# 场景

写了一个钉钉的机器人，因为业务系统使用的是SQL Server，所以需要在容器内连接SQL Server。因为之前构建过有差不多的容器，所以抄了一下自己之前的Dockerfile。

确认网络和账号密码都是正确的以后，发现无法连接服务器




```dockerfile
FROM python:3.12-slim

EXPOSE 5002

# Keeps Python from generating .pyc files in the container
ENV PYTHONDONTWRITEBYTECODE=1

# Turns off buffering for easier container logging
ENV PYTHONUNBUFFERED=1

# Install pip requirements
COPY requirements.txt .
RUN rm -rf /etc/apt/sources.list
ADD sources.list /etc/apt/ 
RUN python -m pip install -r requirements.txt -i https://pypi.tuna.tsinghua.edu.cn/simple && apt-get clean && apt-get update && apt-get install -y unixodbc unixodbc-dev curl apt-transport-https gnupg && rm -rf /var/lib/apt/lists/*
RUN curl https://packages.microsoft.com/keys/microsoft.asc | apt-key add - \
    && curl https://packages.microsoft.com/config/ubuntu/20.04/prod.list > /etc/apt/sources.list.d/mssql-release.list
RUN apt-get update && ACCEPT_EULA=Y apt-get install -y msodbcsql17

WORKDIR /app
COPY . /app

# Creates a non-root user with an explicit UID and adds permission to access the /app folder
# For more info, please refer to https://aka.ms/vscode-docker-python-configure-containers
RUN adduser -u 5678 --disabled-password --gecos "" appuser && chown -R appuser /app
USER appuser

# During debugging, this entry point will be overridden. For more information, please refer to https://aka.ms/vscode-docker-python-debug
CMD ["gunicorn", "--bind", "0.0.0.0:5002", "gmsFlask:app"]
```

使用的是python:3.12-slim这个镜像，底包是ubuntu2004，之前是只需要安装msodbcsql17就行，但是这次构建完成后发现无法连上另外一台更老的SQL Server服务器。

#  解决方案

[GitHub参考链接](https://github.com/microsoft/msphpsql/issues/1453)

在google上一阵检索后发现应该是底包的openssl的版本过高（3.0），服务器无法通过高版本tls链接服务器导致的。参考issues后更改DockerFile后测试链接正常

```dockerfile
FROM python:3.12-slim

# Keeps Python from generating .pyc files in the container
ENV PYTHONDONTWRITEBYTECODE=1

# Turns off buffering for easier container logging
ENV PYTHONUNBUFFERED=1

# Install pip requirements
COPY requirements.txt .
RUN rm -rf /etc/apt/sources.list
ADD sources.list /etc/apt/
RUN python -m pip install -r requirements.txt -i https://pypi.tuna.tsinghua.edu.cn/simple \
    && apt-get clean \
    && apt-get update \
    && apt-get install -y unixodbc unixodbc-dev curl apt-transport-https gnupg \
    && rm -rf /var/lib/apt/lists/*
RUN curl https://packages.microsoft.com/keys/microsoft.asc | apt-key add - \
    && curl https://packages.microsoft.com/config/ubuntu/20.04/prod.list > /etc/apt/sources.list.d/mssql-release.list
RUN apt-get update \
    && ACCEPT_EULA=Y apt-get install -y msodbcsql17
RUN sed -i 's/openssl_conf = openssl_init/openssl_conf = default_conf/' /etc/ssl/openssl.cnf \
    && echo "[ default_conf ]" >> /etc/ssl/openssl.cnf \
    && echo "ssl_conf = ssl_sect" >> /etc/ssl/openssl.cnf \
    && echo "" >> /etc/ssl/openssl.cnf \
    && echo "[ ssl_sect ]" >> /etc/ssl/openssl.cnf \
    && echo "system_default = system_default_sect" >> /etc/ssl/openssl.cnf \
    && echo "" >> /etc/ssl/openssl.cnf \
    && echo "[ system_default_sect ]" >> /etc/ssl/openssl.cnf \
    && echo "MinProtocol = TLSv1.2" >> /etc/ssl/openssl.cnf \
    && echo "CipherString = DEFAULT@SECLEVEL=0" >> /etc/ssl/openssl.cnf

WORKDIR /app
COPY . /app

# Creates a non-root user with an explicit UID and adds permission to access the /app folder
RUN adduser -u 5678 --disabled-password --gecos "" appuser && chown -R appuser /app
USER appuser
CMD ["python3","./SHSyncTool.py"]
```

Ubuntu2004容器内连接SQL Server失败

# 基于Air780E的短信接收二开

# 简介

因为 RPA 中获取报表等信息采集因素需要接受手机验证码，所以购买基于宙合 Air780E 的短信接收器用于短信转发。其中集成了 luatOS，可以通过 lua 脚本进行自定义请求接口以满足短信获取的需求。

这篇文章以短信接收器端烧录、后端接口部署两部分进行记录。



# 短信接收器烧录

## 外观


<img src="https://wuwuwwi.cn/static/img/5a9bfc2f8f99cae1efe15077e307f474.image.webp" style="width: 50%;" alt="示例图片"><img src="https://wuwuwwi.cn/static/img/8e24d54c88c2b496453e66073cdc037d.image.webp" style="width: 50%;" alt="示例图片">

