Ebook Syafi - Edit Bab

Tajuk Bab

Urutan

Jenis

Kandungan HTML

<h1 id="bab-12-penyelesaian-masalah-cheat-sheet-anda">Bab 12: Penyelesaian Masalah — Cheat Sheet Anda!</h1>
Masalah memang akan berlaku. Itu bukan tanda anda gagal — itu tanda anda sedang belajar! Bab ini disusun macam cheat sheet supaya bila sesuatu rosak, anda boleh buka terus bahagian yang relevan dan ikut langkah-langkah tanpa panik.
Apa yang anda akan belajar: - Aliran troubleshooting yang tenang dan tersusun - Cara semak isu mengikut lapisan: rangkaian, service, host, dan log - Bezakan simptom dengan punca sebenar masalah
<blockquote>
Nota Beginner: Troubleshooting yang baik bukan tentang cuba segala-galanya serentak. Ia tentang memotong kemungkinan satu demi satu dengan tenang. Macam detective — cari clue, bukan tembak secara rawak!
</blockquote>
<h3 id="quick-reference-urutan-troubleshooting">Quick Reference: Urutan Troubleshooting</h3>
Bila ada masalah, ikut urutan ni:
Kuasa → Kabel → IP → DNS → Service → Log
Jangan ubah lima benda serentak. Tukar satu, test, baru tukar yang lain. Dan bila jumpa penyelesaian — catat! Anda akan terima kasih pada diri sendiri nanti.
<figure><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 900 520" width="900" height="520">
 <defs>
 <linearGradient id="td-bg" x1="0%" y1="0%" x2="100%" y2="100%">
 <stop offset="0%" style="stop-color:#f8fafc"/>
 <stop offset="100%" style="stop-color:#fff7ed"/>
 </linearGradient>
 <filter id="td-shadow">
 <feDropShadow dx="0" dy="7" stdDeviation="9" flood-color="#0f172a" flood-opacity="0.12"/>
 </filter>
 </defs>

<rect width="900" height="520" rx="18" fill="url(#td-bg)"/>
 <text x="450" y="36" font-family="Arial, Helvetica, sans-serif" font-size="20" font-weight="bold" fill="#1e293b" text-anchor="middle">Pokok Keputusan Troubleshooting Homelab</text>
 <text x="450" y="58" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#64748b" text-anchor="middle">Mula dari semakan rangkaian, kemudian semak servis, konfigurasi akses, dan log</text>

<g filter="url(#td-shadow)">
 <rect x="340" y="68" width="220" height="48" rx="14" fill="#1d4ed8"/>
 <text x="450" y="98" font-family="Arial, Helvetica, sans-serif" font-size="16" font-weight="bold" fill="#ffffff" text-anchor="middle">Perkhidmatan nampak bermasalah</text>
 </g>

<g filter="url(#td-shadow)">
 <polygon points="450,126 560,150 450,174 340,150" fill="#7c3aed"/>
 <text x="450" y="146" font-family="Arial, Helvetica, sans-serif" font-size="14" font-weight="bold" fill="#ffffff" text-anchor="middle">Boleh ping gateway?</text>
 <text x="450" y="162" font-family="Arial, Helvetica, sans-serif" font-size="10" fill="#ede9fe" text-anchor="middle">`ping 10.0.0.1`</text>
 </g>

<g filter="url(#td-shadow)">
 <rect x="36" y="108" width="194" height="84" rx="16" fill="#dc2626"/>
 <text x="133" y="139" font-family="Arial, Helvetica, sans-serif" font-size="15" font-weight="bold" fill="#ffffff" text-anchor="middle">Tidak</text>
 <text x="133" y="161" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#fee2e2" text-anchor="middle">Semak kabel, IP, VLAN,</text>
 <text x="133" y="178" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#fee2e2" text-anchor="middle">gateway, dan firewall</text>
 </g>

