处理 Red 状态的 ES 索引 GET _cat/shards?v=true&h=index,shard,prirep,state,node,unassigned.reason&s=state 1 2 ops-pod-loggie-2026.06.11 0 p UNASSIGNED NODE_LEFT ops-pod-loggie-2026.06.11 0 r UNASSIGNED ALLOCATION_FAILED 尝试重新分配 1 POST _cluster/reroute?retry_failed=true 或者直接删除 1 DELETE ops-pod-loggie-2026.06.11

Pod 查看 1 号进程的子进程 1 ps --ppid 1 -f 查看 Time_Wait 连接 1 netstat -anp | grep TIME_WAIT Istio Ingress 1 kubectl -n istio-ingress logs -l app=istio-ingress |grep vlm-tag-v1 EastWestGateway 1 kubectl -n istio-ingress logs -l app=istio-eastwestgateway |grep vlm-tag-v1 Node 抓包 1 tcpdump -i bond0 -n -v -tttt 指定目标 IP 和端口 1 tcpdump -i bond0 -n -v -tttt host 10.10.10.10 AI 安装 Nodejs 1 2 3 4 5 6 7 curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.3/install.sh | bash export NVM_DIR="$HOME/.nvm" [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh" # This loads nvm [ -s "$NVM_DIR/bash_completion" ] && \. "$NVM_DIR/bash_completion" # This loads nvm bash_completion nvm install node 1

1. CodeGraph 是什么 CodeGraph 是一款本地优先的代码智能工具。它用 tree-sitter 解析代码库，把符号、关系和文件存入本地 SQLite，再通过 MCP、CLI 和 TypeScript API 暴露为可查询的知识图谱。 简单说，它把「在代码里到处 grep、glob、Read」这件事提前做成索引，让 AI 助手用几次

1. 启动容器 设置镜像 1 export IMAGE=nousresearch/hermes-agent:v2026.6.5 设置目录权限 1 2 mkdir -p hermes-agent-home chmod -R 777 hermes-agent-home 设置环境变量 1 2 3 cat <<EOF > hermes-agent-home/.env GATEWAY_ALLOW_ALL_USERS=true EOF 启动 hermes-agent 1 2 3 4 5 6 7 8 nerdctl run -d \ --name hermes-agent \ --restart always \ --user hermes \ --network host \ -v $(pwd)/hermes-agent-home:/opt/data \ -v $(pwd)/openclaw-home/.openclaw:/opt/data/.openclaw \ $IMAGE gateway run 启动 hermes-agent dashboard 1 2 3 4 5 6 7 nerdctl run -d \ --name hermes-dashboard \ --restart always \ -p 9119:9119 \ -v $(pwd)/hermes-agent-home:/opt/data \ -e GATEWAY_HEALTH_URL=http://${node_IP}:8642 \ $IMAGE dashboard --host 0.0.0.0 --insecure 删除容器 1 nerdctl rm

1. 安装部署 下载部署文件 1 wget https://raw.githubusercontent.com/juicedata/juicefs-csi-driver/master/deploy/k8s.yaml 任意非 master 节点查看 kubelet 的安装目录 1 ps -ef|grep kubelet |grep root-dir 如果有值，则需要执行替换；否则直接安装。 1 sed 's@/var/lib/kubelet@{{KUBELET_DIR}}@g' k8s.yaml 1 kubectl apply -f k8s.yaml 查看 Pod 状态 1 kubectl -n kube-system get pods -l app.kubernetes.io/name=juicefs-csi-driver 2. 创建存储 静态绑定 1 2 3 4 5 6 7 8 9 10 11 12 13 14 apiVersion: v1 metadata: name: juicefs-secret namespace: default labels: juicefs.com/validate-secret: "true" kind: Secret type: Opaque stringData: name: ${JUICEFS_NAME} token: ${JUICEFS_TOKEN} access-key: ${ACCESS_KEY}