\u4f18\u8d28\u7684 Git commit message \u548c Changelog \u4e0d\u4ec5\u53ef\u4ee5\u8ba9\u534f\u4f5c\u8005\u4eec\u4e00\u76ee\u4e86\u7136\u5730\u4e86\u89e3\u7248\u672c\u53d8\u66f4\uff0c\u66f4\u80fd\u5e2e\u52a9\u4f60\u5feb\u901f\u56de\u5fc6\u66fe\u7ecf\u7684\u4fee\u6539\u3002\u56e0\u6b64\uff0c\u5408\u7406\u5730\u4f7f\u7528\u82f1\u8bed\u52a8\u8bcd\u3001\u901a\u8fc7\u300c\u4e00\u53e5\u8bdd\u300d\u7cbe\u51c6\u5730\u6982\u62ec\u505a\u4e86\u4ec0\u4e48\u4e8b\u3001\u7f16\u5199\u6613\u8bfb\u6613\u61c2\u7684\u63cf\u8ff0\u5c31\u663e\u5f97\u5c24\u4e3a\u91cd\u8981\u3002\u672c\u6587\u76ee\u7684\u662f\u7d22\u5f15\u548c\u603b\u7ed3\u5e38\u7528\u7684\u52a8\u8bcd\u5217\u8868\uff0c\u5185\u5bb9\u4ec5\u51ed\u6211\u4e2a\u4eba\u7ecf\u9a8c\u4ee5\u53ca\u6709\u9650\u7684\u67e5\u9605\u8d44\u6599\uff0c\u8bf7\u7ed3\u5408\u5b9e\u9645\u60c5\u51b5\u4f7f\u7528\u3002<\/p>","title":"Git Commit Messages \u548c Changelog \u4e2d\u7684\u5e38\u7528\u52a8\u8bcd\u53c2\u8003"},{"content":"Polkadot and other Substrate-based chain nodes supports JSON RPC over HTTP and over WebSocket on ports 9933 and 9944 individually.\nHowever, according to the WebSocket handshake, we can determine if the client is requesting WebSocket or other HTTP resource by the header Upgrade: websocket.\nHere’s a little trick in Nginx to reverse proxy both 9933 (HTTP) and 9944 (WebSocket) with the same host, same port, and same path \/ location.\nmap $http_upgrade $upstream_backend { # proxy to 9944 if the client wanted to upgrade to a websocket conn websocket http:\/\/127.0.0.1:9944; # proxy to 9333 otherwise default http:\/\/127.0.0.1:9933; } server { listen 80 default_server; listen [::]:80 default_server; server_name _; location \/ { proxy_pass $upstream_backend; } } ","permalink":"https:\/\/wi1dcard.dev\/posts\/serve-http-and-websocket-with-the-same-port-path-in-nginx\/","summary":"
Polkadot and other Substrate-based chain nodes supports JSON RPC over HTTP<\/strong> and over WebSocket<\/strong> on ports 9933 and 9944 individually.<\/p>\n However, according to the WebSocket handshake<\/a>, we can determine if the client is requesting WebSocket or other HTTP resource by the header Here’s a little trick in Nginx to reverse proxy both 9933 (HTTP) and 9944 (WebSocket) with the same host, same port, and same path \/ location.<\/p>","title":"Serve HTTP and WebSocket with the Same Port and Path in Nginx"},{"content":"Kube-prometheus provides quite a few great collections of components and alerts that help us monitoring our Kubernetes cluster. I’ve used it in the production cluster for serveral months. Although the project exposes a bunch of options via _config+:: to makes it partially configurable, the scope of parameters that we can modify is still limited.\nThe Real-life Problems For example, we currently deploy our workloads on Google Kubernetes Engine (a.k.a. GKE) on Google Cloud Platform. GKE hosts the master node of the cluster, which could mean some components such as the scheduler and controller manager are “invisible” to users.\nTherefore, the alert rule groups kube-scheduler.rules, kubernetes-system-scheduler, and kubernetes-system-controller-manager is unnecessary for us, as well as some Grafana dashboards. I personnally want to remove them to prevent potential confusion.\nAnother example would be editing the for field of alert rules. The default threshold of alert KubePodNotReady is 15m. This is a bit too long for our SLA. We want a shorter duration that we can tolerate.\nSolutions The good news is, credit to the powerful Jsonnet syntax, we have the ability to customize and tinker the project without forking or copy-pasting.\nTl;DR:\n\/\/ \/\/ Part One \/\/ local prometheusRuleManipulators = [ function(rule) if !std.objectHas(rule, "alert") || rule.alert != "KubePodNotReady" then \/\/ Skip other rules rule else rule + { 'for': '5m', \/\/ Shorten the duration annotations+: { \/\/ Update durations in the description at the same time description: std.strReplace(super.description, "15 minutes", "5 minutes"), }, }, function(rule) rule, \/\/ Do whatever you want \/\/ Add more functions in the array to customize rules ]; \/\/ \/\/ Part Two \/\/ local applyRuleManipulators(rule, idx) = if !std.objectHas(rule, "alert") then \/\/ Don't apply to record rules rule else if idx >= std.length(prometheusRuleManipulators) then \/\/ Exit the recursion rule else local f = prometheusRuleManipulators[idx]; local r = f(rule); applyRuleManipulators(r, idx + 1); \/\/ \/\/ Part Three \/\/ local manipulatePrometheusRules(rules) = [ applyRuleManipulators(rule, 0) for rule in rules \/\/ Add optional `if` to filter rules like below ]; local manipulatePrometheusGroups(groups) = [ group + { rules: manipulatePrometheusRules(group.rules) } for group in groups if !std.member([ \/\/ Filter and remove some rule groups 'kube-scheduler.rules', 'kubernetes-system-scheduler', 'kubernetes-system-controller-manager', ], group.name) ]; local kp = (import 'kube-prometheus\/kube-prometheus.libsonnet') + { prometheusAlerts+:: { groups: manipulatePrometheusGroups(super.groups) }, }; \/\/ ... Part One: prometheusRuleManipulators As you can see, my idea was to define a bunch of “manipulators” in an array (prometheusRuleManipulators). Like middlewares in the web apps development, all HTTP requests pass through middlewares serially and can be changed before it arrives the app, I want all alerts to be sent to the manipulators and save the outputs of the last manipulator as the final results.\nPart Two: applyRuleManipulators I initally tended to implement this using for:\n\/\/ Won't work for fn in manipulators alert = fn(alert) \/\/ Won't work either local alert = fn(alert) for fn in manipulators However, Jsonnet seemed not allowing that. So I ended up using a recursion in applyRuleManipulators. It calls the function in prometheusRuleManipulators[idx], increments idx by one, then calls itself with a larger idx, until idx >= std.length(prometheusRuleManipulators).\nPart Three I made 2 functions manipulatePrometheusGroups and manipulatePrometheusRules, which traverse the groups and rules respectively, and optionally filter out ones that we don’t utilize with the Python-style for and if.\nThe function manipulatePrometheusRules also calls applyRuleManipulators mentioned above to apply manipulators.\nFinally, we can override the alerts by calling manipulatePrometheusGroups(super.groups) at the end.\nRead More I also found a way to edit the alerts using std.map after I’ve made this: https:\/\/github.com\/prometheus-operator\/kube-prometheus\/discussions\/607. And a great quick-start tutorial of Jsonnet in Chinese: https:\/\/archive.li\/IWlZG, https:\/\/archive.li\/L4k1L.\n","permalink":"https:\/\/wi1dcard.dev\/posts\/customize-kube-prometheus-built-in-alerts\/","summary":" Kube-prometheus<\/a> provides quite a few great collections of components and alerts that help us monitoring our Kubernetes cluster. I’ve used it in the production cluster for serveral months. Although the project exposes a bunch of options via \u8bb0\u5f97\u53bb\u5e74\u5199\u8fc7\u4e00\u7bc7 \u4e00\u7bc7\u53c8\u957f\u53c8\u4e4f\u5473\u7684\u5e74\u7ec8\u603b\u7ed3\u548c\u5c55\u671b<\/a>\uff0c\u867d\u7136\u73b0\u5728\u5df2\u7ecf\u662f 2021 \u5e74\u7684 2 \u6708\u4e86\uff0c\u518d\u6765\u56de\u987e\u7a0d\u5fae\u665a\u4e86\u4e9b\uff0c\u4e0d\u8fc7\u6211\u8fd8\u662f\u51b3\u5b9a\u603b\u7ed3\u4e00\u4e0b\u53bb\u5e74\uff0c\u518d\u7ed9\u65b0\u4e00\u5e74\u5236\u5b9a\u51e0\u4e2a\u957f\u671f\u76ee\u6807\u3002<\/p>","title":"\u4e00\u7bc7\u4e0d\u957f\u4f46\u4f3c\u4e4e\u8fd8\u662f\u6709\u70b9\u4e4f\u5473\u7684\u5e74\u7ec8\u603b\u7ed3"},{"content":"\u8fd9\u7bc7\u535a\u5ba2\u4e00\u6539\u6211\u4e4b\u524d\u6587\u98ce\u7684\u5e38\u6001\uff0c\u56e0\u4e3a\u7f51\u4e0a\u7684\u76f8\u5173\u4e13\u4e1a\u8d44\u6599\u5df2\u7ecf\u5f88\u591a\uff0c\u6211\u5c3d\u53ef\u80fd\u4ee5\u901a\u4fd7\u6613\u61c2\u7684\u8bed\u8a00\u6765\u4ecb\u7ecd\uff0c\u653e\u5f03\u4e86\u90e8\u5206\u4e13\u4e1a\u6027\uff0c\u671b\u8bfb\u8005\u89c1\u8c05\u3002\n\u6211\u4eec\u5148\u6765\u8c08\u8c08\u300c\u9632\u6b62\u653b\u51fb\u8005\u4f2a\u9020\u6211\u4eec\u5411\u5176\u4ed6\u4eba\u53d1\u9001\u90ae\u4ef6\u300d\u3002\u8981\u7406\u89e3\u4e3a\u4ec0\u4e48\u4f1a\u5b58\u5728\u4f2a\u9020\u90ae\u4ef6\u4ee5\u53ca\u5982\u4f55\u9632\u6b62\u4f2a\u9020\u90ae\u4ef6\uff0c\u9996\u5148\u9700\u8981\u660e\u767d\u90ae\u4ef6\u673a\u5236\u662f\u600e\u6837\u5de5\u4f5c\u7684\u3002\n\u53d1\u9001\u90ae\u4ef6\u65f6\u53d1\u751f\u4e86\u4ec0\u4e48\uff1f \u4e3a\u4e86\u65b9\u4fbf\u7406\u89e3\uff0c\u4f60\u53ef\u4ee5\u628a\u300c\u53d1\u9001\u90ae\u4ef6\u300d\u770b\u4f5c\u662f\u7c7b\u4f3c\u63d0\u4ea4 HTTP \u8bf7\u6c42\u7684\u8fc7\u7a0b\u3002\n\u4e3e\u4e2a\u4f8b\u5b50\uff0c\u5047\u8bbe\u6211\u4eec\u662f user@foo.com\uff0c\u7ed9 remote@bar.com \u53d1\u90ae\u4ef6\uff0c\u5728\u70b9\u51fb\u300c\u53d1\u9001\u300d\u7684\u90a3\u4e00\u523b\uff0c\u6211\u4eec\u7684\u90ae\u4ef6\u670d\u52a1\u5668\u67e5\u8be2 bar.com \u7684 MX \u8bb0\u5f55\uff0cDNS \u670d\u52a1\u5668\u8fd4\u56de 1.1.1.1\uff0c\u63a5\u7740\u6211\u4eec\u7684\u90ae\u4ef6\u670d\u52a1\u5668\u4e0e\u5bf9\u65b9 1.1.1.1 \u5efa\u7acb TCP \u94fe\u63a5\uff0c\u53d1\u9001\u4ee5\u4e0b\u5185\u5bb9\uff08\u4ec5\u4f9b\u7406\u89e3\u6982\u5ff5\uff0c\u4e0e\u771f\u5b9e\u60c5\u51b5\u4e0d\u540c\uff09\uff1a\n\u4f60\u597d\uff0c\u6211\u662f <user@foo.com> \u6211\u6709\u90ae\u4ef6\u7ed9 <remote@bar.com> \u6807\u9898\u662f xxxx \u5185\u5bb9\u662f yyyy \u4e8e\u662f\u6211\u4eec\u7684\u90ae\u4ef6\u5c31\u5230\u8fbe\u4e86 remote@bar.com \u7684\u90ae\u4ef6\u670d\u52a1\u5668\uff0c\u670d\u52a1\u5668\u8bb0\u5f55\u5e76\u5b58\u50a8\u5230\u6536\u4ef6\u7bb1\u4f9b\u5bf9\u65b9\u67e5\u770b\u3002\n\u8fd9\u6574\u4e2a\u8fc7\u7a0b\u4e2d\u4e0d\u5b58\u5728\u4efb\u4f55\u5bf9\u300c\u6211\u65b9\u300d\u7684\u8eab\u4efd\u9a8c\u8bc1\uff0c\u4e5f\u5c31\u662f\u8bf4\uff0c\u4efb\u4f55\u4eba\u53ef\u4ee5\u94fe\u63a5\u5230 remote@bar.com \u7684\u90ae\u4ef6\u670d\u52a1\u5668\uff0c\u8bf4\uff1a\u6211\u662f <user@foo.com>\uff0c\u6211\u6709\u90ae\u4ef6\u7ed9 xxxx\u3002\u8fd9\u5c31\u7ed9\u4e86\u653b\u51fb\u8005\u4f2a\u88c5\u6210\u300c\u6211\u65b9\u300d\u7684\u53ef\u80fd\u6027\u3002\nSPF \u600e\u4e48\u529e\u5462\uff1f\u4e8e\u662f SPF \u88ab\u53d1\u660e\u4e86\u3002SPF \u673a\u5236\u8981\u6c42\u6211\u4eec\uff0c\u5728\u9700\u8981\u53d1\u9001\u90ae\u4ef6\u7684\u57df\u540d\u4e0b\uff08foo.com\uff09\uff0c\u65b0\u589e\u4e00\u6761 SPF \u8bb0\u5f55\uff0c\u5185\u5bb9\u5927\u6982\u662f\uff08\u4ec5\u4f9b\u7406\u89e3\u6982\u5ff5\uff0c\u4e0e\u771f\u5b9e\u60c5\u51b5\u4e0d\u540c\uff09\uff1a\n\u6211\u65b9\u90ae\u4ef6\u670d\u52a1\u5668 IP \u5730\u5740\u662f = 2.2.2.2, 3.3.3.3 \u518d\u6b21\u91cd\u590d\u4e0a\u6587\u90ae\u4ef6\u53d1\u9001\u8fc7\u7a0b\uff0c\u5bf9\u65b9\u90ae\u4ef6\u670d\u52a1\u5668\u6536\u5230\u6211\u65b9\u90ae\u4ef6\uff08\u6765\u81ea foo.com\uff09\u65f6\uff0c\u5c31\u53ef\u4ee5\u67e5\u8be2 foo.com \u7684 DNS \u8bb0\u5f55\uff0c\u627e\u5230\u6211\u4eec\u63d0\u524d\u8bbe\u7f6e\u597d\u7684 SPF \u8bb0\u5f55\u3002\u540c\u65f6\uff0c\u56e0\u4e3a\u300c\u53d1\u9001\u300d\u7684\u8fc7\u7a0b\u5b9e\u9645\u4e0a\u5c31\u662f TCP \u5efa\u7acb\u94fe\u63a5\uff0c\u56e0\u6b64\u5bf9\u65b9\u670d\u52a1\u5668\u4e5f\u80fd\u591f\u5f97\u5230\u53d1\u9001\u8005\u7684\u670d\u52a1\u5668 IP\u3002\u628a \u53d1\u9001\u90ae\u4ef6\u7684\u670d\u52a1\u5668 IP \u4e0e SPF \u8bb0\u5f55\u5185\u7684 IP \u5730\u5740 \u8fdb\u884c\u5bf9\u6bd4\uff0c\u5982\u679c\u4e0d\u5339\u914d\uff0c\u5219\u8ba4\u4e3a\u662f\u4f2a\u9020\u90ae\u4ef6\u3002\n\u53ef\u4ee5\u770b\u51fa\uff0c\u901a\u8fc7 SPF \u673a\u5236\uff0c\u6211\u4eec\u80fd\u8fbe\u5230\u300c\u4e0d\u662f\u4ece\u6211\u4eec\u670d\u52a1\u5668 IP \u5730\u5740\u53d1\u51fa\u7684\u90ae\u4ef6\uff0c\u88ab\u89c6\u4e3a\u5783\u573e\u90ae\u4ef6\u300d\u7684\u6548\u679c\u3002\u4f46\u662f\uff0cSPF \u5b58\u5728\u4e00\u4e9b\u5c40\u9650\u6027\uff0c\u4f8b\u5982\uff1a\n \u5047\u8bbe\u4f60\u6709\u4e24\u4e2a\u90ae\u7bb1 jane@company.com \u548c jane@personal.com\uff0c\u4f60\u7279\u522b\u70ed\u7231\u5de5\u4f5c\uff0c\u8bbe\u7f6e\u4e86\u6240\u6709\u53d1\u5230 jane@company.com \u7684\u90ae\u4ef6\u5168\u90e8\u8f6c\u5230 jane@personal.com\u3002\n\u6b64\u65f6\u4e00\u5c01\u6765\u81ea user@foo.com\uff08\u914d\u7f6e\u4e86 SPF\uff09\u7684\u90ae\u4ef6\u53d1\u9001\u5230\u4e86 jane@company.com\uff0c\u90ae\u4ef6\u670d\u52a1\u5668\u6839\u636e\u4f60\u7684\u8bbe\u7f6e\u3001\u539f\u5c01\u4e0d\u52a8\u5730 \u8f6c\u53d1\u8be5\u90ae\u4ef6\u5230 jane@personal.com\u3002\njane@personal.com \u7684\u90ae\u4ef6\u670d\u52a1\u5668\u6536\u5230\u90ae\u4ef6\u540e\uff0c\u5f00\u59cb\u6838\u5bf9 SPF \u8bb0\u5f55\u3002\u8fd9\u65f6 \u90ae\u4ef6\u7684\u53d1\u4ef6\u4eba\u4f9d\u7136\u662f user@foo.com\uff0c\u6839\u636e\u67e5\u8be2 foo.com \u7684 SPF \u914d\u7f6e\u5185\u5e76\u4e0d\u5305\u542b company.com \u90ae\u4ef6\u670d\u52a1\u5668\u7684 IP \u5730\u5740\u3002\u56e0\u6b64\u8be5\u90ae\u4ef6\u5c06\u88ab\u8bef\u5224\u4e3a\u4f2a\u9020\u90ae\u4ef6\u3002\n DKIM \u5c3d\u7ba1\u5982\u4eca\u8bb8\u591a\u90ae\u4ef6\u670d\u52a1\u5546\u5728\u81ea\u52a8\u8f6c\u53d1\u90ae\u4ef6\u65f6\uff0c\u4f1a\u4fee\u6539\u90ae\u4ef6\u7684\u53d1\u4ef6\u4eba\u6765\u89c4\u907f SPF \u89c4\u5219\u9650\u5236\u3002\u4f46\u8fd9\u5728\u7406\u8bba\u4e0a\u5e76\u4e0d\u300c\u4f18\u96c5\u300d\uff0c\u4e8e\u662f\u53c8\u8bde\u751f\u4e86 DKIM\u3002\nDKIM \u8981\u6c42\u6211\u4eec\u5728\u6211\u65b9\u90ae\u4ef6\u670d\u52a1\u5668\u5185\u751f\u6210\u4e00\u7ec4\u5bc6\u94a5\u5bf9\uff0c\u79c1\u94a5\u4fdd\u5b58\u5728\u670d\u52a1\u5668\u5185\uff0c\u516c\u94a5\u901a\u8fc7 DNS \u8bb0\u5f55\u516c\u5f00\u3002\u4e00\u6837\uff0c\u65b0\u589e\u4e00\u6761 DNS \u8bb0\u5f55\uff0c\u5185\u5bb9\u5927\u6982\u662f\uff08\u4ec5\u4f9b\u7406\u89e3\u6982\u5ff5\uff0c\u4e0e\u771f\u5b9e\u60c5\u51b5\u4e0d\u540c\uff09\uff1a\n\u6211\u65b9\u90ae\u4ef6\u7b7e\u540d\u516c\u94a5\u662f = 0xnoirh22h381uj2eoqdsjlaisud \u518d\u6b21\u91cd\u590d\u4e0a\u6587\u90ae\u4ef6\u53d1\u9001\u8fc7\u7a0b\uff0c\u4e0e SPF \u4e0d\u540c\uff0c\u6211\u65b9\u670d\u52a1\u5668\u5728\u53d1\u9001\u90ae\u4ef6\u65f6\uff0c\u9700\u8981\u5bf9\u90ae\u4ef6\u5185\u5bb9\u4f7f\u7528\u79c1\u94a5\u7b7e\u540d\uff0c\u5e76\u5c06\u7b7e\u540d\u4e0e\u90ae\u4ef6\u5185\u5bb9\u4e00\u8d77\u643a\u5e26\u7740\u53d1\u9001\u7ed9\u5bf9\u65b9\u670d\u52a1\u5668\u3002\u5bf9\u65b9\u6536\u5230\u6211\u65b9\u90ae\u4ef6\u65f6\uff08\u6765\u81ea foo.com\uff09\uff0c\u540c\u6837\u67e5\u8be2 foo.com \u7684 DNS \u8bb0\u5f55\uff0c\u62ff\u5230\u516c\u94a5\u3002\u4f7f\u7528\u516c\u94a5\u548c\u7b7e\u540d\u9a8c\u8bc1\u90ae\u4ef6\u5185\u5bb9\uff0c\u5982\u679c\u9a8c\u7b7e\u4e0d\u901a\u8fc7\uff0c\u5219\u5c06\u90ae\u4ef6\u5224\u5b9a\u4e3a\u4f2a\u9020\u3002\n\u7ed3\u5408\u4ee5\u4e0a\u4f8b\u5b50\uff08user@foo.com -> jane@company.com -> jane@personal.com\uff09\uff0c\u5f53 jane@company.com \u81ea\u52a8\u8f6c\u53d1\u90ae\u4ef6\u65f6\uff0c\u65e0\u9700\u4fee\u6539\u4efb\u4f55\u5b57\u6bb5\uff08\u4e5f\u4e0d\u80fd\u4fee\u6539\uff0c\u4e0d\u7136\u9a8c\u7b7e\u5c31\u4f1a\u5931\u8d25\uff09\uff0cjane@personal.com \u6536\u5230\u90ae\u4ef6\u540e\u67e5\u8be2 foo.com \u7684 DKIM \u516c\u94a5\uff0c\u9a8c\u8bc1\u90ae\u4ef6\u7b7e\u540d\u901a\u8fc7\uff0c\u5373\u53ef\u8ba4\u4e3a\u662f\u6b63\u5e38\u90ae\u4ef6\u3002\n\u5982\u6b64\u4e00\u6765\uff0c\u7ed3\u5408 DKIM \u548c SPF\uff0c\u770b\u8d77\u6765\u4e07\u4e8b\u5927\u5409\u4e86\uff1f\u5e76\u6ca1\u6709\u3002\u8ba9\u6211\u4eec\u66f4\u52a0\u6df1\u5165\u4e00\u70b9\uff0c\u770b\u4e2a\u7a0d\u5fae\u771f\u5b9e\u4e00\u70b9\u7684\u90ae\u4ef6\u3002\nReturn-Path: user@fake.com DKIM-Signature: d=fake.com, b=aldjiopurn1o23u108923jiuq123jdal From: <user@foo.com> To: <remote@bar.com> \u521a\u521a\u63d0\u5230\uff0c\u57fa\u4e8e SPF\uff0c\u6536\u4ef6\u65b9\u80fd\u591f\u5bf9\u6bd4\u300c\u53d1\u4ef6\u670d\u52a1\u5668 IP \u5730\u5740\u300d\u4e0e\u300c\u53d1\u4ef6\u4eba\u57df\u540d\u7684 SPF \u8bb0\u5f55\u5185\u7684 IP \u5730\u5740\u300d\u3002\u7136\u800c\uff0c\u56e0\u4e3a\u90ae\u4ef6\u7cfb\u7edf\u53d1\u5c55\u5386\u53f2\u4e45\u8fdc\uff0cSPF \u5b9a\u4e49\u7684\u300c\u53d1\u4ef6\u4eba\u300d\u662f RFC5321.MailFrom \u89c4\u5b9a\u7684 Return-Path\u3002DKIM \u5219\u66f4\u662f\u5728\u90ae\u4ef6\u5934\u91cc\u76f4\u63a5\u643a\u5e26\u4e86\u57df\u540d\uff08DKIM-Signature: d=\uff09\uff0c\u53ea\u8981\u4f7f\u7528\u8be5\u57df\u540d\u7684\u516c\u94a5\u9a8c\u8bc1\u901a\u8fc7\u5373\u53ef\u3002\n\u7136\u800c\uff0c\u5982\u4eca\u90ae\u4ef6\u670d\u52a1\u7ed9\u6700\u7ec8\u7528\u6237\u5c55\u793a\u7684\u300c\u53d1\u4ef6\u4eba\u300d\u51e0\u4e4e\u90fd\u662f From \u5b57\u6bb5\uff0c\u5e76\u975e SPF \u7684 Return-Path\uff0c\u4e5f\u4e0d\u662f DKIM \u7684 DKIM-Signature: d=\u3002\u4e5f\u5c31\u662f\u8bf4\uff0c\u653b\u51fb\u8005\uff08fake.com\uff09\u53ef\u4ee5\u53d1\u9001\u4ee5\u4e0a\u8fd9\u5c01\u90ae\u4ef6\uff0c\u53ef\u4ee5\u5b8c\u7f8e\u901a\u8fc7 SPF \u548c DKIM \u68c0\u67e5\uff08\u56e0\u4e3a SPF \u9a8c\u8bc1\u7684 Return-Path \u662f fake.com\uff0c\u800c DKIM \u9a8c\u8bc1\u7684 d= \u4e5f\u662f fake.com\uff09\uff0c\u800c\u6700\u7ec8\u7528\u6237\u770b\u5230\u7684\u53d1\u4ef6\u4eba\u5374\u662f From \u5185\u7684 user@foo.com\u3002\u8fd9\u663e\u7136\u662f\u4e0d\u53ef\u63a5\u53d7\u7684\u3002\nDMARC \u53c8\u4e8e\u662f\uff0cDMARC \u8bde\u751f\u4e86\u3002\nDMARC \u5e76\u6ca1\u6709\u89c4\u5b9a\u5177\u4f53\u7684\u300c\u9a8c\u8bc1\u63aa\u65bd\u300d\uff0c\u800c\u662f\u57fa\u4e8e SPF \u548c DKIM\uff08\u6216\u4e8c\u8005\u4e4b\u4e00\uff09\u3002\u5b83\u89c4\u5b9a\uff0cSPF \u7684 Return-Path \u6216\u8005 DKIM \u7684 DKIM-Signature: d= \u4e8c\u8005\u81f3\u5c11\u9700\u6709\u5176\u4e00\u4e0e From \u5934\u5bf9\u5e94\uff0c\u5426\u5219\u88ab\u5224\u5b9a\u4e3a fail\u3002\u8fd9\u4e2a\u8fc7\u7a0b\u53eb\u505a Identifier Alignment\u3002\u540c\u65f6\uff0cDMARC \u8fd8\u63d0\u4f9b\u4e86\u5927\u91cf\u7684\u589e\u5f3a\u529f\u80fd\uff0c\u6bd4\u5982\u6307\u5b9a\u90a3\u4e9b fail \u7684\u90ae\u4ef6\u662f\u8fdb\u5165 Spam \u8fd8\u662f\u76f4\u63a5\u62d2\u6536\u3002\u914d\u7f6e DMARC \u7684\u65b9\u5f0f\u4e0e SPF \u548c DKIM \u7c7b\u4f3c\uff0c\u5728\u6211\u65b9\u57df\u540d DNS \u5185\u6dfb\u52a0 TXT \u8bb0\u5f55\uff0c\u5185\u5bb9\u7c7b\u4f3c\u8fd9\u6837\uff08\u4ec5\u4f9b\u7406\u89e3\u6982\u5ff5\uff0c\u4e0e\u771f\u5b9e\u60c5\u51b5\u4e0d\u540c\uff09\uff1a\n70% \u7684 fail \u90ae\u4ef6\u8fdb\u5165 Spam\uff1b \u90ae\u4ef6\u670d\u52a1\u5546\u5e94\u5f53\u5c06\u6bcf\u5929 fail \u7684\u90ae\u4ef6\u6c47\u603b\u540e\u53d1\u9001\u5230 xxx@foo.com \u4ee5\u4f9b\u5206\u6790\uff1b \u4e25\u683c\u5339\u914d\uff0c\u4e0d\u5141\u8bb8 Return-Path \u662f From \u7684\u81ea\u57df\u540d\uff1b \u5f53\u5bf9\u65b9\u90ae\u4ef6\u670d\u52a1\u5668\u6536\u5230\u90ae\u4ef6\u65f6\uff0c\u5373\u53ef\u5148\u9a8c\u8bc1 DKIM\u3001SPF\uff0c\u518d\u6839\u636e DMARC \u7684\u914d\u7f6e\uff0c\u68c0\u67e5 Identifier Alignment\u3001\u51b3\u5b9a\u5177\u4f53\u63aa\u65bd\u7b49\u3002\n\u5982\u6b64\u4e00\u6765\uff0c\u80fd\u591f\u786e\u4fdd\u6700\u7ec8\u6536\u4ef6\u4eba\u7528\u6237\u770b\u5230\u7684 From \u4e0e SPF\u3001DKIM \u8ba4\u8bc1\u7684\u53d1\u4ef6\u4eba\u4e00\u81f4\uff0c\u4e14\u7ecf\u8fc7\u4e86 SPF \u6216 DKIM \u8ba4\u8bc1\u3002\u8fd9\u6837\uff0c\u653b\u51fb\u8005\u4e5f\u5c31\u65e0\u6cd5\u4f2a\u9020\u6211\u4eec\u53d1\u51fa\u7684\u90ae\u4ef6\u4e86\u3002\n\u7ed3\u8bed \u603b\u7ed3\u4ee5\u4e0a\u8fc7\u7a0b\uff0c\u53ef\u4ee5\u770b\u51fa\uff1a\u5982\u679c\u60f3\u8981\u5f7b\u5e95\u907f\u514d\u4f2a\u9020\u90ae\u4ef6\uff0c\u662f\u9700\u8981\u6536\u53d1\u53cc\u65b9\u534f\u4f5c\u7684\u8fc7\u7a0b\u3002\u9664\u4e86\u53d1\u4ef6\u65b9\u8981\u914d\u7f6e\u597d SPF \u548c DKIM \u4f9b\u6536\u4ef6\u65b9\u9a8c\u8bc1\u5916\uff0c\u6536\u4ef6\u65b9\u7684\u670d\u52a1\u5668\u4e5f\u5fc5\u987b\u652f\u6301 \u5bf9\u6536\u5230\u7684\u90ae\u4ef6\u8fdb\u884c SPF \u548c DKIM \u8ba4\u8bc1\u3002\n\u5f53\u6211\u4eec\u4f5c\u4e3a\u6536\u4ef6\u65b9\u65f6\uff0c\u80fd\u505a\u7684\u5c31\u662f\u5c3d\u53ef\u80fd\u4f7f\u7528\u652f\u6301 SPF \u548c DKIM \u7684\u90ae\u4ef6\u670d\u52a1\u5546\uff0c\u4f8b\u5982 Gmail\uff1b\u907f\u514d\u4f7f\u7528\u4e0d\u652f\u6301\u8fd9\u4e9b\u673a\u5236\u7684\u670d\u52a1\u5546\uff0c\u6bd4\u5982\uff08\u5783\u573e\uff09\u963f\u91cc\u4e91 \/ \u9489\u9489\u90ae\u7bb1\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/anti-email-spoofing-explained\/","summary":" \u8fd9\u7bc7\u535a\u5ba2\u4e00\u6539\u6211\u4e4b\u524d\u6587\u98ce\u7684\u5e38\u6001\uff0c\u56e0\u4e3a\u7f51\u4e0a\u7684\u76f8\u5173\u4e13\u4e1a\u8d44\u6599\u5df2\u7ecf\u5f88\u591a\uff0c\u6211\u5c3d\u53ef\u80fd\u4ee5\u901a\u4fd7\u6613\u61c2\u7684\u8bed\u8a00\u6765\u4ecb\u7ecd\uff0c\u653e\u5f03\u4e86\u90e8\u5206\u4e13\u4e1a\u6027\uff0c\u671b\u8bfb\u8005\u89c1\u8c05\u3002<\/p>\n \u6211\u4eec\u5148\u6765\u8c08\u8c08\u300c\u9632\u6b62\u653b\u51fb\u8005\u4f2a\u9020\u6211\u4eec\u5411\u5176\u4ed6\u4eba\u53d1\u9001\u90ae\u4ef6\u300d\u3002\u8981\u7406\u89e3\u4e3a\u4ec0\u4e48\u4f1a\u5b58\u5728\u4f2a\u9020\u90ae\u4ef6\u4ee5\u53ca\u5982\u4f55\u9632\u6b62\u4f2a\u9020\u90ae\u4ef6\uff0c\u9996\u5148\u9700\u8981\u660e\u767d\u90ae\u4ef6\u673a\u5236\u662f\u600e\u6837\u5de5\u4f5c\u7684\u3002<\/p>","title":"\u901a\u4fd7\u89e3\u91ca\u53cd\u4f2a\u9020\u90ae\u4ef6\u673a\u5236 SPF\u3001DKIM \u548c DMARC"},{"content":"2020 \u5e74\u8f6c\u773c\u7ed3\u675f\u4e86\uff0c\u672c\u60f3\u5199\u5e74\u7ec8\u603b\u7ed3\u548c\u65b0\u5e74\u8ba1\u5212\uff0c\u5374\u53d1\u73b0 2020 \u5e74\u9664\u4e86\u6280\u672f\u8fdb\u6b65\uff0c\u8fd8\u603b\u7ed3\u4e86\u4e0d\u5c11\u6211\u81ea\u5df1\u7684\u300c\u5de5\u4f5c\u6280\u5de7\u300d\uff0c\u6216\u8005\u4e5f\u53ef\u4ee5\u53eb\u505a\u300c\u5de5\u4f5c\u5b88\u5219\u300d\u3002\u6211\u9075\u5faa\u7740\u8fd9\u4e9b\u5b9e\u8df5\u4e2d\u603b\u7ed3\u51fa\u6765\u7684\u65b9\u6cd5\u5de5\u4f5c\uff0c\u4e3a\u6211\u81ea\u5df1\u4ee5\u53ca\u6211\u6240\u5728\u7684\u5c97\u4f4d\uff0c\u5e26\u6765\u4e86\u4e0d\u5c0f\u7684\u65f6\u95f4\u6548\u76ca\u548c\u7ecf\u6d4e\u6548\u76ca\u3002\n\u5f53\u7136\uff0c\u9002\u5408\u81ea\u5df1\u7684\u624d\u662f\u6700\u597d\u7684\uff0c\u6211\u4e0d\u559c\u6b22\u4e00\u5473\u6a21\u4eff\u5176\u5b83\u4eba\uff0c\u5e0c\u671b\u4f60\u4e5f\u5e26\u7740\u8fd9\u79cd\u60f3\u6cd5\u8bfb\u8fd9\u7bc7\u535a\u5ba2\u3002\n\u6ca1\u6709\u56fa\u5b9a\u7684\u8ba1\u5212\uff0c\u53ea\u6709 Todo\u3001Doing \u548c Done \u6709\u4e0d\u5c11\u4eba\u66fe\u5411\u6211\u63a8\u8350\u65f6\u95f4\u89c4\u5212 \u2014 \u8ba1\u5212\u6bcf\u5929\u6bcf\u6bb5\u65f6\u95f4\u5e94\u8be5\u505a\u4ec0\u4e48\u3002\u5c1d\u8bd5\u8fc7\u540e\u53d1\u73b0\u5176\u5b9e\u4e0d\u9002\u5408\u6211\u3002\u76f8\u8f83\u4e8e\u7814\u53d1\u3001\u79d1\u7814\u5c97\u4f4d\u901a\u5e38\u4f1a\u5236\u5b9a\u957f\u671f\u7684\u5f00\u53d1\u76ee\u6807\u3001\u8bba\u6587\u76ee\u6807\uff1b\u4f5c\u4e3a\u4e00\u540d DevOps \u5de5\u7a0b\u5e08\uff0c\u65e5\u5e38\u5de5\u4f5c\u66f4\u591a\u65f6\u5019\u662f\u5728\u4e0d\u65ad\u5730\u53d1\u73b0\u95ee\u9898\u548c\u89e3\u51b3\u95ee\u9898\u3002\n\u56e0\u6b64\uff0c\u6211\u66f4\u503e\u5411\u4e8e\u628a\u5f85\u529e\u4e8b\u9879\u62c6\u5206\u6210 Tickets\uff0c\u5e76\u4f7f\u7528 Kanban \u7ba1\u7406\u5b83\u4eec\u3002\u6211\u7684 Kanban \u5185\u901a\u5e38\u5305\u542b\u51e0\u5217\uff1a\n LONG TERM\uff1a\u4e0d\u7d27\u6025\u7684\u3001\u53ef\u4ee5\u672a\u6765\u518d\u505a\u7684\u4efb\u52a1\u3002\u901a\u5e38\u6765\u6e90\u662f\u5728\u5de5\u4f5c\u4e2d\u53d1\u73b0\u7684\u53ef\u4f18\u5316\u9879\uff0c\u6216\u662f\u6765\u81ea\u540c\u4e8b\u7684\u9700\u6c42\u4f46\u8c03\u7814\u540e\u53d1\u73b0\u6682\u65f6\u4e0d\u592a\u5bb9\u6613\u89e3\u51b3\u7684\u4e8b\u3002 TODO\uff1a\u9700\u8981\u5c3d\u5feb\u5b8c\u6210\u7684\u4efb\u52a1\u3002\u901a\u5e38\u6765\u6e90\u662f\u6bd4\u8f83\u91cd\u8981\u3001\u7d27\u6025\u7684\u9700\u6c42\u3002 DOING\uff1a\u6b63\u5728\u505a\u7684\u4e8b\u3002 STALLED\uff1a\u7531\u4e8e\u5916\u90e8\u56e0\u7d20\u6682\u505c\u7684\u4efb\u52a1\u3002\u6bd4\u5982\u9700\u8981\u7b49\u5f85\u67d0\u4e2a PR \u5408\u5e76\u3001\u7b49\u5f85\u540c\u4e8b\u7684\u786e\u8ba4\u56de\u590d\u7b49\u3002 DONE\uff1a\u5df2\u5b8c\u6210\u7684\u4efb\u52a1\u3002 \u6709\u4e86 Kanban\uff0c\u6211\u7684\u5de5\u4f5c\u6d41\u5c31\u6e05\u6670\u4e86\uff1a\n\u5f53\u65b0\u9700\u6c42\u51fa\u73b0\u65f6\uff0c\u6211\u4f1a\u67e5\u770b\u73b0\u5728\u7684 TODO \u548c LONG TERM \u6709\u6ca1\u6709\u7c7b\u4f3c\u7684\u4e8b\uff1b\u5982\u679c\u9700\u8981\u670d\u52a1\u4e0b\u7ebf\u7ef4\u62a4\uff0c\u6211\u4f1a\u67e5\u627e\u662f\u5426\u6709\u53ef\u4ee5\u4e00\u5e76\u5728\u540c\u4e00\u6b21\u7ef4\u62a4\u4e2d\u5b8c\u6210\u7684\u4efb\u52a1\uff0c\u5c3d\u53ef\u80fd\u51cf\u5c11\u4e0b\u7ebf\u6b21\u6570\u3002\n\u5f00\u59cb\u5de5\u4f5c\u524d\uff0c\u6211\u4f1a\u6d4f\u89c8\u4e00\u904d TODO \u548c LONG TERM\uff0c\u6839\u636e\u4efb\u52a1\u7684\u91cd\u8981\u548c\u7d27\u6025\u7a0b\u5ea6\uff0c\u8c03\u6574\u5b83\u4eec\u7684\u5148\u540e\u987a\u5e8f\u3001\u4f18\u5148\u7ea7\u7b49\uff1b\u56e0\u4e3a\u5728\u5b9e\u9645\u5de5\u4f5c\u8fc7\u7a0b\u4e2d\uff0c\u5f88\u591a\u4efb\u52a1\u968f\u7740\u65f6\u95f4\u63a8\u79fb\u3001\u6280\u672f\u8fed\u4ee3\u3001\u5e02\u573a\u548c\u4ea7\u54c1\u8ba1\u5212\u8c03\u6574\uff0c\u53ef\u80fd\u77ac\u95f4\u4ece LONG TERM \u4e0a\u5347\u4e3a\u8f83\u7d27\u6025\uff0c\u4e5f\u53ef\u80fd\u4ece TODO \u76f4\u63a5\u6d88\u5931\uff0c\u88ab Archive\u3002\n\u6211\u8fd8\u4f1a\u65f6\u4e0d\u65f6\u770b\u770b STALLED\uff0c\u8fd9\u4e00\u5217\u80fd\u5e2e\u52a9\u6211\u7ba1\u7406\u548c\u63a8\u52a8\u90a3\u4e9b\u53d7\u5230\u5916\u90e8\u56e0\u7d20\u5f71\u54cd\u800c\u4e0d\u80fd\u7acb\u523b\u5b8c\u6210\u7684\u4efb\u52a1\uff0c\u8b6c\u5982\u7b49\u5f85\u5f00\u6e90\u9879\u76ee\u7684 Bugfix PR \u5408\u5e76\uff0c\u7b49\u5f85\u540c\u4e8b\u7684\u7b54\u590d\u4e4b\u7c7b\uff1b\u8fd9\u6837\uff0c\u6211\u53ef\u4ee5\u5b9a\u671f\u53bb PR \u50ac\u4e00\u4e0b\u5408\u5e76\u3001\u63d0\u9192\u4e00\u4e0b\u540c\u4e8b\uff0c\u8fdb\u800c\u63a8\u52a8\u300c\u5916\u90e8\u529b\u91cf\u300d\u5c3d\u5feb\u89e3\u51b3\u95ee\u9898\uff0c\u907f\u514d\u6211\u7684\u4efb\u52a1\u957f\u671f\u7531\u4e8e\u5916\u90e8\u539f\u56e0\u62d6\u5ef6\u3002\n\u6700\u540e\uff0c\u5f53\u6211\u8ba4\u4e3a\u67d0\u4e2a\u4e8b\u9879\u662f DONE\uff0c\u90a3\u4e48\u5b83\u4e00\u5b9a\u662f\u4ee5\u4e0b\u4e09\u79cd\u72b6\u6001\u4e4b\u4e00\uff1a\n \u5df2\u8fbe\u6210\u6700\u521d\u76ee\u7684\u3001\u89e3\u51b3\u4e86\u95ee\u9898\uff1b\u6216 \u672a\u89e3\u51b3\u95ee\u9898\u4f46\u51c6\u5907\u4e86\u53ef\u884c\u7684\u6298\u4e2d\u65b9\u6848\uff1b\u6216 \u65e0\u6cd5\u89e3\u51b3\u95ee\u9898\uff0c\u5e76\u7ed9\u51fa\u8bbe\u60f3\u65b9\u6848\u4ee5\u53ca\u4e0d\u53ef\u884c\u7684\u7406\u7531\u3002 \u9047\u5230\u95ee\u9898\u8981\u8bb2\uff0c\u4e3b\u52a8\u6c9f\u901a\u5e76\u6301\u7eed\u8ddf\u8fdb \u5de5\u4f5c\u8fc7\u7a0b\u4e2d\u9047\u5230\u4e0d\u719f\u6089\u7684\u5185\u5bb9\u5f88\u5e38\u89c1\u3002\u5728\u7740\u624b\u65b0\u4e8b\u9879\u7684\u7b2c\u4e00\u65f6\u95f4\uff0c\u6211\u53ef\u80fd\u4f1a\u6709\u5927\u91cf\u7684\u7591\u95ee\u3002\u8fd9\u4e9b\u7591\u95ee\u5927\u591a\u662f\u6211\u5728\u6784\u60f3\u63a5\u4e0b\u6765\u5e94\u8be5\u600e\u4e48\u505a\u65f6\uff0c\u7ed3\u5408\u7c7b\u4f3c\u4e8b\u9879\u7684\u7ecf\u9a8c\u548c\u7ecf\u5386\uff0c\u63d0\u524d\u9884\u671f\u5230\u7684\u3002\u5728\u5f00\u59cb\u505a\u4e4b\u524d\u6211\u4f1a\u5148\u95ee\u6e05\u695a\u8fd9\u4e9b\u95ee\u9898\uff1b\u5982\u679c\u5bf9\u65b9\u4e0d\u80fd\u53ca\u65f6\u89e3\u7b54\uff0c\u6216\u662f\u6307\u6d3e\u7ed9\u5176\u4ed6\u4eba\u89e3\u7b54\uff0c\u8981\u4e3b\u52a8\u5730\u6301\u7eed\u8ddf\u8fdb\u3002\u63d0\u9192\u81ea\u5df1 \u2014 \u8fd9\u4e9b\u95ee\u9898\u7684\u7b54\u6848\u6709\u52a9\u4e8e\u6211\u5de5\u4f5c\u7684\u5b8c\u6210\uff0c\u6211\u9700\u8981\u8fd9\u4e9b\u7b54\u6848\u3002\n\u5373\u65f6\u901a\u8baf\u964d\u4f4e\u4e86\u67d0\u4e9b\u573a\u666f\u4e0b\u7684\u6c9f\u901a\u6210\u672c\uff0c\u4f46\u540c\u65f6\u4e5f\u8ba9\u6309\u4e0b\u53d1\u9001\u952e\u524d\u4e00\u523b\u7684\u601d\u8003\u53d8\u5c11\u4e86\u3002\u4e3a\u4e86\u63d0\u9ad8\u8be2\u95ee\u4ed6\u4eba\u65f6\u7684\u6c9f\u901a\u6548\u7387\uff0c\u6211\u4e00\u822c\u4f1a\u9075\u5faa\u8fd9\u51e0\u4e2a\u539f\u5219\uff1a\n \u5c06\u591a\u4e2a\u5c0f\u95ee\u9898\u5408\u5e76\u6210\u4e00\u6761\u6d88\u606f\u53d1\u9001\uff0c\u907f\u514d\u5bf9\u65b9\u9057\u6f0f\u6d88\u606f\u3002 \u4f7f\u7528 1. 2. 3. \u6570\u5b57\u7f16\u53f7\uff0c\u5f53\u95ee\u9898\u4e4b\u95f4\u6709\u4f9d\u8d56\u5173\u7cfb\u65f6\u65b9\u4fbf\u5f15\u7528\uff0c\u540c\u65f6\u5bf9\u65b9\u80fd\u591f\u6839\u636e\u7f16\u53f7\u56de\u7b54\uff0c\u4e0d\u5bb9\u6613\u9057\u6f0f\u6216\u8dd1\u9898\u3002 \u53d1\u9001\u9700\u8981\u590d\u5236\u7c98\u8d34\u7684\u5185\u5bb9\u65f6\uff08\u4f8b\u5982\u62a5\u9519\u4fe1\u606f \u2014 \u53ef\u80fd\u5bf9\u65b9\u9700\u8981\u590d\u5236\u5230 Google \u5185\u641c\u7d22\uff09\uff0c\u4e0d\u8981\u622a\u56fe\uff1b\u540c\u65f6\u5c3d\u53ef\u80fd\u4f7f\u7528\u4ee3\u7801\u683c\u5f0f\uff0c\u907f\u514d\u5bf9\u65b9\u4e0d\u5c0f\u5fc3\u590d\u5236\u591a\u4f59\u7684\u5185\u5bb9\uff0c\u4e14\u80fd\u63d0\u5347\u6d88\u606f\u9605\u8bfb\u4f53\u9a8c\u3002 \u53d1\u9001\u4e4b\u524d\u5feb\u901f\u6d4f\u89c8\u4e00\u904d\u6d88\u606f\u3002\u6574\u7406\u53e5\u5b50\u7ed3\u6784\uff0c\u907f\u514d\u5197\u4f59\u7684\u8bdd\u672f\uff0c\u786e\u4fdd\u6392\u7248\u683c\u5f0f\u6b63\u786e\uff0c\u628a\u5373\u65f6\u6d88\u606f\u5f53\u4f5c\u4e00\u5c01\u5bf9\u65b9\u51e0\u5c0f\u65f6\u540e\u624d\u80fd\u56de\u590d\u7684\u90ae\u4ef6\u3002 \u4e0d\u8fdb\u884c\u6ca1\u6709\u7ed3\u679c\u7684\u8ba8\u8bba\uff0c\u8ba8\u8bba\u7ed3\u675f\u8981\u6709\u5207\u5b9e\u53ef\u884c\u7684\u300c\u4e0b\u4e00\u6b65\u300d \u5f53\u6211\u8ba4\u4e3a\u5373\u65f6\u6d88\u606f\u65e0\u6cd5\u5feb\u901f\u8ba8\u8bba\u95ee\u9898\uff0c\u6216\u662f\u6709\u8fc7\u591a\u7ec6\u8282\u9700\u8981\u300c\u5934\u8111\u98ce\u66b4\u300d\u5feb\u901f\u4ea4\u6362\u60f3\u6cd5\u65f6\uff0c\u6211\u4f1a\u53d1\u8d77\u4e00\u6b21\u8ba8\u8bba\u6216\u8005\u4f1a\u8bae\u3002\u4e3a\u4e86\u80fd\u591f\u5feb\u901f\u63a8\u52a8\u8fdb\u5ea6\uff0c\u6211\u901a\u5e38\u4f1a\u5728\u63a5\u8fd1\u4f1a\u8bae\u5c3e\u58f0\u65f6\u7b80\u5355\u603b\u7ed3\uff0c\u5927\u81f4\u7ed3\u6784\u662f\uff1a\n \u300c\u67d0\u4eba\u300d\u5e94\u5f53\u5728\u300c\u67d0\u65f6\u95f4\u5185\u300d\u5b8c\u6210\u300c\u67d0\u4e8b\u300d\uff0c\u8fc7\u7a0b\u4e2d\u53ef\u5bfb\u6c42\u300c\u67d0\u67d0\u300d\u7684\u5e2e\u52a9\u3002\n \u56e0\u6b64\uff0c\u4f1a\u8bae\u7ed3\u675f\u540e\uff0c\u53c2\u4f1a\u540c\u4e8b\u80fd\u6e05\u695a\u5730\u77e5\u9053\uff1a\u81ea\u5df1\u4e0b\u4e00\u6b65\u8981\u505a\u4ec0\u4e48\u3001\u9700\u8981\u4e0e\u8c01\u534f\u4f5c\u3001\u4ea7\u51fa\u4ec0\u4e48\u7ed3\u679c\u3002\u907f\u514d A \u4ee5\u4e3a B \u4f1a\u505a\uff0cB \u4ee5\u4e3a A \u4f1a\u505a\uff0c\u518d\u52a0\u4e0a\u53cc\u65b9\u6b20\u7f3a\u6c9f\u901a\uff0c\u7ed3\u679c\u8c01\u90fd\u6ca1\u505a\u7684\u5c34\u5c2c\u5c40\u9762\u3002\n\u660e\u786e\u6709\u65f6\u6bd4\u4f18\u96c5\u66f4\u91cd\u8981 \u4f5c\u4e3a\u7a0b\u5e8f\u5458\uff0c\u89e3\u51b3\u95ee\u9898\u7684\u8fc7\u7a0b\u4e2d\u5c11\u4e0d\u4e86\u5199\u4ee3\u7801\u3002\u867d\u7136\u6709\u4e0d\u5c11\u4eba\u575a\u6301\u4ee3\u7801\u5e94\u8be5\u4f18\u96c5\u800c\u5b8c\u7f8e\uff0c\u800c\u6211\u8ba4\u4e3a\u67d0\u4e9b\u65f6\u5019\u660e\u786e\u6bd4\u4f18\u96c5\u66f4\u91cd\u8981\u3002\u5f53\u4e24\u65b9\u51b2\u7a81\u65f6\uff0c\u6211\u9700\u8981\u6743\u8861\u5e76\u5c3d\u53ef\u80fd\u53d6\u5f97\u5e73\u8861\u3002\u4f8b\u5982\u4ee5\u4e0b\u51e0\u4e2a\u5177\u4f53\u573a\u666f\uff1a\n \u4f7f\u7528\u6700\u7b80\u5316\u7684\u9ed8\u8ba4\u503c\uff0c\u5f53\u9ed8\u8ba4\u53c2\u6570\u65e0\u6cd5\u6b63\u5e38\u8fd0\u884c\u65f6\uff0c\u901a\u8fc7\u62a5\u9519\u5f15\u5bfc\u7528\u6237\u663e\u5f0f\u5730\u8c03\u6574\u67d0\u4e2a\u503c\uff0c\u800c\u4e0d\u662f\u9690\u5f0f\u5730\u81ea\u52a8\u4fee\u6539\u9ed8\u8ba4\u503c \u2014\u2014 \u8ba9\u7528\u6237\u9010\u6e10\u719f\u6089\u914d\u7f6e\uff0c\u907f\u514d\u300c\u867d\u7136\u80fd\u8fd0\u884c\uff0c\u5374\u7559\u4e0b\u4e86\u672a\u6765\u624d\u80fd\u53d1\u73b0\u7684\u6697\u5751\u300d\u3002 \u5f53\u67d0\u4e2a\u6587\u4ef6\u4e0d\u5f97\u4e0d\u590d\u5236\u7c98\u8d34\u65f6\uff0c\u5728\u65b0\u65e7\u526f\u672c\u5404\u6dfb\u52a0\u4e00\u6bb5\u6ce8\u91ca\uff0c\u8868\u793a\u8be5\u6587\u4ef6\u5e94\u5f53\u4e0e\u53e6\u4e00\u5904\u4fdd\u6301\u540c\u6b65 \u2014\u2014 \u5f53\u672a\u6765\u7684\u6211\u6216\u5176\u4ed6\u540c\u4e8b\u63a5\u624b\u65f6\uff0c\u5c3d\u91cf\u907f\u514d\u6f5c\u5728\u7684\u95ee\u9898\u3002 \u8ba9\u903b\u8f91\u5c3d\u53ef\u80fd\u7b80\u5355\u76f4\u89c2\u3001\u7b26\u5408\u76f4\u89c9 \u2014\u2014 \u5728\u51fa\u73b0\u7d27\u6025\u95ee\u9898\u9700\u8981\u4fee\u590d\u65f6\uff0c\u6211\u5f88\u96be\u5feb\u901f\u7406\u89e3\u3001\u56de\u5fc6\u590d\u6742\u7684\u903b\u8f91\u3002 \u547d\u540d\u5177\u6709\u8db3\u591f\u6e05\u6670\u7684\u6307\u5411\u6027\uff0c\u4f7f\u7528 storageSize \u800c\u4e0d\u662f storage\uff0ctimeoutSeconds \u800c\u4e0d\u662f timeout \u2014\u2014 \u4fbf\u4e8e\u7406\u89e3\u4e14\u51cf\u5c11\u672a\u6765\u7684 breaking changes\u3002 \u7248\u672c\u9650\u5b9a\u5c3d\u53ef\u80fd\u4e25\u8c28\uff0c\u80fd\u6307\u5b9a\u5177\u4f53\u7248\u672c\u5c31\u4e0d\u4f7f\u7528 latest\uff0c\u4e0d\u901a\u8fc7\u590d\u7528 latest \u6765\u8282\u7ea6\u955c\u50cf\u4ed3\u5e93\u5927\u5c0f\u3002 \u4e0d\u8981\u5077\u61d2 \u4e0d\u8981\u5077\u61d2\u4f53\u73b0\u5728\u5f88\u591a\u7ec6\u8282\u4e0a\uff0c\u662f\u9700\u8981\u957f\u671f\u575a\u6301\u624d\u80fd\u770b\u5230\u6548\u679c\u7684\u8fc7\u7a0b\u3002\u5f80\u5f80\u505a\u7684\u65f6\u5019\u989d\u5916\u6d88\u8017\u4e86\u4e00\u4e9b\u7cbe\u529b\uff0c\u4f46\u5728\u672a\u6765\u6216\u662f\u65f6\u95f4\u7d27\u6025\u7684\u65f6\u5019\uff0c\u4e4b\u524d\u6295\u5165\u7684\u56de\u62a5\u7387\u4f1a\u5f88\u9ad8\u3002\u6bd4\u5982\uff1a\n \u5728 Commit Messages \u4e0a\u7cbe\u786e\u5730\u6982\u62ec\u6539\u52a8\u7684\u5185\u5bb9\uff0c\u9644\u4e0a\u76f8\u5173\u7684 Issue \u94fe\u63a5\u3001\u53c2\u8003\u8d44\u6599\u3002\u5f53\u51e0\u4e2a\u6708\u540e\u6211\u56de\u5fc6\u8d77\u76f8\u5173\u95ee\u9898\u65f6\uff0c\u80fd\u591f\u5feb\u901f\u5b9a\u4f4d\u76f8\u5173 Commit\uff0c\u4e14\u6709\u8bc1\u636e\u8bc1\u660e\u5f53\u65f6\u4e3a\u4ec0\u4e48\u8981\u8fd9\u4e48\u505a\u3002 \u53d1\u751f\u751f\u4ea7\u73af\u5883\u4e8b\u6545\u540e\uff0c\u590d\u76d8\u5e76\u603b\u7ed3\u8c03\u67e5\u62a5\u544a\u3002\u4e8b\u6545\u7684\u53d1\u751f\u5f80\u5f80\u4e0d\u662f\u5355\u4e00\u539f\u56e0\u9020\u6210\u7684\uff0c\u6211\u7684\u8bb0\u5fc6\u4e0d\u8db3\u4ee5\u652f\u6491\u6211\u8bb0\u4f4f\u66fe\u7ecf\u4e8b\u6545\u7684\u5168\u8fc7\u7a0b\uff0c\u6211\u9009\u62e9\u5c06\u5b83\u4eec\u8bb0\u4e0b\u6765\u3002 \u9664\u4e86\u5907\u4efd\uff0c\u8fd8\u8981\u505a\u597d\u6f14\u7ec3\uff0c\u7f16\u5199\u6210\u6587\u6863\u3002\u9700\u8981\u7d27\u6025\u6062\u590d\u73af\u5883\u65f6\uff0c\u6bcf\u5206\u6bcf\u79d2\u90fd\u975e\u5e38\u5b9d\u8d35\uff0c\u6709\u4e00\u4efd\u81ea\u5df1\u6f14\u7ec3\u603b\u7ed3\u800c\u6210\u7684\u3001\u80fd\u591f\u7acb\u523b\u53c2\u8003\u7684\u6587\u6863\u53ef\u4ee5\u8282\u7701\u5927\u91cf\u65f6\u95f4\u3002 \u7ed3\u8bed \u6211\u5f88\u559c\u6b22\u770b\u300a\u7a7a\u4e2d\u6d69\u52ab\u300b\u3002\u6211\u8ba4\u4e3a\uff0c\u67d0\u79cd\u610f\u4e49\u4e0a\u6765\u8bf4\uff0cDevOps \u5de5\u7a0b\u5e08\u7684\u89d2\u8272\u548c\u98de\u884c\u5458\u6709\u76f8\u4f3c\u4e4b\u5904 \u2014 \u9700\u8981\u901a\u8fc7\u300c\u7f16\u6392\u300d\u8ba9\u6574\u67b6\u98de\u673a\u987a\u5229\u8d77\u98de\uff0c\u9700\u8981\u63a5\u53d7\u5927\u91cf\u4fe1\u606f\u8f93\u5165\uff0c\u9700\u8981\u4e0e\u591a\u540d\u540c\u4e8b\u5bc6\u5207\u6c9f\u901a\u3001\u534f\u4f5c\uff0c\u9700\u8981\u5728\u6781\u77ed\u7684\u65f6\u95f4\u5185\u300c\u62ef\u6551\u300d\u6545\u969c\u7684\u98de\u673a\u3002\n\u6211\u70ed\u7231\u8fd9\u4efd\u5de5\u4f5c\uff0c\u76f8\u4fe1 2021 \u5e74\uff0c\u6211\u4f9d\u7136\u80fd\u591f\u505a\u4e00\u540d\u4f18\u79c0\u7684 DevOps \u5de5\u7a0b\u5e08\uff0c\u7ee7\u7eed\u5b88\u62a4\u98de\u673a\u5e73\u7a33\u822a\u884c\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/my-work-skills-2021\/","summary":" 2020 \u5e74\u8f6c\u773c\u7ed3\u675f\u4e86\uff0c\u672c\u60f3\u5199\u5e74\u7ec8\u603b\u7ed3\u548c\u65b0\u5e74\u8ba1\u5212\uff0c\u5374\u53d1\u73b0 2020 \u5e74\u9664\u4e86\u6280\u672f\u8fdb\u6b65\uff0c\u8fd8\u603b\u7ed3\u4e86\u4e0d\u5c11\u6211\u81ea\u5df1\u7684\u300c\u5de5\u4f5c\u6280\u5de7\u300d\uff0c\u6216\u8005\u4e5f\u53ef\u4ee5\u53eb\u505a\u300c\u5de5\u4f5c\u5b88\u5219\u300d\u3002\u6211\u9075\u5faa\u7740\u8fd9\u4e9b\u5b9e\u8df5\u4e2d\u603b\u7ed3\u51fa\u6765\u7684\u65b9\u6cd5\u5de5\u4f5c\uff0c\u4e3a\u6211\u81ea\u5df1\u4ee5\u53ca\u6211\u6240\u5728\u7684\u5c97\u4f4d\uff0c\u5e26\u6765\u4e86\u4e0d\u5c0f\u7684\u65f6\u95f4\u6548\u76ca\u548c\u7ecf\u6d4e\u6548\u76ca\u3002<\/p>\n \u5f53\u7136\uff0c\u9002\u5408\u81ea\u5df1\u7684\u624d\u662f\u6700\u597d\u7684\uff0c\u6211\u4e0d\u559c\u6b22\u4e00\u5473\u6a21\u4eff\u5176\u5b83\u4eba\uff0c\u5e0c\u671b\u4f60\u4e5f\u5e26\u7740\u8fd9\u79cd\u60f3\u6cd5\u8bfb\u8fd9\u7bc7\u535a\u5ba2\u3002<\/p>","title":"\u6211\u7684\u5de5\u4f5c\u65b9\u6cd5"},{"content":"\u8fd9\u51e0\u5929\u60f3\u7ed9\u5bb6\u91cc\u4e0a\u300c\u53cc\u7f51\u300d\uff0c\u4f46\u5f31\u7535\u7bb1\u53ea\u6709\u4e00\u6839\u5149\u7ea4\uff0c\u6240\u4ee5\u65e0\u6cd5\u62c9\u53cc\u7ebf\u3002\u6b63\u597d\u624b\u4e0a\u6709\u4e00\u4e2a \u534e\u4e3a 5G \u968f\u8eab Wi-Fi Pro\uff0c\u5e72\u8106\u7528\u5b83\u6765\u505a Failover\uff08\u6545\u969c\u8f6c\u79fb\uff09\u5427\u3002\n\u76ee\u6807 \u76ee\u6807\u7f51\u7edc\u62d3\u6251\u5927\u6982\u662f\u8fd9\u6837\uff1a\n+-------------+ +-----------+ | Fiber Modem | | 5G Dongle | +----+--------+ +--------+--+ | | Ethernet USB Cable | | | | | | | +----ESXi Host----+ | | | | | +-->+ OpenWrt VM +<-+ | ... Other VMs | | | +-----------------+ \u8ba1\u5212 \u628a 5G Dongle \u6302\u8f7d\u5230 OpenWrt VM \u7684 USB Controller\uff0c\u6216\u8005\u628a\u4e3b\u677f\u4e0a\u7684 USB Controller \u76f4\u901a\u8fdb OpenWrt VM\u3002 \u5728 OpenWrt \u5b89\u88c5 usb-modeswitch \u7528\u4e8e\u628a CDROM Mode \u5207\u6362\u5230 Tethering Mode\u3002 \u5728 OpenWrt \u5b89\u88c5 USB Tethering \u76f8\u5173\u7684\u8f6f\u4ef6\u5305\uff0c\u5e76\u521b\u5efa\u4e00\u4e2a\u65b0\u7684\u63a5\u53e3\uff0c\u548c Tethering \u7684\u7269\u7406\u63a5\u53e3\u6865\u63a5\u3002 \u4f7f\u7528 mwan3 \u4e4b\u7c7b\u7684\u5de5\u5177\u5b9e\u73b0 Failover \u81ea\u52a8\u5207\u6362\u3002 ESXi \u76f4\u901a USB Controller \u5728\u5f00\u59cb\u4e4b\u524d\uff0c\u6211\u5148\u8bd5\u4e86\u4e0b\u628a 5G Dongle \u76f4\u63a5\u63d2 ESXi \u7269\u7406\u673a\uff0c\u9ed8\u8ba4\u5e94\u8be5\u4e3a CDROM \u6a21\u5f0f\uff0c\u679c\u4e0d\u5176\u7136\u5728 ESXi \u63a7\u5236\u53f0\u53d1\u73b0\u5b83\u88ab\u8bc6\u522b\u4e3a Storage\u3002\u4e3a\u4e86\u517c\u5bb9\u6027\uff0c\u518d\u52a0\u4e0a\u4e0d\u60f3\u6df1\u5165 ESXi\uff08\u6253\u7b97\u540e\u671f\u6362 PVE\uff09\uff0c\u5e72\u8106\u7b80\u5355\u70b9 \u2014 \u76f4\u901a\u4e3b\u677f\u4e0a\u7684 USB Controller\u3002\n \u767b\u5f55 ESXi web console\uff0c\u5728\u5de6\u4fa7\u83dc\u5355\u4f9d\u6b21\u8fdb\u5165 Host -> Manage -> Hardware -> PCI Devices\uff0c\u9009\u4e2d\u4f60\u7684 USB Controller\uff0c\u8bb0\u4f4f\u4e0b\u65b9\u7684 Device ID \u548c Vendor ID\u3002 SSH \u767b\u5f55 ESXi\uff0c\u4fee\u6539 \/etc\/vmware\/passthru.map \u6587\u4ef6\uff0c\u65b0\u589e\u4ee5\u4e0b\u51e0\u884c\uff1a\n# Intel Corporation Sunrise Point-LP USB 3.0 xHCI Controller 8086 9d2f d3d0 false \u5176\u4e2d\uff0c8086 \u662f Vendor ID\uff0c9d2f \u662f Device ID\uff0c\u968f\u540e\u4e24\u9879\u56fa\u5b9a\u3002\n \u91cd\u542f ESXi Host\uff0c\u518d\u6b21\u767b\u5f55 web console \u5e76\u627e\u5230 USB Controller\uff0c\u70b9\u51fb\u4e0a\u65b9 Toggle passthrough \u6309\u94ae\u3002\u518d\u6b21\u91cd\u542f ESXi Host\uff0c\u786e\u8ba4\u53f3\u4fa7 Passthrough \u4e00\u680f\u4e3a Active \u5373\u53ef\u3002 \u5173\u673a OpenWrt VM\uff0c\u5e76\u65b0\u589e PCI Device\uff0c\u9009\u62e9\u4f60\u7684 USB Controller\u3002 \u4fee\u6539 VM \u7684\u5185\u5b58\u914d\u7f6e\uff0c\u5c06 Reservation \u4e0e RAM \u4fdd\u6301\u4e00\u81f4\uff08\u9009\u4e2d Reserve all guest memory (All locked)\uff09\u3002 \u628a 5G Dongle \u901a\u8fc7 USB \u63a5\u5165 ESXi Host\uff0c\u542f\u52a8 OpenWrt VM\u3002\n \u5b89\u88c5 usb-modeswitch SSH \u767b\u5f55 OpenWrt\uff0c\u6267\u884c\uff1a\nopkg update opkg install usbutils usb-modeswitch \u91cd\u65b0\u63d2\u62d4 5G Dongle\uff0c\u6216\u8005\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\u91cd\u542f usbmode \u670d\u52a1\uff1a\nservice usbmode restart \u6267\u884c lsusb\uff0c\u5e94\u5f53\u80fd\u770b\u5230\u534e\u4e3a 5G \u968f\u8eab Wi-Fi \u7684\u5f71\u5b50\u4e86\uff1a\n... Bus 006 Device 002: ID 12d1:14db Huawei Technologies Co., Ltd. E353\/E3131 ... \u6ce8\u610f\u6b64\u884c\u7ed3\u5c3e\u6ca1\u6709 (Mass storage mode) \u4e4b\u7c7b\u7684\u5b57\u6837\uff0c\u8bf4\u660e usb-modeswitch \u6210\u529f\u5c06\u8bbe\u5907\u5207\u6362\u5230 Tethering \u6a21\u5f0f\u4e86\u3002\n \u5b89\u88c5 USB Tethering \u9700\u8981\u7684\u8f6f\u4ef6\u5305 opkg install kmod-nls-base kmod-usb-core kmod-usb-net kmod-usb-net-rndis kmod-usb-net-cdc-ether kmod-usb2 kmod-usb3 \u521b\u5efa\u6865\u63a5\u7f51\u7edc\u63a5\u53e3 \u5982\u56fe\uff0c\u521b\u5efa\u65b0\u7684 Interface\uff0c\u6865\u63a5\u5230 eth3\uff08\u56e0\u4eba\u800c\u5f02\uff09\uff0c\u70b9\u51fb Create Interface\u3002 \u5207\u6362\u5230 Firewall Settings \u6807\u7b7e\u9875\uff0c\u5206\u914d Firewall-zone wan\u3002 \u5b89\u88c5 mwan3 \u5b9e\u73b0 Failover opkg install mwan3 luci-app-mwan3 luci-i18n-mwan3-zh-cn \u6700\u540e\uff0c\u901a\u8fc7 LuCI \u6216\u662f\u76f4\u63a5\u4fee\u6539\u914d\u7f6e\u6587\u4ef6 \/etc\/config\/mwan3 \u5747\u53ef\uff0c\u4f8b\u5982\u6211\u7684\u914d\u7f6e\u6587\u4ef6\u5982\u4e0b\uff1a\nconfig globals 'globals' option mmx_mask '0x3F00' option rtmon_interval '5' config interface 'wan' option enabled '1' option family 'ipv4' option count '1' option timeout '2' option interval '5' option down '3' option up '8' option initial_state 'online' option track_method 'ping' option size '56' option max_ttl '60' option check_quality '0' option failure_interval '5' option recovery_interval '5' option reliability '2' list track_ip '218.2.2.2' list track_ip '119.29.29.29' list track_ip '223.5.5.5' list track_ip '114.114.114.114' config interface 'wanb' option family 'ipv4' option count '1' option timeout '2' option interval '5' option down '3' option up '8' option initial_state 'online' option track_method 'ping' option size '56' option max_ttl '60' option check_quality '0' option failure_interval '5' option recovery_interval '5' option enabled '1' list track_ip '218.2.2.2' list track_ip '119.29.29.29' list track_ip '223.5.5.5' list track_ip '114.114.114.114' option reliability '2' config member 'wan_m1_w3' option interface 'wan' option metric '1' option weight '3' config member 'wan_m2_w3' option interface 'wan' option metric '2' option weight '3' config member 'wanb_m1_w2' option interface 'wanb' option metric '1' option weight '2' config member 'wanb_m2_w2' option interface 'wanb' option metric '2' option weight '2' config policy 'wan_only' list use_member 'wan_m1_w3' list use_member 'wan6_m1_w3' config policy 'wanb_only' list use_member 'wanb_m1_w2' list use_member 'wanb6_m1_w2' config policy 'balanced' list use_member 'wan_m1_w3' list use_member 'wanb_m1_w2' list use_member 'wan6_m1_w3' list use_member 'wanb6_m1_w2' config policy 'wan_wanb' list use_member 'wan_m1_w3' list use_member 'wanb_m2_w2' list use_member 'wan6_m1_w3' list use_member 'wanb6_m2_w2' config policy 'wanb_wan' list use_member 'wan_m2_w3' list use_member 'wanb_m1_w2' list use_member 'wan6_m2_w3' list use_member 'wanb6_m1_w2' config rule 'default_rule_v4' option dest_ip '0.0.0.0\/0' option family 'ipv4' option proto 'all' option sticky '0' option use_policy 'failover' config rule 'default_rule_v6' option dest_ip '::\/0' option family 'ipv6' option proto 'all' option sticky '0' option use_policy 'default' config policy 'failover' list use_member 'wan_m1_w3' list use_member 'wanb_m2_w2' option last_resort 'unreachable' \u53c2\u8003\u6587\u732e https:\/\/lx-soft.net\/archives\/242 https:\/\/openwrt.org\/docs\/guide-user\/network\/wan\/wwan\/3gdongle https:\/\/openwrt.org\/docs\/guide-user\/storage\/usb-installing https:\/\/openwrt.org\/docs\/guide-user\/network\/wan\/smartphone.usb.tethering ","permalink":"https:\/\/wi1dcard.dev\/posts\/huawei-5g-dongle-usb-tethering-with-openwrt-in-esxi\/","summary":" \u8fd9\u51e0\u5929\u60f3\u7ed9\u5bb6\u91cc\u4e0a\u300c\u53cc\u7f51\u300d\uff0c\u4f46\u5f31\u7535\u7bb1\u53ea\u6709\u4e00\u6839\u5149\u7ea4\uff0c\u6240\u4ee5\u65e0\u6cd5\u62c9\u53cc\u7ebf\u3002\u6b63\u597d\u624b\u4e0a\u6709\u4e00\u4e2a \u534e\u4e3a 5G \u968f\u8eab Wi-Fi Pro<\/a>\uff0c\u5e72\u8106\u7528\u5b83\u6765\u505a Failover\uff08\u6545\u969c\u8f6c\u79fb\uff09\u5427\u3002<\/p>","title":"ESXi OpenWrt \u4f7f\u7528\u534e\u4e3a\u968f\u8eab Wi-Fi \u5b9e\u73b0 WAN \u6545\u969c\u8f6c\u79fb"},{"content":"\u591a\u4e8f\u4e86 prometheus-webhook-dingtalk \u9879\u76ee\uff0cAlertmanager \u96c6\u6210\u9489\u9489\u6d88\u606f\u901a\u77e5\u5f97\u4ee5\u5b9e\u73b0\u3002\u5728\u5b9e\u9645\u4f7f\u7528\u8fc7\u7a0b\u4e2d\uff0c\u6211\u53d1\u73b0\u4e86\u4e00\u4e9b\u53ef\u4ee5\u6539\u8fdb\u7684\u914d\u7f6e\uff0c\u4f8b\u5982\u901a\u77e5\u6d88\u606f\u6a21\u677f\u53ef\u4ee5\u66f4\u52a0\u6e05\u6670\u7b80\u6d01\u3001\u53ef\u4ee5\u6839\u636e\u4e0d\u540c\u7684\u62a5\u8b66\u4f18\u5148\u7ea7\u51b3\u5b9a\u662f\u5426 Mention \u67d0\u4eba\u7b49\u3002\n\u6539\u8fdb\u901a\u77e5\u6a21\u677f \u6539\u8fdb\u524d\uff1a\n\u6539\u8fdb\u540e\uff1a\n\u5177\u4f53\u6a21\u677f\uff08\/config\/example.tmpl\uff09\uff1a\n{{\/* Alert List Begin *\/}} {{ define "example.__text_alert_list" }}{{ range . }} **{{ .Annotations.message }}** [Prometheus]({{ .GeneratorURL }}) | [Alertmanager](https:\/\/alertmanager.example.com\/#\/alerts) | [Grafana](https:\/\/grafana.example.com\/dashboards) {{ range .Labels.SortedPairs }}> - {{ .Name }}: {{ .Value | markdown | html }} {{ end }} {{ end }}{{ end }} {{\/* Alert List End *\/}} {{\/* Message Title Begin *\/}} {{ define "example.title" }}{{ template "__subject" . }}{{ end }} {{\/* Message Title End *\/}} {{\/* Message Content Begin *\/}} {{ define "example.content" }} ### \\[{{ index .GroupLabels "priority" }}\\] [{{ index .GroupLabels "alertname" }}](https:\/\/example.app.opsgenie.com\/alert\/list) {{ if gt (len .Alerts.Firing) 0 -}} {{ template "example.__text_alert_list" .Alerts.Firing }} {{- end }} {{ if gt (len .Alerts.Resolved) 0 -}} {{ template "example.__text_alert_list" .Alerts.Resolved }} {{- end }} {{- end }} {{\/* Message Content End *\/}} prometheus-webhook-dingtalk \u914d\u7f6e\uff1a\ntemplates: - \/config\/example.tmpl # \u6a21\u677f\u8def\u5f84 targets: general: url: https:\/\/oapi.dingtalk.com\/robot\/send?access_token=... secret: ... message: title: '{{ template "example.title" . }}' # \u6e32\u67d3\u81ea\u5b9a\u4e49\u6a21\u677f text: '{{ template "example.content" . }}' # \u6e32\u67d3\u81ea\u5b9a\u4e49\u6a21\u677f Mention \u6d77\u5916\u53f7\u7801 \u8bf7\u770b PR #119 \u6216\u4e0b\u9762\u7684\u4f8b\u5b50\u3002\n\u9009\u62e9\u6027 Mention \u67d0\u4eba \u9996\u5148\u914d\u7f6e\u4e24\u4e2a targets\uff0c\u524d\u8005\u76f4\u63a5\u6e32\u67d3\u6a21\u677f\uff0c\u540e\u8005\u6a21\u677f\u4e2d\u518d\u6dfb\u52a0\u4e00\u884c ###### @\u624b\u673a\u53f7\uff08\u663e\u793a\u6548\u679c\u53ef\u4ee5\u53c2\u8003\u6587\u7ae0\u5f00\u5934\u7684\u56fe\u7247\uff09\uff1a\ntargets: general: &target_base url: https:\/\/oapi.dingtalk.com\/robot\/send?access_token=... secret: ... message: title: '{{ template "example.title" . }}' text: '{{ template "example.content" . }}' critical: <<: *target_base mention: # \u6b64\u5904\u5fc5\u987b\u58f0\u660e Mention \u7684\u53f7\u7801... mobiles: ["+1-1234567890", "18800001111"] message: text: |###### @+1-1234567890 @18800001111 {{ template "example.content" . }} \u968f\u540e\u5728 Alertmanager \u914d\u7f6e\u4e24\u4e2a\u5206\u522b\u5bf9\u5e94\u7684 receivers\uff0c\u4ee5\u53ca\u591a\u6761 routes \u5373\u53ef\uff1a\nroute: group_by: ["priority", "alertname"] receiver: general routes: - match_re: priority: P1 receiver: critical receivers: - name: general webhook_configs: - &dingtalk_config send_resolved: false url: http:\/\/alertmanager-webhook-dingtalk\/dingtalk\/general\/send - name: critical webhook_configs: - <<: *dingtalk_config url: http:\/\/alertmanager-webhook-dingtalk\/dingtalk\/critical\/send ","permalink":"https:\/\/wi1dcard.dev\/posts\/alertmanager-dingtalk-integration-tips\/","summary":" \u591a\u4e8f\u4e86 prometheus-webhook-dingtalk<\/a> \u9879\u76ee\uff0cAlertmanager \u96c6\u6210\u9489\u9489\u6d88\u606f\u901a\u77e5\u5f97\u4ee5\u5b9e\u73b0\u3002\u5728\u5b9e\u9645\u4f7f\u7528\u8fc7\u7a0b\u4e2d\uff0c\u6211\u53d1\u73b0\u4e86\u4e00\u4e9b\u53ef\u4ee5\u6539\u8fdb\u7684\u914d\u7f6e\uff0c\u4f8b\u5982\u901a\u77e5\u6d88\u606f\u6a21\u677f\u53ef\u4ee5\u66f4\u52a0\u6e05\u6670\u7b80\u6d01\u3001\u53ef\u4ee5\u6839\u636e\u4e0d\u540c\u7684\u62a5\u8b66\u4f18\u5148\u7ea7\u51b3\u5b9a\u662f\u5426 Mention \u67d0\u4eba\u7b49\u3002<\/p>","title":"\u6539\u8fdb Alertmanager \u7684\u9489\u9489\u901a\u77e5"},{"content":"In kubernetes-mixin (a dependency of kube-prometheus-stack and prometheus-operator charts) rules, the severity label of alrets can be critical, warning, or info etc. However, OpsGenie’s priority field only accepts values like P1, P2 … P5.