IP，并在具备 NVIDIA GPU 时支持 Notebook 直接调用 CUDA。生产 DNS 集群平滑升级复盘：dnsdist 与 Technitium 的滚动变更https://blog.treesir.pub/posts/production-dns-cluster-rolling-upgrade/Mon, 08 Jun 2026 20:00:00 +0800yangzun@treesir.pub (Zayn)https://blog.treesir.pub/posts/production-dns-cluster-rolling-upgrade/记录一次生产 DNS 集群从 dnsdist 1.9.11 升级到 1.9.14、Technitium 14.2.0 滚动升级到 15.2.0 的复盘方法和执行过程。