cryptsetup luksOpen /dev/mmcblk2p2 gentoo
Enter passphrase for /dev/mmcblk2p2:

lsblk
NAME                    MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINTS
loop0                     7:0    0 506.3M  1 loop  /run/rootfsbase
sda                       8:0    1  14.4G  0 disk  
├─sda1                    8:1    1   250K  0 part  
├─sda2                    8:2    1   2.8M  0 part  
├─sda3                    8:3    1 593.1M  0 part  /run/initramfs/live
└─sda4                    8:4    1   300K  0 part  
mmcblk2                 179:0    0  29.1G  0 disk  
├─mmcblk2p1             179:1    0   255M  0 part  
└─mmcblk2p2             179:2    0  28.9G  0 part  
  └─gentoo              253:0    0  28.9G  0 crypt 
    └─vg_system-root_lv 253:1    0  28.9G  0 lvm   
mmcblk2boot0            179:8    0     4M  1 disk  
mmcblk2boot1            179:16   0     4M  1 disk  

  --- Logical volume ---
  LV Path                /dev/vg_system/root_lv
  LV Name                root_lv
  VG Name                vg_system
  LV UUID                TjkIQw-bcWN-BWiw-N04Z-Z8qX-szzF-mktDY2
  LV Write Access        read/write
  LV Creation host, time livecd, 2024-09-30 10:56:22 +0000
  LV Status              available
  # open                 0
  LV Size                28.85 GiB
  Current LE             7386
  Segments               1
  Allocation             inherit
  Read ahead sectors     auto
  - currently set to     256
  Block device           253:1

lvmdiskscan
  /dev/live-base     [    <506.34 MiB] 
  /dev/mapper/gentoo [      28.85 GiB] LVM physical volume
  /dev/mmcblk2p1     [     255.00 MiB] 
  /dev/sda2          [       2.81 MiB] 
  /dev/mmcblk2p2     [      28.87 GiB] 
  /dev/sda3          [     593.14 MiB] 
  /dev/mmcblk2boot0  [       4.00 MiB] 
  /dev/mmcblk2boot1  [       4.00 MiB] 
  1 disk
  6 partitions
  1 LVM physical volume whole disk
  0 LVM physical volumes

vgchange -ay
1 logical volume(s) in volume group "vg_system" now active

mount /dev/mapper/vg_system-root_lv /mnt/gentoo/
mount /dev/mmcblk2p1 /mnt/gentoo/boot/

lsblk /dev/mmcblk2
NAME                    MAJ:MIN RM  SIZE RO TYPE  MOUNTPOINTS
mmcblk2                 179:0    0 29.1G  0 disk  
├─mmcblk2p1             179:1    0  255M  0 part  /mnt/gentoo/boot
└─mmcblk2p2             179:2    0 28.9G  0 part  
  └─gentoo              253:0    0 28.9G  0 crypt 
    └─vg_system-root_lv 253:1    0 28.9G  0 lvm   /mnt/gentoo

cd /mnt/gentoo
mount --types proc /proc /mnt/gentoo/proc 
mount --rbind /sys /mnt/gentoo/sys 
mount --rbind /dev /mnt/gentoo/dev
mount --bind /run /mnt/gentoo/run/
chroot /mnt/gentoo /bin/bash
source /etc/profile

vim /etc/genkernel.conf
# Add LVM support
LVM="yes"

# Add LUKS support
LUKS="yes"

genkernel --lvm --luks initramfs
* Gentoo Linux Genkernel; Version 4.3.16
* Using genkernel configuration from '/etc/genkernel.conf' ...
* Running with options: --lvm --luks initramfs

* Working with Linux kernel 6.6.62-gentoo-dist for x86_64
* Using kernel config file '/usr/src/linux-6.6.62-gentoo-dist/.config' ...

* Current kernel's LOCALVERSION is set to '-gentoo-dist'; Will ignore set --kernel-localversion value '-x86_64' because kernel was not built ...

* initramfs: >> Initializing ...
*         >> Appending devices cpio data ...
*         >> Appending base_layout cpio data ...
*         >> Appending util-linux cpio data ...
*         >> Appending eudev cpio data ...
*         >> Appending devicemanager cpio data ...
*         >> Appending auxiliary cpio data ...
*         >> Appending busybox cpio data ...
*         >> Appending luks cpio data ...
*         >> Appending lvm cpio data ...
*         >> Appending modprobed cpio data ...
*         >> Appending modules cpio data ...
*         >> Deduping cpio ...
*         >> Pre-generating initramfs' /etc/ld.so.cache ...
*         >> Compressing cpio data (.xz) ...
* 
* You will find the initramfs in '/boot/initramfs-6.6.62-gentoo-dist.img'.