\nAs a user of both of them, I would have to convert the “severity” to OpsGenie’s “priority”. For example, if a critical alert was fired, a matched P1 alert to be created in OpsGenie is expected, and warning -> P2, info -> P3, as well.\nWe can use go-template in receivers.*.opsgenie_configs.*.priority of Alertmanager’s config to generate the priority. However it will finnally end with something like:\npriority: >-{{ with .GroupLabels.priority }} {{ if eq . "critical" }} P1 {{ else if eq . "warning" }} P2 {{ else if ... }} ... {{ end }} That’s a bit hard to maintain or debug, and I personnaly don’t really like to write tons of go-templates in a short config file, it should be much clearer. Therefore, I prefer the second way - use the relabel_config in Prometheus, instead of doing this in Alertmanager.\nIf you’re using kube-prometheus-stack (formerly known as prometheus-operator chart), just add these configs in prometheus.prometheusSpec.additionalAlertRelabelConfigs:\nadditionalAlertRelabelConfigs: - source_labels: [severity] target_label: priority regex: "none" # Seem only the WatchDog alert has "none" severity replacement: "P5" - source_labels: [severity] target_label: priority regex: "info" replacement: "P3" - source_labels: [severity] target_label: priority regex: "warning" replacement: "P2" - source_labels: [severity] target_label: priority regex: "critical" replacement: "P1" And use the grouped label in Alertmanager’s priority field:\npriority: {{ .GroupLabels.priority }} These relabel configs will apply to alerts only, add the priority label according to the value of severity. This also makes it easier to debug - if the alert priority in your OpsGenie dashboard is not correct, just go check out Alertmanager’s dashboard, it shows directly the labels of the alerts included priority sent from Prometheus! But if we made a lot of logic in Alertmanager’s go-template, I can’t seem to find a simple way to get the value of the rendered results in Alertmanager’s templating context.\nFor more information about alert_relabel_configs, please check out Prometheus official docs.\n","permalink":"https:\/\/wi1dcard.dev\/posts\/prometheus-severity-label-to-opsgenie-priority\/","summary":" In kubernetes-mixin<\/a> (a dependency of kube-prometheus-stack<\/a> and prometheus-operator<\/a> charts) rules, the severity label of alrets can be As a user of both of them, I would have to convert the “severity” to OpsGenie’s “priority”. For example, if a \u4e00\u822c\u6765\u8bf4\uff0c\u76d1\u63a7 Substrate \u6846\u67b6\u5f00\u53d1\u7684\u533a\u5757\u94fe\u8282\u70b9\uff0c\u53ef\u4ee5\u4f7f\u7528\u5b98\u65b9\u63a8\u8350\u7684 Prometheus + Grafana \u6280\u672f\u6808\u3002\u5728\u8282\u70b9\u6570\u91cf\u6bd4\u8f83\u591a\u7684\u60c5\u51b5\u4e0b\uff0c\u8fd9\u5957\u65b9\u6848\u7684\u4f18\u52bf\u6bd4\u8f83\u5bb9\u6613\u4f53\u73b0\u51fa\u6765\uff0c\u6211\u7ed9\u516c\u53f8\u7684\u5b98\u65b9\u8282\u70b9\u4e5f\u662f\u8fd9\u4e48\u914d\u7684\u3002\u4e0d\u8fc7\u8fd1\u671f Darwinia \u4e3b\u7f51\u4e0a\u7ebf\uff0c\u6709\u4e0d\u5c11\u540c\u4e8b\u60f3\u8981\u8dd1\u81ea\u5df1\u7684\u9a8c\u8bc1\u4eba\uff08 \u4e3a\u4e86\u89e3\u51b3\u4ee5\u4e0a\u8fd9\u4e24\u4e2a\u95ee\u9898\uff0c\u6211\u641e\u4e86\u4e00\u5957\u975e\u5e38\u7b80\u6613\u7684\u3001\u57fa\u4e8e\u65e5\u5fd7\u7684\u76d1\u63a7\u9884\u8b66\u65b9\u6cd5\u3002<\/p>","title":"\u8d85\u7b80\u5355\uff01\u57fa\u4e8e\u65e5\u5fd7\u7684 Darwinia \u9a8c\u8bc1\u4eba\u8282\u70b9\u76d1\u63a7\u9884\u8b66"},{"content":"\u963f\u91cc\u4e91\u6536\u8d2d\u4e07\u7f51\u4e4b\u540e\uff0c\u51e0\u4e4e\u4e0d\u8d5a\u94b1\u7684\u90ae\u4ef6\u670d\u52a1\u8fd8\u771f\u662f\u4e0d\u7ef4\u62a4\u4e0d\u8fed\u4ee3\u4e86 \u2014 \u4e0d\u652f\u6301 DKIM\uff0c\u6ca1\u6cd5\u914d DMARC\uff0c\u5c31\u8fde SMTP \u4e5f\u4e0d\u652f\u6301 STARTTLS 587 \u7aef\u53e3\u3002\n# ... receivers: - name: email email_configs: - send_resolved: true to: name@yourcompany.com from: name@yourcompany.com # \u2b07 REQUIRED smarthost: smtp.qiye.aliyun.com:465 require_tls: false hello: yourcompany.com # \u2b06 REQUIRED auth_username: name@yourcompany.com auth_identity: name@yourcompany.com auth_password: ... Reference https:\/\/github.com\/prometheus\/alertmanager\/issues\/980\uff08\u96be\u4ee5\u5165\u76ee\u7684\u82f1\u6587\uff09 http:\/\/mailhelp.mxhichina.com\/smartmail\/detail.vm?knoId=5871700 ","permalink":"https:\/\/wi1dcard.dev\/posts\/alertmanager-smtp-setup-for-alibaba-mail-service\/","summary":" \u963f\u91cc\u4e91\u6536\u8d2d\u4e07\u7f51\u4e4b\u540e\uff0c\u51e0\u4e4e\u4e0d\u8d5a\u94b1\u7684\u90ae\u4ef6\u670d\u52a1\u8fd8\u771f\u662f\u4e0d\u7ef4\u62a4\u4e0d\u8fed\u4ee3\u4e86 \u2014 \u4e0d\u652f\u6301 DKIM\uff0c\u6ca1\u6cd5\u914d DMARC\uff0c\u5c31\u8fde SMTP \u4e5f\u4e0d\u652f\u6301 STARTTLS 587 \u7aef\u53e3\u3002<\/p>","title":"Alertmanager \u901a\u8fc7\u963f\u91cc\u4e91\u4f01\u4e1a\u90ae\u4ef6 SMTP \u670d\u52a1\u53d1\u4fe1"},{"content":"While I deploying v2ray-exporter with Kustomize, I realized that commonLabels in kustomization.yaml doesn’t take care of the spec.selector.matchLabels field in ServiceMonitors. That makes sense, as ServiceMonitor is a part of CoreOS’s Prometheus Operator project, neither included nor maintained by Kubernetes. But how can we direct Kustomize to fill the labels in ServiceMonitors or even any fields in customized resources?\nTL;DR kustomization.yaml:\napiVersion: kustomize.config.k8s.io\/v1beta1 kind: Kustomization resources: - servicemonitor.yaml # ... configurations: - ..\/kustomize-configurations\/servicemonitor-matchlabels.yaml commonLabels: app: example-exporter ..\/kustomize-configurations\/servicemonitor-matchlabels.yaml:\ncommonLabels: - path: spec\/selector\/matchLabels create: true group: monitoring.coreos.com kind: ServiceMonitor It seems to me really easy to get confused with commonLabels in Kustomize configuration files or kustomization.yaml. The name commonLabels exists in both of them, but the definitions are totally different.\nservicemonitor.yaml:\napiVersion: monitoring.coreos.com\/v1 kind: ServiceMonitor metadata: name: example-exporter spec: endpoints: - port: http path: \/scrape Results:\napiVersion: monitoring.coreos.com\/v1 kind: ServiceMonitor metadata: labels: app: example-exporter # <-- Here commonLabels originally handles name: example-exporter spec: endpoints: - path: \/scrape port: http selector: matchLabels: app: example-exporter # <-- Here we added labels from commonLabels References https:\/\/kubectl.docs.kubernetes.io\/pages\/reference\/kustomize.html#configurations ","permalink":"https:\/\/wi1dcard.dev\/posts\/integrate-servicemonitor-matchlabels-with-kustomize-commonlabels\/","summary":" While I deploying v2ray-exporter<\/a> with Kustomize<\/a>, I realized that The official doc of OpenWrt on VMware HowTo<\/a> seems already outdated, and there’s no explaination of how to fix \u6700\u8fd1\u5728\u63a2\u7d22\u300c\u5982\u4f55\u53d1\u5e03 NPM \u5305\u300d\u7684\u8fc7\u7a0b\u4e2d\uff0c\u53d1\u73b0\u591a\u6570\u4eba\u7684\u601d\u8def\u8981\u4e48\u5b8c\u5168\u4e0d\u7528 CI\uff0c\u4fee\u6539 \u4e0d\u8fc7\u7ecf\u8fc7\u4e00\u756a\u7814\u7a76\uff0c\u6211\u8fd8\u662f\u627e\u5230\u4e86\u4e24\u79cd\u6bd4\u8f83\u300c\u5e72\u51c0\u300d\u7684\u601d\u8def\uff0c\u6765\u770b\u770b\u5427\u3002<\/p>","title":"\u4f7f\u7528 Git Tag \u548c CI \u5e72\u51c0\u5730\u53d1\u5e03 NPM \u5305"},{"content":"As you probably heard Terraform before, it’s a great DevOps tool that can help you build your infrastructures with configurations and codes, aka Infrastructure as Code.\nTerraform has a bunch of great integrations with cloud platforms, some of them are maintained by Terraform official, such as Azure provider and AWS provider. However, Alibaba Cloud (which is the biggest public cloud company in China mainland) provider is created and maintained by alibaba itself so far. Lack of quick start guide and documentation makes it a little bit hard to get started with.\nTherefore, this blog here might help you take a quick tour of Alibaba Cloud provider and launch an instance from zero with the VPC, switches and security groups along. I’ll list the reference docs I can find as much as possible. Let’s begin!\nPreparation Create main.tf to store your infra config files in any directory you prefer. However, I recommend placing the file in a git repo.\nterraform {# Terraform related configs backend "local" {# We use local backend to keep it simple path = "terraform.tfstate"# The file where the Terraform states stores in } } provider "alicloud" {# Here you can find the "Region ID": https:\/\/www.alibabacloud.com\/help\/doc-detail\/40654.htm region = "cn-beijing"# How to create a pair of access_key and secret_key: https:\/\/www.alibabacloud.com\/help\/doc-detail\/53045.htm access_key = "..." secret_key = "..." }# Some useful variables to reduce copy-paste, you can add whatever you like locals { prefix = "foo" domain = "wi1dcard.dev" hostname = "${local.prefix}.${local.domain}" zone = "cn-beijing-h" } Network Setup Before creating an ECS instance, let’s have a look at the network related resources.\nresource "alicloud_vpc" "default" {# Here we used the variables in the `locals` section above name = local.prefix# Set the CIDR for this VPC cidr_block = "192.168.200.0\/24" } resource "alicloud_vswitch" "default" {# Use the VPC's ID vpc_id = alicloud_vpc.default.id# Set the CIDR for this switch, must be in the CIDR of the VPC cidr_block = "192.168.200.0\/24"# As the VPC is a region-specified resource, switches are for zones availability_zone = local.zone } The VPC and switches are both necessary, Alibaba Cloud doesn’t allow you to create an instance without the private network and the instance must be connected to a switch.\nYou can also set up more switches, if you’d like to have your instances across multiple zones.\nThe next step is to create the security group and its rules in order to allow public network access.\nresource "alicloud_security_group" "default" { name = local.prefix vpc_id = alicloud_vpc.default.id# Allow instances in the same security group reaching each other inner_access_policy = "Accept" } resource "alicloud_security_group_rule" "allow_ssh" {# Refer the security group ID security_group_id = alicloud_security_group.default.id type = "ingress" ip_protocol = "tcp"# Since the security group is for using in the VPC, you need to set it to intranet: https:\/\/www.terraform.io\/docs\/providers\/alicloud\/r\/security_group_rule.html nic_type = "intranet" policy = "accept" cidr_ip = "0.0.0.0\/0" port_range = "22\/22" } resource "alicloud_security_group_rule" "allow_icmp" { security_group_id = alicloud_security_group.default.id type = "ingress" ip_protocol = "icmp" nic_type = "intranet" policy = "accept" cidr_ip = "0.0.0.0\/0" } Here I had 1 security group and 2 security group rules. I usually bind only one security group to every instance. However, it’s okay if you bind multiple ones.\nSSH Authentication Setup To enable you logging in the instances you’ve launched with SSH, we’d have to create an SSH key pair, or you will need to go to the web console and reset the root password.\nresource "alicloud_key_pair" "default" { key_name = local.prefix public_key = "ssh-rsa ... wi1dcard@wi1dcard.dev" } To be noticed, both the key pairs along with other resources we just created are region-specified. if you changed the default region setting in the provider "alicloud" section, it is required to recreate the resources:\nprovider "alicloud" { region = "cn-shanghai"# For example, if you changed your primary region to Shanghai } ECS Instance resource "alicloud_instance" "default" {# You can enable `dry_run` and run `terraform apply` to call the Alibaba Cloud API but not really create an instance dry_run = false instance_name = local.hostname# Refer to local variables host_name = local.hostname key_name = alicloud_key_pair.default.key_name# Refer to the key pair name vswitch_id = alicloud_vswitch.default.id# Refer to the vswitch ID security_groups = [alicloud_security_group.default.id]# The security groups associated to the instance # Check out the whole list of the instance types: https:\/\/www.alibabacloud.com\/help\/doc-detail\/25378.htm # We use the cheapest instance type (I found so far) for testing instance_type = "ecs.s6-c1m1.small" instance_charge_type = "PostPaid"# Of course post paid! credit_specification = "Standard" spot_strategy = "NoSpot"# You can find the image IDs on https:\/\/ecs.console.aliyun.com\/ > Instances & Images > Images > Public Image image_id = "ubuntu_18_04_x64_20G_alibase_20191225.vhd" system_disk_category = "cloud_efficiency" system_disk_size = 20# Disable the useless "security enhancement" features security_enhancement_strategy = "Deactive" internet_max_bandwidth_in = 100 internet_max_bandwidth_out = 100 internet_charge_type = "PayByTraffic"# Of course pay by traffic!! } While the first time I tried to launch an instance, the most significant problem I found is how to find the correct image ID. Fortunately, Alibaba Cloud maintains a CLI tool called <code>aliyun-cli<\/code> (aliyun is the Chinese pinyin of the word alibabacloud) and there’s an API DescribeImage for listing all the images.\nBut it doesn’t work as expected, so far I found 2 issues - it shows no image if I didn’t put in a specific parameter and either the --ImageID or --Filter.n.Key doesn’t support fuzzy matching. That means even though the first issue will get resolved, the later doesn’t allow users to search the image by specifying a keyword like ubuntu.\nWell, just forget about the Aliyun CLI, let’s use web console once and for all though…\nDNS Records (Optional) We’ve got all resources prepared. However, the public IP of the instance could be randomly associated. This means every time you terminate the instance and relaunch a new one, the IP will get changed. Therefore, it’s also recommended to add a DNS record pointing to the instance.\nresource "alicloud_dns_record" "default" { name = local.domain host_record = local.prefix type = "A" ttl = 600 routing = "default"# Refer to the public IP of the instance value = alicloud_instance.default.public_ip } You can also try add an output variable without setting up NS servers.\noutput "public_ip" { value = alicloud_instance.default.public_ip } Apply the plans Time to apply all these configs and plans! All we need to do is:\nterraform apply An execution plan has been generated and is shown below. Resource actions are indicated with the following symbols: + create Terraform will perform the following actions: ... Plan: 9 to add, 0 to change, 0 to destroy. Do you want to perform these actions? Terraform will perform the actions described above. Only 'yes' will be accepted to approve. Enter a value: yes alicloud_vpc.default: Creating... alicloud_key_pair.default: Creating... alicloud_key_pair.default: Creation complete after 1s [id=dummy] alicloud_vpc.default: Creation complete after 8s [id=vpc-2zey1j4f97ftg3zt1n5x6] ... Apply complete! Resources: 9 added, 0 changed, 0 destroyed. The state of your infrastructure has been saved to the path below. This state is required to modify and destroy your infrastructure, so keep it safe. To inspect the complete state use the `terraform show` command. State path: terraform.tfstate Outputs: public_ip = 123.57.**.** That’s all!\nReferences Please see also:\n Alibabcloud - How do I specify images for ECS resources? Terraform Output Command Terraform Alibaba Cloud Provider Documentation ","permalink":"https:\/\/wi1dcard.dev\/posts\/terraform-quick-start-with-alibabacloud\/","summary":" As you probably heard Terraform before, it’s a great DevOps tool that can help you build your infrastructures with configurations and codes, aka Infrastructure as Code.<\/p>\n Terraform has a bunch of great integrations with cloud platforms, some of them are maintained by Terraform official, such as Azure provider and AWS provider. However, Alibaba Cloud (which is the biggest public cloud company in China mainland) provider is created and maintained by alibaba itself so far. Lack of quick start guide and documentation makes it a little bit hard to get started with.<\/p>","title":"Terraform Quick Start with Alibaba Cloud"},{"content":"\u5df2\u53d1\u5e03\u7684 DevOps \u81ea\u52a8\u5316\u5b9e\u8df5 - \u5b9a\u65f6\u4efb\u52a1\u76d1\u63a7\u7684\u8fdb\u5316\u4e4b\u8def \u4e00\u6b21 KubeCPUOvercommit \u544a\u8b66\u6392\u67e5\u8fc7\u7a0b\u5c0f\u8bb0 DevOps \u81ea\u52a8\u5316\u5b9e\u8df5 \u2014 \u5728 K8s \u4e0a\u81ea\u52a8\u5316\u6267\u884c Database Migration \u57fa\u4e8e UniFi \u5168\u5bb6\u6876\u7684\u4f01\u4e1a Wi-Fi \u5ba2\u6237\u7aef\u7ba1\u7406 DevOps \u81ea\u52a8\u5316\u5b9e\u8df5 \u2014 \u7ba1\u7406 Incident \u5de5\u4f5c\u6d41 \u8fc1\u79fb\u81f3\u4e2a\u4eba\u535a\u5ba2\u7684 \u7531\u4e8e\u76f8\u5173\u4eba\u5458\u957f\u671f\u62d6\u5ef6\u5ba1\u7a3f\u3001\u53d1\u7a3f\uff0c\u5c06\u90e8\u5206\u6587\u7ae0\u8fc1\u79fb\u81f3\u4e2a\u4eba\u535a\u5ba2\u53d1\u5e03\u3002\n \u642d\u5efa\u5f02\u6784 CPU \u7ec4\u6210\u7684\u8fb9\u7f18\u8ba1\u7b97 Kubernetes \u96c6\u7fa4 \u8de8\u9879\u76ee GitLab CI \u914d\u7f6e\u590d\u7528\u4e0e\u7ba1\u7406 K8s \u4e0b\u7684\u5e94\u7528\u7ba1\u7406 \u2014 \u4e86\u89e3 Helm K8s \u4e0b\u7684\u5e94\u7528\u7ba1\u7406 \u2014 \u4e86\u89e3 Helmfile K8s \u4e0b\u7684 TLS \u8bc1\u4e66\u7ba1\u7406 \u2014 \u4e86\u89e3 Cert-Manager \u521b\u5efa\u5e76\u7ef4\u62a4\u5546\u4e1a\u9879\u76ee\u7684 Helm Chart \u76d8\u70b9\u4f7f macOS \u5e94\u7528\u6d41\u91cf\u901a\u8fc7\u4ee3\u7406\u7684\u591a\u79cd\u65b9\u5f0f \u5df2\u8fc7\u5ba1\u5f85\u53d1\u5e03\u7684 \u4f7f\u7528 Prometheus \u76d1\u63a7\u7f51\u7edc\u53ef\u7528\u6027 \u6b22\u8fce\u6301\u7eed\u5173\u6ce8 RightCapital \u6280\u672f\u56e2\u961f\u516c\u4f17\u53f7\uff1a\n","permalink":"https:\/\/wi1dcard.dev\/posts\/rightcapital-blog-posts-composed-by-me\/","summary":"\u5df2\u53d1\u5e03\u7684 DevOps \u81ea\u52a8\u5316\u5b9e\u8df5 - \u5b9a\u65f6\u4efb\u52a1\u76d1\u63a7\u7684\u8fdb\u5316\u4e4b\u8def \u4e00\u6b21 KubeCPUOvercommit \u544a\u8b66\u6392\u67e5\u8fc7\u7a0b\u5c0f\u8bb0 DevOps \u81ea\u52a8\u5316\u5b9e\u8df5 \u2014 \u5728 K8s \u4e0a\u81ea\u52a8\u5316\u6267\u884c Database Migration \u57fa\u4e8e UniFi \u5168\u5bb6\u6876\u7684\u4f01\u4e1a Wi-Fi \u5ba2\u6237\u7aef\u7ba1\u7406 DevOps \u81ea\u52a8\u5316\u5b9e\u8df5 \u2014 \u7ba1\u7406 Incident \u5de5\u4f5c\u6d41 \u8fc1\u79fb\u81f3\u4e2a\u4eba\u535a\u5ba2\u7684 \u7531\u4e8e\u76f8\u5173\u4eba\u5458\u957f\u671f\u62d6\u5ef6\u5ba1\u7a3f\u3001\u53d1\u7a3f\uff0c\u5c06\u90e8\u5206\u6587\u7ae0\u8fc1\u79fb\u81f3\u4e2a\u4eba\u535a\u5ba2\u53d1\u5e03\u3002","title":"\u6211\u64b0\u5199\u7684 RightCapital \u6280\u672f\u535a\u5ba2\u6587\u7ae0\u94fe\u63a5"},{"content":"\u5728\u5f00\u53d1\u8fc7\u7a0b\u4e2d\uff0c\u6211\u4eec\u7ecf\u5e38\u9700\u8981\u4f7f\u7528\u5230\u56fd\u5916\u7684\u8d44\u6e90\uff0c\u4f8b\u5982\u5404\u79cd\u5305\u4f9d\u8d56\u7b49\u3002\u56fd\u5185\u76ee\u524d\u6bd4\u8f83\u666e\u904d\u7684\u505a\u6cd5\u662f\u4f7f\u7528\u7531\u77e5\u540d\u7b2c\u4e09\u65b9\u7ef4\u62a4\u7684\u56fd\u5185\u955c\u50cf\u3002\u867d\u7136\u65b9\u4fbf\uff0c\u4f46\u4e5f\u5b58\u5728\u4e00\u4e9b\u65e0\u6cd5\u907f\u514d\u7684\u95ee\u9898\uff0c\u4f8b\u5982\uff1a\n \u955c\u50cf\u53ef\u9760\u6027\u672a\u77e5\uff0c\u51fa\u95ee\u9898\u65f6\u6211\u4eec\u65e0\u80fd\u4e3a\u529b\uff0c\u53ea\u80fd\u7b49\u5f85\u7b2c\u4e09\u65b9\u4fee\u590d\u3002 \u955c\u50cf\u540c\u6b65\u65f6\u95f4\u672a\u77e5\uff0c\u53ef\u80fd\u5b58\u5728\u6570\u636e\u6ede\u540e\u3002 \u5b58\u5728\u5b89\u5168\u9690\u60a3\uff08\u5c3d\u7ba1\u53ef\u80fd\u6027\u8f83\u5c0f\uff09\u3002 \u56e0\u6b64\uff0c\u6211\u4e2a\u4eba\u66f4\u52a0\u63a8\u8350\u4f9d\u8d56\u4ee3\u7406\u6765\u5b9e\u73b0\u5feb\u901f\u8bbf\u95ee\u6240\u9700\u8d44\u6e90\u7684\u76ee\u7684\u3002\u672c\u6587\u4e0d\u4f1a\u6d89\u53ca\u4efb\u4f55\u8fdd\u53cd\u6cd5\u5f8b\u6cd5\u89c4\u7684\u5185\u5bb9\uff0c\u53ea\u6765\u8c08\u8c08 macOS \u4e0b\u5982\u4f55\u8ba9\u4e0d\u540c\u5e94\u7528\u7684\u6d41\u91cf\u901a\u8fc7 \u672c\u5730\u7684 \u4ee3\u7406\u670d\u52a1\u3002\n\u5728\u5f00\u59cb\u524d\uff0c\u6211\u5c06\u5047\u8bbe\u4f60\u5df2\u7ecf\u5728\u672c\u5730\u914d\u7f6e\u597d\u4e86 HTTP \u548c SOCKS5 \u4ee3\u7406\u670d\u52a1\uff0c\u5206\u522b\u80fd\u591f\u901a\u8fc7 http:\/\/127.0.0.1:8080 \u548c socks5:\/\/127.0.0.1:1080 \u8bbf\u95ee\u3002\n\u7cfb\u7edf\u4ee3\u7406 \u4f5c\u4e3a macOS \u5185\u7f6e\u7684\u529f\u80fd\uff0c\u4f60\u53ef\u4ee5\u5728 System Preferences -> Network -> Advanced -> Proxies \u5185\u914d\u7f6e\u7cfb\u7edf\u4ee3\u7406\u3002\n\u53e6\u5916\u4e5f\u53ef\u4ee5\u4f7f\u7528\u547d\u4ee4\u884c\u914d\u7f6e\u7cfb\u7edf\u4ee3\u7406\uff1a\nnetworksetup -setwebproxy "Wi-Fi" 127.0.0.1 8080 # HTTP proxy networksetup -setsocksfirewallproxy "Wi-Fi" 127.0.0.1 1080 # SOCKS5 proxy networksetup -setwebproxystate "Wi-Fi" on networksetup -setsocksfirewallproxystate "Wi-Fi" on \u5176\u4e2d "Wi-Fi" \u662f\u4f60\u7684\u7f51\u7edc\u63a5\u53e3\u540d\uff0c\u8bf7\u6839\u636e\u5b9e\u9645\u60c5\u51b5\u586b\u5199\u3002\n\u4e0d\u8fc7\uff0cmacOS \u7684\u7cfb\u7edf\u4ee3\u7406\u4ec5\u5bf9\u90e8\u5206 GUI \u6216\u505a\u4e86 macOS \u9002\u914d\u7684\u5e94\u7528\u751f\u6548\uff0c\u4f8b\u5982 Chrome \u7b49 Web \u6d4f\u89c8\u5668\u3001\u7cfb\u7edf\u66f4\u65b0\u7b49\u3002\u5728\u5f00\u53d1\u65f6\u6211\u4eec\u7ecf\u5e38\u9700\u8981\u63a5\u89e6 CLI\uff0c\u5e94\u8be5\u600e\u4e48\u505a\u5462\uff1f\nhttp_proxy \u548c all_proxy \u73af\u5883\u53d8\u91cf \u7edd\u5927\u591a\u6570\u4f7f\u7528 HTTP \u534f\u8bae\u7684 CLI \u5e94\u7528\u90fd\u652f\u6301\u8fd9\u4e24\u4e2a\u73af\u5883\u53d8\u91cf\uff0c\u8fd9\u51e0\u4e4e\u5df2\u7ecf\u6210\u4e3a\u4e86\u300c\u884c\u4e1a\u6807\u51c6\u300d\uff1a\nexport http_proxy=http:\/\/127.0.0.1:8080 https_proxy=$http_proxy all_proxy=socks5:\/\/127.0.0.1:1080 \u5178\u578b\u652f\u6301\u7684\u547d\u4ee4\u5305\u62ec curl\u3001go get\u3001composer install \u7b49\u3002\u4f7f\u7528 curl -v ipinfo.io \u67e5\u770b\u8f93\u51fa\u53ef\u53d1\u73b0\u4ee3\u7406\u914d\u7f6e\u5df2\u7ecf\u751f\u6548\uff1a\n* Uses proxy env variable http_proxy == 'http:\/\/127.0.0.1:8080' * Trying 127.0.0.1... ... \u5982\u679c\u4f60\u672c\u5730\u7684\u4ee3\u7406\u670d\u52a1\u5e38\u9a7b\u540e\u53f0\u8fd0\u884c\uff0c\u53ef\u5c06 export ... \u547d\u4ee4\u5199\u5165 .zshrc\uff0c\u8fd9\u6837\u6bcf\u6b21\u542f\u52a8 Zsh\uff08Shell\uff09\u65f6\u5c31\u81ea\u52a8\u914d\u7f6e\u597d\u4e86\u3002\nSSH Config ProxyCommand \u6307\u4ee4 \u50cf Git over SSH\u3001SCP\u3001SFTP \u8fd9\u7c7b\u57fa\u4e8e SSH \u534f\u8bae\u7684\u5e94\u7528\uff0c\u5e76\u4e0d\u652f\u6301\u4ee5\u4e0a\u4e24\u4e2a\u73af\u5883\u53d8\u91cf\u3002\u4e0d\u8fc7\u6211\u4eec\u53ef\u4ee5\u4fee\u6539 SSH \u914d\u7f6e\u6587\u4ef6 ~\/.ssh\/config \u6765\u5b9e\u73b0\uff0c\u4f8b\u5982\uff1a\nHost github.com ProxyCommand \/usr\/bin\/nc -x 127.0.0.1:1080 %h %p \u4ee5\u4e0a\u914d\u7f6e\u4e2d\u7684 ProxyCommand \u53ea\u5728\u8fde\u63a5\u5230 github.com \u65f6\u751f\u6548\uff0c\u4f60\u53ef\u4ee5\u5c06 Host github.com \u66ff\u6362\u6210\u5176\u5b83 Git \u670d\u52a1\u5546\u7684\u4e3b\u673a\u540d\uff0c\u4e5f\u53ef\u4ee5\u66ff\u6362\u4e3a Host *\uff0c\u8868\u793a SSH \u5230\u4efb\u610f\u4e3b\u673a\u5747\u751f\u6548\u3002\u4f46\u6211\u5e76\u4e0d\u63a8\u8350\u8fd9\u4e48\u505a\uff0c\u9664\u975e\u4f60\u60f3 SSH \u5230\u81ea\u5df1\u7684\u670d\u52a1\u5668\u65f6\u4e5f\u901a\u8fc7\u4ee3\u7406\u3002\nProxifier \u548c Surge \u6839\u636e\u6211\u81ea\u5df1\u7684\u7ecf\u9a8c\uff0c\u4ee5\u4e0a\u65b9\u6cd5\u5df2\u7ecf\u80fd\u591f\u8986\u76d6\u7edd\u5927\u591a\u6570\u5f00\u53d1\u8005\u7684\u4f7f\u7528\u573a\u666f\u3002\u5982\u679c\u6709\u4e9b\u5e94\u7528\u8fd8\u662f\u4e0d\u8d70\u4ee3\u7406\uff0c\u4f60\u53ef\u4ee5\u8bd5\u8bd5 Proxifier \u548c Surge \u8fd9\u4e24\u6b3e\u4ea7\u54c1\u3002\u5176\u4e2d Surge \u662f macOS \u4e13\u6709\u5e94\u7528\uff0c\u4e0d\u53ef\u7528\u4e8e Windows \u6216 Linux \u7cfb\u7edf\u3002\u8fd9\u7c7b\u5e94\u7528\u7684\u601d\u8def\u5927\u81f4\u662f\uff1a\n \u4f2a\u88c5\u6210 TUN \u8bbe\u5907\uff08\u53ef\u7406\u89e3\u4e3a\u865a\u62df\u7f51\u5361\uff09\u3002 \u4fee\u6539\u6216\u8986\u76d6\u7cfb\u7edf\u9ed8\u8ba4\u8def\u7531\uff0c\u628a\u6240\u6709 TCP\u3001UDP\u3001ICMP \u7b49\u4e09\u5c42\u53ca\u4ee5\u4e0a\u7684\u6d41\u91cf\u5168\u90e8\u53d1\u5230\u865a\u62df TUN \u8bbe\u5907\u3002 \u7ecf\u8fc7\u5185\u90e8\u5904\u7406\u540e\u628a\u6d41\u91cf\u5bfc\u5411\u4ee3\u7406\u670d\u52a1\u3002 \u4ee3\u7406\u670d\u52a1\u5668\u6d41\u51fa\u7684\u6d41\u91cf\u4f7f\u7528 SO_MARK \u7b49\u65b9\u5f0f\u8fdb\u884c\u7279\u6b8a\u6807\u8bb0\uff0c\u4f7f\u7528\u7cfb\u7edf\u7b56\u7565\u8def\u7531\u5bfc\u5411\u5230\u771f\u5b9e\u7f51\u5361\uff0c\u907f\u514d\u6b7b\u5faa\u73af\u3002 \u4f8b\u5982\u542f\u52a8 Surge \u589e\u5f3a\u6a21\u5f0f\u540e\uff0c\u53ef\u4f7f\u7528 netstat -nr \u770b\u51fa\u8def\u7531\u8868\u7684\u53d8\u5316\uff1a\nRouting tables Internet: Destination Gateway Flags Netif Expire default 192.168.1.254 UGSc en0 <-- \u9ed8\u8ba4\u8def\u7531 1 198.18.0.1 UGSc utun7 <--- 2\/7 198.18.0.1 UGSc utun7 | 4\/6 198.18.0.1 UGSc utun7 | \u4e3a\u4e86\u8986\u76d6\u9ed8\u8ba4\u8def\u7531 8\/5 198.18.0.1 UGSc utun7 | Surge \u65b0\u589e\u7684\u8def\u7531 16\/4 198.18.0.1 UGSc utun7 | 32\/3 198.18.0.1 UGSc utun7 | 64\/2 198.18.0.1 UGSc utun7 <--- ... \u865a\u62df TUN \u8bbe\u5907\u63a5\u53e3\u540d\u4e3a utun7\uff0c\u7f51\u5173 IP \u4e3a 198.18.0.1\uff0c\u8fd9\u4e2a IP \u6bb5\u8fd8\u88ab Surge \u7528\u6765\u505a\u4e00\u4e9b\u7279\u6b8a\u7528\u9014\uff0c\u4f8b\u5982\u53cd\u67e5 IP \u5bf9\u5e94\u7684\u57df\u540d\u4ee5\u652f\u6301\u7b56\u7565\u4ee3\u7406\u529f\u80fd\uff0c\u5728\u6b64\u4e0d\u518d\u8be6\u8ff0\u3002\n\u8fd9\u7c7b\u5b9e\u73b0\u867d\u7136\u7406\u8bba\u4e0a\u80fd\u591f\u5c06\u7cfb\u7edf\u6240\u6709\u6d41\u91cf\u90fd\u5bfc\u5411\u8fd9\u4e2a\u865a\u62df\u7684 TUN \u8bbe\u5907\uff0c\u4f46\u4ecd\u6709\u4e00\u4e9b\u5c40\u9650\u3002\u76ee\u524d\u6839\u636e\u6211\u7684\u89c2\u5bdf\uff0cFaceTime \u4f3c\u4e4e\u4e0d\u4f1a\u9075\u5faa\u8def\u7531\u8868\u7684\u914d\u7f6e\uff0c\u6211\u731c\u662f Apple \u4e3a\u4e86\u4f18\u5316\u901a\u8baf\u534f\u8bae\u76f4\u63a5\u7ed5\u8fc7\u4e86\u81ea\u5b9a\u4e49\u8def\u7531\u8868\u4ee5\u4fbf\u4e8e\u53d1\u8d77\u70b9\u5bf9\u70b9\u901a\u8baf\u5427\u3002\n\u53e6\u5916\uff0c\u7531\u4e8e SOCKS \u548c HTTP \u4ee3\u7406\u534f\u8bae\u7684\u9650\u5236\uff0c\u867d\u7136\u4fee\u6539\u8def\u7531\u8868\u540e ICMP \u6d41\u91cf\u4e5f\u4f1a\u5230\u8fbe\u865a\u62df TUN \u8bbe\u5907\uff0c\u4f46\u5b83\u4e0d\u80fd\u4ee3\u7406 ICMP \u534f\u8bae\uff0c\u56e0\u6b64\u5982\u4f55\u300c\u4f18\u96c5\u5730\u300d\u5904\u7406\u8fd9\u4e9b\u6d41\u91cf\uff0c\u4ecd\u7136\u662f Surge \u8fd9\u7c7b\u4ea7\u54c1\u9700\u8981\u4f18\u5316\u7684\u95ee\u9898\u3002\n\u7efc\u4e0a\uff0c\u6211\u4e2a\u4eba\u4e0d\u7279\u522b\u5e38\u7528 Surge \u7684\u589e\u5f3a\u6a21\u5f0f\uff0c\u4f46\u6709\u65f6\u4e0d\u786e\u5b9a\u67d0\u4e2a\u5e94\u7528\u662f\u5426\u652f\u6301\u901a\u5e38\u7684\u4ee3\u7406\u914d\u7f6e\u3001\u65f6\u95f4\u53c8\u6bd4\u8f83\u7d27\u5f20\u65f6\uff0c\u9b54\u6539\u8def\u7531\u7684\u786e\u662f\u4e2a\u7b80\u5355\u7c97\u66b4\u3001\u5feb\u5200\u65a9\u4e71\u9ebb\u7684\u89e3\u51b3\u65b9\u6848\u3002\n\u901a\u8fc7 LD_PRELOAD \u52ab\u6301\u5171\u4eab\u5e93 \u5229\u7528\u8fd9\u79cd\u65b9\u5f0f\u6700\u597d\u7684\u5f53\u5c5e proxychains-ng \u9879\u76ee\u4e86\uff0c\u5b83\u662f\u4e0a\u53e4\u4e16\u7eaa proxychains \u7684\u7ee7\u4efb\u8005\u3002\n\u4e3b\u8981\u601d\u8def\u662f\u901a\u8fc7\u4fee\u6539 LD_PRELOAD \u73af\u5883\u53d8\u91cf\uff0c\u52ab\u6301 connect() \u7b49\u7cfb\u7edf\u8c03\u7528\uff0c\u4ece\u800c\u5c06\u6d41\u91cf\u8f6c\u53d1\u5230\u4ee3\u7406\u670d\u52a1\u5668\u3002\u7531\u4e8e\u6211\u5bf9\u8fd9\u7c7b\u4ea7\u54c1\u4f7f\u7528\u4e0d\u591a\uff0c\u56e0\u6b64\u4e0d\u591a\u4f5c\u8bc4\u8bba\u3002\u4f46\u6bd4\u8f83\u80af\u5b9a\u7684\u662f\uff0c\u50cf Golang \u9759\u6001\u7f16\u8bd1\u540e\u7684\u5e94\u7528\uff0c\u7531\u4e8e\u5b83\u4eec\u4e0d\u4f1a\u8f7d\u5165\u7cfb\u7edf\u5171\u4eab\u5e93\uff0c\u6240\u4ee5 proxychains-ng \u5bf9\u5176\u65e0\u6548\u3002\n\u901a\u8fc7 ptrace \u8ddf\u8e2a\u7cfb\u7edf\u8c03\u7528 \u4e0e\u4e0a\u4e00\u79cd\u65b9\u6cd5\u7c7b\u4f3c\uff0c\u8be5\u65b9\u6cd5\u7684\u601d\u8def\u4e5f\u662f\u5bf9 connect()\u300c\u505a\u624b\u811a\u300d\uff0c\u53ea\u662f\u4e0d\u901a\u8fc7\u52ab\u6301\u5171\u4eab\u5e93\u5b9e\u73b0\u3002\u53ea\u53ef\u60dc\u76ee\u524d macOS \u4e0a\u7531\u4e8e\u7cfb\u7edf\u5b89\u5168\u6027\u7b49\u539f\u56e0\uff0c\u8fd9\u7c7b\u5b9e\u73b0\u4ecd\u7136\u5904\u5728\u63a2\u7d22\u9636\u6bb5\u3002\u53e6\u5916\uff0c\u6211\u4e2a\u4eba\u6bd4\u8f83\u62c5\u5fc3\uff08\u731c\u6d4b\uff09\u901a\u8fc7 ptrace \u76d1\u89c6\u7cfb\u7edf\u8c03\u7528\uff0c\u6027\u80fd\u662f\u5426\u4f1a\u53d7\u5230\u660e\u663e\u5f71\u54cd\u3002\u56e0\u6b64\u76ee\u524d\u6682\u65f6\u4e0d\u63a8\u8350\u3002\u5982\u679c\u4f60\u6709\u5174\u8da3\u7684\u8bdd\uff0c\u53ef\u4ee5\u770b\u770b graftcp \u9879\u76ee\u3002\n\u603b\u7ed3 \u4ee5\u4e0a\u662f\u6211\u77e5\u9053\u7684\u51e0\u4e4e\u6240\u6709\u5728 macOS \u4e0a\u914d\u7f6e\u4ee3\u7406\u7684\u65b9\u6cd5\u3002\u4e2a\u4eba\u6bd4\u8f83\u63a8\u8350\u524d\u51e0\u79cd\uff0c\u65e2\u80fd\u591f\u8986\u76d6\u5927\u591a\u6570\u573a\u666f\uff0c\u4e5f\u4e0d\u9700\u8981\u5b89\u88c5\u989d\u5916\u7684\u5e94\u7528\u3002\u5982\u679c\u4f60\u5bf9\u7f51\u7edc\u65b9\u9762\u611f\u5174\u8da3\uff0c\u4e5f\u4e0d\u59a8\u63a2\u7d22\u6027\u5730\u5c1d\u8bd5\u4e0b\u5176\u5b83\u65b9\u6848\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/redirecting-network-traffic-of-various-apps-on-macos-to-proxies\/","summary":" \u5728\u5f00\u53d1\u8fc7\u7a0b\u4e2d\uff0c\u6211\u4eec\u7ecf\u5e38\u9700\u8981\u4f7f\u7528\u5230\u56fd\u5916\u7684\u8d44\u6e90\uff0c\u4f8b\u5982\u5404\u79cd\u5305\u4f9d\u8d56\u7b49\u3002\u56fd\u5185\u76ee\u524d\u6bd4\u8f83\u666e\u904d\u7684\u505a\u6cd5\u662f\u4f7f\u7528\u7531\u77e5\u540d\u7b2c\u4e09\u65b9\u7ef4\u62a4\u7684\u56fd\u5185\u955c\u50cf\u3002\u867d\u7136\u65b9\u4fbf\uff0c\u4f46\u4e5f\u5b58\u5728\u4e00\u4e9b\u65e0\u6cd5\u907f\u514d\u7684\u95ee\u9898\uff0c\u4f8b\u5982\uff1a<\/p>\n \u56e0\u6b64\uff0c\u6211\u4e2a\u4eba\u66f4\u52a0\u63a8\u8350\u4f9d\u8d56\u4ee3\u7406\u6765\u5b9e\u73b0\u5feb\u901f\u8bbf\u95ee\u6240\u9700\u8d44\u6e90\u7684\u76ee\u7684\u3002\u672c\u6587\u4e0d\u4f1a\u6d89\u53ca\u4efb\u4f55\u8fdd\u53cd\u6cd5\u5f8b\u6cd5\u89c4\u7684\u5185\u5bb9\uff0c\u53ea\u6765\u8c08\u8c08 macOS \u4e0b\u5982\u4f55\u8ba9\u4e0d\u540c\u5e94\u7528\u7684\u6d41\u91cf\u901a\u8fc7 \u672c\u5730\u7684<\/strong> \u4ee3\u7406\u670d\u52a1\u3002<\/p>","title":"\u76d8\u70b9\u4f7f macOS \u5e94\u7528\u6d41\u91cf\u901a\u8fc7\u4ee3\u7406\u7684\u591a\u79cd\u65b9\u5f0f"},{"content":"\u5728\u4e4b\u524d\u7684\u6587\u7ae0\u4e2d\uff0c\u6211\u4ecb\u7ecd\u4e86\uff1a\n \u5982\u4f55\u4f7f\u7528 GitLab CI \u5b9e\u73b0\u6301\u7eed\u90e8\u7f72\u3002 \u5982\u4f55\u4f7f\u7528 Helm \u548c Helmfile \u90e8\u7f72\u5e94\u7528\u5230 Kubernetes \u96c6\u7fa4\u4e2d\u3002 \u4f46\u8fd9\u5176\u4e2d\u7f3a\u5c11\u4e86\u5173\u952e\u7684\u4e00\u73af\uff1a\u521b\u5efa\u4e00\u4e2a\u5c5e\u4e8e\u4f60\u7684\u9879\u76ee\u7684 chart\uff0c\u8fd9\u6837\u624d\u80fd\u628a\u6211\u4eec\u5f00\u53d1\u7684\u9879\u76ee\u901a\u8fc7 Helm \u90e8\u7f72\u5230\u96c6\u7fa4\u4e2d\u3002\u672c\u6587\u5c06\u4f1a\u4e3a\u5927\u5bb6\u4ecb\u7ecd\u6211\u4eec\u5982\u4f55\u521b\u5efa\u5e76\u7ef4\u62a4 chart\uff0c\u4ece\u800c\u6253\u901a\u4ece\u63d0\u4ea4\u4ee3\u7801\u5230\u90e8\u7f72\u7684\u5b8c\u6574\u6d41\u7a0b\u3002\nChart \u653e\u5728\u54ea \u5728\u521b\u5efa chart \u524d\uff0c\u9996\u5148\u8981\u8003\u8651\u7684\u95ee\u9898\u662f chart \u653e\u5728\u54ea\u3002\u76ee\u524d\u793e\u533a\u4e2d\u666e\u904d\u7684\u505a\u6cd5\u662f\u4e0e\u5e94\u7528\u4ee3\u7801\u5206\u5f00\u5b58\u653e\uff0c\u5c06 chart \u653e\u5728\u5355\u72ec\u7684\u4ed3\u5e93\u4e2d\uff0c\u5e76\u7531 CI \u8d1f\u8d23\u6253\u5305\u3001\u66f4\u65b0\u3002\u8fd9\u6837\u7684\u597d\u5904\u662f\uff1a\n Chart \u7684\u53d1\u7248\u5468\u671f\u4e0e\u5e94\u7528\u4e0d\u5fc5\u4fdd\u6301\u540c\u6b65\u3002 Commit tree \u66f4\u52a0\u6e05\u6670\u3002 \u56e0\u4e3a\u5f00\u6e90\u9879\u76ee\u7684 chart \u53ef\u80fd\u4f1a\u5728\u5176\u5b83\u5730\u65b9\u5b89\u88c5\uff0c\u6216\u662f\u6210\u4e3a\u67d0\u4e2a chart \u7684\u4f9d\u8d56\uff0c\u6240\u4ee5\u5fc5\u987b publish \u8fd9\u4e9b charts\u3002\u800c\u5bf9\u4e8e\u6211\u4eec\u8fd9\u7c7b\u95ed\u6e90\u5546\u4e1a\u9879\u76ee\uff0cchart \u4e0d\u4f1a\u88ab\u5916\u90e8\u9879\u76ee\u4f9d\u8d56\uff0c\u6211\u66f4\u63a8\u8350\u76f4\u63a5\u653e\u5728\u5e94\u7528\u4ee3\u7801\u4ed3\u5e93\u3002\u539f\u56e0\u5982\u4e0b\uff1a\n \u4e0d\u5fc5\u5355\u72ec\u914d\u7f6e CI \u6253\u5305\u3002 \u53d1\u7248\u8282\u594f\u4e0e\u5e94\u7528\u4fdd\u6301\u540c\u6b65\uff0c\u51fa\u95ee\u9898\u65f6\u65b9\u4fbf\u56de\u6eda\u3002 \u4f8b\u5982\u6211\u53f8\u51e0\u4e2a\u4e3b\u9879\u76ee\u7684 chart \u5168\u90e8\u5b58\u653e\u5728\u5404\u81ea\u4ee3\u7801\u4ed3\u5e93\u5185 deploy\/chart \u76ee\u5f55\u4e0b\uff1a\n\u521b\u5efa Chart \u548c Helmfile.yaml \u5728\u786e\u5b9a\u5b58\u653e\u4f4d\u7f6e\u540e\uff0c\u53ef\u4ee5\u5f00\u59cb\u521b\u5efa chart \u4e86\u3002\u5177\u4f53\u64cd\u4f5c\u4e0d\u96be\uff0c\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\u5373\u53ef\uff1a\ncd deploy helm create api # api \u662f\u4f60\u5e0c\u671b\u521b\u5efa\u7684 chart \u540d\u79f0 \u4e0d\u8fc7\u9700\u8981\u6ce8\u610f\u7684\u662f\uff0cHelm \u9ed8\u8ba4\u4f1a\u5728\u5f53\u524d\u5de5\u4f5c\u76ee\u5f55\u521b\u5efa\u4e00\u4e2a\u540d\u4e3a api\uff08\u53d6\u51b3\u4e8e\u4f60\u586b\u5199\u7684\u5177\u4f53\u540d\u79f0\uff09\u7684\u5b50\u76ee\u5f55\u7528\u4e8e\u5b58\u653e chart\u3002\u56e0\u6b64\u4f60\u9700\u8981\u624b\u52a8\u6267\u884c mv api chart\u3002\u4e0d\u8981\u5c1d\u8bd5\u76f4\u63a5\u8fd0\u884c helm create chart\uff0c\u56e0\u4e3a\u5728\u521b\u5efa\u65b0 chart \u7684\u8fc7\u7a0b\u4e2d\uff0c\u4f60\u586b\u5199\u7684\u540d\u79f0\u4f1a\u5728 chart templates \u5185\u88ab\u4f7f\u7528\uff0c\u66f4\u96be\u4ee5\u66ff\u6362\u3002\n\u53e6\u5916\uff0c\u6211\u4eec\u8fd8\u521b\u5efa\u4e86 helmfile.yaml\uff0c\u8fd9\u6837\u5728 CI \u4e2d\u6211\u4eec\u53ea\u9700\u8981\u8fd0\u884c helmfile -e $ENV apply \u5373\u53ef\u3002\nrepositories: - name: stable url: https:\/\/kubernetes-charts.storage.googleapis.com - name: bitnami url: https:\/\/charts.bitnami.com\/bitnami environments: stg: values: - .\/deploy\/values\/env.stg.yaml.gotmpl prd: values: - .\/deploy\/values\/env.prd.yaml.gotmpl helmDefaults: wait: true timeout: 180 releases: - name: {{ .Environment.Values.releaseName }} namespace: {{ .Environment.Values.namespace }} chart: .\/deploy\/chart # \u76f4\u63a5\u586b\u5199 Chart \u7684\u76f8\u5bf9\u8def\u5f84 secrets: - .\/deploy\/env\/secrets.{{ .Environment.Values.envName }}.yaml values: - .\/deploy\/values\/values.{{ .Environment.Name }}.yaml.gotmpl \u5173\u4e8e Helmfile \u7684\u57fa\u7840\u4f7f\u7528\uff0c\u53ef\u53c2\u8003\u6211\u4e4b\u524d\u7684\u535a\u6587 \u2014 K8s \u4e0b\u7684\u5e94\u7528\u7ba1\u7406 \u2014 \u4e86\u89e3 Helmfile\u3002\n\u503c\u5f97\u4e00\u63d0\u7684\u662f\uff0c\u6211\u4eec\u914d\u7f6e\u4e86\u4e24\u4e2a Helm \u9ed8\u8ba4\u53c2\u6570\u3002\n\u5176\u4e2d\uff0cwait \u914d\u7f6e\u4e3a true\uff0c\u8fd9\u6837\u5728 CI \u73af\u5883\u4e2d\u8fd0\u884c\u65f6\uff0c\u76f4\u5230\u90e8\u7f72\u7684\u8d44\u6e90\u72b6\u6001\u53d8\u4e3a Ready \u540e\uff0cPipeline \u624d\u4f1a\u53d8\u4e3a\u6210\u529f\u72b6\u6001\u3002\u5982\u679c\u4e0d\u542f\u7528\u8be5\u53c2\u6570\uff0c\u90a3\u4e48\u53ea\u8981\u8d44\u6e90\u6b63\u5e38\u521b\u5efa\uff0cHelm \u5c31\u4f1a\u5b8c\u6210\u3001\u9000\u51fa\uff0c\u8fd9\u65f6 Pod \u6216\u8bb8\u5e76\u6ca1\u6709\u542f\u52a8\uff0c\u53ef\u80fd\u51fa\u73b0\u65e0\u6cd5\u8c03\u5ea6\u3001\u62c9\u53d6\u955c\u50cf\u5931\u8d25\u7b49\uff0c\u8fd9\u4e9b\u95ee\u9898\u5e94\u5f53\u5c5e\u4e8e\u90e8\u7f72\u5931\u8d25\u7684\u8303\u7574\u3002\u56e0\u6b64\uff0c\u4e3a\u4e86\u8ba9 CI \u6267\u884c\u7ed3\u679c\u66f4\u52a0\u51c6\u786e\uff0c\u6211\u4eec\u5f00\u542f\u4e86\u8be5\u53c2\u6570\u3002\n\u53e6\u5916\uff0c\u4e3a\u4e86\u9632\u6b62 Pipeline \u65f6\u95f4\u8fc7\u957f\uff0ctimeout \u8bbe\u7f6e\u4e3a 180 \u79d2\u3002\n\u65b0\u589e\u6216\u8c03\u6574\u8d44\u6e90\u6a21\u677f \u65b0\u521b\u5efa\u7684 chart \u5305\u542b\u4e00\u4e9b\u5e38\u7528\u8d44\u6e90\u7684\u6a21\u677f\uff0c\u4f8b\u5982 Ingress\u3001Deployment \u7b49\u3002\u4f60\u53ef\u4ee5\u6839\u636e\u9700\u8981\u6dfb\u52a0\u5176\u5b83\u8d44\u6e90\uff0c\u6a21\u677f\u8bed\u6cd5\u53ef\u53c2\u8003 Go template \u5b98\u65b9\u6587\u6863\u5373\u53ef\u3002\n\u5982\u679c\u4e0d\u77e5\u4ece\u4f55\u4e0b\u624b\u521b\u5efa\u65b0\u8d44\u6e90\uff0c\u6211\u63a8\u8350\u770b\u770b\u8fd9\u4e2a\u9879\u76ee\uff1ahttps:\/\/github.com\/dennyzhang\/kubernetes-yaml-templates\uff0c\u8fd9\u5176\u4e2d\u5305\u542b\u4e86\u4e0d\u5c11\u5e38\u7528\u7684 Kubernetes \u8d44\u6e90\u4f8b\u5b50\uff0c\u4f60\u53ef\u4ee5\u76f4\u63a5\u590d\u5236\u5e76\u6539\u9020\u6210 Go template\u3002\u901a\u5e38\u9700\u8981\u4fee\u6539\u7684\u6709\u4e24\u70b9\uff0c\u4ee5 ConfigMap \u4e3a\u4f8b\uff1a\napiVersion: v1 kind: ConfigMap metadata: name: {{ include "api.fullname" . }} labels: {{- include "api.labels" . | nindent 4 }} # ... \u9996\u5148\u5c06\u8d44\u6e90\u540d\u79f0\u4fee\u6539\u4e3a\u4e0e\u5176\u5b83\u8d44\u6e90\u4e00\u81f4\uff0c\u4f7f\u7528\u6a21\u677f\u6e32\u67d3\u7684 fullname\u3002\u5176\u6b21\u4fee\u6539 labels \u5b57\u6bb5\uff0c\u4e00\u822c\u6765\u8bf4\u4f7f\u7528 Helm \u81ea\u5e26\u8f85\u52a9\u51fd\u6570\u6e32\u67d3\u7684 labels \u5373\u53ef\u3002\n\u6ce8\u610f\uff0capi.fullname \u548c api.labels \u4e0d\u662f\u56fa\u5b9a\u7684\uff0capi \u662f\u4f60\u7684 chart \u540d\u79f0\u3002\n\u7f16\u8f91 Values \u5728\u65b0\u589e\u5176\u5b83\u8d44\u6e90\u540e\uff0c\u4f60\u53ef\u4ee5\u5f15\u7528\u66f4\u591a\u81ea\u5b9a\u4e49\u7684 values\uff0c\u4f8b\u5982\uff1a\napiVersion: v1 kind: ConfigMap # ... data: APP_ENV: {{ .Values.app.env }} \u6211\u4eec\u5c06 APP_ENV \u914d\u7f6e\u4e3a values \u4e2d app.env \u7684\u503c\u3002\u5728\u5f15\u7528\u65b0\u7684 values \u540e\uff0c\u6211\u63a8\u8350\u4e00\u5e76\u4fee\u6539 chart \u5185 values.yaml \u7684\u5185\u5bb9\uff0c\u4fdd\u6301\u6a21\u677f\u4e0e values \u7684\u540c\u6b65\uff0c\u8fd9\u6837\u5728\u589e\u52a0\u65b0\u73af\u5883\u65f6\u5c31\u6709\u4e00\u4efd\u300c\u57fa\u7840\u300dvalues \u7528\u4e8e\u53c2\u8003\u53ef\u4f9b\u4fee\u6539\u7684\u914d\u7f6e\u3002\u4f8b\u5982\uff1a\n# ... app: env: production # ... \u4f9d\u8d56\u5176\u5b83 Chart \u901a\u5e38\u6211\u4eec\u7684\u5e94\u7528\u4f1a\u4f9d\u8d56\u4e00\u4e9b\u77e5\u540d\u7684\u5f00\u6e90\u7ec4\u4ef6\uff0c\u4f8b\u5982 Redis\u3001MySQL \u7b49\u3002Helm \u5141\u8bb8\u6211\u4eec\u5c06\u5176\u5b83 chart \u58f0\u660e\u4e3a\u4f9d\u8d56\uff0c\u5728 chart \u7684\u5b89\u88c5\u8fc7\u7a0b\u4e2d\uff0c\u4e5f\u4f1a\u540c\u65f6\u5b89\u88c5\u4f9d\u8d56\u7684 charts\uff0c\u4ece\u800c\u8fbe\u6210\u540c\u65f6\u5b89\u88c5\u5e94\u7528\u4ee5\u53ca\u76f8\u5173\u6240\u9700\u670d\u52a1\u7684\u76ee\u7684\u3002\n\u65b0\u7248 Helm v3 \u4e2d\u63d0\u4f9b\u4e86\u5bf9 Chart v2 \u7684\u652f\u6301\uff0c\u539f\u5148 Chart v1 \u4e2d\u7684 dependencies.yaml \u88ab\u5e9f\u5f03\u4e86\u3002\u7f16\u8f91 Chart.yaml\uff0c\u6dfb\u52a0 dependencies \u90e8\u5206\u5373\u53ef\uff1a\napiVersion: v2 # ... dependencies: - name: redis # Chart \u540d\u79f0 version: 10.5.10 # Chart \u7248\u672c repository: https:\/\/charts.bitnami.com\/bitnami # Chart Repo \u6267\u884c helm dep build \u5373\u53ef\u62c9\u53d6\u4f9d\u8d56\u5e76\u751f\u6210 Chart.lock\u3002\u6700\u540e\uff0c\u7531\u4e8e\u4f9d\u8d56\u7684 chart \u7684\u53d1\u884c\u5305\u5b58\u50a8\u5728 chart \u4e0b\u7684 charts \u5b50\u76ee\u5f55\u4e2d\uff0c\u56e0\u6b64\u5efa\u8bae\u5c06 deploy\/chart\/charts \u8def\u5f84\u6dfb\u52a0\u5230 .gitignore \u6587\u4ef6\u5185\uff0c\u4ee5\u9632\u6b62\u5c06\u4f9d\u8d56\u4ee3\u7801\u63d0\u4ea4\u5230 Git \u7248\u672c\u7ba1\u7406\u4e2d\u3002\n\u5c0f\u7ed3 \u521b\u5efa\u5e76\u7ef4\u62a4\u4e00\u4e2a\u53ef\u9760\u7684 chart \u5e76\u4e0d\u5bb9\u6613\uff0c\u5728\u4e0d\u65ad\u5b8c\u5584\u7684\u8fc7\u7a0b\u4e2d\u6211\u4eec\u6295\u5165\u4e86\u5927\u91cf\u7cbe\u529b\u6539\u8fdb\u548c\u4f18\u5316\u3002\u6709\u5174\u8da3\u7684\u540c\u5b66\u63a8\u8350\u8bfb\u4e00\u4e0b Helm \u5b98\u65b9\u548c Bitnami \u63d0\u4f9b\u7684 Helm chart \u6700\u4f73\u5b9e\u8df5\u6587\u6863\uff0c\u76f8\u4fe1\u4f1a\u5bf9\u4f60\u6709\u6240\u5e2e\u52a9\uff1a\n https:\/\/helm.sh\/docs\/chart_best_practices\/ https:\/\/docs.bitnami.com\/tutorials\/series\/best-practices-helm\/ ","permalink":"https:\/\/wi1dcard.dev\/posts\/create-and-maintain-a-helm-chart\/","summary":" \u5728\u4e4b\u524d\u7684\u6587\u7ae0\u4e2d\uff0c\u6211\u4ecb\u7ecd\u4e86\uff1a<\/p>\n \u4f46\u8fd9\u5176\u4e2d\u7f3a\u5c11\u4e86\u5173\u952e\u7684\u4e00\u73af\uff1a\u521b\u5efa\u4e00\u4e2a\u5c5e\u4e8e\u4f60\u7684\u9879\u76ee\u7684 chart\uff0c\u8fd9\u6837\u624d\u80fd\u628a\u6211\u4eec\u5f00\u53d1\u7684\u9879\u76ee\u901a\u8fc7 Helm \u90e8\u7f72\u5230\u96c6\u7fa4\u4e2d\u3002\u672c\u6587\u5c06\u4f1a\u4e3a\u5927\u5bb6\u4ecb\u7ecd\u6211\u4eec\u5982\u4f55\u521b\u5efa\u5e76\u7ef4\u62a4 chart\uff0c\u4ece\u800c\u6253\u901a\u4ece\u63d0\u4ea4\u4ee3\u7801\u5230\u90e8\u7f72\u7684\u5b8c\u6574\u6d41\u7a0b\u3002<\/p>","title":"K8s \u4e0b\u7684\u5e94\u7528\u7ba1\u7406 \u2014 \u79c1\u6709 Helm Chart \u7684\u521b\u5efa\u4e0e\u7ef4\u62a4"},{"content":"\u5728 Kubernetes \u4e2d\u5b9e\u73b0 TLS termination \u975e\u5e38\u5bb9\u6613\u3002Ingress \u8d44\u6e90\u5305\u542b\u4e00 secretName \u5c5e\u6027\uff0c\u7528\u4e8e\u6307\u5b9a Secret \u8d44\u6e90\u540d\u79f0\u3002\u5728\u53d6\u5f97\u8bc1\u4e66\u540e\uff0c\u901a\u8fc7 kubectl create secret tls tls-secret --key tls.key --cert tls.crt \u521b\u5efa Secret \u5b58\u50a8\u8bc1\u4e66\uff0c\u4fbf\u53ef\u4ee5\u88ab Ingress \u4f7f\u7528\u4e86\u3002\n\u552f\u72ec\u6709\u4e9b\u4e0d\u65b9\u4fbf\u7684\u662f\uff0c\u8bc1\u4e66\u7684\u7533\u8bf7\u4ee5\u53ca\u521b\u5efa Secret \u7684\u8fc7\u7a0b\u9700\u8981\u624b\u52a8\u6267\u884c\u3002\u5728\u8bc1\u4e66\u5373\u5c06\u8fc7\u671f\u524d\uff0c\u8fd8\u9700\u8981\u4eba\u5de5\u7eed\u671f\u3002\u5728\u4f20\u7edf VM \u90e8\u7f72\u7684\u573a\u666f\u4e0b\uff0c\u53ef\u4ee5\u4f7f\u7528\u4f8b\u5982 certbot \u6216 acme.sh \u7b49\u9879\u76ee\uff0c\u914d\u5408 Let’s Encrypt \u81ea\u52a8\u7533\u8bf7\u5e76\u5b9a\u671f\u7eed\u7b7e\u8bc1\u4e66\u3002\u800c\u5728 K8s \u96c6\u7fa4\u4e2d\u5982\u4f55\u964d\u4f4e\u8bc1\u4e66\u7ef4\u62a4\u6210\u672c\uff1f\u6765\u770b\u770b\u6211\u4eec\u662f\u600e\u4e48\u505a\u7684\u3002\n\u8ba4\u8bc6 Cert-Manager Cert-manager \u987e\u540d\u601d\u4e49\uff0c\u662f\u4e00\u6b3e\u7ba1\u7406\u8bc1\u4e66\u7684\u5de5\u5177\u3002\u6839\u636e\u5b98\u7f51\u7684\u63cf\u8ff0\uff1a\n cert-manager builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide ‘certificates as a service’ to developers working within your Kubernetes cluster.