购买链接：[淘宝链接](https://item.taobao.com/item.htm?spm=a1z09.2.0.0.74a22e8dvDR189&id=801279616661&_u=e2i9q61632cd&pisk=f1VmmtjF8-kjuuLOm7cfB7HeiqW-lnG__ldtXfnNU0o55KpAlAuaSlVTHPotslqgjmHNcjFgqyaOl5Qjg10avucTkmnTqNqY5CIfCjdwjoaFcrnOl5mZqoriCZitbcqT7-QR96UblfGZsMCd9DD11KrD3mkN70uno8U2Hezblfia3PNPvr9GPA6LgArZaYuISfRw_q7oaVun_IkwgL-rVVlZblkZa_ujoVuq_V-rwPOZx5P7aiyCMoM4EJFooYW8u0JSb7um_D44iCRw5qDmYrolvQAH4YzsI5T6sAU4dlgU0nSif74zgJrF2Kn4KV4LIk79h4HgGbmag6Tn4S4gZxwJ0KunimDUgxYdRyDaE7cYgG9QyzmqKbeRFiHtio2IAxW5Vl4oDlPmUnj-XJU8gYqF2QqsIRPxaSSPtgoHUp-QkCgPW7J6CxuSrD6dkAmrgFEfcabkdtMqPqIdrav6CxuSrDQlrptj34gAv&skuId=5458886737522)

参考视频：[B站链接](https://www.bilibili.com/video/BV1rn4y1R7Jc)

参考文档：[合宙air780e硬件实现短信转发 最终版本 全网通 通用 支持电信 (yuque.com)](https://www.yuque.com/pengzhiqiang999/xiaokenai/bhzrqf68i9i07qac?singleDoc#)

烧录后通过 usb 供电，电源给予 5v1a 即可。

## 烧录方法

### 目录

![image.png](https://wuwuwwi.cn/static/img/b4613f6fc07d7457c57f0f21e487192f.image.webp)

全网通目录下：

![image.png](https://wuwuwwi.cn/static/img/ff30237e152b2a794b4cb60bf7edcae6.image.webp)

### 如何烧录？

需要根据情况修改 script 中的脚本

![image.png](https://wuwuwwi.cn/static/img/664db4729b3be92228561d4647314be8.image.webp)

####  修改 script 中的 config.lua

右键使用记事本打开 config.lua ，主要关注第 4 行和第 19 行


```lua
return {
    -- 通知类型, 支持配置多个
    -- NOTIFY_TYPE = {"telegram", "pushdeer", "bark", "dingtalk", "feishu", "wecom", "pushover", "inotify", "next-smtp-proxy", "gotify"},
    NOTIFY_TYPE = {"dingtalk","diy","diy1"},
    -- telegram 通知配置, https://github.com/0wQ/telegram-notify
    TELEGRAM_PROXY_API = "",
    TELEGRAM_TOKEN = "",
    TELEGRAM_CHAT_ID = "",
    --
    -- pushdeer 通知配置, https://www.pushdeer.com/
    PUSHDEER_API = "https://api2.pushdeer.com/message/push",
    PUSHDEER_KEY = "",
    --
    -- bark 通知配置, https://github.com/Finb/Bark
    BARK_API = "https://api.day.app",
    BARK_KEY = "",
    --
    -- dingtalk 通知配置, https://open.dingtalk.com/document/robots/custom-robot-access
    DINGTALK_WEBHOOK = "*",
    --
    -- feishu 通知配置, https://open.feishu.cn/document/ukTMukTMukTM/ucTM5YjL3ETO24yNxkjN
    FEISHU_WEBHOOK = "*",
    --
    -- wecom 通知配置, https://developer.work.weixin.qq.com/document/path/91770
    WECOM_WEBHOOK = "*",
    --
    -- pushover 通知配置, https://pushover.net/api
    PUSHOVER_API_TOKEN = "",
    PUSHOVER_USER_KEY = "",
    --
    -- inotify 通知配置, https://github.com/xpnas/Inotify 或者使用合宙提供的 https://push.luatos.org
    INOTIFY_API = "https://push.luatos.org/XXXXXX.send",
    --
    -- next-smtp-proxy 通知配置, https://github.com/0wQ/next-smtp-proxy
    NEXT_SMTP_PROXY_API = "",
    NEXT_SMTP_PROXY_USER = "",
    NEXT_SMTP_PROXY_PASSWORD = "",
    NEXT_SMTP_PROXY_HOST = "smtp-mail.outlook.com",
    NEXT_SMTP_PROXY_PORT = 587,
    NEXT_SMTP_PROXY_FORM_NAME = "Air780E",
    NEXT_SMTP_PROXY_TO_EMAIL = "",
    NEXT_SMTP_PROXY_SUBJECT = "来自 Air780E 的通知",
    --
    -- gotify 通知配置, https://gotify.net/
    GOTIFY_API = "",
    GOTIFY_TITLE = "Air780E",
    GOTIFY_PRIORITY = 8,
    GOTIFY_TOKEN = "",
    --
    -- 定时查询流量间隔, 单位毫秒, 设置为 0 关闭 (建议检查 util_mobile.lua 文件中运营商号码和查询代码是否正确, 以免发错短信导致扣费, 收到查询结果短信发送通知会消耗流量)
    QUERY_TRAFFIC_INTERVAL = 0,
    --
    -- 定时基站定位间隔, 单位毫秒, 设置为 0 关闭 (定位成功后会追加到通知内容后面, 基站定位本身会消耗流量, 通知内容增加也会导致流量消耗增加)
    LOCATION_INTERVAL = 0,
    --
    -- 开机通知 (会消耗流量)
    BOOT_NOTIFY = true,
    --
    -- 通知内容追加更多信息 (通知内容增加会导致流量消耗增加)
    NOTIFY_APPEND_MORE_INFO = true,
    --
    -- 通知最大重发次数
    NOTIFY_RETRY_MAX = 0,
    --
    -- 开启低功耗模式, USB 断开连接无法查看日志, RNDIS 网卡会断开
    LOW_POWER_MODE = false,
}
```