<g filter="url(#td-shadow)">
 <polygon points="450,216 560,240 450,264 340,240" fill="#0f766e"/>
 <text x="450" y="236" font-family="Arial, Helvetica, sans-serif" font-size="14" font-weight="bold" fill="#ffffff" text-anchor="middle">Servis aktif?</text>
 <text x="450" y="252" font-family="Arial, Helvetica, sans-serif" font-size="10" fill="#ccfbf1" text-anchor="middle">`docker ps` / `systemctl` / `qm status`</text>
 </g>

<g filter="url(#td-shadow)">
 <rect x="30" y="198" width="210" height="84" rx="16" fill="#ea580c"/>
 <text x="135" y="229" font-family="Arial, Helvetica, sans-serif" font-size="15" font-weight="bold" fill="#ffffff" text-anchor="middle">Tidak</text>
 <text x="135" y="251" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#ffedd5" text-anchor="middle">Mulakan servis semula, semak</text>
 <text x="135" y="268" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#ffedd5" text-anchor="middle">log startup dan dependency</text>
 </g>

<g filter="url(#td-shadow)">
 <rect x="660" y="198" width="210" height="84" rx="16" fill="#2563eb"/>
 <text x="765" y="229" font-family="Arial, Helvetica, sans-serif" font-size="15" font-weight="bold" fill="#ffffff" text-anchor="middle">Ya</text>
 <text x="765" y="251" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#dbeafe" text-anchor="middle">Semak penggunaan RAM, CPU,</text>
 <text x="765" y="268" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#dbeafe" text-anchor="middle">I/O disk, dan storan penuh</text>
 </g>

<g filter="url(#td-shadow)">
 <polygon points="450,306 560,330 450,354 340,330" fill="#334155"/>
 <text x="450" y="326" font-family="Arial, Helvetica, sans-serif" font-size="14" font-weight="bold" fill="#ffffff" text-anchor="middle">Aplikasi boleh diakses?</text>
 <text x="450" y="342" font-family="Arial, Helvetica, sans-serif" font-size="10" fill="#cbd5e1" text-anchor="middle">Hostname, port, reverse proxy, SSL</text>
 </g>

<g filter="url(#td-shadow)">
 <rect x="670" y="288" width="200" height="84" rx="16" fill="#7c3aed"/>
 <text x="770" y="319" font-family="Arial, Helvetica, sans-serif" font-size="15" font-weight="bold" fill="#ffffff" text-anchor="middle">Tidak</text>
 <text x="770" y="341" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#ede9fe" text-anchor="middle">Semak DNS, proxy host,</text>
 <text x="770" y="358" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#ede9fe" text-anchor="middle">certificate, dan port mapping</text>
 </g>

<g filter="url(#td-shadow)">
 <rect x="310" y="408" width="280" height="76" rx="16" fill="#059669"/>
 <text x="450" y="438" font-family="Arial, Helvetica, sans-serif" font-size="16" font-weight="bold" fill="#ffffff" text-anchor="middle">Ya - Teruskan semakan log mendalam</text>
 <text x="450" y="459" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#d1fae5" text-anchor="middle">Gunakan `journalctl`, `docker logs`, `dmesg`, dan audit perubahan konfigurasi</text>
 </g>