* WARNING... WARNING... WARNING...
* Additional kernel parameters that *may* be required to boot properly:
* - Add "dolvm" for LVM support
* - Add "crypt_root=<device>" for LUKS-encrypted root
* - Add "crypt_swap=<device>" for LUKS-encrypted swap

* Do NOT report kernel bugs as genkernel bugs unless your bug
* is about the default genkernel configuration...
* 
* Make sure you have the latest ~arch genkernel before reporting bugs.

GRUB_CMDLINE_LINUX="crypt_root=/dev/mmcblk2p2 root=/dev/mapper/vg_system-root_lv rootfstype=ext4 dolvm quiet"

cat /etc/portage/package.use/grub 
sys-boot/grub mount device-mapper

grub-mkconfig -o /boot/grub/grub.cfg
Генерируется файл настройки grub …
Найден образ linux: /boot/vmlinuz-6.6.62-gentoo-dist
Найден образ initrd: /boot/amd-uc.img /boot/initramfs-6.6.62-gentoo-dist.img
Найден образ linux: /boot/vmlinuz-6.6.58-gentoo-dist
Найден образ initrd: /boot/amd-uc.img /boot/initramfs-6.6.58-gentoo-dist.img
Предупреждение: os-prober не будет запущен для обнаружения других загрузочных разделов.
Их системы не будут добавлены в загрузочные настройки GRUB.
Прочтите документацию на параметр GRUB_DISABLE_OS_PROBER.
Добавляется элемент загрузочного меню для настроек микропрограммы UEFI …
завершено

ls -l boot | grep init
-rwxr-xr-x 1 root root 31886278 ноя  8 13:27 initramfs-6.6.58-gentoo-dist.img
-rwxr-xr-x 1 root root 12276100 дек  8 19:07 initramfs-6.6.62-gentoo-dist.img
-rwxr-xr-x 1 root root 12277464 дек  8 16:42 initramfs-6.6.62-gentoo-dist.img.old

cat /var/lib/dhcp/dhcpd.leases
lease 172.16.3.4 {
  starts 1 2024/12/02 01:05:44;
  ends 1 2024/12/02 01:15:44;
  cltt 1 2024/12/02 01:05:44;
  binding state active;
  next binding state free;
  rewind binding state free;
  hardware ethernet 52:54:00:7a:4f:30;
  uid "\001RT\000zO0";
  set vendor-class-identifier = "MSFT 5.0";
  set ddns-fwd-name = "test01.examp.le";
  set ddns-txt = "31e78d9a4315d82086018e82c56ab364d2";
  set ddns-rev-name = "4.3.16.172.in-addr.arpa.";
  client-hostname "test01";
}

timedatectl 
               Local time: Mon 2024-12-02 11:06:01 +10
           Universal time: Mon 2024-12-02 01:06:01 UTC
                 RTC time: Mon 2024-12-02 01:06:01
                Time zone: Asia/Vladivostok (+10, +1000)
System clock synchronized: yes
              NTP service: active
          RTC in local TZ: no

cat /etc/openvpn/server/server.conf

port 39876
proto udp
dev tun
ca keys/ca.crt
cert keys/server.crt
key keys/server.key
dh keys/dh.pem
topology subnet
server 192.168.56.224 255.255.255.224
# Домашняя сеть
route 172.16.10.96 255.255.255.248
client-to-client
client-config-dir ../ccd
ifconfig-pool-persist /var/log/openvpn/ipp.txt
keepalive 10 120
tls-auth keys/ta.key 0
cipher AES-256-GCM
max-clients 32
user nobody 
group nogroup
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log
log /var/log/openvpn/openvpn.log
verb 3
explicit-exit-notify 1

cat test/client.ovpn 

client
dev tun
proto udp
remote a.b.c.d
port 39876
resolv-retry infinite
auth-nocache
remote-cert-tls server
ca ca.crt
cert test.crt
key test.key
tls-client
tls-auth ta.key 1
cipher AES-256-GCM
persist-key
persist-tun
verb 3

/interface ipip add !keepalive remote-address=2.2.2.2 local-address=1.1.1.1
/ip address add address=10.0.0.1/30 interface=ipip-tunnel1

cat /etc/systemd/network/ipip-home.netdev

[NetDev]
Name=ipip-home
Kind=ipip

[Tunnel]
Remote=1.1.1.1
Local=2.2.2.2

cat /etc/systemd/network/ipip-home.network

[Match]
Name=ipip-home

[Network]
Address=10.0.0.1/30

cat /etc/systemd/network/isp.network

[Match]
Name=enp10s0

[Network]
Description=RosTelekom network
Address=Внешний
Gateway=Шлюз
DNS=ДНС’ы
LinkLocalAddressing=no
IPv6AcceptRA = no
Tunnel=ipip-home