第 4 行表示需要通过什么方式进行通知，默认为钉钉和数据库（diy）还有通知影刀数据链接器后端（diy1）

第 19 行填入钉钉机器人地址，配置验证方式为自定义关键词”本机号码“


#### 打开 util\_notify.lua 修改后端接口地址和 token

**如不需要修改则跳过此步**

因为放出至公网所以配置了 token 字段如此处修改了需要同步修改后端

这里增加了自定义的http请求

```lua
local notify = {
    -- 发送到 diy 需要改
    ["diy"] = function(msg)
        diy_url = "*"
        local header = {
            ["Content-Type"] = "application/json; charset=utf-8"
        }
        log.info(msg)
        -- 这个就是请求文本
        -- 本机号码
        local number = mobile.number(mobile.simid())
        if not number then
            -- 无法识别手机号 手动指定
            log.info("notifyCode:28-NoNumber")
            number = GloablNumber
        end 
        
        local send_body = {
            token = "***",
            receiver_phone = number,
            sms = msg
        }
        local json_data = json.encode(send_body)
        -- LuatOS Bug, json.encode 会将 \n 转换为 \b
        json_data = string.gsub(json_data, "\\b", "\\n")
        log.info("util_notify", "POST", diy_url)
        log.info("util_notify", "POST", send_body)
        log.info("util_notify", "POST", json_data)
        return util_http.fetch(nil, "POST", diy_url, header, json_data)
    end,
```

#### 刷入固件和脚本

:::
**！！！！！！请勿在共享目录中直接打开文件！如需要刷固件请下载至本地运行！！！！！！**
:::

1.  打开![image.png](https://wuwuwwi.cn/static/img/54e7772d2c820dd9fb16ccc254f9a286.image.webp)
2.  点击右上角项目管理测试
![image.png](https://wuwuwwi.cn/static/img/24c51136d9f1a624db59c68b3040e7ee.image.webp)
3.  点击创建项目，随意输入名称
![image.png](https://wuwuwwi.cn/static/img/3f75a93f600d00f360a9248bef58b1ce.image.webp)
4.  点击右上角选择文件，选择 core 文件
![image.png](https://wuwuwwi.cn/static/img/4f6683c0642877ec3af3a8f4a4766fcb.image.webp)
5.  点击**增加脚本或资源文件**选中 script 中的所有文件并添加
![image.png](https://wuwuwwi.cn/static/img/a09d65cc64b814476eaaf3948d966f10.image.webp)
6.  点击下载底层和脚本
![image.png](https://wuwuwwi.cn/static/img/f29ece568cea1315c9d5ce5ccabe6586.image.webp)
7.  编译完成后出现提示![image.png](https://wuwuwwi.cn/static/img/91328a7b7d2473699623965ee1dedcbb.image.webp)时，按住![image.png](https://wuwuwwi.cn/static/img/7f6b4300c0127b4cf4fd7337bfe4264a.image.webp)下载键插入电脑，亮灯后松手等待刷入完成即可。![image.png](https://wuwuwwi.cn/static/img/ba8bac16699200315a74a44664f1923a.image.webp)


8.  正常刷入后能识别 sim 卡后即可正常转发。
    

:::
如显示本机号码为 111111 则说明无法识别手机号，请前往 script/main.lua 的第 13 行手动修改手机号后再次刷入！![image.png](https://wuwuwwi.cn/static/img/1f63a2bf792f134dc2c07fd2c38801ba.image.webp)![](https://wuwuwwi.cn/static/img/643936d9db61f3524f5a8284fdb90a7d.image.webp)
:::


# 后端部署

后端现部署在云服务器的 dockers 容器上，使用同样运行在 docker 中的 Nginx Proxy Manager 进行代理。

## 文件结构

![image.png](https://wuwuwwi.cn/static/img/162a0cfa24f5d21713617867e95f0d65.image.webp)本体为 gmsFlask.py，使用 python 的 flask 库实现了后端接口。sources.list 、requirements.txt、Dockerfile 均为容器构建时需要的文件。