\n \u7b80\u5355\u6765\u8bf4\uff0ccert-manager \u5229\u7528 Kubernetes \u7684 CRD \u7279\u6027\u63d0\u4f9b\u4e86\u540d\u4e3a Certificate \u7b49\u8d44\u6e90\uff0c\u5b9e\u73b0\u300c\u8bc1\u4e66\u5373\u670d\u52a1\u300d\u3002\u8bf7\u770b\u63a5\u4e0b\u6765\u7684\u4f8b\u5b50\u3002\n\u5b89\u88c5 Cert-Manager Cert-manager \u7684\u5b89\u88c5\u65b9\u6cd5\u6709\u591a\u79cd\uff0c\u53ef\u901a\u8fc7 kubectl \u76f4\u63a5 apply \u6240\u6709 manifest\uff1b\u4e5f\u53ef\u4ee5\u5148\u5b89\u88c5 CRD\uff0c\u518d\u901a\u8fc7 Helm \u5b89\u88c5\u5176\u5b83\u8d44\u6e90\u3002\n\u6211\u4e2a\u4eba\u503e\u5411\u4e8e\u540e\u8005\u3002\u4e00\u952e apply \u56fa\u7136\u7b80\u5355\uff0c\u4f46\u6ca1\u6709\u673a\u4f1a\u8c03\u6574\u4efb\u4f55\u914d\u7f6e\u3002\u4f7f\u7528 Helm \u5b89\u88c5 cert-manager \u7684 Chart \u5219\u53ef\u4ee5\u6839\u636e\u9700\u8981\u8c03\u6574\u90e8\u5206\u9009\u9879\u3002\u5177\u4f53\u8fc7\u7a0b\u9650\u4e8e\u7bc7\u5e45\u4e0d\u518d\u8be6\u8ff0\uff0c\u8bf7\u67e5\u9605\u5b98\u65b9\u6587\u6863\uff0c\u4ec5\u5c55\u793a\u6211\u4eec\u4f7f\u7528\u7684 helmfile.yaml \u4ee5\u4f9b\u53c2\u8003\uff1a\nrepositories: - name: jetstack url: https:\/\/charts.jetstack.io releases: - name: cert-manager namespace: cert-manager chart: jetstack\/cert-manager version: ^0.14.0 values: - values\/cert-manager\/values.yaml \u914d\u7f6e Cert-Manager \u521b\u5efa Issuer Issuer \u7684\u4f5c\u7528\u4e3b\u8981\u662f\u6307\u5b9a\u8bc1\u4e66\u4ee5\u4f55\u79cd\u65b9\u5f0f\u7b7e\u53d1\u3002\u76ee\u524d cert-manager \u652f\u6301\u7684 Issuer \u7c7b\u578b\u6709 ACME\u3001SelfSigned \u7b49\u3002\u5176\u4e2d\uff0cACME \u652f\u6301\u7684\u9a8c\u8bc1\u7c7b\u578b\u5305\u62ec HTTP01 \u548c DNS01\u3002\n\u4f7f\u7528 HTTP01 \u9a8c\u8bc1 cert-manager \u5c06\u4f1a\u4fee\u6539\u6216\u521b\u5efa\u65b0\u7684 Ingress \u8d44\u6e90\u7528\u6765\u5904\u7406 ACME \u670d\u52a1\u7684\u9a8c\u8bc1\u8bf7\u6c42\u3002\u800c DNS01 \u5219\u53ea\u9700\u914d\u7f6e DNS \u670d\u52a1\u63d0\u4f9b\u5546\u7684\u5bc6\u94a5\uff0ccert-manager \u8d1f\u8d23\u7ef4\u62a4\u5bf9\u5e94\u7684\u9a8c\u8bc1\u8bb0\u5f55\u5373\u53ef\u3002\u6211\u4eec\u4f7f\u7528\u7684\u662f AWS \u7684 Route53 \u670d\u52a1\uff0c\u6b63\u597d\u4e5f\u5728 cert-manager \u5185\u7f6e\u652f\u6301\u7684 DNS provider \u5217\u8868 \u5185\u3002\u56e0\u6b64\u6211\u4eec\u9009\u7528\u4e86\u540e\u8005\u3002\n\u53e6\u5916\uff0ccert-manager \u63d0\u4f9b\u4e86\u4e24\u79cd Issuer \u2014 Issuer \u548c ClusterIssuer\uff0c\u524d\u8005\u4ec5\u9650\u4e8e Issuer \u6240\u5728\u7684\u547d\u540d\u7a7a\u95f4\u5185\u4f7f\u7528\uff0c\u800c ClusterIssuer \u53ef\u5728\u96c6\u7fa4\u5185\u7684\u4efb\u610f\u547d\u540d\u7a7a\u95f4\u901a\u7528\u3002\n\u6211\u4eec\u521b\u5efa\u4e86\u4e24\u4e2a ClusterIssuer\uff0c\u540d\u53eb letsencrypt-prd \u548c letsencrypt-stg\uff0c\u4f8b\u5982\uff1a\napiVersion: cert-manager.io\/v1alpha2 kind: ClusterIssuer metadata: name: letsencrypt-prd spec: acme: email: user@example.com server: https:\/\/acme-v02.api.letsencrypt.org\/directory privateKeySecretRef: name: letsencrypt-prd # \u7528\u4e8e\u50a8\u5b58 ACME Account \u79c1\u94a5\u7684 Secret solvers: - selector: {} dns01: route53: # Route53 \u76f8\u5173\u53c2\u6570 region: us-east-2 accessKeyID: ... # AWS Access Key ID secretAccessKeySecretRef: name: route53-secret-access-key # \u5b58\u50a8 AWS Access Key Secret \u7684 Kubernetes Secret \u540d\u79f0 key: secret_access_key # \u5b58\u50a8 AWS Access Key Secret \u503c\u7684\u5b57\u6bb5\u540d \u4fee\u6539 Chart Values \u5728\u4e0a\u9762\u7684 helmfile.yaml \u4e2d\uff0c\u53ef\u4ee5\u770b\u5230\u6211\u4eec\u914d\u7f6e\u4e86 values \u6587\u4ef6 values\/cert-manager\/values.yaml\uff0c\u5185\u5bb9\u5982\u4e0b\uff1a\ningressShim: defaultIssuerKind: ClusterIssuer defaultIssuerName: letsencrypt-prd # \u521a\u521a\u521b\u5efa\u7684 ClusterIssuer \u540d\u79f0 \u6211\u4eec\u914d\u7f6e\u4e86\u9488\u5bf9 ingressShim \u7684\u9ed8\u8ba4 Issuer\u3002\u8fd9\u6837\u6211\u4eec\u5c31\u53ef\u4ee5\u4e0d\u624b\u52a8\u521b\u5efa Certificate\uff0ccert-manager \u5c06\u4f1a\u300c\u76d1\u89c6\u300d\u96c6\u7fa4\u5185\u7684 Ingress \u8d44\u6e90\uff0c\u5f53\u6709 Ingress \u914d\u7f6e\u4e86 spec.tls \u65f6\uff0c\u81ea\u52a8\u8bfb\u53d6 hosts\u3001\u521b\u5efa\u8bc1\u4e66\u5e76\u5c06\u8bc1\u4e66\u5b58\u50a8\u81f3 secretName \u6307\u5b9a\u7684 Secret \u5185\uff0c\u5b9e\u73b0\u5b8c\u5168\u81ea\u52a8\u5316\u3002\n\u521b\u5efa\u5e76\u4f7f\u7528\u8bc1\u4e66 \u7531\u4e8e\u5f00\u542f\u4e86 ingressShim \u529f\u80fd\uff0c\u56e0\u6b64\u6211\u4eec\u53ea\u8981\u6309\u7167\u901a\u5e38\u601d\u8def\u4f7f\u7528 Ingress \u5373\u53ef\u3002\u4f8b\u5982\uff1a\napiVersion: extensions\/v1beta1 kind: Ingress metadata: name: api namespace: staging spec: rules: - host: example.com http: paths: - backend: serviceName: api servicePort: http path: \/ tls: - secretName: api-tls-certificate \u628a spec.tls.secretName \u8bbe\u7f6e\u4e3a\u60f3\u8981\u5b58\u50a8\u8bc1\u4e66\u7684 Secret \u540d\u79f0\uff08\u4f8b\u5982\u4f8b\u5b50\u4e2d\u7684 api-tls-certificate\uff09\uff0ccert-manager \u5c06\u8bfb\u53d6\u8fd9\u4e2a\u540d\u79f0\u5e76\u5c06\u7533\u8bf7\u597d\u7684\u8bc1\u4e66\u5b58\u50a8\u5230\u8be5 Secert \u5185\uff0c\u4ee5\u4f9b Ingress \u4f7f\u7528\u3002\n\u5c0f\u7ed3 \u6839\u636e\u4e0a\u6587\u7684\u4ecb\u7ecd\uff0c\u4f3c\u4e4e\u8fd9\u662f\u4e00\u5957\u5b8c\u7f8e\u7684\u89e3\u51b3\u65b9\u6848\uff1f\u4e0d\u5c3d\u7136\u3002\n\u76ee\u524d cert-manager \u9879\u76ee\u8fd8\u5904\u4e8e beta \u9636\u6bb5\uff0c\u6bcf\u6b21\u53d1\u5e03\u65b0\u7684 release \u90fd\u53ef\u80fd\u5305\u542b breaking change\u3002\u5728\u6211\u4eec\u4f7f\u7528\u7684\u8fd9\u6bb5\u65f6\u95f4\u5185\uff0c\u6bcf\u9694\u51e0\u4e2a\u7248\u672c\u5c31\u9700\u8981\u624b\u52a8\u5347\u7ea7\u4e00\u6b21\uff0c\u5347\u7ea7\u8fc7\u7a0b\u4e2d\u6709\u65f6\u4f1a\u51fa\u73b0\u4e00\u4e9b\u610f\u6599\u4e4b\u5916\u7684\u5c0f\u95ee\u9898\u3002\u4f8b\u5982\u6700\u8fd1\u7684 0.13 -> 0.14 \u5347\u7ea7\u8fc7\u7a0b\u4e2d\uff0c\u53d1\u73b0\u65b0\u7248\u672c\u7684 CRD manifests \u786c\u7f16\u7801\u8981\u6c42\u76f8\u5173\u8d44\u6e90\u5fc5\u987b\u5b89\u88c5\u5230 cert-manager \u547d\u540d\u7a7a\u95f4\u3002\u5e0c\u671b cert-manager \u5b98\u65b9\u80fd\u5c3d\u5feb\u63a8\u8fdb\u6b63\u5f0f\u7248\u7684\u53d1\u5e03\uff0c\u51cf\u5c11\u624b\u52a8\u5347\u7ea7\u7684\u6b21\u6570\u548c\u6210\u672c\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/getting-to-know-cert-manager\/","summary":" \u5728 Kubernetes \u4e2d\u5b9e\u73b0 TLS termination \u975e\u5e38\u5bb9\u6613\u3002Ingress \u8d44\u6e90\u5305\u542b\u4e00 \u552f\u72ec\u6709\u4e9b\u4e0d\u65b9\u4fbf\u7684\u662f\uff0c\u8bc1\u4e66\u7684\u7533\u8bf7\u4ee5\u53ca\u521b\u5efa Secret \u7684\u8fc7\u7a0b\u9700\u8981\u624b\u52a8\u6267\u884c\u3002\u5728\u8bc1\u4e66\u5373\u5c06\u8fc7\u671f\u524d\uff0c\u8fd8\u9700\u8981\u4eba\u5de5\u7eed\u671f\u3002\u5728\u4f20\u7edf VM \u90e8\u7f72\u7684\u573a\u666f\u4e0b\uff0c\u53ef\u4ee5\u4f7f\u7528\u4f8b\u5982 certbot<\/a> \u6216 acme.sh<\/a> \u7b49\u9879\u76ee\uff0c\u914d\u5408 Let’s Encrypt<\/a> \u81ea\u52a8\u7533\u8bf7\u5e76\u5b9a\u671f\u7eed\u7b7e\u8bc1\u4e66\u3002\u800c\u5728 K8s \u96c6\u7fa4\u4e2d\u5982\u4f55\u964d\u4f4e\u8bc1\u4e66\u7ef4\u62a4\u6210\u672c\uff1f\u6765\u770b\u770b\u6211\u4eec\u662f\u600e\u4e48\u505a\u7684\u3002<\/p>","title":"K8s \u4e0b\u7684 TLS \u8bc1\u4e66\u7ba1\u7406 \u2014 \u4e86\u89e3 Cert-Manager"},{"content":"\u5728\u4e0a\u4e00\u7bc7\u6587\u7ae0\u4e2d\uff0c\u4e3a\u5927\u5bb6\u4ecb\u7ecd\u4e86 Helm \u7684\u521d\u6b65\u4f7f\u7528\u3002\u7136\u800c\u8fd9\u4ecd\u7136\u4e0d\u80fd\u6ee1\u8db3\u6211\u53f8\u7684\u5de5\u4f5c\u6d41\uff0c\u4e3b\u8981\u95ee\u9898\u6709\uff1a\n Helm \u4e0d\u63d0\u4f9b apply \u547d\u4ee4\uff1b\u56e0\u6b64\u5728 CI\/CD \u573a\u666f\u4e2d\u5fc5\u987b\u8003\u8651\u5230\u5224\u65ad\u662f install \u8fd8\u662f upgrade\u3002 \u4e0d\u65b9\u4fbf\u63a7\u5236\u5b89\u88c5\u7684 chart \u7248\u672c\uff1b\u4f8b\u5982\u6307\u5b9a\u7248\u672c\u8303\u56f4\u3001\u9501\u5b9a\u67d0\u4e00\u7248\u672c\u7b49\u3002 Values \u5fc5\u987b\u662f\u7eaf\u6587\u672c\uff1b\u4e0d\u652f\u6301\u6a21\u677f\u6e32\u67d3\u3001\u4e0d\u65b9\u4fbf\u533a\u5206\u73af\u5883\u3002 \u56e0\u6b64\u6211\u4eec\u9700\u8981 Helm Releases as Code\u3002\u6211\u542c\u8bf4\u8fc7\u7684\u4ea7\u54c1\u6709 Helmsman \u548c Helmfile \u4e24\u6b3e\u3002\u76ee\u524d\u6211\u4eec\u56e2\u961f\u5df2\u7ecf\u4f7f\u7528\u540e\u8005\u4e00\u6bb5\u65f6\u95f4\uff0c\u5e76\u4e14\u6709\u56e2\u961f\u6210\u5458\u8d21\u732e\u8fc7\u90e8\u5206\u4ee3\u7801\u3002\n\u81f3\u4e8e\u4e3a\u4ec0\u4e48\u9009\u62e9 Helmfile\uff0c\u80cc\u540e\u7684\u771f\u6b63\u539f\u56e0\u662f\u5728\u53d1\u73b0 Helmfile \u7684\u65f6\u5019\u8fd8\u6ca1\u542c\u8bf4\u8fc7 Helmsman\u3002\u540e\u6765\u4e86\u89e3 Helmsman \u5e76\u5c1d\u8bd5\u540e\u53d1\u73b0\u5b83\u5e76\u6ca1\u6709\u89e3\u51b3\u6211\u4eec\u540e\u4e24\u4e2a\u95ee\u9898\uff0c\u56e0\u6b64\u4e5f\u5c31\u6ca1\u6709\u66ff\u6362\u4e86\u3002\n\u63a5\u4e0b\u6765\u6211\u9488\u5bf9\u4ee5\u4e0a\u51e0\u4e2a\u75db\u70b9\u6765\u8bf4\u8bf4\u6211\u4eec\u662f\u600e\u4e48\u505a\u7684\u3002\n\u4e00\u952e Apply Helmfile \u7684\u6587\u6863\u975e\u5e38\u7b80\u660e\u3001\u76f4\u63a5\uff0c\u793a\u4f8b\u914d\u7f6e\u6587\u4ef6 \u5c31\u5728 README \u91cc\u3002\u6211\u8282\u9009\u4e00\u5c0f\u6bb5\u6765\u8bf4\u51e0\u4e2a\u5fc5\u8981\u7684\u914d\u7f6e\u9879\uff1a\nrepositories: - name: bitnami url: https:\/\/charts.bitnami.com\/bitnami releases: - name: my-release # Release name namespace: staging # Release namespace chart: bitnami\/redis # Chart name values: # \u7b49\u6548\u4e8e helm \u7684 --values \u9009\u9879 - foo.yaml set: # \u7b49\u6548\u4e8e helm \u7684 --set \u9009\u9879 - name: cluster.enabled value: "false" \u5c06\u4ee5\u4e0a\u5185\u5bb9\u4fdd\u5b58\u4e3a helmfile.yaml \u6587\u4ef6\uff0c\u968f\u540e\u6267\u884c helmfile apply \u5373\u53ef\u3002Helmfile \u5c06\u4f1a\u5e2e\u6211\u4eec\uff1a\n \u6dfb\u52a0 repositories \u4e2d\u58f0\u660e\u7684 Helm chart repo\u3002 \u6839\u636e release \u5c0f\u8282\u5185\u7684\u914d\u7f6e\uff0c\u5b89\u88c5\u6216\u66f4\u65b0 chart\u3002 \u56e0\u6b64\uff0c\u4e0a\u7bc7\u6587\u7ae0\u4e2d\u63d0\u5230\u7684\uff1a\nhelm repo add ... helm install ... helm upgrade ... \u53ef\u76f4\u63a5\u88ab\u7b80\u5316\u4e3a\uff1a\nhelmfile apply \u540c\u65f6\uff0c\u5982\u679c\u4f60\u5b89\u88c5\u4e86 helm-diff \u63d2\u4ef6\uff0cHelmfile \u8fd8\u4f1a\u5728\u6267\u884c\u64cd\u4f5c\u524d\u8f93\u51fa\u6e05\u6670\u7684 diff\uff1a\n\u5177\u4f53\u5b89\u88c5\u8fc7\u7a0b\u672c\u6587\u4e0d\u518d\u8be6\u8ff0\u3002\nChart \u7248\u672c\u63a7\u5236 \u5927\u591a\u6570\u793e\u533a\u63d0\u4f9b\u7684 charts \u90fd\u91c7\u7528 Semver 2.0 \u4f5c\u4e3a\u7248\u672c\u53f7\u3002\u56e0\u6b64\u5927\u591a\u6570\u60c5\u51b5\u4e0b\u6211\u4eec\u90fd\u5e0c\u671b\u9501\u5b9a\u4e3b\u7248\u672c\uff0c\u9632\u6b62\u8bef\u5347\u7ea7\u5f15\u5165 breaking change\u3002Helmfile \u63d0\u4f9b\u4e86 version \u53c2\u6570\u53ef\u7528\u4e8e\u6307\u5b9a\u7248\u672c\u8303\u56f4\uff0c\u4f8b\u5982\uff1a\n# ... releases: - name: my-release namespace: staging chart: bitnami\/redis version: ^10.5.13 # \u9632\u6b62\u5347\u7ea7\u5230 v11.x.x # ... \u540c\u65f6\uff0cHelmfile \u8fd8\u63d0\u4f9b\u4e86 lock \u6587\u4ef6\uff0c\u529f\u80fd\u4e0e\u5e38\u89c1\u7248\u672c\u7ba1\u7406\u5668\u4e2d\u7684 lock \u7c7b\u4f3c\u3002\u914d\u5408 CI \u65f6\uff0c\u9664\u975e\u63d0\u4ea4\u4ee3\u7801\u6539\u52a8 lock \u6587\u4ef6\uff0c\u5426\u5219\u5728\u4efb\u610f\u65f6\u95f4\u70b9\u6267\u884c CI \u5b89\u88c5\u7684 chart \u7248\u672c\u662f\u4e00\u81f4\u7684\u3002\n\u4f60\u53ef\u4ee5\u901a\u8fc7 helmfile deps \u547d\u4ee4\u751f\u6210 lock\uff0c\u4ee5\u4e0a helmfile.yaml \u751f\u6210\u7684\u793a\u4f8b helmfile.lock \u6587\u4ef6\u957f\u8fd9\u6837\uff1a\nversion: v0.102.0 dependencies: - name: redis repository: https:\/\/charts.bitnami.com\/bitnami version: 10.5.13 digest: sha256:20f2840c2642bf98f03d2b5cf890c73e1f2c100a0f0475777ae7788b2a0ae98d generated: "2020-03-24T14:14:01.663801+08:00" \u53ef\u770b\u51fa\u5305\u542b\u5177\u4f53\u7684 chart \u7248\u672c\u3001Helmfile \u7248\u672c\u3001\u54c8\u5e0c\u503c\u3001\u751f\u6210\u65f6\u95f4\u7b49\u53c2\u6570\u3002\n\u5f53\u9700\u8981\u66f4\u65b0 lock \u6587\u4ef6\u65f6\uff0c\u540c\u6837\u6267\u884c helmfile deps \u5373\u53ef\u3002\n\u52a8\u6001 Values \u5728 CI \u4e0a\u90e8\u7f72\u65f6\uff0c\u6709\u4e9b values \u7684\u503c\u4e0d\u662f\u56fa\u5b9a\u7684\uff0c\u53ef\u80fd\u6765\u81ea\u4e8e\u73af\u5883\u53d8\u91cf\uff0c\u4e5f\u53ef\u80fd\u7531\u4e8e\u73af\u5883\u5dee\u5f02\u800c\u4e0d\u540c\u3002\n\u73af\u5883\u53d8\u91cf \u5728\u4e4b\u524d\u7684\u6587\u7ae0\u4e2d\u6211\u4eec\u4ecb\u7ecd\u8fc7 review apps\uff0c\u5176\u4e2d\u6709\u4e00\u9879\u5f88\u91cd\u8981\u7684\u9700\u6c42\u662f\uff0c\u6bcf\u6b21\u5f00\u65b0\u5206\u652f\u90e8\u7f72\u7684 release \u4e0d\u80fd\u540c\u540d\uff0c\u5426\u5219\u8d44\u6e90\u4f1a\u56e0\u4e3a\u91cd\u540d\u800c\u5b89\u88c5\u5931\u8d25\u3002\u6240\u4ee5\u6211\u4eec\u8981\u8bfb\u53d6 GitLab CI \u7684 $CI_ENVIRONMENT_SLUG \u73af\u5883\u53d8\u91cf\uff0c\u5e76\u62fc\u63a5\u5230\u6700\u7ec8\u7684 Helm release name\u3002\u56e0\u6b64\u53ef\u4ee5\u8fd9\u6837\u505a\uff1a\n# ... releases: - name: api-{{ requiredEnv "CI_ENVIRONMENT_SLUG" }} chart: .\/deploy\/chart # ... \u5176\u5b9e helmfile.yaml \u662f\u4e2a Go template \u683c\u5f0f\u7684\u6a21\u677f\uff0c\u56e0\u6b64\u4f60\u8fd8\u53ef\u4ee5\u628a\u73af\u5883\u53d8\u91cf\u4f20\u9012\u7ed9 values\uff0c\u4e5f\u53ef\u4ee5\u4f7f\u7528 if \u4e4b\u7c7b\u7684\u8bed\u6cd5\u3002\u4f8b\u5982\uff1a\n# ... releases: - name: my-release namespace: staging chart: bitnami\/redis set: - name: cluster.enabled value: {{ requiredEnv "REDIS_CLUSTER_ENABLED" }} \u533a\u5206\u73af\u5883 Helmfile \u63d0\u4f9b\u4e86\u540d\u4e3a environments \u7684\u914d\u7f6e\uff0c\u6b64\u5904\u5e76\u4e0d\u662f\u6307\u73af\u5883\u53d8\u91cf\uff0c\u800c\u662f\u4e00\u4e2a\u4e13\u5c5e\u4e8e Helmfile \u7684\u6982\u5ff5\u3002\u6765\u770b\u770b\u4f8b\u5b50\u3002\u9996\u5148\u521b\u5efa\u4e24\u4e2a\u6587\u4ef6\uff1a\n# environments\/staging\/values.yaml releaseName: staging-release # environment\/production\/values.yaml releaseName: production-release \u914d\u7f6e helmfile.yaml\uff1a\n# ... environments: staging: values: # \u9488\u5bf9 staging \u73af\u5883\u7684 values\uff0c\u53ef\u901a\u8fc7 {{ .Environment.Values.* }} \u8bfb\u53d6 - environments\/staging\/values.yaml production: values: # \u9488\u5bf9 production \u73af\u5883\u7684 values\uff0c\u8bfb\u53d6\u65b9\u5f0f\u76f8\u540c - environment\/production\/values.yaml releases: - name: {{ .Environment.Values.releaseName }} # \u5f15\u7528 environment values \u7684\u503c\uff08\u4f8b\u5982 staging-release \u6216 production-release\uff09 namespace: {{ .Environment.Name }} # \u5f15\u7528 envrionment \u540d\u79f0\uff08\u4f8b\u5982 staging \u6216 production\uff09 chart: bitnami\/redis values: - values\/{{ .Environment.Name }}\/values.yaml # \u6839\u636e\u73af\u5883\u540d\u79f0\u8bfb\u53d6\u4e0d\u540c\u7684 Helm values \u6587\u4ef6 {{ if eq .Environment.Name "production" }} # Go template \u7684 if \u8bed\u53e5 - values\/production-specified-values.yaml # \u4ec5\u7528\u4e8e production \u73af\u5883\u7684 Helm values {{ end }} \u5728\u6267\u884c helmfile \u65f6\u4f7f\u7528 -e \u9009\u9879\u5373\u53ef\u6307\u5b9a\u5b89\u88c5\u7684\u73af\u5883\uff1a\nhelmfile -e staging apply \u6ce8\u610f -e \u5fc5\u987b\u5728\u5b50\u547d\u4ee4 apply \u4e4b\u524d\uff0c\u5b83\u662f\u4e00\u4e2a\u5168\u5c40\u9009\u9879\u3002\n\u5c0f\u7ed3 \u4e0d\u5f97\u4e0d\u8bf4\uff0cHelmfile \u7684\u786e\u5f88\u7075\u6d3b\uff0c\u4f46\u91c7\u7528 Go template + YAML \u8bed\u6cd5\u7f16\u5199\u914d\u7f6e\u7684\u65b9\u5f0f\u7a0d\u6709\u4e9b\u96be\u4ee5\u9605\u8bfb\u548c\u7ef4\u62a4\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/getting-to-know-helmfile\/","summary":" \u5728\u4e0a\u4e00\u7bc7\u6587\u7ae0\u4e2d\uff0c\u4e3a\u5927\u5bb6\u4ecb\u7ecd\u4e86 Helm \u7684\u521d\u6b65\u4f7f\u7528\u3002\u7136\u800c\u8fd9\u4ecd\u7136\u4e0d\u80fd\u6ee1\u8db3\u6211\u53f8\u7684\u5de5\u4f5c\u6d41\uff0c\u4e3b\u8981\u95ee\u9898\u6709\uff1a<\/p>\n \u56e0\u6b64\u6211\u4eec\u9700\u8981 Helm<\/a> \u662f\u4e00\u6b3e\u9488\u5bf9 Kubernetes \u7684\u300c\u5305\u7ba1\u7406\u5668\u300d\uff0c\u867d\u8bf4\u79f0\u5b83\u4e3a\u5305\u7ba1\u7406\u5668\uff0c\u5176\u5b9e\u4e0e\u5e94\u7528\u5f00\u53d1\u8fc7\u7a0b\u4e2d\u4f7f\u7528\u7684\u5305\u7ba1\u7406\u5668\u7565\u6709\u4e0d\u540c\uff0c\u540e\u8005\u7ba1\u7406\u7684\u662f\u5e94\u7528\u5f00\u53d1\u8fc7\u7a0b\u4e2d\u7684\u4f9d\u8d56\uff0cHelm \u5219\u7ba1\u7406\u7740 Kubernetes \u4e2d\u5e94\u7528\u90e8\u7f72\u65f6\u5404\u9879\u8d44\u6e90\u7684\u4f9d\u8d56\u3002<\/p>\n \u5982\u679c\u4f60\u5bf9 Kubernetes \u6709\u4e00\u5b9a\u4e86\u89e3\uff0c\u76f8\u4fe1\u4f60\u5df2\u7ecf\u5bf9 Deployment\u3001Service\u3001Ingress \u7b49\u8d44\u6e90\u6709\u4e86\u4e00\u5b9a\u8ba4\u8bc6\uff0c\u5927\u591a\u6570 Web \u5e94\u7528\u5728\u90e8\u7f72\u5230 K8s \u96c6\u7fa4\u4e0a\u65f6\u9700\u8981\u5927\u91cf\u4e0d\u540c\u7c7b\u578b\u7684\u8d44\u6e90\u3002\u4f60\u53ef\u4ee5\u5c06\u8fd9\u4e9b\u8d44\u6e90\u58f0\u660e\u7684 YAML \u6587\u4ef6\u653e\u5728\u540c\u4e00\u4e2a\u6587\u4ef6\u5939\u4e0b\u7ba1\u7406\uff0c\u4f46\u662f\u968f\u7740\u6570\u91cf\u7684\u589e\u52a0\uff0c\u5982\u4f55\u590d\u7528\u8fd9\u4e9b YAML\u3001\u5982\u4f55\u7075\u6d3b\u53c8\u4e0d\u7e41\u7410\u5730\u8c03\u6574\u914d\u7f6e\u4ee5\u9002\u5e94\u4e0d\u540c\u73af\u5883\u3001\u5982\u4f55\u5c06\u8fd9\u4e9b YAML \u4f5c\u4e3a\u4e00\u4e2a\u6574\u4f53\u7ba1\u7406\uff0c\u6210\u4e86\u4e00\u4e2a\u4e0d\u5c0f\u7684\u95ee\u9898\u3002<\/p>","title":"K8s \u4e0b\u7684\u5e94\u7528\u7ba1\u7406 \u2014 \u4e86\u89e3 Helm"},{"content":"\u5e73\u65f6\u9664\u4e86\u7ef4\u62a4\u516c\u53f8\u548c\u79c1\u4eba\u5728\u516c\u6709\u4e91\u7684 Kubernetes clusters \u4e4b\u5916\uff0c\u4e2a\u4eba\u7f51\u7edc\u73af\u5883\u4e0b\u8fd8\u6709\u4e9b\u9700\u8981\u8fd0\u884c\u5728\u672c\u5730\u7684 workload\uff1b\u6bd4\u5982\u7528\u4e8e\u76d1\u63a7\u672c\u5730\u8def\u7531\u8bbe\u5907\uff08~\u4f5c~ XD\uff09\u7684 Prometheus exporters \u548c\u4e00\u4e9b\u65b0\u5947\u73a9\u610f\u513f\u3002\u4e3a\u4e86\u80fd\u591f\u8fd0\u884c\u8fd9\u4e9b\u5e94\u7528\uff0c\u6211\u5728\u5bb6\u7ec4\u5efa\u4e86\u4e00\u5957\u300c\u8fb9\u7f18\u8ba1\u7b97\u96c6\u7fa4\u300d\uff0c\u6765\u770b\u770b\u662f\u600e\u4e48\u505a\u7684\u5427\u3002\n\u786c\u4ef6\u51c6\u5907 \u6211\u624b\u5934\u4e0a\u76ee\u524d\u6709\u4e00\u53f0 Raspberry Pi 3 B+\uff0c\u6211\u60f3\u4f7f\u7528\u5b83\u4f5c\u4e3a Master \u8282\u70b9\uff1a\n\u548c\u4e24\u5757 Nanopi NEO 2\uff1a\n\u642d\u5efa\u96c6\u7fa4 K3s \u4e3a\u4e86\u80fd\u591f\u9002\u5e94\u8f83\u4f4e\u7684\u8ba1\u7b97\u6027\u80fd\uff0c\u6211\u9009\u62e9\u4e86\u4f7f\u7528 K3s \u90e8\u7f72 Kubernetes \u96c6\u7fa4\u3002K3s \u662f\u4e00\u6b3e Rancher \u5f00\u6e90\u7684\u8f7b\u91cf Kubernetes \u5b9e\u73b0\uff0c\u4e3b\u8981\u76ee\u6807\u4e3a\u7269\u8054\u7f51\u548c\u8fb9\u7f18\u8ba1\u7b97\u7b49\u573a\u666f\u3002\n\u5982\u679c\u4f60\u662f\u5728\u642d\u5efa\u6d4b\u8bd5\u96c6\u7fa4\uff0c\u4e0d\u59a8\u8bd5\u8bd5 Minikube \u548c MicroK8s\uff0c\u5b83\u4eec\u80fd\u591f\u63d0\u4f9b\u66f4\u52a0\u63a5\u8fd1\u751f\u4ea7\u73af\u5883\u96c6\u7fa4\u7684\u4f53\u9a8c\u3002\n\u4e0d\u540c\u4e8e\u4ee5\u4e0a\u4e24\u6b3e\u4ea7\u54c1\uff0cK3s \u9664\u4e86\u66f4\u52a0\u8f7b\u91cf\u5916\uff0c\u8fd8\u652f\u6301\u591a\u8282\u70b9\uff0c\u56e0\u6b64\u6bd4\u8f83\u7b26\u5408\u6211\u7684\u4f7f\u7528\u573a\u666f\u3002\n \u4ee5\u4e0a\u4ea7\u54c1\u7684\u8be6\u7ec6\u5bf9\u6bd4\u53ef\u53c2\u8003 \u8fd9\u7bc7\u5e16\u5b50\u3002\n K3sup K3sup \u662f\u7531 OpenFaaS \u7684\u521b\u59cb\u4eba Alex Ellis \u5f00\u53d1\u7684\u4e00\u6b3e\u5c0f\u5de5\u5177\uff0c\u53ef\u7528\u4e8e\u5feb\u901f\u90e8\u7f72 K3s \u8282\u70b9\uff0c\u4f8b\u5982\u90e8\u7f72 master node\uff1a\nk3sup install --ip "$MASTER" --user pi \u6267\u884c\u4ee5\u4e0a\u547d\u4ee4\uff0cK3sup \u5c06\u4ee5\u7528\u6237 pi \u7684\u8eab\u4efd\u901a\u8fc7 SSH \u8fde\u63a5 $MASTER\uff08\u4e5f\u5c31\u662f\u4f5c\u4e3a Master \u8282\u70b9\u7684\u6811\u8393\u6d3e IP \u5730\u5740\uff09\uff0c\u5728\u4e0b\u8f7d\u5e76\u5b89\u88c5 K3s \u540e\uff0cK3sup \u4f1a\u5c06\u751f\u6210\u7684 Kubeconfig \u4ece\u8fdc\u7aef\u62c9\u53d6\u5230\u672c\u5730\u7684\u5de5\u4f5c\u76ee\u5f55\u4e2d\u3002\n\u63a5\u4e0b\u6765\u90e8\u7f72 worker node\uff1a\nk3sup join --ip "$WORKER" --server-ip "$MASTER" --user pi \u968f\u540e\u5373\u53ef\u901a\u8fc7 kubectl \u7ba1\u7406\u96c6\u7fa4\u4e86\uff1a\nexport KUBECONFIG="$(pwd)\/kubeconfig" kubectl get node \u5177\u4f53\u7684\u5b89\u88c5\u8fc7\u7a0b\u9650\u4e8e\u7bc7\u5e45\u4e0d\u518d\u8be6\u8ff0\uff0c\u53ef\u53c2\u8003 Alex Ellis \u7684\u8fd9\u7bc7\u535a\u5ba2\u3002\n\u4f7f\u7528 NodeAffinity \u5904\u7406\u4e0d\u540c CPU \u67b6\u6784\u95ee\u9898 \u6839\u636e\u4e0a\u56fe\u53ef\u4ee5\u53d1\u73b0\uff0c\u6811\u8393\u6d3e\u7684 CPU arch \u662f arm\uff0c\u800c NanoPi \u662f arm64\u3002\u4e3a\u4e86\u80fd\u591f\u5c06\u5bf9\u5e94\u5176\u67b6\u6784\u7684\u5bb9\u5668\u955c\u50cf\u8c03\u5ea6\u5230\u6b63\u786e\u7684\u8282\u70b9\uff0c\u4f7f\u7528 NodeAffinity \u662f\u89e3\u51b3\u65b9\u6848\u4e4b\u4e00\u3002\u4f8b\u5982\u90e8\u7f72\u5185\u7f51\u7a7f\u900f\u9879\u76ee inlets\uff1a\napiVersion: apps\/v1 kind: Deployment metadata: name: inlets-arm64 spec: selector: matchLabels: app: inlets replicas: 1 template: metadata: labels: app: inlets spec: containers: - name: inlets image: inlets\/inlets:2.6.4-arm64 # \u955c\u50cf\u4e3a arm64 \u7248\u672c args: [server] affinity: nodeAffinity: # \u5728 Pod Scheduling \u65f6\u5f3a\u5236\u8981\u6c42 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: # \u8282\u70b9\u9009\u62e9\u5668\u6570\u7ec4 - matchExpressions: # \u5339\u914d\u8282\u70b9 labels - key: kubernetes.io\/arch # label \u540d\u79f0 operator: In # \u8981\u6c42\u6ee1\u8db3\u4ee5\u4e0b\u4efb\u610f\u503c\u5176\u4e00 values: [arm64] # \u53ef\u6307\u5b9a\u591a\u4e2a\u503c \u53ef\u4ee5\u770b\u5230\u6211\u4eec\u5728 Pod Spec \u5185\u5b9a\u4e49\u4e86 affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms \u5b57\u6bb5\uff0c\u503c\u4e3a NodeSelectorTerm \u6570\u7ec4\u3002\u6211\u4eec\u5b9a\u4e49\u4e86\u4e00\u6761\u89c4\u5219\u4e3a\uff1alabel kubernetes.io\/arch \u7684\u503c\u5fc5\u987b\u5b58\u5728\u4e8e\u6570\u7ec4 [arm64] \u4e2d\u3002\u672c\u4f8b\u4e2d\u53ea\u6709\u5355\u4e2a\u503c\uff0c\u56e0\u6b64\u7b49\u6548\u4e8e\uff1a\u5fc5\u987b\u7b49\u4e8e arm64\u3002\nDocker Manifests \u5982\u679c\u4f60\u60f3\u8981\u90e8\u7f72\u7684\u5e94\u7528\u955c\u50cf\u662f\u4f60\u81ea\u5df1\u6784\u5efa\u7684\u8bdd\uff0c\u90a3\u4e48\u5f3a\u70c8\u63a8\u8350\u8bd5\u8bd5\u770b Docker image manifest v2 \u7684\u7279\u6027 \u2014\u2014 \u53ef\u521b\u5efa manifest lists \u5305\u542b\u591a\u4e2a\u4e0d\u540c platforms \u548c architectures \u7684 image manifests\u3002\nDocker Client \u4e5f\u63d0\u4f9b\u4e86\u4e00\u4e2a\u5b9e\u9a8c\u6027\u7684\u547d\u4ee4 <code>docker manifest<\/code> \u6765\u521b\u5efa\u3001\u63a8\u9001 manifest lists\u3002\u6211\u7ed3\u5408\u5b9e\u4f8b\u6765\u8bf4\u8bf4\u5b83\u7684\u7528\u6cd5\u3002\n\u7531\u4e8e\u8be5\u547d\u4ee4\u76ee\u524d\u662f\u300c\u5b9e\u9a8c\u6027\u300d\u7684\uff0c\u9996\u5148\u9700\u8981\u901a\u8fc7\u73af\u5883\u53d8\u91cf\u5f00\u542f\u624d\u80fd\u591f\u4f7f\u7528\u3002\u6211\u4eec\u987a\u4fbf\u914d\u7f6e\u51e0\u4e2a\u53d8\u91cf\u5907\u7528\uff1a\nexport DOCKER_CLI_EXPERIMENTAL=enabled # \u5f00\u542f Docker CLI \u7684\u5b9e\u9a8c\u6027\u529f\u80fd export IMAGE_REPO=vendor\/app # \u955c\u50cf\u540d\u79f0\uff0c\u8bf7\u6309\u9700\u586b\u5199 export IMAGE_TAG=v1.0.0 # \u955c\u50cf tag\uff0c\u8bf7\u6309\u9700\u586b\u5199 \u5047\u8bbe\u4f60\u5df2\u7ecf\u5206\u522b\u6784\u5efa\u597d\u9488\u5bf9 arm64 \u548c arm \u7684\u955c\u50cf\uff0c\u63a5\u4e0b\u6765\u5148\u5c06\u5b83\u4eec\u63a8\u9001\u5230 registry\uff1a\ndocker push "${IMAGE_REPO}:${IMAGE_TAG}-arm64" docker push "${IMAGE_REPO}:${IMAGE_TAG}-arm" \u968f\u540e\u521b\u5efa manifest list \u6307\u5411\u591a\u4e2a image manifests\uff1a\ndocker manifest create --amend \\ "${IMAGE_REPO}:${IMAGE_TAG}" \\ # manifest list \u540d\u79f0 "${IMAGE_REPO}:${IMAGE_TAG}-arm64" \\ # \u9488\u5bf9 arm64 \u7684\u955c\u50cf "${IMAGE_REPO}:${IMAGE_TAG}-arm" # \u9488\u5bf9 arm \u7684\u955c\u50cf \u6700\u5173\u952e\u7684\u4e00\u6b65\u5230\u4e86\uff0c\u4e3a\u5b83\u4eec\u6dfb\u52a0\u6ce8\u89e3\u3002\u5c06\u6bcf\u4e2a manifest \u7ed1\u5b9a\u81f3\u7279\u5b9a\u7684 os \u548c arch\uff1a\n# \u6ce8\u89e3 arm64 image manifest docker manifest annotate \\ --os linux \\ # \u7cfb\u7edf\u4e3a Linux --arch arm64 \\ # \u67b6\u6784\u4e3a arm64 "${IMAGE_REPO}:${IMAGE_TAG}" \\ # manifest list \u540d\u79f0 "${IMAGE_REPO}:${IMAGE_TAG}-arm64" # \u88ab\u6ce8\u89e3\u7684 manifest # \u6ce8\u89e3 arm image manifest docker manifest annotate \\ --os linux \\ # \u7cfb\u7edf\u540c\u4e3a Linux --arch arm \\ # \u67b6\u6784\u4e3a arm "${IMAGE_REPO}:${IMAGE_TAG}" \\ # manifest list \u540d\u79f0 "${IMAGE_REPO}:${IMAGE_TAG}-arm" # \u88ab\u6ce8\u89e3\u7684 manifest \u6b64\u65f6 manifest list \u5df2\u7ecf\u521b\u5efa\u597d\u4e86\uff0c\u53ef\u4f7f\u7528 docker manifest inspect \u547d\u4ee4\u68c0\u67e5\u4e00\u4e0b\u5177\u4f53\u4fe1\u606f\u3002\u786e\u8ba4\u65e0\u8bef\u540e\uff0c\u63a8\u9001\u5230 registry \u5373\u53ef\uff1a\ndocker manifest push --purge "${IMAGE_REPO}:${IMAGE_TAG}" \u9700\u8981\u6ce8\u610f\u7684\u662f\uff0c\u6b64\u5904\u7684 --purge \u53c2\u6570\u662f\u5fc5\u4e0d\u53ef\u5c11\u7684\u3002\u56e0\u4e3a Docker CLI \u5e76\u6ca1\u6709\u63d0\u4f9b docker manifest remove \u6216\u662f docker manifest purge \u4e4b\u7c7b\u7684\u547d\u4ee4\u3002\u5982\u679c\u4e0d\u968f\u7740\u63a8\u9001\u76f4\u63a5\u6e05\u7406\uff0c\u90a3\u5c31\u53ea\u80fd\u5230\u672c\u5730\u7684 $HOME\/.docker\/manifests \u76ee\u5f55\u624b\u52a8\u5220\u9664\u4e86… \u867d\u7136\u65e9\u5728 2018 \u5e74\u521d\u5c31\u6709\u4eba\u9488\u5bf9\u6b64\u95ee\u9898\u63d0\u51fa issue\uff0c\u4f46\u622a\u6b62\u53d1\u7a3f\u524d\u4ecd\u6ca1\u6709\u4ed3\u5e93 member \u56de\u590d\u3002\n\u6700\u540e\uff0c\u4f7f\u7528\u521a\u521a\u521b\u5efa\u7684 manifest list \u540d\u79f0\u4ee3\u66ff\u6709\u540e\u7f00\u7684 image manifest \u540d\u79f0\u5373\u53ef\uff0c\u751a\u81f3\u53ef\u4ee5\u589e\u52a0 replicas \u7684\u6570\u91cf\uff0c\u901a\u8fc7 PodAntiAffinity \u523b\u610f\u5c06\u591a\u4e2a\u526f\u672c\u90e8\u7f72\u5728\u4e0d\u540c CPU \u67b6\u6784\u7684\u8282\u70b9\u4e0a\u800c\u65e0\u9700\u533a\u5206 image\uff1a\napiVersion: apps\/v1 kind: Deployment metadata: name: inlets spec: selector: matchLabels: app: inlets replicas: 2 template: metadata: labels: app: inlets spec: containers: - name: inlets image: inlets\/inlets:2.6.4 # \u540e\u7f00 `arm64` \u5df2\u88ab\u79fb\u9664 args: [server] affinity: podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - topologyKey: kubernetes.io\/arch labelSelector: matchLabels: app: inlets \u5b8c\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/setup-an-edge-computing-cluster-with-different-archs-of-cpus\/","summary":" \u5e73\u65f6\u9664\u4e86\u7ef4\u62a4\u516c\u53f8\u548c\u79c1\u4eba\u5728\u516c\u6709\u4e91\u7684 Kubernetes clusters \u4e4b\u5916\uff0c\u4e2a\u4eba\u7f51\u7edc\u73af\u5883\u4e0b\u8fd8\u6709\u4e9b\u9700\u8981\u8fd0\u884c\u5728\u672c\u5730\u7684 workload\uff1b\u6bd4\u5982\u7528\u4e8e\u76d1\u63a7\u672c\u5730\u8def\u7531\u8bbe\u5907\uff08~\u4f5c~ XD\uff09\u7684 Prometheus exporters \u548c\u4e00\u4e9b\u65b0\u5947\u73a9\u610f\u513f\u3002\u4e3a\u4e86\u80fd\u591f\u8fd0\u884c\u8fd9\u4e9b\u5e94\u7528\uff0c\u6211\u5728\u5bb6\u7ec4\u5efa\u4e86\u4e00\u5957\u300c\u8fb9\u7f18\u8ba1\u7b97\u96c6\u7fa4\u300d\uff0c\u6765\u770b\u770b\u662f\u600e\u4e48\u505a\u7684\u5427\u3002<\/p>","title":"\u642d\u5efa\u5f02\u6784 CPU \u7ec4\u6210\u7684\u8fb9\u7f18\u8ba1\u7b97 Kubernetes \u96c6\u7fa4"},{"content":"\u4e3a\u4e86\u80fd\u591f\u4f7f\u4ee3\u7801\u5728\u4e0d\u540c\u9879\u76ee\u590d\u7528\uff0c\u6211\u53f8\u62bd\u8c61\u3001\u7f16\u5199\u4e86\u8bb8\u591a\u79c1\u6709 libraries\u3002\u5b83\u4eec\u7684\u6e90\u4ee3\u7801\u88ab\u7edf\u4e00\u5b58\u653e\u5728 GitLab\uff0c\u7531 CI \u786e\u4fdd\u4ee3\u7801\u98ce\u683c\u4e00\u81f4\uff0c\u5e76\u6267\u884c\u5355\u5143\u6d4b\u8bd5\u548c\u9759\u6001\u68c0\u67e5\u7b49\u3002\u7531\u4e8e\u4ed3\u5e93\u6570\u91cf\u4f17\u591a\uff0c\u5982\u4f55\u6709\u6548\u5730\u7ec4\u7ec7\u548c\u7ba1\u7406 CI \u914d\u7f6e\u6210\u4e86\u95ee\u9898\u3002\u7ecf\u8fc7\u957f\u65f6\u95f4\u7684\u63a2\u7d22\u548c\u4f18\u5316\uff0c\u6211\u6574\u7406\u4e86\u4e00\u4e9b\u7ecf\u9a8c\uff0c\u5e0c\u671b\u5bf9\u4f60\u6709\u6240\u5e2e\u52a9\u3002\nYAML \u7684\u5c0f\u6280\u5de7 \u6574\u6574 70 \u591a\u9875\u7684 YAML 1.2 Specification \u5b9a\u4e49\u4e86 YAML \u7075\u6d3b\u3001\u4e30\u5bcc\u7684\u8bed\u6cd5\u3002\u8fd9\u5176\u4e2d\u4e00\u9879\u540d\u4e3a Node Anchors \u7684\u7279\u6027\u80fd\u591f\u5e2e\u6211\u4eec\u5b9e\u73b0\u7eaf YAML \u7684\u914d\u7f6e\u590d\u7528\u3002\n\u4f8b\u5982\uff1a\ndeploy production: script: - echo "deploying to production" only: &foo_anchor variables: - $CI_COMMIT_TAG deploy staging: script: - echo "deploying to staging" except: *foo_anchor \u5176\u4e2d\uff0conly \u548c except \u662f\u7ed3\u6784\u76f8\u540c\u4f46\u4f5c\u7528\u521a\u597d\u76f8\u53cd\u7684\u4e00\u5bf9\u5b57\u6bb5\u3002\u4f7f\u7528 & + anchor \u6807\u8bc6\u7b26\u5373\u53ef\u8bbe\u7f6e\u951a\u70b9\uff0c\u5728\u9700\u8981\u590d\u7528\u7684\u5b57\u6bb5\u586b\u5199 * + anchor \u6807\u8bc6\u7b26\u5373\u53ef\uff0c\u5b83\u4eec\u7684\u503c\u5c06\u4f1a\u4fdd\u6301\u4e00\u81f4\u3002\nYAML 1.1 \u4e2d\u8fd8\u5b9a\u4e49\u4e86 Merge Key \u7279\u6027\uff0c\u867d\u7136\u5728 YAML 1.2 \u4e2d\u5df2\u7ecf\u6ca1\u6709\u660e\u786e\u89c4\u5b9a\uff0c\u4f46\u5728 GitLab CI \u914d\u7f6e\u4e2d\u4ecd\u7136\u53ef\u4ee5\u7ee7\u7eed\u4f7f\u7528\u3002\u76f8\u6bd4\u4e4b\u4e0b\uff0c\u6211\u4eec\u66f4\u52a0\u63a8\u8350\u4f7f\u7528 extends \u5b57\u6bb5\uff0c\u56e0\u6b64\u8be5\u6b64\u5904\u4e0d\u518d\u8d58\u8ff0\u3002\nextends \u5b57\u6bb5 \u5728 GitLab CI \u914d\u7f6e\u6587\u6863\u4e2d\u63cf\u8ff0\u4e86\u4e00\u4e2a\u540d\u4e3a <code>extends<\/code> \u7684\u5b57\u6bb5\uff0c\u53ef\u7c7b\u6bd4\u5730\u7406\u89e3\u4e3a\u9762\u5411\u5bf9\u8c61\u4e2d\u7684\u300c\u7ee7\u627f\u300d\u3002\u4f8b\u5982\uff1a\n.foo_template_job: script: - echo "Deploying ${DEPLOY_ENV}" deploy production: extends: .foo_template_job variables: DEPLOY_ENV: production deploy staging: extends: .foo_template_job variables: DEPLOY_ENV: staging \u5176\u4e2d\uff0c.foo_template_job \u662f\u4e00\u4e2a template job\uff0c\u987e\u540d\u601d\u4e49\uff0c\u5b83\u4e0d\u4f1a\u88ab\u5f53\u4f5c\u771f\u6b63\u7684 job \u51fa\u73b0\u5728 pipelines \u4e2d\uff0c\u800c\u662f\u4f5c\u4e3a\u6a21\u677f\u88ab\u5176\u5b83 jobs \u590d\u7528\u3001\u6269\u5c55\u3002\u540c\u65f6\u6211\u4eec\u5206\u522b\u5b9a\u4e49\u4e86 deploy production \u548c deploy staging \u4e24\u4e2a job \u4ee5\u53ca\u4e0d\u540c\u7684 variables\uff0c\u6700\u7ec8\u88ab template job \u5185\u7684 script \u4f7f\u7528\u3002\n\u8fd9\u6837\u6211\u4eec\u5c31\u80fd\u8fbe\u6210\u5404\u4e2a\u73af\u5883\u53ef\u300c\u7ee7\u627f\u300d\u540c\u4e00\u4efd\u90e8\u7f72\u811a\u672c\u7684\u76ee\u7684\uff0c\u53ea\u9700\u6269\u5c55\u5e76\u4fee\u6539\u53d8\u91cf\u5373\u53ef\u3002\nextends \u8fd8\u652f\u6301\u591a\u4e2a template jobs \u4ee5\u53ca\u5728\u666e\u901a job \u4e2d\u8986\u76d6\u6a21\u677f\u5b57\u6bb5\u7b49\u7279\u6027\uff1a\n.yarn: image: node:latest before_script: - yarn install --production - export PATH="$PATH:$PWD\/node_modules\/.bin" .cached: cache: key: ${CI_COMMIT_REF_SLUG} paths: - dist\/ build: extends: - .yarn - .cached image: node:12 # \u8986\u76d6 .yarn \u4e2d\u5b9a\u4e49\u7684 image script: - echo "Building artifacts" include \u5b57\u6bb5\u4e0e Git Subtree \u4e0a\u6587\u4e2d\u6211\u4eec\u4ecb\u7ecd\u4e86\u5982\u4f55\u5728 .gitlab-ci.yml \u4e2d\u5b9e\u73b0\u5185\u90e8\u590d\u7528\uff0c\u8fd9\u5728\u5355\u4e00\u9879\u76ee\u4e2d\u6709\u6548\u3002\u4e3a\u4e86\u80fd\u591f\u8de8\u9879\u76ee\u590d\u7528\uff0c\u6211\u4eec\u4f7f\u7528\u4e86 <code>include<\/code> \u5b57\u6bb5\u548c Git subtree \u6765\u5b9e\u73b0\u3002\n\u901a\u8fc7 include \u5b57\u6bb5\u6211\u4eec\u53ef\u4ee5\u5c06\u590d\u6742\u7684 CI \u914d\u7f6e\u62c6\u5206\u6210\u591a\u4e2a\u6587\u4ef6\uff0c\u4f8b\u5982\u7ba1\u7406\u591a\u4e2a stages\uff1a\n# .gitlab-ci.yml stages: - build - deploy include: - local: .gitlab\/build.yml # \u4ed3\u5e93\u5185\u7684\u914d\u7f6e\u6587\u4ef6\u8def\u5f84 - local: .gitlab\/deploy.yml # .gitlab\/build.yml build binaries: stage: build script: - echo "Building binaries" # .gitlab\/deploy.yml deploy production: stage: deploy script: - echo "Deploying production" \u6211\u4eec\u628a\u5e38\u7528\u7684 template jobs \u96c6\u4e2d\u5230\u4e86\u4e00\u4e2a\u540d\u4e3a ci-templates \u7684\u4ed3\u5e93\u4e2d\uff0c\u4f8b\u5982 PHP \u9879\u76ee\u5fc5\u5907\u7684 composer install\uff1a\n\u968f\u540e\u5728\u9700\u8981\u4f7f\u7528\u7684\u9879\u76ee\u4e2d\uff0c\u5c06 ci-templates \u4ed3\u5e93\u7684\u5185\u5bb9\u901a\u8fc7 subtree \u5f15\u5165\uff1a\ngit subtree add --prefix=.gitlab\/ci-templates git@gitlab:devops\/ci-templates.git master --squash \u518d\u4f7f\u7528 include \u6307\u4ee4\u5305\u542b\u5373\u53ef\uff1a\ninclude: - local: .gitlab\/ci-templates\/templates\/composer.yml php-cs-fixer: extends: .composer # Template job \u4f4d\u4e8e\u88ab include \u7684\u6587\u4ef6\u4e2d script: - php-cs-fixer fix --dry-run --diff 1>&2 \u5173\u4e8e subtree \u7684\u76f8\u5173\u77e5\u8bc6\u4e0d\u518d\u8d58\u8ff0\uff0c\u8bf7\u53c2\u8003\u76f8\u5173\u6587\u6863\u3002\n\u4e0d\u4f7f\u7528 Git Subtree \u7684 include \u901a\u8fc7 Git subtree \u5f15\u5165\u7684\u6587\u4ef6\u4e0d\u4f1a\u968f\u7740\u4e0a\u6e38\uff08ci-templates\uff09\u4ed3\u5e93\u7684\u66f4\u65b0\u800c\u540c\u6b65\uff0c\u9700\u8981\u6267\u884c git subtree pull \u547d\u4ee4\u5c06\u53d8\u66f4 Pull \u5230\u9879\u76ee\u4ed3\u5e93\u4e2d\u3002\u8fd9\u79cd\u65b9\u5f0f\u7684\u597d\u5904\u662f DevOps \u4fee\u6539 templates \u65f6\uff0c\u4e0d\u4f1a\u9020\u6210\u6f5c\u5728\u7684\u3001\u53ef\u80fd\u9020\u6210\u5176\u5b83\u9879\u76ee CI \u635f\u574f\u7684\u53d8\u66f4\u3002\u540c\u4e00 Git ref\uff08\u4f8b\u5982 tags \u6216 commits\uff09\u6267\u884c pipelines \u7684\u7ed3\u679c\u80fd\u591f\u4fdd\u6301\u4e00\u81f4\u3002\n\u4f46\u968f\u7740\u5f15\u7528 templates \u7684\u4ed3\u5e93\u8d8a\u6765\u8d8a\u591a\uff0c\u6bcf\u6b21\u66f4\u65b0 ci-templates \u65f6\uff0c\u6211\u4eec\u4e0d\u5f97\u4e0d\u5728\u5404\u4e2a\u9879\u76ee\u4ed3\u5e93\u5185\u624b\u52a8 pull\u3002\u968f\u7740 GitLab 11.7 \u53d1\u5e03\uff0c\u6b64\u95ee\u9898\u7ec8\u4e8e\u5f97\u5230\u4e86\u89e3\u51b3\uff0cinclude \u5b57\u6bb5\u652f\u6301\u76f4\u63a5\u5f15\u5165\u6765\u81ea\u5176\u5b83\u4ed3\u5e93\u7684 templates \u6587\u4ef6\u4e86\uff08\u53c2\u8003 <code>include:file<\/code>\uff09\u3002\u4ee5\u4e0b\u662f\u4e00\u4e2a\u7b80\u5355\u7684\u4f8b\u5b50\uff1a\ninclude: - project: devops\/ci-templates # GitLab \u9879\u76ee\u5168\u79f0 file: \/templates\/composer.yml # Template \u6587\u4ef6\u5728\u4ed3\u5e93\u5185\u7684\u8def\u5f84 phpstan: extends: .composer script: - phpstan analyse --ansi \u7ed3\u8bed \u7531\u4e8e\u6211\u4eec\u5185\u90e8\u7684 PHP \u6269\u5c55\u5305 CI\/CD \u6d41\u7a0b\u6781\u4e3a\u76f8\u4f3c\u4e14\u8f83\u4e3a\u7b80\u5355\uff0c\u51fa\u73b0\u6f5c\u5728\u300c\u591a\u7c73\u8bfa\u9aa8\u724c\u6548\u5e94\u300d\u7684\u53ef\u80fd\u6027\u8f83\u4f4e\uff1b\u8003\u8651\u5230\u7ef4\u62a4\u6210\u672c\uff0c\u6211\u4eec\u6700\u7ec8\u9009\u62e9\u5728\u6269\u5c55\u5305\u4ed3\u5e93\u4f7f\u7528 include:file \u7684\u65b9\u5f0f\u5f15\u5165 templates\u3002CI\/CD \u590d\u6742\u4e25\u8c28\u7684\u9879\u76ee\u7c7b\u578b\u4ed3\u5e93\uff0c\u5219\u4fdd\u7559\u4f7f\u7528 Git subtree\uff0c\u4ee5\u964d\u4f4e\u610f\u5916\u884c\u4e3a\u7684\u53ef\u80fd\u6027\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/reuse-gitlab-ci-configs-across-projects\/","summary":" \u4e3a\u4e86\u80fd\u591f\u4f7f\u4ee3\u7801\u5728\u4e0d\u540c\u9879\u76ee\u590d\u7528\uff0c\u6211\u53f8\u62bd\u8c61\u3001\u7f16\u5199\u4e86\u8bb8\u591a\u79c1\u6709 libraries\u3002\u5b83\u4eec\u7684\u6e90\u4ee3\u7801\u88ab\u7edf\u4e00\u5b58\u653e\u5728 GitLab\uff0c\u7531 CI \u786e\u4fdd\u4ee3\u7801\u98ce\u683c\u4e00\u81f4\uff0c\u5e76\u6267\u884c\u5355\u5143\u6d4b\u8bd5\u548c\u9759\u6001\u68c0\u67e5\u7b49\u3002\u7531\u4e8e\u4ed3\u5e93\u6570\u91cf\u4f17\u591a\uff0c\u5982\u4f55\u6709\u6548\u5730\u7ec4\u7ec7\u548c\u7ba1\u7406 CI \u914d\u7f6e\u6210\u4e86\u95ee\u9898\u3002\u7ecf\u8fc7\u957f\u65f6\u95f4\u7684\u63a2\u7d22\u548c\u4f18\u5316\uff0c\u6211\u6574\u7406\u4e86\u4e00\u4e9b\u7ecf\u9a8c\uff0c\u5e0c\u671b\u5bf9\u4f60\u6709\u6240\u5e2e\u52a9\u3002<\/p>","title":"\u8de8\u9879\u76ee GitLab CI \u914d\u7f6e\u590d\u7528\u4e0e\u7ba1\u7406"},{"content":"\u5ffd\u7136\u53d1\u73b0\u519c\u5386\u65b0\u5e74\u5df2\u7ecf\u8fc7\u53bb\u4e86\u4e00\u4e2a\u6708\u3002\u8fd9\u4e00\u4e2a\u6708\u6211\u5e72\u4e86\u5565\uff1f\uff01\uff1f\n\u4e00\u4e9b\u788e\u788e\u5ff5 \u4f9d\u7167\u5f80\u5e74\uff0c\u65b0\u5e74\u5047\u671f\u6211\u901a\u5e38\u4f1a\u6293\u7d27\u65f6\u95f4\u75af\u72c2\u63d0\u4ea4\u4ee3\u7801\uff0c\u5b8c\u6210\u4e2a\u4eba\u9879\u76ee\uff0c\u5b9e\u73b0\u6709\u8da3\u7684\u60f3\u6cd5\u3002\u53ef\u80fd\u662f\u4eca\u5e74\u5e74\u524d\u5b9e\u5728\u592a\u5fd9\uff0c\u51e0\u4e4e\u6ca1\u6709\u4f11\u606f\u7684\u65f6\u5019\uff0c\u75ab\u60c5\u8513\u5ef6\u53cd\u800c\u8ba9\u81ea\u5df1\u5f7b\u5e95\u653e\u677e\u4e86\u4e0b\u6765\u3002\n\u5f00\u59cb\u5728\u5bb6\u529e\u516c\u4e4b\u540e\uff0c\u4e5f\u4f8b\u5916\u5730\u6ca1\u6709\u5229\u7528\u95f2\u6687\u65f6\u95f4\u81ea\u6211\u5b66\u4e60\u3002\u6216\u8bb8\u56e0\u4e3a\u4e4b\u524d\u592a\u95f2\uff0c\u53cd\u800c\u7cbe\u529b\u5145\u6c9b\u5730\u5904\u7406\u4e86\u4e0d\u5c11\u9648\u5e74\u8001\u95ee\u9898\u3002\u81f3\u4e8e\u4e0b\u73ed\u65f6\u95f4\uff0c\u57fa\u672c\u7528\u6765\u770b\u89c6\u9891\u3001\u6253\u6e38\u620f\u3001\u6536\u62fe\u5bb6\u52a1\u4e86\ud83d\ude02\u3002\n\u662f\u7684\u6ca1\u9519\uff0c\u51e0\u4e4e\u4e0d\u78b0\u6e38\u620f\u7684\u6211\u6700\u8fd1\u5b9e\u5728\u592a\u61d2\uff0c\u5b8c\u5168\u4e0d\u60f3\u7814\u7a76\u65b0\u4e1c\u897f\uff0c\u6240\u4ee5\u5e72\u8106\u597d\u597d\u300c\u4f11\u5047\u300d\uff0c\u5f53\u4e86\u4e00\u4e2a\u6708\u7684\u54b8\u9c7c\u3002\n\u5927\u5b66\u6bd5\u4e1a\uff08\u5e94\u5f53\uff09\u7684 22 \u5c81 \u4eca\u5e74\u53ef\u80fd\u56e0\u4e3a\u751f\u65e5\u5f53\u5929\u592a\u7f3a\u4e4f\u6c1b\u56f4\uff0c\u665a\u4e0a\u4f3c\u4e4e\u5403\u7684\u662f\u6ce1\u9762\uff0c\u6240\u4ee5\u5728\u793e\u4ea4\u5e73\u53f0\u7684\u611f\u53f9\u4e5f\u5077\u61d2\u514d\u4e86\u3002\n\u4e5f\u6709\u53ef\u80fd\u662f\u4e0d\u77e5\u9053\u8bf4\u4ec0\u4e48\u3002\u8fd9\u4e9b\u300c\u4eba\u4e3a\u300d\u8d4b\u4e88\u542b\u4e49\u7684\u65e5\u5b50\uff0c\u4e5f\u53ea\u662f\u5e73\u6de1\u7684\u4e00\u5929\u800c\u5df2\u3002\u7f3a\u4e86\u300c\u4eba\u4e3a\u300d\u7684\u70d8\u6258\uff0c\u66b4\u9732\u65e0\u9057\u3002\n\u5c11\u4e86\u60ca\u559c\u548c\u6109\u60a6\uff0c\u591a\u4e86\u4e00\u70b9\u70b9\u7684\u6050\u60e7 \u2014\u2014 \u5e74\u9f84\u7684\u6050\u60e7\u3002\u8fd9\u4e48\u8bf4\u53ef\u80fd\u4f1a\u88ab\u6253\uff0c\u54b3\u54b3\u3002\u867d\u7136\u622a\u81f3\u76ee\u524d\u6211\u4ecd\u7136\u662f\u53c2\u52a0\u5de5\u4f5c\u4ee5\u6765\u5e74\u9f84\u6700\u5c0f\u7684\u540c\u4e8b\u3002\u4f46\u7559\u7ed9\u6211\u7684\u65f6\u95f4\u5df2\u7ecf\u4e0d\u591a\u4e86\u3002\n22 \u5c81\uff0c\u540c\u9f84\u4eba\u4eca\u5e74\u8be5\u4ece\u672c\u79d1\u6bd5\u4e1a\u4e86\u3002\n\u771f\u7684\u98de\u5feb\uff0c\u4e00\u8f6c\u773c\u604d\u7136\u8fd8\u4ee5\u4e3a\u81ea\u5df1\u624d\u5341\u516b\u5c81\uff0c\u521a\u521a\u62ff\u5230\u7b2c\u4e00\u4efd Offer\uff0c\u521a\u521a\u4e0e\u9ad8\u8003\u5b8c\u7684\u540c\u5b66\u78b0\u9762\u3002\u867d\u7136\u6280\u672f\u6c34\u5e73\u5df2\u7ecf\u6709\u98de\u8dc3\u5f0f\u7684\u8fdb\u6b65\uff0c\u4f46\u603b\u662f\u62c5\u5fc3\u4e0d\u591f\u4f18\u79c0\uff0c\u4e0d\u591f\u90a3\u4e2a\u5341\u516b\u5c81\u7684\u6211\u60f3\u8c61\u5f97\u4f18\u79c0\u3002\n\u8bb0\u5f97\u67d0\u6bb5\u65f6\u95f4\u6211\u4e00\u76f4\u5fc3\u5fc3\u5ff5\u5ff5\u4e00\u4e2a\u4e2d\u671f\u76ee\u6807\uff1a\u5728\u540c\u9f84\u4eba\u5927\u5b66\u6bd5\u4e1a\u7684\u90a3\u4e00\u5e74\u8981\u6709\u8db3\u591f\u7684\u80fd\u529b\u7529\u5f00\u4ed6\u4eec\u3002\u81f3\u4e8e\u5177\u4f53\u7684\u8bc4\u5224\u6807\u51c6\u662f\u4ec0\u4e48\uff0c\u6211\u4e00\u76f4\u6ca1\u6709\u4ed4\u7ec6\u601d\u8003\u8fc7\u3002\u56e0\u4e3a\u6211\u77e5\u9053\u81c6\u60f3\u9065\u8fdc\u7684\u7ec6\u8282\uff0c\u4e0d\u5982\u7acb\u523b\u91c7\u53d6\u884c\u52a8\uff0c\u65f6\u523b\u5b66\u4e60\u3001\u4e0d\u65ad\u5b66\u4e60\u3002\u968f\u7740\u622a\u6b62\u65e5\u671f\u8d8a\u6765\u8d8a\u8fd1\uff0c\u6211\u5bf9\u81ea\u5df1\u7684\u5b9a\u4f4d\u4ece\u62bd\u8c61\u9010\u6e10\u6210\u4e3a\u73b0\u5b9e\uff0c\u76ee\u6807\u7684\u300c\u7ec8\u70b9\u7ebf\u300d\u4e5f\u4f1a\u6162\u6162\u6e05\u6670\u8d77\u6765\u3002\n\u6211\u60f3\uff0c\u6211\u5e94\u8be5\u662f\u505a\u5230\u4e86\u3002\u90a3\u65f6\u7684\u60f3\u6cd5\u4e0d\u8fc7\u662f\uff1a\n \u6211\u4e0d\u5199\u91cd\u590d\u7684\u4f5c\u4e1a\u4e0d\u4ee3\u8868\u6211\u8d2a\u73a9 \u6211\u80cc\u4e0d\u8fc7\u5386\u53f2\u4e0d\u4ee3\u8868\u6211\u5b66\u4e60\u80fd\u529b\u5f31 \u6211\u4e0d\u89c9\u5f97\u6211\u6bd4\u540c\u9f84\u4eba\u5dee \u65e2\u7136\u8dd1\u4e0d\u4e0b\u6765 1000 \u7c73\uff0c\u6211\u9009\u62e9\u4e0d\u8dd1\uff0c\u6211\u8981\u4e70\u8f86\u8f66\u4ee3\u66ff\u6211\u8dd1 \u6211\u8981\u8bc1\u660e\u81ea\u5df1\u7684\u9009\u62e9\u662f\u5bf9\u7684 \u4ee5\u53ca\uff1a\n\u6ca1\u4eba\u80fd\u4e00\u76f4\u5f3a\u8feb\u6211\u505a\u6211\u4e0d\u613f\u610f\u505a\u7684\u4e8b\u3002\n\u5982\u679c\u518d\u89c1\u5230\u5f53\u5e74\u7684\u4eba\u4eec\uff0c\u6211\u4f1a\u544a\u8bc9\u4ed6\uff1a\u8bf7\u5c0a\u91cd\u5e76\u5f15\u5bfc\u4f60\u7684\u5b66\u751f\uff0c\u522b\u7ad9\u5728\u9053\u5fb7\u7684\u5236\u9ad8\u70b9\u4e0a\uff0c\u4ee5\u4e3a\u81ea\u5df1\u6c38\u8fdc\u90fd\u662f\u6b63\u786e\u7684\u3002\n\u6700\u540e \u6211\u7b97\u4e0d\u4e0a\u4f7c\u4f7c\u8005\uff0c\u4f46\uff1a\n \u505a\u4e0d\u5f97\u65f7\u4e16\u7684\u9038\u624d\uff0c\n\u53ea\u505a\u4f60\u5929\u5730\u95f4\u7684\u4f1e\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/thoughts-after-my-22th-birthday\/","summary":" \u5ffd\u7136\u53d1\u73b0\u519c\u5386\u65b0\u5e74\u5df2\u7ecf\u8fc7\u53bb\u4e86\u4e00\u4e2a\u6708\u3002\u8fd9\u4e00\u4e2a\u6708\u6211\u5e72\u4e86\u5565\uff1f\uff01\uff1f<\/p>","title":"22 \u5c81\u7684\u6742\u8c08"},{"content":"The VPN provider of Nanjing University has recently been changed to Sangfor, which is one of the biggest company who provides the corporate SDN, VPN and other enterprise network solutions in China. Although, the SSL VPN client from Sangfor is extremely hard to use - Changing the default DNS server without any notification, hijacking all UDP packet that dport is 53, even removing all the default route generated from the CIDR of interfaces which prevents the client connect to any LAN devices except **.**.**.1. These issues have been described as “features” of their products from a training manual that I found in Baidu Wenku.\nBy digging into the VPN client for several days, I finally give up with trying to add some kind of plugins or extensions, because they don’t allow to. The client binary comes with a daemon, which will watch the route table and DNS settings. Even when I use chattr to avoid any changes of \/etc\/resolv.conf, both the daemon and VPN client won’t work but only print an error.\nAs their perspective, I totally understand they could always facing unusual environment from the clients. But for me, These all whatever issues or features are obstruction and messing up my development configuration.\nSo I ended this up by launching a independent VM in my home cluster with V2Ray and Sangfor SSL VPN client installed. The V2Ray is running under serving mode, accept and handle incoming traffic from the real client as well as my Mac, then relay the traffic from the VM which is also in the VPN. Thus, when I ever need the campus network, all I have to do is connecting to the proxy provided by V2Ray, using SwitchyOmega, Surge or any other SOCKS5 compatible tool - without this terrible client.\nHere are the scripts that I use.\n# Install gnome and GUI in order to run VPN client. apt install x-window-system-core apt install gnome-core apt install libgtk2.0-0:i386 # Add policy-based routing rules and update the routing tables. ip route add table 100 default via <GATEWAY> dev eth0 ip route add table 200 default dev tun0 # proto kernel scope link src 2.0.0.118 # All traffic matched fwmark == 254 should be routed to table 200, and table 100 for the others. ip rule add from all table 100 ip rule add fwmark 254 table 200 # Delete DNS hajacking iptables rule. iptables -t nat -D OUTPUT -p udp -m udp ! --sport 7789 --dport 53 -j DNAT --to-destination 127.0.0.1:5373 ip rule add to 114.114.114.114 table main # Install dnsmasq and relay all local dns queries to 114.114.114.114 no-resolv server=114.114.114.114 Here is a example V2Ray configration of it. Please pay attention to outbounds[].streamSettings.sockopt.mark was set to 254, which is the same value from routing policies described ahead.\n{ "log": { "error": "\/var\/log\/v2ray.log", "loglevel": "warning" }, "inbounds": [ { "protocol": "vmess", "port": <PORT>, "settings": { "clients": [ { "id": "<USER_ID>" } ] } } ], "outbounds": [ { "protocol": "freedom", "tag": "direct", "streamSettings": { "sockopt": { "mark": 254 } } } ] } ","permalink":"https:\/\/wi1dcard.dev\/posts\/connect-to-sangfor-ssl-vpn-without-the-terrible-client\/","summary":" The VPN provider of Nanjing University has recently been changed to Sangfor, which is one of the biggest company who provides the corporate SDN, VPN and other enterprise network solutions in China. Although, the SSL VPN client<\/a> from Sangfor is extremely hard to use - Changing the default DNS server without any notification, hijacking all UDP packet that dport is 53, even removing all the default route generated from the CIDR of interfaces which prevents the client connect to any LAN devices except \u8f6c\u773c\u95f4\u5230\u4e86 2019 \u5e74\u672b\uff0c\u8fd8\u8bb0\u5f97\u53bb\u5e74\u4e5f\u5199\u8fc7\u4e00\u7bc7\u7c7b\u4f3c\u7684 \u535a\u5ba2<\/a>\uff1b\u8ba1\u5212\u4eca\u5e74\u7684\u300c\u5e74\u7ec8\u603b\u7ed3\u300d\u86ee\u4e45\u4e86\uff0c\u53ea\u662f\u89c9\u5f97\u65f6\u95f4\u8fd8\u65e9\u4fbf\u4e00\u76f4\u6ca1\u6709\u52a8\u624b\uff0c\u76f4\u5230\u4eca\u5929\u624d\u604d\u7136 \u2014\u2014 \u5df2\u7ecf\u662f 2019 \u5e74\u6700\u540e\u4e00\u5929\u4e86\u3002<\/p>","title":"\u4e00\u7bc7\u53c8\u957f\u53c8\u4e4f\u5473\u7684\u5e74\u7ec8\u603b\u7ed3\u548c\u5c55\u671b"},{"content":"After a few days working on Salesforce integration, I finnally finished a simple CLI edtion of DataLoader using prune TypeScript. Within lots of CSV rows loaded into memory, the node engine always crashs around 130k of records. In order to get this job done as quick as possible, I have to increase the max memory of Node.js.\nThe error message looks like:\nFATAL ERROR: CALL_AND_RETRY_LAST Allocation failed - JavaScript heap out of memory ... [1] 15759 abort node ... The quick but not perfect solution is:\nexport NODE_OPTIONS="--max_old_space_size=<memory in MB>" Or,\nnode --max-old-space-size=<memory in MB> ... See also:\n https:\/\/futurestud.io\/tutorials\/node-js-increase-the-memory-limit-for-your-process ","permalink":"https:\/\/wi1dcard.dev\/posts\/increase-node-js-v8-memory-limit\/","summary":" After a few days working on Salesforce integration, I finnally finished a simple CLI edtion of DataLoader<\/a> using prune TypeScript. Within lots of CSV rows loaded into memory, the node engine always crashs around 130k of records. In order to get this job done as quick as possible, I have to increase the max memory of Node.js.<\/p>","title":"Increase Node.js V8 Memory Limit"},{"content":"It’s been a while maintaining the proxy services for my work friends who are in Beijing office. These days I tried to collect some basic metrics like online IP addresses and its connections. And I found a very simple way to do it with only netstat and several text process tools.\nFor instance, I would like to get the clients info connected to port 443:\nnetstat -ntu \\ # Collect network statistics and very detailed information | grep -v LISTEN \\ # Remove lines that the status is LISTEN | awk '{print $4, $5}' \\ # Remove other columns but retain the 4th and 5th ones | grep -E '^[0-9\\.]+:443' \\ # Filter connections to port 443 by a regex expression | cut -d' ' -f2 \\ # Remove the first column which is server's address | cut -d: -f1 \\ # Strip the port part from IP addresses | sort \\ # Sort results for pipelining to uniq command | uniq -c # Group the IP addresses and calculate their appearing times (which is the number of connections) The final shell script looks like:\nnetstat -ntu | grep -v LISTEN | awk '{print $4, $5}' | grep -E '^[0-9\\.]+:443' | cut -d' ' -f2 | cut -d: -f1 | sort | uniq -c And also the results:\n 8 180.xx.xx.74 1 183.xx.xx.53 12 218.xx.xx.198 20 221.xx.xx.37 32 222.xx.xx.252 ","permalink":"https:\/\/wi1dcard.dev\/posts\/list-connections-group-by-ip\/","summary":" It’s been a while maintaining the proxy services for my work friends who are in Beijing office. These days I tried to collect some basic metrics like online IP addresses and its connections. And I found a very simple way to do it with only OpenDNS has a “un-official” (I didn’t find any docs at least) API for returning your public IP, by a normal DNS query.<\/p>","title":"Find Your Public IP Address via DNS Protocol"},{"content":"Recently, I’ve been working against Kubernetes and Helm for a while. Today, I faced a strange problem that could only be triggered in a very very specific condition. After determined what happened under the hood, I decided to write it down in case someone else needs it.\n Also, BTW, to practice my English. :D\n Let’s say we have a retail-api chart that contains some normal services and deployments like others do. And mysql chart is one of the dependencies of it.\nAlso, we set up GitLab CI review apps to install and upgrade the chart using helmfile. That means every new branch creates a fresh environment, including the release and its resources. Actually, we are now starting to work with review apps recently. So we choose to use $CI_COMMIT_REF_SLUG for the environment url, also a part of the Helm release name as the doc says.\nIn the first few days, it works perfectly as expected, until I pushed a branch named bugfix\/hook-deploy-mysql-connection-timeout:\n$ helmfile -e ${HELM_ENVIRONMENT} apply --suppress-secrets --concurrency=1 ... Comparing release=retail-api-bugfix-hook-deploy-mysql-connection-timeout, chart=deploy\/chart in .\/helmfile.yaml: failed processing release retail-api-bugfix-hook-deploy-mysql-connection-timeout: helm exited with status 1: Error: invalid release name, must match regex ^(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])+$ and the length must not be longer than 53 Error: plugin "diff" exited with error \/root\/.helm\/plugins\/helm-tiller\/scripts\/tiller.sh: line 174: 144 Killed .\/bin\/tiller --storage=${HELM_TILLER_STORAGE} --listen=127.0.0.1:${HELM_TILLER_PORT} ${PROBE_LISTEN_FLAG} --history-max=${HELM_TILLER_HISTORY_MAX} (wd: ~\/.helm\/plugins\/helm-tiller) Error: plugin "tiller" exited with error Looks like easy to fix. I edit the helmfile.yaml then, using functions trunc and trimSuffix to build a vaild release name:\nreleases: - name: retail-api-{{ requiredEnv "CI_COMMIT_REF_SLUG" | trunc 32 | trimSuffix "-" }} After so, the release name has been truncated to retail-api-bugfix-hook-deploy-mysql-connect. Things weird started from now on, see the CI logs:\nUpgrading release=retail-api-bugfix-hook-deploy-mysql-connect, chart=deploy\/chart Creating tiller namespace (if missing): tiller Release "retail-api-bugfix-hook-deploy-mysql-connect" does not exist. Installing it now. in .\/helmfile.yaml: failed processing release retail-api-bugfix-hook-deploy-mysql-connect: helm exited with status 1: Error: release retail-api-bugfix-hook-deploy-mysql-connect failed: services "retail-api-bugfix-hook-deploy-mysql-connect" already exists Error: plugin "tiller" exited with error ERROR: Job failed: command terminated with exit code 1 The previous failed job mistakenly leads me to the wrong hypothesis - it is due to the length. In order to verify, I even tried to shorten the release name by decrease 32 characters into 16:\nreleases: - name: retail-api-{{ requiredEnv "CI_COMMIT_REF_SLUG" | trunc 16 | trimSuffix "-" }} It is now retail-api-bugfix-hook-depl, and works well.