<text x="285" y="144" font-family="Arial, Helvetica, sans-serif" font-size="12" fill="#64748b" text-anchor="middle">Tidak</text>
 <text x="470" y="198" font-family="Arial, Helvetica, sans-serif" font-size="12" fill="#64748b">Ya</text>
 <text x="286" y="235" font-family="Arial, Helvetica, sans-serif" font-size="12" fill="#64748b" text-anchor="middle">Tidak</text>
 <text x="610" y="235" font-family="Arial, Helvetica, sans-serif" font-size="12" fill="#64748b">Ya</text>
 <text x="610" y="325" font-family="Arial, Helvetica, sans-serif" font-size="12" fill="#64748b">Tidak</text>
 <text x="468" y="390" font-family="Arial, Helvetica, sans-serif" font-size="12" fill="#64748b">Ya</text>
</svg>
<figcaption>Pokok Keputusan Troubleshooting Homelab</figcaption></figure>
<hr />
<h2 id="masalah-rangkaian">Masalah Rangkaian</h2>
<h3 id="tidak-boleh-ping-pelayan">Tidak Boleh Ping Pelayan</h3>
<div class="sourceCode" id="cb1"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb1-1" aria-hidden="true" tabindex="-1"></a># Langkah 1: Periksa sambungan fizikal
<a href="#cb1-2" aria-hidden="true" tabindex="-1"></a># Adakah lampu pada port suis menyala?
<a href="#cb1-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb1-4" aria-hidden="true" tabindex="-1"></a># Langkah 2: Periksa konfigurasi IP
<a href="#cb1-5" aria-hidden="true" tabindex="-1"></a>ip addr show
<a href="#cb1-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb1-7" aria-hidden="true" tabindex="-1"></a># Langkah 3: Periksa gateway
<a href="#cb1-8" aria-hidden="true" tabindex="-1"></a>ip route show
<a href="#cb1-9" aria-hidden="true" tabindex="-1"></a>ping 10.0.0.1 # ping gateway
<a href="#cb1-10" aria-hidden="true" tabindex="-1"></a>
<a href="#cb1-11" aria-hidden="true" tabindex="-1"></a># Langkah 4: Periksa DNS
<a href="#cb1-12" aria-hidden="true" tabindex="-1"></a>nslookup google.com
<a href="#cb1-13" aria-hidden="true" tabindex="-1"></a>dig google.com
<a href="#cb1-14" aria-hidden="true" tabindex="-1"></a>
<a href="#cb1-15" aria-hidden="true" tabindex="-1"></a># Langkah 5: Periksa firewall
<a href="#cb1-16" aria-hidden="true" tabindex="-1"></a>sudo iptables -L -n
<a href="#cb1-17" aria-hidden="true" tabindex="-1"></a>sudo ufw status</code></pre></div>
<h3 id="dns-tidak-berfungsi">DNS Tidak Berfungsi</h3>
<div class="sourceCode" id="cb2"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb2-1" aria-hidden="true" tabindex="-1"></a># Periksa Pi-hole berjalan
<a href="#cb2-2" aria-hidden="true" tabindex="-1"></a>docker ps | grep pihole
<a href="#cb2-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb2-4" aria-hidden="true" tabindex="-1"></a># Periksa DNS secara manual
<a href="#cb2-5" aria-hidden="true" tabindex="-1"></a>dig @10.0.0.2 google.com
<a href="#cb2-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb2-7" aria-hidden="true" tabindex="-1"></a># Periksa konfigurasi DNS pada klien
<a href="#cb2-8" aria-hidden="true" tabindex="-1"></a>cat /etc/resolv.conf
<a href="#cb2-9" aria-hidden="true" tabindex="-1"></a>
<a href="#cb2-10" aria-hidden="true" tabindex="-1"></a># Mulakan semula Pi-hole
<a href="#cb2-11" aria-hidden="true" tabindex="-1"></a>docker restart pihole</code></pre></div>
<h3 id="vlan-tidak-berkomunikasi">VLAN Tidak Berkomunikasi</h3>
<ol type="1">
<li>Periksa konfigurasi trunk port pada suis</li>