/interface/ipip/ print 
0 R ipip-tunnel1  auto        1480  1.1.1.1  2.2.2.2    inherit

ip a
ipip-home@enp10s0: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1480 qdisc noqueue state UNKNOWN group default qlen 1000
    link/ipip 2.2.2.2 peer 1.1.1.1
    inet 10.0.0.1/30 brd 10.0.0.3 scope global ipip-home
       valid_lft forever preferred_lft forever

/routing ospf instance add name=instance1 router-id=10.0.0.2
/routing ospf area add instance=instance1 name=backbone
/routing ospf interface-template add area=backbone networks=10.0.0.0/30 type=ptp
/routing ospf interface-template add area=backbone networks=172.16.96.0/29 passive

vim /etc/frr/daemons

ospfd=yes
Esc + Z + Z

systemctl restart frr

vtysh
confugure terminal
(conf)$ ip forwarding
(conf)$ router ospf
(conf-router)$ network 172.16.3.0/27 area 0
(conf-router)$ network 10.0.0.0/30 area 0
(conf-router)$ neighbor 10.0.0.2
(conf-router)$ exit
(conf)$ interface ipip-home
(conf-if)$ ip ospf network broadcast
(conf-if)$ end
$ wr
$ exit

systemctl restart frr

tcpdump -i ipip-home

tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on ipip-home, link-type RAW (Raw IP), snapshot length 262144 bytes
07:11:49.693556 IP 10.0.0.1 > ospf-all.mcast.net: OSPFv2, Hello, length 48
07:11:52.708093 IP T2.primorye.net.ru > ospf-all.mcast.net: OSPFv2, Hello, length 44
07:11:59.694006 IP 10.0.0.1 > ospf-all.mcast.net: OSPFv2, Hello, length 48
07:12:02.704408 IP T2.primorye.net.ru > ospf-all.mcast.net: OSPFv2, Hello, length 44
07:12:09.694024 IP 10.0.0.1 > ospf-all.mcast.net: OSPFv2, Hello, length 48
07:12:10.019988 IP T2.primorye.net.ru.5678 > 255.255.255.255.5678: UDP, length 124
07:12:12.707207 IP T2.primorye.net.ru > ospf-all.mcast.net: OSPFv2, Hello, length 44
07:12:19.694168 IP 10.0.0.1 > ospf-all.mcast.net: OSPFv2, Hello, length 48
07:12:22.704249 IP T2.primorye.net.ru > ospf-all.mcast.net: OSPFv2, Hello, length 44

cat /etc/bind/named.conf.local

zone "1.168.192.in-addr.arpa" {
     type master;
     file "/var/lib/bind/db.192.168.1";
     allow-transfer { 192.168.1.1; };
};

zone "64-26.1.168.192.in-addr.arpa" {
     type master;
     file "/var/lib/bind/db.192.168.1";
     allow-transfer { 192.168.1.1; };
};

source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

# Физические интерфейсы
iface eno1 inet manual

auto eno2
iface eno2 inet manual

auto eno3 # ISP 1.1.1.2/27
iface eno3 inet manual

iface eno4 inet manual

cat /etc/network/interfaces.d/br0 
# Bridge 0
auto br0
iface br0 inet static
address 1.1.1.2/27
netmask 255.255.255.240
gateway 1.1.1.1
dns-nameservers 1.1.1.1 
bridge_ports eno3
bridge_stp off # отключаем протокол Spanning Tree
bridge_waitport 0 # убираем задержку до того, как порт станет доступен
bridge_fd 0 # убираем задержку переадресации

<interface type='bridge'>
  <mac address='52:54:00:26:eb:48'/>
  <source bridge='br0'/>
  <target dev='vnet8'/>
  <model type='virtio'/>
  <alias name='net0'/>
  <address type='pci' domain='0x0000' bus='0x01' slot='0x00' function='0x0'/>
</interface>

+----------+------------------------+------+-----+---------+----------------+
| Field    | Type                   | Null | Key | Default | Extra          |
+----------+------------------------+------+-----+---------+----------------+
| id       | int(11)                | NO   | PRI | NULL    | auto_increment |
| surname  | varchar(100)           | NO   |     | NULL    |                |
| name     | varchar(50)            | NO   |     | NULL    |                |
| photo    | varchar(50)            | NO   |     | NULL    |                |
| phone    | decimal(10,0) unsigned | NO   |     | NULL    |                |
| birthday | int(8) unsigned        | NO   |     | NULL    |                |
| id_month | int(11)                | NO   |     | NULL    |                |
+----------+------------------------+------+-----+---------+----------------+

+-------+------------+------+-----+---------+----------------+
| Field | Type       | Null | Key | Default | Extra          |
+-------+------------+------+-----+---------+----------------+
| id    | int(11)    | NO   | PRI | NULL    | auto_increment |
| month | varchar(8) | NO   |     | NULL    |                |
+-------+------------+------+-----+---------+----------------+