\nSo, I put all my minds to the length issue, and did the following research:\n The logs said that a service already exists. Is there any additional limitation for services in Kubernetes? Refer to the naming doc, No. Do the DNS specs or other RFCs ever specify the max length? Yes, but 63 characters. Even the longer service name is just 43 chars. Fair enough to the requirements. Okay, no reference pointing to this issue. Let’s have a diagnosis of exclusion. First, I found all usages of the release name is only the retail.fullname helper function, which is generated by Helm by default. Fix the helper, fix the problem. Then I tried to truncate every value of fields that contains {{ include "retail.fullname" . }}, one by one. Finally, I located 2 resources - the deployment and service, both of them use exact the helper as their name. In order to find the critical value that can precisely reproduce this issue, I started to try it from {{ include "retail.fullname" . | trunc 20 }} to {{ include "retail.fullname" . | trunc 43 }}. I got every test passed, except for 43, which is the original full name without being cut out. After that, I started to think, do we really have any “dirty” resource being conflicted? It seems not. But checking out successful applied releases makes me have some new discoveries. The release actually deployed 2 deployment and services that have similar names:\n==> v1\/Deployment NAME READY UP-TO-DATE AVAILABLE AGE retail-api-bugfix-hook-deploy-mysql-connec 0\/1 1 0 5s ==> v1beta1\/Deployment NAME READY UP-TO-DATE AVAILABLE AGE retail-api-bugfix-hook-deploy-mysql-connect 0\/1 1 0 5s ==> v1\/Service NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE retail-api-bugfix-hook-deploy-mysql-connect ClusterIP 10.100.57.38 <none> 3306\/TCP 6s retail-api-bugfix-hook-deploy-mysql-connec ClusterIP 10.100.192.93 <none> 80\/TCP 6s That is very confusing. Did I just catch a bug in Helm?\nObviously, not. Suddenly, I saw an abnormal value of the service:\n$ kubectl get service -n review-apps NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE retail-api-bugfix-hook-deploy-mysql-connect ClusterIP 10.100.57.38 <none> 3306\/TCP 18h Port 3306? That’s the service of mysql chart, not ours! Finally, I realized that is because the mysql.fullname helper generates the same value of retail.fullname does, due to the if statement in the helper:\n{{- $name := default .Chart.Name .Values.nameOverride -}} {{- if contains $name .Release.Name -}} {{- printf .Release.Name | trunc 63 | trimSuffix "-" -}} The name of the mysql service and deployment will be exactly the release name if it contains mysql, the chart name.\nIn the end, I haven’t been digging deeper for the reason why the developers of helm would like to do it that way. In fact, I don’t really like that kind of behavior, which does not “show up” in my daily ops. Even though I might read the codes someday, it could be easily forgotten.\nHowever, this time of debugging notices me it’s worth to pay more attention while we are using helpers and building resource names, and be careful using some kind of “user-generated” value as a Helm release name.\n","permalink":"https:\/\/wi1dcard.dev\/posts\/helm-template-resource-already-exists\/","summary":" Recently, I’ve been working against Kubernetes and Helm for a while. Today, I faced a strange problem that could only be triggered in a very very specific condition. After determined what happened under the hood, I decided to write it down in case someone else needs it.<\/p>\n Also, BTW, to practice my English. :D<\/p>\n<\/blockquote>","title":"Helm Chart Resource Names Conflict Due to the Fullname Helper"},{"content":"\uff08\u63a5\u4e0a\u6587\uff09\n\u524d\u9762\u7684\u90e8\u5206\u4ecb\u7ecd\u4e86\u5982\u4f55\u4e3a\u6211\u7684\u535a\u5ba2\u6253\u5305 Docker \u955c\u50cf\uff0c\u63a5\u4e0b\u6765\u5c31\u662f\u91cd\u5934\u620f \u2014\u2014 \u90e8\u7f72\u5230 Kubernetes\u3002\nGoogle Kubernetes Engine \u6ca1\u9519\uff0c\u6211\u73b0\u5728\u81ea\u7528\u7684 Kubernetes \u96c6\u7fa4\u5c31\u662f Google \u5bb6\u7684 GKE\u3002\u6682\u65f6\u6ca1\u6709\u9047\u5230\u4ec0\u4e48\u592a\u5927\u7684\u5751\uff0c\u5404\u65b9\u9762\u96c6\u6210\u505a\u5f97\u4e0d\u9519\uff0c\u9002\u5408\u6211\u8fd9\u79cd\u5c0f\u767d\u4e0a\u624b\u3002\nHelm \u6709 Kubernetes \u5f53\u7136\u5c11\u4e0d\u4e86 Helm\u3002\u5728\u6211\u7684\u7406\u89e3\u4e2d\uff0cHelm \u9664\u4e86\u662f\u4e00\u4e2a\u6a21\u677f\u5f15\u64ce\u4e4b\u5916\uff0c\u8fd8\u80fd\u628a\u4e00\u6574\u4e2a\u300c\u5e94\u7528\u300d\u6240\u9700\u8981\u7684 YAML \u6587\u4ef6\u7ec4\u5408\u4e3a\u4e00\u4e2a\u6574\u4f53\uff08Chart\uff09\uff0c\u591a\u4e2a Chart \u4e4b\u95f4\u53ef\u4ee5\u4e92\u76f8\u4f9d\u8d56\uff0c\u7ec4\u5408\u6210\u4e3a\u4e00\u6574\u4e2a\u7cfb\u7edf\uff1b\u642d\u914d helm-diff\uff0chelm-secret \u7b49\u63d2\u4ef6\u8fd8\u53ef\u4ee5\u5c55\u793a YAML \u6587\u4ef6\u53d8\u66f4\u3001\u7ba1\u7406\u654f\u611f\u5bc6\u94a5\u4fe1\u606f\u7b49\u3002\n\u9996\u5148\uff0c\u6211\u4f7f\u7528 helm create \u521b\u5efa\u4e86\u4e00\u4e2a Chart\uff0c\u5e76\u5c06\u5b83\u76f4\u63a5\u653e\u5728\u4e86 deploy\/chart \u76ee\u5f55\u3002\n\u9ed8\u8ba4 Chart \u5185\u7684 YAML \u6a21\u677f\u57fa\u672c\u6ca1\u6709\u4fee\u6539\uff0c\u53ea\u6709 values.yaml \u6539\u4e86\u4e00\u4e9b\u503c\uff1a\nimage: repository: wi1dcard\/blog \u6b63\u5982\u4f60\u770b\u5230\u7684\uff0c\u955c\u50cf\u88ab\u4fee\u6539\u6210\u4e86 wi1dcard\/blog\uff08\u4e0a\u6587\u4e2d\u63a8\u9001\u5230 Docker Hub \u7684\u955c\u50cf\uff09\u3002\u540c\u65f6\uff0c\u6211\u542f\u7528\u4e86 Ingress\uff0c\u8fd8\u7ed9 Ingress \u6dfb\u52a0\u4e86\u4e00\u4e9b\u6ce8\u89e3\uff1a\ningress: enabled: true annotations: kubernetes.io\/tls-acme: "true" ingress.kubernetes.io\/ssl-redirect: "true" ingress.kubernetes.io\/browser-xss-filter: "true" # X-XSS-Protection: 1; mode=block ingress.kubernetes.io\/content-type-nosniff: "true" # X-Content-Type-Options: nosniff ingress.kubernetes.io\/referrer-policy: strict-origin-when-cross-origin # Referrer-Policy: same-origin ingress.kubernetes.io\/custom-frame-options-value: SAMEORIGIN # X-Frame-Options: SAMEORIGIN ingress.kubernetes.io\/custom-response-headers: X-Powered-By:Wi1dcard Kubernetes Engine \u6211\u4f7f\u7528\u7684\u662f Traefik Ingress Controller\uff0c\u76f8\u6bd4\u4e8e Nginx Ingress Controller \u7ed9 Nginx \u52a0\u4e2a\u4e2d\u95f4\u5c42\u6765\u8bf4\uff0cTraefik \u672c\u8eab\u65e2\u662f Ingress Controller \u53c8\u662f Ingress \u7684\u5177\u4f53\u5b9e\u73b0\uff1b\u800c\u4e14\u6211\u6ca1\u6709\u56db\u5c42\u534f\u8bae\u7684\u9700\u6c42\uff0c\u6027\u80fd\u66f4\u662f\u5b8c\u5168\u65e0\u6240\u8c13\uff08\u5f53\u7136 Traefik \u4e0d\u4e00\u5b9a\u6bd4 Nginx \u5dee\uff09\uff0c\u6240\u4ee5\u76f4\u63a5\u9009\u62e9\u4e86\u4e3a\u300c\u4e91\u539f\u751f\u300d\u8bbe\u8ba1\u7684 Traefik\u3002\n\u8fd9\u4e9b Annotations \u591a\u6570\u90fd\u662f\u6211\u4ece Traefik Kubernetes Ingress Docs \u6284\u8fc7\u6765\u7684\ud83d\ude02\uff0c\u9664\u4e86\u5f3a\u5236\u8df3\u8f6c HTTPS \u4e4b\u5916\uff0c\u5b83\u4eec\u8fd8\u53ef\u4ee5\u8ba9 Traefik Ingress \u8fd4\u56de\u7684 HTTP \u54cd\u5e94\u5305\u542b\u7279\u5b9a\u7684\u300c\u5b89\u5168\u5934\u4fe1\u606f\uff08Security Headers\uff09\u300d\uff0c\u5bf9\u9650\u5236\u6d4f\u89c8\u5668\u6743\u9650\u3001\u4fdd\u969c\u7528\u6237\u6d4f\u89c8\u7ad9\u70b9\u65f6\u7684\u5b89\u5168\u6027\u6709\u4e00\u5b9a\u4f5c\u7528\u3002\n \u66f4\u591a\u6709\u5173 Security Headers \u7684\u8bf4\u660e\uff0c\u53ef\u4ee5\u53c2\u8003 https:\/\/securityheaders.com\/\u3002\n \u53e6\u5916\uff0c\u503c\u5f97\u6ce8\u610f\u7684\u662f kubernetes.io\/tls-acme: "true"\uff0c\u8fd9\u6761\u6ce8\u89e3\u662f\u4e3a\u4e86\u914d\u7f6e\u81ea\u52a8\u7533\u8bf7\u8bc1\u4e66\u4f7f\u7528\uff0c\u6211\u4f7f\u7528\u7684\u662f cert-manager\uff0c\u5b83\u80fd\u591f\u5e2e\u6211\u89e3\u51b3\u300c\u8001\u5927\u96be\u300d\u7684 Let’s Encrypt \u8bc1\u4e66\u7533\u8bf7\u3001\u7eed\u671f\u95ee\u9898\u3002\u5728\u6b64\u4e0d\u518d\u5c55\u5f00\uff0c\u5f85\u6709\u7a7a\u65f6\u53e6\u5f00\u535a\u5ba2\u8be6\u7ec6\u8bf4\u660e\u3002\nHelmfile \u4e0d\u5c11\u4eba\u8bf4 Helm \u7528\u4e8e\u7ba1\u7406 Kubernetes \u7684 YAML\uff0c\u800c Helmfile \u5c31\u662f\u7528\u6765\u7ba1\u7406 Helm \u7684 Helm… \ud83d\ude02\n\u7b97\u662f\u4e2a\u6bd4\u8f83\u5f62\u8c61\uff0c\u5e26\u6709\u73a9\u7b11\u6210\u5206\u7684\u6bd4\u55bb\u5427\u3002Helmfile \u7684\u529f\u80fd\u5f88\u591a\uff0c\u4ee5\u6211\u73b0\u5728\u7684\u77e5\u8bc6\u91cf\u65e0\u6cd5\u4e00\u4e00\u5217\u51fa\uff1b\u81f3\u5c11\u5728\u90e8\u7f72\u6211\u7684\u535a\u5ba2\u7684\u8fc7\u7a0b\u4e2d\uff0c\u5b83\u53ef\u4ee5\u63d0\u4f9b\u4ee5\u4e0b\u5e2e\u52a9\uff1a\n Helm v2 Tillerless\uff08\u6b64\u5904\u6ce8\u660e\u7248\u672c\u662f\u56e0\u4e3a Helm v3 \u5df2\u7ecf\u8fdb\u5165 Alpha \u9636\u6bb5\uff0c\u5347\u7ea7\u540e\u5b8c\u5168\u53d6\u6d88 Tiller \u6982\u5ff5\uff0c\u56e0\u6b64 Tillerless \u6682\u4e0d\u8be6\u8ff0\uff0c\u6709\u5174\u8da3\u53ef\u81ea\u884c Google \u4e86\u89e3\uff09\u3002 \u8f93\u51fa YAML \u6587\u4ef6\u53d8\u66f4\uff08\u901a\u8fc7 helm-diff \u63d2\u4ef6\uff09\u3002 \u7ba1\u7406 Helm Chart \u4ed3\u5e93\uff0c\u81ea\u52a8\u4fdd\u6301\u66f4\u65b0\u3002 \u6700\u91cd\u8981\u7684\u4e00\u70b9 \u2014\u2014 \u901a\u8fc7\u73af\u5883\u53d8\u91cf\u8986\u76d6\u7279\u5b9a Values \u7684\u503c\u3002 \u5728 helmfile.yaml \u5185\u53ef\u4ee5\u67e5\u770b\u5230\u6211\u7684 Helmfile \u914d\u7f6e\uff0c\u6700\u4e3b\u8981\u7684\u90e8\u5206\u5c31\u662f releases \u5c0f\u8282\uff1a\nreleases: - name: blog # Helm Release \u540d\u79f0 namespace: blog # \u90e8\u7f72\u5230\u7684 Kubernetes \u547d\u540d\u7a7a\u95f4 chart: .\/chart # Helm Chart \u7684\u540d\u79f0\u6216\u672c\u5730\u8def\u5f84 values: # \u8986\u76d6 Chart \u7684\u9ed8\u8ba4 Values - image: tag: {{ requiredEnv "DOCKER_TAG" }} ingress: hosts: - host: {{ requiredEnv "INGRESS_HOST" }} paths: [ \/ ] - host: wi1dcard.dev paths: [ \/ ] tls: - secretName: ingress-tls hosts: [ {{ requiredEnv "INGRESS_HOST" }} ] \u4e0e Helm \u7c7b\u4f3c\uff0cHelmfile \u4f1a\u5c06 helmfile.yaml \u4f5c\u4e3a Go Template \u6e32\u67d3\u3002\u5982\u4f60\u6240\u89c1\uff0c\u5728\u4ee5\u4e0a\u7247\u6bb5\u4e2d\uff0c\u6211\u4f7f\u7528\u4e86 {% raw %}{{ ... }}{% endraw %} \u8bed\u6cd5\u548c requiredEnv \u51fd\u6570\u3002\nrequiredEnv \u662f Helmfile \u63d0\u4f9b\u7684\u529f\u80fd\u4e4b\u4e00\uff0c\u80fd\u591f\u83b7\u53d6\u6307\u5b9a\u73af\u5883\u53d8\u91cf\u7684\u503c\uff0c\u5e76\u53c2\u4e0e\u6a21\u677f\u6e32\u67d3\uff1b\u4f8b\u5982 {% raw %}{{ requiredEnv "INGRESS_HOST" }}{% endraw %} \u5373\u4e3a\u8bfb\u53d6 INGRESS_HOST \u53d8\u91cf\u3002\n\u914d\u5408\u8986\u76d6 Chart \u9ed8\u8ba4\u7684 Values\uff0c\u4fbf\u80fd\u591f\u5b9e\u73b0\u4e0a\u6587\u4e2d\u63d0\u5230\u7684\u7b2c\u300c4\u300d\u70b9\u3002\n\u6301\u7eed\u4ea4\u4ed8\uff08CD\uff09 \u8fd9\u6837\u4e00\u6765\uff0c\u501f\u52a9\u4e8e Helmfile\uff0c\u6211\u53ef\u4ee5\u5728 CI\/CD \u8fc7\u7a0b\u4e2d\u7075\u6d3b\u5730\u63a7\u5236\u90e8\u7f72\u7684\u955c\u50cf\uff08$DOCKER_TAG\uff09\u3001\u9690\u85cf CDN \u80cc\u540e\u7684\u88f8\u57df\u540d\uff08$INGRESS_HOST\uff09…\n\u6700\u540e\u4e00\u6b65\uff0cCD\u3002\u5728 deploy\/deploy.sh \u4e2d\uff0c\u6211\u4f7f\u7528\u4e86 Helmfile \u7684\u5b98\u65b9\u955c\u50cf\uff1a\necho "Applying helm releases..." docker run --rm -v "$PWD\/deploy:\/deploy" \\ -e HELM_TILLER_STORAGE=configmap \\ -e KUBECONFIG_BASE64="$KUBECONFIG_BASE64" \\ -e DOCKER_TAG="$DOCKER_TAG" \\ -e INGRESS_HOST="$INGRESS_HOST" \\ quay.io\/roboll\/helmfile:v0.82.0 \/deploy\/helmfile.sh \u8fd9\u4e0d\u662f\u89c4\u8303\u7684\u505a\u6cd5\uff01\u82e5\u662f\u540e\u671f\u8fc1\u79fb\u5230\u7c7b\u4f3c GitLab CI \u7b49 Dockerized CI\uff0c\u90a3\u4e48\u53ea\u9700\u8981\u58f0\u660e\u53e6\u4e00\u4e2a Job \u5373\u53ef\uff0c\u800c\u4e0d\u5fc5\u81ea\u884c\u542f\u52a8\u5bb9\u5668\u3002\n \u5728\u5bb9\u5668\u5185\uff0c\u6211\u4f7f\u7528\u4e86 deploy\/helmfile.sh \u811a\u672c\uff1b\u5b83\u9664\u4e86\u5e2e\u6211\u89e3\u7801 $KUBECONFIG_BASE64 \u5e76\u586b\u5230 ~\/.kube\/config \u4e4b\u5916\uff0c\u53ea\u6709\u4e24\u6761\u547d\u4ee4\u4e0e\u771f\u6b63\u610f\u4e49\u4e0a\u7684\u300c\u90e8\u7f72\u300d\u6709\u5173\uff1a\n# \u521d\u59cb\u5316 Helm\uff0c\u4f46\u4e0d\u5b89\u88c5 Tiller\u3002 helm init --client-only # \u90e8\u7f72\u3002 helmfile -f deploy\/helmfile.yaml apply --suppress-secrets \u6ca1\u9519\uff0c\u5230\u6700\u540e\u90e8\u7f72\u53ea\u5269\u4e0b\u4e00\u884c\u547d\u4ee4\u3002\u5176\u4e2d\uff1a\n -f deploy\/helmfile.yaml \u7528\u4e8e\u6307\u5b9a helmfile.yaml \u7684\u8def\u5f84\u3002 apply \u662f Helmfile \u7684\u5b50\u547d\u4ee4\uff0c\u76f4\u8bd1\u4e3a\u300c\u5e94\u7528\u300d\uff0c\u4f60\u53ef\u4ee5\u7406\u89e3\u4e3a\u300c\u90e8\u7f72\u300d\u3002 --suppress-secrets \u8868\u793a\u9690\u85cf Secrets\uff0c\u907f\u514d\u5bc6\u94a5\u5185\u5bb9\u88ab\u76f4\u63a5\u8f93\u51fa\u5230 CI \u65e5\u5fd7\u4e2d\u3002 \u6700\u7ec8\u6548\u679c \u5269\u4e0b\u7684\u90fd\u4ea4\u7ed9 Helmfile\u3001Helm\u3001Kubernetes \u5c31\u597d\u3002\u5b83\u4eec\u7d27\u5bc6\u534f\u4f5c\uff0c\u6839\u636e\u4f60\u7684\u914d\u7f6e\uff0c\u6700\u7ec8\u5c06\u5e94\u7528\u90e8\u7f72\u5230\u96c6\u7fa4\u4e2d\uff1a\n$ kubectl get pods -n blog NAME READY STATUS RESTARTS AGE blog-74d758cb84-w5z9k 1\/1 Running 0 21h \u4f60\u53ef\u4ee5\u5728 \u8fd9\u91cc \u67e5\u770b\u5b8c\u6574\u7684\u6784\u5efa\u548c\u90e8\u7f72\u65e5\u5fd7\uff0c\u4ee5\u53ca \u5386\u53f2\u3002\n\u4ee5\u53ca\u6211\u7684\u535a\u5ba2\uff1a\n$ curl -I https:\/\/wi1dcard.dev\/ HTTP\/2 200 date: Thu, 12 Sep 2019 13:05:37 GMT content-type: text\/html ... x-powered-by: Wi1dcard Kubernetes Engine \ud83d\ude04\n\u7ed3\u8bed \u9996\u5148\u611f\u8c22 Xiangxuan Liu\uff08@nauxliu\uff09\u5728\u6211\u5b66\u4e60 Kubernetes \u8fc7\u7a0b\u4e2d\u7684\u5e2e\u52a9\u548c\u6307\u5bfc\uff0c\u8282\u7701\u4e86\u5927\u91cf\u8bd5\u9519\u6210\u672c\uff0c\u5c11\u7ed5\u4e86\u5f88\u591a\u5f2f\u8def\uff0c\u7b97\u5f97\u4e0a\u662f\u53d7\u76ca\u532a\u6d45\u5427\u3002\u5728\u516c\u53f8\u4e0d\u597d\u610f\u601d\u8bf4\uff0c\u5c31\u8fd8\u662f\u5199\u5728\u535a\u5ba2\u91cc\u5427… \u54b3\u54b3\u3002\u6587\u4e2d\u6d89\u53ca\u7684\u6280\u672f\u6808\u5747\u53d6\u81ea\uff08\u6216\u884d\u751f\u81ea\uff09\u6211\u53f8\u73b0\u6709\u7684 Kubernetes \u76f8\u5173\u6280\u672f\uff0c\u611f\u5174\u8da3\u7684\u8bdd\uff0c\u7b80\u5386\u4e22\u6765\u5427\uff1ahttps:\/\/join.rightcapital.com\/\uff08\u867d\u7136\u6682\u65f6\u4e0d\u62db DevOps \ud83d\ude02\uff0c\u4e0d\u8fc7\u524d\u540e\u7aef\u90fd\u5728\u62db\u5440\uff09\u3002\n\u6700\u540e\uff0cKubernetes \u662f\u4e2a\u975e\u5e38\u7e41\u590d\u7cbe\u7f8e\u7684\u9879\u76ee\uff0c\u6211\u6700\u8fd1\u521a\u521a\u5165\u95e8\uff1b\u672c\u6587\u7684\u76ee\u7684\u5e76\u4e0d\u662f\u4e3a\u5927\u5bb6\u63d0\u4f9b\u8be6\u5c3d\u7684\u53c2\u8003\uff0c\u800c\u662f\u5728\u6211\u6f2b\u6f2b\u5b66\u4e60\u957f\u8def\u4e2d\u7684\u4e00\u4e9b\u968f\u7b14\u8bb0\u5f55\u5427\u3002\n\u5f53\u7136\uff0c\u65b0\u624b \u2260 \u4e0d\u8ffd\u6c42\u4e13\u4e1a\uff0c\u5982\u6587\u4e2d\u6709\u4efb\u4f55\u9519\u8bef\u656c\u8bf7\u6307\u51fa\uff0c\u6211\u4f1a\u5c3d\u5feb\u4fee\u6539\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/migrate-to-kubernetes-ii\/","summary":" \uff08\u63a5\u4e0a\u6587\uff09<\/p>\n \u524d\u9762\u7684\u90e8\u5206\u4ecb\u7ecd\u4e86\u5982\u4f55\u4e3a\u6211\u7684\u535a\u5ba2\u6253\u5305 Docker \u955c\u50cf\uff0c\u63a5\u4e0b\u6765\u5c31\u662f\u91cd\u5934\u620f \u2014\u2014 \u90e8\u7f72\u5230 Kubernetes\u3002<\/p>","title":"\u6211\u5982\u4f55\u5c06\u535a\u5ba2\u8fc1\u79fb\u5230 Kubernetes - II"},{"content":"\u6700\u8fd1 Kubernetes \u7684\u53d1\u5c55\uff0c\u4ee5\u53ca\u5728\u6211\u53f8\u7684\u5927\u91cf\u5e94\u7528\uff0c\u81ea\u5df1\u4e5f\u8feb\u4e0d\u53ca\u5f85\u60f3\u8981\u5c1d\u5c1d\u9c9c\uff0c\u867d\u7136\u6211\u7684\u535a\u5ba2\u662f\u57fa\u4e8e Hexo \u7684\u7eaf\u9759\u6001\u7ad9\u70b9\uff0c\u4f46\u8fd9\u5e76\u4e0d\u80fd\u963b\u6321\u6211\u628a\u5b83\u8fc1\u79fb\u4e0a Kubernetes\uff01\u6bd5\u7adf… \u76f8\u6bd4\u4e8e GitHub Pages \u7075\u6d3b\u6027\u66f4\u597d\u53ef\u63a7\u6027\u66f4\u9ad8\uff0cemmmm… \u597d\u4e86\u6211\u7f16\u4e0d\u4e0b\u53bb\u4e86\uff0c\u603b\u4e4b\uff0c\u751f\u547d\u5728\u4e8e\u6298\u817e\ud83d\ude02\uff0c\u6211\u4eec\u5f00\u59cb\u5427\u3002\n \u672c\u6587\u6d89\u53ca\u7684\u4ee3\u7801\uff08\u4e5f\u5c31\u662f\u6211\u7684\u535a\u5ba2\uff09\u5b8c\u5168\u5f00\u6e90\uff1ahttps:\/\/github.com\/wi1dcard\/blog\u3002\n \u6784\u5efa Docker \u955c\u50cf \u8981\u4e0a Kubernetes\uff0c\u9996\u5148\u8981\u505a\u7684\u5c31\u662f\u7ed9\u9879\u76ee\u6253\u5305\u955c\u50cf\u3002Dockerfile \u975e\u5e38\u7b80\u5355\uff1a\n# \u91c7\u7528 nginx:stable-alpine \u4f5c\u4e3a\u57fa\u7840\u955c\u50cfFROMnginx:stable-alpine# \u590d\u5236 .\/public \u5230\u955c\u50cf\u5185 \/usr\/share\/nginx\/htmlCOPY .\/public \/usr\/share\/nginx\/html# \u63d0\u793a\u66b4\u9732 TCP \u534f\u8bae 80 \u7aef\u53e3EXPOSE80\/tcp\u6211\u9009\u7528 Docker Hub \u4f5c\u4e3a Docker Registry\uff0c\u5982\u679c\u4f60\u6709\u79c1\u6709\u9879\u76ee\u3001\u6743\u9650\u63a7\u5236\u7b49\u76f8\u5173\u9700\u6c42\uff0cQuay.io \u6216\u8bb8\u662f\u66f4\u597d\u7684\u9009\u62e9\u3002\nCI \u6784\u5efa \u5f53\u7136\u5566\uff0c\u6784\u5efa\u8fd9\u79cd\u4e8b\u60c5\u80af\u5b9a\u662f\u4ea4\u7ed9 CI\u3002\u4e0d\u63a8\u8350\u6bcf\u6b21\u53d8\u66f4\u624b\u52a8 Build\uff0c\u8d39\u65f6\u8d39\u529b\u6613\u51fa\u9519\u3002\n\u76ee\u524d\u6211\u7ed9\u535a\u5ba2\u7528\u7684\u662f Travis CI\u3002\u6211\u4e5f\u8003\u8651\u8fc7\uff1a\n Circle CI\uff0c\u8bd5\u7528\u540e\u611f\u89c9\u914d\u7f6e\u6587\u4ef6\uff08\u4ee5\u6211\u4e2a\u4eba\u7684\u98ce\u683c\u6765\u770b\uff09\u6709\u70b9\u53cd\u76f4\u89c9\uff0c\u653e\u5f03\u3002 GitLab CI\uff0c\u76ee\u524d\u6211\u8ba4\u4e3a\u6700\u597d\u7684 CI\/CD\uff0c\u6211\u5177\u5907 CI\/CD \u9700\u6c42\u7684\u79c1\u4eba\u9879\u76ee\u90fd\u5728 GitLab\u3002\u4f46\u662f\u8003\u8651\u5230 (1) \u8981\u5c06\u535a\u5ba2\u4ee3\u7801\u5f00\u6e90\uff0c(2) GitLab CI for GitHub repos \u9700\u8981\u4ed8\u8d39\uff0c(3) \u4e24\u5957 VCS \u611f\u89c9\u602a\u602a\u7684\uff0c\u56e0\u6b64\u653e\u5f03\u3002 GitHub Actions\uff0c\u6b63\u5728 Beta \u4e2d\uff0c\u6253\u8d25\u5404\u8def CI\/CD \u7684\u79cd\u5b50\u9009\u624b\u4e4b\u4e00\u3002\u53ea\u53ef\u60dc\u6587\u6863\u8fd8\u4e0d\u591f\u9f50\u5168\uff0c\u7a33\u5b9a\u6b20\u4f73\uff0c\u53ea\u597d\u6682\u65f6\u653e\u5f03\u3002 Docker Hub\uff0c\u82e5\u662f\u53ea\u7528\u6765\u6784\u5efa\u516c\u5f00\u955c\u50cf\u611f\u89c9\u8fd8\u4e0d\u9519\uff0c\u4f46 (1) CI \u548c Docker Registry \u5f3a\u7ed1\u5b9a\uff0c\u60f3\u8981\u6362 Registry\uff08\u6bd4\u5982\u4e0a\u6587\u4e2d\u63d0\u5230\u7684 Quay.io\uff09\u4f1a\u5f88\u7e41\u7410\uff0c(2) \u6784\u5efa\u901f\u5ea6\u5de8\u6162… \u6162… \u6162… \u5927\u6982\u662f\u7528\u6237\u592a\u591a\u5427\uff0c\u60c5\u6709\u53ef\u539f\uff0c(3) \u955c\u50cf\u6253\u5305\u5b8c\u6210\u540e\u9700\u8981\u4f7f\u7528 Helm \u90e8\u7f72\uff08\u5373 CD\uff09\u5230\u96c6\u7fa4\uff0c\u660e\u663e\u4e0d\u9002\u5408\u8be5\u573a\u666f\u3002 \u4f60\u53ef\u4ee5\u5728 \u8fd9\u91cc \u627e\u5230\u6211\u7684 Travis \u914d\u7f6e\u3002\u5176\u4e2d\u5b9a\u4e49\u4e86\u4e09\u4e2a\u73af\u5883\u53d8\u91cf\uff1a\nenv: global: - DOCKER_USERNAME=wi1dcard # \u6211\u7684 Docker Hub \u7528\u6237\u540d - DOCKER_IMAGE=$DOCKER_USERNAME\/blog # Docker \u955c\u50cf\u540d - DOCKER_TAG=build-$TRAVIS_BUILD_NUMBER # Docker \u955c\u50cf Tag \u8fd9\u4e9b\u53d8\u91cf\u4f1a\u5728\u4e4b\u540e\u7528\u5230\u3002\n \u6ce8\u610f $DOCKER_TAG\uff0c\u5b83\u7684\u503c\u662f\u52a8\u6001\u7684\uff0c\u5373\u6bcf\u6b21\u6784\u5efa\u90fd\u4f1a\u53d8\u5316\uff0c\u7531 Travis CI \u7684 \u9884\u5b9a\u4e49\u73af\u5883\u53d8\u91cf \u62fc\u63a5\u800c\u6210\u3002\n \u5728 before_script \u5185\uff0c\u5b9a\u4e49\u4e86\u6784\u5efa\u8fc7\u7a0b\u7684\u811a\u672c\uff1a\nbefore_script: - build\/build.sh \u7531\u4e8e\u6784\u5efa\u3001\u53d1\u5e03\u8fc7\u7a0b\u6bd4\u8f83\u590d\u6742\uff0c\u540c\u65f6\u4e3a\u4e86\u672a\u6765\uff08\u53ef\u80fd\uff09\u8fc1\u79fb\u5230 GitLab CI\uff0c\u6211\u6ca1\u6709\u5c06\u6240\u6709\u811a\u672c\u7f57\u5217\u5728 .travis.yml \u91cc\u3002\u6240\u6709\u4e0e CI \u76f8\u5173\u7684\u5185\u5bb9\u6211\u90fd\u653e\u5728\u4e86 build\/ \u76ee\u5f55\u3002\nbuild\/build.sh \u7684\u4e3b\u8981\u4efb\u52a1\u662f\uff1a\n \u5b89\u88c5\u4f9d\u8d56\uff0c\u4f8b\u5982 Hexo\u3002 \u6267\u884c lint \u8fc7\u7a0b\uff0c\u68c0\u67e5 Markdown \u8bed\u6cd5\u7b49\u3002 \u6e32\u67d3\u9759\u6001\u7ad9\u70b9\uff0c\u751f\u6210 PDF \u683c\u5f0f\u7b80\u5386\u3002 \u6784\u5efa Docker \u955c\u50cf\u3002 \u53d1\u5e03 Docker \u955c\u50cf \u4e0e CD \u76f8\u5173\u7684\u5185\u5bb9\u6211\u653e\u5728\u4e86 deploy\/ \u76ee\u5f55\u3002\u6b63\u5982 .travis.yml \u5b9a\u4e49\u7684\u90a3\u6837\uff0c\u90e8\u7f72\u811a\u672c\u4f4d\u4e8e deploy\/deploy.sh\uff1a\nscript: - deploy\/deploy.sh \u9996\u5148\uff0c\u767b\u5f55 Docker Hub\uff0c\u63a5\u7740\u63a8\u9001\u955c\u50cf\uff1a\necho "Logging in Docker Hub..." echo "$DOCKER_PASSWORD" | docker login -u "$DOCKER_USERNAME" --password-stdin echo "Pushing images to Docker Hub..." docker push "$DOCKER_IMAGE" \u6ce8\u610f\uff0c\u8fd9\u91cc\u7528\u5230\u4e86\u4e4b\u524d\u5b9a\u4e49\u7684\u73af\u5883\u53d8\u91cf\u3002\u5176\u4e2d\uff0c$DOCKER_PASSWORD \u6211\u5b9a\u4e49\u5728 Travis CI \u7684\u79c1\u6709\u73af\u5883\u53d8\u91cf\u5185\uff1a\n\u8fd8\u6709\u4e24\u4e2a\u73af\u5883\u53d8\u91cf INGRESS_HOST \u548c KUBECONFIG_BASE64 \u7a0d\u540e\u4f1a\u7528\u5230\u3002\n\u5173\u4e8e Immutable \u4f60\u53ef\u4ee5\u5728 \u8fd9\u91cc \u67e5\u770b\u63a8\u9001\u7684\u955c\u50cf\u548c Tags\u3002\n\u8fd8\u8bb0\u5f97 $DOCKER_TAG \u7684\u503c\u662f\u52a8\u6001\u7684\u5417\uff0c\u6240\u4ee5\u6bcf\u6b21 CI \u6784\u5efa\u4ea7\u751f\u7684\u955c\u50cf\u90fd\u4f1a\u6709\u552f\u4e00\u7684 Tag \u4e0e\u5b83\u7684 Build ID \u5bf9\u5e94\u3002\n\u8fd9\u5bf9\u6211\u6765\u8bf4\u597d\u5904\u663e\u800c\u6613\u89c1\uff1a\n Immutable\u3002\u6bcf\u6b21\u6784\u5efa\u7684\u955c\u50cf\u5c31\u50cf Git Commit \u4e00\u6837\u7559\u4e0b\u4e0d\u53ef\u53d8\u66f4\u7684\u5370\u8bb0\u3002 \u6e05\u6670\u660e\u4e86\uff0c\u4e0d\u6613\u6df7\u6dc6\u3002\u4f60\u65e0\u6cd5\u5feb\u901f\u5f97\u77e5\u5f53\u524d lastet \u5177\u4f53\u662f\u54ea\u4e00\u6b21\u6784\u5efa\u7684\u4ea7\u7269\u3002 \u4fbf\u4e8e\u56de\u6eda\u3002\u867d\u7136\u4f60\u53ef\u4ee5\u91cd\u65b0\u6784\u5efa\u955c\u50cf\uff0c\u4f46\u5982\u679c\u4f60\u5c06\u6bcf\u6b21\u6784\u5efa\u7684\u955c\u50cf\u4fdd\u7559\uff0c\u90a3\u4e48\u5c31\u53ef\u4ee5\u5feb\u901f\u5730\u3001\u5b8c\u7f8e\u5730\u56de\u6eda\u5230\u4efb\u610f\u7248\u672c\uff08\u5c24\u5176\u80fd\u591f\u9632\u6b62\u540c\u4e00 Git Commit \u591a\u6b21 Build \u4ea7\u751f\u4e0d\u540c\u7684 Image\uff09\u3002 … \u5176\u5b9e\uff0c\u505a\u4e86\u4e00\u5e74\u8fd0\u7ef4\u4e4b\u540e\u6211\u53d1\u73b0\uff0c\u6709\u65f6\u5019\u6df7\u6dc6\u6bd4\u300c\u6211\u4e0d\u77e5\u9053\u300d\u66f4\u53ef\u6015\u3002\u4e00\u4e9b\u9690\u6027\u7684\u58f0\u660e\u53ef\u80fd\u4f1a\u5bfc\u81f4\u4f60\u5728\u67d0\u4e2a\u6781\u5c0f\u7684\u95ee\u9898\u4e0a\uff0c\u6beb\u65e0\u610f\u4e49\u5730\u6d6a\u8d39\u4e00\u6574\u5929\u65f6\u95f4\u3002\u56e0\u6b64\u5982\u679c\u67d0\u4e9b\u65f6\u5019\u300c\u7b80\u6d01\u4f18\u96c5\u300d\u548c\u300c\u6e05\u6670\u660e\u4e86\u300d\u4ea7\u751f\u51b2\u7a81\u7684\u65f6\u5019\uff0c\u6211\u4f1a\u6beb\u4e0d\u72b9\u8c6b\u9009\u62e9 \u6e05\u6670\u660e\u4e86 \u5730\u663e\u5f0f\u58f0\u660e\uff0c\u5c3d\u7ba1\u73b0\u5728\u770b\u8d77\u6765\u53ef\u80fd\u6709\u70b9\u4e11\uff0c\u4f46\u672a\u6765\u8c03\u8bd5\u7684\u65f6\u5019\u53ef\u80fd\u4f1a\u5e2e\u4e0a\u5927\u5fd9\u3002\n \uff08\u672a\u5b8c\u5f85\u7eed\uff09\n","permalink":"https:\/\/wi1dcard.dev\/posts\/migrate-to-kubernetes-i\/","summary":" \u6700\u8fd1 Kubernetes \u7684\u53d1\u5c55\uff0c\u4ee5\u53ca\u5728\u6211\u53f8\u7684\u5927\u91cf\u5e94\u7528\uff0c\u81ea\u5df1\u4e5f\u8feb\u4e0d\u53ca\u5f85\u60f3\u8981\u5c1d\u5c1d\u9c9c\uff0c\u867d\u7136\u6211\u7684\u535a\u5ba2\u662f\u57fa\u4e8e Hexo \u7684\u7eaf\u9759\u6001\u7ad9\u70b9\uff0c\u4f46\u8fd9\u5e76\u4e0d\u80fd\u963b\u6321\u6211\u628a\u5b83\u8fc1\u79fb\u4e0a Kubernetes\uff01\u6bd5\u7adf… \u76f8\u6bd4\u4e8e GitHub Pages \u7075\u6d3b\u6027\u66f4\u597d\u53ef\u63a7\u6027\u66f4\u9ad8\uff0cemmmm… \u597d\u4e86\u6211\u7f16\u4e0d\u4e0b\u53bb\u4e86\uff0c\u603b\u4e4b\uff0c\u751f\u547d\u5728\u4e8e\u6298\u817e\ud83d\ude02\uff0c\u6211\u4eec\u5f00\u59cb\u5427\u3002<\/p>","title":"\u6211\u5982\u4f55\u5c06\u535a\u5ba2\u8fc1\u79fb\u5230 Kubernetes - I"},{"content":"sudo spctl --master-disable ","permalink":"https:\/\/wi1dcard.dev\/posts\/disable-system-policy-on-macos\/","summary":"sudo spctl --master-disable ","title":"\u5141\u8bb8 macOS \u5b89\u88c5\u4efb\u4f55\u672a\u7b7e\u540d\u7684 App"},{"content":"\u5728\u8fd1\u671f\u6298\u817e\u79d1\u5b66\u4e0a\u7f51\u7f51\u5173\u7684\u8fc7\u7a0b\u4e2d\uff0c\u987a\u4fbf\u7814\u7a76\u4e86\u4e00\u4e0b VLAN\u3002\u901a\u8fc7\u9002\u5f53\u5730\u914d\u7f6e\uff0c\u4e00\u53f0\u53ea\u5177\u5907\u5355\u7269\u7406\u7f51\u53e3\u7684 NanoPi NEO2\uff0c\u540c\u6837\u53ef\u4ee5\u53d8\u8eab\u300c\u5355\u81c2\u300d\u8def\u7531\u5668\u3002\n\u51c6\u5907\u5de5\u4f5c NanoPi NEO2 \u652f\u6301 802.1Q VLAN \u7684\u4ea4\u6362\u673a\uff08\u4f8b\u5982\u6211\u6b63\u5728\u4f7f\u7528\u7684 Netgear GS108Ev3\uff09 \u914d\u7f6e\u4ea4\u6362\u673a \u914d\u7f6e\u4ea4\u6362\u673a\u65e0\u975e\u5c31\u662f\u5212\u5206 VLAN \u7684\u8fc7\u7a0b\u3002\u6211\u5c06\u4ea4\u6362\u673a\u7684 8 \u4e2a\u7aef\u53e3\u5212\u5206\u4e3a\u4e24\u4e2a VLAN\uff0cID \u5206\u522b\u4e3a 1 \u548c 2\u3002\n\u5982\u4e0a\u56fe\u6240\u793a\uff0c\u5176\u4e2d\uff1a\n VLAN 1 \u4f5c\u4e3a WAN\uff0c\u5bf9\u5e94 1\u30012\u30013\u30014 \u53e3\u3002 VLAN 2 \u4f5c\u4e3a LAN\uff0c\u5bf9\u5e94 4\u30015\u30016\u30017\u30018 \u53e3\u3002 \u53ef\u4ee5\u770b\u51fa\uff0c\u7b2c 4 \u4e2a\u63a5\u53e3\u6a2a\u8de8\u4e24\u4e2a VLAN\uff0c\u968f\u540e\u6211\u4eec\u5c06\u4f1a\u628a NanoPi \u8fde\u63a5\u5230\u8be5\u63a5\u53e3\u4e0a\u3002\n\u540c\u65f6\uff0c\u6211\u5c06\u7b2c 4 \u4e2a\u63a5\u53e3\u914d\u7f6e\u4e3a Tagged VLAN\uff0c\u5176\u4f59\u63a5\u53e3\u5747\u914d\u7f6e\u4e3a Untagged\uff1a\n\u8fd9\u6837\uff0cNanoPi \u4fbf\u80fd\u901a\u8fc7 VLAN Tag \u83b7\u77e5\u6570\u636e\u5305\u7684\u6765\u6e90\u662f WAN\uff08VLAN 1\uff09\u8fd8\u662f LAN\uff08VLAN 2\uff09\uff1b\u540c\u65f6\uff0c\u4e5f\u53ef\u4ee5\u6807\u8bb0\u53d1\u51fa\u6570\u636e\u5305\u5e94\u5f53\u4f20\u8f93\u5230\u54ea\u4e2a VLAN\u3002\n \u63d0\u793a\uff1a\u5173\u4e8e VLAN Tag \u7684\u77e5\u8bc6\u8bf7\u81ea\u884c\u641c\u7d22\uff1b\u53e6\u5916\uff0c\u4ea4\u6362\u673a\u79c1\u6709\u7684\u3001\u57fa\u4e8e\u7aef\u53e3\u7684 VLAN \u4e0d\u652f\u6301 Tag \u529f\u80fd\uff0c\u52a1\u5fc5\u6ce8\u610f\u3002\n \u6700\u540e\uff0c\u914d\u7f6e\u63a5\u53e3\u9ed8\u8ba4\u7684 PVID\uff1a\n\u6ce8\u610f\u7b2c 4 \u4e2a\u63a5\u53e3\uff0c\u6211\u5c06\u5b83\u7684 PVID \u8bbe\u7f6e\u4e3a 2\uff0c\u4e5f\u5c31\u662f\u5bf9\u5e94 VLAN 2\uff1b\u5373\u6536\u5230\u7531\u8be5\u63a5\u53e3\u53d1\u6765\u7684\u4e0d\u5e26 VLAN Tag \u7684\u6570\u636e\u5305\uff0c\u5219\u9ed8\u8ba4\u8ba4\u4e3a\u5c5e\u4e8e VLAN 2\u3002\n\u914d\u7f6e NanoPi \u9996\u5148\u8fde\u63a5\u5230 NanoPi\uff0c\u521b\u5efa\u5bf9\u5e94 VLAN \u7684\u865a\u62df\u63a5\u53e3\uff1a\nnmcli conn add type vlan ifname WAN dev eth0 id 1 # VLAN 1 nmcli conn add type vlan ifname LAN dev eth0 id 2 # VLAN 2 \u7531\u4e8e NanoPi \u5728 LAN \u5185\u627f\u62c5\u8def\u7531\u7684\u5de5\u4f5c\uff0c\u56e0\u6b64\u9700\u8981\u914d\u7f6e\u4e3a\u9759\u6001 IP\uff1a\nnmcli conn mod vlan-LAN \\ ipv4.method manual \\ ipv4.addresses 192.168.88.1\/24 \\ ipv4.gateway 192.168.88.1 \\ ipv4.dns 192.168.88.1 \u5176\u4e2d 192.168.88.1 \u662f LAN \u7684\u7f51\u5173 IP\uff08\u4e5f\u5c31\u662f NanoPi \u81ea\u8eab\u7684 IP \u5566\uff09\uff0c\/24 \u4e3a LAN \u7684\u5b50\u7f51 CIDR \u524d\u7f00\u3002\n\u63a5\u4e0b\u6765\uff0c\u505c\u6b62 Systemd \u63d0\u4f9b\u7684\u672c\u5730 DNS \u7f13\u5b58\u670d\u52a1 systemd-resolved\uff0c\u4f7f\u7528 DNSMASQ \u4ee3\u66ff\uff1a\nsystemctl stop systemd-resolved systemctl disable systemd-resolved apt install dnsmasq \u5e76\u4fee\u6539 \/etc\/dnsmasq.conf\uff0c\u914d\u7f6e DHCP \u670d\u52a1\u548c DNS \u670d\u52a1\uff1a\n# \u4ec5\u5bf9 LAN \u63d0\u4f9b\u670d\u52a1 interface=LAN # \u4e0d\u8bfb\u53d6 \/etc\/resolv.conf \u4f5c\u4e3a\u4e0a\u6e38 DNS \u670d\u52a1\u5668 no-resolv # \u914d\u7f6e\u4e0a\u6e38 DNS \u670d\u52a1\u5668\u4e3a 114.114.114.114 server=114.114.114.114 # DNS \u8bb0\u5f55\u7f13\u5b58\u6570\u91cf\u4e3a 10000 cache-size=10000 # DHCP IP \u8303\u56f4\uff0c\u7531 192.168.88.50 \u5230 192.168.88.150 # \u5b50\u7f51\u63a9\u7801\u4e3a 255.255.255.0\uff0cDHCP \u79df\u7ea6\u6709\u6548\u671f\u4e3a 1 \u5c0f\u65f6 dhcp-range=192.168.88.50,192.168.88.150,255.255.255.0,1h # DHCP \u9009\u9879\uff0c\u4e0b\u53d1\u7ed9\u5ba2\u6237\u7aef\u7684 DNS \u670d\u52a1\u5668\u4e3a 192.168.88.1 dhcp-option=option:dns-server,192.168.88.1 \u53e6\u5916\uff0c\u8fd8\u9700\u8981\u914d\u7f6e iptables\uff0c\u5b9e\u73b0\u8def\u7531\u5668\u6700\u91cd\u8981\u7684\u529f\u80fd \u2014\u2014 NAT\uff1a\n# \u589e\u52a0\u89c4\u5219 iptables -t nat -A POSTROUTING -o WAN -j MASQUERADE # \u6301\u4e45\u5316\u89c4\u5219 apt install iptables-persistent netfilter-persistent netfilter-persistent save \u6700\u540e\uff0c\u5f00\u542f\u5185\u6838 IPv4 \u6570\u636e\u5305\u8f6c\u53d1\u5373\u53ef\uff1a\nsed -i -E 's\/#?\\s*(net.ipv4.ip_forward)(.*)$\/\\1 = 1\/' \/etc\/sysctl.conf sysctl -p \/etc\/sysctl.conf \u53c2\u8003\u8d44\u6599 https:\/\/www.liangshuang.name\/2018\/09\/05\/router-on-a-stick-with-raspberrypi-shadowsocks\/ https:\/\/access.redhat.com\/documentation\/en-us\/red_hat_enterprise_linux\/7\/html\/networking_guide\/sec-configure_802_1q_vlan_tagging_using_the_command_line_tool_nmcli ","permalink":"https:\/\/wi1dcard.dev\/posts\/configure-nanopi-as-a-router\/","summary":" \u5728\u8fd1\u671f\u6298\u817e\u79d1\u5b66\u4e0a\u7f51\u7f51\u5173\u7684\u8fc7\u7a0b\u4e2d\uff0c\u987a\u4fbf\u7814\u7a76\u4e86\u4e00\u4e0b VLAN\u3002\u901a\u8fc7\u9002\u5f53\u5730\u914d\u7f6e\uff0c\u4e00\u53f0\u53ea\u5177\u5907\u5355\u7269\u7406\u7f51\u53e3\u7684 NanoPi NEO2\uff0c\u540c\u6837\u53ef\u4ee5\u53d8\u8eab\u300c\u5355\u81c2\u300d\u8def\u7531\u5668\u3002<\/p>","title":"\u5c06 NanoPi \u914d\u7f6e\u4e3a\u5355\u81c2\u8def\u7531\u5668"},{"content":"\u4ece\u4e8b\u8fd0\u7ef4\u5de5\u7a0b\u5e08\uff08\u517c\u516c\u53f8\u7f51\u7ba1\ud83d\ude02\uff09\u4ee5\u6765\uff0c\u9047\u5230\u4e0d\u5c11\u5404\u5f0f\u5404\u6837\u7684\u7f51\u7edc\u6545\u969c\uff0c\u6709\u7684\u6765\u81ea\u4e8e\u8def\u7531\u5668\u95ee\u9898\uff0c\u6709\u7684\u5219\u662f\u5ba2\u6237\u7aef\u914d\u7f6e\u9519\u8bef\u3002\u800c\u5f00\u53d1\u4eba\u5458\u7684\u53cd\u9988\u5927\u591a\u7c7b\u4f3c\u4e8e\uff1a\n \u300c\u6211\u4e0a\u4e0d\u4e86\u7f51\u4e86\uff01\u300d \u300c\u7f51\u7edc\u5361\u4e86\u5417\uff1f\u4e00\u76f4\u5728\u52a0\u8f7d…\u300d \u4fe1\u606f\u91cf\u7a0d\u591a\u4e00\u70b9\u7684\u4f8b\u5982\uff1a\n \u300cping \u4e0d\u901a\u67d0\u67d0\u5730\u5740\u300d \u300cChrome \u663e\u793a\u67d0\u67d0\u9519\u8bef\u300d \u7b49\u7b49\u8bf8\u5982\u6b64\u7c7b\u3002\n\u7136\u800c\uff0c\u8fd9\u4e9b\u5bf9\u4e8e\u7f51\u7edc\u5de5\u7a0b\u5e08\u6765\u8bf4\u5e76\u6ca1\u6709\u4efb\u4f55\u4ef7\u503c\u3002\u4f60\u8868\u8ff0\u7684\u662f\u300c\u73b0\u8c61\u300d\uff0c\u5e76\u4e0d\u662f\u300c\u7ebf\u7d22\u300d\uff0c\u901a\u8fc7\u8fd9\u5be5\u5be5\u65e0\u51e0\u7684\u8bed\u53e5\uff0c\u4ed6\u4eec\u65e0\u6cd5\u5feb\u901f\u5730\u8c03\u67e5\u6545\u969c\u539f\u56e0\u3002\u5c31\u597d\u50cf\u4f60\u5f00\u53d1\u7684\u5e94\u7528\u65e0\u6cd5\u6b63\u5e38\u5de5\u4f5c\uff0c\u800c\u6d4b\u8bd5\u5de5\u7a0b\u5e08\u7684\u53cd\u9988\u5e76\u6ca1\u6709\u8be6\u7ec6\u7684\u62a5\u9519\u4fe1\u606f\uff0c\u53ea\u6709\u300c\u72b6\u6001\u7801 500\u300d\u4e00\u6837\u3002\n\u800c\u672c\u6587\uff0c\u5c31\u662f\u60f3\u901a\u8fc7\u5e38\u89c1\u7684\u573a\u666f\uff0c\u6765\u5f15\u5bfc\u5927\u5bb6\u5feb\u901f\u5730\u5b9a\u4f4d\u672c\u5730\u7f51\u7edc\u6545\u969c\u3002\u5728\u8d1f\u8d23\u7f51\u7edc\u7684\u540c\u4e8b\u8fd8\u6ca1\u6709\u300c\u7a7a\u964d\u300d\u5230\u4f60\u7535\u8111\u4e4b\u524d\uff0c\u5c3d\u53ef\u80fd\u628a\u53ef\u80fd\u7684\u539f\u56e0\u7f29\u5c0f\u5230\u6bd4\u8f83\u5bb9\u6613\u6392\u67e5\u7684\u533a\u95f4\u3002\u5373\u4fbf\u4f5c\u4e3a\u5f00\u53d1\u8005\u53ef\u80fd\u65e0\u6cd5\u89e3\u51b3\u8fd9\u4e9b\u95ee\u9898\uff0c\u4f46\u4e5f\u80fd\u7ed9\u7f51\u7edc\u5de5\u7a0b\u5e08\u4eec\u63d0\u4f9b\u6781\u5927\u7684\u5e2e\u52a9\uff0c\u8bf4\u4e0d\u5b9a\u4ed6\u4eec\u4f1a\u5bf9\u4f60\u522e\u76ee\u76f8\u770b\u7684\u3002\n\u6d4f\u89c8\u5668\u4e0e CURL \u901a\u5e38\u6765\u8bf4\uff0c\u53d1\u73b0\u7f51\u7edc\u6545\u969c\u7684\u300c\u5165\u53e3\u300d\u5927\u591a\u662f\u6d4f\u89c8\u5668\u6253\u4e0d\u5f00\u67d0\u4e2a\u7f51\u7ad9\u4e86\u3002\n\u4ee5 Chrome \u4e3a\u4f8b\uff0c\u9519\u8bef\u9875\u9762\u53ef\u80fd\u662f\u8fd9\u6837\u7684\uff1a\n\u9996\u5148\uff0c\u4f60\u9700\u8981\u786e\u8ba4\u662f\u5bf9\u65b9\uff08\u670d\u52a1\u7aef\uff09\u8fd8\u662f\u4f60\u7684\u7f51\u7edc\u95ee\u9898\uff0c\u4f60\u53ef\u4ee5\u5c1d\u8bd5\u8bbf\u95ee\u767e\u5ea6\u3001\u817e\u8baf\u4e4b\u7c7b\u7684\u7f51\u7ad9\uff0c\u8fd9\u4e9b\u7ad9\u70b9\u672c\u8eab\u6545\u969c\u7684\u6982\u7387\u975e\u5e38\u4f4e\uff0c\u5982\u679c\u8fde\u7eed\u8bbf\u95ee\u51e0\u4e2a\u7ad9\u70b9\u90fd\u6253\u4e0d\u5f00\uff0c\u90a3\u4e48\u4f60\u53ef\u4ee5\u7ee7\u7eed\u5f80\u4e0b\u770b\u4e86\u3002\n\u6d4f\u89c8\u5668\u8bbf\u95ee\u7f51\u7ad9\u6700\u91cd\u8981\u7684\u6b65\u9aa4\u4e4b\u4e00\u5c31\u662f\u53d1\u8d77 HTTP \u8bf7\u6c42\u3002\u4f46\u5176\u5b9e\u5728\u8f93\u5165\u5730\u5740\u6309\u4e0b\u56de\u8f66\u540e\uff0c\u76f4\u5230\u7f51\u9875\u5c55\u793a\u5728\u4f60\u7684\u9762\u524d\uff0c\u8fd9\u5176\u4e2d\u6d4f\u89c8\u5668\u8fd8\u505a\u4e86\u5927\u91cf\u7684\u5de5\u4f5c\uff08\u6709\u5174\u8da3\u53ef\u81ea\u884c\u641c\u7d22\u8be5\u7ecf\u5178\u9762\u8bd5\u9898\uff09\u3002\u4f7f\u7528\u6d4f\u89c8\u5668\u8c03\u8bd5\u7f51\u7edc\u95ee\u9898\u7684\u4e0d\u53ef\u63a7\u56e0\u7d20\u592a\u591a\uff0c\u8bf8\u5982\u5404\u7c7b\u7f13\u5b58\u673a\u5236\u3001\u9884\u52a0\u8f7d\u7b49\u7b49\u3002\u53e6\u5916\u4e0d\u540c\u6d4f\u89c8\u5668\u7684\u884c\u4e3a\u6216\u591a\u6216\u5c11\u5b58\u5728\u5dee\u522b\uff0c\u62a5\u9519\u4fe1\u606f\u4e5f\u4e0d\u5c3d\u76f8\u540c\u3002\u56e0\u6b64\uff0c\u8bf7\u4f7f\u7528 CURL \u5de5\u5177\u53d1\u8d77\u539f\u59cb\u7684 HTTP \u8bf7\u6c42\uff0c\u6bd4\u5982\uff1a\ncurl -v --noproxy "*" www.baidu.com \u5176\u4e2d\uff1a\n -v \u8868\u793a\u5f00\u542f\u5570\u55e6\u6a21\u5f0f\uff0c\u5c3d\u53ef\u80fd\u591a\u5730\u8f93\u51fa\u4fe1\u606f\u4ee5\u4fbf\u8c03\u8bd5\u3002 --noproxy "*" \u8868\u793a\u5bf9\u6240\u6709\u7ad9\u70b9\u7981\u7528\u4ee3\u7406\uff0c\u5982\u679c\u4f60\u7684\u547d\u4ee4\u884c\u73af\u5883\u8bbe\u7f6e\u4e86\u8bf8\u5982 http_proxy\u3001socks5_proxy\u3001all_proxy \u7b49\u73af\u5883\u53d8\u91cf\uff0c\u8be5\u9009\u9879\u53ef\u4ee5\u4fdd\u8bc1 curl \u547d\u4ee4\u4e0d\u4f7f\u7528\u4efb\u4f55\u4ee3\u7406\uff0c\u56e0\u6b64\u53ef\u4ee5\u907f\u514d\u53d7\u5230\u4ee3\u7406\u670d\u52a1\u5668\u7684\u5f71\u54cd\u3002 \u5982\u679c CURL \u6b63\u5e38\u8fd0\u884c\uff0c\u8f93\u51fa\u4e86\u4e00\u5927\u6bb5 HTML \u4e4b\u7c7b\u7684\u6570\u636e\uff0c\u90a3\u4e48\u95ee\u9898\u6709\u53ef\u80fd\u51fa\u5728\uff1a\n \u6d4f\u89c8\u5668\u95ee\u9898\u3002\u6bd4\u5982\u6d4f\u89c8\u5668\u8bbe\u7f6e\u9519\u8bef\uff0c\u6216\u662f\u88c5\u4e86\u67d0\u4e9b\u5b58\u5728 BUG \u7684\u63d2\u4ef6\uff0c\u53ef\u4ee5\u6362\u4e2a\u6d4f\u89c8\u5668\u6216\u4f7f\u7528\u9690\u8eab\u6a21\u5f0f\u518d\u5c1d\u8bd5\u3002\u8be5\u7c7b\u95ee\u9898\u4e0d\u5728\u672c\u6587\u8ba8\u8bba\u8303\u56f4\u5185\u3002 \u7cfb\u7edf\u4ee3\u7406\u914d\u7f6e\u95ee\u9898\u3002\u4ee5 macOS \u4e3a\u4f8b\uff0c\u5728\u300c\u7cfb\u7edf\u504f\u597d\u8bbe\u7f6e\u300d-\u300c\u7f51\u7edc\u300d-\u300c\u9ad8\u7ea7\u300d-\u300c\u4ee3\u7406\u300d\u6807\u7b7e\u9875\u5185\uff0c\u53ef\u80fd\u914d\u7f6e\u4e86\u9519\u8bef\u7684\u4ee3\u7406\u670d\u52a1\u5668\u3002\u573a\u666f\u4e3e\u4f8b\uff1a\u5728 macOS \u5f3a\u884c\u91cd\u542f\u540e\uff0c\u50cf ShadowsocksX-NG\u3001Charles\u3001Fiddler \u7b49\u5de5\u5177\u672a\u6b63\u5e38\u9000\u51fa\uff0c\u5bfc\u81f4\u8fd0\u884c\u65f6\u4fee\u6539\u4e86\u7cfb\u7edf\u4ee3\u7406\u670d\u52a1\u5668\u4f46\u6ca1\u6709\u8fd8\u539f\uff0c\u56e0\u6b64\u65e0\u6cd5\u4e0a\u7f51\u3002 \u5982\u679c CURL \u62a5\u9519\uff0c\u6211\u4eec\u5927\u81f4\u53ef\u5206\u4e3a\u4e09\u7c7b\uff1a\n HTTP \u95ee\u9898\n \u4f8b\u5982\u5404\u7c7b\u72b6\u6001\u7801 302 \/ 403 \/ 502 \u7b49\u3002\u51fa\u73b0\u6b64\u7c7b\u95ee\u9898\u591a\u6570\u662f\u7531\u4e8e\u670d\u52a1\u7aef\u914d\u7f6e\u4e0d\u5f53\u5bfc\u81f4\uff0c\u9664\u975e\u4f60\u8bf7\u6c42\u6240\u6709\u7684\u7f51\u7ad9\u90fd\u8fd4\u56de\u540c\u6837\u7684\u9519\u8bef\u72b6\u6001\u7801\uff0c\u5426\u5219\u51e0\u4e4e\u4e0d\u53ef\u80fd\u662f\u672c\u5730\u7f51\u7edc\u539f\u56e0\u3002\u552f\u4e00\u6211\u80fd\u591f\u60f3\u5230\u7684\u53ef\u80fd\u6027\uff0c\u5c31\u662f\u4f60\u7684\u7f51\u7edc\u906d\u5230\u4e86\u52ab\u6301\u6216\u7be1\u6539\uff08\u6216\u8bb8\u662f\u7f51\u7edc\u5de5\u7a0b\u5e08\u6545\u610f\u4e3a\u4e4b\uff09\u3002 DNS \u95ee\u9898\n \u5728 Rebuilt URL to: ... \u5361\u4f4f\uff1a\u6b64\u65f6 CURL \u53ef\u80fd\u5728\u53d1\u9001 DNS \u8bf7\u6c42\uff0c\u5c1d\u8bd5\u5c06\u57df\u540d\u89e3\u6790\u4e3a IP \u5730\u5740\uff0c\u7136\u800c DNS \u670d\u52a1\u5e76\u6ca1\u6709\u7ed9\u4e88\u54cd\u5e94\uff0c\u9700\u8981\u66f4\u6df1\u5165\u5730\u6392\u67e5\u3002 curl: (6) Could not resolve host: ***\uff1aDNS \u670d\u52a1\u53d1\u56de\u4e86\u54cd\u5e94\uff0c\u4f46\u65e0\u6cd5\u89e3\u6790\u8fd9\u4e2a\u57df\u540d\uff08\u6ca1\u6709\u8be5\u8bb0\u5f55\uff09\u3002\u573a\u666f\u4e3e\u4f8b\uff1aDNS \u670d\u52a1\u5668\u7684\u4e0a\u6e38\u670d\u52a1\u5668\u914d\u7f6e\u9519\u8bef\uff0c\u5bfc\u81f4\u65e0\u6cd5\u4ece\u4e0a\u6e38\u670d\u52a1\u5668\u83b7\u53d6\u89e3\u6790\u7ed3\u679c\u3002 TCP \u95ee\u9898\n curl: (52) Empty reply from server\uff1a\u670d\u52a1\u7aef\u63a5\u53d7\u4e86\u8fde\u63a5\uff0c\u4f46\u5e76\u6ca1\u6709\u53d1\u4efb\u4f55\u56de\u590d\u5c31\u65ad\u5f00\u4e86\u3002\u573a\u666f\u4e3e\u4f8b\uff1a\u8def\u7531\u5668\u79d1\u5b66\u4e0a\u7f51\uff0c\u4f46\u5bc6\u7801\u914d\u7f6e\u9519\u4e86\uff1b\u7f51\u5173\uff08\u79d1\u5b66\u4e0a\u7f51\u7684\u8def\u7531\u5668\uff09\u63a5\u5230\u8fde\u63a5\u4e4b\u540e\u7acb\u5373\u63a5\u53d7\uff0c\u7531\u4e8e\u5bc6\u7801\u9519\u8bef\u5bfc\u81f4\u65e0\u6cd5\u4e0e\u4ee3\u7406\u670d\u52a1\u5668\u6b63\u5e38\u5efa\u7acb\u8fde\u63a5\uff0c\u56e0\u6b64\u53ea\u597d\u5565\u4e5f\u4e0d\u56de\u590d\u5c31\u65ad\u5f00\u3002\u5982\u679c\u4f60 CURL \u7684\u5730\u5740\u662f\u4f60\u81ea\u5df1\u7684\u670d\u52a1\uff0c\u90a3\u4e48\u6709\u53ef\u80fd\u662f\u534f\u8bae\u4e0d\u5bf9\uff0c\u5bf9\u9762\u76d1\u542c\u7684\u6216\u8bb8\u5e76\u4e0d\u662f HTTP \u534f\u8bae\u3002 curl: (7) Failed to connect to *** port 80: Connection refused\uff1a\u670d\u52a1\u7aef\u76f4\u63a5\u62d2\u7edd\u4e86\u8fde\u63a5\u3002\u573a\u666f\u4e3e\u4f8b\uff1a\u9632\u706b\u5899\u3002\u65e0\u8bba\u662f\u7535\u8111\u7684\u9632\u706b\u5899\u8fd8\u662f\u8def\u7531\u5668\u3001\u4ea4\u6362\u673a\u751a\u81f3\u670d\u52a1\u5668\u7684\u9632\u706b\u5899\uff0c\u5982\u679c\u8be5\u76ee\u6807\u7aef\u53e3\u88ab\u9632\u706b\u5899\u62e6\u622a\uff0c\u90a3\u4e48\u6709\u53ef\u80fd\u51fa\u73b0\u6b64\u95ee\u9898\u3002 \u5728 Trying xx.xx.xx.xxx... \u5361\u4f4f\uff1a\u670d\u52a1\u7aef\u4e00\u76f4\u6ca1\u6709\u63a5\u53d7\u8fde\u63a5\uff0c\u4e5f\u6ca1\u6709\u4efb\u4f55\u56de\u5e94\u3002\u573a\u666f\u4e3e\u4f8b\uff1a\u8def\u7531\u5668\u65ad\u7f51\u3002\u4f8b\u5982 PPPoE \u62e8\u53f7\u5931\u8d25\uff0c\u5149\u732b\u6545\u969c\u7b49\u3002 curl: (7) Couldn't connect to server\uff1a\u65e0\u6cd5\u8fde\u63a5\u5230\u670d\u52a1\u5668\uff0c\u9700\u8981\u66f4\u6df1\u5165\u5730\u6392\u67e5\u3002 DNS \u4e0a\u6587\u4e2d\u63d0\u5230\u7684 DNS \u6545\u969c\u5927\u6982\u53ef\u4ee5\u5206\u4e3a\u4e24\u79cd\u60c5\u51b5\uff1a\n DNS \u670d\u52a1\u53d1\u56de\u54cd\u5e94\uff0c\u4f46\u89e3\u6790\u5931\u8d25\u3002 DNS \u670d\u52a1\u6ca1\u6709\u54cd\u5e94\u3002 \u5728\u7ee7\u7eed\u9605\u8bfb\u4e4b\u524d\uff0c\u5efa\u8bae\u4f60\u5148\u53bb\u7cfb\u7edf\u8bbe\u7f6e\u91cc\u770b\u770b DNS \u670d\u52a1\u7684 IP \u5730\u5740\u662f\u5426\u914d\u7f6e\u6b63\u786e\uff0c\u5982\u679c\u4f60\u662f\u624b\u52a8\u8bbe\u7f6e\u800c\u975e\u4f7f\u7528 DHCP \u4e0b\u53d1\u7684 DNS \u670d\u52a1\uff0c\u90a3\u4e48\u8bf7\u786e\u4fdd\u4f60\u8bbe\u7f6e\u7684 DNS \u670d\u52a1\u5668\u8fd0\u884c\u6b63\u5e38\u3002\n\u7531\u4e8e DNS \u534f\u8bae\u57fa\u4e8e UDP\uff0c\u6ca1\u6709 TCP \u5efa\u7acb\u8fde\u63a5\u7684\u6982\u5ff5\uff0c\u56e0\u6b64\u4e5f\u4e0d\u5b58\u5728 Connection refused \u7b49\u9519\u8bef\uff0c\u6240\u4ee5\u6211\u4eec\u65e0\u6cd5\u5f97\u77e5 DNS \u670d\u52a1\u6b64\u65f6\u7684\u72b6\u6001\u5982\u4f55\u3002\u4e0d\u8fc7\uff0c\u6709\u4e2a\u540d\u53eb dig \u7684\u5de5\u5177\u53ef\u4ee5\u5e2e\u52a9\u6211\u4eec\u4e3b\u52a8\u53d1\u8d77 DNS \u8bf7\u6c42\u3002\u4f8b\u5982\uff1a\ndig www.baidu.com # \u4f7f\u7528\u7cfb\u7edf\u9ed8\u8ba4 DNS \u670d\u52a1\u5668\u89e3\u6790 www.baidu.com dig www.baidu.com @114.144.114.114 # \u4f7f\u7528 114.114.114.114 \u89e3\u6790 \u5982\u679c\u7cfb\u7edf\u9ed8\u8ba4\u7684 DNS \u670d\u52a1\u5668\u6709\u95ee\u9898\uff0c\u4e5f\u53ef\u4ee5\u8bd5\u8bd5 114.114.114.114\u3001180.76.76.76 \u7b49\u77e5\u540d\u516c\u5171 DNS\u3002\u540c\u6837\uff0c\u8fd9\u4e9b\u670d\u52a1\u672c\u8eab\u6545\u969c\u7684\u6982\u7387\u975e\u5e38\u4f4e\u3002\n\u89e3\u6790\u6210\u529f\u7684\u8f93\u51fa\u7c7b\u4f3c\uff1a\nwww.baidu.com. 491 IN CNAME www.a.shifen.com. www.a.shifen.com. 134 IN A 182.61.200.7 www.a.shifen.com. 134 IN A 182.61.200.6 \u53d1\u56de\u54cd\u5e94\u4f46\u89e3\u6790\u5931\u8d25\u7c7b\u4f3c\uff1a\n;www.baidu.com. IN A \u82e5\u6ca1\u6709\u6536\u5230\u54cd\u5e94\uff0cdig \u5c06\u4f1a\u7ee7\u7eed\u7b49\u5f85\u3002\u4e00\u822c\u6765\u8bf4\uff0cDNS \u670d\u52a1\u5927\u591a\u80fd\u591f\u5728\u51e0\u767e\u6beb\u79d2\u5185\u53d1\u56de\u54cd\u5e94\uff0c\u5982\u679c\u51e0\u79d2\u949f\u540e\u4f9d\u7136\u5361\u7740\uff0c\u90a3\u53ef\u80fd\u662f\uff1a\n DNS \u670d\u52a1\u6302\u4e86\u3002 UDP \u6570\u636e\u5305\u5728\u67d0\u4e2a\u73af\u8282\u88ab\u9632\u706b\u5899\u62e6\u622a\u6216\u4e22\u5f03\u3002 DNS \u670d\u52a1\u7684 IP \u5728\u7f51\u7edc\u4e2d\u4e0d\u5b58\u5728\uff0c\u6570\u636e\u5305\u65e0\u6cd5\u5230\u8fbe\u3002 \u770b\u5230\u8fd9\u91cc\uff0c\u5982\u679c\u80fd\u591f\u786e\u8ba4\u4f60\u7684 DNS \u914d\u7f6e\u65e0\u8bef\uff0c\u90a3\u4e48\u4f60\u53ef\u4ee5\u5c06\u4f60\u7684 DNS \u670d\u52a1\u5668 IP \u5730\u5740\u544a\u77e5\u7f51\u7edc\u5de5\u7a0b\u5e08\u4e86\u3002\u540c\u65f6\uff0c\u6700\u597d\u76f4\u63a5\u5c06 dig \u547d\u4ee4\u7684\u8f93\u51fa\u539f\u5c01\u4e0d\u52a8\u7684\u53d1\u7ed9\u4ed6\u4eec\u3002\nTCP \u534f\u8bae \u5982\u679c\u4f60\u786e\u5b9a\u95ee\u9898\u51fa\u5728 TCP \u534f\u8bae\u5c42\uff0c\u90a3\u4e48\u6709\u4e2a\u5de5\u5177\u63a8\u8350\uff1atelnet\u3002\u4f7f\u7528 telnet \u76f8\u6bd4\u4e8e CURL \u80fd\u591f\u66f4\u65b9\u4fbf\u5730\u6d4b\u8bd5\u7aef\u53e3\u662f\u5426\u7545\u901a\u3002\u4f8b\u5982\uff1a\ntelnet 1.1.1.1 80 \u4ee5\u4e0a\u547d\u4ee4 telnet \u5c06\u4f1a\u5c1d\u8bd5\u4e0e 1.1.1.1 \u7684 80 \u7aef\u53e3\u5efa\u7acb\u8fde\u63a5\uff0c\u6b64\u5904\u4e0d\u4f7f\u7528\u57df\u540d\u662f\u4e3a\u4e86\u907f\u514d\u53d7\u5230 DNS \u670d\u52a1\u7684\u5f71\u54cd\u3002\u4f60\u53ef\u4ee5\u591a\u5c1d\u8bd5\u51e0\u4e2a\u5730\u5740\u548c\u7aef\u53e3\uff0c\u4f8b\u5982\u5e38\u7528\u7684 80\u3001443\u300122 \u7b49\u3002\n\u5047\u8bbe\u6210\u529f\u5efa\u7acb TCP \u8fde\u63a5\uff0c\u8f93\u51fa\u5c06\u4f1a\u7c7b\u4f3c\uff1a\nTrying 1.1.1.1... Connected to one.one.one.one. Escape character is '^]'. \u7136\u540e telnet \u4e0d\u4f1a\u9000\u51fa\uff0c\u800c\u662f\u7b49\u5f85\u4f60\u7ee7\u7eed\u8f93\u5165\uff1b\u4f60\u8f93\u5165\u7684\u5185\u5bb9\u5c06\u4f1a\u88ab\u53d1\u9001\u5230\u670d\u52a1\u7aef\uff0c\u800c\u670d\u52a1\u7aef\u7684\u54cd\u5e94\u540c\u6837\u4f1a\u663e\u793a\u5728\u547d\u4ee4\u884c\u4e2d\u3002\n\u8fd9\u91cc\u6709\u4e2a\u5c0f\u628a\u620f\uff0c\u4f60\u53ef\u4ee5\u76f4\u63a5\u624b\u52a8\u300c\u7f16\u5199\u300d\u4e00\u4e2a HTTP \u8bf7\u6c42\uff0c\u4f8b\u5982\uff1a\nGET \/ HTTP\/1.1 Host: www.baidu.com [\u6362\u884c] [\u6362\u884c] \u8bf7\u7559\u7a7a\uff0c\u5b9e\u9645\u5c31\u662f\u591a\u6309\u4e00\u4e0b\u56de\u8f66\uff0c\u8868\u793a HTTP \u8bf7\u6c42\u7ed3\u675f\uff0c\u5f00\u59cb\u7b49\u5f85\u670d\u52a1\u5668\u54cd\u5e94\u3002\u7a0d\u7b49\u7247\u523b\uff0c\u4f60\u4f1a\u770b\u5230 telnet \u8f93\u51fa\u4e86 HTTP \u54cd\u5e94\u5934\u548c\u4e00\u5927\u5806 HTML\u3002\n \u5982\u679c\u4f60\u5bf9 TCP \u534f\u8bae\u8db3\u591f\u4e86\u89e3\uff0c\u53ef\u4ee5\u5c1d\u8bd5 tcpdump\u3001Termshark \u4ee5\u53ca Wireshark\uff0c\u66f4\u52a0\u6df1\u5165\u5730\u5206\u6790 TCP \u63e1\u624b\u7684\u8fc7\u7a0b\uff0c\u5728\u6b64\u4e0d\u518d\u5c55\u5f00\u3002\n \u82e5\u662f\u65e0\u6cd5\u5efa\u7acb\u8fde\u63a5\u6216\u8005\u5efa\u7acb\u8fde\u63a5\u540e\u7acb\u523b\u65ad\u5f00\uff0ctelnet \u5c06\u4f1a\u8f93\u51fa\u5177\u4f53\u7684\u4fe1\u606f\u3002\u5982\u679c\u51fa\u73b0\u8bf8\u5982 Connection refused\u3001Connection closed by foreign host \u7b49\u63d0\u793a\uff0c\u8bf4\u660e\u81f3\u5c11\u6211\u4eec\u6536\u5230\u4e86\u670d\u52a1\u5668\u53d1\u56de\u7684 TCP \u54cd\u5e94\uff08\u6ce8\u610f\u4e0d\u662f HTTP\uff09\uff0c\u6b64\u65f6\u4f60\u53ef\u80fd\u9700\u8981\u53ec\u5524\u7f51\u7edc\u5de5\u7a0b\u5e08\uff0c\u544a\u8bc9\u4ed6\u4eec\u4f60\u672c\u673a\u53d1\u51fa\u7684 TCP \u8fde\u63a5\u88ab\u8fdc\u7aef\u62d2\u7edd\u6216\u662f\u4e3b\u52a8\u5173\u95ed\uff0c\u8ba9\u4ed6\u4eec\u8c03\u67e5\u4e00\u4e0b\u9632\u706b\u5899\u662f\u5426\u914d\u7f6e\u6709\u8bef\u4e86\u3002\n\u4e0d\u8fc7\u8fd9\u91cc\u6709\u4e2a\u7279\u6b8a\u60c5\u51b5\uff0c\u5982\u679c\u4f60\u7684\u62a5\u9519\u4e2d\u542b\u6709\u7c7b\u4f3c Network is unreachable \u7684\u5173\u952e\u5b57\uff0c\u90a3\u4e48\u6709\u4e24\u5927\u53ef\u80fd\u6027\uff1a\n \u4f60\u7684 Wi-Fi \u6216\u8005\u7f51\u7ebf\u65ad\u4e86\u3002 \u4f60\u672c\u5730\u7684 IP \u6216\u300c\u7f51\u5173\uff08\u90e8\u5206\u7cfb\u7edf\u79f0\u4f5c\u8def\u7531\u5668\uff09\u300d\u914d\u7f6e\u6709\u8bef\u3002\u4f60\u9700\u8981\u786e\u8ba4\u4f60\u4f7f\u7528\u7684\u662f DHCP \u4e0b\u53d1\u7684\u7f51\u5173\uff0c\u800c\u4e0d\u662f\u81ea\u5df1\u624b\u52a8\u914d\u7f6e\u7684\u3002\u53e6\u5916\uff0c\u5982\u679c\u4f60\u7684 IP \u5730\u5740\u662f 169.254 \u5f00\u5934\uff0c\u90a3\u4e48\u591a\u534a\u662f\u7f51\u7edc\u5185\u7684 DHCP \u670d\u52a1\u51fa\u73b0\u95ee\u9898\uff0c\u6216\u662f\u538b\u6839\u4e0d\u5b58\u5728 DHCP \u670d\u52a1\u3002\u8bf7\u76f4\u63a5\u547c\u53eb\u7f51\u7ba1\uff0c\u544a\u8bc9\u4ed6\u4eec\u4f60\u7684\u7535\u8111\u65e0\u6cd5\u83b7\u53d6 IP \u5730\u5740\u5427\u3002 \u5982\u679c\u4e00\u76f4\u5361\u5728 Trying ... \u800c\u6ca1\u6709 Connected to ...\uff0c\u90a3\u4e48\u8bf7\u7ee7\u7eed\u5f80\u4e0b\u770b\u3002\nICMP \u534f\u8bae \u6211\u4eec\u5e73\u65f6\u7ecf\u5e38\u4f7f\u7528\u7684 ping \u547d\u4ee4\u5c31\u662f\u57fa\u4e8e ICMP \u534f\u8bae\u7684\u3002\u76f8\u6bd4\u4e8e TCP\uff0c\u5b83\u4e0d\u5b58\u5728\u7aef\u53e3\u7684\u6982\u5ff5\uff0c\u53ef\u4ee5\u7528\u6765\u8c03\u67e5\u66f4\u52a0\u5e95\u5c42\u7684\u7f51\u7edc\u95ee\u9898\u3002\u4f8b\u5982\uff1a\nping 1.1.1.1 \u5982\u679c\u80fd\u591f ping \u901a\uff0c\u90a3\u4e48\u8bf7\u547c\u53eb\u7f51\u7edc\u5de5\u7a0b\u5e08\uff0c\u544a\u8bc9\u4ed6\u4eec\u300c\u80fd ping \u901a\u67d0\u67d0\u5730\u5740\uff0c\u4f46\u65e0\u6cd5 telnet \u67d0\u67d0\u5730\u5740\u67d0\u67d0\u7aef\u53e3\u300d\uff0c\u5e76\u9644\u4e0a telnet \u7684\u539f\u59cb\u8f93\u51fa\u3002\u4ed6\u4eec\u53ef\u80fd\u4f1a\u68c0\u67e5\u7f51\u5173\u4e0a\u7684 iptables \u662f\u5426\u914d\u7f6e\u6b63\u786e\uff0c\u8bf4\u4e0d\u5b9a\u4f60\u7684 TCP \u6570\u636e\u5305\u88ab\u76f4\u63a5 DROP \u6389\uff0c\u6216\u8005\u91cd\u5b9a\u5411\u5230\u67d0\u4e2a\u300c\u9ed1\u6d1e\u300d\u91cc\u4e86\u3002\n\u5982\u679c ping \u4e0d\u901a\uff0c\u6709\u4e24\u5927\u53ef\u80fd\u7684\u539f\u56e0\uff1a\n IP \u6216\u7f51\u5173\u914d\u7f6e\u6709\u8bef\u3002 \u5728\u4f60\u672c\u5730\u5230\u76ee\u6807\u5730\u5740\u7684\u9014\u4e2d\uff0c\u67d0\u4e2a\u7f51\u5173\u51fa\u73b0\u4e86\u6545\u969c\uff0c\u6216\u662f\u8def\u7531\u89c4\u5219\u914d\u7f6e\u9519\u8bef\uff0c\u6216\u662f\u88ab\u9632\u706b\u5899\u62e6\u622a\u3002 \u7b2c\u4e00\u79cd\u60c5\u51b5\uff0c\u4e00\u822c\u5728 telnet \u7684\u65f6\u5019\u5c31\u4f1a\u62a5\u9519\u3002\u6bd4\u5982 ping \u63d0\u793a No route to host\uff0c\u5bf9\u4e8e\u8fd0\u884c\u5728 TCP \u5c42\u7684 telnet \u6765\u8bf4\uff0c\u9519\u8bef\u4fe1\u606f\u5c31\u662f Network is unreachable\u3002\n\u7b2c\u4e8c\u79cd\u60c5\u51b5\uff0c\u63a8\u8350\u4f7f\u7528 mtr \u5de5\u5177\uff0c\u4f8b\u5982\uff1a\nsudo mtr -b 1.1.1.1 mtr \u5c06\u4f1a\u8ffd\u8e2a ICMP \u6570\u636e\u5305\u7684\u8def\u5f84\uff0c\u5e76\u6301\u7eed\u5411\u8fd9\u4e9b\u7f51\u5173\u53d1\u51fa ping \u8bf7\u6c42\u3002\u6837\u4f8b\u8f93\u51fa\u5982\u4e0b\uff1a\nMy traceroute [vUNKNOWN] Suns-Laptop.local (172.20.10.2) 2019-05-25T09:26:06+0800 Keys: Help Display mode Restart statistics Order of fields quit Packets Pings Host Loss% Snt Last Avg Best Wrst StDev 1. bogon (172.20.10.1) 0.0% 5 36.0 15.6 3.3 36.0 14.6 2. ??? 