## gmsFlask.py

9~19 均为 mysql 和 sqlserver 的数据库连接参数，默认 mysql 连接的数据库为 192.168.0.164 数据库与表名为 yd\_db.sms\_msg。mysql 连接的数据库地址为 192.168.1.8 数据库名与表名为 PRA smsMsg，表结构一致。

```python

from flask import Flask, request,abort
import json
import sys
import pyodbc
import pymysql
import inspect

app = Flask(__name__)
MysqlIP = "*"
MysqlUsers = "sms"
MysqlPWD = "*"
MysqlQuery = "INSERT INTO yd_db.sms_msg (phoneNumber, msg) VALUES (%s, %s)"

sqlserverIP = "***"
sqlserverUsers = "sa"
sqlserverPWD= "*"
sqlserverDB = "RPA"
sqlserverQuery = "INSERT INTO smsMsg (phoneNumber, msg) VALUES (?, ?)"
toSqlServerPhoneNumber = "*"



def checkRet(ret,defName):
    if ret:
        print(f"{defName} success commit") 
        return
    print(f"{defName} commit fail") 

#连接mysql
def connMySql(data):
    conn = pymysql.connect(host=MysqlIP, user=MysqlUsers, password=MysqlPWD, port=3306)

    cursor = conn.cursor()
    sql = MysqlQuery
    ret = cursor.execute(sql, data)
    checkRet(ret,inspect.currentframe().f_code.co_name)
    conn.commit()
    cursor.close()

def connSqlServer(data):
    # 创建连接字符串
    connection_string = f'DRIVER={{ODBC Driver 17 for SQL Server}};SERVER={sqlserverIP};DATABASE={sqlserverDB};UID={sqlserverUsers};PWD={sqlserverPWD}'
    # 建立连接
    conn = pyodbc.connect(connection_string)
    # 创建游标对象
    cursor = conn.cursor()
    # 执行SQL查询
    sql = sqlserverQuery
    ret = cursor.execute(sql,data)
    checkRet(ret,inspect.currentframe().f_code.co_name)
    # 关闭连接
    conn.commit()
    cursor.close()
    conn.close()

@app.route('/info', methods=["POST"])
def hello():
    print(request.method)
    if request.method == "POST":
        req_data = json.loads(str(request.data, 'utf-8'))
        if str(req_data["token"]) != "****" or "receiver_phone" not in req_data.keys() or not req_data["receiver_phone"]:
            abort(400) 

        sjh=str(req_data["receiver_phone"])
        sms=str(req_data["sms"])
        dat= (sjh,sms)

        #连接数据库向两边写数据
        connMySql(dat)
        # print("okkkkkkk")
        if toSqlServerPhoneNumber in sjh:
            connSqlServer(dat)

        return "conmmit"
    
@app.route('/gms', methods=["GET"])
def gmsSend():
    print(request.args.get("content"))
    return "ok"
    
@app.route('/test',methods=["POST","GET"])
def test():
    return 'Hello World!'

if __name__ == '__main__':
    app.run(host="0.0.0.0",port=8125)#gai duanko
    # connSqlServer(("*","test111"))
```

## Dockerfile

```Dockerfile
FROM python:3.12-slim

EXPOSE 5002

# Keeps Python from generating .pyc files in the container
ENV PYTHONDONTWRITEBYTECODE=1

# Turns off buffering for easier container logging
ENV PYTHONUNBUFFERED=1

# Install pip requirements
COPY requirements.txt .
RUN rm -rf /etc/apt/sources.list
ADD sources.list /etc/apt/ 
RUN python -m pip install -r requirements.txt -i https://pypi.tuna.tsinghua.edu.cn/simple && apt-get clean && apt-get update && apt-get install -y unixodbc unixodbc-dev curl apt-transport-https gnupg && rm -rf /var/lib/apt/lists/*
RUN curl https://packages.microsoft.com/keys/microsoft.asc | apt-key add - \
    && curl https://packages.microsoft.com/config/ubuntu/20.04/prod.list > /etc/apt/sources.list.d/mssql-release.list
RUN apt-get update && ACCEPT_EULA=Y apt-get install -y msodbcsql17

WORKDIR /app
COPY . /app

# Creates a non-root user with an explicit UID and adds permission to access the /app folder
# For more info, please refer to https://aka.ms/vscode-docker-python-configure-containers
RUN adduser -u 5678 --disabled-password --gecos "" appuser && chown -R appuser /app
USER appuser

# During debugging, this entry point will be overridden. For more information, please refer to https://aka.ms/vscode-docker-python-debug
CMD ["gunicorn", "--bind", "0.0.0.0:5002", "gmsFlask:app"]
```

## 镜像构建

将所有文件拷贝至服务器后运行

```shell
docker build -t gms2mysql:v1 .
#构建完成后运行
docker run --name gmsserver -p 1825:5002  -d gms2mysql:v1
```

意思是使用 gms2mysql:v1 镜像起一个叫 gmsserver 的容器将本机的 1825 端口映射到容器内 5002

然后通过Nginx Proxy Manager 将请求代理至本机 1825 端口

构建时如卡住则需要进行 docker 换源或者是进行代理，sources.list 内已进行 apt 换源。

Air780E的短信接收二开

# vSphere证书续订

# 起因

连接vSphere 时发现无法验证，报 500、400 错误，进入 5480 端口的 VAM 发现状态正常，但是证书服务出错，同时查看网页证书发现已过期两天。基本确定是证书问题。检索后参考以下文章进行修复，附件如下。

[VMware vCenter证书过期解决方法 - Sawyerhan - 博客园](https://www.cnblogs.com/sawyerhan/p/17801193.html)



# 解决过程

## 确认 sts 证书是否过期

使用压缩包中的 checksts.py 脚本进行检查，发现 sts 证书未过期。

```shell
root@ZJvCSA1 [ ~ ]# ls
checksts.py
root@ZJvCSA1 [ ~ ]# python checksts.py

2 VALID CERTS
================

        LEAF CERTS:

        [] Certificate 51:6E:59:84:E7:2D:BD:64:25:28:1F:61:5A:66:28:A3:D1:F6:A1:71 will expire in 2913 days (8 years).

        ROOT CERTS:

        [] Certificate E7:D0:E7:94:7C:A4:14:42:B9:81:B5:CE:2A:81:E4:30:66:3E:FD:A7 will expire in 2913 days (8 years).

0 EXPIRED CERTS
================

        LEAF CERTS:

        None

        ROOT CERTS:

        None

```

## 确认其他证书是否过期

### 确认

使用如下命令检查后发现

MACHINE\_SSL\_CERT、machine、vsphere-webclient、vpxd、vpxd-extension、data-encipherment