<li>Pastikan VLAN tag betul pada kedua-dua suis dan firewall</li>
<li>Periksa peraturan firewall antara VLAN</li>
<li>Gunakan <code>tcpdump</code> untuk mengesan paket:</li>
</ol>
<div class="sourceCode" id="cb3"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb3-1" aria-hidden="true" tabindex="-1"></a># Pantau trafik pada antara muka VLAN
<a href="#cb3-2" aria-hidden="true" tabindex="-1"></a>sudo tcpdump -i vlan20 -n</code></pre></div>
<blockquote>
Nota Beginner: Kebanyakan masalah rangkaian sebenarnya masalah kabel atau IP yang salah. Sentiasa check benda simple dulu sebelum suspect benda complicated.
</blockquote>
<hr />
<h2 id="masalah-docker">Masalah Docker</h2>
<h3 id="kontena-gagal-bermula">Kontena Gagal Bermula</h3>
<div class="sourceCode" id="cb4"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb4-1" aria-hidden="true" tabindex="-1"></a># Periksa log
<a href="#cb4-2" aria-hidden="true" tabindex="-1"></a>docker logs nama-kontena
<a href="#cb4-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb4-4" aria-hidden="true" tabindex="-1"></a># Periksa events Docker
<a href="#cb4-5" aria-hidden="true" tabindex="-1"></a>docker events --since 1h
<a href="#cb4-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb4-7" aria-hidden="true" tabindex="-1"></a># Masalah biasa:
<a href="#cb4-8" aria-hidden="true" tabindex="-1"></a># 1. Port sudah digunakan
<a href="#cb4-9" aria-hidden="true" tabindex="-1"></a>sudo ss -tlnp | grep PORT
<a href="#cb4-10" aria-hidden="true" tabindex="-1"></a>
<a href="#cb4-11" aria-hidden="true" tabindex="-1"></a># 2. Volume tidak wujud atau kebenaran salah
<a href="#cb4-12" aria-hidden="true" tabindex="-1"></a>ls -la ./data/
<a href="#cb4-13" aria-hidden="true" tabindex="-1"></a>
<a href="#cb4-14" aria-hidden="true" tabindex="-1"></a># 3. Imej rosak
<a href="#cb4-15" aria-hidden="true" tabindex="-1"></a>docker pull nama-imej:tag</code></pre></div>
<h3 id="kontena-kehabisan-memori">Kontena Kehabisan Memori</h3>
<div class="sourceCode" id="cb5"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb5-1" aria-hidden="true" tabindex="-1"></a># Periksa penggunaan memori
<a href="#cb5-2" aria-hidden="true" tabindex="-1"></a>docker stats
<a href="#cb5-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb5-4" aria-hidden="true" tabindex="-1"></a># Hadkan memori kontena
<a href="#cb5-5" aria-hidden="true" tabindex="-1"></a># Dalam docker-compose.yml:
<a href="#cb5-6" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb5-7" aria-hidden="true" tabindex="-1"></a> app:
<a href="#cb5-8" aria-hidden="true" tabindex="-1"></a> deploy:
<a href="#cb5-9" aria-hidden="true" tabindex="-1"></a> resources:
<a href="#cb5-10" aria-hidden="true" tabindex="-1"></a> limits:
<a href="#cb5-11" aria-hidden="true" tabindex="-1"></a> memory: 1G</code></pre></div>
<h3 id="docker-compose-tidak-dapat-dimulakan">Docker Compose Tidak Dapat Dimulakan</h3>
<div class="sourceCode" id="cb6"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb6-1" aria-hidden="true" tabindex="-1"></a># Semak sintaks fail YAML
<a href="#cb6-2" aria-hidden="true" tabindex="-1"></a>docker compose config
<a href="#cb6-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb6-4" aria-hidden="true" tabindex="-1"></a># Mulakan dengan mod verbose
<a href="#cb6-5" aria-hidden="true" tabindex="-1"></a>docker compose up --verbose