3. bogon (10.255.255.97) 0.0% 5 50.5 49.7 44.3 56.8 4.6 4. ??? 5. 115.170.139.241 (115.170.139.241) 0.0% 5 87.2 67.5 48.0 101.7 25.2 6. 36.112.252.5 (36.112.252.5) 0.0% 5 46.5 63.2 46.5 107.9 25.2 7. 202.97.94.230 (202.97.94.230) 0.0% 5 80.8 128.3 80.8 171.5 43.9 8. 202.97.85.58 (202.97.85.58) 0.0% 5 72.0 60.9 53.6 72.0 8.3 9. 202.97.90.238 (202.97.90.238) 0.0% 5 358.0 326.4 312.2 358.0 21.6 10. 202.97.50.22 (202.97.50.22) 0.0% 5 336.9 336.1 323.5 342.3 8.8 11. 218.30.54.214 (218.30.54.214) 0.0% 4 228.7 227.6 217.7 243.9 11.9 12. one.one.one.one (1.1.1.1) 0.0% 4 311.5 288.4 247.4 322.2 34.7 \u9996\u5148\uff0c\u8bf7\u786e\u8ba4\u6700\u540e\u4e00\u884c\u662f\u4f60\u7684\u76ee\u6807\u5730\u5740\uff0c\u5982\u679c\u4e0d\u662f\uff0c\u90a3\u4e48\u6700\u540e\u4e00\u884c\u5f88\u6709\u53ef\u80fd\u5c31\u662f\u51fa\u95ee\u9898\u7684\u7f51\u5173\u3002\n\u53e6\u5916\u6ce8\u610f Loss% \u4e00\u5217\uff0c\u5982\u679c\u67d0\u4e2a\u7f51\u5173\u4e22\u5305\u7387\u5f88\u9ad8\uff0c\u90a3\u4e48\u5b83\u53ef\u80fd\u4e5f\u5b58\u5728\u95ee\u9898\u3002\nmtr \u7684\u4fe1\u606f\u901a\u5e38\u6765\u8bf4\u4e0d\u9700\u8981\u5f00\u53d1\u8005\u5206\u6790\uff0c\u53ea\u9700\u539f\u5c01\u4e0d\u52a8\u5730\u628a\u8f93\u51fa\u53d1\u7ed9\u7f51\u7edc\u5de5\u7a0b\u5e08\u5373\u53ef\uff0c\u4ed6\u4eec\u4f1a\u8bfb\u61c2\u7684\u3002\nARP \u534f\u8bae \u4e0a\u6587\u4e2d\u63d0\u5230\u7684\u65b9\u6cd5\u5bf9\u4e8e\u666e\u901a\u7f51\u7edc\u7528\u6237\u5df2\u7ecf\u975e\u5e38\u5e95\u5c42\u4e86\uff0c\u5982\u679c\u4f60\u6709\u5174\u8da3\uff0c\u4e5f\u53ef\u4ee5\u770b\u770b\u8fd9\u4e00\u5c0f\u8282\u3002\n\u5982\u679c mtr \u7684\u8f93\u51fa\u7c7b\u4f3c\u8fd9\u6837\uff1a\n Packets Pings Host Loss% Snt Last Avg Best Wrst StDev 1. bogon (172.20.10.1) 100.0% 5 ... \u8fd9\u610f\u5473\u7740\u4f60\u7535\u8111\u7684\u7f51\u5173\uff08\u901a\u5e38\u662f\u8def\u7531\u5668\uff09\u90fd ping \u4e0d\u901a\u3002\u5728 IP \u548c\u7f51\u5173\u786e\u8ba4\u914d\u7f6e\u65e0\u8bef\u7684\u60c5\u51b5\u4e0b\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 arp-scan \u5de5\u5177\u5411\u672c\u5730\u7f51\u7edc\u4e3b\u52a8\u53d1\u51fa ARP \u8bf7\u6c42\uff0c\u4f8b\u5982\uff1a\narp-scan 172.20.10.1\/24 \u5176\u4e2d\uff0c172.20.10.1\/24 \u662f\u7f51\u5173 IP + \u5b50\u7f51\u63a9\u7801\u8f6c\u6362\u6210 CIDR \u7684\u5f62\u5f0f\u3002\u901a\u5e38\u6765\u8bf4\uff0c\u6211\u4eec\u53ea\u9700\u4f7f\u7528 \u7f51\u5173IP\/24 \u5373\u53ef\uff0c\/24 \u8868\u793a\u5b50\u7f51\u63a9\u7801\u4e3a 255.255.255.0\u3002\n\u5982\u679c\u7f51\u5173\u6b63\u5e38\u54cd\u5e94\u4e86 ARP \u8bf7\u6c42\uff0c\u8f93\u51fa\u5e94\u5f53\u7c7b\u4f3c\u4e8e\uff1a\nInterface: en0, datalink type: EN10MB (Ethernet) WARNING: host part of 172.20.10.1\/24 is non-zero Starting arp-scan 1.9.5 with 256 hosts (https:\/\/github.com\/royhills\/arp-scan) 172.20.10.1 fe:2a:9c:ee:16:64 (Unknown) 619 packets received by filter, 0 packets dropped by kernel Ending arp-scan 1.9.5: 256 hosts scanned in 1.866 seconds (137.19 hosts\/sec). 1 responded ping \u4e0d\u901a\u7f51\u5173\uff08\u4f8b\u5982 No route to host\uff09\uff0c\u4f46\u662f\u7f51\u7edc\u8bbe\u5907\u6b63\u5e38\u54cd\u5e94\u4e86 ARP \u8bf7\u6c42\uff1b\u9664\u9632\u706b\u5899\u5916\uff0c\u6211\u80fd\u60f3\u5230\u7684\u552f\u4e00\u53ef\u80fd\u6027\uff0c\u5c31\u662f\u4f60\u7684\u7535\u8111\u8fd8\u6ca1\u6709 IP \u5730\u5740\u3002\n\u5c0f\u7ed3 \u53ef\u4ee5\u770b\u51fa\uff0c\u672c\u6587\u6240\u8ff0\u6392\u67e5\u987a\u5e8f\u4ece\u8fd0\u884c\u5728\u4e03\u5c42\u7684 HTTP \u534f\u8bae\uff0c\u5230\u8fd0\u884c\u5728\u4e8c\u5c42\u7684 ARP \u534f\u8bae\uff0c\u9010\u6e10\u6df1\u5165\u3002\n\u6700\u540e\uff0c\u6211\u4e0d\u662f\u7f51\u7edc\u5de5\u7a0b\u4e13\u4e1a\u51fa\u8eab\uff0c\u672c\u6587\u6216\u8bb8\u8fd8\u4e0d\u591f\u300c\u4e13\u4e1a\u300d\u3002\u5982\u679c\u4f60\u53d1\u73b0\u4efb\u4f55\u9519\u8bef\u3001\u7591\u95ee\uff0c\u6216\u662f\u66f4\u597d\u7684\u65b9\u6848\u3001\u66f4\u591a\u7684\u573a\u666f\uff0c\u6b22\u8fce\u7559\u8a00\u8865\u5145\u3002\n\u94fe\u8def\u5c42 \u6700\u540e\u7684\u6700\u540e\u3002\n\u5982\u679c ARP \u534f\u8bae\u90fd\u4e0d\u80fd\u6b63\u5e38\u5de5\u4f5c\u3002\n\u90a3\u4e48\u4f60\u5bfb\u6c42\u5e2e\u52a9\u7684\u5bf9\u8c61\uff0c\u4e5f\u8bb8\u4e0d\u662f\u7f51\u7edc\u5de5\u7a0b\u5e08\u4e86\u3002\u4f60\u53ef\u80fd\u9700\u8981\u53eb\u786c\u4ef6\u5927\u4f6c\u6765\u68c0\u67e5\u4e00\u4e0b\uff1a\n \u4f60\u7535\u8111\u7684\u65e0\u7ebf\u7f51\u5361\u662f\u5426\u6b63\u5e38\u5de5\u4f5c \u5468\u56f4\u65e0\u7ebf\u7535\u73af\u5883\u662f\u5426\u5b58\u5728\u5e72\u6270 \u67d0\u6b21\u7535\u95ea\u96f7\u9e23\u662f\u5426\u51fb\u4e2d\u4e86\u4e8c\u5c42\u4ea4\u6362\u673a \u4ee5\u53ca\u7f51\u7ebf\u662f\u5426\u88ab\u8001\u9f20\u54ac\u4e86\u3002 ","permalink":"https:\/\/wi1dcard.dev\/posts\/inspect-network-failure-like-a-pro\/","summary":" \u4ece\u4e8b\u8fd0\u7ef4\u5de5\u7a0b\u5e08\uff08\u517c\u516c\u53f8\u7f51\u7ba1\ud83d\ude02\uff09\u4ee5\u6765\uff0c\u9047\u5230\u4e0d\u5c11\u5404\u5f0f\u5404\u6837\u7684\u7f51\u7edc\u6545\u969c\uff0c\u6709\u7684\u6765\u81ea\u4e8e\u8def\u7531\u5668\u95ee\u9898\uff0c\u6709\u7684\u5219\u662f\u5ba2\u6237\u7aef\u914d\u7f6e\u9519\u8bef\u3002\u800c\u5f00\u53d1\u4eba\u5458\u7684\u53cd\u9988\u5927\u591a\u7c7b\u4f3c\u4e8e\uff1a<\/p>\n \u6700\u8fd1\u6298\u817e\u79d1\u5b66\u4e0a\u7f51\u7f51\u5173\uff0c\u535a\u5ba2\u505c\u66f4\u4e00\u6bb5\u65f6\u95f4\uff1b\u968f\u624b\u8bb0\u5f55\u4e00\u6bb5\u5c0f\u811a\u672c\uff0c\u4ee5\u5907\u65e5\u540e\u67e5\u7528\u3002\u8fd9\u662f\u76ee\u524d\u6211\u627e\u5230\u7684\u6700\u7b80\u3001\u6700\u901a\u7528\u65b9\u6848\uff0c\u53ea\u9700 \u5728\u65e9\u671f \u8f7b\u677e\u90e8\u7f72 Laravel \u5e94\u7528<\/a> \u8bfe\u7a0b\u5f00\u59cb\u7f16\u5199\u4e4b\u524d\uff0c\u5c31\u8003\u8651\u5230\u4e00\u4e2a\u975e\u5e38\u91cd\u8981\u7684\u95ee\u9898\uff1a\u5982\u4f55\u4fdd\u8bc1 Laravel-China \u4e0a\u53d1\u5e03\u7684\u6587\u7ae0\u4e0e GitHub \u4ed3\u5e93\u5185\u7684 Markdown \u6e90\u6587\u4ef6\u4fdd\u6301\u540c\u6b65<\/strong>\uff1f<\/p>","title":"\u6211\u5982\u4f55\u5b9e\u73b0 Laravel-China \u5168\u81ea\u52a8\u7cfb\u5217\u6587\u7ae0\u53d1\u5e03"},{"content":"\u4ee5 Laravel 5.8 \u6587\u6863 \u4e3a\u51c6\uff0c\u6d45\u6790 Nginx \u914d\u7f6e\u3002\u53ef\u4f5c\u4e3a \u8f7b\u677e\u90e8\u7f72 Laravel \u5e94\u7528 \u7684\u62d3\u5c55\u9605\u8bfb\u3002\n\u65b9\u4fbf\u8d77\u89c1\uff0c\u6211\u5728\u6ce8\u91ca\u4e2d\u4f7f\u7528 [] \u5305\u88f9\u5f15\u7528\u914d\u7f6e\u4e2d\u7684\u503c\u3002\nserver { # \u76d1\u542c HTTP \u534f\u8bae\u9ed8\u8ba4\u7684 [80] \u7aef\u53e3\u3002 listen 80; # \u7ed1\u5b9a\u4e3b\u673a\u540d [example.com]\u3002 server_name example.com; # \u670d\u52a1\u5668\u7ad9\u70b9\u6839\u76ee\u5f55 [\/example.com\/public]\u3002 root \/example.com\/public; # \u6dfb\u52a0\u51e0\u6761\u6709\u5173\u5b89\u5168\u7684\u54cd\u5e94\u5934\uff1b\u4e0e Google+ \u7684\u914d\u7f6e\u7c7b\u4f3c\uff0c\u8be6\u60c5\u53c2\u89c1\u6587\u672b\u3002 add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block"; add_header X-Content-Type-Options "nosniff"; # \u7ad9\u70b9\u9ed8\u8ba4\u9875\u9762\uff1b\u53ef\u6307\u5b9a\u591a\u4e2a\uff0c\u5c06\u987a\u5e8f\u67e5\u627e\u3002 # \u4f8b\u5982\uff0c\u8bbf\u95ee http:\/\/example.com\/ Nginx \u5c06\u9996\u5148\u5c1d\u8bd5\u300c\u7ad9\u70b9\u6839\u76ee\u5f55\/index.html\u300d\u662f\u5426\u5b58\u5728\uff0c\u4e0d\u5b58\u5728\u5219\u7ee7\u7eed\u5c1d\u8bd5\u300c\u7ad9\u70b9\u6839\u76ee\u5f55\/index.htm\u300d\uff0c\u4ee5\u6b64\u7c7b\u63a8... index index.html index.htm index.php; # \u6307\u5b9a\u5b57\u7b26\u96c6\u4e3a UTF-8 charset utf-8; # Laravel \u9ed8\u8ba4\u91cd\u5199\u89c4\u5219\uff1b\u5220\u9664\u5c06\u5bfc\u81f4 Laravel \u8def\u7531\u5931\u6548\u4e14 Nginx \u54cd\u5e94 404\u3002 location \/ { try_files $uri $uri\/ \/index.php?$query_string; } # \u5173\u95ed [\/favicon.ico] \u548c [\/robots.txt] \u7684\u8bbf\u95ee\u65e5\u5fd7\u3002 # \u5e76\u4e14\u5373\u4f7f\u5b83\u4eec\u4e0d\u5b58\u5728\uff0c\u4e5f\u4e0d\u5199\u5165\u9519\u8bef\u65e5\u5fd7\u3002 location = \/favicon.ico { access_log off; log_not_found off; } location = \/robots.txt { access_log off; log_not_found off; } # \u5c06 [404] \u9519\u8bef\u4ea4\u7ed9 [\/index.php] \u5904\u7406\uff0c\u8868\u793a\u7531 Laravel \u6e32\u67d3\u7f8e\u89c2\u7684\u9519\u8bef\u9875\u9762\u3002 error_page 404 \/index.php; # URI \u7b26\u5408\u6b63\u5219\u8868\u8fbe\u5f0f [\\.php$] \u7684\u8bf7\u6c42\u5c06\u8fdb\u5165\u6b64\u6bb5\u914d\u7f6e location ~ \\.php$ { # \u914d\u7f6e FastCGI \u670d\u52a1\u5730\u5740\uff0c\u53ef\u4ee5\u4e3a IP:\u7aef\u53e3\uff0c\u4e5f\u53ef\u4ee5\u4e3a Unix socket\u3002 fastcgi_pass unix:\/var\/run\/php\/php7.2-fpm.sock; # \u914d\u7f6e FastCGI \u7684\u4e3b\u9875\u4e3a index.php\u3002 fastcgi_index index.php; # \u914d\u7f6e FastCGI \u53c2\u6570 SCRIPT_FILENAME \u4e3a $realpath_root$fastcgi_script_name\u3002 fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name; # \u5f15\u7528\u66f4\u591a\u9ed8\u8ba4\u7684 FastCGI \u53c2\u6570\u3002 include fastcgi_params; } # \u901a\u4fd7\u5730\u8bf4\uff0c\u4ee5\u4e0a\u914d\u7f6e\u5c06\u6240\u6709 URI \u4ee5 .php \u7ed3\u5c3e\u7684\u8bf7\u6c42\uff0c\u5168\u90e8\u4ea4\u7ed9 PHP-FPM \u5904\u7406\u3002 # \u9664\u7b26\u5408\u6b63\u5219\u8868\u8fbe\u5f0f [\/\\.(?!well-known).*] \u4e4b\u5916\u7684 URI\uff0c\u5168\u90e8\u62d2\u7edd\u8bbf\u95ee # \u4e5f\u5c31\u662f\u8bf4\uff0c\u62d2\u7edd\u516c\u5f00\u4ee5 [.] \u5f00\u5934\u7684\u76ee\u5f55\uff0c[.well-known] \u9664\u5916 location ~ \/\\.(?!well-known).* { deny all; } } \u5173\u4e8e X-Frame-Options\u3001X-XSS-Protection \u548c X-Content-Type-Options \u53ef\u53c2\u8003 \u8fd9\u7bc7\u6587\u7ae0\uff0c\u81ea\u8ba4\u4e3a\u4f5c\u8005\u8bb2\u5f97\u8fd8\u4e0d\u9519\uff0c\u901a\u4fd7\u6613\u61c2\u5e76\u4e14\u662f\u4e2d\u6587\u3002\n\u5173\u4e8e .well-known \u76ee\u5f55\u7684\u8be6\u7ec6\u89e3\u91ca\uff0c\u53ef\u53c2\u8003 \u8fd9\u7bc7\u95ee\u7b54\uff08\u82f1\u6587\uff09\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/laravel-recommended-nginx-conf-analysis\/","summary":" \u4ee5 Laravel 5.8 \u6587\u6863<\/a> \u4e3a\u51c6\uff0c\u6d45\u6790 Nginx \u914d\u7f6e\u3002\u53ef\u4f5c\u4e3a \u8f7b\u677e\u90e8\u7f72 Laravel \u5e94\u7528<\/a> \u7684\u62d3\u5c55\u9605\u8bfb\u3002<\/p>","title":"\u6d45\u6790 Laravel \u6587\u6863\u63a8\u8350\u7684 Nginx \u914d\u7f6e"},{"content":"\u535a\u5ba2\u53c8\u8df3\u7968\u4e00\u9635\u5b50\uff0c\u4e0d\u8fc7\u6700\u8fd1\u5e76\u6ca1\u6709\u95f2\u7740\uff0c\u800c\u662f\u628a\u4e1a\u4f59\u65f6\u95f4\u5168\u90e8\u6295\u5165\u5230\u4e86 Laravel \u90e8\u7f72\u8bfe\u7a0b\u3002\u5728\u5199\u4f5c\u65f6\u7ecf\u5e38\u9700\u8981\u5bf9\u7a97\u53e3\u622a\u56fe\uff0c\u4e3a\u4e86\u63d0\u9ad8\u9605\u8bfb\u4f53\u9a8c\uff0c\u9700\u786e\u4fdd\u622a\u56fe\u5927\u5c0f\u7edf\u4e00\uff1b\u56e0\u6b64\u5982\u4f55\u8ba9\u7a97\u53e3 \u5feb\u901f \u5730\u7f29\u653e\u4e3a\u6307\u5b9a\u50cf\u7d20\u7684 \u7cbe\u786e \u5927\u5c0f\uff0c\u6210\u4e86\u4e00\u4e2a\u4e0d\u53ef\u6216\u7f3a\u7684\u9700\u6c42\u3002\n\u7ecf\u8fc7\u4e00\u756a\u8c37\u6b4c\uff0c\u53d1\u73b0\u4ee5\u4e0b\u89e3\u51b3\u65b9\u6848\uff1a\n(* This Apple script will resize any program window to an exact size and the window is then moved to the center of your screen. Specify the program name, height and width below and run the script. Written by Amit Agarwal on December 10, 2013 *) set theApp to "Google Chrome" set appHeight to 600 set appWidth to 1000 tell application "Finder" set screenResolution to bounds of window of desktop end tell set screenWidth to item 3 of screenResolution set screenHeight to item 4 of screenResolution tell application theApp activate reopen set yAxis to (screenHeight - appHeight) \/ 2 as integer set xAxis to (screenWidth - appWidth) \/ 2 as integer set the bounds of the first window to {xAxis, yAxis, appWidth + xAxis, appHeight + yAxis} end tell \u6e90\u4ee3\u7801\u4fee\u6539\u81ea\uff1ahttps:\/\/www.labnol.org\/software\/resize-mac-windows-to-specific-size\/28345\/\u3002\n\u5176\u4e2d\uff1a\n "Google Chrome" \u8bf7\u66ff\u6362\u4e3a\u5b9e\u9645\u7684\u5e94\u7528\u540d\u3002 600 \u4e0e 1000 \u5206\u522b\u4ee3\u8868\u9ad8\u5ea6\u548c\u5bbd\u5ea6\u3002 \u5c06\u4ee5\u4e0a\u5185\u5bb9\u4fdd\u5b58\u4e3a .scpt \u6587\u4ef6\u540e\uff0c\u5728\u7ec8\u7aef\u5185\u4f7f\u7528 osascript \u547d\u4ee4\u5373\u53ef\u8fd0\u884c\uff1a\nosascript resize.scpt ","permalink":"https:\/\/wi1dcard.dev\/posts\/macos-resize-window-programmatically\/","summary":" \u535a\u5ba2\u53c8\u8df3\u7968\u4e00\u9635\u5b50\uff0c\u4e0d\u8fc7\u6700\u8fd1\u5e76\u6ca1\u6709\u95f2\u7740\uff0c\u800c\u662f\u628a\u4e1a\u4f59\u65f6\u95f4\u5168\u90e8\u6295\u5165\u5230\u4e86 Laravel \u90e8\u7f72\u8bfe\u7a0b<\/a>\u3002\u5728\u5199\u4f5c\u65f6\u7ecf\u5e38\u9700\u8981\u5bf9\u7a97\u53e3\u622a\u56fe\uff0c\u4e3a\u4e86\u63d0\u9ad8\u9605\u8bfb\u4f53\u9a8c\uff0c\u9700\u786e\u4fdd\u622a\u56fe\u5927\u5c0f\u7edf\u4e00\uff1b\u56e0\u6b64\u5982\u4f55\u8ba9\u7a97\u53e3 \u5feb\u901f<\/strong> \u5730\u7f29\u653e\u4e3a\u6307\u5b9a\u50cf\u7d20\u7684 \u7cbe\u786e<\/strong> \u5927\u5c0f\uff0c\u6210\u4e86\u4e00\u4e2a\u4e0d\u53ef\u6216\u7f3a\u7684\u9700\u6c42\u3002<\/p>","title":"\u4f7f\u7528 AppleScript \u7cbe\u786e\u5730\u8bbe\u7f6e macOS \u7a97\u53e3\u5927\u5c0f"},{"content":"\u672c\u6587\u4e3a\u300a\u8f7b\u677e\u90e8\u7f72 Laravel \u5e94\u7528\u300b\u7684\u9884\u4e60\u8865\u5145\u7bc7\u3002\n\u7b80\u4ecb \u6240\u8c13\u300c\u57fa\u7840\u8bbe\u65bd\uff08Infrastructure\uff09\u300d\uff0c\u662f\u4e91\u65f6\u4ee3\u5174\u8d77\u540e\u6d41\u884c\u8d77\u6765\u7684\u4e00\u4e2a\u540d\u8bcd\u3002\u670d\u52a1\u5668\u3001\u4ea4\u6362\u673a\u3001\u8d1f\u8f7d\u5747\u8861\u7b49\u7b49\uff0c\u90fd\u53ef\u4ee5\u79f0\u4f5c\u662f\u57fa\u7840\u8bbe\u65bd\u3002\n\u57fa\u7840\u8bbe\u65bd\u901a\u5e38\u662f\u8f6f\u4ef6\u9879\u76ee\u7684\u786c\u4ef6\u8f7d\u4f53\u3002\u90e8\u7f72\u7684\u8fc7\u7a0b\uff0c\u53ef\u7406\u89e3\u4e3a\u5c06\u8f6f\u4ef6\u5b89\u88c5\u5230\u57fa\u7840\u8bbe\u65bd\u7684\u8fc7\u7a0b\u3002\u5728\u5b9e\u9645\u9879\u76ee\u90e8\u7f72\u524d\uff0c\u901a\u5e38\u9996\u5148\u8981\u786e\u5b9a\u4f60\u7684\u9879\u76ee\u300c\u9700\u8981\u54ea\u4e9b \u57fa\u7840\u8bbe\u65bd\u300d\u3002\n\u4e91\u670d\u52a1\u5668 \u4e91\u670d\u52a1\u5668\uff08Elastic Compute Services\uff09\u662f\u4e00\u79cd\u7b80\u5355\u9ad8\u6548\u3001\u5b89\u5168\u53ef\u9760\u3001\u5904\u7406\u80fd\u529b\u53ef\u5f39\u6027\u4f38\u7f29\u7684\u8ba1\u7b97\u670d\u52a1\u3002\n \u66f4\u76f4\u767d\u5730\u8bf4\uff0c\u4f60\u53ef\u4ee5\u5c06\u4e00\u53f0\u4e91\u670d\u52a1\u5668\u7406\u89e3\u4e3a\u4e00\u53f0\u72ec\u7acb\u7684\u300c\u7535\u8111\u300d\uff0c\u53ea\u4e0d\u8fc7\u8fd9\u53f0\u300c\u7535\u8111\u300d\u7684\u786c\u4ef6\u54b1\u4eec\u770b\u4e0d\u89c1\u6478\u4e0d\u7740\uff0c\u5b83\u6258\u7ba1\u4e8e\u4e91\u670d\u52a1\u5382\u5546\u3002\u5728\u4e91\u670d\u52a1\u5382\u5546\u63d0\u4f9b\u7684\u7ba1\u7406\u9875\u9762\uff0c\u4f60\u53ef\u4ee5\u7ed9\u4e91\u670d\u52a1\u5668\u5347\u7ea7\u3001\u964d\u7ea7\u914d\u7f6e\uff0c\u4ee5\u53ca\u8fdb\u884c\u5f00\u5173\u673a\u3001\u91cd\u88c5\u7cfb\u7edf\u7b49\u5e38\u89c1\u7684\u7ba1\u7406\u64cd\u4f5c\u3002\n\u5b9e\u9645\u4e0a\uff0c\u4e91\u670d\u52a1\u5382\u5546\u53ea\u662f\u5c06\u786c\u4ef6\u5212\u5206\u7ed9\u4e91\u670d\u52a1\u5668\uff0c\u5e76\u51fa\u79df\u7ed9\u6211\u4eec\uff0c\u800c\u6211\u4eec\u5219 \u5177\u5907\u5bf9\u8be5\u670d\u52a1\u5668\u8f6f\u4ef6\u4e0e\u6570\u636e\u65b9\u9762\u7684\u5b8c\u5168\u3001\u7edd\u5bf9\u63a7\u5236\u6743\u3002\n\u901a\u5e38\u60c5\u51b5\u4e0b\uff0c\u4e91\u670d\u52a1\u5668\u662f\u4e00\u5207\u670d\u52a1\u7684\u57fa\u7840\uff1b\u540e\u7eed\u7684\u8bfe\u7a0b\u5c06\u4f1a\u628a Laravel \u9879\u76ee\u90e8\u7f72\u5230\u4e91\u670d\u52a1\u5668\u4e2d\u3002\n\u4e3a\u4ec0\u4e48\u4e0d\u5e94\u8be5\u4f7f\u7528\u865a\u62df\u4e3b\u673a \u9996\u5148\uff0c\u6211\u4eec\u9700\u8981\u660e\u767d\u4ec0\u4e48\u662f \u865a\u62df\u4e3b\u673a\u3002\n \u865a\u62df\u4e3b\u673a\uff08Virtual Hosts\uff09\u662f\u6307\u5728\u670d\u52a1\u5668\u4e0a\u5206\u914d\u4e00\u5b9a\u7684\u78c1\u76d8\u7a7a\u95f4\uff0c\u7528\u6237\u53ef\u4ee5\u79df\u7528\u6b64\u90e8\u5206\u7a7a\u95f4\uff0c\u4ee5\u4f9b\u7528\u6237\u653e\u7f6e\u7ad9\u70b9\uff0c\u5e76\u63d0\u4f9b\u7b80\u6613\u7684\u5b58\u50a8\u548c\u4f20\u8f93\u529f\u80fd\u3002\n \u53ef\u4ee5\u770b\u51fa\uff0c\u865a\u62df\u4e3b\u673a\u662f\u5728\u670d\u52a1\u5668\u7684\u57fa\u7840\u4e0a\u8fdb\u884c\u4e8c\u6b21\u5212\u5206\uff0c\u5c06\u539f\u672c\u5c5e\u4e8e\u5355\u53f0\u670d\u52a1\u5668\u7684\u8d44\u6e90\u5206\u914d\u6210\u4e00\u4e2a\u4e2a\u5c0f\u5757\u3002\u5982\u679c\u5c06\u4e91\u670d\u52a1\u5382\u5546\u6bd4\u4f5c\u62e5\u6709\u786c\u4ef6\u7684\u623f\u4e1c\uff0c\u90a3\u4e48\u6211\u4eec\u79df\u7528\u4e91\u670d\u52a1\u5668\u5219\u53ef\u4ee5\u770b\u4f5c\u662f\u79df\u623f\u3002\u800c\u865a\u62df\u4e3b\u673a\uff0c\u5219\u662f\u79df\u623f\u540e\u6446\u4e0a\u591a\u4e2a\u5e8a\u4f4d\u518d\u6b21\u51fa\u79df\uff0c\u6210\u4e3a\u96c6\u4f53\u5bbf\u820d\u3002\n\u5982\u540c\u4e0a\u6587\u6240\u8bf4\uff0c\u6211\u4eec\u53ef\u4ee5\u5b8c\u5168\u63a7\u5236\u4e00\u53f0\u4e91\u670d\u52a1\u5668\u7684\u8f6f\u4ef6\u90e8\u5206\uff0c\u4f46\u865a\u62df\u4e3b\u673a\u5f80\u5f80\u53ef\u63a7\u8303\u56f4\u5341\u5206\u6709\u9650\uff0c\u5f88\u5c11\u6709\u865a\u62df\u4e3b\u673a\u63d0\u4f9b\u5546\u652f\u6301\u5b89\u88c5 PHP \u6269\u5c55\u3001\u914d\u7f6e FPM \u53c2\u6570\uff0c\u66f4\u522b\u63d0\u6267\u884c Composer \u547d\u4ee4\u3001\u6307\u5b9a\u7cfb\u7edf\u7248\u672c\uff0c\u8fd9 \u5bf9\u9879\u76ee\u7684\u90e8\u7f72\u8fc7\u7a0b\u662f\u975e\u5e38\u4e0d\u5229\u7684\u3002\n\u53e6\u5916\uff0c\u865a\u62df\u4e3b\u673a\u6570\u636e\u9694\u79bb\u6027\u5dee\uff0c\u5f88\u96be\u4fdd\u8bc1\u5176\u53ef\u9760\u6027\u548c\u5b89\u5168\u6027\uff1b\u4e00\u53f0\u670d\u52a1\u5668\u53ef\u80fd\u540c\u65f6\u300c\u8d85\u8f7d\u300d\u4e86\u6210\u767e\u4e0a\u5343\u4e2a\u865a\u62df\u4e3b\u673a\uff0c\u4e0d\u4ec5 \u901f\u5ea6\u6162\uff0c\u4e14\u5bb9\u6613 \u53d7\u5230\u5176\u5b83\u865a\u62df\u4e3b\u673a\u7684\u5f71\u54cd\u3002\u76f8\u6bd4\u4e4b\u4e0b\uff0c\u591a\u6570\u4e91\u670d\u52a1\u5382\u5546\u76ee\u524d\u6280\u672f\u5df2\u7ecf\u6bd4\u8f83\u6210\u719f\u7a33\u5b9a\uff0c\u56e0\u6b64\u8bf7\u4f7f\u7528\u4e91\u670d\u52a1\u5668\uff0c\u907f\u514d\u4f7f\u7528\u865a\u62df\u4e3b\u673a\u3002\n\u53ef\u9009\u7684\u72ec\u7acb\u670d\u52a1 \u4e3b\u6d41\u4e91\u670d\u52a1\u5382\u5546\u9664\u4e86\u63d0\u4f9b\u57fa\u672c\u7684\u4e91\u670d\u52a1\u5668\u4e4b\u5916\uff0c\u5927\u591a\u8fd8\u6709\u72ec\u7acb\u7684 \u6570\u636e\u5e93\u670d\u52a1\uff08\u4f8b\u5982 MySQL\uff09\u3001\u7f13\u5b58\u670d\u52a1\uff08\u4f8b\u5982 Redis\uff09\u7b49\u3002\u8fd9\u4e9b\u670d\u52a1\u4e5f\u662f\u901a\u8fc7\u4e91\u670d\u52a1\u5668\u4f5c\u4e3a\u8f7d\u4f53\uff0c\u5c06\u5b83\u4eec\u90e8\u7f72\u5728\u4e91\u670d\u52a1\u5668\u4e0a\u51fa\u79df\u7ed9\u6211\u4eec\u3002\n\u4f60\u53ef\u80fd\u60f3\u95ee\uff0c\u90a3\u6211\u4e3a\u4ec0\u4e48\u4e0d\u81ea\u5df1\u90e8\u7f72\u5462\uff0c\u4f55\u5fc5\u4e70\u72ec\u7acb\u7684\u670d\u52a1\uff1f\u5176\u5b9e\uff0c\u5e55\u540e\u7684\u5de5\u7a0b\u5e08\u4eec\u901a\u5e38\u4e3a\u8fd9\u4e9b\u670d\u52a1\u8fdb\u884c\u4e86\u5927\u91cf\u4f18\u5316\uff0c\u662f\u603b\u7ed3\u4e86\u8bb8\u591a\u5b9e\u6218\u7ecf\u9a8c\u540e\u7ed9\u51fa\u7684\u66f4\u4e13\u4e1a\u3001\u66f4\u5feb\u6377\u7684\u89e3\u51b3\u65b9\u6848\uff1b\u5e76\u4e14\u670d\u52a1\u5185\u90e8\u7684\u8fd0\u7ef4\u5de5\u4f5c\u4ea4\u7ed9\u4e86\u4e91\u670d\u52a1\u5382\u5546\uff0c\u6211\u4eec\u53ef\u4ee5\u66f4\u52a0\u4e13\u6ce8\u4e8e\u5982\u4f55\u5b9e\u73b0\u5177\u4f53\u7684\u4e1a\u52a1\u3002\n\u56e0\u6b64\uff0c\u5728\u6ca1\u6709\u7279\u6b8a\u8981\u6c42\u7684\u60c5\u51b5\u4e0b\uff0c\u5982\u679c\u53ef\u4ee5\uff0c\u6211\u66f4\u63a8\u8350\u4f7f\u7528\u8fd9\u4e9b\u72ec\u7acb\u7684\u670d\u52a1\uff0c\u7701\u5fc3\u7701\u529b\u53c8\u7701\u65f6\u3002\n\u4e3b\u6d41\u4e91\u670d\u52a1\u5382\u5546 \u6765\u81ea\u56fd\u5185\uff1a\n \u963f\u91cc\u4e91\uff1a\u963f\u91cc\u5df4\u5df4\u51fa\u54c1\uff0c\u56fd\u5185\u5e02\u573a\u5360\u6709\u7387\u8fde\u7eed\u591a\u5e74\u4fdd\u6301\u7b2c\u4e00\u3002 \u817e\u8baf\u4e91\uff1a\u817e\u8baf\u51fa\u54c1\uff0c\u51ed\u501f\u591a\u5e74\u7684 IM \u6280\u672f\u79ef\u7d2f\uff0c\u63d0\u4f9b\u4e00\u4e9b\u4e0d\u9519\u7684\u7279\u8272\u670d\u52a1\u3002 \u534e\u4e3a\u4e91\uff1a\u534e\u4e3a\u51fa\u54c1\uff0c\u7531\u4e8e\u5176\u5177\u5907\u786c\u4ef6\u7814\u53d1\u751f\u4ea7\u80fd\u529b\uff0c\u5728\u90e8\u5206\u9886\u57df\u6709\u540e\u6765\u5c45\u4e0a\u4e4b\u52bf\u3002 \u6765\u81ea\u56fd\u5916\uff1a\n Amazon Web Services\uff08AWS\uff09\uff1a\u4e9a\u9a6c\u900a\u51fa\u54c1\uff0c\u8001\u724c\u4e91\u670d\u52a1\u5546\u4e4b\u4e00\u3002\u6709 \u4e2d\u56fd\u7279\u4f9b\u7248\uff0c\u4f46\u529f\u80fd\u5927\u5927\u7f29\u6c34\u3002 Azure\uff1a\u5fae\u8f6f\u51fa\u54c1\uff0c\u4ef7\u683c\u76f8\u5bf9\u8f83\u9ad8\uff0c\u5e26\u5bbd\u76f8\u5bf9\u8f83\u597d\u3002\u6709 \u4e2d\u56fd\u7279\u4f9b\u7248\uff0c\u529f\u80fd\u540c\u6837\u5927\u5927\u7f29\u6c34\u3002 Google Cloud Platform\uff08GCP\uff09\uff1a\u8c37\u6b4c\u51fa\u54c1\uff0c\u754c\u9762\u76f8\u5bf9\u7f8e\u89c2\uff0c\u5bf9\u65b0\u6280\u672f\u7684\u652f\u6301\u8f83\u597d\u3002\u4f46\u88ab\u5899\uff0c\u4e14\u65e0\u4e2d\u56fd\u533a\u3002 \u5305\u5e74\u5305\u6708\u8fd8\u662f\u6309\u65f6\u957f\u4ed8\u8d39\uff1f \u5927\u591a\u4e91\u670d\u52a1\u63d0\u4f9b\u4e24\u79cd\u79df\u8d41\u8ba1\u8d39\u6a21\u5f0f\uff1a\u5305\u5e74\u6216\u5305\u6708\u9884\u4ed8\u8d39 \u4ee5\u53ca \u6309\u65f6\u957f\u540e\u4ed8\u8d39\u3002\n\u5305\u5e74\u3001\u5305\u6708\u7684\u8ba1\u8d39\u65b9\u5f0f\u6bd4\u8f83\u7b80\u5355\uff0c\u5728\u8d2d\u4e70\u65f6\u652f\u4ed8\u5b9a\u91cf\u8d39\u7528\u5373\u53ef\uff1b\u5728\u670d\u52a1\u672a\u8fc7\u671f\u524d\u4f60\u53ef\u4ee5\u4efb\u610f\u4f7f\u7528\uff0c\u5230\u671f\u540e\u5c06\u4f1a\u81ea\u52a8\u9500\u6bc1\u3002\n\u6309\u65f6\u957f\u7684\u8ba1\u8d39\u5355\u4f4d\u901a\u5e38\u66f4\u52a0\u7cbe\u786e\uff0c\u4f8b\u5982 \u6bcf\u5c0f\u65f6 \u751a\u81f3 \u6bcf\u5206\u949f\u3001\u6bcf\u79d2\uff1b\u4f60\u53ef\u4ee5\u968f\u65f6\u521b\u5efa\u670d\u52a1\uff0c\u4e5f\u53ef\u4ee5\u968f\u65f6\u9500\u6bc1\u3002\u5728\u670d\u52a1\u88ab\u9500\u6bc1\u4e4b\u524d\uff0c\u670d\u52a1\u5546\u5c06\u6301\u7eed\u4ece\u4f60\u7684\u8d26\u6237\u5185\u6263\u8d39\u3002\n\u6309\u65f6\u957f\u901a\u5e38\u6bd4\u5305\u6708\u7565\u8d35\u4e9b\uff0c\u4f46\u66f4\u52a0\u300c\u968f\u5fc3\u6240\u6b32\u300d\uff1b\u800c\u5305\u6708\u4e0d\u5fc5\u62c5\u5fc3\u5fd8\u8bb0\u9500\u6bc1\u5bfc\u81f4\u8d85\u989d\u8d26\u5355\uff0c\u4f46\u4e5f\u4e0d\u53ef\u907f\u514d\u5730\u4e27\u5931\u4e86\u7075\u6d3b\u6027\u3002\n\u540e\u7eed\u8bfe\u7a0b\u63a8\u8350\u4f7f\u7528\u6309\u65f6\u957f\u4ed8\u8d39\u7684\u4e91\u670d\u52a1\u3002\u5728\u8fd8\u4e0d\u719f\u6089\u76f8\u5173\u914d\u7f6e\u7684\u60c5\u51b5\u4e0b\uff0c\u4f60\u53ef\u4ee5\u4efb\u610f\u521b\u5efa\u3001\u4fee\u6539\u3001\u9500\u6bc1\u5b83\u4eec\uff0c\u800c\u4e0d\u4f1a\u88ab\u56fa\u5b9a\u7684\u4ed8\u8d39\u6a21\u5f0f\u7981\u9522\u3002\n\u6309\u56fa\u5b9a\u5bbd\u5e26\u8fd8\u662f\u6309\u6d41\u91cf\u4ed8\u8d39\uff1f \u4e0e\u4e0a\u6587\u7c7b\u4f3c\uff0c\u56fd\u5185\u4e91\u670d\u52a1\u5668\u7f51\u7edc\u8ba1\u8d39\u65b9\u5f0f\u901a\u5e38\u4e5f\u5206\u4e3a\u4e24\u79cd\uff1a\u6309\u56fa\u5b9a\u5e26\u5bbd\u8ba1\u8d39 \u4ee5\u53ca \u6309\u6d41\u91cf\u8ba1\u8d39\u3002\n\u6309\u5e26\u5bbd\u8ba1\u8d39\u5c06\u670d\u52a1\u5668\u7684\u6700\u9ad8\u5e26\u5bbd\u9650\u5236\u5728\u67d0\u4e2a\u56fa\u5b9a\u503c\uff1b\u65e0\u8bba\u5229\u7528\u7387\u9ad8\u4f4e\uff0c\u662f\u5426\u6709\u6570\u636e\u4f20\u8f93\uff0c\u5e26\u5bbd\u8d8a\u9ad8\uff0c\u4ef7\u683c\u8d8a\u8d35\u3002\n\u6309\u6d41\u91cf\u8ba1\u8d39\u7c7b\u4f3c\u624b\u673a\u6d41\u91cf\uff0c\u53ea\u4e0d\u8fc7\u6211\u4eec\u4e0d\u9700\u8981\u9884\u5145\u503c\uff1b\u670d\u52a1\u5546\u5c06\u5b9e\u65f6\u7edf\u8ba1\u4e91\u670d\u52a1\u5668\u6570\u636e\u4f20\u8f93\u91cf\uff0c\u6309\u7167 \u6bcf GB \u4e00\u5b9a\u4ef7\u683c\u6301\u7eed\u4ece\u4f60\u7684\u8d26\u6237\u5185\u6263\u8d39\u3002\n\u4ee5\u5b9e\u9645\u7ecf\u9a8c\u6765\u770b\uff0c\u6309\u5e26\u5bbd\u8ba1\u8d39\u901a\u5e38\u6bd4\u6309\u6d41\u91cf\u8ba1\u8d39\u6027\u4ef7\u6bd4\u4f4e\uff0c\u56e0\u4e3a\u7edd\u5927\u591a\u6570\u7ad9\u70b9\u5e76\u4e0d\u662f\u6bcf\u65f6\u6bcf\u523b\u90fd\u4fdd\u6301\u7a33\u5b9a\u7684\u8bbf\u95ee\u91cf\uff0c\u5728\u4e1a\u52a1\u4f4e\u8c37\u65f6\u5c3d\u7ba1\u5e26\u5bbd\u5229\u7528\u7387\u5f88\u4f4e\uff0c\u4ecd\u9700\u652f\u4ed8\u540c\u6837\u7684\u8d39\u7528\u3002\u4e0d\u8fc7\u8981\u63d0\u9192\u5927\u5bb6\uff0c\u6309\u6d41\u91cf\u4ed8\u8d39\u7684\u7ad9\u70b9\u9700\u8981\u6ce8\u610f\u907f\u514d\u88ab\u5fc3\u6000\u53f5\u6d4b\u7684\u300c\u5c0f\u4eba\u300d\u6076\u610f\u5237\u6d41\u91cf\uff0c\u5bfc\u81f4\u8d26\u5355\u8d85\u989d\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/cloud-infrastructures\/","summary":" \u672c\u6587\u4e3a\u300a\u8f7b\u677e\u90e8\u7f72 Laravel \u5e94\u7528<\/a>\u300b\u7684\u9884\u4e60\u8865\u5145\u7bc7\u3002<\/p>","title":"\u4f60\u9700\u8981\u54ea\u4e9b\u4e91\u670d\u52a1\u57fa\u7840\u8bbe\u65bd\uff1f"},{"content":"\u7531\u4e8e macOS \u9ed8\u8ba4\u5206\u533a\u548c\u5377\u90fd\u662f\u5927\u5c0f\u5199\u4e0d\u654f\u611f\u7684\uff0c\u5bf9\u4e8e\u5f00\u53d1\u8005\u6765\u8bf4\uff0c\u901a\u5e38\u9700\u8981\u9762\u5bf9\u7684\u662f\u5927\u5c0f\u5199\u654f\u611f\u7684\u73af\u5883\u3002\u5e76\u4e14\uff0c\u8fd9\u4e2a\u5c0f\u5dee\u5f02\u7684\u786e\u5e26\u6765\u4e86\u4e00\u4e9b\u4e0d\u4fbf\uff0c\u4f8b\u5982 \u4f7f\u7528 Git \u65f6\u9047\u5230\u7684\u5751\u3002\u7136\u800c\uff0c\u81ea\u5df1\u53c8\u6ca1\u6709\u52c7\u6c14\u91cd\u65b0\u683c\u5f0f\u5316\u3001\u88c5\u7cfb\u7edf\u3002\u76f4\u5230\u6700\u8fd1\uff0c\u5728\u8ddf\u540c\u4e8b\u804a\u5929\u65f6\u7ed9\u4e86\u6211\u4e00\u4e2a\u542f\u53d1\u2026\u2026\n\u601d\u8def macOS \u6700\u65b0\u7684 APFS \u6587\u4ef6\u7cfb\u7edf\u652f\u6301\u5728 Container \u5185\u4efb\u610f\u521b\u5efa Volume\uff08\u5377\uff09\uff0c\u6bd4\u5206\u533a\u7b80\u5355\u5feb\u6377\u5f88\u591a\uff0c\u540c\u65f6\u8fd8\u53ef\u4ee5\u5355\u72ec\u6307\u5b9a\u662f\u5426\u5927\u5c0f\u5199\u654f\u611f\u3002\u518d\u52a0\u4e0a Unix \u80fd\u591f\u4efb\u610f\u6302\u8f7d\u7684\u7279\u6027\uff0c\u56e0\u6b64\u6211\u53ea\u9700\u521b\u5efa\u4e00\u4e2a\u65b0\u5377\uff0c\u5c06\u9879\u76ee\u6587\u4ef6\u79fb\u52a8\u8fc7\u53bb\uff0c\u968f\u540e\u5c06\u8be5\u5377\u6302\u8f7d\u81f3\u539f\u4ee3\u7801\u76ee\u5f55\u5373\u53ef\u3002\n\u5177\u4f53\u64cd\u4f5c\u65b9\u5f0f\u5982\u4e0b\u3002\n\u6b65\u9aa4 \u521b\u5efa\u5927\u5c0f\u5199\u654f\u611f\u7684\u5377 \u9996\u5148\uff0c\u6253\u5f00 Disk Utility\uff0c\u786e\u4fdd\u4f60\u7684\u6587\u4ef6\u7cfb\u7edf\u662f APFS\uff1b\u82e5\u662f HFS\uff0c\u8bf7 \u5347\u7ea7\u3002\n\u5728\u5de6\u4fa7\u5217\u8868\u53f3\u952e\u5355\u51fb Macintosh HD\uff0c\u9009\u62e9 Add APFS Volume\u3002\n\u7ed9\u5b83\u8d77\u4e2a\u540d\u5b57\uff0c\u968f\u540e Format \u9009\u62e9 APFS (Case-sensitive)\uff0c\u52a1\u5fc5\u6ce8\u610f\u5927\u5c0f\u5199\u654f\u611f\u3002\n\u786e\u8ba4\u65e0\u8bef\u540e\u70b9\u51fb Add \u5373\u53ef\u3002\n\u8fc1\u79fb\u6570\u636e \u6ca1\u6709\u95ee\u9898\u7684\u8bdd\uff0c\u65b0\u521b\u5efa\u7684\u5377\u5e94\u8be5\u5df2\u7ecf\u6302\u8f7d\u5230 \/Volumes\/<NAME> \u76ee\u5f55\uff0c\u63a5\u4e0b\u6765\u9700\u8981\u628a\u539f\u6709\u4ee3\u7801\u6587\u4ef6\u79fb\u52a8\u5230\u8fd9\u4e2a\u5377\u3002\u4f7f\u7528 mv \u547d\u4ee4\uff0c\u6216\u662f\u901a\u8fc7 Finder \u64cd\u4f5c\u5747\u53ef\u3002\n\u4fee\u6539\u6302\u8f7d\u70b9 \u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u7cfb\u7edf\u4f1a\u5c06\u6240\u6709\u5377\u6302\u8f7d\u81f3 \/Volumes \u76ee\u5f55\u4e0b\uff0c\u4ee5\u5377\u540d\u533a\u5206\u3002\u6211\u7684\u9879\u76ee\u5b58\u653e\u4e8e \/Projects\uff0c\u56e0\u6b64\u9700\u8981\u5c06\u65b0\u5377\u6302\u8f7d\u5230\u8be5\u76ee\u5f55\u3002\n\u518d\u6b21\u6253\u5f00 Disk Utility\uff0c\u5728\u5de6\u4fa7\u5217\u8868\u53f3\u952e\u5355\u51fb\u65b0\u521b\u5efa\u7684\u5377\uff0c\u9009\u62e9 Get Info\u3002\u70b9\u51fb File system UUID \u4e00\u884c\uff0c\u4f7f\u7528 Command + C \u590d\u5236\u51fa\u6765\uff1a\nFile system UUID : XXXXXXXX-ABCD-DCBA-1234-XXXXXXXXXXXX \u8bb0\u4f4f\u5192\u53f7\u540e\u7684 UUID\u3002\u63a5\u4e0b\u6765\u70b9\u51fb Unmount \u6309\u94ae\u5378\u8f7d\u8be5\u5377\u3002\n\u6253\u5f00\u7ec8\u7aef\uff0c\u4f7f\u7528 sudo vifs \u5373\u53ef\u7f16\u8f91 \/etc\/fstab \u6587\u4ef6\uff0c\u8f93\u5165\u4ee5\u4e0b\u5185\u5bb9\u5e76\u4fdd\u5b58\uff1a\nUUID=XXXXXXXX-ABCD-DCBA-1234-XXXXXXXXXXXX <MOUNT_POINT> apfs rw 0 2 \u8bf7\u6ce8\u610f\u5c06 <MOUNT_POINT> \u66ff\u6362\u4e3a\u6302\u8f7d\u76ee\u5f55\uff0c\u4f8b\u5982 \/Projects\u3002\u82e5\u8be5\u76ee\u5f55\u4e0d\u5b58\u5728\uff0c\u4e0d\u8981\u5fd8\u8bb0\u521b\u5efa\u5b83\u3002\n\u91cd\u65b0\u6302\u8f7d \u91cd\u65b0\u70b9\u51fb Mount \u6309\u94ae\u6216\u662f mount -a \u547d\u4ee4\u5747\u53ef\u3002\n\u5b8c\u6210\uff01\u6548\u679c\u5982\u4e0b\uff1a\n\u7ed3\u8bed \u53c2\u8003\uff1a\n https:\/\/apple.stackexchange.com\/questions\/291149\/permanently-change-mount-point-of-volume ","permalink":"https:\/\/wi1dcard.dev\/posts\/use-case-sensitive-apfs-volume\/","summary":" \u7531\u4e8e macOS \u9ed8\u8ba4\u5206\u533a\u548c\u5377\u90fd\u662f\u5927\u5c0f\u5199\u4e0d\u654f\u611f\u7684\uff0c\u5bf9\u4e8e\u5f00\u53d1\u8005\u6765\u8bf4\uff0c\u901a\u5e38\u9700\u8981\u9762\u5bf9\u7684\u662f\u5927\u5c0f\u5199\u654f\u611f\u7684\u73af\u5883\u3002\u5e76\u4e14\uff0c\u8fd9\u4e2a\u5c0f\u5dee\u5f02\u7684\u786e\u5e26\u6765\u4e86\u4e00\u4e9b\u4e0d\u4fbf\uff0c\u4f8b\u5982 \u4f7f\u7528 Git \u65f6\u9047\u5230\u7684\u5751<\/a>\u3002\u7136\u800c\uff0c\u81ea\u5df1\u53c8\u6ca1\u6709\u52c7\u6c14\u91cd\u65b0\u683c\u5f0f\u5316\u3001\u88c5\u7cfb\u7edf\u3002\u76f4\u5230\u6700\u8fd1\uff0c\u5728\u8ddf\u540c\u4e8b\u804a\u5929\u65f6\u7ed9\u4e86\u6211\u4e00\u4e2a\u542f\u53d1\u2026\u2026<\/p>","title":"\u4f7f\u7528\u5927\u5c0f\u5199\u654f\u611f\u7684 APFS \u5377\u5b58\u50a8\u4ee3\u7801"},{"content":"\u524d\u4e9b\u5929\u7ed9\u547d\u4ee4\u884c\u8bbe\u7f6e\u6807\u9898\u9047\u5230\u4e00\u5947\u8469\u95ee\u9898\uff0c\u6700\u7ec8\u8c03\u8bd5\u53d1\u73b0\u662f Oh-My-Zsh \u7684\u9505\u3002\n\u5728\u542f\u7528 Oh-My-Zsh \u540e\uff0c\u4f7f\u7528\u547d\u4ee4\uff1a\necho -e "\\033];this is the title\\007" \u5c45\u7136\u65e0\u6cd5\u4fee\u6539\u7ec8\u7aef\u7a97\u53e3\u6807\u9898\uff1f\u4e0d\u8fc7\uff0c\u4ed4\u7ec6\u89c2\u5bdf\u8fd8\u662f\u4f1a\u6ce8\u610f\u5230\u6807\u9898\u300c\u95ea\u300d\u4e86\u4e00\u4e0b\uff0c\u8bf4\u660e\u8fd8\u662f\u5b58\u5728\u6548\u679c\uff0c\u53ea\u4e0d\u8fc7\u88ab\u67d0\u79cd\u300c\u795e\u79d8\u529b\u91cf\u300d\u91cd\u8bbe\u4e86\u56de\u6765\uff0c\n\u6700\u5f00\u59cb\u6000\u7591\u662f\u4e0d\u662f iTerm2 \u4e4b\u7c7b\u7684\u9505\uff0c\u6362\u6210 Terminal \u95ee\u9898\u4f9d\u65e7\u3002\n\u968f\u540e\u5f00\u59cb\u5c1d\u8bd5\u4f7f\u7528 bash \u6267\u884c\u4e0a\u6587\u7684\u547d\u4ee4\uff0c\u6b63\u5e38\u5de5\u4f5c\u3002\u56e0\u6b64\u95ee\u9898\u5e94\u8be5\u51fa\u5728 Zsh \u5468\u8fb9\u3002\n\u4e8e\u662f\u4f7f\u7528 zsh -d -f\uff08\u5373\u4e0d\u52a0\u8f7d\u4efb\u4f55 RC \u6587\u4ef6\uff0c\u6700\u539f\u59cb\u7684 zsh\uff09\u518d\u6b21\u8c03\u8bd5\uff0c\u53ef\u4ee5\u6b63\u5e38\u5de5\u4f5c\u3002\u6240\u4ee5\u7f6a\u9b41\u7978\u9996\u5e94\u5f53\u5c31\u9690\u85cf\u5728 ~\/.zshrc \u4e4b\u4e2d\u3002\n\u6700\u7ec8\u7ecf\u8fc7\u6392\u67e5\uff0c\u53d1\u73b0\u662f\u7531\u4e8e Oh-My-Zsh \u7684\u4e00\u4e2a\u540d\u4e3a Auto title \u7684\u529f\u80fd\u9020\u6210\u7684\uff0c\u53c2\u8003\uff1ahttps:\/\/github.com\/robbyrussell\/oh-my-zsh\/issues\/5700\u3002\n\u5927\u81f4\u89e3\u51b3\u65b9\u6848\u6709\u4e24\u79cd\uff1a\n \u5728 .zshrc \u5185\u5199\u5165\u73af\u5883\u53d8\u91cf DISABLE_AUTO_TITLE="true"\u3002 \u56e0\u4e3a\u6211\u7684\u6700\u7ec8\u76ee\u7684\u662f\u4fee\u6539\u800c\u975e\u7981\u7528\uff0c\u6545\u4ea6\u53ef\u76f4\u63a5\u4fee\u6539 ZSH_THEME_TERM_TITLE_IDLE \u73af\u5883\u53d8\u91cf\u4f5c\u4e3a\u7a7a\u95f2\u65f6\u7684\u6807\u9898\uff0c\u53c2\u8003 \u8fd9\u6bb5\u6e90\u7801\u3002 \u6700\u7ec8\uff0c\u6211\u5728 ~\/.zshrc \u672b\u5c3e\u52a0\u5165\u4e00\u884c\uff1a\nZSH_THEME_TERM_TITLE_IDLE="%~" # \u5c06\u5f53\u524d\u5de5\u4f5c\u76ee\u5f55\u77ed\u8def\u5f84\u8bbe\u4e3a\u7ec8\u7aef\u6807\u9898 \u6ce8\u610f\uff0c\u4ee5\u4e0a\u8bed\u53e5\u5e94\u5728 Oh-My-Zsh \u8f7d\u5165\u4e4b\u540e\uff0c\u5426\u5219\u5c06\u4f1a\u88ab \u8fd9\u6bb5\u6e90\u7801 \u8986\u76d6\u3002\n\u95ee\u9898\u89e3\u51b3\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/change-terminal-title-in-zsh\/","summary":" \u524d\u4e9b\u5929\u7ed9\u547d\u4ee4\u884c\u8bbe\u7f6e\u6807\u9898\u9047\u5230\u4e00\u5947\u8469\u95ee\u9898\uff0c\u6700\u7ec8\u8c03\u8bd5\u53d1\u73b0\u662f Oh-My-Zsh \u7684\u9505\u3002<\/p>","title":"\u5728 Oh-My-Zsh \u5185\u8bbe\u7f6e\u547d\u4ee4\u884c\u6807\u9898"},{"content":"reorx\/httpstat \u662f\u4e00\u6b3e\u66f4\u52a0\u6e05\u6670\u6613\u8bfb\u7684 cURL \u5de5\u5177\u3002\u5176\u672c\u610f\u662f\u5c06 cURL \u8bf7\u6c42\u7684\u7edf\u8ba1\u6570\u636e\u56fe\u5f62\u5316\u3001\u53ef\u89c6\u5316\uff0c\u4f46\u4e5f\u53ef\u4f5c\u4e3a\u65e5\u5e38\u7684 HTTP \u5ba2\u6237\u7aef\u4f7f\u7528\u3002\n\u6548\u679c\u5982\u4e0b\uff1a\n\u76f8\u6bd4\u4e8e\u7e41\u590d\u7ec6\u81f4\u7684 cURL \u9009\u9879\uff0c\u4f7f\u7528\u6b64\u9879\u76ee\u53ef\u5feb\u901f\u67e5\u770b\u54cd\u5e94\u5934\u53ca\u76f8\u5173\u7684\u7edf\u8ba1\u6570\u636e\u3002\n\u5b89\u88c5\u65b9\u5f0f\u5341\u5206\u7b80\u5355\uff0c\u901a\u8fc7 Python \u7684\u5305\u7ba1\u7406\u5668 pip \u6216\u662f Homebrew \u5747\u53ef\uff1a\npip install httpstat # \u6216 brew install httpstat \u7531\u4e8e\u8be5\u9879\u76ee\u5b9e\u9645\u662f\u4e2a\u5355\u6587\u4ef6 Python \u811a\u672c\uff0c\u6240\u4ee5\u4f5c\u8005\u8fd8\u7ed9\u51fa\u4e86\u76f4\u63a5\u4e0b\u8f7d\u4f7f\u7528\u7684\u65b9\u5f0f\uff0c\u5728\u90e8\u5206\u573a\u666f\u4e0b\u5341\u5206\u6709\u7528\uff1a\nwget https:\/\/raw.githubusercontent.com\/reorx\/httpstat\/master\/httpstat.py \u540c\u65f6\uff0c\u7531\u4e8e\u672c\u9879\u76ee\u662f cURL \u7684\u4e8c\u6b21\u5305\u88c5\uff0c\u5176\u5185\u90e8\u4ecd\u65e7\u901a\u8fc7 curl \u547d\u4ee4\u5b9e\u73b0\uff0c\u6240\u4ee5\u652f\u6301\u5927\u91cf cURL \u53c2\u6570\uff0c\u9762\u5bf9\u590d\u6742\u7684\u8bf7\u6c42\u6570\u636e\u540c\u6837\u5f97\u5fc3\u5e94\u624b\uff0c\u4f8b\u5982\uff1a\nhttpstat httpbin.org\/post -X POST --data-urlencode "a=b" -v \u53e6\u5916\uff0c\u8be5\u9879\u76ee\u8fd8\u6709\u5176\u5b83\u8bed\u8a00\u7248\u672c\uff0c\u4f8b\u5982\uff1a\n Go: davecheney\/httpstat Bash: b4b4r07\/httpstat Node.js: yosuke-furukawa\/httpstat PHP: talhasch\/php-httpstat \u901a\u8fc7\u67e5\u770b\u6e90\u7801\u8fdb\u884c\u4e00\u756a\u6bd4\u8f83\uff0c\u5176\u4e2d Bash \u548c PHP \u7248\u672c\u5747\u91c7\u7528\u4e0e Python\uff08\u4e5f\u5c31\u662f\u539f\u7248\uff09\u540c\u6837\u7684\u5b9e\u73b0\u65b9\u5f0f\uff0c\u5373\u901a\u8fc7 curl \u547d\u4ee4\u5b9e\u73b0\uff1b\u800c Go \u548c Node.js \u7248\u672c\u5219\u4e0d\u4f9d\u8d56\u4e8e curl \u547d\u4ee4\uff0c\u76f4\u63a5\u4f7f\u7528\u7f51\u7edc\u5e93\u53d1\u8d77\u8bf7\u6c42\u5e76\u8f93\u51fa\u7edf\u8ba1\u6570\u636e\u3002\u8fd9\u4e24\u79cd\u5b9e\u73b0\u65b9\u5f0f\u5404\u6709\u4f18\u52a3\uff0c\u6211\u7684\u503e\u5411\u5982\u4e0b\uff1a\n Python \u7248\u672c\u9002\u5408\u6709 Python \u73af\u5883\uff0c\u4e14\u9700\u8981\u4e0e curl \u547d\u4ee4\u9ad8\u5ea6\u517c\u5bb9\u7684\u573a\u666f\u3002 Bash \u7248\u672c\u9002\u5408\u65e0 Python \u73af\u5883\uff0c\u4e14\u9700\u8981\u4e0e curl \u547d\u4ee4\u9ad8\u5ea6\u517c\u5bb9\u7684\u573a\u666f\u3002 Go \u7248\u672c\u65e0\u987b\u591a\u8a00\uff0c\u9002\u5408\u96f6\u4f9d\u8d56\u573a\u666f\u3002 Node.js \u548c PHP \u7248\u672c\uff0c\u7528\u4e8e\u5174\u8da3\u7231\u597d\u7814\u7a76\u5427\ud83d\ude02\u3002 \u76ee\u524d\uff0c\u6211\u5728\u6211\u7684 macOS \u4e0a\u5b89\u88c5\u4e86 Python \u7248\u672c\uff0c\u8def\u7531\u5668\u7b49\u7f51\u7edc\u8bbe\u5907\u4e0a\u5b89\u88c5\u4e86 Go \u7248\u672c\u3002\n\u6700\u540e\uff0c\u8be5\u9879\u76ee\u8fd8\u63d0\u4f9b\u4e86\u4e00\u4e9b\u73af\u5883\u53d8\u91cf\u7528\u4e8e\u8f93\u51fa\u901f\u5ea6\u7b49\uff0c\u4f8b\u5982\u901a\u8fc7 HTTP \u534f\u8bae\u4e0b\u8f7d CacheFly \u7684\u6587\u4ef6\u6765\u6d4b\u8bd5\u4e0b\u884c\u7f51\u901f\uff1a\nHTTPSTAT_SHOW_SPEED=true httpstat http:\/\/cachefly.cachefly.net\/10mb.test \u6709\u5174\u8da3\u5c31\u770b\u770b\u9879\u76ee\u6587\u6863\u5427\uff01\n","permalink":"https:\/\/wi1dcard.dev\/posts\/easier-curl-with-colors\/","summary":" reorx\/httpstat<\/a> \u662f\u4e00\u6b3e\u66f4\u52a0\u6e05\u6670\u6613\u8bfb\u7684 cURL \u5de5\u5177\u3002\u5176\u672c\u610f\u662f\u5c06 cURL \u8bf7\u6c42\u7684\u7edf\u8ba1\u6570\u636e\u56fe\u5f62\u5316\u3001\u53ef\u89c6\u5316\uff0c\u4f46\u4e5f\u53ef\u4f5c\u4e3a\u65e5\u5e38\u7684 HTTP \u5ba2\u6237\u7aef\u4f7f\u7528\u3002<\/p>","title":"\u66f4\u52a0\u6e05\u6670\u6613\u8bfb\u7684 cURL \u5de5\u5177"},{"content":"\u67e5\u770b Git \u63d0\u4ea4\u5386\u53f2\u7684\u5de5\u5177\u5343\u5343\u4e07\uff0c\u65e0\u8bba\u662f CLI \u8fd8\u662f GUI\u3002\u800c pomber\/git-history \u5219\u662f\u4e00\u6b3e\u80fd\u591f\u4ee5\u52a8\u753b\u5f62\u5f0f\u5feb\u901f\u3001\u76f4\u89c2\u5730\u5c55\u73b0 Git \u4ed3\u5e93\u5185\u6587\u4ef6\u53d8\u52a8\u5386\u53f2\u7684 Web \u5de5\u5177\u3002\n\u60ef\u4f8b\uff0c\u5148\u6765\u770b\u770b\u6548\u679c\u5427\uff1a\n\u4f60\u4e5f\u53ef\u4ee5 \u4eb2\u81ea\u8bd5\u8bd5\u770b\u3002\n\u76f8\u6bd4\u4e8e\u4e3b\u6d41\u7684 Blame \/ Annotation\uff0c\u8fd9\u79cd\u65b9\u5f0f\u53ef\u4ee5\u66f4\u52a0 \u8fc5\u901f\u76f4\u89c2 \u5730\u67e5\u770b\u5386\u53f2\u63d0\u4ea4\u5bf9\u4e8e\u6587\u4ef6\u7684\u53d8\u52a8\u5f71\u54cd\u3002\n\u8be5\u4f5c\u8005\u9664\u4e86\u5c06\u4ed3\u5e93\u5f00\u6e90\u5916\uff0c\u8fd8\u5c06\u9879\u76ee\u6258\u7ba1\u5728\u4e86 https:\/\/githistory.xyz\/\u3002\u6211\u4eec\u53ef\u4ee5\u6253\u5f00 GitHub \u4e0a\u7684\u4efb\u610f\u6587\u4ef6\uff0c\u7136\u540e\u5c06\u57df\u540d github.com \u66ff\u6362\u4e3a github.githistory.xyz \u5373\u53ef\u4f7f\u7528\u3002\n\u4f3c\u4e4e\u8fd8\u662f\u6709\u4e9b\u9ebb\u70e6\uff0c\u57df\u540d\u6bd4\u8f83\u957f\uff0c\u82e5\u662f\u77ed\u4e00\u4e9b\u5c31\u66f4\u68d2\u4e86\uff1b\u800c\u4e14\u76f4\u63a5\u5728\u5730\u5740\u680f\u4fee\u6539\u57df\u540d\u901a\u5e38\u6ca1\u6709\u8865\u5168\uff0c\u6bd4\u8f83\u75db\u82e6\u3002\n\u8be5\u9879\u76ee\u7ed9\u51fa\u53e6\u4e00\u4e2a\u65b9\u6848\uff1aChrome Extension \u5728\u6b64\uff0c\u6548\u679c\u5982\u4e0b\uff1a\n\u4ee5\u4e0a\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/animate-git-history-on-web\/","summary":" \u67e5\u770b Git \u63d0\u4ea4\u5386\u53f2\u7684\u5de5\u5177\u5343\u5343\u4e07\uff0c\u65e0\u8bba\u662f CLI \u8fd8\u662f GUI\u3002\u800c pomber\/git-history<\/a> \u5219\u662f\u4e00\u6b3e\u80fd\u591f\u4ee5\u52a8\u753b\u5f62\u5f0f\u5feb\u901f\u3001\u76f4\u89c2\u5730\u5c55\u73b0 Git \u4ed3\u5e93\u5185\u6587\u4ef6\u53d8\u52a8\u5386\u53f2\u7684 Web \u5de5\u5177\u3002<\/p>","title":"\u4ee5\u52a8\u753b\u65b9\u5f0f\u76f4\u89c2\u5730\u6d4f\u89c8 Git \u6587\u4ef6\u5386\u53f2"},{"content":"snibox\/snibox \u662f\u4e00\u6b3e\u4f7f\u7528 Ruby on Rails + Vuex \u7f16\u5199\u7684\u4ee3\u7801\u7247\u6bb5\u6258\u7ba1\u670d\u52a1\u3002\u5bf9\u4e8e\u4e00\u7ebf\u7a0b\u5e8f\u5458\u6765\u8bf4\uff0c\u7ecf\u5e38\u4f1a\u63a5\u89e6\u5230\u5927\u91cf\u7684\u4ee3\u7801\u7247\u6bb5\uff08Snippet\uff09\uff0c\u4e0a\u4f20\u5230 Gist \u65e0\u6cd5\u5b8c\u5168 Private\uff0c\u800c Snibox \u5219\u662f\u4e2a\u4e0d\u9519\u7684\u9009\u62e9\u3002\n\u6548\u679c \u53e6\u5916\uff0c\u8be5\u9879\u76ee\u8fd8\u6709\u4e2a \u5728\u7ebf Demo\uff0c\u7531\u4e8e\u6258\u7ba1\u4e8e\u514d\u8d39\u7684 Heroku \u670d\u52a1\uff0c\u6240\u4ee5\u9996\u6b21\u8bbf\u95ee\u53ef\u80fd\u9700\u8981\u5927\u6982 30 \u79d2\u65f6\u95f4\u542f\u52a8\u3002\n\u90e8\u7f72 Snibox \u5b98\u65b9\u63d0\u4f9b\u4e86\u4e00\u5957 Docker \u90e8\u7f72\u65b9\u6848\uff0c\u5305\u62ec dockerfile\u3001\u7f16\u6392\u5404\u9879\u670d\u52a1\u4f9d\u8d56\u7684 docker-compose.yml \u4ee5\u53ca\u7b80\u6613\u7684 Setup \u811a\u672c\uff1b\u4f60\u53ef\u4ee5\u5728 snibox\/snibox-docker \u4e0b\u8f7d\u5230\uff1a\ngit clone \u8fd9\u91cc\u6211\u4f7f\u7528 Git \u5c06\u8be5\u4ed3\u5e93\u76f4\u63a5\u514b\u9686\uff0c\u65b9\u4fbf\u4e0e\u8fdc\u7aef\u540c\u6b65\u3002\n\u5728 README.md \u6587\u4ef6\u5185\uff0c\u5b83\u63d0\u4f9b\u7684\u542f\u52a8\u547d\u4ee4\u662f\u8fd9\u6837\u7684\uff1a\n.\/bin\/setup .\/bin\/start \u5bf9\u4e8e\u4e0d\u660e\u4e0d\u767d\u7684\u811a\u672c\uff0c\u6211\u5728\u6267\u884c\u4e4b\u524d\u90fd\u6709\u5148\u770b\u4ee3\u7801\u7684\u4e60\u60ef\uff0c\u4ee5\u514d\u9020\u6210\u4e00\u4e9b\u672a\u77e5\u7684\u5f71\u54cd\uff08\u4f8b\u5982\u5b89\u88c5\u7cfb\u7edf\u5168\u5c40\u4f9d\u8d56\u3001\u4fee\u6539\u5916\u90e8\u6587\u4ef6\u7b49\uff09\u3002\n \u81ea\u4ece\u4f7f\u7528 Docker \u4e4b\u540e\uff0c\u5bf9\u6240\u6709\u7684\u4e00\u952e\u811a\u672c\u90fd\u4ea7\u751f\u4e86\u83ab\u540d\u7684\u6050\u60e7\u548c\u6392\u65a5\ud83d\ude02\u3002\n \u4e8e\u662f\u7ecf\u8fc7\u89c2\u5bdf\u53d1\u73b0\uff0cbin\/start \u5185\u7684\u811a\u672c\u53ea\u6709\u4e00\u884c\uff1a\ndocker-compose up \u6ca1\u4ec0\u4e48\u732b\u817b \u2014\u2014 \u4f9d\u7167 docker-compose.yml \u7684\u914d\u7f6e\u542f\u52a8\u5bb9\u5668\u3002\u518d\u6765\u770b bin\/setup\uff1a\n# ... echo "Copy .env.sample to .env:" # ... echo -e "\\nInject secret key:" # ... echo -e "\\nPull images:" # ... echo -e "\\nCreate database:" # ... echo -e "\\nRun migrations:" # ... echo -e "\\n${GREEN}Setup completed!${NC}" \u6211\u6458\u9009\u4e86\u4e00\u90e8\u5206\u5c55\u793a\uff0c\u4ece\u4ee5\u4e0a\u4ee3\u7801\u4e2d\u5927\u6982\u53ef\u5f97\u77e5\uff1a\u8be5\u811a\u672c\u4e3b\u8981\u5e2e\u6211\u4eec\u6267\u884c\u4e86\u4ee5\u4e0b\u4efb\u52a1\uff1a\n \u590d\u5236 .env.sample\uff08\u7c7b\u4f3c Laravel \u7684 .env.example \u6587\u4ef6\uff09\u5230 .env\u3002 \u5199\u5165 Secret Key\uff08\u7c7b\u4f3c Laravel \u7684 php artisan key:generate \u547d\u4ee4\uff09\u3002 \u62c9\u53d6 Docker \u955c\u50cf\u3002 \u521b\u5efa\u6570\u636e\u5e93\u5e76\u6267\u884c\u8fc1\u79fb\uff08\u7c7b\u4f3c Laravel \u7684 php artisan migrate\uff09\u3002 \u770b\u8d77\u6765\u8fd8\u662f\u5341\u5206\u6709\u5e2e\u52a9\u7684\uff0c\u867d\u7136\u6211\u89c9\u5f97\u5199\u6210\u8f85\u52a9\u811a\u672c\u4e0d\u5408\u9002\uff0c\u800c\u5e94\u8be5\u6253\u5305\u5728 Docker \u955c\u50cf\u5185\u3002\n\u6700\u540e\uff0c\u518d\u6765\u770b\u770b docker-compose.yml\uff0c\u6700\u9700\u8981\u6ce8\u610f\u7684\u662f\uff1a\nservices: frontend: image: snibox\/nginx-puma:1.13.8 ports: - "8000:80" # \u5c06\u955c\u50cf\u5185 80 \u7aef\u53e3\u6620\u5c04\u5230\u5bbf\u4e3b\u673a 8000 \u7aef\u53e3 # ... \u53ef\u901a\u8fc7\u4fee\u6539 8000 \u4e3a\u5176\u5b83\u503c\u6765\u6539\u53d8 Snibox \u7684\u8bbf\u95ee\u7aef\u53e3\uff0c\u6ce8\u610f\u907f\u514d\u51b2\u7a81\u3002\n\u6700\u540e\uff0c\u6211\u4eec\u9700\u8981\u505a\u7684\u5c31\u662f\u6267\u884c\u914d\u7f6e\u811a\u672c\u5e76\u542f\u52a8\u5373\u53ef\u3002\nbin\/setup docker-compose up \u4e2a\u4eba\u66f4\u52a0\u503e\u5411\u4e8e\u4f7f\u7528\u539f\u751f\u7684 docker-compose up\uff0c\u5982\u9700\u540e\u53f0\u8fd0\u884c\uff0c\u5219\u643a\u5e26 -d \u9009\u9879\u5373\u53ef\u3002\n\u7ed3\u8bed \u8be5\u4ed3\u5e93\u6682\u65f6\u8fd8\u5b58\u5728\u4e00\u4e9b\u5c0f\u95ee\u9898\uff0c\u76ee\u524d\u6211\u5df2\u7ecf\u63d0\u4ea4 PR\uff1a\n Move “docker-compose pull” up. Fix wrong commands, support pass through arguments. ","permalink":"https:\/\/wi1dcard.dev\/posts\/self-hosted-snippet-service\/","summary":" snibox\/snibox<\/a> \u662f\u4e00\u6b3e\u4f7f\u7528 Ruby on Rails + Vuex \u7f16\u5199\u7684\u4ee3\u7801\u7247\u6bb5\u6258\u7ba1\u670d\u52a1\u3002\u5bf9\u4e8e\u4e00\u7ebf\u7a0b\u5e8f\u5458\u6765\u8bf4\uff0c\u7ecf\u5e38\u4f1a\u63a5\u89e6\u5230\u5927\u91cf\u7684\u4ee3\u7801\u7247\u6bb5\uff08Snippet\uff09\uff0c\u4e0a\u4f20\u5230 Gist \u65e0\u6cd5\u5b8c\u5168 Private\uff0c\u800c Snibox \u5219\u662f\u4e2a\u4e0d\u9519\u7684\u9009\u62e9\u3002<\/p>","title":"\u52a8\u624b\u642d\u5efa\u4ee3\u7801\u7247\u6bb5\u6258\u7ba1\u670d\u52a1"},{"content":"soimort\/you-get \u548c iawia002\/annie \u662f\u4e24\u6b3e\u5341\u5206\u4e0d\u9519\u7684\u547d\u4ee4\u884c\u89c6\u9891\u4e0b\u8f7d\u5de5\u5177\uff0c\u652f\u6301\u5927\u91cf\u7b2c\u4e09\u65b9\u89c6\u9891\u7ad9\u3002\n\u8fd8\u8bb0\u5f97\u591a\u5e74\u524d\u4f7f\u7528 Windows \u7684\u65f6\u5019\uff0c\u7ef4\u68e0\u3001\u7855\u9f20\u7b49\u7b49\u89c6\u9891\u4e0b\u8f7d\u5668\u4eab\u8a89\u76db\u540d\uff0c\u5728\u5708\u5b50\u5185\u65e0\u4eba\u4e0d\u77e5\u65e0\u4eba\u4e0d\u6653\u3002\n\u540e\u6765\u968f\u7740\u56fd\u5185\u4e00\u5927\u6279\u7c7b\u4f3c 56 \u7b49\u89c6\u9891\u7f51\u7ad9\u7684\u5012\u95ed\uff0c\u4ee5\u53ca\u7248\u6743\u653f\u7b56\u539f\u56e0\uff0c\u5f88\u591a\u4e0b\u8f7d\u8f6f\u4ef6\u5f7b\u5e95\u505c\u6b62\u66f4\u65b0\u3002\u539f\u672c\u90a3\u4e9b\u7528\u7535\u8111\u770b\u89c6\u9891\u7684\u7528\u6237\uff0c\u4e5f\u6162\u6162\u6d41\u5411\u4e86\u624b\u673a\u3001\u667a\u80fd\u7535\u89c6\u3002\n\u521a\u521a\u53bb\u5b98\u7f51\u67e5\u770b\u8fd9\u4e24\u6b3e\u8f6f\u4ef6\u7684\u66f4\u65b0\u72b6\u6001\uff0c\u7ef4\u68e0\u505c\u7559\u5728 \u7248\u672c\uff1a2.1.4.1 \uff082017\u5e7411\u670801\u65e5\uff09\uff0c\u7855\u9f20\u505c\u7559\u5728 \u7248\u672c\u53f7: 0.4.8.1 [2017-07-30]\uff0c\u771f\u53ef\u8c13\u65f6\u4ee3\u7684\u5370\u8bb0\u554a\u3002\n\u540e\u6765\u8fc1\u79fb\u5230 macOS\uff0c\u867d\u8bf4\u56fe\u65b9\u4fbf\u7ecf\u5e38\u76f4\u63a5\u624b\u673a\u770b\u89c6\u9891\uff0c\u6709\u65f6\u8fd8\u662f\u6709\u300c\u4e0b\u8f7d\u300d\u7684\u9700\u6c42\u7684\uff08\u6bd4\u5982\u67d0\u4e9b\u770b\u8d77\u6765\u5c31\u4f1a\u88ab\u67e5\u6c34\u8868\u7684\u89c6\u9891\ud83e\udd14\uff09\u3002\u5728\u6478\u722c\u6eda\u6253\u4e2d\u627e\u5230\u4e86 you-get \u548c annie \u8fd9\u4e24\u6b3e\u5f00\u6e90\u7684\u89c6\u9891\u4e0b\u8f7d\u5de5\u5177\uff0c\u5206\u522b\u4f7f\u7528 Python \u548c Go \u8bed\u8a00\u7f16\u5199\u3002\n\u4e24\u6b3e\u5de5\u5177\u5747\u53ef\u901a\u8fc7 Homebrew \u8fdb\u884c\u5b89\u88c5\uff1a\nbrew install you-get brew install annie \u540e\u8005\u57fa\u4e8e Go\uff0c\u5b89\u88c5\u4e8c\u8fdb\u5236\u5305\u65f6\u96f6\u4f9d\u8d56\uff0c\u975e\u5e38\u5feb\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7 brew info <formula> \u6765\u67e5\u770b\u8be6\u7ec6\u4fe1\u606f\u3002\n\u8fd9\u4e24\u6b3e\u5de5\u5177\u6700\u300c\u65e0\u969c\u788d\u300d\u7684\u8bbe\u8ba1\u662f\uff1a\u65e0\u9700\u601d\u8003\u4efb\u4f55\u53c2\u6570\uff0c\u76f4\u63a5\u4e22\u4e00\u4e2a\u94fe\u63a5\u5c31\u80fd\u4e0b\u8f7d\u3002\nyou-get <url> annie <url> \u5bf9\u4e8e\u4e34\u65f6\u4f7f\u7528\u7684\u5de5\u5177\u6027\u9879\u76ee\u6765\u8bf4\uff0c\u6211\u89c9\u5f97\u8fd9\u662f\u4e2a\u5f88\u4f1f\u5927\u7684\u8bbe\u8ba1\uff1b\u80fd\u591f\u8ba9\u7528\u6237\u4e0d\u770b\u6587\u6863\u3001\u300c\u65e0\u8111\u5730\u300d\u987a\u7740\u81ea\u5df1\u65e5\u5e38\u7684\u601d\u7ef4\u5373\u53ef\u76f4\u63a5\u4f7f\u7528\u3002\n\u81f3\u4e8e\u652f\u6301\u7684\u7f51\u7ad9\uff0c\u9879\u76ee\u4e3b\u9875\u53ef\u4f9b\u53c2\u8003\uff1a\n youget - supported-sites annie - supported-sites \u6700\u540e\uff0c\u4e24\u5de5\u5177\u5747\u63d0\u4f9b\u5f3a\u5927\u7684\u53ef\u9009\u9879\uff0c\u751a\u81f3\u652f\u6301\u81ea\u52a8\u8f6c\u6362\u683c\u5f0f\uff0c\u611f\u5174\u8da3\u7684\u8bdd\u53bb\u770b\u770b\u6587\u6863\u5427\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/cli-video-downloader\/","summary":" soimort\/you-get<\/a> \u548c iawia002\/annie<\/a> \u662f\u4e24\u6b3e\u5341\u5206\u4e0d\u9519\u7684\u547d\u4ee4\u884c\u89c6\u9891\u4e0b\u8f7d\u5de5\u5177\uff0c\u652f\u6301\u5927\u91cf\u7b2c\u4e09\u65b9\u89c6\u9891\u7ad9\u3002<\/p>","title":"\u5728\u547d\u4ee4\u884c\u4e0b\u8f7d\u7b2c\u4e09\u65b9\u7f51\u7ad9\u7684\u89c6\u9891"},{"content":"tldr-pages\/tldr-cpp-client \u662f tldr-pages\/tldr \u7684 C++ \u5ba2\u6237\u7aef\u5b9e\u73b0\u3002\u540e\u8005\u6536\u96c6\u4e86\u4e00\u7cfb\u5217\u7b80\u5316\u7248\u672c\u7684\u547d\u4ee4\u8bf4\u660e\u624b\u518c\uff0c\u7528\u4e8e\u66ff\u4ee3 man \u547d\u4ee4\uff1b\u4e14\u9879\u76ee\u7531\u793e\u533a\u9a71\u52a8\uff0c\u4e5f\u5c31\u662f\u8bf4\u4efb\u4f55\u4eba\u90fd\u53ef\u4ee5\u63d0\u4ea4 PR \u6765\u5b8c\u5584\u5b83\u3002\nnvbn\/thefuck \u662f\u4e00\u6b3e\u57fa\u4e8e Python \u7f16\u5199\u7684\u547d\u4ee4\u884c\u5de5\u5177\uff0c\u53ef\u5feb\u901f\u4fee\u6b63\uff08\u6ce8\u610f\u4e0d\u662f\u4fee\u590d\uff09\u524d\u4e00\u6761\u547d\u4ee4\u7684\u7528\u6cd5\u9519\u8bef\uff0c\u4f7f\u62a5\u9519\u7684\u547d\u4ee4\u80fd\u591f\u6b63\u5e38\u8fd0\u884c\u3002\n\u8fd9\u4e24\u6b3e\u5de5\u5177\u5206\u522b\u63d0\u4f9b\u4e86 tldr \u548c fuck \u547d\u4ee4\u3002\ntldr \u5173\u4e8e TL;DR \u7684\u542b\u4e49\u53c2\u89c1 \u672c\u6587\u3002\n \u7528\u8fc7 man \u547d\u4ee4\u7684\u4eba\uff0c\u5e94\u8be5\u8fd8\u8bb0\u5f97\u88ab\u6ee1\u5c4f\u9009\u9879\u4ee5\u53ca\u96f6\u9ad8\u4eae\u652f\u914d\u7684\u6050\u60e7\u5427…\n\u4f8b\u5982 man tar\uff0c\u4f60\u4e0d\u5f97\u4e0d\u8bfb\u5b8c\u51e0\u4e4e\u6240\u6709\u53c2\u6570\u624d\u77e5\u9053\u300c\u5982\u4f55\u89e3\u538b\u4e00\u4e2a\u538b\u7f29\u5305\u300d\uff0c\u6216\u662f\u9009\u62e9\u6253\u5f00 Google \u641c\u7d22\u3002\n\u5bf9\u4e8e\u9700\u8981\u7cbe\u786e\u8c03\u53c2\u7684\u573a\u666f\uff0cman \u63d0\u4f9b\u7684\u8be6\u7ec6\u8bf4\u660e\u786e\u5b9e\u662f\u5b9e\u7528\u7684\u53c2\u8003\uff0c\u4f46\u591a\u6570\u60c5\u51b5\u6211\u4eec\u53ea\u662f\u60f3\u8981\u7b80\u5355\u5730\u5b8c\u6210\u67d0\u4e2a\u5e38\u89c1\u4efb\u52a1\uff0c\u518d\u53bb Google \u5b9e\u5728\u662f\u592a\u6d6a\u8d39\u65f6\u95f4\uff0c\u6709\u6ca1\u6709\u4ec0\u4e48\u529e\u6cd5\u80fd\u591f\u5728\u7ec8\u7aef\u300c\u4e00\u7ad9\u5f0f\u300d\u641e\u5b9a\u5462\uff1f\u6765\u8bd5\u8bd5 tldr \u5427\uff1a\n\u7b80\u5355\u660e\u4e86\u7684\u5b9e\u8df5\u4f8b\u5b50\uff01\u5373\u4fbf\u518d\u53bb\u770b man tar \u4e5f\u80fd\u591f\u6709\u9488\u5bf9\u6027\u5730\u9605\u8bfb\u4e00\u4e9b\u5e38\u7528\u7684\u9009\u9879\u3002\n\u8be5\u624b\u518c\u5728 GitHub \u6709\u4f17\u591a\u8bed\u8a00\u7684\u5ba2\u6237\u7aef\u5b9e\u73b0\u3002\u6211\u9009\u62e9\u7684\u662f C++ \u7248\u672c\uff0c\u539f\u56e0\u6709\u4e8c\uff1a\u5b98\u65b9\u7ef4\u62a4\uff0c\u4e14\u51e0\u4e4e\u80fd\u591f\u5728\u4efb\u4f55\u673a\u5668\u4e0a\u7f16\u8bd1\u4f7f\u7528\u3002\u5728 macOS \u4e2d\uff0c\u4f7f\u7528 Brew \u5b89\u88c5\u5373\u53ef\uff1a\nbrew install tldr \u4f60\u4e5f\u53ef\u4ee5\u53c2\u8003\u9879\u76ee\u4e3b\u9875\u9009\u62e9\u9002\u5408\u4f60\u7684\u7248\u672c\u3002\nfuck \u5148\u770b\u56fe\uff1a\n\u5c45\u7136\u8fd8\u6709\u8fd9\u79cd\u4e1c\u897f\u7684\u5b58\u5728\uff1f\uff01\u5728\u6211\u542c\u8bf4\u8be5\u9879\u76ee\u7684\u65f6\u5019\u771f\u7684\u60ca\u5446\u4e86\ud83d\ude02\u3002\n\u8be5\u5de5\u5177\u652f\u6301\u7684\u547d\u4ee4\u975e\u5e38\u591a\uff0c\u5728\u9879\u76ee\u4e3b\u9875\u5c55\u793a\u4e86\u5f88\u957f\u7684\u4f8b\u5b50\u548c\u5217\u8868\uff1b\u540c\u65f6\uff0c\u4f60\u8fd8\u53ef\u4ee5\u521b\u5efa\u81ea\u5df1\u7684\u4fee\u6b63\u89c4\u5219\uff0c\u53ea\u9700\u51e0\u884c Python \u4ee3\u7801\u5373\u53ef\u3002\n\u9700\u8981\u6ce8\u610f\u7684\u4e00\u70b9\u662f\uff0cmacOS \u4e2d\u4f7f\u7528 Brew \u5b89\u88c5\u540e\u9700\u8bbe\u7f6e\u522b\u540d\uff1a\nbrew install thefuck echo 'eval $(thefuck --alias)' >> .bash_profile # \u6216 .bashrc \/ .zshrc \u7b49 \u6216\u4f7f\u7528\u5176\u5b83\u522b\u540d\u4ee3\u66ff fuck\uff1a\necho 'eval $(thefuck --alias f)' >> .bash_profile \u968f\u540e\u518d\u78b0\u5230\u62a5\u9519\uff0c\u5c1d\u8bd5\u4e0b fuck \u5e26\u6765\u7684\u300c\u5fc3\u7406\u300d\u548c\u300c\u8eab\u4f53\u300d\u4e0a\u7684\u53cc\u91cd\u723d\u5feb\u5427\uff1a\n$ Error ... WTF??? fuck! $ ... Finished! 