均已过期

```shell
root@ZJvCSA1 [ ~ ]# for store in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list | grep -v TRUSTED_ROOT_CRLS); do echo "[*] Store :" $store; /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $store --text | grep -ie "Alias" -ie "Not After";done;
[*] Store : MACHINE_SSL_CERT
Alias : __MACHINE_CERT
            Not After : Oct 20 23:19:10 2025 GMT
[*] Store : TRUSTED_ROOTS
Alias : e7d0e7947ca41442b981b5ce2a81e430663efda7
            Not After : Oct 15 11:19:09 2032 GMT
[*] Store : machine
Alias : machine
            Not After : Oct 20 11:10:23 2025 GMT
[*] Store : vsphere-webclient
Alias : vsphere-webclient
            Not After : Oct 20 11:10:25 2025 GMT
[*] Store : vpxd
Alias : vpxd
            Not After : Oct 20 11:10:27 2025 GMT
[*] Store : vpxd-extension
Alias : vpxd-extension
            Not After : Oct 20 11:10:29 2025 GMT
[*] Store : APPLMGMT_PASSWORD
[*] Store : data-encipherment
Alias : data-encipherment
            Not After : Oct 20 11:13:25 2025 GMT
[*] Store : SMS
Alias : sms_self_signed
            Not After : Oct 21 11:27:10 2032 GMT