MariaDB [test]> ALTER TABLE `usrs` ADD FOREIGN KEY (`id_month`) REFERENCES `month` (`id`);
ERROR 1452 (23000): Cannot add or update a child row: a foreign key constraint fails (`test`.`#sql-alter-212-6e1`, CONSTRAINT `#sql-alter-212-6e1_ibfk_1` FOREIGN KEY (`id_month`) REFERENCES `month` (`id`))

testdb=# SELECT * FROM users ORDER BY id;
 id | id_birthday | surname  |  name    | cash 
----+-------------+----------+----------+------
  1 |        1604 | Иванов   | Иван     |   12
  2 |         502 | Петрова  | Евлампия |    5
  3 |        3112 | Головач  | Елена    |    9
(3 rows)

<body>
  <p>
    <h3>Введите свою дату рождения</h3>
    <form action="index.php" method="post">
      <input type="search" name="search">
      <button type="submit" name="submit" value="search">Найти</button>
    </form>
  </p>
  
  <!-- Вывод всех пользователей для понимания что в БД вообще есть -->
  <table border="2">
    <thead>
      <tr>
        <th>id</th>
        <th>Фамилия</th>
        <th>Имя</th>
        <th>Денег в кармане</th>
      </tr>
    </thead>
    <tbody>
      <?php include 'conndb.php';
        $sql = 'SELECT * FROM users';
        $query = pg_query($conndb, $sql);
        while ($result = pg_fetch_array($query)) {
          echo "
            <tr>
              <td>{$result['id_birthday']}</td>
              <td>{$result['surname']}</td>
              <td>{$result['name']}</td>
              <td>{$result['cash']}</td>
            </tr>";
        }
      ?>
    </tbody>
  </table>
  <!-- Конец вывод всех пользователей -->
</body>

GRUB_CMDLINE_LINUX="crypt_root=/dev/mmcblk2p2 root=/dev/mapper/gentoo-root rootfstype=ext4 dolvm quiet"

genkernel --lvm --luks initramfs

NAME         MAJ:MIN RM   SIZE RO TYPE MOUNTPOINTS
loop0          7:0    0 487.9M  1 loop /run/rootfsbase
sda            8:0    1  14.4G  0 disk 
├─sda1         8:1    1   250K  0 part 
├─sda2         8:2    1   2.8M  0 part 
├─sda3         8:3    1 569.5M  0 part /run/initramfs/live
└─sda4         8:4    1   300K  0 part 
mmcblk2      179:0    0  29.1G  0 disk 
mmcblk2boot0 179:8    0     4M  1 disk 
mmcblk2boot1 179:16   0     4M  1 disk

xmodmap: unable to open display
Error: Couldn’t connect in Xserver passing null display

CFLAGS="-march=native -O2 -pipe"
CXXFLAGS="${CFLAGS}"

ACCEPT_LICENSE="*"
USE="X -cdda -cdr -cups -dvd -gnome -gtk-doc -ipv6 -kde -qt5 -qt6 -systemd"

INPUT_DEVICE="libinput synaptic"
VIDEO_CARDS="intel i915"

GENTOO_MIRRORS="https://gentoo-mirror.alexxy.name"

CPU_FLAGS_X86="mmx mmxext sse sse2 sse3 ssse3"

00:02.0 VGA compatible controller: Intel Corporation Atom Processor D2xxx/N2xxx Integrated Graphics Controller (rev 09)
	DeviceName:  Onboard IGD
	Subsystem: Samsung Electronics Co Ltd Device c629

<disk type='file' device='disk'>
  <driver name='qemu' type='qcow2'/>
  <source file='/kvm/images/vm.qcow2'/>
  <target dev='vda' bus='virtio'/>
  <address type='pci' domain='0x0000' bus='0x04' slot='0x00' function='0x0'/>
</disk>

<disk type='block' device='disk'>
  <driver name='qemu' type='raw' cache='none' io='native'/>
  <source dev='/dev/ssd/vm' index='2'/>
  <backingStore/>
  <target dev='vda' bus='virtio'/>
  <alias name='virtio-disk0'/>
  <address type='pci' domain='0x0000' bus='0x02' slot='0x00' function='0x0'/>
</disk>

<vcpu placement='static'>2</vcpu>

<cpu mode='host-passthrough' check='none' migratable='on'>
   <topology sockets='1' dies='1' cores='1' threads='2'/>
</cpu>

<cpu mode='host-passthrough' check='none' migratable='on'>
   <topology sockets='1' dies='1' cores='2' threads='1'/>
</cpu>

/interface 6to4 add comment="Tunnel Broker" disabled=no local-address=<мой IP> mtu=1280 name=sit1 remote-address=<IP предоставленный брокером>