2333\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/tldr-and-the-fuck-in-terminal\/","summary":" tldr-pages\/tldr-cpp-client<\/a> \u662f tldr-pages\/tldr<\/a> \u7684 C++ \u5ba2\u6237\u7aef\u5b9e\u73b0\u3002\u540e\u8005\u6536\u96c6\u4e86\u4e00\u7cfb\u5217\u7b80\u5316\u7248\u672c\u7684\u547d\u4ee4\u8bf4\u660e\u624b\u518c\uff0c\u7528\u4e8e\u66ff\u4ee3 nvbn\/thefuck<\/a> \u662f\u4e00\u6b3e\u57fa\u4e8e Python \u7f16\u5199\u7684\u547d\u4ee4\u884c\u5de5\u5177\uff0c\u53ef\u5feb\u901f\u4fee\u6b63\uff08\u6ce8\u610f\u4e0d\u662f\u4fee\u590d\uff09\u524d\u4e00\u6761\u547d\u4ee4\u7684\u7528\u6cd5\u9519\u8bef\uff0c\u4f7f\u62a5\u9519\u7684\u547d\u4ee4\u80fd\u591f\u6b63\u5e38\u8fd0\u884c\u3002<\/p>","title":"\u547d\u4ee4\u884c\u795e\u5668 - tldr \u548c fuck"},{"content":"\u4e00\u7bc7\u6df1\u5165\u8bb2\u89e3 Encode \/ Hash \/ Cryptography \/ Encrypt \u7684\u597d\u6587\u3002\u8f6c\u81ea\uff1ahttps:\/\/paragonie.com\/blog\/2015\/08\/you-wouldnt-base64-a-password-cryptography-decoded\u3002\nThere’s a ton of bad programming and security advice on the Internet. Some of the advice is bad because the author is misinformed, some because it emphasizes precision over clarity and most people wind up lost in the jargon.\nIf you feel that cryptography is a weird, complicated, and slightly intimidating subject for which your feelings might be best described as lukewarm (on a good day), we hope that by the time you finish reading this page, you will have a clear understanding of the terms and concepts people use when this topic comes up.\n Warning: The example snippets on this page are for illustrative purposes. Don’t use them in your projects. If you want a real-world example to reference, check out the snippets in our Chief Development Officer’s StackOverflow answer instead.\n Basic Cryptography Concepts for Developers Let’s start with a basic question: What exactly is a cryptographic feature? In the simplest terms we can muster: Cryptographic features use math to secure an application.\nDigging a little deeper: there are a plethora of cryptography algorithms and they can generally be grouped together based on two criteria:\n How much information must be supplied by the developer? What is the intended goal? Confidentiality? Integrity? Authenticity? Non-repudiation? Deniability? (These two are opposites.) Keyless Cryptography (0 keys) Hash Functions Secret-Key Cryptography (1 key) Secret-Key Message Authentication Secret-Key Encryption Authenticated Secret-Key Encryption Public-Key Cryptography (2 keys) Shared Secret Key Agreement Digital Signatures The First Rule of Cryptography: Don’t Implement it Yourself Developing cryptography features is best left to the experts. By all means, do feel free to tinker, but don’t deploy your experiments in production or share them with other developers who might deploy them in production.\nInstead, use a high-level cryptography library that experts have already vetted. Follow the link to read our PHP cryptography library recommendations.\nThe most simplest algorithm to consider is the cryptographic hash function, which accepts one input and returns a single deterministic fixed-size output.\nhash("sha256", ""); \/\/ e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 hash("sha256", "The quick brown fox jumps over the lazy dog"); \/\/ d7a8fbb307d7809469ca9abcb0082e4f8d5651e46d3cdb762d02d0bf37c9e592 When using a well-designed cryptographic hash function, such as BLAKE2 or SHA256, any change you make to the message will result in a drastically different hash output.\nhash("sha256", "The quick brown fox jumps over the lazy cog"); \/\/ e4c4d8f3bf76b692de791a173e05321150f7a345b46484fe427f6acc7ecc81be Simple hash functions are fast and deterministic; if you have any arbitrary message, you can calculate the hash output for that particular message. By themselves, they are mostly useful for error checking or as a building block for other cryptographic primitives, which most developers will not need to develop.\nCryptographic hash functions are one-way data transformations. Although you can easily calculate the hash output (often referred to as a message digest) for any arbitrary message, you cannot easily go from the hash output to the original message.\nSome hash functions (such as MD5) have weaker security guarantees and smaller output sizes. As a result, it’s almost trivial to calculate two different messages that will produce the same MD5 hash.\nMost cryptography algorithms aren’t as simple as hash functions. As a consequence, they are a lot more useful and can provide security guarantees beyond, “Yes, this output can be reproduced from this input.”\nConsequently, they typically require two pieces of input: The message and a secret key. A secret key should be a unique string of random bytes that both the sender and intended recipient should know, and nobody else.\nA keyed hash function, such as HMAC, is a special implementation of a hash function that accepts a message and a secret key and produces a Message Authentication Code (MAC).\nhash_hmac("sha256", "The quick brown fox jumps over the lazy dog", "secret key"); \/\/ 4a513ac60b4f0253d95c2687fa104691c77c9ed77e884453c6a822b7b010d36f hash_hmac("sha256", "The quick brown fox jumps over the lazy cog", "secret key"); \/\/ ed6b9bc9d64e4c923b2cc19c15fff329f343f30884935c10e617e0fe067adef1 hash_hmac("sha256", "The quick brown fox jumps over the lazy dog", "secret kez"); \/\/ 291579f3123c3126df04a57f78768b6290df93f979b86af25fecd98a9811da5a hash_hmac("sha256", "The quick brown fox jumps over the lazy cog", "secret kez"); \/\/ 298bb0244ebc987810de3892384bb4663742a540db2b3a875f66b09d068d1f64 Keyed hash functions are more useful than hash functions; only someone with the secret key can calculate a MAC for a given message. Therefore, if you transmit a message and a MAC for a given message, and never transmit the secret key, you can be reasonably sure that the message is authentic.\n Warning: Encryption without message authentication is vulnerable to chosen ciphertext attacks. Please read our whitepaper on Secure Data Encryption in PHP.\n Formally, encryption is the reversible process of transforming of a message (called the plaintext) and a secret key into a seemingly random string of bytes (called the ciphertext). i.e. encrypt($message, $key) should return a unique string of random bytes for a given pair of $message and $key.\nUnfortunately, simple secret-key encryption (also known as ECB mode) is not secure. If you encrypt the same (16-byte, for the popular AES encryption algorithm) block within a message with the same key in ECB mode, the ciphertext will repeat.\nModern secret-key encryption, therefore, actually accepts more than two pieces of information. Beyond the plaintext message and a secret key, they also require a unique Initialization Vector (IV, for CBC mode) or nonce (number to be used once, for CTR mode). The difference between a nonce and IV is subtle.\n None of the code on this page is secure; neither are any of the encryption keys.\n \/** * This code is for example purposes only. DO NOT USE IT. * Use https:\/\/github.com\/defuse\/php-encryption instead * * Demo: http:\/\/3v4l.org\/ih8om *\/ bin2hex( openssl_encrypt( \/* Message: *\/ "The quick brown fox jumps over the lazy dog", \/* Cipher algorithm and block mode: *\/ 'aes-128-ctr', \/* Encryption key: (don't use weak keys like this ever, it's just an example!): *\/ "\\x01\\x02\\x03\\x04" . "\\x05\\x06\\x07\\x08" . "\\x09\\x0a\\x0b\\x0c" . "\\x0d\\x0e\\x0f\\x10", \/* Constant that means "don't encode": *\/ OPENSSL_RAW_DATA, \/* Initialization Vector or Nonce -- don't ever actually use all NULL bytes: *\/ str_repeat("\\0", 16) \/\/ This is a really bad way to generate a nonce or IV. ) ); \/\/ 8f99e1315fcc7875325149dda085c504fc157e39c0b7f31c6c0b333136a7a8877c4971a5ce5688f94ae650 \/** * This code is for example purposes only. DO NOT USE IT. * Use https:\/\/github.com\/defuse\/php-encryption instead * * Demo: http:\/\/3v4l.org\/ZgW38 *\/ openssl_decrypt( \/* Message: *\/ hex2bin( "8f99e1315fcc7875325149dda085c504fc157e39c0b7f31c6c0b333136a7a8877c4971a5ce5688f94ae650" ), \/* Cipher algorithm and block mode: *\/ 'aes-128-ctr', \/* Encryption key: (don't use weak keys like this ever, it's just an example!): *\/ "\\x01\\x02\\x03\\x04" . "\\x05\\x06\\x07\\x08" . "\\x09\\x0a\\x0b\\x0c" . "\\x0d\\x0e\\x0f\\x10", \/* Constant that means "don't encode": *\/ OPENSSL_RAW_DATA, \/* Initialization Vector or Nonce -- don't ever actually use all NULL bytes: *\/ str_repeat("\\0", 16) \/\/ This is a really bad way to generate a nonce or IV. ); \/\/ The quick brown fox jumps over the lazy dog A more in-depth and less illustrative example (which properly generates IVs) is available here.\nFor a closer examination at symmetric-key encryption with OpenSSL, read our white paper.\nDecryption is only successful if the same IV\/nonce and secret key are used. However, only the key must be kept secret; the IV and nonce can even be broadcast with your encrypted message.\nIf you recall from our earlier blog post, <em>Using Encryption and Authentication Correctly<\/em>, secret-key encryption itself is vulnerable to tampering unless you combine it with authentication.\nThe only strategies proven to be secure are to use an AEAD mode or to always encrypt first then authenticate the encrypted data with a MAC.\nIf you are following an Encrypt-Then-MAC construction, you want to use two separate secret keys: One for the encryption, the other for the MAC. In other words, apply the previous two sections together:\n\/** * This code is for example purposes only. DO NOT USE IT. * Use https:\/\/github.com\/defuse\/php-encryption instead *\/ $nonce = random_bytes(16); $ciphertext = openssl_encrypt( \/* Message: *\/ "The quick brown fox jumps over the lazy dog", \/* Cipher algorithm and block mode: *\/ 'aes-128-ctr', \/* Encryption key: (don't use weak keys like this ever, it's just an example!) * Instead, you want to generate 16, 24, or 32 random bytes (i.e. random_bytes(16)) * on your own. It's generally a bad idea to copy and paste security code. *\/ "\\x01\\x02\\x03\\x04" . "\\x05\\x06\\x07\\x08" . "\\x09\\x0a\\x0b\\x0c" . "\\x0d\\x0e\\x0f\\x10", \/* Constants that mean "don't encode" and "we have no padding" to the OpenSSL API: *\/ OPENSSL_RAW_DATA + OPENSSL_ZERO_PADDING, \/* Initialization Vector or Nonce: *\/ $nonce ); \/\/ You should choose a better HMAC key than we did for this article: $mac = hash_hmac("sha256", $nonce.$ciphertext, "\\xff\\xfe\\xfd\\xfc" . "\\xfb\\xfa\\xf9\\xf8" . "\\xf7\\xf6\\xf5\\xf4" . "\\xf3\\xf2\\xf1\\xf0", true); echo bin2hex($nonce.$ciphertext.$mac); \/* 71b5546f 6cb857cd 0d8f8be3 f9312c74 <- Nonce (randomly chosen) 356146df 274552c2 e98d3008 b1dfa35c <- Ciphertext 60d6130d 9c9ca525 6c2f2f25 0b321176 06563174 c3b073a0 5ab263 4d1c7416 b086a316 a0474a05 84e3793c <- MAC a32fde09 0d82a5ef 213cb329 da3b5b06 *\/ It is important to exercise caution when combining cryptographic features. Our basic protocol as written above has no redundant features:\n Secret key encryption provides confidentiality such that it can only be read with the correct secret key. Keyed hash functions provide authentication (and consequently, message integrity) such that anyone possessing the correct secret key can recalculate the same MAC. A random IV\/nonce is used to make each encrypted message unique, even if the unencrypted message is the same. It should go without saying, but double-encrypting or double-authenticating when you need authenticated encryption would just be silly.\nPublic key cryptography is challenging for nontechnical people to understand, and even more challenging for technical people to explain correctly without burying the reader in mathematics or missing critical points. The end result is usually a lot of confusion and occasionally a false sense of understanding. (A fauxreka moment, if you will.)\nHere’s all you need to know right now: Unlike secret key encryption, which involves a single secret key that is held by both parties, in public key cryptography, each participant has two keys:\n Each participant has a private key, which they never share. Each participant also has a public key, which is mathematically related to their private key, which they share with everyone. It is unfortunate that the “key” terminology from secret key cryptography stuck when public key cryptography was discovered, as there aren’t very many physical systems that are intuitively similar to what’s going on here. Some people have attempted to explain public key cryptography using colors or detailed explanations. If you’re interested in the intimate details, we recommend both of the links in the previous sentence.\nFor everyone else, if you can accept these premises, understanding the rest isn’t hard:\n To use public key cryptography, you generate a key-pair and share the public key, but keep the private key to yourself. (In most cases, every participant does this.) There is only one private key for any given public key. Both of the keys in a given key-pair are related to each other, mathematically. Given a public key, it is almost impossible to figure out what the private key is. Given a private key, you can near-instantly calculate the related public key. Got it? Let’s build something with this understanding.\nLet’s say you want to talk to a friend over the Internet using secret key cryptography (which is much faster than public key cryptography), but you don’t want anyone else to read it. You and her haven’t already agreed upon a secret key. How do you do it?\nGlossing over the finer details (the color video above explains it fairly well), this is what you do:\n You send her your public key (yellow). She sends you her public key (light blue). Combine your private key (green) and her public key (blue) to form a shared secret key. She will combine her private key (red) with your public key (yellow) to form the same exact shared key. How? Modular arithmetic (classic Diffie Hellman) or multiplication along elliptic curves over finite fields (modern Elliptic Curve Diffie Hellman).\nDigital signature algorithms, such as EdDSA (Edwards-curve Digital Signature Algorithm), are one of the most useful innovations to result from public key cryptography.\nA digital signature is calculated from a message and a private key. Earlier algorithms (such as ECDSA) also required you to generate a unique random nonce for each message, but this was proven to be error-prone in the real world.\nAnyone else with a copy of your public key can verify that a particular message was signed by your private key. Unlike keyed hash functions, this verification takes place without requiring you to reveal your private key.\nCommon Misconceptions and Pitfalls Quick answer: Just use bcrypt. For PHP developers, this means <code>password_hash()<\/code> and <code>password_verify()<\/code> rather than crypt().\nMany developers think passwords should be encrypted, but this is false. Passwords should be hashed, not encrypted. Furthermore, don’t confuse password hashing algorithms with simple cryptographic hash functions. They’re not the same thing:\nUnlike cryptographic hashes, password hashes require more than one input parameter. But unlike encryption algorithms, password hashes are one-way deterministic trap door calculations. Also unlike secret-key encryption, the salt does not need to remain secret; it merely needs to be unique per user. The purpose of a unique salt per user is to thwart pre-computation and to make brute-force guessing passwords from a list of hashes more expensive.\nCan I encrypt my (bcrypt) password hashes?\nYes. If you run your web application and your database on separate hardware servers, this actually provides a substantial defense in depth. That’s the reasoning behind our password_lock library.\nDigital signatures can prove authenticity, cryptographic hash functions can not.\nThere is a nontrivial portion of technical users that will, upon downloading an executable from a website, recalculate the MD5 or SHA1 hash of the file and compare it to one displayed on the web page they downloaded the file from. If it matches, they will execute the file, fully trusting its contents to be genuine.\nIf both the file and the hash value are stored on the same server, this is a completely ludicrous waste of time: Any attacker who can alter your download can replace the hashes on the web page too. (If the file and hash are on separate servers, the situation is a little different, but the improvement is not significant enough to warrant eschewing a better solution.)\nAfter all, as we said above, hash functions like MD5 and SHA1 produce a deterministic fixed-size output for a given input. There are no secrets involved. When a solution does not increase security but makes people feel more secure, we call it security theater.\nCryptographic hash functions are security theater in this situation. You want digital signatures instead.\nTo improve security, instead of posting MD5\/SHA1 hashes, the software vendor can instead sign their package with their EdDSA private key and share their EdDSA public key far and wide. When you download the file, you should also download the signature and, using the verified public key, check that it is authentic.\nFor example: Minisign.\nA keyed hash function won’t work here either, as you would need to distribute the secret key in order for anyone to be able to verify the signature. If they have the secret key, they can forge their own signatures for maliciously altered message (in this case, executable file).\nDigital signatures are the best way to achieve assurance about the authenticity of a download. MD5\/SHA1 hashes are almost always useless here.\nA common beginner’s mistake is to use an encoding function, such as base64_encode(), to attempt to obfuscate information. Consider the following code, which was offered in a LinkedIn discussion about how to properly store passwords in a PHP web application:\nA lot of developers will either encode or compress information and assume their solution provides the same level of security as actual cryptographic features simply because the output is not human readable. It doesn’t.\nEncoding and compression algorithms are both reversible, keyless transformations of information. Encoding specifies how information should be represented in human-readable text. Compression attempts to reduce an input to as little space as possible. Both are useful, but they are not cryptographic features.\n Cryptographic hash algorithms (e.g. SHA256) are deterministic one-way algorithms that require zero keys. Keyed hashing algorithms (e.g. HMAC) are used for authentication in secret-key cryptography; requires one key. Secret-key encryption algorithms (e.g. AES-CTR) are used to transform messages so only someone possessing the secret key can reverse; requires one key. Shared secret agreement algorithms (e.g. ECDH) are used to negotiate a shared secret key while only requiring the public transmission of both party’s public keys. Requires four keys (two pairs of private\/public) to generate a fifth. Digital signature algorithms (e.g. Ed25519) are used to sign messages (with one’s private key) that anyone possessing the corresponding public key can validate. Requires two keys. Password hashing algorithms (e.g. bcrypt) are slow hashing algorithms designed specifically for being difficult to efficiently attack with a brute force search. Requires one secret input and a per-user salt. Encoding algorithms (e.g. Base64) are not cryptographic. Compression algorithms (e.g. gzip) are not cryptographic. Keep in Mind Don’t encrypt passwords. Instead, hash them with a password hashing algorithm. (You may encrypt the hashes.) Hash functions like MD5, SHA1, and SHA256 are not encryption. Anyone who uses the phrase “password encryption” probably needs to read this entire page carefully, because they are deeply mistaken. Secret-key encryption without message authentication is insecure (it’s vulnerable to chosen ciphertext attacks). For downloads: digital signatures prove authenticity, hashes do not. You want a Minsign or GPG signature, not an MD5 hash. We hope that this post serves as a good introduction to cryptography concepts. Our team publishes new posts about cryptography, application security, and web development in PHP anywhere from 2 to 5 times per month (usually on Friday). We also offer code review and technology consulting services.\n","permalink":"https:\/\/wi1dcard.dev\/posts\/you-wouldnt-base64-a-password-cryptography-decoded\/","summary":" \u4e00\u7bc7\u6df1\u5165\u8bb2\u89e3 Encode \/ Hash \/ Cryptography \/ Encrypt \u7684\u597d\u6587\u3002\u8f6c\u81ea\uff1ahttps:\/\/paragonie.com\/blog\/2015\/08\/you-wouldnt-base64-a-password-cryptography-decoded<\/a>\u3002<\/p>","title":"You Wouldn't Base64 a Password - Cryptography Decoded"},{"content":"\u8fd9\u53ef\u80fd\u662f\u622a\u81f3\u76ee\u524d\u6211\u8ba4\u4e3a\u6700\u4f18\u96c5\u7684\u535a\u5ba2\u56fe\u7247\u7ba1\u7406\u65b9\u6848\u6ca1\u6709\u4e4b\u4e00\u3002\n\u80cc\u666f \u65e9\u671f \u6700\u65e9\uff0c\u6211\u7684\u535a\u5ba2\u91c7\u7528\u5355\u53f0 PHP \u670d\u52a1\u5668\u642d\u5efa\u52a8\u6001\u535a\u5ba2\uff0c\u5c06\u56fe\u7247\u5b58\u50a8\u81f3\u670d\u52a1\u5668\u5e76\u5b9a\u671f\u5907\u4efd\u3002\u800c\u8bbf\u5ba2\u5219\u662f\u901a\u8fc7 CDN \u52a0\u901f\uff0c\u4ee5\u4fbf\u5feb\u901f\u8f7d\u5165\u56fe\u7247\u3002\n\u7f3a\u70b9\uff1a\n \u5907\u4efd\u4e0d\u53ca\u65f6\uff0c\u5927\u91cf\u5197\u4f59\u6570\u636e\u3002 \u56fe\u7247\u7ba1\u7406\u64cd\u4f5c\u4e0d\u4fbf\u3002 \u4e2d\u671f \u540e\u6765\uff0c\u5c1d\u8bd5\u6539\u7528\u4e03\u725b OSS + CDN \u5168\u5bb6\u6876\uff0c\u6570\u636e\u91cf\u548c\u6d41\u91cf\u4e0d\u5927\uff0c\u6240\u4ee5\u4e00\u76f4\u5728\u7528\u514d\u8d39\u989d\u5ea6\u3002\u53e6\u5916\uff0c\u622a\u6b62 2018 \u5e74\u7684\u67d0\u4e2a\u6708\uff0c\u65e9\u671f\u6ce8\u518c\u7684\u8001\u7528\u6237\u662f\u4e00\u76f4\u62e5\u6709 \u65e0\u9700\u5907\u6848 \u7684\u65e0\u9650\u5236\u6d4b\u8bd5\u57df\u540d\u7684\uff08\u7136\u800c\u540e\u6765\u5c31\u6536\u5230\u4e86\u5f3a\u5236\u56de\u6536\u7684\u90ae\u4ef6… \u56fd\u5185\u4f01\u4e1a\u679c\u7136\u4e0d\u53ef\u4fe1\uff09\u3002\n\u7f3a\u70b9\uff1a\n \u4e03\u725b\u514d\u8d39\u670d\u52a1\u771f\u5fc3\u4e0d\u9760\u8c31\uff0c\u56fd\u5916\u8bbf\u95ee\u5de8\u5361\uff0c\u5bfc\u81f4\u6211\u65e5\u5e38\u5728\u5899\u5916\u6d4f\u89c8\u81ea\u5df1\u535a\u5ba2\u90fd\u7279\u522b\u6162\u3002 \u7ba1\u7406\u8d77\u6765\u540c\u6837\u4e0d\u65b9\u4fbf\uff0c\u5907\u4efd\u4e5f\u4e0d\u65b9\u4fbf\u3002\u5bf9\u4e8e\u6211\u8fd9\u4e2a\u6d01\u7656\u5f3a\u8feb\u75c7\u6765\u8bf4\uff0c\u6709\u591a\u4f59 Dangling \u7684\u6587\u4ef6\u5b58\u5728\u7b80\u76f4\u4e0d\u53ef\u9976\u6055\u3002 \u6570\u636e\u653e\u5728\u56fd\u5185\u7684\u7b2c\u4e09\u65b9\u670d\u52a1\uff0c\u8bf4\u4e0d\u5b9a\u54ea\u5929\u6709\u4ec0\u4e48\u8fdd\u89c4\u88ab\u67e5\u6c34\u8868\uff0c\u65b9\u3002 \u540e\u671f \u66f4\u6362\u4e3a Hexo \u540e\uff0c\u4e00\u76f4\u5728\u7528\u5927\u4f6c\u7684\u56fe\u5e8a\uff1asm.ms\u3002\n\u76f4\u5230\u8fd1\u671f\uff0c\u5199\u535a\u5ba2\u65f6\u622a\u56fe\u5b8c\u6bd5\u60f3\u8981\u4e0a\u4f20\uff0c\u5374\u5076\u7136\u53d1\u73b0\u56fe\u5e8a\u9875\u9762\u63d0\u793a\uff1a\u7ef4\u62a4\u5347\u7ea7\u4e2d\uff0c\u8bf7\u7a0d\u540e\u8bbf\u95ee\u3002\n\u63a5\u4e0b\u6765\u5927\u7ea6\u4e00\u6574\u5929\u5de6\u53f3\uff0c\u4e00\u76f4\u5904\u4e8e\u65e0\u6cd5\u4e0a\u4f20\u7684\u72b6\u6001\u3002\u7528\u8fc7\u5404\u79cd\u514d\u8d39\u56fe\u5e8a\u7f51\u76d8\u7684\u6211\u4e0d\u7981\u5185\u5fc3\u4e00\u7d27\uff1a\u96be\u4e0d\u6210\uff0c\u53c8\u662f\u8981\u51c9\u4e86\uff1f\u4e8e\u662f\u8d76\u7d27\u628a\u4e4b\u524d\u4e0a\u4f20\u7684\u6240\u6709\u56fe\u7247\u7edf\u7edf\u6392\u67e5\u4e00\u904d\uff0c\u53d1\u73b0\u53ea\u6709\u6781\u4e2a\u522b\u56fe\u7247\u51fa\u73b0 404\u3002\n\u7f3a\u70b9\uff1a\n \u5982\u4e0a\u6587\u6240\u8bf4\uff0c\u514d\u8d39\u56fe\u5e8a\u4e0d\u5b58\u5728 SLA\uff0c\u53ef\u9760\u6027\u672a\u77e5\uff0c\u867d\u7136 sm.ms \u5927\u4f6c\u5df2\u7ecf\u6491\u4e86\u5f88\u4e45\uff0c\u4e5f\u76f8\u5bf9\u6bd4\u8f83\u9760\u8c31\uff0c\u4f46\u8fd8\u662f\u4e0d\u653e\u5fc3\u3002 \u6bcf\u6b21\u622a\u56fe\u5b8c\u6bd5\u8fd8\u9700\u8981\u4e0a\u4f20\uff0c\u9ebb\u70e6\u3002 \u867d\u7136\u76ee\u524d\u57fa\u672c\u672a\u53d7\u5230\u5f71\u54cd\uff0c\u4f46\u5374\u8ba9\u6211\u5ffd\u7136\u8b66\u9192 \u2014\u2014 \u6216\u8bb8\u662f\u65f6\u5019\u5c1d\u8bd5\u4e00\u4e0b\u4e0d\u4f7f\u7528\u5916\u90e8\u56fe\u5e8a\u4e86\u3002\n\u65b9\u6848 \u57fa\u672c\u601d\u8def\u5982\u4e0b\uff0c\u5927\u81f4\u5206\u4e3a\u4e24\u90e8\u5206\uff1a\n\u5b58\u50a8\uff08Git-LFS\uff09 \u6839\u636e\u4ee5\u4e0a\u95ee\u9898\uff0c\u9996\u5148\u9700\u8981\u89e3\u51b3\u7684\u5c31\u662f\u5982\u4f55\u5b58\u50a8\u3002\u76f4\u63a5\u4fdd\u5b58\u5728 Git Repo \u5185\u80af\u5b9a\u4e0d\u5408\u9002\u3002Git \u65e0\u6cd5 Diff \u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u5982\u679c\u5728\u535a\u5ba2\u66f4\u65b0\u548c\u91cd\u6784\u8fc7\u7a0b\u4e2d\u4f18\u5316\u3001\u4fee\u6539\u3001\u79fb\u52a8\u8fd9\u4e9b\u56fe\u7247\u6587\u4ef6\uff0c\u90a3\u5bf9\u4e8e Git \u4ed3\u5e93\u6765\u8bf4\u5c06\u662f\u300c\u7206\u70b8\u6027\u300d\u7684\uff0c\u4f60\u4f1a\u770b\u5230\u4ed3\u5e93\u5927\u5c0f\u6210\u500d\u589e\u957f\uff0cCI\/CD \u6267\u884c Clone \u548c Build \u65f6\u4f1a\u4e25\u91cd\u62d6\u6162\u901f\u5ea6\u3002\u867d\u7136\u6709\u65b9\u6cd5\u53ef \u540e\u671f\u6e05\u7406\uff0c\u4f46\u6211\u5e76\u4e0d\u559c\u6b22\u8fd9\u79cd\u602a\u5f02\u7684\u6298\u4e2d\u65b9\u6848\uff0c\u9664\u975e\u4ed3\u5e93\u5df2\u7ecf\u88ab\u4e8c\u8fdb\u5236\u6587\u4ef6\u300c\u6c61\u67d3\u300d\u3002\n\u9488\u5bf9\u8fd9\u4e2a\u95ee\u9898\uff0cGit-LFS \u662f\u4e2a\u4e0d\u9519\u7684\u89e3\u51b3\u65b9\u6848\u3002\u5b83\u662f\u4e00\u4e2a Git \u63d2\u4ef6\uff0c\u662f\u7531 GitHub \u800c\u975e Git \u5b98\u65b9\u63a8\u51fa\uff0c\u5c3d\u7ba1\u5b98\u7f51\u98ce\u683c\u7684\u786e\u5f88\u50cf\ud83d\ude02\u3002\n\u8be5\u9879\u76ee\u7684\u57fa\u672c\u539f\u7406\u5f88\u7b80\u5355\uff0c\u5728\u672c\u5730 Git \u4e0a\u5b89\u88c5\u4e00\u7cfb\u5217 Hooks\uff0c\u901a\u8fc7\u94a9\u5b50\u300c\u62e6\u622a\u300d\u5404\u7c7b\u64cd\u4f5c\uff0c\u4f8b\u5982 Push \/ Pull \/ Checkout\u3002\u5728\u6267\u884c\u8fd9\u4e9b\u64cd\u4f5c\u65f6\uff0c\u81ea\u52a8\u4ece Git-LFS \u670d\u52a1\u5668\u4e0b\u8f7d\u7531\u5176\u7ba1\u7406\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u3002\n\u5728\u771f\u6b63\u7684 Git \u4ed3\u5e93\u5185\uff0c\u5b9e\u9645\u4e0a\u53ea\u4fdd\u7559\u8be5\u4e8c\u8fdb\u5236\u6587\u4ef6\u7684\u54c8\u5e0c\u7b49\u6570\u636e\u3002\u800c\u5b9e\u5b9e\u5728\u5728\u7684\u6587\u4ef6\u6570\u636e\u5b58\u50a8\u5728 Git-LFS \u670d\u52a1\u5668\u5185\uff0c\u5728\u9700\u8981\u7684\u65f6\u5019\u624d\u4e0b\u8f7d\u3002\u8fd9\u6837\u65e2\u8282\u7701\u4ed3\u5e93\u7684\u5b58\u50a8\u7a7a\u95f4\uff0c\u53e6\u4e00\u65b9\u9762\u4e5f\u80fd\u8282\u7701\u4f60\u7684\u65f6\u95f4\u548c\u5e26\u5bbd\u3002\n\u5b89\u88c5\u4f7f\u7528\u6781\u5176\u7b80\u5355\uff0c\u4ee5 macOS \u4e3a\u4f8b\uff1a\nbrew install git-lfs git lfs install # \u5b89\u88c5 Hooks cd your-repo \u544a\u77e5 LFS \u8ffd\u8e2a\u67d0\u4e9b\u6587\u4ef6\uff0c\u53ef\u4f7f\u7528\u7c7b\u4f3c .gitignore \u6587\u4ef6\u5185\u7684 glob \u8bed\u6cd5\uff0c\u4ee5 *.png \u4e3a\u4f8b\uff1a\ngit lfs track "*.png" \u4ee5\u4e0a\u547d\u4ee4\u4f1a\u521b\u5efa .gitattributes \u6587\u4ef6\uff0c\u4e0d\u8981\u5220\u9664\u5b83\uff0c\u5e76\u786e\u4fdd\u63d0\u4ea4\u5230\u4ed3\u5e93\u5185\u3002\n\u597d\u4e86\uff0c\u63a5\u4e0b\u6765\u6b63\u5e38\u6267\u884c\u5176\u5b83 Git \u64cd\u4f5c\u5373\u53ef\u3002Push \u5230 GitHub \u540e\uff0c\u5728 Web \u9875\u9762\u6253\u5f00\u4f60\u7684\u6587\u4ef6\uff0c\u53ef\u770b\u5230\u4ee5\u4e0b\u5b57\u6837\uff1a\n Stored with Git LFS\n \u8bf4\u660e\u6587\u4ef6\u5df2\u7ecf\u88ab Git-LFS \u63a5\u7ba1\u5e76\u5b58\u50a8\u5566\u3002\n\u6700\u540e\uff0c\u9700\u8981\u6ce8\u610f\u4e00\u70b9\uff1a\u7531\u4e8e Git-LFS \u662f\u4e00\u4e2a\u300c\u7b2c\u4e09\u65b9\u6807\u51c6\u4e0e\u5b9e\u73b0\u300d\uff0c\u6545\u5e76\u4e0d\u662f\u6240\u6709 Git \u670d\u52a1\u90fd\u652f\u6301 LFS \u5b58\u50a8\u3002\n\u65b0\u589e\uff08Shell \u811a\u672c\uff09 \u6211\u5e73\u65f6\u4f7f\u7528 macOS \u81ea\u5e26\u7684 Screenshot \u5de5\u5177\uff0c\u4e0e\u591a\u6570\u622a\u56fe\u5de5\u5177\u7c7b\u4f3c\uff0c\u5b83\u53ef\u4ee5\u5c06\u56fe\u7247\u5b58\u50a8\u81f3\u526a\u8d34\u677f\u3002\u90a3\u4e48\uff0c\u5982\u4f55\u5feb\u901f\u5c06\u526a\u8d34\u677f\u5185\u7684\u56fe\u7247\u8f93\u51fa\u4e3a\u6587\u4ef6\uff0c\u4e14\u6309\u7167\u4e00\u5b9a\u683c\u5f0f\u7ec4\u7ec7\u6587\u4ef6\u540d\u5462\uff1f\u8fd9\u9700\u8981\u4e00\u70b9\u5c0f\u6280\u5de7\u3002\n\u63a8\u8350\u4e00\u4e2a\u540d\u4e3a jcsalterego\/pngpaste \u7684\u5c0f\u5de5\u5177\uff0c\u987e\u540d\u601d\u4e49\uff0c\u5b83\u5c31\u50cf macOS \u4e0b\u7684 pbpaste \u4e00\u6837\uff0c\u53ef\u4ee5\u5728\u7ec8\u7aef\u5feb\u901f\u8bfb\u53d6\u526a\u8d34\u677f\u5e76\u5bfc\u51fa\uff0c\u6b63\u5982\u5728\u9879\u76ee\u9996\u9875\u4e0a\u63cf\u8ff0\u7684\u90a3\u6837\uff1a\n Paste PNG into files, much like pbpaste does for text.\n \u63a5\u4e0b\u6765\uff0c\u6211\u9700\u8981\u4e00\u4e2a\u300c\u5c0f\u811a\u672c\u300d\uff0c\u8fdb\u884c\u4e00\u70b9\u5305\u88c5\u5de5\u4f5c\uff0c\u6211\u5c06\u5b83\u4fdd\u5b58\u4e3a .\/image.sh\uff1b. \u4e3a Hexo \u535a\u5ba2\u7684\u6839\u76ee\u5f55\uff0c\u4e0b\u540c\u3002\n#!\/bin\/bash -eu dir=$(dirname $0) # \u8be5\u811a\u672c\u6240\u5728\u76ee\u5f55\uff0c\u7528\u4e8e\u5b9a\u4f4d\u56fe\u7247\u5b58\u50a8\u8def\u5f84\uff0c\u53ef\u66ff\u6362\u4e3a\u5176\u5b83 tmp_file=$(mktemp) # \u751f\u6210\u4e34\u65f6\u6587\u4ef6\u8def\u5f84 pngpaste $tmp_file # \u5c06\u526a\u8d34\u677f\u56fe\u7247\u4fdd\u5b58\u81f3\u4e34\u65f6\u6587\u4ef6 hash=$(md5 < $tmp_file) # \u8ba1\u7b97\u56fe\u7247\u7684\u54c8\u5e0c\u503c\uff0c\u7528\u4e8e\u552f\u4e00\u6587\u4ef6\u540d img="\/images\/$hash.png" # \u62fc\u63a5\u56fe\u7247 URI mv $tmp_file "$dir\/source$img" # \u5c06\u4e34\u65f6\u6587\u4ef6\u79fb\u52a8\u4e3a\u6700\u7ec8\u56fe\u7247\u6587\u4ef6 echo "" | tee >(pbcopy) # \u751f\u6210 Markdown \u683c\u5f0f\u7684\u56fe\u7247\u94fe\u63a5\uff0c\u8f93\u51fa\u81f3 STDOUT \u540c\u65f6\u5199\u5165\u526a\u8d34\u677f \u641e\u5b9a\u3002\u6b64\u5904\u4e0d\u91c7\u7528\u62fc\u63a5\u65f6\u95f4\u6216\u968f\u673a\u5b57\u7b26\u4e32\uff0c\u800c\u662f\u54c8\u5e0c\u503c\u4f5c\u4e3a\u6587\u4ef6\u540d\u7684\u539f\u56e0\uff0c\u662f\u4e3a\u4e86\u4fdd\u8bc1\u5e42\u7b49\u6027\u3002\n\u6700\u7ec8\u6548\u679c\u4e3a\uff0c\u622a\u56fe\u8f6f\u4ef6\u622a\u5c4f\uff0c\u7ec8\u7aef\u5185\u8fd0\u884c .\/image.sh \u5373\u53ef\u5c06\u526a\u8d34\u677f\u5185\u7684\u56fe\u7247\u4fdd\u5b58\u4e3a .\/source\/images\/$hash.png\uff0c\u7b80\u5355\u5230\u51e0\u4e4e\u4e0d\u80fd\u518d\u7b80\u5355\u3002\n\u5b8c\u7f8e\u89e3\u51b3 Git \u4ed3\u5e93\u5927\u5c0f\u95ee\u9898\u3001\u4e0a\u4f20\u9ebb\u70e6\u95ee\u9898\uff1b\u6700\u91cd\u8981\u7684\u662f\uff0c\u56fe\u7247\u7ba1\u7406\u4e0e\u672c\u5730\u6587\u4ef6\u64cd\u4f5c\u65e0\u5f02\uff08\u5b9e\u9645\u5c31\u662f\u5728\u64cd\u4f5c\u672c\u5730\u6587\u4ef6\ud83d\ude02\uff09\uff0c\u65e0\u7f1d\u4f7f\u7528\u5404\u7c7b\u547d\u4ee4\u6216 GUI\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/manage-blog-images-with-git-lfs\/","summary":" \u8fd9\u53ef\u80fd\u662f\u622a\u81f3\u76ee\u524d\u6211\u8ba4\u4e3a\u6700\u4f18\u96c5\u7684\u535a\u5ba2\u56fe\u7247\u7ba1\u7406\u65b9\u6848\u6ca1\u6709\u4e4b\u4e00\u3002<\/p>","title":"\u4f7f\u7528 Git-LFS + \u4e00\u70b9\u6280\u5de7\u7ba1\u7406\u535a\u5ba2\u56fe\u7247"},{"content":"\u641c\u96c6\u4e00\u4e9b GitHub \u5e38\u89c1\u9a9a\u7f29\u5199\uff0c\u4ee5\u5907\u67e5\u8be2\u4f7f\u7528\u3002\n \u539f\u6587\u94fe\u63a5\uff1ahttps:\/\/farer.org\/2017\/03\/01\/code-review-acronyms\/\n PR: Pull Request. \u62c9\u53d6\u8bf7\u6c42\uff0c\u7ed9\u5176\u4ed6\u9879\u76ee\u63d0\u4ea4\u4ee3\u7801 LGTM: Looks Good To Me. \u6715\u77e5\u9053\u4e86 \u4ee3\u7801\u5df2\u7ecf\u8fc7 review\uff0c\u53ef\u4ee5\u5408\u5e76 SGTM: Sounds Good To Me. \u548c\u4e0a\u9762\u90a3\u53e5\u610f\u601d\u5dee\u4e0d\u591a\uff0c\u4e5f\u662f\u5df2\u7ecf\u901a\u8fc7\u4e86 review \u7684\u610f\u601d WIP: Work In Progress. \u4f20\u8bf4\u4e2d\u63d0 PR \u7684\u6700\u4f73\u5b9e\u8df5\u662f\uff0c\u5982\u679c\u4f60\u6709\u4e2a\u6539\u52a8\u5f88\u5927\u7684 PR\uff0c\u53ef\u4ee5\u5728\u5199\u4e86\u4e00\u90e8\u5206\u7684\u60c5\u51b5\u4e0b\u5148\u63d0\u4ea4\uff0c\u4f46\u662f\u5728\u6807\u9898\u91cc\u5199\u4e0a WIP\uff0c\u4ee5\u544a\u8bc9\u9879\u76ee\u7ef4\u62a4\u8005\u8fd9\u4e2a\u529f\u80fd\u8fd8\u672a\u5b8c\u6210\uff0c\u65b9\u4fbf\u7ef4\u62a4\u8005\u63d0\u524d review \u90e8\u5206\u63d0\u4ea4\u7684\u4ee3\u7801\u3002 PTAL: Please Take A Look. \u4f60\u6765\u7785\u7785\uff1f\u7528\u6765\u63d0\u793a\u522b\u4eba\u6765\u770b\u4e00\u4e0b TBR: To Be Reviewed. \u63d0\u793a\u7ef4\u62a4\u8005\u8fdb\u884c review TL;DR: Too Long; Didn’t Read. \u592a\u957f\u61d2\u5f97\u770b\u3002\u4e5f\u6709\u5f88\u591a\u6587\u6863\u5728\u505a\u7b80\u7565\u63cf\u8ff0\u4e4b\u524d\u4f1a\u5199\u8fd9\u4e48\u4e00\u53e5 TBD: To Be Done(or Defined\/Discussed\/Decided\/Determined). \u6839\u636e\u8bed\u5883\u4e0d\u540c\u610f\u4e49\u6709\u6240\u533a\u522b\uff0c\u4f46\u4e00\u822c\u90fd\u662f\u8fd8\u6ca1\u641e\u5b9a\u7684\u610f\u601d \u6700\u65b0\u8865\u5145 \u539f\u6587\u94fe\u63a5\uff1ahttps:\/\/www.managertoday.com.tw\/english\/view\/52625\n ASAP\uff08as soon as possible \u76e1\u5feb\uff09 BID\uff08break it down \u7d30\u5206\u660e\u7d30\uff09 BTW\uff08by the way \u9806\u5e36\u4e00\u63d0\uff09 COB\uff08close of business \u4e0b\u73ed\u6642\uff09 EOB\uff08end of business \u4e0b\u73ed\u6642\uff09 EOD\uff08end of day \u4eca\u5929\u4ee5\u5167\uff09 DOE\uff08depending on experience \u8996\u5de5\u4f5c\u7d93\u9a57\u800c\u5b9a\uff09 ETA\uff08estimated time of arrival \u9810\u8a08\u5230\u9054\u6642\u9593\uff09 FAQ\uff08frequently asked questions \u5e38\u554f\u7684\u554f\u984c\uff09 FTE\uff08full-time employee \u5168\u8077\u54e1\u5de5\uff09 FWIW\uff08for what it\u2019s worth \u7121\u8ad6\u5982\u4f55\u3001\u4e0d\u7ba1\u6709\u6c92\u6709\u7528\uff09 FYI\uff08for your information \u4f9b\u4f60\u53c3\u8003\uff08\u90f5\u4ef6\u5e38\u7528\uff09 FYR\uff08for your reference \u4f9b\u4f60\u53c3\u8003\uff09 FYU\uff08for your use \u4f9b\u4f60\u4f7f\u7528\uff09 IAM\uff08in a meeting \u6703\u8b70\u4e2d\uff09 IMO\uff08in my opinion \u500b\u4eba\u6dfa\u898b\u3001\u5728\u6211\u770b\u4f86\uff09 LET\uff08leaving early today \u4eca\u5929\u63d0\u65e9\u8d70\uff09 LMK\uff08let me know \u8b93\u6211\u77e5\u9053\u3001\u901a\u77e5\u6211\uff09 MoM\uff08month over month \u6708\u5ea6\u6bd4\u8f03\uff09 MTD\uff08month to date \u6708\u521d\u5230\u73fe\u5728\uff09 OOO\uff08out of office \u4e0d\u5728\u8fa6\u516c\u5ba4\uff09 OT\uff08over time \u52a0\u73ed\uff09 OTP\uff08on the phone \u901a\u8a71\u4e2d\uff09 PA\uff08performance appraisal \u7e3e\u6548\u8003\u6838\uff09 POC\uff08point of contact \u9996\u8981\u806f\u7e6b\u4eba\uff09 PTE\uff08part-time employee \u517c\u8077\u96c7\u54e1\uff09 PTO\uff08paid time off \u5e36\u85aa\u4f11\u5047\uff09 NDA\uff08Non-disclosure agreement \u4fdd\u5bc6\u5408\u7d04\uff09 NRN\uff08no reply necessary \u4e0d\u9700\u56de\u8986\uff09 NSFW\uff08not safe for work \u4e0d\u9069\u5408\u5de5\u4f5c\u5834\u57df\uff09 RFD\uff08request for discussion \u8acb\u6c42\u8a0e\u8ad6\uff09 RSVP\uff08R\u00e9pondez s\u2019il vous plait \u6cd5\u6587\u7684\u8acb\u56de\u8986\uff09 TBA\uff08to be announced \u5f85\u516c\u4f48\uff09 TBD\uff08to be determined \u5f85\u6c7a\u5b9a\uff09 TCC\uff08teleconference call \u96fb\u8a71\u6703\u8b70\uff09 TED\uff08Tell me, explain to me, describe to me\uff09 TL;DR\uff08Too long didn\u2019t read \u592a\u9577\uff0c\u6c92\u8b80\uff09 TOS\uff08terms of service \u670d\u52d9\u689d\u6b3e\uff09 TYT\uff08take your time \u5225\u8457\u6025\u3001\u6162\u6162\u4f86\uff09 WFH\uff08work from home \u5728\u5bb6\u8fa6\u516c\uff09 WIIFM\uff08what\u2019s in it for me \u9019\u5c0d\u6211\u6709\u4ec0\u9ebc\u597d\u8655\uff1f\uff09 WOM\uff08word of mouth \u53e3\u7891\u50b3\u64ad\uff09 YTD\uff08year to date \u5e74\u5e95\u3001\u4eca\u5e74\u4e4b\u5167\uff09 ","permalink":"https:\/\/wi1dcard.dev\/posts\/github-abbrs-collection\/","summary":" \u641c\u96c6\u4e00\u4e9b GitHub \u5e38\u89c1\u9a9a\u7f29\u5199\uff0c\u4ee5\u5907\u67e5\u8be2\u4f7f\u7528\u3002<\/p>","title":"LGTM\uff08\uff1f\uff1f\uff1f\uff09\u8ff7\u4e4b\u9a9a\u7f29\u5199"},{"content":"hustcc\/lint-md \u662f\u4e00\u6b3e\u4e2d\u6587 Markdown \u5199\u4f5c\u89c4\u8303\u68c0\u67e5\u5de5\u5177\uff0c\u68c0\u67e5\u89c4\u5219\u6765\u6e90\u4e8e ruanyf\/document-style-guide\u3002\n\u914d\u5408 CI\/CD \u4f7f\u7528\uff0c\u5373\u80fd\u591f\u4ee5\u5b8c\u5168\u81ea\u52a8\u5316\u7684\u65b9\u5f0f\uff0c\u786e\u4fdd\u4f18\u79c0\u7684\u535a\u6587\u8d28\u91cf\uff0c\u957f\u671f\u4f7f\u7528\u8fd8\u53ef\u57f9\u517b\u826f\u597d\u7684\u5199\u4f5c\u4e60\u60ef\u3002\n\u51c6\u5907 \u9996\u5148\uff0c\u6211\u4eec\u9700\u8981\u719f\u6089\u8be5\u5de5\u5177\u3002\n# \u5168\u5c40\u5b89\u88c5 npm install -g lint-md # \u4f7f\u7528\u65b9\u6cd5\u5982\u4e0b lint-md <files> [--config <config_file>] files \u4e3a\u4e00\u4e2a\u6216\u591a\u4e2a\u9700\u68c0\u67e5\u7684\u6587\u4ef6\u8def\u5f84\u3002 config_file \u4e3a JSON \u683c\u5f0f\u7684\u914d\u7f6e\u6587\u4ef6\u8def\u5f84\u3002 \u5176\u914d\u7f6e\u6587\u4ef6\u683c\u5f0f\u5982\u4e0b\u3002\n{ "excludeFiles": [], \/\/ \u5ffd\u7565\u7684\u6587\u4ef6\u6216\u76ee\u5f55\u5217\u8868 "rules": { "no-empty-code": 1 \/\/ \u5b9a\u4e49\u89c4\u5219\u544a\u8b66\u7ea7\u522b \/\/ ... } } no-empty-code \u4e3a\u89c4\u5219\u540d\u79f0\uff0c\u5176\u503c\u4e0e\u544a\u8b66\u7ea7\u522b\u7684\u5bf9\u5e94\u5173\u7cfb\u5982\u4e0b\uff1a\n 0: Ignore \u5ffd\u7565\uff0c\u4e0d\u68c0\u67e5\u8be5\u89c4\u5219 1: Warning \u8b66\u544a\uff0c\u4f46\u8fdb\u7a0b\u9000\u51fa\u7801\u4e0d\u53d7\u5f71\u54cd\uff0c\u4f9d\u65e7\u4e3a\u96f6 2: Error \u9519\u8bef\uff0c\u9000\u51fa\u7801\u975e\u96f6\uff0c\u300c\u901a\u5e38\u300d\u4f1a\u4e2d\u65ad CI \u6d41\u7a0b\uff0c\u4e3a\u4f55\u300c\u901a\u5e38\u300d\u8be6\u89c1\u4e0b\u6587 \u8fc7\u7a0b \u5b98\u65b9\u6587\u6863\u63d0\u4f9b\u4e86\u4e00\u5957 Travis \u7684\u914d\u7f6e\u3002\nlanguage: node_js node_js: - "10" before_install: - npm i -g lint-md script: lint-md README.md \u5bf9\u4e8e\u6211\u7684\u535a\u5ba2\u5df2\u7ecf\u5927\u91cf\u4f7f\u7528 Node.js\uff0c\u4e14\u5305\u542b package.json\uff0c\u6211\u66f4\u503e\u5411\u4e8e\u4f7f\u7528\u4ee5\u4e0b\u7684\u914d\u7f6e\uff0c\u800c\u4e0d\u662f\u5168\u5c40\u5b89\u88c5\uff1a\nlanguage: node_js node_js: - "10" install: - npm install - export PATH=$PATH:$(pwd)\/node_modules\/.bin script: lint-md source\/_posts\/* --config lint-md.json # \u9002\u7528\u4e8e Hexo \u535a\u5ba2 \u53ef\u4ee5\u770b\u5230\uff0c\u6211\u4f7f\u7528 npm install \u547d\u4ee4\u5b89\u88c5\u6240\u6709 package.json \u4e2d\u58f0\u660e\u7684\u4f9d\u8d56\uff0c\u968f\u540e\u5c06 node_modules\/.bin \u76ee\u5f55\u8ffd\u52a0\u81f3 PATH \u73af\u5883\u53d8\u91cf\u3002\n\u8fd9\u6837\uff0c\u53ea\u9700\u6267\u884c\u4e00\u6b21 npm install\uff0c\u5728\u6dfb\u52a0\u540e\u7eed\u4f9d\u8d56\u65f6\u7edf\u4e00\u58f0\u660e\u5728 package.json \u5373\u53ef\uff0c\u4fdd\u6301\u914d\u7f6e\u6587\u4ef6\u7b80\u7565\u6613\u8bfb\u3002\n\u53e6\u5916\uff0c\u4fee\u6539 $PATH \u662f\u4e3a\u4e86\u8fbe\u5230\u4e0e\u5168\u5c40\u5b89\u88c5\u7edf\u4e00\u7684\u6548\u679c\u3002\u5373\u5728\u4f7f\u7528\u4f9d\u8d56\u7684\u53ef\u6267\u884c\u6587\u4ef6\u65f6\uff0c\u65e0\u9700 .\/node_modules\/.bin\/foo-bar \u800c\u53ea\u8981 foo-bar\u3002\nsource\/_posts\/* \u662f Hexo \u535a\u5ba2\u9ed8\u8ba4\u7684 Markdown \u6587\u7ae0\u6e90\u7801\u76ee\u5f55\uff0clint-md.json \u662f\u6211\u81ea\u5df1\u521b\u5efa\u7684\u914d\u7f6e\u6587\u4ef6\uff0c\u5185\u5bb9\u5982\u4e0b\uff1a\n{ "excludeFiles": [], "rules": { "no-empty-code-lang": 0, "no-trailing-punctuation": 0 } } \u8be5\u914d\u7f6e\u6587\u4ef6\u53ef\u6839\u636e\u4f60\u7684\u9700\u8981\u81ea\u5b9a\u4e49\uff0c\u4ee5\u4e0a\u5ffd\u7565\u7684\u4e24\u4e2a\u89c4\u5219\u662f\u6211\u8ba4\u4e3a\u6ca1\u4ec0\u4e48\u5fc5\u8981\u7684\uff0c\u4ec5\u4f9b\u53c2\u8003\u3002\n\u53e6\u5916\u9700\u8981\u6ce8\u610f\u7684\u4e00\u70b9\u662f\uff0c\u6839\u636e Travis-CI \u4e2d\u5bf9\u4e8e Job Lifecycle \u7684\u6587\u6863\u63cf\u8ff0\uff1a\n If any of the commands in the first four phases of the job lifecycle return a non-zero exit code, the build is broken: If before_install, install or before_script returns a non-zero exit code, the build is errored and stops immediately. If script returns a non-zero exit code, the build is failed, but continues to run before being marked as failed.