```

### 修复

运行 certificate-manager 进行修复，需要验证 admin 账号以及输入正确FQDN（56、57 行）一路确认即可

自动重启完成后问题解决

```shell
root@ZJvCSA1 [ ~ ]# /usr/lib/vmware-vmca/bin/certificate-manager
                 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
                |                                                                     |
                |      *** Welcome to the vSphere 6.7 Certificate Manager  ***        |
                |                                                                     |
                |                   -- Select Operation --                            |
                |                                                                     |
                |      1. Replace Machine SSL certificate with Custom Certificate     |
                |                                                                     |
                |      2. Replace VMCA Root certificate with Custom Signing           |
                |         Certificate and replace all Certificates                    |
                |                                                                     |
                |      3. Replace Machine SSL certificate with VMCA Certificate       |
                |                                                                     |
                |      4. Regenerate a new VMCA Root Certificate and                  |
                |         replace all certificates                                    |
                |                                                                     |
                |      5. Replace Solution user certificates with                     |
                |         Custom Certificate                                          |
                |                                                                     |
                |      6. Replace Solution user certificates with VMCA certificates   |
                |                                                                     |
                |      7. Revert last performed operation by re-publishing old        |
                |         certificates                                                |
                |                                                                     |
                |      8. Reset all Certificates                                      |
                |_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _|
Note : Use Ctrl-D to exit.
Option[1 to 8]: 8
Do you wish to generate all certificates using configuration file : Option[Y/N] ? : y

Please provide valid SSO and VC privileged user credential to perform certificate operations.
Enter username [Administrator@vsphere.local]:Administrator@xmysd.local
Enter password:

Please configure certool.cfg with proper values before proceeding to next step.

Press Enter key to skip optional parameters or use Default value.

Enter proper value for 'Country' [Default value : US] : CN

Enter proper value for 'Name' [Default value : CA] :

Enter proper value for 'Organization' [Default value : VMware] : xmysd

Enter proper value for 'OrgUnit' [Default value : VMware Engineering] :

Enter proper value for 'State' [Default value : California] :

Enter proper value for 'Locality' [Default value : Palo Alto] :

Enter proper value for 'IPAddress' (Provide comma separated values for multiple IP addresses) [optional] :

Enter proper value for 'Email' [Default value : email@acme.com] :

Enter proper value for 'Hostname' (Provide comma separated values for multiple Hostname entries) [Enter valid Fully Qualified Domain Name(FQDN), For Example : example.domain.com] : zjvcsa1.xmysd.com

Enter proper value for VMCA 'Name' :zjvcsa1.xmysd.com
Continue operation : Option[Y/N] ? : y

You are going to reset by regenerating Root Certificate and replace all certificates using VMCA
Continue operation : Option[Y/N] ? : y
Get site nameCompleted [Reset Machine SSL Cert...]
default-site
Lookup all services
Get service default-site:fdf5a246-a369-428b-ba32-aab40d30a983
Update service default-site:fdf5a246-a369-428b-ba32-aab40d30a983; spec: /tmp/svcspec_9_z_09zo
Get service default-site:90730e62-c237-491c-94a3-691b6bc5fb3f
Update service default-site:90730e62-c237-491c-94a3-691b6bc5fb3f; spec: /tmp/svcspec_b8hlqrjl
Get service default-site:93c99a35-6819-4a22-8f12-bac8c791fe0b
Update service default-site:93c99a35-6819-4a22-8f12-bac8c791fe0b; spec: /tmp/svcspec_v0h21niv
Get service f9b7ab57-d31a-472b-baca-a8fc73dffa5e
Update service f9b7ab57-d31a-472b-baca-a8fc73dffa5e; spec: /tmp/svcspec_620rd825
Get service 47756137-6b86-4a5a-9f69-ffd9a765efa5
Update service 47756137-6b86-4a5a-9f69-ffd9a765efa5; spec: /tmp/svcspec_6768s48i
Get service 4a401699-4198-4e2b-b38c-0d1210dbbd41
Update service 4a401699-4198-4e2b-b38c-0d1210dbbd41; spec: /tmp/svcspec_231ve0br
Get service f4558b2b-1935-4d12-9ce9-b546f75e619f
Update service f4558b2b-1935-4d12-9ce9-b546f75e619f; spec: /tmp/svcspec_n8w1ki48
Get service e015ce62-1ee6-487d-9893-f7cc7fb7d7c5
Update service e015ce62-1ee6-487d-9893-f7cc7fb7d7c5; spec: /tmp/svcspec_06i6ocfs
Get service 1db62bf3-7189-44c5-8249-5812e39b9466
Update service 1db62bf3-7189-44c5-8249-5812e39b9466; spec: /tmp/svcspec_t2ci1rvv
Get service f1a976cb-7010-4053-866b-f1f4690d0afd_kv
Update service f1a976cb-7010-4053-866b-f1f4690d0afd_kv; spec: /tmp/svcspec_1cg7rxq9
Get service 119e4f2c-470b-4f0e-9d3f-f7c63f6bba36
Update service 119e4f2c-470b-4f0e-9d3f-f7c63f6bba36; spec: /tmp/svcspec_w2u1hnf8
Get service 605f5a7d-4273-4c3b-8cc6-ae1eaa0fd0c2
Update service 605f5a7d-4273-4c3b-8cc6-ae1eaa0fd0c2; spec: /tmp/svcspec_u64kl0zi
Get service f1a976cb-7010-4053-866b-f1f4690d0afd_authz
Update service f1a976cb-7010-4053-866b-f1f4690d0afd_authz; spec: /tmp/svcspec_r2xbpwg3
Get service c400991e-062a-4788-baf9-c709633865e7
Update service c400991e-062a-4788-baf9-c709633865e7; spec: /tmp/svcspec_bxqbi7zb
Get service f1a976cb-7010-4053-866b-f1f4690d0afd
Update service f1a976cb-7010-4053-866b-f1f4690d0afd; spec: /tmp/svcspec_ilwddh4a
Get service 6da2c3a6-d9e8-4ac1-9065-78f65faa3127
Update service 6da2c3a6-d9e8-4ac1-9065-78f65faa3127; spec: /tmp/svcspec_uaxi4a2g
Get service ba86c811-0157-4237-86b1-099aa1989e68
Update service ba86c811-0157-4237-86b1-099aa1989e68; spec: /tmp/svcspec_up81wd9c
Get service 86fb758e-1d65-47e8-a2ad-f6da2b48421d
Update service 86fb758e-1d65-47e8-a2ad-f6da2b48421d; spec: /tmp/svcspec_53adi_lc
Get service 699f0502-d4f9-485b-a8c9-8f969438d68c
Update service 699f0502-d4f9-485b-a8c9-8f969438d68c; spec: /tmp/svcspec_cbwmzggu
Get service 9a9ab827-cbdc-4b57-bf53-6296d3ba5c48
Update service 9a9ab827-cbdc-4b57-bf53-6296d3ba5c48; spec: /tmp/svcspec_sxl8f42c
Get service 046962bc-32b2-4bde-9a68-284374a2a9fc
Update service 046962bc-32b2-4bde-9a68-284374a2a9fc; spec: /tmp/svcspec_k333m5p8
Get service 56f64b2c-c9cc-4e75-abcd-8d76448e72f7
Update service 56f64b2c-c9cc-4e75-abcd-8d76448e72f7; spec: /tmp/svcspec_j1n5lwk2
Get service d71471a0-7314-4d33-b76e-306372940629
Update service d71471a0-7314-4d33-b76e-306372940629; spec: /tmp/svcspec_bnq4vxsn
Get service 50d63d29-4fb7-48b8-87b4-56c5f064bbc8
Update service 50d63d29-4fb7-48b8-87b4-56c5f064bbc8; spec: /tmp/svcspec__ucdp1f4
Get service 108fa898-771e-49e3-b8bf-900a4ad023ad
Update service 108fa898-771e-49e3-b8bf-900a4ad023ad; spec: /tmp/svcspec_nkg05vjo
Get service ecbbe7b2-7e63-48e4-b9fb-89267f47093e
Update service ecbbe7b2-7e63-48e4-b9fb-89267f47093e; spec: /tmp/svcspec_zxvq_arc
Get service e196c98d-d90d-4c43-a96f-521ffb0627ba
Update service e196c98d-d90d-4c43-a96f-521ffb0627ba; spec: /tmp/svcspec_k5a1hy2f
Get service e95abbb3-6ad7-4f26-a7bd-7316e08d33e1
Update service e95abbb3-6ad7-4f26-a7bd-7316e08d33e1; spec: /tmp/svcspec_271ikewg
Get service 2f541a5c-bb1c-45b4-941d-fd4fefa5d095
Update service 2f541a5c-bb1c-45b4-941d-fd4fefa5d095; spec: /tmp/svcspec_dq2arwb4
Get service b221b437-f1f0-40da-9972-3fe1024b7fa4
Update service b221b437-f1f0-40da-9972-3fe1024b7fa4; spec: /tmp/svcspec_iwxmf5e4
Get service 27b3665c-8ea5-427a-9063-5043632e27cc
Update service 27b3665c-8ea5-427a-9063-5043632e27cc; spec: /tmp/svcspec_i25mnnoe
Get service f12c320a-a2a9-492c-8178-f1b5dc48fe56
Update service f12c320a-a2a9-492c-8178-f1b5dc48fe56; spec: /tmp/svcspec_ews3dbn6
Get service 0336210c-e126-493e-849e-501282c0252a
Update service 0336210c-e126-493e-849e-501282c0252a; spec: /tmp/svcspec_zo0p7fr1
Get service d71471a0-7314-4d33-b76e-306372940629_com.vmware.vsphere.client
Don't update service d71471a0-7314-4d33-b76e-306372940629_com.vmware.vsphere.client
Get service 75326926-d261-426d-a81c-e59b501eaba0
Update service 75326926-d261-426d-a81c-e59b501eaba0; spec: /tmp/svcspec_ilkow9mi
Get service d71471a0-7314-4d33-b76e-306372940629_com.apcc.pcns.PowerChutePlugin.PCNS1
Don't update service d71471a0-7314-4d33-b76e-306372940629_com.apcc.pcns.PowerChutePlugin.PCNS1
Updated 34 service(s)
Status : 60% Completed [Reset vpxd-extension Cert...]
2024-10-24T02:08:02.204Z  Updating certificate for "com.vmware.vim.eam" extension


2024-10-24T02:08:03.424Z  Updating certificate for "com.vmware.rbd" extension


2024-10-24T02:08:04.567Z  Updating certificate for "com.vmware.imagebuilder" extension

Reset status : 100% Completed [Reset completed successfully]