<a href="#cb6-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb6-7" aria-hidden="true" tabindex="-1"></a># Buang kontena dan mula semula
<a href="#cb6-8" aria-hidden="true" tabindex="-1"></a>docker compose down
<a href="#cb6-9" aria-hidden="true" tabindex="-1"></a>docker compose up -d</code></pre></div>
<blockquote>
Nota Beginner: 90% masalah Docker boleh diselesaikan dengan <code>docker logs nama-kontena</code>. Sentiasa check log dulu — biasanya error message dah cakap apa masalahnya.
</blockquote>
<hr />
<h2 id="masalah-proxmox">Masalah Proxmox</h2>
<h3 id="vm-tidak-boleh-boot">VM Tidak Boleh Boot</h3>
<div class="sourceCode" id="cb7"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb7-1" aria-hidden="true" tabindex="-1"></a># Periksa log VM
<a href="#cb7-2" aria-hidden="true" tabindex="-1"></a># Di antara muka web: VM → Console
<a href="#cb7-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb7-4" aria-hidden="true" tabindex="-1"></a># Periksa storan
<a href="#cb7-5" aria-hidden="true" tabindex="-1"></a>pvesm status
<a href="#cb7-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb7-7" aria-hidden="true" tabindex="-1"></a># Cuba boot dalam mod selamat
<a href="#cb7-8" aria-hidden="true" tabindex="-1"></a># Tukar boot order di VM → Hardware → Boot Order</code></pre></div>
<h3 id="storan-penuh-di-proxmox">Storan Penuh di Proxmox</h3>
<div class="sourceCode" id="cb8"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb8-1" aria-hidden="true" tabindex="-1"></a># Periksa penggunaan storan
<a href="#cb8-2" aria-hidden="true" tabindex="-1"></a>df -h
<a href="#cb8-3" aria-hidden="true" tabindex="-1"></a>lvs
<a href="#cb8-4" aria-hidden="true" tabindex="-1"></a>zpool list
<a href="#cb8-5" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-6" aria-hidden="true" tabindex="-1"></a># Buang sandaran lama
<a href="#cb8-7" aria-hidden="true" tabindex="-1"></a>ls -la /var/lib/vz/dump/
<a href="#cb8-8" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-9" aria-hidden="true" tabindex="-1"></a># Buang snapshot VM yang tidak diperlukan
<a href="#cb8-10" aria-hidden="true" tabindex="-1"></a>qm listsnapshot VMID
<a href="#cb8-11" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-12" aria-hidden="true" tabindex="-1"></a># Buang imej ISO yang tidak diperlukan
<a href="#cb8-13" aria-hidden="true" tabindex="-1"></a>ls -la /var/lib/vz/template/iso/</code></pre></div>
<h3 id="kluster-proxmox-bermasalah">Kluster Proxmox Bermasalah</h3>
<div class="sourceCode" id="cb9"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb9-1" aria-hidden="true" tabindex="-1"></a># Periksa status kluster
<a href="#cb9-2" aria-hidden="true" tabindex="-1"></a>pvecm status
<a href="#cb9-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb9-4" aria-hidden="true" tabindex="-1"></a># Periksa quorum
<a href="#cb9-5" aria-hidden="true" tabindex="-1"></a>pvecm expected 1 # Jika nod tunggal
<a href="#cb9-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb9-7" aria-hidden="true" tabindex="-1"></a># Periksa log
<a href="#cb9-8" aria-hidden="true" tabindex="-1"></a>journalctl -u pve-cluster</code></pre></div>
<hr />
<h2 id="masalah-prestasi">Masalah Prestasi</h2>
<h3 id="cpu-tinggi">CPU Tinggi</h3>
<div class="sourceCode" id="cb10"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb10-1" aria-hidden="true" tabindex="-1"></a># Kenal pasti proses yang menggunakan CPU tinggi