\n \u4e5f\u5c31\u662f\u8bf4\uff0c\u5982\u679c\u4f60\u7684 Travis \u914d\u7f6e\u6587\u4ef6\u50cf\u8fd9\u6837\uff0c\u5728 script \u5185\u6709\u591a\u6761\u547d\u4ee4\uff1a\nlanguage: node_js node_js: - "10" install: # ... script: - lint-md - hexo generate - hexo deploy # ... \u90a3\u4e48\u5982\u679c lint-md \u5931\u8d25\u540e\uff0c\u867d\u7136\u8fd4\u56de\u4e86\u975e\u96f6\u7684\u9000\u51fa\u7801\uff0c\u4f46 hexo generate \u4ee5\u53ca hexo deploy \u7b49\u540e\u7eed\u547d\u4ee4\u4f9d\u65e7\u4f1a\u6267\u884c\uff01\u53ea\u4e0d\u8fc7\u6d41\u7a0b\u7ed3\u675f\u540e\u4f1a\u6807\u8bb0\u8be5 Job \u4e3a\u5931\u8d25\uff08Failed\uff09\u72b6\u6001\u3002\n\u4e5f\u5c31\u662f\u8bf4\uff0c\u5982\u679c\u4f60\u7684 Markdown \u4e2d\u5b58\u5728\u4e0d\u89c4\u8303\u7684\u6587\u672c\uff0c\u88ab lint-md \u68c0\u51fa\u9519\u8bef\u540e\uff0c\u540e\u7eed\u7684\u751f\u6210\u548c\u90e8\u7f72\u6d41\u7a0b\u4f9d\u65e7\u4f1a\u7167\u5e38\u6267\u884c\uff01\u8fd9\u5c31\u8fbe\u4e0d\u5230\u300c\u5b58\u5728\u95ee\u9898\u5219\u4e0d\u53d1\u5e03\u300d\u7684\u6548\u679c\u4e86\u3002\u9488\u5bf9\u8fd9\u4e2a\u95ee\u9898\uff0c\u89e3\u51b3\u65b9\u6848\u6709\u4e8c\uff1a\n \u5728 script \u5185\u7684\u6240\u6709\u547d\u4ee4\u524d\uff0c\u6267\u884c set -e\uff0c\u8be6\u89c1 https:\/\/vaneyckt.io\/posts\/safer_bash_scripts_with_set_euxo_pipefail\/\u3002 \u6839\u636e\u4e0a\u6587\u5f15\u7528\u7684\u6587\u6863\u8bf4\u660e\uff0c\u5c06 lint-md \u547d\u4ee4\u79fb\u52a8\u5230 before_script \u5185\u3002 \u5176\u4e2d\uff0c\u79fb\u52a8\u5230 before_script \u4f1a\u9020\u6210\u4e00\u4e2a\u5fae\u5c0f\u7684\u5f71\u54cd \u2014\u2014 \u82e5\u547d\u4ee4\u6267\u884c\u8fd4\u56de\u975e\u96f6\u9000\u51fa\u7801\uff0c\u90a3\u4e48\u8be5 Job \u4f1a\u88ab\u7acb\u5373\u6807\u8bb0\u4e3a\u9519\u8bef\uff08Error\uff09\u72b6\u6001\u5e76\u505c\u6b62\u6267\u884c\uff0c\u800c\u975e\u5931\u8d25\uff08Failed\uff09\u72b6\u6001\u3002\u8bf7\u6ce8\u610f Travis-CI \u4e2d\u8fd9\u70b9\u5c0f\u533a\u522b\u3002\n\u95ee\u9898 \u76ee\u524d\u8be5\u9879\u76ee\u8fd8\u4e0d\u591f\u5b8c\u5584\uff0c\u53c2\u89c1\uff1a\nIssue #33, #34\u3002\n\u62d3\u5c55 \u5f53\u7136\uff0c\u8be5\u5de5\u5177\u4e5f\u53ef\u4ee5\u672c\u5730\u4f7f\u7528\uff0c\u8fd8\u5177\u5907 --fix \u9009\u9879\uff0c\u80fd\u591f\u81ea\u52a8\u4fee\u590d\u4e0d\u7b26\u5408\u89c4\u8303\u7684\u6587\u672c\u3002\n\u53e6\u5916\uff0cdkhamsing\/awesome_bot \u662f\u4e00\u6b3e\u9a8c\u8bc1\u6587\u4ef6\u5185 URL \u662f\u5426\u6709\u6548\u7684\u5de5\u5177\u3002\u539f\u672c\u7528\u4e8e\u5404\u7c7b awesome \u9879\u76ee\u68c0\u67e5\u5176\u94fe\u63a5\u3001\u4ee5\u53ca\u6536\u5230 PR \u65f6\uff0c\u81ea\u52a8\u68c0\u67e5\u5305\u542b\u7684 URLs \u662f\u5426\u53ef\u8bbf\u95ee\u3002\u540c\u6837\uff0c\u4e5f\u53ef\u4ee5\u7ed9 Markdown \u535a\u5ba2\u4f7f\u7528\uff0c\u80fd\u591f\u786e\u4fdd\u535a\u6587\u5185\u7684\u94fe\u63a5\u53ef\u7528\u3002\n\u867d\u7136\uff0c\u6211\u5728\u672c\u5730\u4f7f\u7528\u8be5\u5de5\u5177\u5bf9\u6240\u6709\u6587\u7ae0\u7684\u94fe\u63a5\u53ef\u7528\u6027\u8fdb\u884c\u4e86\u4e00\u904d\u300c\u666e\u67e5\u300d\uff0c\u4f46\u6211\u51b3\u5b9a\u4e0d\u5728 CI \u6d41\u7a0b\u5185\u52a0\u5165\u8be5\u5de5\u5177\u3002\u4e3b\u8981\u7531\u4e8e\u914d\u7f6e\u9879\u4e0d\u591f\u4e30\u5bcc\uff0c\u90e8\u5206\u94fe\u63a5\u6211\u300c\u786e\u5b9e\u300d\u5e0c\u671b\u5b83\u5931\u6548\uff0c\u4f46\u65e0\u6cd5\u5ffd\u7565\u67d0\u6587\u4ef6\u4e2d\u67d0\u4e00\u7279\u5b9a\u94fe\u63a5\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/lint-your-posts-with-ci\/","summary":" hustcc\/lint-md<\/a> \u662f\u4e00\u6b3e\u4e2d\u6587 Markdown \u5199\u4f5c\u89c4\u8303\u68c0\u67e5\u5de5\u5177\uff0c\u68c0\u67e5\u89c4\u5219\u6765\u6e90\u4e8e ruanyf\/document-style-guide<\/a>\u3002<\/p>\n \u914d\u5408 CI\/CD \u4f7f\u7528\uff0c\u5373\u80fd\u591f\u4ee5\u5b8c\u5168\u81ea\u52a8\u5316\u7684\u65b9\u5f0f\uff0c\u786e\u4fdd\u4f18\u79c0\u7684\u535a\u6587\u8d28\u91cf\uff0c\u957f\u671f\u4f7f\u7528\u8fd8\u53ef\u57f9\u517b\u826f\u597d\u7684\u5199\u4f5c\u4e60\u60ef\u3002<\/p>","title":"\u81ea\u52a8\u5316 Markdown \u535a\u6587\u5199\u4f5c\u89c4\u8303\u68c0\u67e5"},{"content":"afc163\/fanyi \u662f\u4e00\u6b3e\u547d\u4ee4\u884c\u67e5\u8bcd\u5de5\u5177\u3002\u5b9e\u7528\u3001\u7f8e\u89c2\uff0c\u662f\u6211\u5bf9\u5b83\u7684\u7b2c\u4e00\u5370\u8c61\u3002\n\u8be5\u5de5\u5177\u5b9e\u7528 Node.js \u7f16\u5199\uff0c\u56e0\u6b64\u9700\u8981\u4f7f\u7528 npm \u5b89\u88c5\u3002\nnpm install fanyi -g \u4f7f\u7528\u65b9\u6cd5\u7b80\u5355\u5230\u4e0d\u80fd\u518d\u7b80\u5355\u3002\nfanyi spark # \u6216 fy spark \u793a\u4f8b\u8f93\u51fa\u5982\u4e0b\u3002\n\u5728\u6211\u7684 macOS \u4e0a\uff0c\u67e5\u8bcd\u7684\u540c\u65f6\u4f1a\u5c06\u8be5\u8bcd\u53d1\u97f3\u300c\u8bfb\u300d\u51fa\u6765\uff0c\u662f\u7684\uff0c\u901a\u8fc7\u58f0\u5361\u64ad\u653e\u3002\n\u636e\u9879\u76ee\u6587\u6863\u63cf\u8ff0\uff0c\u67e5\u8bcd\u7684\u6570\u636e\u6765\u6e90\u662f <iciba.com>\u3001<fanyi.youdao.com> \u4ee5\u53ca <dictionaryapi.com>\uff0c\u4e14\u6682\u65f6\u53ea\u652f\u6301\u4e2d\u82f1\u4e92\u8bd1\u3002\n$ fanyi "for your information" $ fanyi \u548c\u8c10 $ fanyi \u5b50\u975e\u9c7c\u7109\u77e5\u9c7c\u4e4b\u4e50 \u6700\u540e\uff0c\u7ecf\u8fc7\u5c1d\u8bd5\uff0c\u8fd8\u662f\u5efa\u8bae\u53ea\u7528\u4e8e \u82f1\u8bd1\u4e2d\uff0c\u5e76\u4e14\u5c3d\u53ef\u80fd\u53ea\u67e5 \u5355\u8bcd \u6216 \u5e38\u89c1\u642d\u914d\u8bcd\u7ec4\uff0c\u957f\u53e5\u5b50\u662f\u65e0\u6cd5\u50cf Google Translate \u90a3\u6837\u67e5\u51fa\u7ed3\u679c\u7684\u3002\u6bd5\u7adf\u6570\u636e\u6765\u6e90\u662f\u300c\u8bcd\u5178\u300d\uff0c\u800c\u975e\u300c\u7ffb\u8bd1\u300d\u3002\u53e6\u5916\uff0c\u8bfb\u97f3\u7684\u51c6\u786e\u6027\u3001\u5730\u57df\u6027\u4e5f\u6709\u5f85\u8003\u91cf\uff0c\u6709\u80fd\u529b\u9605\u8bfb\u97f3\u6807\u7684\u8bdd\uff0c\u8fd8\u662f\u5efa\u8bae\u4f7f\u7528 https:\/\/dictionary.cambridge.org\/ \u7b49\u4e13\u4e1a\u8bcd\u5178\u6bd4\u8f83\u5408\u9002\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/translate-words-via-command-line\/","summary":" afc163\/fanyi<\/a> \u662f\u4e00\u6b3e\u547d\u4ee4\u884c\u67e5\u8bcd\u5de5\u5177\u3002\u5b9e\u7528\u3001\u7f8e\u89c2\uff0c\u662f\u6211\u5bf9\u5b83\u7684\u7b2c\u4e00\u5370\u8c61\u3002<\/p>","title":"\u7a0b\u5e8f\u5458\u547d\u4ee4\u884c\u67e5\u8bcd\u597d\u5e2e\u624b"},{"content":"\u8fd1\u671f\u5728\u7814\u7a76\u7cfb\u7edf\u76d1\u63a7\u9884\u8b66\uff0c\u5305\u62ec\u4f46\u4e0d\u9650\u4e8e\uff1aCPU \u4f7f\u7528\u7387\u9884\u8b66\u3001\u5185\u5b58\u4f7f\u7528\u7387\u9884\u8b66\u3001\u78c1\u76d8\u4f7f\u7528\u7387\u9884\u8b66\u4ee5\u53ca IO \u9884\u8b66\u3002\n\u5728\u6d4b\u8bd5\u8fc7\u7a0b\u4e2d\uff0c\u9700\u8981\u6a21\u62df\u7cfb\u7edf\u8d1f\u8f7d\u6765\u9a8c\u8bc1\u9884\u8b66\u89c4\u5219\u662f\u5426\u6709\u6548\u3002\u6545\u603b\u7ed3\u51e0\u79cd\u6a21\u62df\u8d1f\u8f7d\u7684\u65b9\u5f0f\uff0c\u4ee5\u4f9b\u65e5\u540e\u67e5\u8be2\u3002\nCPU \u4f7f\u7528\u7387 \u65b9\u6cd5\u5f88\u591a\uff0c\u6700\u7b80\u5355\u76f4\u63a5\u7684\u6709\uff1a\n cat \/dev\/zero > \/dev\/null cat \/dev\/urandom | gzip -9 > \/dev\/null dd if=\/dev\/zero of=\/dev\/null yes > \/dev\/null … \u4ee5\u4e0a\u65b9\u6cd5\u4ec5\u80fd\u5bf9\u5355\u6838\u65bd\u52a0\u538b\u529b\uff0c\u591a\u6838\u5fc3\u53ef\u4ee5\u4f7f\u7528 for \u5faa\u73af + \u547d\u4ee4\u7ed3\u5c3e &\uff0c\u6216\u4f7f\u7528\u591a\u4e2a\u7ba1\u9053\u8fde\u63a5\u6765\u5b9e\u73b0\uff1a\n for i in 'seq 1 $(cat \/proc\/cpuinfo | grep "physical id" | wc -l)'; do cat \/dev\/zero > \/dev\/null & done cat \/dev\/urandom | gzip -9 | gzip -d | gzip -9 | gzip -d > \/dev\/null \u78c1\u76d8\u4f7f\u7528\u7387 \u4e0a\u8282\u6211\u4eec\u4f7f\u7528\u5230\u4e86 dd \u547d\u4ee4\uff0c\u8be5\u547d\u4ee4\u7ed3\u5408 \/dev\/zero \u4e5f\u53ef\u4ee5\u88ab\u7528\u4e8e\u8f93\u51fa\u4e00\u5b9a\u5927\u5c0f\u7684\u6587\u4ef6\uff0c\u4ece\u800c\u6a21\u62df\u78c1\u76d8\u4f7f\u7528\u7387\u3002\n\u4f8b\u5982\uff1a\ndd if=\/dev\/zero of=loadfile bs=1M count=1024 # \u8f93\u51fa 1024M \u7684 \\0 \u5230 loadfile \u78c1\u76d8 IO \u5229\u7528\u521a\u521a\u751f\u6210\u7684 loadfile\uff0c\u52a0\u4e0a cp \u547d\u4ee4\u53ef\u4ee5\u4e00\u5b9a\u7a0b\u5ea6\u5730\u6a21\u62df\u987a\u5e8f IO\uff1a\nwhile true; do cp loadfile loadfile1; done # \u65e0\u9650\u5faa\u73af\u590d\u5236\u6587\u4ef6 \u5185\u5b58\u4f7f\u7528\u7387 \u56de\u770b\u524d\u9762\u7684\u51e0\u9879\u9700\u6c42\uff0c\u5176\u5b9e\u90fd\u53ef\u4ee5\u901a\u8fc7 stress \u5de5\u5177\u548c <code>lookbusy<\/code> \u5de5\u5177\u5b9e\u73b0\uff0c\u5e76\u4e14\u66f4\u52a0\u7cbe\u51c6\u3001\u53ef\u63a7\u3001\u6613\u7528\u3002\n\u4ee5\u4e0b\u5206\u522b\u5217\u51fa\u51e0\u4e2a\u4f8b\u5b50\uff0c\u65b9\u4fbf\u7167\u6284\u7406\u89e3\u3002\nstress --cpu 2 # \u4ea7\u751f 2 \u4e2a\u5de5\u4f5c\u8fdb\u7a0b\u5bf9 CPU \u65bd\u52a0\u538b\u529b\uff0c\u4e5f\u5c31\u662f\u5c06\u4f1a\u5360\u7528\u4e24\u4e2a CPU \u6838\u5fc3 stress --vm 1 --vm-bytes 128M --vm-hang 0 # \u4ea7\u751f 1 \u4e2a\u5de5\u4f5c\u8fdb\u7a0b\uff0c\u5360\u7528 128MB \u5185\u5b58\u5e76\u4fdd\u6301 stress --io 1 # \u4ea7\u751f 1 \u4e2a\u5de5\u4f5c\u8fdb\u7a0b\u5bf9 IO \u65bd\u52a0\u538b\u529b lookbusy -c 50 # \u5360\u7528\u6240\u6709 CPU \u6838\u5fc3\u5404 50% lookbusy -c 50 -n 2 # \u5360\u7528\u4e24\u4e2a CPU \u6838\u5fc3\u5404 50% lookbusy -c 50-80 -r curve # \u5360\u7528\u6240\u6709 CPU \u6838\u5fc3\u5728 50%-80% \u5de6\u53f3\u6d6e\u52a8 lookbusy -c 0 -m 128MB -M 1000 # \u6bcf 1000 \u6beb\u79d2\uff0c\u5faa\u73af\u91ca\u653e\u5e76\u5206\u914d 128MB \u5185\u5b58 lookbusy -c 0 -d 1GB -b 1MB -D 10 # \u6bcf 10 \u6beb\u79d2\uff0c\u5faa\u73af\u8fdb\u884c 1MB \u78c1\u76d8\u5199\u5165\uff0c\u4e34\u65f6\u6587\u4ef6\u4e0d\u8d85\u8fc7 1GB \u4ee5\u4e0a\u547d\u4ee4\u7684\u53c2\u6570\u5747\u53ef\u7ed3\u5408\u4f7f\u7528\uff0c\u540c\u65f6\u5bf9\u7cfb\u7edf\u591a\u4e2a\u7ef4\u5ea6\u65bd\u52a0\u538b\u529b\u3002\n\u5176\u5b83\u5de5\u5177 stress-ng: https:\/\/kernel.ubuntu.com\/~cking\/stress-ng\/ cpulimit: https:\/\/github.com\/opsengine\/cpulimit cpu-load-generator: https:\/\/github.com\/beloglazov\/cpu-load-generator fio: https:\/\/github.com\/axboe\/fio \u53c2\u8003 https:\/\/stackoverflow.com\/questions\/2925606\/how-to-create-a-cpu-spike-with-a-bash-command https:\/\/nitinbhojwani-tech-talk.blogspot.com\/2017\/05\/simulate-cpu-memory-and-disk-load-on.html https:\/\/bash-prompt.net\/guides\/create-system-load\/ https:\/\/stackoverflow.com\/questions\/1971422\/linux-how-to-put-a-load-on-system-memory https:\/\/www.cyberciti.biz\/faq\/stress-test-linux-unix-server-with-stress-ng\/ https:\/\/unix.stackexchange.com\/questions\/99334\/how-to-fill-90-of-the-free-memory \u62d3\u5c55 \u8ba1\u7b97 IO \u5360\u7528\u7387\uff08\u767e\u5206\u6bd4\uff09\u7684\u65b9\u6cd5\uff1ahttps:\/\/unix.stackexchange.com\/questions\/318274\/how-to-calculate-disk-io-load-percentage\n","permalink":"https:\/\/wi1dcard.dev\/posts\/simulate-system-load-in-linux\/","summary":" \u8fd1\u671f\u5728\u7814\u7a76\u7cfb\u7edf\u76d1\u63a7\u9884\u8b66\uff0c\u5305\u62ec\u4f46\u4e0d\u9650\u4e8e\uff1aCPU \u4f7f\u7528\u7387\u9884\u8b66\u3001\u5185\u5b58\u4f7f\u7528\u7387\u9884\u8b66\u3001\u78c1\u76d8\u4f7f\u7528\u7387\u9884\u8b66\u4ee5\u53ca IO \u9884\u8b66\u3002<\/p>\n \u5728\u6d4b\u8bd5\u8fc7\u7a0b\u4e2d\uff0c\u9700\u8981\u6a21\u62df\u7cfb\u7edf\u8d1f\u8f7d\u6765\u9a8c\u8bc1\u9884\u8b66\u89c4\u5219\u662f\u5426\u6709\u6548\u3002\u6545\u603b\u7ed3\u51e0\u79cd\u6a21\u62df\u8d1f\u8f7d\u7684\u65b9\u5f0f\uff0c\u4ee5\u4f9b\u65e5\u540e\u67e5\u8be2\u3002<\/p>","title":"Linux \u4e2d\u6a21\u62df\u591a\u79cd\u7cfb\u7edf\u8d1f\u8f7d\u7684\u65b9\u6cd5"},{"content":"\u5927\u6982\u60f3\u6cd5\uff1a\u8f6c\u6362\u6211\u7684\u7b80\u5386 HTML \u5230 PDF -> \u5c06 PDF \u90e8\u7f72\u5230\u4e03\u725b\u4e91 -> \u8bbf\u5ba2\u53ef\u76f4\u63a5\u4e0b\u8f7d\u6700\u65b0\u7248\u672c PDF \u4e14\u4e0e\u5728\u7ebf\u7b80\u5386\u540c\u6b65\u3002\n\u4ee5\u4e0a\u8fc7\u7a0b\u5747\u57fa\u4e8e Travis CI \u5b9e\u73b0\uff0c\u66ff\u6362\u6210\u5176\u5b83\u4ea6\u53ef\u3002\u5e73\u65f6\u6211\u4eec\u63d0\u5230\u7684 CI\/CD\uff0c\u800c\u672c\u4f8b\u5373\u4e3a\u7b80\u6613\u7684 CD\uff08Continuous Delivery\uff09\u5b9e\u4f8b\u3002\n\u7f16\u5199 Travis \u914d\u7f6e\u6587\u4ef6 services: - docker before_script: - docker pull arachnysdocker\/athenapdf - curl -v -o qshell.zip http:\/\/devtools.qiniu.com\/qshell-v2.3.5.zip - ls -l qshell.zip - unzip qshell.zip - mv qshell_linux_x64 qshell script: - docker run --rm -v $(pwd):\/converted\/ arachnysdocker\/athenapdf athenapdf --margins=none https:\/\/wi1dcard.github.io\/resume\/ resume.pdf - .\/qshell account $QINIU_AK $QINIU_SK [\u4efb\u9009\u540d\u79f0] - .\/qshell fput [\u4e03\u725b Bucket \u540d\u79f0] get-resume resume.pdf -w \u4ee5\u4e0a\uff0c\u6211\u4f7f\u7528\u4e86\u4e24\u4e2a\u5173\u952e\u7684\u5de5\u5177\u3002\n athenapdf\uff1a\u4e00\u6b3e\u5b98\u65b9\u63d0\u4f9b Docker \u955c\u50cf\u3001\u7b80\u5355\u6613\u7528\u7684 PDF \u8f6c\u6362\u89e3\u51b3\u65b9\u6848\uff0c\u53ef\u7528\u4e8e\u66ff\u4ee3 wkhtmltopdf\u3002 qshell\uff1a\u5229\u7528\u4e03\u725b\u6587\u6863\u4e0a\u516c\u5f00\u7684 API \u5b9e\u73b0\u7684\u4e00\u4e2a\u65b9\u4fbf\u5f00\u53d1\u8005\u6d4b\u8bd5\u548c\u4f7f\u7528\u4e03\u725b API \u670d\u52a1\u7684\u547d\u4ee4\u884c\u5de5\u5177\u3002 \u5728 before_script \u4e2d\u6211\u62c9\u53d6\u4e86 athenapdf \u7684\u5b98\u65b9 Docker \u955c\u50cf\uff0c\u63a5\u7740\u4e0b\u8f7d\u4e86 qshell \u7684\u53d1\u884c\u5305\u3001\u89e3\u538b\u5e76\u91cd\u547d\u540d\u3002\n\u5728 script \u4e2d\uff0c\u6211\u9996\u5148\u6267\u884c athenapdf \u8f6c\u6362\u6211\u7684\u5728\u7ebf\u7b80\u5386 https:\/\/wi1dcard.github.io\/resume\/ \u4e3a resume.pdf\u3002\u968f\u540e\u914d\u7f6e qshell \u6240\u9700\u7684\u4e03\u725b\u4e91 AK\u3001SK\uff0c\u8be5\u5bc6\u94a5\u5bf9\u4f60\u53ef\u4ee5\u5728\u4e03\u725b\u4e91\u7684\u7ba1\u7406\u9875\u9762\u751f\u6210\u3002\n\u6ce8\u610f\u8fd9\u91cc\u6211\u4f7f\u7528\u4e86 $QINIU_AK \u548c $QINIU_SK \u73af\u5883\u53d8\u91cf\uff0c\u8fd9\u4e24\u4e2a\u73af\u5883\u53d8\u91cf\u662f\u5728 Travis \u7684\u9879\u76ee\u8bbe\u7f6e\u5185\u914d\u7f6e\u597d\u7684\uff0c\u5b83\u4eec\u4e0d\u4f1a\u88ab\u663e\u793a\u5728 CI \u65e5\u5fd7\u4e2d\uff0c\u56e0\u6b64\u53ef\u4ee5\u8fbe\u5230\u4e00\u5b9a\u7684\u4fdd\u5bc6\u6548\u679c\u3002\u70b9\u51fb\u8fd9\u91cc \u53ef\u67e5\u770b\u5b98\u65b9\u6587\u6863\u3002\n\u6700\u540e\uff0c\u4f7f\u7528 qshell fput \u5c06\u6587\u4ef6\u4e0a\u4f20\u81f3\u5bf9\u8c61\u5b58\u50a8\u3002\u5176\u4e2d\uff0cget-resume \u662f\u8be5\u6587\u4ef6\uff08\u6216\u8005\u8bf4\uff0cObject\uff09\u7684 Key\uff0c\u53ef\u4ee5\u7406\u89e3\u4e3a URI\u3002\u800c resume.pdf \u5219\u662f\u672c\u5730\u751f\u6210\u7684\u7b80\u5386 PDF \u6587\u4ef6\u8def\u5f84\u3002\n\u53e6\u5916\uff0cathenapdf \u7684\u529f\u80fd\u8fdc\u4e0d\u6b62\u7b80\u6613\u7684 CLI \u5de5\u5177\uff0c\u5b9e\u9645\u4e0a\u5b83\u8fd8\u63d0\u4f9b\u4e86\u57fa\u4e8e Go \u7684\u5fae\u670d\u52a1\uff0c\u4e5f\u5c31\u662f\u8bf4\u53ef\u4ee5\u72ec\u7acb\u8fd0\u884c\u4e3a\u4e00\u53f0\u300cPDF \u8f6c\u6362\u300d\u670d\u52a1\u3002\u6709\u5174\u8da3\u53ef\u67e5\u770b\u9879\u76ee\u9875\u9762\u7684\u4ecb\u7ecd\u3002\n\u6539\u9020 Hexo \u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cHexo \u5728\u751f\u6210\u7ad9\u70b9\u65f6\uff0c\u4f1a\u62f7\u8d1d source \u76ee\u5f55\u4e0b\u7684\u666e\u901a\u6587\u4ef6\u5230 public\uff0c\u4f46\u4f3c\u4e4e .travis.yml \u4e0d\u77e5\u4e3a\u4f55\uff08\u53ef\u80fd\u662f Yaml \u4e5f\u4f1a\u88ab\u6e32\u67d3\u5427\uff09\uff0c\u6267\u884c hexo generate \u4e0d\u4f1a\u590d\u5236\u8be5\u6587\u4ef6\u3002\n\u56e0\u4e3a\u5bf9 Hexo \u7684\u597d\u611f\u5ea6\u672c\u6765\u4e5f\u4e0d\u9ad8\uff0c\u524d\u6bb5\u65f6\u95f4\u8fd8\u5dee\u70b9\u6362\u6389\u5b83\uff08\u7136\u800c\u5176\u5b83\u9759\u6001\u535a\u5ba2\u6ca1\u4ec0\u4e48\u770b\u7740\u987a\u773c\u7684\u4e3b\u9898\uff09\uff0c\u6240\u4ee5\u6211\u6ca1\u6709\u5bf9 Hexo \u7684\u8fd0\u884c\u8fc7\u7a0b\u8fdb\u884c\u6df1\u7a76\uff0c\u7528\u4e86\u4e00\u4e2a\u6bd4\u8f83\u7cd9\u7684\u89e3\u51b3\u65b9\u6848\u3002\n\u6839\u636e Hexo \u6587\u6863\uff0c\u5176\u4f1a\u6267\u884c scripts \u76ee\u5f55\u5185\u7684\u6240\u6709\u811a\u672c\uff0c\u53ef\u7528\u4e8e\u6302\u8f7d\u4e8b\u4ef6\u6765\u5b9e\u73b0\u4e00\u4e9b\u81ea\u5b9a\u4e49\u529f\u80fd\u3002\n If your plugin is relatively simple, it\u2019s recommended to use a script. All you need to do is put your JavaScript files in the scripts folder and Hexo will load them during initialization.\n \u4e8e\u662f\uff0c\u521b\u5efa scripts\/cp-travis-configuration.js\uff1a\nconst fs = require('hexo-fs'); const log = require('hexo-log')({ debug: false, silent: false }); hexo.on('generateAfter', function () { fs.copyFile('source\/.travis.yml', 'public\/.travis.yml', function (err) { if (err) { throw err; } else { log.info('Travis CI configuration copied.'); } }); }); \u975e\u5e38\u7b80\u5355\u7c97\u66b4\u5730\u5c06\u6587\u4ef6\u62f7\u8d1d\u8fc7\u53bb\u3002\n\u7ed3\u679c \u5173\u4e8e Travis CI \u7684\u57fa\u7840\u4f7f\u7528\u4e0d\u518d\u8d58\u8ff0\u3002\n\u4ee5\u4e0a\uff0cGit \u63d0\u4ea4\u540e\u89e6\u53d1 CI \u6267\u884c\uff0c\u5373\u53ef\u901a\u8fc7\u4e03\u725b\u4e91\u878d\u5408 CDN \u5185\u914d\u7f6e\u7684\u57df\u540d + get-resume \u6765\u8bbf\u95ee\u5230\u6211\u7684\u7b80\u5386\u5566\u3002\n\u4f8b\u5982\uff1ahttp:\/\/your-domain\/get-resume\u3002\n\u5f03\u5751 \u539f\u56e0\u6709\u4e8c\uff1a\n \u5783\u573e\u4e03\u725b\u8c8c\u4f3c\u6ca1\u6709\u5bf9\u56fd\u5916\u8bbf\u95ee\u505a\u826f\u597d\u7684\u4f18\u5316\u652f\u6301\uff0c\u4ee5\u81f3\u4e8e CI \u673a\u5668\u4f7f\u7528 CURL \u4e0b\u8f7d\u65f6\u6781\u5176\u4e0d\u7a33\u5b9a\uff0c\u52a8\u4e0d\u52a8\u5c31\u65e0\u6cd5\u62ff\u5230 qshell\uff0c\u800c\u5728 GitHub Releases \u5185\u53c8\u6ca1\u6709\u7f16\u8bd1\u597d\u7684\u53ef\u6267\u884c\u6587\u4ef6\u3002\u6211\u5df2\u7ecf\u63d0\u4ea4 Issue \u4f46\u4e0d\u786e\u5b9a\u4f55\u65f6\u624d\u4f1a\u5f97\u5230\u7b54\u590d\u3002\u5509\uff0c\u56fd\u5185\u4f01\u4e1a\u7684\u901a\u75c5\u3002 \u4f7f\u7528\u56fd\u5185 CDN \u57df\u540d\u8981\u5907\u6848\u3002\u8fd8\u597d\u6211\u6709\u4e00\u4e2a\u591a\u5e74\u524d\u901a\u8fc7\u4e2a\u4eba\u5907\u6848\u7684\u57df\u540d\uff0c\u6682\u65f6\u80fd\u591f\u6491\u4e00\u4e0b\uff0c\u4f46\u4e0d\u662f\u957f\u4e45\u4e4b\u8ba1\u3002 \u76ee\u524d\uff0c\u6211\u5df2\u7ecf\u91cd\u65b0\u914d\u7f6e CI\uff0c\u56de\u5934\u518d\u53e6\u5199\u535a\u6587\u5427\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/convert-html-to-pdf-with-ci\/","summary":" \u5927\u6982\u60f3\u6cd5\uff1a \u4ee5\u4e0a\u8fc7\u7a0b\u5747\u57fa\u4e8e Travis CI \u5b9e\u73b0\uff0c\u66ff\u6362\u6210\u5176\u5b83\u4ea6\u53ef\u3002\u5e73\u65f6\u6211\u4eec\u63d0\u5230\u7684 CI\/CD\uff0c\u800c\u672c\u4f8b\u5373\u4e3a\u7b80\u6613\u7684 CD\uff08 JSON Web Tokens\uff0c\u53c8\u79f0 \u539f\u6765 Travis CI \u5b98\u65b9\u4e00\u76f4\u63d0\u4f9b\u7740\u90e8\u7f72\u5230 GitHub Pages \u7684\u65b9\u5f0f…<\/p>\n \u90a3\u4e48\u90a3\u4e9b\u626f\u86cb\u7684\u6559\u7a0b\u53ef\u4ee5\u4e00\u8fb9\u73a9\u53bb\u4e86\u3002<\/p>","title":"\u4f7f\u7528 Travis \u90e8\u7f72 GitHub Pages"},{"content":"humbug\/box \u662f\u4e00\u6b3e\u5feb\u901f\u7684\u3001\u96f6\u914d\u7f6e\u7684 PHAR \u6253\u5305\u5de5\u5177\u3002\n\u8fd8\u8bb0\u5f97\u524d\u4e9b\u5929\u7684\u300aSMProxy,\u8ba9\u4f60\u7684\u6570\u636e\u5e93\u64cd\u4f5c\u5feb\u4e09\u500d\uff01\u300b\u5417\uff0c\u8be5\u9879\u76ee\u7684 PHAR \u4fbf\u662f\u4f7f\u7528 Box \u6253\u5305\u5b8c\u6210\u7684\u3002\n\u8be5\u9879\u76ee\u662f box-project\/box2 \u7684 Fork \u5206\u652f\uff0c\u539f\u9879\u76ee\u5df2\u7ecf\u4e0d\u518d\u7ef4\u62a4\u3002\u65b0\u9879\u76ee\u7684\u4f5c\u8005\u547c\u5401\u6211\u4eec\u652f\u6301\u8be5 Fork\u3002\nBox \u7684\u53ef\u914d\u7f6e\u9879\u6709\u5f88\u591a\uff0c\u4e3a\u4e86\u80fd\u591f\u5feb\u901f\u5e2e\u52a9\u5927\u5bb6\u4e86\u89e3\u7528\u6cd5\uff0c\u63a5\u4e0b\u6765\u6211\u5c06\u4f7f\u7528 SMProxy \u7684 box.json \u4f5c\u4e3a\u4f8b\u5b50\u7ed9\u5927\u5bb6\u505a\u4e00\u4e2a\u7b80\u5355\u7684\u4ecb\u7ecd\u3002\n \u63a8\u8350\u4e00\u7bc7\u9884\u5907\u77e5\u8bc6\uff0c\u53ef\u4ee5\u5e2e\u4f60\u7b80\u5355\u4e86\u89e3 PHAR \u7684\u90e8\u5206\u7528\u9014\uff1a\u4f7f\u7528 phar \u4e0a\u7ebf\u4f60\u7684\u4ee3\u7801\u5305\u3002\n \u9996\u5148\uff0c\u6b63\u5982 Box \u4f5c\u8005\u7684\u63cf\u8ff0\uff1a\n Fast, zero config application bundler with PHARs.\n \u6211\u4eec\u9ed8\u8ba4\u65e0\u9700\u4efb\u4f55\u914d\u7f6e\uff0c\u5728\u4f60\u7684 PHP \u5e94\u7528\u7684\u6839\u76ee\u5f55\u6267\u884c\uff1a\ncomposer require humbug\/box vendor\/bin\/box compile \u5373\u53ef\u751f\u6210\u4e00\u4e2a\u57fa\u672c\u7684 PHAR \u5305\u6587\u4ef6\u3002\nBox \u7684\u914d\u7f6e\u6587\u4ef6\u4e3a\u5e94\u7528\u6839\u76ee\u5f55\u7684 box.json\uff0c\u4f8b\u5982 SMProxy \u9879\u76ee\u7684\u8be5\u6587\u4ef6\u5185\u5bb9\u4e3a\uff1a\n{ "main": "bin\/SMProxy", "output": "SMProxy.phar", "directories": [ "bin", "src" ], "finder": [ { "notName": "\/LICENSE|.*\\\\.md|.*\\\\.dist|composer\\\\.json|composer\\\\.lock\/", "exclude": [ "doc", "docs", "test", "test_old", "tests", "Tests", "vendor-bin" ], "in": "vendor" }, { "name": "composer.json", "in": "." } ], "compression": "NONE", "compactors": [ "KevinGH\\\\Box\\\\Compactor\\\\Json", "KevinGH\\\\Box\\\\Compactor\\\\Php" ], "git": "phar-version" } main \u7528\u4e8e\u8bbe\u5b9a\u5e94\u7528\u7684\u5165\u53e3\u6587\u4ef6\uff0c\u4e5f\u5c31\u662f\u6253\u5305 PHAR \u540e\uff0c\u76f4\u63a5\u8fd0\u884c\u8be5 PHAR \u5305\u6240\u6267\u884c\u7684\u4ee3\u7801\uff0c\u4f60\u53ef\u4ee5\u5728\u67d0\u79cd\u610f\u4e49\u4e0a\u7406\u89e3\u4e3a index.php\u3002 output \u7528\u4e8e\u8bbe\u5b9a PHAR \u7684\u8f93\u51fa\u6587\u4ef6\uff0c\u53ef\u4ee5\u5305\u542b\u76ee\u5f55\uff0c\u76f8\u5bf9\u8def\u5f84\u6216\u7edd\u5bf9\u8def\u5f84\u3002 directories \u7528\u4e8e\u6307\u5b9a\u6253\u5305\u7684 PHP \u6e90\u7801\u76ee\u5f55\u3002 finder \u914d\u7f6e\u76f8\u5bf9\u6bd4\u8f83\u590d\u6742\uff0c\u5e95\u5c42\u662f\u4f7f\u7528 Symfony\/Finder \u5b9e\u73b0\uff0c\u4e0e PHP-CS-Fixer \u7684 Finder \u89c4\u5219\u7c7b\u4f3c\u3002\u5728\u4ee5\u4e0a\u4f8b\u5b50\u4e2d\uff0c\u5305\u542b\u4e24\u4e2a Finder\uff1b\u7b2c\u4e00\u4e2a\u5b9a\u4e49\u5728 vendor \u6587\u4ef6\u5939\u5185\uff0c\u6392\u9664\u6307\u5b9a\u540d\u79f0\u7684\u6587\u4ef6\u548c\u76ee\u5f55\uff1b\u7b2c\u4e8c\u4e2a\u8868\u793a\u5305\u542b\u5e94\u7528\u6839\u76ee\u5f55\u7684 composer.json\u3002 compression \u7528\u4e8e\u8bbe\u5b9a PHAR \u6587\u4ef6\u6253\u5305\u65f6\u4f7f\u7528\u7684\u538b\u7f29\u7b97\u6cd5\u3002\u53ef\u9009\u503c\u6709\uff1aGZ\uff08\u6700\u5e38\u7528\uff09 \/ BZ2 \/ NONE\uff08\u9ed8\u8ba4\uff09\u3002\u4f46\u6709\u4e00\u70b9\u9700\u8981\u6ce8\u610f\uff1a\u4f7f\u7528 GZ \u8981\u6c42\u8fd0\u884c PHAR \u7684 PHP \u73af\u5883\u5df2\u542f\u7528 Gzip \u6269\u5c55\uff0c\u5426\u5219\u4f1a\u9020\u6210\u62a5\u9519\u3002 compactors \u7528\u4e8e\u8bbe\u5b9a\u538b\u7f29\u5668\uff0c\u4f46\u6b64\u5904\u7684\u538b\u7f29\u5668\u4e0d\u540c\u4e8e\u4e0a\u6587\u6240\u4ecb\u7ecd\u7684 compression\uff1b\u4e00\u4e2a\u538b\u7f29\u5668\u7c7b\u5b9e\u4f8b\u53ef\u538b\u7f29\u7279\u5b9a\u6587\u4ef6\u7c7b\u578b\uff0c\u964d\u4f4e\u6587\u4ef6\u5927\u5c0f\uff0c\u4f8b\u5982\u4ee5\u4e0b Box \u81ea\u5e26\u7684\u538b\u7f29\u5668\uff1a KevinGH\\Box\\Compactor\\Json\uff1a\u538b\u7f29 JSON \u6587\u4ef6\uff0c\u53bb\u9664\u7a7a\u683c\u548c\u7f29\u8fdb\u7b49\u3002 KevinGH\\Box\\Compactor\\Php\uff1a\u538b\u7f29 PHP \u6587\u4ef6\uff0c\u53bb\u9664\u6ce8\u91ca\u548c PHPDoc \u7b49\u3002 KevinGH\\Box\\Compactor\\PhpScoper\uff1a\u4f7f\u7528 humbug\/php-scoper \u9694\u79bb\u4ee3\u7801\u3002 git \u7528\u4e8e\u8bbe\u5b9a\u4e00\u4e2a\u300c\u5360\u4f4d\u7b26\u300d\uff0c\u6253\u5305\u65f6\u5c06\u4f1a\u626b\u63cf\u6587\u4ef6\u5185\u662f\u5426\u542b\u6709\u6b64\u5904\u5b9a\u4e49\u7684\u5360\u4f4d\u7b26\uff0c\u82e5\u5b58\u5728\u5c06\u4f1a\u66ff\u6362\u4e3a\u4f7f\u7528 Git \u6700\u65b0 Tag \u548c Commit \u751f\u6210\u7684\u7248\u672c\u53f7\uff08\u4f8b\u5982 2.0.0 \u6216 2.0.0@e558e33\uff09\u3002\u4f60\u53ef\u4ee5\u53c2\u8003 \u8fd9\u91cc \u7684\u4ee3\u7801\u6765\u66f4\u52a0\u6df1\u5165\u5730\u7406\u89e3\u8be5\u7528\u6cd5\u3002 \u6211\u76ee\u524d\u5e38\u7528\u7684\u914d\u7f6e\u5927\u6982\u5c31\u662f\u8fd9\u4e9b\uff0c\u5f3a\u529b\u63a8\u8350\u770b\u770b\u5b98\u65b9\u7684 \u914d\u7f6e\u6587\u6863 \u6765\u4e86\u89e3\u66f4\u591a\u7684\u914d\u7f6e\u9879\u3001\u793a\u4f8b\u548c\u9ed8\u8ba4\u503c\uff0c\u4ee5\u53ca\u5b83\u4eec\u7684\u7528\u6cd5\uff1b\u601d\u8def\u6e05\u6670\u3001\u7b80\u660e\u627c\u8981\u3002\n\u6700\u540e\uff0c\u63a8\u8350\u5173\u6ce8 SMProxy\uff0c\u82f1\u6587\u6587\u6863\u548c\u4e0a\u6587\u4ecb\u7ecd\u7684 PHAR \u6253\u5305\u90e8\u5206\uff0c\u57fa\u672c\u90fd\u662f\u7531\u6211\u5b8c\u6210\uff0c\u6709\u4efb\u4f55\u7591\u95ee\u6b22\u8fce\u901a\u8fc7 Issue \u8054\u7cfb\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/packaging-apps-with-phar\/","summary":" humbug\/box<\/a> \u662f\u4e00\u6b3e\u5feb\u901f\u7684\u3001\u96f6\u914d\u7f6e\u7684 PHAR \u6253\u5305\u5de5\u5177\u3002<\/p>\n \u8fd8\u8bb0\u5f97\u524d\u4e9b\u5929\u7684\u300aSMProxy,\u8ba9\u4f60\u7684\u6570\u636e\u5e93\u64cd\u4f5c\u5feb\u4e09\u500d\uff01<\/a>\u300b\u5417\uff0c\u8be5\u9879\u76ee\u7684 PHAR \u4fbf\u662f\u4f7f\u7528 Box \u6253\u5305\u5b8c\u6210\u7684\u3002<\/p>","title":"\u5c06 PHP \u5e94\u7528\u5feb\u901f\u6253\u5305\u4e3a PHAR"},{"content":"chubin\/wttr.in \u662f\u4e00\u6b3e\u9762\u5411\u547d\u4ee4\u884c\u7684\u5929\u6c14\u9884\u62a5\u670d\u52a1\uff0c\u652f\u6301\u591a\u79cd HTTP \u5ba2\u6237\u7aef\u8fdb\u884c\u8bf7\u6c42\uff0c\u4f8b\u5982\uff1acurl \/ httpie \/ wget \u7b49\u3002\u8be5\u9879\u76ee\u7684\u5b98\u65b9\u63cf\u8ff0\u4fbf\u662f\uff1a\n The right way to check the weather.\n \u4f7f\u7528\u65b9\u6cd5\u975e\u5e38\u7b80\u5355\uff0c\u4e0d\u9700\u8981\u5b89\u88c5\u989d\u5916\u7684\u5ba2\u6237\u7aef\uff1b\u5728\u4efb\u4f55\u5177\u5907 curl \u7684\u7535\u8111\u4e0a\u6267\u884c curl wttr.in \u5373\u53ef\u3002\n\u4f8b\u5982\uff1a\n\u8be5\u9879\u76ee\u5c06\u4f1a\u901a\u8fc7 IP \u5224\u65ad\u4f60\u7684\u7269\u7406\u5730\u5740\uff0c\u5e76\u5c55\u793a\u5b9e\u65f6\u4ee5\u53ca\u672a\u6765\u7684\u5929\u6c14\u3002\u5176\u4e2d ?lang=zh \u7528\u4e8e\u8bbe\u5b9a\u8bed\u8a00\u53c2\u6570\u4e3a\u4e2d\u6587\uff0c\u9ed8\u8ba4\u8bed\u8a00\u4e3a\u82f1\u6587\u3002\n\u53e6\u5916\uff0c\u5b98\u65b9\u5728 README \u5185\u8fd8\u7ed9\u51fa\u4e86\u4e00\u4e2a\u5b9e\u5b9e\u5728\u5728\u7684\u300c\u5b9e\u65f6\u300d\u56fe\u7247\u4f8b\u5b50\uff1a\n\u4f60\u4e5f\u53ef\u4ee5\u901a\u8fc7\u6307\u5b9a\u53c2\u6570\u6765\u83b7\u53d6\u7279\u5b9a\u5730\u70b9\u7684\u5929\u6c14\uff0c\u4f8b\u5982\uff1a\n$ curl wttr.in\/Beijing $ curl wttr.in\/\u5317\u4eac \u751a\u81f3\u53ef\u4ee5\u901a\u8fc7 IATA \u673a\u573a\u4ee3\u7801\uff08\u7531\u4e09\u4f4d\u5b57\u6bcd\u7ec4\u6210\uff09\u6765\u67e5\u8be2\u673a\u573a\u5929\u6c14\uff1a\n$ curl wttr.in\/pek # \u5317\u4eac\u9996\u90fd\u56fd\u9645\u673a\u573a $ curl wttr.in\/sha # \u4e0a\u6d77\u8679\u6865\u56fd\u9645\u673a\u573a \u53e6\u5916\uff0c\u5982\u679c\u4f60\u7684 IP \u6765\u81ea\u7f8e\u56fd\uff08\u5c31\u50cf\u6211\u6700\u4e0a\u9762\u7684\u622a\u56fe\u90a3\u6837\uff09\uff0c\u9ed8\u8ba4\u5c06\u4f1a\u4f7f\u7528\u7f8e\u56fd\u5236\u7684\u6e29\u5ea6\u5355\u4f4d\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u5728\u7ed3\u5c3e\u6dfb\u52a0 m \u6216 u \u53c2\u6570\u6765\u8bbe\u5b9a\u4f7f\u7528\u516c\u5236\u5355\u4f4d\u6216\u7f8e\u56fd\u5355\u4f4d\uff0c\u4f8b\u5982\uff1a\n$ curl "wttr.in\/Beijing?u" $ curl "wttr.in\/Beijing?m" \u5927\u6982\u5c31\u662f\u8fd9\u6837\u5566\uff0c\u611f\u5174\u8da3\u7684\u8bdd\u53bb\u5b98\u65b9\u9875\u9762\u770b\u770b\u5427\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/cli-weather-client\/","summary":"Upgrade: websocket<\/code>.<\/p>\n_config+::<\/code> to makes it partially configurable, the scope of parameters that we can modify is still limited.<\/p>","title":"Customize Kube-Prometheus Built-in Alerts"},{"content":"\u8bb0\u5f97\u53bb\u5e74\u5199\u8fc7\u4e00\u7bc7 \u4e00\u7bc7\u53c8\u957f\u53c8\u4e4f\u5473\u7684\u5e74\u7ec8\u603b\u7ed3\u548c\u5c55\u671b\uff0c\u867d\u7136\u73b0\u5728\u5df2\u7ecf\u662f 2021 \u5e74\u7684 2 \u6708\u4e86\uff0c\u518d\u6765\u56de\u987e\u7a0d\u5fae\u665a\u4e86\u4e9b\uff0c\u4e0d\u8fc7\u6211\u8fd8\u662f\u51b3\u5b9a\u603b\u7ed3\u4e00\u4e0b\u53bb\u5e74\uff0c\u518d\u7ed9\u65b0\u4e00\u5e74\u5236\u5b9a\u51e0\u4e2a\u957f\u671f\u76ee\u6807\u3002\n2020 \u56de\u987e\u548c\u5e74\u521d\u76ee\u6807 \u6211\u53bb\u5e74\u7ed9\u81ea\u5df1\u5b9a\u7684\u76ee\u6807\u5982\u4e0b\uff1a\n \u4fdd\u8bc1\u8eab\u4f53\u5065\u5eb7 \u2014\u2014 \u8fbe\u6210\uff01\uff08\u7b97\u662f\uff1f\uff09 \u5feb\u901f\u5c06\u79d1\u5b66\u4e0a\u7f51\u76f8\u5173\u5185\u5bb9\u6536\u5c3e\uff0c\u8fdb\u5165\u7ef4\u62a4\u9636\u6bb5\uff0c\u4e0d\u518d\u5360\u7528\u5927\u91cf\u65f6\u95f4\u7ee7\u7eed\u5f00\u53d1 \u2014\u2014 \u8fbe\u6210\uff01\u81ea\u8c6a\u5730\u8fbe\u6210\uff01 \u6df1\u5165\u5b66\u4e60 Kubernetes\uff0c\u5305\u62ec\u76ee\u524d\u6682\u65f6\u4e0d\u719f\u6089\u7684\uff1a Taint\u3001Tolerations\u3001Node Affinity\u3001Autoscaler\u3001Resource Request \u7b49\u7279\u6027 \u2014\u2014 \u8fbe\u6210\uff01 HorizontalPodAutoscaler\u3001PodSecurityPolicy\u3001NetworkPolicy\u3001LimitRange \u7b49\u8d44\u6e90 \u2014\u2014 \u57fa\u672c\u8fbe\u6210\uff01\u8fd8\u9700\u8981\u7ee7\u7eed\u5de9\u56fa\u3002 \u4ee5\u53ca\u4e89\u53d6\u80fd\u5bf9 CRI\/CSI\/CNI\u3001Scheduler \u7b49 Kubernetes \u5185\u90e8\u539f\u7406\u6709\u4e00\u5b9a\u4e86\u89e3 \u2014\u2014 \u989d\u5916\u76ee\u6807\uff0c\u672a\u8fbe\u6210\uff0c\u7f3a\u4e4f\u5408\u9002\u7684\u673a\u4f1a\u3002 \u7ee7\u7eed\u953b\u70bc\u82f1\u8bed\uff0c\u5305\u62ec\uff1a \u5c3d\u53ef\u80fd\u591a\u53c2\u4e0e\u90ae\u4ef6\u548c Slack \u8ba8\u8bba \u2014\u2014 \u8d85\u989d\u8fbe\u6210\uff01 \u575a\u6301\u7528\u82f1\u6587\u7f16\u5199\u6280\u672f\u5411\u535a\u6587 \u2014\u2014 \u8fbe\u6210\uff01 \u4ee5\u53ca\u4e89\u53d6\u7ec3\u4e60\u51e0\u6b21 italki \u2014\u2014 \u8d85\u8d85\u8d85\u989d\u8fbe\u6210\uff01 \u6df1\u5165\u5b66\u4e60 Prometheus\uff0c\u638c\u63e1\uff1a PromQL \u8fdb\u9636\u8bed\u6cd5 \u2014\u2014 \u8fbe\u6210\uff01 \u901a\u8fc7 Prometheus Operator \u548c Custom Metrics \u5bf9 Kubernetes \u96c6\u7fa4\u76d1\u63a7 \u2014\u2014 \u8fbe\u6210\uff01 \u4ee5\u53ca\u63d0\u5347 Golang \u7f16\u7801\u6c34\u5e73\uff0c\u4e89\u53d6\u5199\u4e00\u4e2a Prometheus Exporter \u5e76\u5f00\u6e90 \u2014\u2014 \u8fbe\u6210\uff01 \u7406\u60f3\u65f6\u95f4\u5206\u914d\u4e0e\u5b9e\u9645\u60c5\u51b5\u57fa\u672c\u4e00\u81f4\uff1a\nKubernetes 4 : \u82f1\u8bed 2 : Golang 1.5 : Prometheus 1 : \u79d1\u5b66\u4e0a\u7f51 1 : \u5176\u5b83 0.5\n\u975e\u5e38\u68d2\uff01\n\u5176\u5b9e\u6700\u8ba9\u6211\u5174\u594b\u7684\u4e0d\u662f\u6280\u672f\u65b9\u9762\uff0c\u800c\u662f OOPT \u7684\u6210\u7ee9\u4ece B2 \u63d0\u5347\u5230\u4e86 C1\uff08\u603b\u5206 80\uff09\uff0c\u4e00\u5e74\u7684\u52aa\u529b\u548c\u575a\u6301\u89c1\u5230\u4e86\u56de\u62a5\uff0c\u8650\u7206\u5e74\u521d\u7684\u76ee\u6807\u3002\n2021 \u5c55\u671b\u548c\u76ee\u6807 \u5f53\u7136\u5566\uff0c\u8eab\u4f53\u5065\u5eb7\u3001\u5fc3\u60c5\u6109\u5feb\u3002 \u7ee7\u7eed\u6df1\u5165 Kubernetes\uff0c\u4e89\u53d6\u5199\u4e00\u4e2a Operator \u5e76\u5f00\u6e90\u3002 \u7ee7\u7eed\u953b\u70bc\u82f1\u8bed\uff0c\u4e89\u53d6\u5b9e\u73b0 OOPT \u603b\u5206 90\u3001Use of English \u5355\u9879 C1\u3002 \u9002\u5f53\u4e86\u89e3\u52a0\u5bc6\u8d27\u5e01\u548c Substrate \u76f8\u5173\u77e5\u8bc6\u3002 \u957f\u671f\u65c5\u884c\u4e00\u6b21\uff01 \u548c 2020 \u5e74\u76ee\u6807\u4e00\u5bf9\u6bd4\uff0c2021 \u5e74\u7684\u6211\u4f3c\u4e4e\u597d\u54b8\u9c7c\u5440\uff0c\u770b\u8d77\u6765\u8981\u8fc7\u4e00\u4e2a\u95f4\u9694\u5e74\u7684\u6837\u5b50\uff1f\u4e0d\u8fc7\u8fd9\u4e5f\u6b63\u7b26\u5408\u6211\u7684\u5e74\u7eaa\uff0c\u6ca1\u6bdb\u75c5\u3002\nhttps:\/\/www.youtube.com\/watch?v=nNe4RUHpLWI\n\u5c3d\u7ba1\u67d0\u4e9b\u7231\u597d\u548c\u751f\u6d3b\u65b9\u5f0f\u53ef\u80fd\u4e0d\u4f1a\u662f\u6211\u4e00\u76f4\u559c\u6b22\u7684\uff0c\u4f46\u4eba\u751f\u5c31\u662f\u8981\u5145\u6ee1\u4f53\u9a8c\uff0c\u4e0d\u662f\u4e48\u3002\n\u52a0\u6cb9\uff01\n","permalink":"https:\/\/wi1dcard.dev\/posts\/hello-2021\/","summary":"critical<\/code>, warning<\/code>, or info<\/code> etc. However, OpsGenie’s priority field only accepts values like P1<\/code>, P2<\/code> … P5<\/code>.<\/p>\ncritical<\/code> alert was fired, a matched P1<\/code> alert to be created in OpsGenie is expected, and warning<\/code> -> P2<\/code>, info<\/code> -> P3<\/code>, as well.<\/p>","title":"Convert Kubernetes-Mixin Severities to OpsGenie Priorities in Prometheus"},{"content":"\u4e00\u822c\u6765\u8bf4\uff0c\u76d1\u63a7 Substrate \u6846\u67b6\u5f00\u53d1\u7684\u533a\u5757\u94fe\u8282\u70b9\uff0c\u53ef\u4ee5\u4f7f\u7528\u5b98\u65b9\u63a8\u8350\u7684 Prometheus + Grafana \u6280\u672f\u6808\u3002\u5728\u8282\u70b9\u6570\u91cf\u6bd4\u8f83\u591a\u7684\u60c5\u51b5\u4e0b\uff0c\u8fd9\u5957\u65b9\u6848\u7684\u4f18\u52bf\u6bd4\u8f83\u5bb9\u6613\u4f53\u73b0\u51fa\u6765\uff0c\u6211\u7ed9\u516c\u53f8\u7684\u5b98\u65b9\u8282\u70b9\u4e5f\u662f\u8fd9\u4e48\u914d\u7684\u3002\u4e0d\u8fc7\u8fd1\u671f Darwinia \u4e3b\u7f51\u4e0a\u7ebf\uff0c\u6709\u4e0d\u5c11\u540c\u4e8b\u60f3\u8981\u8dd1\u81ea\u5df1\u7684\u9a8c\u8bc1\u4eba\uff08validator\uff09\u8282\u70b9\u3002\u5bf9\u4e8e\u4ed6\u4eec\u6765\u8bf4\uff1a\n \u642d\u5efa\u4e00\u5957 Prometheus \u8fd8\u8981\u81ea\u5df1\u8c03\u9762\u677f\u548c\u89c4\u5219\uff0c\u6210\u672c\u5b9e\u5728\u592a\u9ad8\uff1b \u53ea\u7528 PM2\u3001Supervisord\u3001Systemd \u4e4b\u7c7b\u7684\u5b88\u62a4\u8fdb\u7a0b\u901a\u5e38\u53ea\u80fd\u4fdd\u8bc1\u8fdb\u7a0b\u6ca1\u6302\uff0c\u4f46\u8282\u70b9\u662f\u5426\u6b63\u5e38\u51fa\u5757\u662f\u672a\u77e5\u7684\uff08\u4f8b\u5982\u65ad\u7f51\u30010 Peer \u7684\u60c5\u51b5\uff0c\u8282\u70b9\u8fdb\u7a0b\u8fd8\u5728\uff0c\u5176\u5b9e\u5df2\u7ecf\u6389\u7ebf\u4e86\uff09\u3002 \u4e3a\u4e86\u89e3\u51b3\u4ee5\u4e0a\u8fd9\u4e24\u4e2a\u95ee\u9898\uff0c\u6211\u641e\u4e86\u4e00\u5957\u975e\u5e38\u7b80\u6613\u7684\u3001\u57fa\u4e8e\u65e5\u5fd7\u7684\u76d1\u63a7\u9884\u8b66\u65b9\u6cd5\u3002\n \ud83d\ude80 KUBE-VALI \u662f\u57fa\u4e8e Kubernetes \u96c6\u7fa4\u5927\u89c4\u6a21\u90e8\u7f72\u7684\u8282\u70b9\uff0c\u7a33\u5b9a\u53ef\u9760\uff0c\u6c42\u5927\u4f6c\u6295\u7968\u3002\n \u57fa\u672c\u601d\u8def \u57fa\u4e8e Darwinia \u9a8c\u8bc1\u4eba\u4ea7\u5757\uff0c\u4f1a\u6709\u7c7b\u4f3c \ud83c\udf81 Prepared block for proposing at ... \u7684\u65e5\u5fd7\u8f93\u51fa\uff0c\u53ea\u8981\u6709\u4e2a\u811a\u672c\u4e0d\u65ad\u68c0\u67e5\u8282\u70b9\u65e5\u5fd7\uff0c\u5982\u679c\u4e00\u6bb5\u65f6\u95f4\u5185\u6ca1\u6709\u7c7b\u4f3c\u7684\u8f93\u51fa\uff0c\u8bf4\u660e\u8282\u70b9\u53ef\u80fd\u5df2\u7ecf\u51fa\u4e86\u95ee\u9898\uff0c\u53d1\u9001\u901a\u77e5\u6216\u91cd\u542f\u8282\u70b9\u5747\u53ef\u3002\n\u6700\u7ec8\u6548\u679c \u5177\u4f53\u6b65\u9aa4 1) \u5b9e\u73b0\u68c0\u67e5\u65e5\u5fd7 \u9996\u5148\u767b\u5f55\u4f60\u7684\u9a8c\u8bc1\u4eba\u8282\u70b9\uff0c\u521b\u5efa\u4e00\u4e2a Watchlog \u811a\u672c\uff0c\u4f8b\u5982 \/usr\/bin\/darwinia-watchlog.sh\uff1a\n#!\/usr\/bin\/env bash RETRIVE_LOG_COMMAND="journalctl -u darwinia-node.service -o cat --since -30m" # RETRIVE_LOG_COMMAND="docker logs darwinia-node --since 30m" echo "[INFO] Checking Darwinia logs..." DARWINIA_LOGS="$($RETRIVE_LOG_COMMAND | grep 'Prepared block')" if [ $? -eq 0 ]; then echo "[INFO] New blocks detected." else echo "[WARN] No blocks deteched!" fi RETRIVE_LOG_COMMAND \u662f\u7528\u6765\u83b7\u53d6\u8fd1\u671f\u8282\u70b9\u65e5\u5fd7\u7684\u547d\u4ee4\u3002\u6211\u5217\u51fa\u4e86\u4e24\u4e2a\u4f8b\u5b50\uff0c\u524d\u8005\u9002\u7528\u4e8e Systemd \u542f\u52a8\u7684\u8282\u70b9\uff0c\u540e\u8005\u9002\u7528\u4e8e Docker \u542f\u52a8\u7684\u8282\u70b9\uff0c\u4f60\u53ef\u4ee5\u4efb\u610f\u4fee\u6539\u5b83\u3002 'Prepared block' \u662f\u5728\u65e5\u5fd7\u91cc\u67e5\u627e\u7684\u5173\u952e\u8bcd\uff0c\u4f60\u4e5f\u53ef\u4ee5\u4fee\u6539\u4e3a 'Imported' \u4e4b\u7c7b\u7684\u503c\u3002 \u968f\u540e\u8fd0\u884c\u8be5\u811a\u672c\uff0c\u4f1a\u53d1\u73b0\u6709 [INFO] New blocks detected. \u6216\u662f [WARN] No blocks deteched! \u7684\u8f93\u51fa\uff0c\u8bf4\u660e\u5b83\u5df2\u7ecf\u80fd\u591f\u6b63\u5e38\u68c0\u6d4b\u8282\u70b9\u65e5\u5fd7\u4e86\u3002\n2) \u6301\u7eed\u68c0\u67e5\u8282\u70b9\u65e5\u5fd7 \u4e3a\u4e86\u80fd\u591f \u6301\u7eed \u68c0\u67e5\u8282\u70b9\u65e5\u5fd7\uff0c\u6211\u4eec\u4f7f\u7528 Cron job \u6bcf\u5206\u949f \u8c03\u7528\u4e00\u6b21\u8be5\u811a\u672c\u5c31\u53ef\u4ee5\u4e86\u3002\u6267\u884c\u4ee5\u4e0b\u811a\u672c\u65b0\u589e\u4e00\u4e2a\u6bcf\u5206\u949f\u6267\u884c\u7684 Cron job\uff1a\n(crontab -l ; echo "* * * * * \/usr\/bin\/darwinia-watchlog.sh | logger -t darwinia-watchlog") 2>&1 | grep -v "no crontab" | sort | uniq | crontab - 3) \u9884\u8b66\u901a\u77e5\u548c\u91cd\u542f \u81ea\u5df1\u5199\u901a\u77e5\u592a\u9ebb\u70e6\uff0c\u4e0d\u5982\u8bd5\u8bd5 https:\/\/healthchecks.io\/ \u5427\u3002Healthchecks.io \u662f\u4e00\u6b3e \u5f00\u6e90\u7684 \u5b9a\u65f6\u4efb\u52a1\u76d1\u63a7\u3001\u901a\u77e5\u7cfb\u7edf\u3002\u5b83\u5047\u8bbe\u4f60\u7684\u811a\u672c\u5728\u300c\u67d0\u4e00\u65f6\u523b\u300d\u8fd0\u884c\uff0c\u6b63\u5e38\u60c5\u51b5\u4e0b\uff0c\u4f60\u7684\u811a\u672c\u8fd0\u884c\u6210\u529f\u5e76\u7ed9\u5b83\u53d1\u9001\u4e00\u4e2a\u6210\u529f\u6d88\u606f\uff1b\u5982\u679c\u4f60\u7684\u811a\u672c\u6ca1\u6709\u8fd0\u884c\uff0c\u6216\u662f\u6267\u884c\u51fa\u9519\uff0c\u5b83\u80fd\u591f\u6309\u7167\u6307\u5b9a\u7684\u901a\u77e5\u6e20\u9053\uff0c\u7ed9\u4f60\u53d1\u9001\u4e00\u6761\u9884\u8b66\u901a\u77e5\u3002\n\u6ce8\u518c\u540e\u9996\u5148\u5728 Integrations \u91cc\u6dfb\u52a0\u901a\u77e5\u6e20\u9053\uff0c\u4f8b\u5982\u6211\u6dfb\u52a0\u4e86\u6211\u7684 Telegram\uff1a\n\u968f\u540e\u5728 Checks \u9875\u9762\u70b9\u51fb Add Check \u65b0\u589e\u4e00\u4e2a Check\uff0c\u4f1a\u8df3\u5230\u65b0\u521b\u5efa\u7684 Check \u7684\u4fe1\u606f\u9875\u9762\uff1a\nSchedule \u662f\u80af\u5b9a\u8981\u6539\u7684\uff0c\u9700\u8981\u8ddf\u6211\u4eec\u811a\u672c\u7684\u5b9e\u9645\u8fd0\u884c\u8ba1\u5212\u5339\u914d\uff0c\u70b9\u51fb Change Schedule...\uff0c\u628a Period \u548c Grace Time \u5168\u90e8\u8c03\u6210 1 minute\uff1a\n\u6700\u540e\u70b9\u51fb Usage Examples...\uff0c\u627e\u5230 Bash \u7684\u4f8b\u5b50\uff0c\u590d\u5236\u8fd9\u884c\u547d\u4ee4\uff1a\n\u56de\u5230\u6211\u4eec\u7684\u8282\u70b9\u673a\u5668\u4e0a\uff0c\u4fee\u6539 \/usr\/bin\/darwinia-watchlog.sh \u811a\u672c\uff0c\u5728 echo "[INFO] New blocks detected." \u4e4b\u540e\u6dfb\u52a0\u8fd9\u884c\u547d\u4ee4\u5c31\u53ef\u4ee5\u4e86\uff1a\n# ... if [ $? -eq 0 ]; then echo "[INFO] New blocks detected." curl -m 10 --retry 5 https:\/\/hc-ping.com\/9a9ea2f6-1b6e-43c3-ba5a-000130ad0fd3 # \u5728\u8fd9\u91cc # ... \u8fd9\u6837\u6211\u4eec\u7684\u811a\u672c\u5728\u6bcf\u5206\u949f\u5b9a\u65f6\u6267\u884c\u65f6\uff0c\u5982\u679c\u6709\u68c0\u67e5\u5230\u65b0\u5757\u4ea7\u751f\uff0c\u5c31\u4f1a\u8f93\u51fa [INFO] New blocks detected.\uff0c\u5e76\u8c03\u7528 healthchecks.io\u3002\u5982\u679c\u6ca1\u6709\u68c0\u67e5\u5230\uff0c\u5c31\u4e0d\u4f1a\u8c03\u7528 healthchecks.io\uff0c\u8fdb\u800c healthchecks.io \u4f1a\u9ed8\u8ba4\u6267\u884c\u5931\u8d25\uff0c\u4ece\u800c\u53d1\u8d77\u901a\u77e5\u3002\n\u6700\u7ec8\u6539\u8fdb\u540e\u7684\u5b8c\u6574\u811a\u672c \u4f60\u53ef\u4ee5\u76f4\u63a5\u590d\u5236\u4ee5\u4e0b\u811a\u672c\uff0c\u6211\u8fd8\u505a\u4e86\u4e00\u4e9b\u5176\u5b83\u7684\u5c0f\u4f18\u5316\uff0c\u4fee\u6539 !!! HEALTH CHECK ID !!! \u5373\u53ef\u4f7f\u7528\u3002\n#!\/usr\/bin\/env bash RETRIVE_LOG_COMMAND="journalctl -u darwinia-node.service -o cat --since -30m" # RETRIVE_LOG_COMMAND="docker logs darwinia-node --since 30m" HEALTHCHECK_IO_URL="https:\/\/hc-ping.com\/!!! HEALTH CHECK ID !!!" # \u522b\u5fd8\u8bb0\u586b\u5165 Healthchecks.io \u7684 URL echo "[INFO] Checking Darwinia logs..." DARWINIA_LOGS="$($RETRIVE_LOG_COMMAND | grep 'Prepared block')" if [ $? -eq 0 ]; then echo "[INFO] New blocks detected." echo -n "[INFO] Notifying healthchecks.io... " curl -fsS --max-time 10 --retry 3 --data-raw "$DARWINIA_LOGS" "$HEALTHCHECK_IO_URL" else echo "[WARN] No blocks deteched!" echo -n "[INFO] Notifying healthchecks.io... " curl -fsS --max-time 10 --retry 3 "$HEALTHCHECK_IO_URL\/fail" fi \u4f60\u53ef\u4ee5\u6267\u884c journalctl SYSLOG_IDENTIFIER=darwinia-watchlog -f \u89c2\u5bdf\u811a\u672c\u8fd0\u884c\u65e5\u5fd7\uff1a\nSep 29 10:49:01 darwinia-watchlog[19493]: [INFO] Checking Darwinia logs... Sep 29 10:49:01 darwinia-watchlog[19493]: [INFO] New blocks detected. Sep 29 10:49:01 darwinia-watchlog[19493]: [INFO] Notifying healthchecks.io... OK Sep 29 10:50:01 darwinia-watchlog[19503]: [INFO] Checking Darwinia logs... Sep 29 10:50:01 darwinia-watchlog[19503]: [INFO] New blocks detected. Sep 29 10:50:02 darwinia-watchlog[19503]: [INFO] Notifying healthchecks.io... OK ... \u5199\u5728\u6700\u540e \u5176\u5b9e\u8fd9\u4e2a\u65b9\u6848\u662f\u53d7\u5230 GCP Log-based metrics \u542f\u53d1\u800c\u5b9e\u73b0\u7684\uff0c\u6700\u65e9\u6211\u7684\u601d\u8def\u662f\u7528 ELK \u5206\u6790\u65e5\u5fd7\uff0c\u4f46\u67d0\u5929\u7a81\u7136\u7075\u5149\u4e00\u73b0 \u2014 \u6839\u672c\u4e0d\u7528\u8fd9\u4e48\u9ebb\u70e6\uff0c\u76f4\u63a5\u5199\u4e2a\u811a\u672c + CRON \u5b9a\u65f6\u6267\u884c + \u968f\u4fbf\u627e\u4e2a\u5916\u90e8\u76d1\u63a7\u5c31\u597d\u4e86\u3002 \u5176\u5b9e\u4e5f\u53ef\u4ee5\u4e0d\u7528 CRON\uff0c\u6539\u7528\u811a\u672c\u6b7b\u5faa\u73af\u4e5f\u53ef\u4ee5\u3002\u4e0d\u8fc7\u8fd9\u6837\u5c31\u589e\u52a0\u4e86\u811a\u672c\u672c\u8eab\u7684\u590d\u6742\u5ea6\uff0c\u53e6\u5916\u8fd8\u5f97\u5904\u7406\u5e38\u9a7b\u8fdb\u7a0b\u7b49\u95ee\u9898\u3002 \u53e6\u5916\u4e5f\u53ef\u4ee5\u4e0d\u7528 healthcheck.io\uff0c\u76f4\u63a5\u5728\u811a\u672c\u5185\u53d1\u901a\u77e5\u3002\u4f46\u540c\u6837\u5f97\u8003\u8651\uff1a\u4e07\u4e00\u811a\u672c\u4e5f\u5d29\u4e86\u600e\u4e48\u529e\uff1f\u5982\u679c\u9a8c\u8bc1\u4eba\u8282\u70b9\u5f7b\u5e95\u65ad\u7f51\uff0c\u6839\u672c\u53d1\u4e0d\u51fa\u6765\u901a\u77e5\u600e\u4e48\u529e\uff1f\u5355\u53f0\u673a\u5668\u65e0\u6cd5\u89e3\u51b3\uff0c\u518d\u5f00\u4e00\u53f0\u673a\u5668\u7528\u4f5c\u76d1\u63a7\u8fdd\u80cc\u4e86\u8fd9\u4e2a\u65b9\u6848\u7684\u521d\u5fc3\uff0c\u800c\u5229\u7528\u5916\u90e8\u7684\u3001\u88ab\u52a8\u7684\uff08\u5373\u4f7f\u673a\u5668\u6302\u4e86\u53d1\u4e0d\u51fa\u6765\u901a\u77e5\u4e5f\u80fd\u88ab\u76d1\u63a7\u6355\u6349\u5230\uff09\u76d1\u63a7\u670d\u52a1\u662f\u6211\u76ee\u524d\u80fd\u60f3\u5230\u6210\u672c\u6700\u4f4e\u5ec9\u7684\u89e3\u51b3\u65b9\u6848\u4e86\u3002 ","permalink":"https:\/\/wi1dcard.dev\/posts\/darwinia-validators-log-based-monitoring\/","summary":"validator<\/code>\uff09\u8282\u70b9\u3002\u5bf9\u4e8e\u4ed6\u4eec\u6765\u8bf4\uff1a<\/p>\n\n
commonLabels<\/code> in kustomization.yaml<\/code> doesn’t take care of the spec.selector.matchLabels<\/code> field in ServiceMonitor<\/code>s. That makes sense, as ServiceMonitor is a part of CoreOS’s Prometheus Operator project, neither included nor maintained by Kubernetes. But how can we direct Kustomize to fill the labels in ServiceMonitors or even any fields in customized resources?<\/p>","title":"Integrate ServiceMonitor matchLabels with Kustomize commonLabels"},{"content":"The official doc of OpenWrt on VMware HowTo seems already outdated, and there’s no explaination of how to fix Unsupported or invalid disk type 2 for 'scsi0:0'. Ensure that the disk has been imported. on ESXi 6.7. Here after looked into some clues on Chinese router forums, I found an usable method to convert the image into ESXi VMDK format on macOS.\nDownload the Image You can find the .img.gz files on https:\/\/downloads.openwrt.org\/, for example:\nhttps:\/\/downloads.openwrt.org\/releases\/19.07.4\/targets\/x86\/64\/openwrt-19.07.4-x86-64-combined-ext4.img.gz\nInstall Dependencies brew install gzip # To un-gzip .gz files brew install qemu # To convert images Convert .img to .vmdk gunzip openwrt-19.07.4-x86-64-combined-ext4.img.gz qemu-img convert -f raw -O vmdk openwrt-19.07.4-x86-64-combined-ext4.img openwrt-19.07.4-x86-64-combined-ext4.vmdk Upload the VMDK to ESXi You can either upload the image using scp command or via web UI. However, I would suggest enable SSH on your ESXi host and use scp, as the next step requires shell prompt on the host.\nscp openwrt-19.07.4-x86-64-combined-ext4.vmdk root@esxi:\/vmfs\/volumes\/datastore1\/ Fix Unsupported or invalid disk type 2 for 'scsi0:0' Before using the .vmdk file as an “existing hard disk” on ESXi, there’s one more step to convert it into supported disk type.\nssh root@esxi cd \/vmfs\/volumes\/datastore1\/ vmkfstools -i 'openwrt-19.07.4-x86-64-combined-ext4.vmdk' openwrt-converted.vmdk -d thin Done! Now we can create and boot a VM with adding openwrt-converted.vmdk as the primary disk. Enjoy it!\n","permalink":"https:\/\/wi1dcard.dev\/posts\/convert-openwrt-image-to-esxi-vmdk\/","summary":"Unsupported or invalid disk type 2 for 'scsi0:0'. Ensure that the disk has been imported.<\/code> on ESXi 6.7. Here after looked into some clues on Chinese router forums, I found an usable method to convert the image into ESXi VMDK format on macOS.<\/p>","title":"Convert OpenWrt Image to ESXi VMDK"},{"content":"\u6700\u8fd1\u5728\u63a2\u7d22\u300c\u5982\u4f55\u53d1\u5e03 NPM \u5305\u300d\u7684\u8fc7\u7a0b\u4e2d\uff0c\u53d1\u73b0\u591a\u6570\u4eba\u7684\u601d\u8def\u8981\u4e48\u5b8c\u5168\u4e0d\u7528 CI\uff0c\u4fee\u6539 package.json \u5185\u7248\u672c\u53f7\u4e4b\u540e\u624b\u52a8\u53d1\u5e03\uff1b\u8981\u4e48\u7ed3\u5408 CI\uff0c\u4f46\u9700\u8981 CI \u751f\u6210\u65b0\u7248\u672c\u53f7\u4e4b\u540e\u4fee\u6539 package.json\uff0c\u6700\u540e\u673a\u5668\u4eba\u6267\u884c Git Commit + Git Tag \u5e76\u63a8\u9001\u5230\u4ed3\u5e93\u5185\u3002\u8fd9\u4e24\u79cd\u505a\u6cd5\u6211\u90fd\u4e0d\u662f\u5f88\u559c\u6b22\uff0c\u524d\u8005\u6ca1\u6709 CI \u4e0d\u80fd\u5fcd\uff0c\u540e\u8005\u4e0d\u4ec5\u8981\u6c42 CI \u6709\u5199\u6743\u9650\uff0c\u800c\u4e14\u4f1a\u4ed3\u5e93\u5185\u589e\u52a0\u8bb8\u591a\u5f62\u5982 Release v... \u4e4b\u7c7b\u7684\u63d0\u4ea4\uff0c\u5f3a\u8feb\u75c7\u8868\u793a\u63a5\u53d7\u4e0d\u4e86\u3002\n\u4e0d\u8fc7\u7ecf\u8fc7\u4e00\u756a\u7814\u7a76\uff0c\u6211\u8fd8\u662f\u627e\u5230\u4e86\u4e24\u79cd\u6bd4\u8f83\u300c\u5e72\u51c0\u300d\u7684\u601d\u8def\uff0c\u6765\u770b\u770b\u5427\u3002\n\u65b9\u6cd5 1 \u8fd9\u79cd\u65b9\u6cd5\u4e0e\u4e0a\u6587\u4e2d\u63d0\u5230\u7684\u601d\u8def\u7c7b\u4f3c\uff0c\u53ea\u662f\u539f\u5148\u7684 4 \u4e2a\u6b65\u9aa4\uff1a\n \u6839\u636e Changelog \u751f\u6210\u65b0\u7248\u672c\u53f7\u3002 \u4fee\u6539 package.json \u7684 versison \u5b57\u6bb5\u3002 \u6267\u884c npm publish\u3002 \u6267\u884c git commit\u3001git tag\u3001git push\u3002 \u88ab\u7f29\u51cf\u5230\u4e86 2 \u6b65\uff1a\n \u6839\u636e CI \u63d0\u4f9b\u7684\u73af\u5883\u53d8\u91cf\uff0c\u62ff\u5230\u89e6\u53d1\u5f53\u524d CI Job \u7684 Tag \u540d\u79f0\uff0c\u636e\u6b64\u4fee\u6539 package.json \u7684 versison \u5b57\u6bb5\u3002 \u6267\u884c npm publish\u3002 \u53e6\u5916\u89e6\u53d1\u7684\u6761\u4ef6\u4ece On Push \u6362\u6210\u4e86 On Push Tags\u3002\n\u5bf9\u4e8e GitHub Actions\uff0c\u53ef\u4ee5\u4f7f\u7528 Shell parameter expansion \u62ff\u5230 Tag \u540d\u79f0\uff1a\nexport GIT_TAG_NAME=${GITHUB_REF\/refs\\\/tags\\\/\/} npm version --allow-same-version=true --git-tag-version=false "$GIT_TAG_NAME" \u65b9\u6cd5 2 \u8fd9\u79cd\u65b9\u6cd5\u4ecd\u7136\u662f CI \u521b\u5efa Tag\uff0c\u53ea\u7701\u6389\u4e86 Commit\uff1a\n \u5f00\u53d1\u8005\u4fee\u6539 package.json \u5185\u7684\u7248\u672c\u53f7\u5e76\u63d0\u4ea4\u3002 CI \u68c0\u67e5\u662f\u5426\u6709\u5fc5\u8981\u53d1\u5e03\u65b0\u7248\u672c\uff0c\u4f8b\u5982\u53ef\u4ee5\uff1a \u68c0\u67e5\u5f53\u524d\u7248\u672c\u662f\u5426\u4e0d\u5b58\u5728\uff0c\u4f8b\u5982\u6267\u884c test -z "$(npm view .@<VERSION>)"\u3002 \u68c0\u67e5 Commit Message \u662f\u5426\u5305\u542b\u5173\u952e\u8bcd\uff0c\u4f8b\u5982 Release *\u3002 \u6267\u884c npm publish\u3002 \u6267\u884c git tag\u3001git push --tags\u3002 \u53c2\u8003 \u65b9\u6cd5 1\uff1ahttps:\/\/github.com\/mikeal\/merge-release \u65b9\u6cd5 2\uff1ahttps:\/\/github.com\/marketplace\/actions\/publish-to-npm https:\/\/github.community\/t\/how-to-get-just-the-tag-name\/16241 \u788e\u788e\u5ff5 \u4e0d\u592a\u7406\u89e3 NPM \u4e3a\u4ec0\u4e48\u8981\u8fd9\u6837\u505a\uff0c\u52a0\u4e2a npm publish --version=... \u4f3c\u4e4e\u5b8c\u7f8e\u89e3\u51b3\u95ee\u9898\u3002\u6211\u731c\u5927\u6982\u662f\u5386\u53f2\u539f\u56e0\uff0c\u53ef\u80fd\u90a3\u4e2a\u5e74\u4ee3\u8fd8\u6ca1\u4ec0\u4e48\u4eba\u7528 CI \u548c Git Tag\uff0c\u66f4\u6d41\u884c\u7528\u6587\u4ef6\u6765\u7ba1\u7406\u7248\u672c\u5427\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/npm-publish-with-git-tag-and-ci-cd\/","summary":"package.json<\/code> \u5185\u7248\u672c\u53f7\u4e4b\u540e\u624b\u52a8\u53d1\u5e03\uff1b\u8981\u4e48\u7ed3\u5408 CI\uff0c\u4f46\u9700\u8981 CI \u751f\u6210\u65b0\u7248\u672c\u53f7\u4e4b\u540e\u4fee\u6539 package.json<\/code>\uff0c\u6700\u540e\u673a\u5668\u4eba\u6267\u884c Git Commit + Git Tag \u5e76\u63a8\u9001\u5230\u4ed3\u5e93\u5185\u3002\u8fd9\u4e24\u79cd\u505a\u6cd5\u6211\u90fd\u4e0d\u662f\u5f88\u559c\u6b22\uff0c\u524d\u8005\u6ca1\u6709 CI \u4e0d\u80fd\u5fcd\uff0c\u540e\u8005\u4e0d\u4ec5\u8981\u6c42 CI \u6709\u5199\u6743\u9650\uff0c\u800c\u4e14\u4f1a\u4ed3\u5e93\u5185\u589e\u52a0\u8bb8\u591a\u5f62\u5982 Release v...<\/code> \u4e4b\u7c7b\u7684\u63d0\u4ea4\uff0c\u5f3a\u8feb\u75c7\u8868\u793a\u63a5\u53d7\u4e0d\u4e86\u3002<\/p>\n\n
\n
secretName<\/code> \u5c5e\u6027\uff0c\u7528\u4e8e\u6307\u5b9a Secret \u8d44\u6e90\u540d\u79f0\u3002\u5728\u53d6\u5f97\u8bc1\u4e66\u540e\uff0c\u901a\u8fc7 kubectl create secret tls tls-secret --key tls.key --cert tls.crt<\/code> \u521b\u5efa Secret \u5b58\u50a8\u8bc1\u4e66\uff0c\u4fbf\u53ef\u4ee5\u88ab Ingress \u4f7f\u7528\u4e86\u3002<\/p>\n\n
