Post

共享MacOS

Posted Updated
By Lin Han
views 3 min read
共享MacOS

环境隔离

开启远程登陆功能，创建用户，设置密码 sudo sysadminctl -addUser <username> -password -

通过ssh key登陆

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

ssh-keygen -t ed25519 -C "ur email"
ssh-copy-id -i ~/.ssh/xxx.pub -p 10010 username@ip

# 在本地的 ~/.ssh/config 中配置连接信息

Host remote
  HostName ip
  User username
  Port port
  IdentityFile /path/to/keyfile
  ServerAliveInterval 60
  ServerAliveCountMax 30
  TCPKeepAlive yes


# 之后ssh登陆
ssh remote
  • xcode 不要使用 xcode-select 指定默认xcode版本，在 ~/.zshrc 中设置 export DEVELOPER_DIR=/Applications/Xcode.app/Contents/Developer/ 选定自己的xcode，用 xcode-select -p 打印当前生效的xcode路径
  • java
    1
2

      /usr/libexec/java_home -V
  brew list --versions | grep -E 'jdk|java|openjdk|temurin|zulu'
  • gradle 默认路径就是 ~/.gradle ，是按用户隔离的

bore开放端口

使用公共实例简单尝试

1
2
3
4

brew install bore-cli
bore local 22 --to bore.pub

ssh username@bore.pub -p xxx

自建bore服务器（debian）

1
2
3
4

curl https://sh.rustup.rs -sSf | sh
source ~/.bashrc
cargo install bore-cli
bore server # 简单看到启动停掉就行，下一步再详细配

修改下面的ExecStart

ExecStart=/root/.cargo/bin/bore server –min-port [低位端口] –max-port [高位端口] –secret [随机密码] –bind-addr [公网ip]

/etc/systemd/system/bore.service

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

[Unit]
Description=Bore server
After=network-online.target
Wants=network-online.target
StartLimitBurst=5
StartLimitIntervalSec=300

[Service]
Type=simple
WorkingDirectory=/root
ExecStart=
Restart=on-failure
RestartSec=10
LimitNOFILE=65536

[Install]
WantedBy=multi-user.target

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

# Allow port 7835 (bore default control port)
sudo ufw allow 7835/tcp

# Allow port range (bore tunnel ports)
sudo ufw allow [低位端口]:[高位端口]/tcp

# Enable UFW if not already enabled
sudo ufw enable

# Check status
sudo ufw status

systemctl daemon-reload; systemctl restart bore; systemctl enable bore

systemctl status bore
journalctl -xeu bore.service

MacOS plist

/Library/LaunchDaemons/com.bore.local.plist

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Label</key>
    <string>com.bore.local</string>
    
    <key>ProgramArguments</key>
    <array>
        <string>/opt/homebrew/bin/bore</string>
        <string>local</string>
        <string>22</string>
        <string>--to</string>
        <string>[服务器地址]</string>
        <string>-s</string>
        <string>[连接密码]</string>
        <string>--port</string>
        <string>[连接到服务器的端口，不设是随机的]</string>
    </array>
    
    <key>RunAtLoad</key>
    <true/>
    
    <key>KeepAlive</key>
    <true/>

    <key>ThrottleInterval</key>
    <integer>10</integer>
    
    <key>StandardOutPath</key>
    <string>/var/log/bore-local.log</string>
    
    <key>StandardErrorPath</key>
    <string>/var/log/bore-local.log</string>
</dict>
</plist>

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

# Set correct permissions
sudo chown root:wheel /Library/LaunchDaemons/com.bore.local.plist
sudo chmod 644 /Library/LaunchDaemons/com.bore.local.plist

# Load and start the service
sudo launchctl load /Library/LaunchDaemons/com.bore.local.plist

# 前面的数字是pid，如果是0是没在运行
sudo launchctl list | grep bore

# View logs
tail -f /var/log/bore-local.log

# 重启
sudo launchctl bootout system /Library/LaunchDaemons/com.bore.local.plist
sudo launchctl bootstrap system /Library/LaunchDaemons/com.bore.local.plist

# 检查plist格式
plutil -lint /Library/LaunchDaemons/com.bore.local.plist

此外，如果bore的对端在国外可能被走代理，代理只要有波动就会导致所有ssh断掉。可以配置bore的7835端口不走代理 https://www.clashverge.dev/guide/rules.html#_3

远程工具

idea

  • jetbrains gateway只支持远程linux alt text
  • intellj idea要pro版本才支持完整的remote开发体验

vscode：点击左下角 >< ，Connect To Remote Host

Tool, MacOS
Tool MacOS
All Rights Reserved.