<a href="#cb10-2" aria-hidden="true" tabindex="-1"></a>htop
<a href="#cb10-3" aria-hidden="true" tabindex="-1"></a>top -c
<a href="#cb10-4" aria-hidden="true" tabindex="-1"></a>
<a href="#cb10-5" aria-hidden="true" tabindex="-1"></a># Untuk kontena Docker
<a href="#cb10-6" aria-hidden="true" tabindex="-1"></a>docker stats
<a href="#cb10-7" aria-hidden="true" tabindex="-1"></a>
<a href="#cb10-8" aria-hidden="true" tabindex="-1"></a># Untuk VM Proxmox
<a href="#cb10-9" aria-hidden="true" tabindex="-1"></a># Semak di antara muka web → Node → Summary</code></pre></div>
<h3 id="ram-tidak-mencukupi">RAM Tidak Mencukupi</h3>
<div class="sourceCode" id="cb11"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb11-1" aria-hidden="true" tabindex="-1"></a># Periksa penggunaan RAM
<a href="#cb11-2" aria-hidden="true" tabindex="-1"></a>free -h
<a href="#cb11-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb11-4" aria-hidden="true" tabindex="-1"></a># Periksa proses yang menggunakan RAM paling banyak
<a href="#cb11-5" aria-hidden="true" tabindex="-1"></a>ps aux --sort=-%mem | head -20
<a href="#cb11-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb11-7" aria-hidden="true" tabindex="-1"></a># Periksa swap
<a href="#cb11-8" aria-hidden="true" tabindex="-1"></a>swapon --show
<a href="#cb11-9" aria-hidden="true" tabindex="-1"></a>
<a href="#cb11-10" aria-hidden="true" tabindex="-1"></a># Jika ZFS, kurangkan ARC cache
<a href="#cb11-11" aria-hidden="true" tabindex="-1"></a>echo "4294967296" > /sys/module/zfs/parameters/zfs_arc_max # 4GB</code></pre></div>
<h3 id="io-cakera-perlahan">I/O Cakera Perlahan</h3>
<div class="sourceCode" id="cb12"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb12-1" aria-hidden="true" tabindex="-1"></a># Periksa I/O
<a href="#cb12-2" aria-hidden="true" tabindex="-1"></a>iostat -x 1 5
<a href="#cb12-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb12-4" aria-hidden="true" tabindex="-1"></a># Periksa kesihatan cakera
<a href="#cb12-5" aria-hidden="true" tabindex="-1"></a>sudo smartctl -a /dev/sda
<a href="#cb12-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb12-7" aria-hidden="true" tabindex="-1"></a># Periksa ZFS
<a href="#cb12-8" aria-hidden="true" tabindex="-1"></a>zpool iostat -v 1 5</code></pre></div>
<blockquote>
Nota Beginner: Kalau homelab rasa “slow”, check RAM dulu. Kebanyakan masalah prestasi datang dari RAM yang tak cukup, terutama kalau anda guna ZFS (yang memang suka “makan” RAM untuk cache).
</blockquote>
<hr />
<h2 id="masalah-keselamatan">Masalah Keselamatan</h2>
<h3 id="akaun-terkunci-fail2ban">Akaun Terkunci (Fail2ban)</h3>
<div class="sourceCode" id="cb13"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb13-1" aria-hidden="true" tabindex="-1"></a># Senarai IP yang disekat
<a href="#cb13-2" aria-hidden="true" tabindex="-1"></a>sudo fail2ban-client status sshd
<a href="#cb13-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb13-4" aria-hidden="true" tabindex="-1"></a># Nyahsekat IP
<a href="#cb13-5" aria-hidden="true" tabindex="-1"></a>sudo fail2ban-client set sshd unbanip 192.168.1.100</code></pre></div>
<h3 id="sijil-ssl-tamat-tempoh">Sijil SSL Tamat Tempoh</h3>
<div class="sourceCode" id="cb14"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb14-1" aria-hidden="true" tabindex="-1"></a># Periksa tarikh tamat tempoh