```

vSphere证书续订

# 功能

此脚本功能为根据工作日开关PLC控制器大屏，工作日包含自动检测单双休与法定节假日调休。

使用 python 完成逻辑，mysql 存储日期以及单双休。




## 结构

| 名称 | 类型 | 备注 |
| --- | --- | --- |
| day | date | 日期 唯一 主键 |
| status | int | 1 周末<br>2 法定节假日<br>3 自定义 |
| dayoff | int | 是否休息 1休息 0为不休或调休 |
| info | varchar | 备注 |

# 脚本部分

脚本使用 Python 实现，使用[中国节日接口](https://www.jiejiariapi.com/)拉取调休和周末信息。存储后标记日期是否休息。每天执行脚本时查表，如日期不在表内或者是被标记为调休、大小休的上班日，则不开启屏幕。否则在早上八点钟通过 TCP 信号开启大屏幕。

## TCP 信号开启 plc 电源

```python
OPEN = bytes.fromhex('000000000006000613E80001')
CLOSE = bytes.fromhex('000000000006000613E90001')
# host为目标ip地址，comm为上面十六进制的OPEN或者CLOSE信号
def TcpControl(host,comm,port=5000):
    with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s:
        s.connect((host, port))  # 连接到目标
        s.sendall(comm)
```

## 开启大屏逻辑

```python
def goOpen(host):
  """
  开启host指向的plc电源
  """
    comm = OPEN
    TcpControl(host,comm)
    print(host,"开启")

def openJob():
  """
  查表检查是否是工作日，非工作日直接return
  """
    time = datetime.datetime.now().strftime('%Y-%m-%d')
    config = initConfig()
    selectSql = "SELECT dayoff FROM `tool`.`date` WHERE `day` = %s "
    with DB(**config) as cur:
        cur.execute(selectSql,time)
        res = cur.fetchone()
    if res and res["dayoff"]:
        print("非工作日不需要开启")
        return
    goOpen("ip")
```

#  定时

定时通过 Linux 自带的 Cron 配置实现

```shell
#打开cron配置文件
crontab -e
# 逻辑实现如下
0 8 * * * python3 /root/plcPower/plcPower.py open
# 每天早上八点检测开启大屏
0 17 * * * python3 /root/plcPower/plcPower.py close
# 每天下午五点关闭大屏

```

# 手动控制

## 屏幕控制

同时手动执行脚本也可起到一样的作用，具体命令如下

```shell
# 关闭大屏
python3 /root/plcPower/plcPower.py close
# 开启大屏
python3 /root/plcPower/plcPower.py open
# 大小休反转
python3 /root/plcPower/plcPower.py rever
```

## 日期控制

如需要手动添加不需要开启屏幕的日期，可查看日期是否在表中

如已经在表中，可以将 dayoff 字段改为 0 则当天不会开启大屏幕

如未在表中则添加日期， status 为 3 ，dayoff 为 0

# PLC电源脚本

```python
import socket
import requests
import datetime
import sys

from time import sleep
from mysqlDB import DB
from config import Config

OPEN = bytes.fromhex('000000000006000613E80001')
CLOSE = bytes.fromhex('000000000006000613E90001')

def initConfig():
    congif,logger = Config().getConfig("mysql")
    config = dict(congif)
    config["port"] = int(config["port"])
    return config

def TcpControl(host,comm,port=5000):
    with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s:
        s.connect((host, port))  # 连接到目标
        s.sendall(comm)

def getDate():
    """
    通过接口获取节假日和调休
    返回(xxxx-xx-xx,假日类型,是否休息,备注)的list
    """
    url1 = "https://api.jiejiariapi.com/v1/holidays/2025" 
    url2 = "https://api.jiejiariapi.com/v1/weekends/2025"
    insertList = []

    resp = requests.get(url=url1)
    holiday = resp.json()
    for date in holiday:

        insertList.append((holiday[date]["date"],1,1 if holiday[date]["isOffDay"] else 0,holiday[date]["name"]))
    listlen = len(insertList)
    print("holidays insert success")

    resp = requests.get(url=url2)
    dayoff = resp.json()
    for num,date in enumerate(dayoff):
        f = 0
        for index in range(listlen):
            if insertList[index][0] == dayoff[date]["date"]:
                f = 1
        if f :
            continue
        if dayoff[date]["name"] == "周日":
            insertList.append((dayoff[date]["date"],2,1,dayoff[date]["name"]))
            continue
        if num/2%2 == 1:
            insertList.append((dayoff[date]["date"],2,1,dayoff[date]["name"]))
            continue
        insertList.append((dayoff[date]["date"],2,0,dayoff[date]["name"]))
    print("offday insert success")
    return insertList
    
def initDate():
    """
    写入数据库
    """
    config = initConfig()
    insertSql = """
                INSERT INTO `tool`.`date` (`day`, `status`, `dayoff`, `info`) 
                VALUES (%s, %s, %s, %s)
                """
    value = getDate()
    with DB(**config) as cur:
        cur.executemany(insertSql,value)

def goClose(host):
    comm = CLOSE
    TcpControl(host,comm)
    print(host,"关闭")

def goOpen(host):
    comm = OPEN
    TcpControl(host,comm)
    print(host,"开启")

def openJob():
    time = datetime.datetime.now().strftime('%Y-%m-%d')
    config = initConfig()
    selectSql = "SELECT dayoff FROM `tool`.`date` WHERE `day` = %s "
    with DB(**config) as cur:
        cur.execute(selectSql,time)
        res = cur.fetchone()
    if res and res["dayoff"]:
        print("非工作日不需要开启")
        return
    goOpen("192.168.132.103")

def rever():
    """
    大小休反转
    """
    config = initConfig()
    selSql = "SELECT * FROM `tool`.`date` WHERE `info` = '周六' AND `status` = '2'"
    updateSql = "UPDATE `tool`.`date` SET `dayoff` = %s WHERE `day` = %s"
    value = []
    with DB(**config) as cur:
        cur.execute(selSql)
        res = cur.fetchall()
    # print(res)
    for index in res:
        if index["dayoff"]:
            index["dayoff"] = 0
            continue
        index["dayoff"] = 1
    # print(res)
    for index in res:
        value.append((index["dayoff"],index["day"]))
    print(value)
    with DB(**config) as cur:
        cur.executemany(updateSql,value)

def closeJob():
    
    time = datetime.datetime.now().strftime('%Y-%m-%d')
    print("定时关闭",time)
    goClose("192.168.132.103")

def main():
    # schedule.every().day.at("08:00").do(openJob)
    # schedule.every().day.at("11:55").do(closeJob)
    # while True:
    #     schedule.run_pending()
    if len(sys.argv) < 2 or len(sys.argv) > 2:
        print("请提供启动参数\n示例： open close rever\n 此程序用于关闭和开启宏图阁大厅LED的PLC电源 \n rever可以用于大小休反转")
        sys.exit(1)
    if "open" in sys.argv[1]:
        openJob()
    if "close" in sys.argv[1]:
        closeJob()
    if "rever" in sys.argv[1]:
        rever()
    # sleep(20)
    # closeJob()
    
if __name__ == '__main__':
    main()
    # rever()

