https://www.lovezsh.com/posts/Recent content in Posts on lovezsh BlogHugozh-cnThu, 10 Sep 2026 08:00:00 +0800https://www.lovezsh.com/posts/ssh-fail2ban-audit/Thu, 10 Sep 2026 08:00:00 +0800https://www.lovezsh.com/posts/ssh-fail2ban-audit/用 fail2ban 自动封禁恶意来源，学会从日志做安全审计，并给出贯穿全系列的最终自测清单。https://www.lovezsh.com/posts/ssh-access-lockdown/Wed, 09 Sep 2026 08:00:00 +0800https://www.lovezsh.com/posts/ssh-access-lockdown/通过账号白名单、会话并发限制、防火墙来源过滤与禁用 root 直登，层层收窄 SSH 的攻击面。https://www.lovezsh.com/posts/ssh-key-auth/Tue, 08 Sep 2026 08:00:00 +0800https://www.lovezsh.com/posts/ssh-key-auth/用 ed25519 公钥认证替换密码登录，并安全地关闭 PasswordAuthentication，从根上断掉暴力破解这条路。https://www.lovezsh.com/posts/ssh-config-basics/Mon, 07 Sep 2026 08:00:00 +0800https://www.lovezsh.com/posts/ssh-config-basics/读懂 /etc/ssh/sshd_config 的关键开关，掌握 sshd -t 校验、systemctl reload 等不把自己锁在门外的正确改配置姿势。https://www.lovezsh.com/posts/ssh-security-why/Sun, 06 Sep 2026 08:00:00 +0800https://www.lovezsh.com/posts/ssh-security-why/认识 SSH 作为服务器唯一入口所面临的暴力破解威胁，学会自查暴露面，建立先留逃生门再加固的安全心智。https://www.lovezsh.com/posts/first-post/Sat, 05 Sep 2026 18:15:00 +0800https://www.lovezsh.com/posts/first-post/<p>第一篇博客，正在建设中。</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>echo <span style="color:#e6db74">&#34;hello hugo&#34;</span> </span></span></code></pre></div><p>PaperMod 主题已接入，支持目录、代码高亮、站内搜索。</p>https://www.lovezsh.com/posts/find-large-files-disk/Fri, 04 Sep 2026 08:00:00 +0800https://www.lovezsh.com/posts/find-large-files-disk/定位 Linux 磁盘被谁占满：用 du 逐层找大目录、find 找超大单文件、配合 ncdu 交互查看，再结合定期巡检与告警，快速找出磁盘增长大头。https://www.lovezsh.com/posts/linux-disk-cleanup-guide/Thu, 03 Sep 2026 08:00:00 +0800https://www.lovezsh.com/posts/linux-disk-cleanup-guide/Linux 磁盘满的清理思路：先 df/du 定位大占用，再逐类清理——日志轮转、/var/log、apt/yum 缓存、journald 日志上限、docker 残留、truncate 大日志，附 Debian/RHEL 命令对照。https://www.lovezsh.com/posts/inode-exhausted-nospace/Wed, 02 Sep 2026 08:00:00 +0800https://www.lovezsh.com/posts/inode-exhausted-nospace/df -h 显示还有几十 G，写入却报 No space left on device：多半是 inode 用尽。海量小文件会吃光 inode 索引，用 df -i 确认、按目录找出小文件海，再清理或扩容 inode。https://www.lovezsh.com/posts/disk-full-file-deleted-still-used/Tue, 01 Sep 2026 08:00:00 +0800https://www.lovezsh.com/posts/disk-full-file-deleted-still-used/删了磁盘上的大文件，df 却仍显示 100%：文件只是从目录消失，仍被运行中的进程占用未释放。用 lsof +L1 找出占用的进程，重启服务即归还空间。https://www.lovezsh.com/posts/df-du-disk-space/Mon, 31 Aug 2026 08:00:00 +0800https://www.lovezsh.com/posts/df-du-disk-space/df 和 du 显示的空间占用对不上很正常：df 按文件系统看已用块，du 按可见文件累加。被删除仍被占用的文件、隐藏挂载点、稀疏文件都会造成差异，本文给出定位方法。