<a href="#cb14-2" aria-hidden="true" tabindex="-1"></a>openssl s_client -connect pelayan:443 2>/dev/null | \
<a href="#cb14-3" aria-hidden="true" tabindex="-1"></a> openssl x509 -noout -dates
<a href="#cb14-4" aria-hidden="true" tabindex="-1"></a>
<a href="#cb14-5" aria-hidden="true" tabindex="-1"></a># Perbaharui sijil Let's Encrypt
<a href="#cb14-6" aria-hidden="true" tabindex="-1"></a># Jika menggunakan Nginx Proxy Manager:
<a href="#cb14-7" aria-hidden="true" tabindex="-1"></a># Edit Proxy Host → SSL → Renew
<a href="#cb14-8" aria-hidden="true" tabindex="-1"></a>
<a href="#cb14-9" aria-hidden="true" tabindex="-1"></a># Jika menggunakan certbot:
<a href="#cb14-10" aria-hidden="true" tabindex="-1"></a>sudo certbot renew</code></pre></div>
<h3 id="aktiviti-mencurigakan">Aktiviti Mencurigakan</h3>
<div class="sourceCode" id="cb15"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb15-1" aria-hidden="true" tabindex="-1"></a># Periksa log SSH
<a href="#cb15-2" aria-hidden="true" tabindex="-1"></a>sudo grep "Failed password" /var/log/auth.log | tail -20
<a href="#cb15-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb15-4" aria-hidden="true" tabindex="-1"></a># Periksa sambungan aktif
<a href="#cb15-5" aria-hidden="true" tabindex="-1"></a>ss -tunapl
<a href="#cb15-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb15-7" aria-hidden="true" tabindex="-1"></a># Periksa proses mencurigakan
<a href="#cb15-8" aria-hidden="true" tabindex="-1"></a>ps auxf
<a href="#cb15-9" aria-hidden="true" tabindex="-1"></a>
<a href="#cb15-10" aria-hidden="true" tabindex="-1"></a># Periksa port yang terbuka
<a href="#cb15-11" aria-hidden="true" tabindex="-1"></a>sudo nmap -sS localhost</code></pre></div>
<hr />
<h2 id="alat-troubleshooting-quick-reference">Alat Troubleshooting — Quick Reference</h2>
<h3 id="rangkaian">Rangkaian</h3>
<table>
<thead>
<tr class="header">
<th>Alat</th>
<th>Fungsi</th>
<th>Contoh</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td><code>ping</code></td>
<td>Uji ketersambungan</td>
<td><code>ping 10.0.0.1</code></td>
</tr>
<tr class="even">
<td><code>traceroute</code></td>
<td>Jejak laluan</td>
<td><code>traceroute 8.8.8.8</code></td>
</tr>
<tr class="odd">
<td><code>nslookup/dig</code></td>
<td>Pertanyaan DNS</td>
<td><code>dig google.com</code></td>
</tr>
<tr class="even">
<td><code>ss/netstat</code></td>
<td>Sambungan rangkaian</td>
<td><code>ss -tunapl</code></td>
</tr>
<tr class="odd">
<td><code>tcpdump</code></td>
<td>Tangkap paket</td>
<td><code>tcpdump -i eth0 port 80</code></td>
</tr>
<tr class="even">
<td><code>nmap</code></td>
<td>Imbas port</td>
<td><code>nmap -sV 10.0.0.0/24</code></td>
</tr>
<tr class="odd">
<td><code>iperf3</code></td>
<td>Ujian lebar jalur</td>
<td><code>iperf3 -c pelayan</code></td>
</tr>
<tr class="even">
<td><code>mtr</code></td>
<td>Traceroute berterusan</td>
<td><code>mtr 8.8.8.8</code></td>
</tr>
</tbody>
</table>
<h3 id="sistem">Sistem</h3>
<table>
<thead>
<tr class="header">
<th>Alat</th>
<th>Fungsi</th>
<th>Contoh</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td><code>htop</code></td>
<td>Pantau proses</td>
<td><code>htop</code></td>
</tr>
<tr class="even">
<td><code>df</code></td>
<td>Penggunaan cakera</td>
<td><code>df -h</code></td>
</tr>
<tr class="odd">