```

PLC电源脚本

# Ubuntu 安装 RTX 5070 Ti 并直通给 Docker 容器使用（含 GPU 驱动、容器工具）

总结了在 Ubuntu 24.04 上通过 ESXi 直通 NVIDIA RTX 5070 Ti，安装驱动并配置 Docker 容器使用 GPU 的完整步骤。

---

## 系统环境

* 宿主机：ESXi 直通 RTX 5070 Ti
* 虚拟机：Ubuntu 24.04
* 显卡：NVIDIA GeForce RTX 5070 Ti
* 容器引擎：Docker CE

---



## 步骤总览

### 1. 确认显卡直通

```bash
lspci | grep -i nvidia
```

应看到显卡 VGA 和音频控制器信息：

```
0b:00.0 VGA compatible controller: NVIDIA Corporation Device 2c05 (rev a1)
0b:00.1 Audio device: NVIDIA Corporation Device 22e9 (rev a1)
```

---

### 2. 安装 NVIDIA 驱动

#### 下载驱动（推荐使用官方 `.run` 安装器）

从 [https://www.nvidia.com](https://www.nvidia.com) 下载适配驱动，例如 `NVIDIA-Linux-x86_64-570.153.02.run`

#### 安装依赖：

```bash
sudo apt update
sudo apt install -y build-essential gcc make dkms linux-headers-$(uname -r) libglvnd-dev pkg-config
```

#### 安装驱动：

```bash
chmod +x NVIDIA-Linux-x86_64-*.run
sudo ./NVIDIA-Linux-x86_64-*.run
```

* 若提示缺少 32 位兼容库，可忽略
* 建议选择：注册 DKMS 自动重建模块
* 建议运行 `nvidia-xconfig`（如有 GUI）

#### 驱动验证：

```bash
nvidia-smi
```

输出应能正确识别 GPU、驱动版本、CUDA 版本。

![image.png](https://wuwuwwi.cn/static/img/03fdfc61e90701798d0f2ca7cf64cbbe.image.webp)
---

### 3. 安装 Docker 与 nvidia-container-toolkit

#### 添加 NVIDIA 容器源（Ubuntu 24.04 兼容方式）

```bash
# 强制使用 Ubuntu 22.04 的源
export distribution=ubuntu22.04

curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey | \
  sudo gpg --dearmor -o /usr/share/keyrings/nvidia-container-toolkit-keyring.gpg

curl -s -L https://nvidia.github.io/libnvidia-container/$distribution/libnvidia-container.list | \
  sed 's#deb #deb [signed-by=/usr/share/keyrings/nvidia-container-toolkit-keyring.gpg] #' | \
  sudo tee /etc/apt/sources.list.d/nvidia-container-toolkit.list

sudo apt update
sudo apt install -y nvidia-container-toolkit
```

#### 安装 Docker CE

```bash
sudo apt install -y ca-certificates curl gnupg lsb-release
sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | \
  sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg

echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] \
  https://download.docker.com/linux/ubuntu jammy stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

sudo apt update
sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
```

#### 启动并验证 Docker

```bash
sudo systemctl enable docker
sudo systemctl start docker
```

#### 配置 Docker 使用 GPU

```bash
sudo nvidia-ctk runtime configure --runtime=docker
sudo systemctl restart docker
```

#### 测试容器是否能访问 GPU

```bash
docker run --rm --gpus all nvidia/cuda:12.3.1-base-ubuntu22.04 nvidia-smi
```

![image.png](https://wuwuwwi.cn/static/img/2de0b58554708f01cc0fcebee9be1034.image.webp)

---