<td><code>free</code></td>
<td>Penggunaan memori</td>
<td><code>free -h</code></td>
</tr>
<tr class="even">
<td><code>iostat</code></td>
<td>Statistik I/O</td>
<td><code>iostat -x 1</code></td>
</tr>
<tr class="odd">
<td><code>dmesg</code></td>
<td>Log kernel</td>
<td><code>dmesg -T \| tail</code></td>
</tr>
<tr class="even">
<td><code>journalctl</code></td>
<td>Log sistemd</td>
<td><code>journalctl -xe</code></td>
</tr>
<tr class="odd">
<td><code>smartctl</code></td>
<td>Kesihatan cakera</td>
<td><code>smartctl -a /dev/sda</code></td>
</tr>
<tr class="even">
<td><code>lsblk</code></td>
<td>Senarai peranti blok</td>
<td><code>lsblk -f</code></td>
</tr>
</tbody>
</table>
<h3 id="docker">Docker</h3>
<table>
<thead>
<tr class="header">
<th>Arahan</th>
<th>Fungsi</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td><code>docker ps -a</code></td>
<td>Senarai semua kontena</td>
</tr>
<tr class="even">
<td><code>docker logs -f</code></td>
<td>Log masa nyata</td>
</tr>
<tr class="odd">
<td><code>docker inspect</code></td>
<td>Maklumat terperinci</td>
</tr>
<tr class="even">
<td><code>docker stats</code></td>
<td>Penggunaan sumber</td>
</tr>
<tr class="odd">
<td><code>docker exec -it ... bash</code></td>
<td>Masuk ke kontena</td>
</tr>
<tr class="even">
<td><code>docker system df</code></td>
<td>Penggunaan storan</td>
</tr>
<tr class="odd">
<td><code>docker system prune</code></td>
<td>Bersihkan</td>
</tr>
</tbody>
</table>
<hr />
<h2 id="petua-emas">Petua Emas</h2>
<h3 id="dokumentasikan-semuanya">1. Dokumentasikan Semuanya</h3>
<pre><code>Buat nota tentang:
- Setiap perubahan konfigurasi
- Masalah yang dihadapi dan penyelesaiannya
- Skim rangkaian dan alamat IP
- Kata laluan (di pengurus kata laluan!)</code></pre>
<h3 id="uji-sandaran-secara-berkala">2. Uji Sandaran Secara Berkala</h3>
<pre><code>Sandaran yang tidak diuji = tiada sandaran.
Jadualkan ujian pemulihan bulanan.</code></pre>
<h3 id="mula-kecil-kembang-berperingkat">3. Mula Kecil, Kembang Berperingkat</h3>
<pre><code>Jangan cuba membina semuanya sekaligus.
Mula dengan satu perkhidmatan, kuasai ia,
kemudian tambah yang seterusnya.</code></pre>
<h3 id="sertai-komuniti">4. Sertai Komuniti</h3>
<pre><code>Reddit: r/homelab, r/selfhosted
Discord: Homelab, Self-Hosted
YouTube: NetworkChuck, TechnoTim, Jeff Geerling</code></pre>
<h3 id="belajar-dari-kesilapan">5. Belajar dari Kesilapan</h3>
<pre><code>Kesilapan adalah guru terbaik.
Homelab adalah tempat yang selamat untuk gagal
dan belajar tanpa kesan kepada pengeluaran.</code></pre>
<hr />
<h2 id="ringkasan">Ringkasan</h2>
Penyelesaian masalah adalah kemahiran yang berkembang dengan pengalaman. Anda tak perlu hafal semua command ni — bookmark bab ini dan rujuk bila perlu. Yang penting:
<ol type="1">
<li>Pendekatan sistematik — Periksa dari asas (fizikal → rangkaian → aplikasi)</li>
<li>Log adalah sahabat anda — Sentiasa semak log terlebih dahulu</li>
<li>Google/komuniti — Anda mungkin bukan yang pertama menghadapi masalah itu</li>
<li>Dokumentasi — Rekod penyelesaian untuk rujukan masa hadapan</li>
<li>Sandaran — Sebelum mencuba apa-apa, pastikan ada sandaran</li>
</ol>
Setiap kali anda berjaya selesaikan masalah, anda jadi lebih mahir. Dan satu hari nanti, anda akan jadi orang yang bantu orang lain troubleshoot masalah mereka pula. Itu sebahagian daripada keindahan komuniti homelab!

Batal