apply<\/code> \u547d\u4ee4\uff1b\u56e0\u6b64\u5728 CI\/CD \u573a\u666f\u4e2d\u5fc5\u987b\u8003\u8651\u5230\u5224\u65ad\u662f install \u8fd8\u662f upgrade\u3002<\/li>\nHelm Releases as Code<\/code>\u3002\u6211\u542c\u8bf4\u8fc7\u7684\u4ea7\u54c1\u6709 Helmsman<\/a> \u548c Helmfile<\/a> \u4e24\u6b3e\u3002\u76ee\u524d\u6211\u4eec\u56e2\u961f\u5df2\u7ecf\u4f7f\u7528\u540e\u8005\u4e00\u6bb5\u65f6\u95f4\uff0c\u5e76\u4e14\u6709\u56e2\u961f\u6210\u5458\u8d21\u732e\u8fc7\u90e8\u5206\u4ee3\u7801\u3002<\/p>","title":"K8s \u4e0b\u7684\u5e94\u7528\u7ba1\u7406 \u2014 \u4e86\u89e3 Helmfile"},{"content":"Helm \u662f\u4e00\u6b3e\u9488\u5bf9 Kubernetes \u7684\u300c\u5305\u7ba1\u7406\u5668\u300d\uff0c\u867d\u8bf4\u79f0\u5b83\u4e3a\u5305\u7ba1\u7406\u5668\uff0c\u5176\u5b9e\u4e0e\u5e94\u7528\u5f00\u53d1\u8fc7\u7a0b\u4e2d\u4f7f\u7528\u7684\u5305\u7ba1\u7406\u5668\u7565\u6709\u4e0d\u540c\uff0c\u540e\u8005\u7ba1\u7406\u7684\u662f\u5e94\u7528\u5f00\u53d1\u8fc7\u7a0b\u4e2d\u7684\u4f9d\u8d56\uff0cHelm \u5219\u7ba1\u7406\u7740 Kubernetes \u4e2d\u5e94\u7528\u90e8\u7f72\u65f6\u5404\u9879\u8d44\u6e90\u7684\u4f9d\u8d56\u3002\n\u5982\u679c\u4f60\u5bf9 Kubernetes \u6709\u4e00\u5b9a\u4e86\u89e3\uff0c\u76f8\u4fe1\u4f60\u5df2\u7ecf\u5bf9 Deployment\u3001Service\u3001Ingress \u7b49\u8d44\u6e90\u6709\u4e86\u4e00\u5b9a\u8ba4\u8bc6\uff0c\u5927\u591a\u6570 Web \u5e94\u7528\u5728\u90e8\u7f72\u5230 K8s \u96c6\u7fa4\u4e0a\u65f6\u9700\u8981\u5927\u91cf\u4e0d\u540c\u7c7b\u578b\u7684\u8d44\u6e90\u3002\u4f60\u53ef\u4ee5\u5c06\u8fd9\u4e9b\u8d44\u6e90\u58f0\u660e\u7684 YAML \u6587\u4ef6\u653e\u5728\u540c\u4e00\u4e2a\u6587\u4ef6\u5939\u4e0b\u7ba1\u7406\uff0c\u4f46\u662f\u968f\u7740\u6570\u91cf\u7684\u589e\u52a0\uff0c\u5982\u4f55\u590d\u7528\u8fd9\u4e9b YAML\u3001\u5982\u4f55\u7075\u6d3b\u53c8\u4e0d\u7e41\u7410\u5730\u8c03\u6574\u914d\u7f6e\u4ee5\u9002\u5e94\u4e0d\u540c\u73af\u5883\u3001\u5982\u4f55\u5c06\u8fd9\u4e9b YAML \u4f5c\u4e3a\u4e00\u4e2a\u6574\u4f53\u7ba1\u7406\uff0c\u6210\u4e86\u4e00\u4e2a\u4e0d\u5c0f\u7684\u95ee\u9898\u3002\n\u4e8e\u662f\uff0c\u50cf Helm\u3001Ksonnet \u8fd9\u6837\u7684\u9879\u76ee\u51fa\u73b0\u4e86\u3002\u5b83\u4eec\u7684\u601d\u8def\u5927\u591a\u53ef\u4ee5\u5206\u4e3a\u4e24\u7c7b \u2014 \u6a21\u677f\u6e32\u67d3\u6d3e\u548c\u4ee3\u7801\u914d\u7f6e\u6d3e\u3002Helm \u5c5e\u4e8e\u524d\u8005\u3002\n\u5c3d\u7ba1\u6211\u4e2a\u4eba\u4e0d\u662f\u5f88\u559c\u6b22 Go template \u7684\u8bed\u6cd5\uff0c\u4ee5\u53ca\u8003\u8651\u5230 YAML \u7684\u7f29\u8fdb\u5c42\u7ea7\uff0c\u53ef\u80fd\u4e0d\u592a\u9002\u5408\u4f7f\u7528\u6a21\u677f\u5f15\u64ce\u6e32\u67d3\u3002\u4f46\u4e0d\u53ef\u5426\u8ba4\uff1a\n Helm \u662f\u76ee\u524d Kubernetes \u5708\u5185\u5e94\u7528\u6700\u5e7f\u6cdb\u7684\u8d44\u6e90\u7ba1\u7406\u5668\uff0c\u62e5\u6709\u5f3a\u5927\u7684\u793e\u533a\u548c\u751f\u6001\u3002\u4ece\u5b98\u65b9\u524d\u671f\u63a8\u5e7f\u7684 chart \u4ed3\u5e93\u63d0\u4ea4\u8bb0\u5f55\u5c31\u53ef\u4ee5\u770b\u5f97\u51fa\u6765\uff1ahttps:\/\/github.com\/helm\/charts\/commits\/master\u3002 \u6700\u8fd1\u63a8\u51fa\u7684 Helm 3.0 \u89e3\u51b3\u4e86\u4e0d\u5c11\u4e0a\u4e00\u4e2a\u5927\u7248\u672c\u4e2d\u5b58\u5728\u7684\u8bbe\u8ba1\u95ee\u9898\uff08\u4f8b\u5982 Tiller\uff09\u3002 \u56e0\u6b64\u6211\u8ba4\u4e3a Helm \u4ecd\u7136\u662f\u76ee\u524d\u7684\u6700\u4f73\u9009\u62e9\u4e4b\u4e00\u3002\n\u4e3a\u4e86\u8ba9\u8bfb\u8005\u6709\u66f4\u52a0\u76f4\u89c2\u7684\u611f\u53d7\uff0c\u63a5\u4e0b\u6765\u6211\u5c06\u7b80\u5355\u4ecb\u7ecd\u4e00\u4e0b\u4f7f\u7528 Helm \u90e8\u7f72\u5e94\u7528\u5230 Kubernetes \u7684\u5de5\u4f5c\u6d41\u3002\n\u90e8\u7f72\u793e\u533a\u63d0\u4f9b\u7684 Chart charts \u662f Helm \u7684\u6838\u5fc3\u6982\u5ff5\u4e4b\u4e00\uff0c\u5305\u542b\u7740 Kubernetes \u5e94\u7528\u6240\u9700\u7684\u8d44\u6e90\u6a21\u677f\u3002\u5728\u5b89\u88c5 chart \u65f6\u4fee\u6539 values \u7684\u503c\u5373\u53ef\u8c03\u6574\u914d\u7f6e\u53c2\u6570\u3002\n\u9996\u5148\u4f60\u53ef\u4ee5\u5728 https:\/\/hub.helm.sh\/ \u67e5\u627e\u793e\u533a\u63d0\u4f9b\u7684 charts\u3002\u5728\u5b89\u88c5\u4e4b\u524d\u9700\u8981\u6dfb\u52a0 chart repo\uff0crepo \u5185\u5305\u542b chart \u7684\u58f0\u660e\u3002\u4f8b\u5982 bitnami \u63d0\u4f9b\u7684 chart repo\uff1a\nhelm repo add bitnami https:\/\/charts.bitnami.com\/bitnami \u4ee5 Redis chart \u4e3a\u4f8b\uff0c\u6211\u4eec\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u5b89\u88c5\u5b83\uff0c\u8bf4\u767d\u4e86\u5c31\u662f\u90e8\u7f72 chart \u5185\u7684\u8d44\u6e90\u5230 Kubernetes \u96c6\u7fa4\uff1a\nhelm install my-release bitnami\/redis \u5b89\u88c5\u6210\u529f\u540e\u4f1a\u51fa\u73b0\u7c7b\u4f3c\u8fd9\u6837\u7684\u63d0\u793a\uff1a\nNAME: my-release LAST DEPLOYED: Mon Mar 23 22:24:12 2020 NAMESPACE: staging STATUS: deployed REVISION: 1 TEST SUITE: None NOTES: ** Please be patient while the chart is being deployed ** Redis can be accessed via port 6379 on the following DNS name from within your cluster: ... \u5176\u4e2d\uff0cmy-release \u662f release \u540d\u79f0\u3002Releases \u4e5f\u662f Helm \u7684\u6982\u5ff5\u4e4b\u4e00\u3002\u6bcf\u6b21\u5b89\u88c5\u90fd\u4f1a\u4ea7\u751f\u65b0\u7684 release\uff0c\u66f4\u65b0\u65f6\u5219\u4f1a\u4ea7\u751f\u65b0\u7684 release revision\u3002\u4f60\u53ef\u4ee5\u4f7f\u7528 helm list \u547d\u4ee4\u67e5\u770b\u5f53\u524d\u547d\u540d\u7a7a\u95f4\u4e0b\u7684\u6240\u6709 releases\uff1a\nNAME NAMESPACE\tREVISION\tUPDATED STATUS CHART APP VERSION my-release\tstaging 1 2020-03-23 22:24:12.345011 +0800 CST\tdeployed\tredis-10.5.11\t5.0.8 \u53e6\u5916\uff0c\u5728\u6267\u884c helm install \u547d\u4ee4\u65f6\uff0c\n\u5347\u7ea7\u3001\u56de\u6eda\u4e0e\u5220\u9664 \u4f7f\u7528 helm upgrade \u547d\u4ee4\u53ef\u7528\u4e8e\u66f4\u65b0 releases\uff0c\u4f8b\u5982\u5f53\u4fee\u6539\u4e86\u67d0\u4e2a value \u7684\u503c\uff0c\u9700\u8981\u91cd\u65b0\u90e8\u7f72\u5e94\u7528\uff1a\nhelm upgrade my-release bitnami\/redis --set cluster.enabled=false \u8fd9\u91cc\u7684 --set \u6216 --values \u9009\u9879\u53ef\u4ee5\u4fee\u6539\u7279\u5b9a value \u6216\u6307\u5b9a YAML \u683c\u5f0f\u7684 values \u914d\u7f6e\u6587\u4ef6\u3002\u8fd9\u4e24\u4e2a\u9009\u9879\u540c\u6837\u9002\u7528\u4e8e helm install \u547d\u4ee4\u3002\n\u901a\u8fc7 helm history \u547d\u4ee4\u5373\u53ef\u67e5\u770b\u67d0\u4e2a release \u90e8\u7f72\u8fc7\u7684\u5386\u53f2 revisons\uff0c\u8f93\u51fa\u7c7b\u4f3c\u4e8e\uff1a\nREVISION\tUPDATED STATUS chart APP VERSION\tDESCRIPTION 1 Mon Mar 23 22:24:12 2020\tsuperseded\tredis-10.5.11\t5.0.8 Install complete 2 Tue Mar 24 00:17:34 2020\tdeployed redis-10.5.11\t5.0.8 Upgrade complete Helm \u5728\u90e8\u7f72\u65f6\u4f1a\u5c06\u4f7f\u7528 values \u6e32\u67d3\u51fa\u6765\u7684\u8d44\u6e90\u58f0\u660e\u5b58\u50a8\u5230 release revison \u4e2d\u3002\u4e5f\u5c31\u662f\u8bf4\u6211\u4eec\u6bcf\u6b21\u5b89\u88c5\u3001\u5347\u7ea7 chart \u90fd\u53ef\u56de\u9000\u3002\u5f53\u5e94\u7528\u56e0\u4e3a\u67d0\u4e9b\u539f\u56e0\u9700\u8981\u56de\u6eda\u65f6\uff0c\u4f7f\u7528 helm rollback \u53ef\u5c06\u6240\u6709\u76f8\u5173\u8d44\u6e90\u56de\u6eda\u5230\u7279\u5b9a revison \u7684\u72b6\u6001\uff1a\nhelm rollback my-release # \u56de\u6eda\u5230\u4e0a\u4e00\u4e2a revision helm rollback my-release n # \u56de\u6eda\u5230\u7b2c n \u4e2a revision \u6700\u540e\uff0c\u5728\u9700\u8981\u5378\u8f7d\u5e94\u7528\u65f6\u4f7f\u7528 helm delete \u547d\u4ee4\u5220\u9664 release \u5373\u53ef\uff1a\nhelm delete my-release \u5c0f\u7ed3 \u4ee5\u4e0a\u662f\u4f7f\u7528 Helm \u7ba1\u7406 Kubernetes \u8d44\u6e90\u7684\u5927\u81f4\u5de5\u4f5c\u6d41\u3002\u53ef\u4ee5\u770b\u51fa\uff0c\u5927\u591a\u6570\u6d41\u7a0b\u4ecd\u7136\u662f\u300c\u9762\u5411\u8fc7\u7a0b\u300d\uff0c\u800c\u4e0d\u662f\u300c\u58f0\u660e\u5f0f\u300d\u7684\uff0c\u9700\u8981\u7531\u4eba\u5de5\u8f93\u5165\u547d\u4ee4\u3001\u5224\u65ad\u662f install \u8fd8\u662f upgrade\u3002\u7406\u60f3\u7684\u5de5\u4f5c\u6d41\u5e94\u5f53\u5c06\u8fd9\u4e9b\u8fc7\u7a0b\u7f16\u5199\u6210\u914d\u7f6e\u6587\u4ef6\uff0c\u5e76\u4e14\u80fd\u591f\u826f\u597d\u5730\u96c6\u6210 CI\/CD\u3002\u8fd9\u4e00\u90e8\u5206\u6211\u4eec\u5df2\u7ecf\u6709\u4e86\u76f8\u5bf9\u6bd4\u8f83\u5b8c\u5584\u7684\u89e3\u51b3\u65b9\u6848\uff0c\u6211\u4f1a\u5728\u4e0b\u4e00\u7bc7\u6587\u7ae0\u4e3a\u5927\u5bb6\u8be6\u7ec6\u4ecb\u7ecd\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/getting-to-know-helm\/","summary":"**.**.**.1<\/code>. These issues have been described as “features” of their products from a training manual that I found in Baidu Wenku<\/a>.<\/p>","title":"Connect to Sangfor SSL VPNs Without the Terrible Client"},{"content":"\u8f6c\u773c\u95f4\u5230\u4e86 2019 \u5e74\u672b\uff0c\u8fd8\u8bb0\u5f97\u53bb\u5e74\u4e5f\u5199\u8fc7\u4e00\u7bc7\u7c7b\u4f3c\u7684 \u535a\u5ba2\uff1b\u8ba1\u5212\u4eca\u5e74\u7684\u300c\u5e74\u7ec8\u603b\u7ed3\u300d\u86ee\u4e45\u4e86\uff0c\u53ea\u662f\u89c9\u5f97\u65f6\u95f4\u8fd8\u65e9\u4fbf\u4e00\u76f4\u6ca1\u6709\u52a8\u624b\uff0c\u76f4\u5230\u4eca\u5929\u624d\u604d\u7136 \u2014\u2014 \u5df2\u7ecf\u662f 2019 \u5e74\u6700\u540e\u4e00\u5929\u4e86\u3002\n2019 \u5e74\u7684\u76ee\u6807 \u2014\u2014 \u534a\u8fbe\u6210 \u82e5\u662f\u6982\u62ec\u53bb\u5e74\u5b9a\u4e0b\u7684\u76ee\u6807\uff1a\n \u6280\u672f\u65b9\u9762\uff1a\u7ee7\u7eed\u6df1\u5165\u540e\u7aef\u9886\u57df \u2014\u2014 \u8fbe\u6210\u3002 \u989d\u5916\u6280\u80fd\uff1a\u63d0\u5347\u82f1\u8bed\u6c34\u5e73 \u2014\u2014 \u534a\u8fbe\u6210\uff0c\u867d\u7136\u6709\u6240\u63d0\u9ad8\uff08\u81f3\u5c11\u8ddf\u8001\u5916\u53d1\u90ae\u4ef6\u3001\u804a Slack \u4e0d\u602f\u573a\uff09\uff0c\u4f46\u8fd8\u662f\u6ca1\u6709\u8fbe\u5230\u300c\u8d28\u7684\u98de\u8dc3\u300d\u3002 \u751f\u6d3b\u65b9\u9762\uff1a***\uff0c\u4ee5\u53ca\u953b\u70bc\u53a8\u827a \u2014\u2014 \u8fbe\u6210\uff01 \u5176\u5b83\uff1a\u8eab\u4f53\u5065\u5eb7 \u2014\u2014 \u534a\u8fbe\u6210\uff0c\u8170\u75bc\u817f\u9ebb\u66f4\u4e25\u91cd\u4e86… \u8bb2\u771f\uff0c\u4f5c\u4e3a\u4e00\u4e2a\u7a0b\u5e8f\u5458\uff0c\u6211\u5f3a\u70c8\u5efa\u8bae\u5728\u4ee3\u7801\u4e4b\u5916\u57f9\u517b\u8d77\u5176\u5b83\u7684\u7231\u597d\uff0c\u751a\u81f3\u662f\u6280\u80fd\u3002\u5f53\u7136\u6211\u5e76\u4e0d\u53cd\u5bf9\u5728\u804c\u4e1a\u9886\u57df\u6df1\u7a76\uff08\u76f8\u53cd\uff0c\u4e0b\u6587\u4f1a\u63d0\u5230\u54ea\u4e2a\u65b9\u9762\u300c\u6d6a\u8d39\u300d\u4e86\u6211\u4e00\u6574\u5e74\u7684\u6280\u672f\u5411\u4e1a\u4f59\u7cbe\u529b\ud83d\ude02\uff09\uff0c\u53ea\u4e0d\u8fc7\u4eca\u5e74\u5bf9\u4e8e\u4ee3\u7801\u4ee5\u5916\u7684\u4e16\u754c\u6709\u4e86\u8bb8\u591a\u65b0\u7684\u8ba4\u8bc6\uff0c\u5b83\u4eec\u771f\u7684\u4f1a\u7ed9\u6211\u5e26\u6765 \u4e0d\u4e00\u6837\u7684 \u5e78\u798f\u611f\u548c\u6210\u5c31\u611f\uff0c\u8fd9\u662f\u94bb\u7814\u6280\u672f\u6240\u4f53\u9a8c\u4e0d\u5230\u7684\u3002\n2019 \u5e74\u6211\u5e72\u4e86\u5565 \u6211\u7528\u4e00\u4e9b\u811a\u672c\u628a\u4eca\u5e74\u6240\u6709\u7684 Git Commits \u5168\u90e8\u5bfc\u51fa\u6210 CSV\uff0c\u7136\u540e\u518d\u4f7f\u7528 Office 365 Excel \u5206\u6790\uff0c\u53d1\u73b0\u4e86\u4e00\u4e9b\u6709\u8da3\u7684\u7ed3\u679c\u3002\n\u5e74\u5ea6\u62a5\u544a\uff08\u4ec5\u4f5c\u5a31\u4e50\uff09 2019 \u5e74\u6211\u4e00\u5171\u63d0\u4ea4\u4e86 1991 \u6b21\uff0c\u5176\u4e2d\u516c\u53f8\u4ed3\u5e93 1024 \u6b21\uff0c\u4e2a\u4eba\uff08\u5305\u62ec\u79c1\u6709\u548c\u5f00\u6e90\uff09\u4ed3\u5e93 967 \u6b21\u3002 \u5728\u516c\u53f8\u4ed3\u5e93\u7684\u63d0\u4ea4\u4e2d\uff0c\u6709 851 \u6b21\u662f\u5728\u5de5\u4f5c\u65f6\u95f4\uff0c\u7ea6\u5360 83%\uff1b\u76f8\u53cd\uff0c\u4e2a\u4eba\u4ed3\u5e93\u6709 798 \u6b21\u63d0\u4ea4\u662f\u5728\u4e0b\u73ed\u540e\u6216\u4f11\u606f\u65e5\uff0c\u7ea6\u5360 83%\uff0c\u5b8c\u7f8e\u7684\u914d\u6bd4\u3002 \u8ba9\u6211\u6ca1\u60f3\u5230\u7684\u662f\uff0c\u4e00\u5929 24 \u5c0f\u65f6\uff0c\u5404\u4e2a\u5c0f\u65f6\u6211\u90fd\u66fe\u6709\u8fc7\u63d0\u4ea4\uff08\u4ec5\u4e2a\u4eba\u4ed3\u5e93\uff09\uff1a 6 \u6708 24 \u53f7\u6211\u4f3c\u4e4e\u7761\u5f97\u5f88\u65e9\uff0c\u6700\u540e\u4e00\u6b21\u63d0\u4ea4\u5728 21:17\uff0c\u63a5\u7740 25 \u53f7\u7684\u7b2c\u4e00\u6b21\u63d0\u4ea4\u51fa\u73b0\u5728 5:23\u3002 \u51fa\u73b0\u5728 \u51cc\u6668 4 \u70b9 \u7684\u53ea\u6709\u4e24\u6b21\u63d0\u4ea4\uff0c\u6765\u6e90\u4e8e 2 \u6708 13 \u53f7\u5c1d\u8bd5 Rust \u5199\u7684\u4e00\u4e2a Demo \u9879\u76ee\uff0c\u7136\u800c\u540e\u6765\u8fd8\u662f\u6682\u505c\u4e86 Rust \u5b66\u4e60\u8ba1\u5212\u3002 \u51fa\u73b0\u5728 \u51cc\u6668 3 \u70b9 \u7684\u4e5f\u53ea\u6709\u4e24\u6b21\u63d0\u4ea4\uff0c\u6765\u6e90\u4e8e\u79c1\u4eba\u5907\u4efd\u4ed3\u5e93\uff0c\u770b\u8d77\u6765\u4f3c\u4e4e\u6211\u5728 6 \u6708 26 \u53f7\u534a\u591c\u5907\u4efd\u4e86\u4e00\u4e0b\u7535\u8111\u3002 \u6392\u9664\u4ee5\u4e0a\u7ed3\u679c\uff0c\u6211\u71ac\u591c\u809d\u5230\u6700\u665a\u7684\u4e00\u6b21\u662f 5 \u6708 18 \u65e5 2:44 \u6539\u8fdb kexue-gateway\u3002 \u5728 1 \uff5e 2 \u70b9\u6211\u66fe\u63d0\u4ea4\u8fc7 42 \u6b21\uff1b\u79d1\u5b66\u4e0a\u7f51\u76f8\u5173 24 \u6b21\uff0c\u535a\u5ba2 10 \u6b21\uff0cKubernetes \u76f8\u5173 7 \u6b21\u3002 \u665a\u4e0a\u6548\u7387\u6700\u9ad8\u7684\u65f6\u95f4\u662f 21 \uff5e 22 \u70b9\uff0c\u56e0\u4e3a 18 \u70b9\u949f\u603b\u63d0\u4ea4 27 \u6b21\uff0c19 \u70b9 60 \u6b21\uff0c20 \u70b9 99 \u6b21\uff0c21 \u70b9 138 \u6b21\uff0c10 \u70b9 148 \u6b21\uff0c11 \u70b9 70 \u6b21\uff0c12 \u70b9\u53ea\u5269 52 \u6b21\u4e86\u3002 \u5de5\u4f5c\u65f6\u95f4\u7ebf 1\u30012 \u6708\u4efd\u6211\u8fd8\u5728\u4e0e GitLab CI\u3001Ansible\u3001Cloud-init \u594b\u6218\uff0c\u4e3b\u8981\u7cbe\u529b\u96c6\u4e2d\u5728\u90e8\u7f72 Prometheus\u3001Grafana \u7b49\u76d1\u63a7\u3001\u9884\u8b66\u9879\u76ee\u4e0a\u3002 3 \u6708\u5f00\u59cb\u6df1\u5165\u5b66\u4e60 Terraform\u3002 4 \u6708\u53c8\u6298\u817e\u76d1\u63a7\uff0c\u987a\u4fbf\u6df1\u5165\u7814\u7a76\u4e86 Laravel \u961f\u5217\u5e76\u5e94\u7528\u5230\u7ebf\u4e0a\u3002 5 \u6708\u4f7f\u7528 Golang \u5f00\u53d1\u5b9a\u65f6\u4efb\u52a1\u5931\u8d25\u544a\u8b66\uff0c\u540c\u65f6\u5c06\u539f\u672c\u4eba\u5de5\u7ef4\u62a4\u7684 Cronitor \u914d\u7f6e\u8fc1\u79fb\u5230 Terraform\uff0c\u591a\u4e8f\u4e86\u6211\u53f8\u540c\u4e8b\u5f00\u53d1\u7684 terraform-provider-cronitor\u3002 \u8f6c\u6298\u70b9\uff1a5 \u6708\u5e95\u7ec8\u4e8e\u5f00\u59cb\u771f\u6b63\u63a5\u89e6 Kubernetes\uff01 6 \u6708\u5b8c\u6574\u5730\u68b3\u7406\u4e86\u516c\u53f8\u7f51\u7edc\u62d3\u6251\uff0c\u90e8\u7f72\u4e86\u65b0\u7684 UniFi \u5168\u5bb6\u6876\u548c\u4e00\u53f0\u5de8\u6c89\u7684\u673a\u67dc\uff0c\u5e76\u642d\u5efa\u4e86\u4e00\u5957\u5907\u7528\u7684\u7f51\u5173\u3002 6 \u6708\u5e95\u6211\u4eec\u53c8\u628a\u9ed1\u76d2\u63a2\u9488\u76d1\u63a7 StatusCake \u914d\u7f6e\u8fc1\u79fb\u5230\u4e86 Terraform\u3002 7 \u6708\u5927\u6279\u91cf\u8fc1\u79fb Kubernetes\uff0c\u4f9d\u7a00\u8bb0\u5f97\u90a3\u65f6\u5019\u72c2\u5220 Cloud-init \u673a\u5668\u914d\u7f6e\u7684\u9178\u723d\u3002 7 \u6708\u4e0b\u65ec\u5230 8 \u6708\u4e0a\u65ec\uff0c\u63a5\u8fd1\u4e00\u6574\u6708\u7684\u65f6\u95f4\u6211\u90fd\u505c\u7559\u5728\u300c\u88ab PHPStan \u5751\uff08\u5176\u5b9e\u662f\u88ab\u9057\u4f20\u4ee3\u7801\uff09\u300d->\u300c\u4ece\u5751\u91cc\u722c\u51fa\u6765\u300d->\u300c\u518d\u8e29\u65b0\u5751\u300d\u7684\u5faa\u73af\u4e2d\uff1b\u7ed9\u51e0\u5341\u4e2a\u79c1\u6709\u5305\u52a0 PHPStan \u8fd8\u8981\u4fee\u590d\u62a5\u9519\uff0c\u771f\u662f\u4f53\u529b\u6d3b\u3002 8 \u6708\u5269\u4f59\u7684\u65f6\u95f4\u76f4\u5230 10 \u6708\u5e95\uff0c\u53ef\u8c13\u662f\u5c0f\u5b87\u5b99\u7206\u53d1\uff0c\u5229\u7528 Helm \u548c Helmfile \u90e8\u7f72\u4e86\u4e0d\u5c11\u5e94\u7528\u5230 Kubernetes\uff0c\u7ec8\u4e8e\u79f0\u5f97\u4e0a\u5165\u95e8\u4e86\uff1b\u8fd8\u987a\u4fbf\u8c03\u7814\u4e86 Helm Secrets \u914d\u5408 Sops \u7684 Git \u4ed3\u5e93\u5185\u5bc6\u94a5\u7ba1\u7406\u65b9\u6848\uff0c\u6700\u7ec8\u5b9e\u65bd\u4e0a\u7ebf\u5e76\u4e14\u4e00\u76f4\u7528\u5230\u73b0\u5728\u3002 \u8f6c\u6298\u70b9\uff1a10 \u6708\u5e95\u5f00\u59cb\u63a5\u624b IT \u76f8\u5173\u5de5\u4f5c\uff0c\u4e0d\u4ec5\u9700\u8981\u7ef4\u62a4\u516c\u53f8\u5458\u5de5\u6743\u9650\uff08\u4f8b\u5982 Azure AD\u3001Office 365\u3001Atlassian \u7b49\uff09\uff0c\u8fd8\u5305\u62ec\u5904\u7406\u6765\u81ea\u7f8e\u56fd\u529e\u516c\u5ba4\u7684 IT Tickets \u4ee5\u53ca Onboarding Request\u3002 11 \u6708\u91cd\u65b0\u68b3\u7406\u4e86\u5e74\u4e45\u5931\u4fee\u7684\u516c\u53f8 VPN \u63a5\u5165\u70b9\uff0c\u5176\u5b83\u5927\u90e8\u5206\u65f6\u95f4\u90fd\u7528\u5728\u4e86\u7814\u7a76 Salesforce\u3001\u4f7f\u7528 TypeScript \u5f00\u53d1\u81ea\u52a8\u5316\u5de5\u5177\uff0c\u5c06 DiscoveryData \u7684 Sales leads \u5bfc\u5165\u5230 Salesforce\uff0c\u4ee5\u4f9b\u7f8e\u56fd Sales Team \u4f7f\u7528\u3002 12 \u6708\u51e0\u4e4e\u4e00\u76f4\u5728\u5904\u7406\u5404\u79cd\u5404\u6837\u7684 IT Tickets\uff0c\u7f8e\u56fd\u90a3\u8fb9\u7684\u62db\u4eba\u901f\u5ea6\u5b9e\u5728\u592a\u5feb\u4e86\u3002\u53e6\u5916\uff0c\u4f7f\u7528 Golang \u5f00\u53d1\u4e86 PHP-CS-Fixer \u89c4\u5219\u81ea\u52a8\u66f4\u65b0\u673a\u5668\u4eba\uff0c\u4fdd\u8bc1\u6570\u5341\u4e2a\u6269\u5c55\u5305\u7684\u4ee3\u7801\u98ce\u683c\u4e00\u81f4\uff1b\u4ee5\u53ca\u5f7b\u5e95\u5e9f\u5f03\u4e86\u4e0d\u7a33\u5b9a\u7684 StatusCake\uff0c\u8f6c\u6295 Pingdom\u3002 \u53ef\u4ee5\u770b\u51fa\uff0c\u6574\u6574\u4e00\u5e74\u4e0b\u6765\u63a5\u89e6\u7684\u8de8\u5ea6\u975e\u5e38\u5e7f\uff0c\u4ece\u5e74\u521d\u7684 Ansible\u3001Terraform \u5230\u540e\u6765 Kubernetes\uff0c\u518d\u5230\u5e74\u672b\u7684 IT\u3001Office 365 \u7b49\uff0c\u4eca\u5e74\u5b9e\u5728\u662f\u5b66\u5230\u592a\u591a\u4e4b\u524d\u6ca1\u6709\u673a\u4f1a\u5c1d\u8bd5\uff0c\u751a\u81f3\u662f\u5b8c\u5168\u6ca1\u6709\u542c\u8bf4\u8fc7\u7684\u77e5\u8bc6\u3002\u867d\u7136\u5176\u4e2d\u4e5f\u6709\u75b2\u5026\u548c\u52b3\u7d2f\uff0c\u4f46\u7279\u522b\u611f\u8c22 RightCapital\uff0c\u5728\u6211\u53f8\u5de5\u4f5c\u771f\u7684\u975e\u5e38\u5e78\u798f\u3002\n\u4ed4\u7ec6\u60f3\u60f3\uff0c\u6211\u6240\u5728\u7684 DevOps Team \u66f4\u50cf\u662f\u57fa\u7840\u67b6\u6784\u90e8 \u2014\u2014 \u5e73\u65f6\u4e0d\u4ec5\u6d89\u53ca\u5230\u524d\u540e\u7aef\u3001\u5e94\u7528\u90e8\u7f72\u3001\u7f51\u7edc\u90e8\u7f72\u3001\u8fd0\u7ef4\u4fdd\u969c\u3001\u6743\u9650\u7ba1\u7406\uff0c\u8fd8\u9700\u8981\u8de8\u65f6\u533a\u8ddf Support Team\u3001Sales Team \u6c9f\u901a\uff0c\u4efb\u52a1\u8270\u5de8\u5440\ud83d\ude01\u3002\n\u4e2a\u4eba\u6210\u957f\u65f6\u95f4\u7ebf \u76f8\u6bd4\u4e4b\u4e0b\uff0c\u901a\u8fc7\u4e2a\u4eba\u4ed3\u5e93\u5206\u6790\u51fa\u7684\u65f6\u95f4\u7ebf\u5c31\u7b80\u5355\u591a\u4e86\uff0c\u540c\u4e00\u6bb5\u65f6\u95f4\u5185\u6211\u57fa\u672c\u90fd\u4f1a\u56f4\u7ed5\u5728\u540c\u4e00\u4e3b\u9898\u6df1\u6316\u3002\n 1\u30012 \u6708\u4e00\u76f4\u5728\u6574\u7406\u548c\u7f16\u5199\u535a\u5ba2\uff0c\u5305\u62ec\u4f18\u5316 CI\u3001\u8c03\u6574\u9875\u9762\u5e03\u5c40\u7b49\u3002 2 \u6708\u5e95\u5f00\u59cb\u300cLaravel \u90e8\u7f72\u8bfe\u7a0b\u300d\u7cfb\u5217\uff0c\u53ef\u60dc\u4e0d\u4e45\u540e\u4fbf\u653e\u5f03\u3002 \u653e\u5f03\u7684\u539f\u56e0\u4e4b\u4e00\u5c31\u662f \u6d6a\u8d39\u6389\u6211\u4eca\u5e74\u51e0\u4e4e\u6240\u6709\u4e1a\u4f59\u65f6\u95f4\u7684\u5927\u5751 \u2014\u2014 \u79d1\u5b66\u4e0a\u7f51\u3002\u7531\u4e8e\u5e02\u9762\u4e0a\u7684\u8def\u7531\u5668\u6027\u80fd\u90fd\u5f88\u5dee\uff08\u76f8\u4fe1\u6ca1\u6709\u5382\u5bb6\u751f\u4ea7\u8def\u7531\u5668\u7684\u65f6\u5019\u8003\u8651\u5230\u8fd9\u7c7b\u7528\u9014\uff09\uff0c\u800c\u90a3\u4e9b\u73a9\u8f6f\u8def\u7531\u7684\u65b9\u6848\u51e0\u4e4e\u90fd\u662f\u9760\u5237\u7b2c\u4e09\u65b9 OpenWrt \u7b49\u56fa\u4ef6\uff0c\u914d\u5408\u7b2c\u4e09\u65b9\u63d2\u4ef6\u5b9e\u73b0\uff0c\u4e14\u4e0d\u8bf4\u6211\u66fe\u7ecf\u73a9\u8fc7\u7684\u6539\u7248\u6885\u6797\u7a33\u5b9a\u6027\u6709\u591a\u5dee\uff0c\u5355\u51ed\u5404\u79cd\u63d2\u4ef6\u826f\u83a0\u4e0d\u9f50\u7684\u4ee3\u7801\u8d28\u91cf\u6211\u5c31\u53d7\u4e0d\u4e86\u4e86\u3002\u53e6\u5916\uff0c\u9047\u5230\u95ee\u9898\u4e0d\u65b9\u4fbf\u8c03\u8bd5\u548c\u4fee\u590d\u4e5f\u662f\u6211\u653e\u5f03\u7684\u4e3b\u8981\u539f\u56e0\u3002 \u4e00\u4e0d\u505a\u4e8c\u4e0d\u4f11\uff0c4 \u6708 8 \u53f7\uff0cKexue Gateway \u7684\u524d\u8eab\u8bde\u751f\u4e86\uff0c\u5c31\u8fd9\u6837\u5f00\u542f\u4e86\u6f2b\u6f2b\u957f\u5f81\u8def\u3002\u8bb0\u5f97\u90a3\u65f6\u5019\u8fd8\u5728\u7528 Nano Pi\u3001\u6811\u8393\u6d3e\u4e4b\u7c7b\u7684 ARM \u4ea7\u54c1\uff0c\u6027\u80fd\u548c\u517c\u5bb9\u6027\u60e8\u4e0d\u5fcd\u7779\u3002 5 \u6708 8 \u53f7\uff0c\u6211\u51b3\u5b9a\u7f16\u6392\u4e00\u5957\u9002\u7528\u4e8e\u4efb\u4f55\u8def\u7531\u5668\uff08\u5728\u5c40\u57df\u7f51\u5185\u52a0\u5165\u4e00\u4e2a\u4e0d\u5e26 DHCP \u529f\u80fd\u7684\u989d\u5916\u7f51\u5173\uff09\uff0c\u4e14\u5c3d\u53ef\u80fd\u89c4\u8303\u3001\u539f\u751f\u3001\u53ef\u9760\u7684\u5f00\u6e90\u89e3\u51b3\u65b9\u6848\uff0c\u4e5f\u5c31\u662f\u73b0\u5728\u7684 Kexue Gateway \u9879\u76ee\u3002\u6b64\u540e\u76f4\u5230 7 \u6708\u5e95\uff0c\u6211\u5927\u90e8\u5206\u7684\u65f6\u95f4\u90fd\u94fa\u5728\u4e86\u8fd9\u4e2a\u9879\u76ee\u4e0a\uff0c\u4e0d\u65ad\u5730\u5b8c\u5584\u548c\u6539\u8fdb\u3002 6 \u6708 11 \u53f7\uff0c\u6ca1\u9519\uff0c\u6211\u5bf9\u5404\u8def\u673a\u573a\u4e5f\u5fcd\u65e0\u53ef\u5fcd\u4e86\u3002\u56e0\u4e3a\u516d\u6708\u521d\u56fd\u5185\u5bf9\u4e8e\u8fd9\u7c7b\u670d\u52a1\u7684\u7ba1\u5236\u592a\u4e25\u683c\uff0c\u5bfc\u81f4\u7a33\u5b9a\u6027\u5927\u4e0d\u5982\u4ece\u524d\uff1b\u53e6\u5916\u6574\u4e2a\u5708\u5b50\u662f\u975e\u592a\u591a\uff0c\u9664\u4e86\u7ecf\u5e38\u6709\u673a\u573a\u8dd1\u8def\u4e4b\u5916\uff0c\u8ba8\u8bba\u548c\u8bc4\u6d4b\u7684\u623e\u6c14\u4e5f\u90fd\u5f88\u91cd\u3002\u5b9e\u5728\u4e0d\u60f3\u6dcc\u8fd9\u6d51\u6c34\uff0c\u4e8e\u662f\u6211\u4e70\u4e86\u7b2c\u4e00\u53f0\u670d\u52a1\u5668\uff0c\u5e76\u5f00\u4e86\u4e00\u4e2a\u540d\u53eb Kexue Servers \u7684\u79c1\u6709\u4ed3\u5e93\uff0c\u7528\u6765\u7f16\u6392\u81ea\u5df1\u7684\u670d\u52a1\u3002\u5f53\u7136\uff0c\u6211\u4e0d\u613f\u6210\u4e3a\u81ea\u5df1\u8ba8\u538c\u7684\u4eba\uff0c\u6240\u4ee5\u4e00\u5f8b\u4e0d\u9500\u552e\u4e5f\u4e0d\u5206\u4eab\u3002 8 \u6708\u4efd\uff0c\u548c\u5de5\u4f5c\u65f6\u95f4\u7ebf\u4e00\u81f4\uff0c\u5bf9 Kubernetes \u548c Terraform \u7684\u70ed\u7231\u7206\u53d1\u4e86\u3002\u6211\u7528 Google Cloud Platform \u5269\u4f59\u7684\u8d60\u91d1\u5f00\u4e86 GKE \u96c6\u7fa4\uff0c\u987a\u4fbf\u8d2d\u4e70\u4e86\u51e0\u4e2a\u989d\u5916\u7684\u57df\u540d\uff0c\u5229\u7528 Terraform \u7ba1\u7406\u89e3\u6790\u8bb0\u5f55\uff1b\u51e1\u662f\u80fd\u8fc1\u79fb\u7684\u670d\u52a1\uff0c\u7edf\u7edf\u3001\u4e00\u5f8b\u642c\u4e0a Kubernetes\uff0c\u5305\u62ec\u4f60\u73b0\u5728\u770b\u5230\u7684 \u535a\u5ba2\uff08\u867d\u7136\u5b83\u73b0\u5728\u5df2\u7ecf\u88ab\u6211\u4e34\u65f6\u8fc1\u79fb\u56de\u865a\u62df\u673a\uff09\u3001\u5185\u7f51\u7a7f\u900f inlets\u3001Webhook \u8c03\u8bd5\u5de5\u5177 Webhook.site\u3001\u6587\u4ef6\u7ba1\u7406\u5668 KodExplorer \u7b49\u7b49\uff1b\u7ba1\u5b83\u6709\u6ca1\u6709\u7528\uff0c\u5148\u90e8\u7f72\u518d\u8bf4\u3002 \u5e74\u5e95\u4e4b\u524d\u4e00\u76f4\u5728\u7814\u7a76\u4ee3\u7406\u534f\u8bae\uff0c\u6ca1\u6709\u63a5\u89e6\u8fc7 VPN \u76f8\u5173\u7684\u6280\u672f\u3002\u60f3\u7740\u80fd\u591f\u6bd4\u56db\u5c42\u66f4\u52a0\u6df1\u5165\uff0c11 \u6708 10 \u53f7\uff0c\u6211\u5f00\u59cb\u5c1d\u8bd5\u80fd\u591f\u627f\u8f7d IP \u534f\u8bae\u3001\u751a\u81f3\u4e8c\u5c42\u534f\u8bae\u7684 VPN\u3002\u9762\u5bf9 IPSec\u3001WireGuard\uff0c\u90a3\u5c31\u4e0d\u5f97\u4e0d\u4e86\u89e3 Linux \u8def\u7531\u673a\u5236\uff0c\u76f4\u5230\u73b0\u5728\uff0c\u6211\u8fd8\u4e00\u76f4\u5728\u5b66\u4e60 Routing Table\uff0cBIRD \u7b49\u76f8\u5173\u77e5\u8bc6\u3002 12 \u6708\u5e95\uff0c\u4e5f\u5c31\u662f\u524d\u51e0\u5929\uff0c\u6211\u53c8\u628a\u535a\u5ba2\u91cd\u65b0\u6574\u7406\u4e86\u4e00\u4e0b\uff1b\u7b80\u5316\u6389\u4e0d\u5c11\u65e0\u7528\u7684\u52a8\u753b\u548c\u6837\u5f0f\uff0c\u8ba9\u8bfb\u8005\u548c\u6211\u7684\u4e13\u6ce8\u70b9\u66f4\u8d34\u8fd1\u5185\u5bb9\u3002\u5f88\u5de7\u7684\u662f\uff0c\u53bb\u5e74\u7684\u8fd9\u4e2a\u65f6\u5019\u6211\u4e5f\u5728\u4f18\u5316\u535a\u5ba2\u3002 \u5176\u5b9e\u6211\u662f\u4e2a\u5f88\u61d2\u7684\u4eba\uff0c\u5341\u5206\u5e86\u5e78\u5f53\u65f6\u5fcd\u53d7\u4e0d\u4e86\u7684\u65f6\u5019\uff0c\u9009\u62e9\u4e86\u81ea\u5df1\u52a8\u624b\u505a\u3002\u6211\u6ca1\u6709 CCIE\u3001JNCIE \u4e4b\u7c7b\u7684\u8bc1\u4e66\uff0c\u5b8c\u5168\u662f\u91ce\u8def\u5b50\u51fa\u8eab\uff0c\u4f46\u662f\u7ecf\u8fc7\u4e0d\u65ad\u7684\u5b66\u4e60\u548c\u5c1d\u8bd5\uff0c\u6700\u7ec8\u638c\u63e1\u4e86\u4e0d\u5c11\u300c\u6b63\u89c4\u300d\u7684\u7f51\u7edc\u77e5\u8bc6\u3002\u5e0c\u671b\u672a\u6765\u81ea\u5df1\u80fd\u591f\u4fdd\u6301\u8fd9\u6837\u5bf9\u672a\u77e5\u9886\u57df\u53d1\u8d77\u6311\u6218\u7684\u52c7\u6c14\u5427\u3002\n2019 \u603b\u7ed3 \u7ed3\u5408\u5de5\u4f5c\u548c\u4e2a\u4eba\u6210\u957f\u65f6\u95f4\u7ebf\uff0c\u6211\u57fa\u672c\u5f97\u51fa\u4eca\u5e74\u7684\u65f6\u95f4\u5206\u914d\u5360\u6bd4\uff1a\n\u79d1\u5b66\u4e0a\u7f51 4.5 : Kubernetes 2.5 : IT\/\u82f1\u8bed 1.5 : Terraform\/Prometheus 1 : PHP 0.5\n\u7a0d\u5fae\u51fa\u4e4e\u6211\u7684\u9884\u6599\uff0c\u79d1\u5b66\u4e0a\u7f51\u6240\u5360\u7684\u6bd4\u4f8b\u592a\u9ad8\u4e86\uff0c\u5e74\u521d\u7684\u9884\u671f\u5e94\u8be5\u662f\uff1a\n\u79d1\u5b66\u4e0a\u7f51 2 : Kubernetes 4 : \u82f1\u8bed 2 : Terraform\/Prometheus 1.5 : PHP 0.5\n2020 \u5c55\u671b \u6839\u636e\u6211\u81ea\u5df1\u7684\u804c\u4e1a\u89c4\u5212\u4ee5\u53ca\u5b9e\u9645\u60c5\u51b5\uff0c\u63a5\u4e0b\u6765\u4e00\u5e74\u7684\u76ee\u6807\u4e0e\u73b0\u6709\u65b9\u5411\u7c7b\u4f3c\uff1a\n \u4fdd\u8bc1\u8eab\u4f53\u5065\u5eb7\u3002 \u5feb\u901f\u5c06\u79d1\u5b66\u4e0a\u7f51\u76f8\u5173\u5185\u5bb9\u6536\u5c3e\uff0c\u8fdb\u5165\u7ef4\u62a4\u9636\u6bb5\uff0c\u4e0d\u518d\u5360\u7528\u5927\u91cf\u65f6\u95f4\u7ee7\u7eed\u5f00\u53d1\uff08\u5176\u5b9e 11 \u6708\u5c31\u6709\u8fd9\u4e2a\u60f3\u6cd5\uff0c\u5e0c\u671b\u5e74\u5e95\u80fd\u591f\u5c06\u8fd9\u65b9\u9762\u5b8c\u5168\u7ed3\u675f\uff0c\u53ea\u53ef\u60dc\u8ddd\u79bb\u6211\u7406\u60f3\u7684\u6c34\u51c6\u8fd8\u5dee\u70b9\u706b\u5019\uff09\u3002 \u6df1\u5165\u5b66\u4e60 Kubernetes\uff0c\u5305\u62ec\u76ee\u524d\u6682\u65f6\u4e0d\u719f\u6089\u7684\uff1a Taint\u3001Tolerations\u3001Node Affinity\u3001Autoscaler\u3001Resource Request \u7b49\u7279\u6027\uff0c HorizontalPodAutoscaler\u3001PodSecurityPolicy\u3001NetworkPolicy\u3001LimitRange \u7b49\u8d44\u6e90\uff0c \u4ee5\u53ca\u4e89\u53d6\u80fd\u5bf9 CRI\/CSI\/CNI\u3001Scheduler \u7b49 Kubernetes \u5185\u90e8\u539f\u7406\u6709\u4e00\u5b9a\u4e86\u89e3\u3002 \u7ee7\u7eed\u953b\u70bc\u82f1\u8bed\uff0c\u5305\u62ec\uff1a \u5c3d\u53ef\u80fd\u591a\u53c2\u4e0e\u90ae\u4ef6\u548c Slack \u8ba8\u8bba\uff0c \u575a\u6301\u7528\u82f1\u6587\u7f16\u5199\u6280\u672f\u5411\u535a\u6587\uff0c \u4ee5\u53ca\u4e89\u53d6\u7ec3\u4e60\u51e0\u6b21 italki\u3002 \u6df1\u5165\u5b66\u4e60 Prometheus\uff0c\u638c\u63e1\uff1a PromQL \u8fdb\u9636\u8bed\u6cd5\uff0c \u901a\u8fc7 Prometheus Operator \u548c Custom Metrics \u5bf9 Kubernetes \u96c6\u7fa4\u76d1\u63a7\uff0c \u4ee5\u53ca\u63d0\u5347 Golang \u7f16\u7801\u6c34\u5e73\uff0c\u4e89\u53d6\u5199\u4e00\u4e2a Prometheus Exporter \u5e76\u5f00\u6e90\u3002 \u7406\u60f3\u5360\u6bd4\uff1a\nKubernetes 4 : \u82f1\u8bed 2 : Golang 1.5 : Prometheus 1 : \u79d1\u5b66\u4e0a\u7f51 1 : \u5176\u5b83 0.5\n\u660e\u5e74\u7684\u76ee\u6807\u76f8\u6bd4\u4eca\u5e74\u8be6\u7ec6\u4e86\u4e0d\u5c11\uff0c\u4efb\u91cd\u800c\u9053\u8fdc\u5440\u3002\n\u6700\u540e \u5176\u5b9e\u8fd9\u7bc7\u535a\u6587\u6700\u65e9\u7684\u6807\u9898\u662f\u300c\u4f60\u597d\uff0c2020\u300d\uff0c\u5728\u5199\u5230\u8fd9\u91cc\u7684\u65f6\u5019\uff0c\u6211\u51b3\u5b9a\u6539\u6210\u73b0\u5728\u7684\u6807\u9898\u3002\n\u5b9e\u5728\u6ca1\u60f3\u5230\u81ea\u5df1\u6587\u601d\u6cc9\u6d8c\u3002\n\u65b0\u5e74\u5feb\u4e50\u3002\n\ud83c\udf89\n","permalink":"https:\/\/wi1dcard.dev\/posts\/hello-2020\/","summary":"netstat<\/code> and several text process tools.<\/p>","title":"List All IP Addresses and the Number of Connections to a Port"},{"content":"OpenDNS has a “un-official” (I didn’t find any docs at least) API for returning your public IP, by a normal DNS query.\ndig @resolver1.opendns.com -t A -4 myip.opendns.com +short ","permalink":"https:\/\/wi1dcard.dev\/posts\/find-your-public-ip-via-dns-protocol\/","summary":"\n
\n
ip<\/code> \u548c grep<\/code> \u547d\u4ee4\u5373\u53ef\u3002<\/p>","title":"\u5728 Linux \u4e2d\u83b7\u53d6\u9ed8\u8ba4\u7f51\u5173\u548c CIDR"},{"content":"\u5728\u65e9\u671f \u8f7b\u677e\u90e8\u7f72 Laravel \u5e94\u7528 \u8bfe\u7a0b\u5f00\u59cb\u7f16\u5199\u4e4b\u524d\uff0c\u5c31\u8003\u8651\u5230\u4e00\u4e2a\u975e\u5e38\u91cd\u8981\u7684\u95ee\u9898\uff1a\u5982\u4f55\u4fdd\u8bc1 Laravel-China \u4e0a\u53d1\u5e03\u7684\u6587\u7ae0\u4e0e GitHub \u4ed3\u5e93\u5185\u7684 Markdown \u6e90\u6587\u4ef6\u4fdd\u6301\u540c\u6b65\uff1f\n\u95ee\u9898 \u6700\u539f\u59cb\u7684\u529e\u6cd5\u662f\u6bcf\u6b21\u66f4\u65b0\u540e -> \u627e\u5230\u5bf9\u5e94\u6587\u7ae0\u7684 URL -> \u5728\u7f51\u7ad9\u4e0a\u4f5c\u51fa\u540c\u6837\u7684\u4fee\u6539\u3002\n\u4f46\u8fd9\u4e2a\u60f3\u6cd5\u5f88\u5feb\u5c31\u88ab\u6253\u6d88\u4e86\u3002\u539f\u56e0\u5f88\u591a\uff1a\n \u7eaf\u624b\u5de5\uff0c\u5bb9\u6613\u4ea7\u751f\u64cd\u4f5c\u5931\u8bef\u3002 \u8d39\u65f6\u8d39\u529b\u7684\u91cd\u590d\u6027\u65e0\u610f\u4e49\u5de5\u4f5c\uff0c\u803d\u6401\u4e3b\u8981\u751f\u4ea7\u529b\uff08\u7f16\u5199\u5185\u5bb9\uff09\u7684\u8f93\u51fa\u3002 \u61d2\u3002 \u54b3\u54b3\u3002\n\u6548\u679c\u4e00\u89c8 \u6700\u7ec8\u51b3\u5b9a\u5b8c\u5168\u81ea\u52a8\u5316\uff0c\u529b\u4e89\u4e00\u52b3\u6c38\u9038\u3002\u7ecf\u8fc7\u4e00\u6bb5\u65f6\u95f4\u6298\u817e\uff0c\u76ee\u524d\u6548\u679c\u5982\u4e0b\uff1a\n\u601d\u8def \u7ed3\u5408\u81ea\u5df1\u591a\u5e74\u524d\u7684\u6293\u5305\u5206\u6790\u6280\u80fd\u4ee5\u53ca\u5982\u4eca\u7684 CI \u6280\u80fd\uff0c\u57fa\u672c\u601d\u8def\u4e3a\uff1a\n \u4f5c\u51fa\u53d8\u66f4\uff0cgit commit + git push GitHub \u901a\u77e5 Travis CI Travis CI \u6267\u884c\u6301\u7eed\u4ea4\u4ed8\u6d41\u7a0b \u98ce\u683c\u68c0\u67e5 \u53d1\u5e03\u6587\u7ae0 \u901a\u8fc7\u4ee5\u4e0a\u7684\u53d1\u5e03\u6d41\u7a0b\uff0c\u4e0d\u4ec5\u53ef\u4ee5\u8fbe\u5230\u8d8b\u8fd1\u5b9e\u65f6\u7684\u6587\u7ae0\u66f4\u65b0\uff0c\u8fd8\u80fd\u591f\u89e3\u51b3\u4ee5\u4e0b\u95ee\u9898\uff1a\n \u53d1\u5e03\u524d\u786e\u4fdd\u884c\u6587\u89c4\u8303\uff0c\u5305\u62ec\u6807\u70b9\u4f7f\u7528\u65e0\u8bef\u3001\u4e2d\u82f1\u6587\u4e4b\u95f4\u7a7a\u683c\u7b49\uff1b\u63a5\u5230 PR \u65f6\u4e5f\u80fd\u81ea\u52a8\u68c0\u67e5\uff0c\u65b9\u4fbf\u793e\u533a\u8d21\u732e\u3002 \u53d1\u5e03\u524d\u5bf9\u5185\u5bb9\u9884\u5904\u7406\uff0c\u4f8b\u5982\u53bb\u6389\u5185\u5bb9\u4e2d\u7684\u4e00\u7ea7\u6807\u9898\uff0c\u63d2\u5165\u56fa\u5b9a\u7b80\u4ecb\u3001\u76ee\u5f55\u7b49\u3002 \u524d 2 \u6b65\u4e2d GitHub + Travis \u7684\u76f8\u5173\u6587\u7ae0\u6709\u5f88\u591a\uff0c\u6bd4\u5982 \u8fd9\u7bc7\u535a\u5ba2\uff0c\u5728\u6b64\u6682\u4e0d\u8be6\u8ff0\uff1b\u63a5\u4e0b\u6765\u6211\u5c06\u91cd\u70b9\u5206\u6790\u7b2c 3 \u6b65\u7684\u6d41\u7a0b\u3002\n\u98ce\u683c\u68c0\u67e5 \u6211\u4f7f\u7528 \u8fd9\u7bc7\u535a\u6587 \u4e2d\u4ecb\u7ecd\u7684 Lint-md \u9879\u76ee\u5b9e\u73b0\u3002\u4e3a\u4e86\u65b9\u4fbf CI \u4f7f\u7528\uff0c\u6211\u8fd8\u7279\u610f\u63d0\u4ea4\u4e86\u4e00\u4e2a Pull Request\uff0c\u7528\u4e8e\u652f\u6301 Docker \u955c\u50cf\u3002\n\u5177\u4f53\u4ee3\u7801\u975e\u5e38\u7b80\u5355\uff0c\u53ea\u6709\u4e00\u884c\u3002\u4f60\u53ef\u4ee5\u5728 \u8fd9\u91cc \u627e\u5230\uff1a\ndocker run --rm -v $dir:\/data yuque\/lint-md lint-md -c \/data\/lint-md.json \/data\/src \u719f\u6089 Docker \u7684\u8bdd\u5f88\u5bb9\u6613\u8bfb\u61c2\uff1b\u82e5\u662f\u4e0d\u719f\u6089\uff0c\u4f60\u53ef\u4ee5\u9605\u8bfb \u8fd9\u7bc7\u6587\u7ae0\u3002\n\u5176\u4e2d\uff0c$dir \u662f\u9879\u76ee\u6839\u76ee\u5f55\uff0clint-md -c \/data\/lint-md.json \/data\/src \u4fbf\u662f\u666e\u901a\u7684 Lint-md \u4f7f\u7528\u65b9\u6cd5\u3002\n\u53d1\u5e03\u6587\u7ae0 \u6574\u5957\u53d1\u5e03\u7684\u6d41\u7a0b\u6bd4\u8f83\u590d\u6742\uff0c\u53ef\u62c6\u5206\u4e3a\u4ee5\u4e0b\u5c0f\u6b65\u9aa4\uff1a\n \u4f7f\u7528\u957f\u671f Cookies \u6362\u53d6\u4e34\u65f6 Cookies \u83b7\u5f97 CSRF Token \u62c9\u53d6\u5df2\u53d1\u5e03\u7684\u6587\u7ae0\u5217\u8868 \u904d\u5386\u672c\u5730 Markdown \u6e90\u6587\u4ef6\u5217\u8868 \u6839\u636e\u672c\u5730\u6587\u4ef6\u540d\u89e3\u6790\u6587\u7ae0\u6807\u9898 \u68c0\u7d22\u662f\u5426\u5df2\u53d1\u5e03\uff0c\u5e76\u53d6\u5f97\u6587\u7ae0 ID \u9884\u5904\u7406\u6587\u7ae0\u5185\u5bb9\uff08\u63d2\u5165\u7b80\u4ecb\u3001\u62fc\u63a5\u5b8c\u6574\u6807\u9898\uff09 \u5c06\u6700\u7ec8\u5185\u5bb9\u53d1\u5e03\uff08\u521b\u5efa\u6216\u66f4\u65b0\uff09 \u5faa\u73af\u6267\u884c 5 - 8 \u76f4\u5230\u904d\u5386\u5b8c\u6210 \u5176\u4e2d\uff0c\u4f7f\u7528\u7c97\u4f53\u6807\u6ce8\u7684 1\u30012\u30013\u30018\uff0c\u9700\u8981\u4e0e\u670d\u52a1\u5668\u8fdb\u884c\u901a\u8baf\uff1b\u4e0d\u8fc7\u6211\u6ca1\u6709 Laravel-China \u7684\u63a5\u53e3\uff0c\u4e5f\u4e0d\u597d\u610f\u601d\u9ebb\u70e6 @Summer\u3002\u6240\u4ee5\u5e72\u8106\u81ea\u5df1\u52a8\u624b\uff0c\u4e30\u8863\u8db3\u98df \u2014\u2014 \u5229\u7528 Chrome Developer Tool \u7684 Network \u529f\u80fd\u5feb\u901f\u6293\u5305\uff0c\u5206\u6790\u6574\u7406\u540e\u4f7f\u7528 PHP \u5b9e\u73b0\u4e00\u6b3e\u5c0f\u5de5\u5177\uff0c\u540d\u4e3a learnku-deploy-bot\uff0c\u6211\u6682\u65f6\u79f0\u5b83\u4e3a\u300c\u90e8\u7f72\u673a\u5668\u4eba\u300d\u3002\n\u8fd9\u4e2a\u673a\u5668\u4eba\u53ef\u62c6\u5206\u4e3a\u4e09\u5927\u90e8\u5206\uff0c\u4f60\u53ef\u4ee5 Git Clone \u6e90\u7801\u540e\u67e5\u770b src \u76ee\u5f55\uff1a\n Requests\uff1a\u5305\u542b\u6240\u6709\u7684 HTTP \u8bf7\u6c42\u5b9a\u4e49\uff0c\u57fa\u4e8e Buzz\uff08\u4e00\u4e2a\u517c\u5bb9 PSR-7\u3001PSR-17\u3001PSR-18 \u7684 HTTP \u5ba2\u6237\u7aef\uff09\u5b9e\u73b0\uff0c\u4f60\u53ef\u4ee5\u7406\u89e3\u4e3a MVC \u4e2d\u7684 Models\u3002 Extractors\uff1a\u5305\u542b\u6240\u6709\u7684\u8bf7\u6c42\u89e3\u6790\u5668\uff0c\u5229\u7528\u6b63\u5219\u8868\u8fbe\u5f0f\u7b49\u5b57\u7b26\u4e32\u5904\u7406\u65b9\u5f0f\u63d0\u53d6\u6587\u672c\uff1b\u4f60\u53ef\u4ee5\u7406\u89e3\u4e3a MVC \u4e2d\u7684 Views\u3002 Commands\uff1a\u5305\u542b\u6240\u6709\u7684 CLI \u547d\u4ee4\uff0c\u57fa\u4e8e Symfony \u7684 Console \u6269\u5c55\u5305\u5b9e\u73b0\uff1b\u5728\u8fd9\u91cc\u5b9e\u4f8b\u5316\u5e76\u53d1\u9001 Requests\uff0c\u518d\u4ea4\u7ed9 Extractors \u63d0\u53d6\u9700\u8981\u7684\u6570\u636e\u3002\u4f60\u53ef\u4ee5\u7406\u89e3\u4e3a MVC \u4e2d\u7684 Controllers\u3002 \u5bf9\u4e8e\u7528\u6237\uff08\u6211\u81ea\u5df1\ud83d\ude02\uff09\u6765\u8bf4\uff0c\u53ea\u9700\u5173\u5fc3\u516c\u5f00\u7684 Commands \u5373\u53ef\uff0c\u4f8b\u5982\u9a8c\u8bc1 Session \u7684 session\uff0c\u66f4\u65b0\u6587\u7ae0\u7684 article:update\uff1b\u6570\u636e\u6e90 Requests \u548c Extractors \u7531 Commands \u8fdb\u884c\u7edf\u4e00\u8c03\u914d\u3002\n \u7531\u4e8e\u662f\u4e2a\u4eba\u4f7f\u7528\u7684\u5c0f\u5de5\u5177\uff0c\u6240\u4ee5\u8bbe\u8ba1\u6bd4\u8f83\u7b80\u964b\uff0c\u8bb8\u591a\u5730\u65b9\u5e76\u4e0d\u5b8c\u5584\uff0c\u5efa\u8bae\u4ec5\u4f5c\u5b66\u4e60\u4f7f\u7528\u3002\n \u4e3a\u4e86\u63d0\u9ad8\u53ef\u590d\u7528\u6027\uff0clearnku-deploy-bot \u5e76\u6ca1\u6709\u4e0e\u8bfe\u7a0b\u6709\u4efb\u4f55\u76f4\u63a5\u7684\u5173\u7cfb\uff1b\u4f60\u53ef\u4ee5\u628a\u5b83\u7406\u89e3\u4e3a\u4e00\u4e2a\u901a\u7528\u7684 Laravel-China CLI \u5ba2\u6237\u7aef\u3002\n\u81f3\u4e8e\u5269\u4e0b\u7684 4\u30015\u30016\u30017\u30019\uff0c\u4e5f\u5c31\u662f\u548c\u8bfe\u7a0b\u76f4\u63a5\u76f8\u5173\u7684\u53d1\u5e03\u6d41\u7a0b\uff0c\u662f\u4f7f\u7528 Bash \u811a\u672c\u5b9e\u73b0\uff0c\u6e90\u7801 \u4e0e\u8bfe\u7a0b\u6587\u4ef6\u4f4d\u4e8e\u540c\u4e00\u4ed3\u5e93\uff1b\u901a\u8fc7\u8be5\u811a\u672c\u904d\u5386\u6587\u7ae0\uff0c\u5e76\u8c03\u7528\u90e8\u7f72\u673a\u5668\u4eba\u63d0\u4f9b\u7684 Commands\uff0c\u5b8c\u6210\u7edf\u4e00\u7684\u8bfe\u7a0b\u53d1\u5e03\u5de5\u4f5c\u3002\n","permalink":"https:\/\/wi1dcard.dev\/posts\/automatic-learnku-deploy-bot\/","summary":"man<\/code> \u547d\u4ee4\uff1b\u4e14\u9879\u76ee\u7531\u793e\u533a\u9a71\u52a8\uff0c\u4e5f\u5c31\u662f\u8bf4\u4efb\u4f55\u4eba\u90fd\u53ef\u4ee5\u63d0\u4ea4 PR \u6765\u5b8c\u5584\u5b83\u3002<\/p>\n\u8f6c\u6362\u6211\u7684\u7b80\u5386 HTML \u5230 PDF<\/code> -> \u5c06 PDF \u90e8\u7f72\u5230\u4e03\u725b\u4e91<\/code> -> \u8bbf\u5ba2\u53ef\u76f4\u63a5\u4e0b\u8f7d\u6700\u65b0\u7248\u672c PDF \u4e14\u4e0e\u5728\u7ebf\u7b80\u5386\u540c\u6b65<\/code>\u3002<\/p>\nContinuous Delivery<\/code>\uff09\u5b9e\u4f8b\u3002<\/p>","title":"\u6301\u7eed\u751f\u6210\u7b80\u5386 PDF \u5e76\u90e8\u7f72\u81f3\u4e03\u725b\u4e91"},{"content":"JSON Web Tokens\uff0c\u53c8\u79f0 JWT\u3002\u672c\u6587\u4f5c\u8005\u5c06\u8be6\u89e3\uff1a\u4e3a\u4f55 JWT \u4e0d\u9002\u5408\u5b58\u50a8 Session\uff0c\u4ee5\u53ca JWT \u5f15\u53d1\u7684\u5b89\u5168\u9690\u60a3\u3002\u671b\u5404\u4f4d\u4f7f\u7528\u524d\u4e09\u601d\u3002\n \u539f\u6587\u5730\u5740\uff1ahttp:\/\/cryto.net\/~joepie91\/blog\/2016\/06\/13\/stop-using-jwt-for-sessions\/\n \u5341\u5206\u4e0d\u5e78\uff0c\u6211\u53d1\u73b0\u8d8a\u6765\u8d8a\u591a\u7684\u4eba\u5f00\u59cb\u63a8\u8350\u4f7f\u7528 JWT \u7ba1\u7406\u7f51\u7ad9\u7684\u7528\u6237\u4f1a\u8bdd\uff08Session\uff09\u3002\u5728\u672c\u6587\u4e2d\uff0c\u6211\u5c06\u8bf4\u660e\u4e3a\u4f55\u8fd9\u662f\u4e2a\u975e\u5e38\u975e\u5e38\u5dee\u52b2\u7684\u60f3\u6cd5\u3002\n\u4e3a\u4e86\u907f\u514d\u7591\u60d1\u548c\u6b67\u4e49\uff0c\u9996\u5148\u5b9a\u4e49\u4e00\u4e9b\u672f\u8bed\uff1a\n \u65e0\u72b6\u6001 JWT\uff08Stateless JWT\uff09\uff1a\u5305\u542b Session \u6570\u636e\u7684 JWT Token\u3002Session \u6570\u636e\u5c06\u88ab\u76f4\u63a5\u7f16\u7801\u8fdb Token \u5185\u3002 \u6709\u72b6\u6001 JWT\uff08Stateful JWT\uff09\uff1a\u5305\u542b Session \u5f15\u7528\u6216\u5176 ID \u7684 JWT Token\u3002Session \u6570\u636e\u5b58\u50a8\u5728\u670d\u52a1\u7aef\u3002 Session token\uff08\u53c8\u79f0 Session cookie\uff09\uff1a\u6807\u51c6\u7684\u3001\u53ef\u88ab\u7b7e\u540d\u7684 Session ID\uff0c\u4f8b\u5982\u5404\u7c7b Web \u6846\u67b6\uff08\u8bd1\u8005\u6ce8\uff1a\u5305\u62ec Laravel\uff09\u5185\u5df2\u7ecf\u4f7f\u7528\u4e86\u5f88\u4e45\u7684 Session \u673a\u5236\u3002Session \u6570\u636e\u540c\u6837\u5b58\u50a8\u5728\u670d\u52a1\u7aef\u3002 \u9700\u8981\u6f84\u6e05\u7684\u662f\uff1a\u672c\u6587\u5e76\u975e\u6311\u8d77\u300c\u6c38\u8fdc\u4e0d\u8981\u4f7f\u7528 JWT\u300d\u7684\u4e89\u8bba \u2014\u2014 \u53ea\u662f\u60f3\u8bf4\u660e JWT \u5e76\u4e0d\u9002\u5408\u4f5c\u4e3a Session \u673a\u5236\uff0c\u4e14\u5341\u5206\u5371\u9669\u3002JWT \u5728\u5176\u5b83\u65b9\u9762\u7684\u786e\u6709\u5176\u7528\u6b66\u4e4b\u5730\u3002\u672c\u6587\u7ed3\u5c3e\uff0c\u6211\u5c06\u7b80\u77ed\u5730\u4ecb\u7ecd\u4e00\u4e9b\u5408\u7406\u7528\u9014\u3002\n\u9996\u5148\u9700\u8981\u8bf4\u660e \u5f88\u591a\u4eba\u9519\u8bef\u5730\u5c1d\u8bd5\u6bd4\u8f83 Cookies \u548c JWT\u3002\u8fd9\u79cd\u5bf9\u6bd4\u6beb\u65e0\u610f\u4e49\uff0c\u5c31\u50cf\u5bf9\u6bd4\u5185\u5b58\u548c\u786c\u76d8\u4e00\u6837\u3002Cookies \u662f\u4e00\u79cd\u5b58\u50a8\u673a\u5236\uff0c\u7136\u800c JWT Tokens \u662f\u88ab\u52a0\u5bc6\u5e76\u7b7e\u540d\u540e\u7684\u4ee4\u724c\u3002\n\u5b83\u4eec\u5e76\u4e0d\u5bf9\u7acb \u2014\u2014 \u76f8\u53cd\uff0c\u4ed6\u4eec\u53ef\u4ee5\u72ec\u7acb\u6216\u7ed3\u5408\u4f7f\u7528\u3002\u6b63\u786e\u7684\u5bf9\u6bd4\u5e94\u5f53\u662f\uff1aSession \u5bf9\u6bd4 JWT\uff0c\u4ee5\u53ca Cookies \u5bf9\u6bd4 Local Storage\u3002\n\u5728\u672c\u6587\u4e2d\uff0c\u6211\u5c06\u628a JWT Tokens \u540c Session \u5c55\u5f00\u5bf9\u6bd4\uff0c\u5e76\u5076\u5c14\u5bf9\u6bd4 Cookie \u548c Local Storage\u3002\u8fd9\u6837\u7684\u6bd4\u8f83\u624d\u6709\u610f\u4e49\u3002\nJWT \u574a\u95f4\u6d41\u4f20\u7684\u4f18\u52bf \u5728\u4eba\u4eec\u5b89\u5229 JWT \u65f6\uff0c\u5e38\u5e38\u5ba3\u626c\u4ee5\u4e0b\u51e0\u70b9\u597d\u5904\uff1a\n \u6613\u4e8e\u6c34\u5e73\u6269\u5c55 \u6613\u4e8e\u4f7f\u7528 \u66f4\u52a0\u7075\u6d3b \u66f4\u52a0\u5b89\u5168 \u5185\u7f6e\u8fc7\u671f\u65f6\u95f4\u529f\u80fd \u65e0\u9700\u8be2\u95ee\u7528\u6237\u300c\u672c\u7f51\u7ad9\u4f7f\u7528 Cookies\u300d \u9632\u6b62 CSRF \u653b\u51fb \u66f4\u9002\u7528\u4e8e\u79fb\u52a8\u7aef \u9002\u7528\u4e8e\u963b\u6b62 Cookies \u7684\u7528\u6237 \u6211\u5c06\u4f1a\u9010\u6761\u9610\u8ff0\u4ee5\u4e0a\u89c2\u70b9\u4e3a\u4f55\u662f\u9519\u8bef\u6216\u8bef\u5bfc\u6027\u7684\uff0c\u5176\u4e2d\u90e8\u5206\u89e3\u91ca\u53ef\u80fd\u4f1a\u6709\u4e9b\u6a21\u7cca\uff0c\u8fd9\u4e3b\u8981\u662f\u56e0\u4e3a\u8fd9\u4e9b\u300c\u597d\u5904\u300d\u7684\u8868\u8ff0\u672c\u8eab\u5c31\u6bd4\u8f83\u6a21\u7cca\u3002\u4f60\u53ef\u4ee5\u5728\u6587\u672b\u627e\u5230\u6211\u7684\u8054\u7cfb\u65b9\u5f0f\uff0c\u6211\u5c06\u5341\u5206\u4e50\u610f\u5bf9\u66f4\u52a0\u5177\u4f53\u7684\u300c\u597d\u5904\u300d\u8fdb\u884c\u5206\u6790\u9610\u8ff0\u3002\n\u6613\u4e8e\u6c34\u5e73\u6269\u5c55\uff1f \u8fd9\u662f\u5217\u8868\u4e2d\u552f\u4e00\u4e00\u6761\u5728\u6280\u672f\u5c42\u9762\u90e8\u5206\u6b63\u786e\u7684\u300c\u597d\u5904\u300d\uff0c\u4f46\u524d\u63d0\u662f\u4f60\u4f7f\u7528\u7684\u662f\u65e0\u72b6\u6001 JWT Tokens\u3002\u7136\u800c\u4e8b\u5b9e\u4e0a\uff0c\u51e0\u4e4e\u6ca1\u4eba\u9700\u8981\u8fd9\u79cd\u6a2a\u5411\u6269\u5c55\u80fd\u529b\u3002\u6709\u5f88\u591a\u66f4\u7b80\u5355\u7684\u62d3\u5c55\u65b9\u5f0f\uff0c\u9664\u975e\u4f60\u5728\u8fd0\u7ef4\u50cf\u6dd8\u5b9d\u8fd9\u6837\u4f53\u91cf\u7684\u7cfb\u7edf\uff0c\u5426\u5219\u6839\u672c\u4e0d\u9700\u8981\u65e0\u72b6\u6001\u7684\u4f1a\u8bdd\uff08Stateless sessions\uff09\u3002\n\u4e00\u4e9b\u6269\u5c55\u6709\u72b6\u6001\u4f1a\u8bdd\uff08Stateful sessions\uff09\u7684\u4f8b\u5b50\uff1a\n \u5728\u5355\u53f0\u670d\u52a1\u5668\u4e0a\u8fd0\u884c\u591a\u4e2a\u540e\u7aef\u8fdb\u7a0b\uff1a\u53ea\u9700\u5728\u6b64\u670d\u52a1\u5668\u4e0a\u5b89\u88c5 Redis \u670d\u52a1\u7528\u4e8e\u5b58\u50a8 Session \u5373\u53ef\u3002 \u8fd0\u884c\u591a\u53f0\u670d\u52a1\u5668\uff1a\u53ea\u9700\u4e00\u53f0\u4e13\u7528\u7684 Redis \u670d\u52a1\u5668\u7528\u4e8e\u5b58\u50a8 Session \u5373\u53ef\u3002 \u5728\u591a\u96c6\u7fa4\u5185\u8fd0\u884c\u591a\u53f0\u670d\u52a1\u5668\uff1a\u4f1a\u8bdd\u4fdd\u6301\uff08\u53c8\u79f0\uff1a\u7c98\u6ede\u4f1a\u8bdd\uff09\u3002 \u4ee5\u4e0a\u6240\u6709\u573a\u666f\u5728\u73b0\u6709\u8f6f\u4ef6\u7cfb\u7edf\u5185\u90fd\u5177\u5907\u826f\u597d\u7684\u652f\u6301\uff0c\u4f60\u7684\u5e94\u7528\u9700\u8981\u8fdb\u884c\u7279\u6b8a\u5904\u7406\u7684\u53ef\u80fd\u6027\u57fa\u672c\u4e3a\u96f6\u3002\n\u6216\u8bb8\u4f60\u5728\u60f3\uff0c\u5e94\u5f53\u4e3a\u4f60\u7684\u5e94\u7528\u9884\u7559\u66f4\u591a\u8c03\u6574\u7a7a\u95f4\uff0c\u4ee5\u9632\u672a\u6765\u9700\u8981\u67d0\u4e9b\u7279\u6b8a\u64cd\u4f5c\u3002\u4f46\u5b9e\u8df5\u544a\u8bc9\u6211\u4eec\uff0c\u4ee5\u540e\u518d\u66ff\u6362 Session \u673a\u5236\u5e76\u4e0d\u56f0\u96be\uff0c\u552f\u4e00\u7684\u4ee3\u4ef7\u662f\uff0c\u5728\u8fc1\u79fb\u540e\u6240\u6709\u7528\u6237\u5c06\u88ab\u5f3a\u5236\u767b\u51fa\u4e00\u6b21\u3002\u6211\u4eec\u6ca1\u5fc5\u8981\u5728\u524d\u671f\u5b9e\u73b0 JWT\uff0c\u5c24\u5176\u662f\u8003\u8651\u5230\u5b83\u6240\u5e26\u6765\u7684\u8d1f\u9762\u5f71\u54cd\u3002\u6211\u5c06\u5728\u540e\u6587\u8fdb\u884c\u89e3\u91ca\u3002\n\u6613\u4e8e\u4f7f\u7528\uff1f \u8fd9\u4e2a\u771f\u6ca1\u6709\u3002\u4f60\u4e0d\u5f97\u4e0d\u81ea\u884c\u5904\u7406 Session \u7684\u7ba1\u7406\u673a\u5236\uff0c\u65e0\u8bba\u662f\u5ba2\u6237\u7aef\u8fd8\u662f\u670d\u52a1\u7aef\u3002\u7136\u800c\u6807\u51c6\u7684 Session cookies \u5219\u5f00\u7bb1\u5373\u7528\uff0cJWT \u5e76\u6ca1\u6709\u66f4\u7b80\u5355\u3002\n\u66f4\u52a0\u7075\u6d3b\uff1f \u6211\u6682\u65f6\u8fd8\u6ca1\u770b\u5230\u6709\u4eba\u6210\u529f\u5730\u9610\u8ff0\u300cJWT \u5982\u4f55\u66f4\u52a0\u7075\u6d3b\u300d\u3002\u51e0\u4e4e\u6bcf\u4e2a\u4e3b\u6d41\u7684 Session \u5b9e\u73b0\uff0c\u90fd\u5141\u8bb8\u4f60\u76f4\u63a5\u628a\u6570\u636e\u5b58\u50a8\u8fdb Session\uff0c\u8fd9\u8ddf JWT \u7684\u673a\u5236\u5e76\u6ca1\u6709\u5dee\u522b\u3002\u636e\u6211\u6240\u77e5\uff0c\u8fd9\u53ea\u662f\u4e2a\u6d41\u884c\u8bed\u7f62\u4e86\u3002\u5982\u679c\u4f60\u4e0d\u540c\u610f\uff0c\u53ef\u4ee5\u968f\u65f6\u5e26\u4e0a\u793a\u4f8b\u4e0e\u6211\u8054\u7cfb\u3002\n\u66f4\u52a0\u5b89\u5168\uff1f \u4e00\u5927\u6279\u4eba\u8ba4\u4e3a JWT Tokens\u300c\u66f4\u52a0\u5b89\u5168\u300d\uff0c\u7406\u7531\u662f\u4f7f\u7528\u4e86\u52a0\u5bc6\u6280\u672f\u3002\u5b9e\u9645\u4e0a\uff0c\u7b7e\u540d\u540e\u7684 Cookies \u6bd4\u672a\u7b7e\u540d\u7684 Cookies \u540c\u6837\u66f4\u52a0\u5b89\u5168\uff0c\u4f46\u8fd9\u7edd\u4e0d\u662f JWT \u72ec\u6709\u7684\uff0c\u4f18\u79c0\u7684 Session \u5b9e\u73b0\u5747\u4f7f\u7528\u7b7e\u540d\u540e\u7684 Cookies\uff08\u8bd1\u8005\u6ce8\uff1a\u4f8b\u5982 Laravel\uff09\u3002\n\u300c\u4f7f\u7528\u52a0\u5bc6\u6280\u672f\u300d\u5e76\u4e0d\u80fd\u795e\u5947\u5730\u4f7f\u67d0\u4e9b\u4e1c\u897f\u66f4\u52a0\u5b89\u5168\uff0c\u5b83\u5fc5\u987b\u670d\u52a1\u4e8e\u7279\u5b9a\u76ee\u7684\uff0c\u5e76\u4e14\u662f\u9488\u5bf9\u8be5\u76ee\u7684\u7684\u6709\u6548\u89e3\u51b3\u65b9\u6848\u3002\u9519\u8bef\u5730\u4f7f\u7528\u52a0\u5bc6\u53cd\u800c\u53ef\u80fd\u4f1a\u964d\u4f4e\u5b89\u5168\u6027\u3002\n\u53e6\u4e00\u4e2a\u6211\u542c\u8fc7\u5f88\u591a\u6b21\u7684\u5bf9\u4e8e\u300c\u66f4\u52a0\u5b89\u5168\u300d\u7684\u8bba\u8ff0\u662f\u300cJWT \u4e0d\u4f7f\u7528 Cookies \u4f20\u8f93 Tokens\u300d\u3002\u8fd9\u5b9e\u5728\u662f\u592a\u8352\u8c2c\u4e86\uff0cCookie \u53ea\u4e0d\u8fc7\u662f\u4e00\u6761 HTTP \u5934\u4fe1\u606f\uff0c\u4f7f\u7528 Cookies \u5e76\u4e0d\u4f1a\u9020\u6210\u4efb\u4f55\u4e0d\u5b89\u5168\u3002\u4e8b\u5b9e\u4e0a\uff0cCookies \u53d7\u5230\u7279\u522b\u826f\u597d\u7684\u4fdd\u62a4\uff0c\u7528\u4e8e\u9632\u6b62\u6076\u610f\u7684\u5ba2\u6237\u7aef\u4ee3\u7801\u3002\u6211\u5c06\u5728\u540e\u6587\u8fdb\u884c\u9610\u8ff0\u3002\n\u5982\u679c\u62c5\u5fc3\u6709\u4eba\u62e6\u622a\u6389\u4f60\u7684 Session cookies\uff0c\u90a3\u4f60\u5e94\u5f53\u8003\u8651\u4f7f\u7528 TLS\u3002\u5982\u679c\u4e0d\u4f7f\u7528 TLS\uff0c\u4efb\u4f55\u7c7b\u578b\u7684 Session \u673a\u5236\u90fd\u53ef\u80fd\u88ab\u62e6\u622a\uff0c\u5305\u62ec JWT\u3002\n\u5185\u7f6e\u8fc7\u671f\u65f6\u95f4\u529f\u80fd\uff1f \u65e0\u610f\u4e49\uff0c\u53c8\u6ca1\u4ec0\u4e48\u5375\u7528\u7684\u7279\u6027\u3002\u5728\u670d\u52a1\u7aef\u4e5f\u80fd\u5b9e\u73b0\u8fc7\u671f\u63a7\u5236\uff0c\u6709\u4e0d\u5c11 Session \u5b9e\u73b0\u5c31\u662f\u8fd9\u4e48\u505a\u7684\u3002\u5b9e\u9645\u4e0a\uff0c\u670d\u52a1\u7aef\u7684\u8fc7\u671f\u63a7\u5236\u66f4\u52a0\u5408\u7406\uff0c\u8fd9\u6837\u4f60\u7684\u5e94\u7528\u5c31\u53ef\u4ee5\u6e05\u9664\u4e0d\u518d\u9700\u8981\u7684 Session \u6570\u636e\uff1b\u82e5\u4f7f\u7528\u65e0\u72b6\u6001 JWT Tokens \u4e14\u4f9d\u8d56\u4e8e\u5b83\u7684\u8fc7\u671f\u673a\u5236\uff0c\u5219\u65e0\u6cd5\u6267\u884c\u6b64\u64cd\u4f5c\u3002\n\u65e0\u9700\u8be2\u95ee\u7528\u6237\u300c\u672c\u7f51\u7ad9\u4f7f\u7528 Cookies\u300d\uff1f \u5b8c\u5168\u9519\u8bef\u3002\u5e76\u6ca1\u6709\u4ec0\u4e48\u300cCookies \u6cd5\u5f8b\u300d\u2014\u2014 \u6709\u5173 Cookies \u7684\u5404\u79cd\u6cd5\u5f8b\u5b9e\u9645\u4e0a\u6db5\u76d6\u4e86\u4efb\u4f55\u7c7b\u578b\u300c\u5bf9\u67d0\u9879\u670d\u52a1\u7684\u6b63\u5e38\u8fd0\u884c\u975e\u4e25\u683c\u5fc5\u987b\u7684\u6301\u4e45\u6027 ID\u300d\uff0c\u4efb\u4f55\u4f60\u80fd\u60f3\u5230\u7684 Session \u673a\u5236\u90fd\u5305\u62ec\u5728\u5185\u3002\n \u8bd1\u8005\u6ce8\uff1a\u7136\u9e45\u4e2d\u56fd\u5e76\u6ca1\u6709\u3002\n \u7b80\u5355\u6765\u8bf4\uff1a\n \u82e5\u51fa\u4e8e\u7cfb\u7edf\u529f\u80fd\u76ee\u7684\u4f7f\u7528 Session \u6216 Token\uff08\u4f8b\u5982\uff1a\u4fdd\u6301\u7528\u6237\u7684\u767b\u5f55\u6001\uff09\uff0c\u90a3\u4e48\u65e0\u8bba\u600e\u6837\u5b58\u50a8 Session \u5747\u65e0\u9700\u5f81\u5f97\u7528\u6237\u540c\u610f\u3002 \u82e5\u51fa\u4e8e\u5176\u4ed6\u76ee\u7684\u4f7f\u7528 Session \u6216 Token\uff08\u4f8b\u5982\uff1a\u6570\u636e\u5206\u6790\u3001\u8ffd\u8e2a\uff09\uff0c\u90a3\u4e48\u65e0\u8bba\u600e\u6837\u5b58\u50a8 Session \u90fd\u9700\u8981\u8be2\u95ee\u7528\u6237\u662f\u5426\u5141\u8bb8\u3002 \u9632\u6b62 CSRF \u653b\u51fb\uff1f \u8fd9\u4e2a\u771f\u00b7\u771f\u6ca1\u6709\u3002\u5b58\u50a8 JWT Tokens \u7684\u65b9\u5f0f\u5927\u6982\u6709\u4e24\u79cd\uff1a\n \u5b58\u5165 Cookie\uff1a\u4ecd\u7136\u6613\u53d7 CSRF \u653b\u51fb\uff0c\u8fd8\u662f\u9700\u8981\u8fdb\u884c\u7279\u6b8a\u5904\u7406\uff0c\u4fdd\u62a4\u5176\u4e0d\u53d7\u653b\u51fb\u3002 \u5176\u4ed6\u5730\u65b9\uff0c\u4f8b\u5982 Local Storage\uff1a\u867d\u7136\u4e0d\u6613\u53d7\u5230 CSRF \u653b\u51fb\uff0c\u4f46\u4f60\u7684\u7f51\u7ad9\u9700\u8981 JavaScript \u624d\u80fd\u6b63\u5e38\u8bbf\u95ee\uff1b\u5e76\u4e14\u53c8\u5f15\u53d1\u4e86\u53e6\u4e00\u4e2a\u5b8c\u5168\u4e0d\u540c\uff0c\u6216\u8bb8\u66f4\u52a0\u4e25\u91cd\u7684\u6f0f\u6d1e\u3002\u6211\u5c06\u5728\u540e\u6587\u8be6\u7ec6\u8bf4\u660e\u3002 \u9884\u9632 CSRF \u653b\u51fb\u552f\u4e00\u7684\u6b63\u786e\u65b9\u6cd5\uff0c\u5c31\u662f\u4f7f\u7528 CSRF Tokens\u3002Session \u673a\u5236\u4e0e\u6b64\u65e0\u5173\u3002\n\u66f4\u9002\u7528\u4e8e\u79fb\u52a8\u7aef\uff1f \u6beb\u65e0\u6839\u636e\u3002\u76ee\u524d\u6240\u6709\u53ef\u7528\u7684\u6d4f\u89c8\u5668\u51e0\u4e4e\u90fd\u652f\u6301 Cookies\uff0c\u56e0\u6b64\u4e5f\u652f\u6301 Session\u3002\u540c\u6837\uff0c\u4e3b\u6d41\u7684\u79fb\u52a8\u7aef\u5f00\u53d1\u6846\u67b6\u4ee5\u53ca\u4e25\u8c28\u7684 HTTP \u5ba2\u6237\u7aef\u5e93\u90fd\u662f\u5982\u6b64\u3002\u8fd9\u6839\u672c\u4e0d\u662f\u4e2a\u95ee\u9898\u3002\n\u9002\u7528\u4e8e\u963b\u6b62 Cookies \u7684\u7528\u6237\uff1f \u4e0d\u592a\u53ef\u80fd\u3002\u7528\u6237\u901a\u5e38\u4f1a\u963b\u6b62\u4efb\u4f55\u610f\u4e49\u4e0a\u7684\u6301\u4e45\u5316\u6570\u636e\uff0c\u800c\u4e0d\u662f\u53ea\u7981\u6b62 Cookies\u3002\u4f8b\u5982\uff0cLocal Storage \u4ee5\u53ca\u4efb\u4f55\u80fd\u591f\u6301\u4e45\u5316 Session \u7684\u5b58\u50a8\u673a\u5236\uff08\u65e0\u8bba\u662f\u5426\u4f7f\u7528 JWT\uff09\u3002\u4e0d\u7ba1\u4f60\u51fa\u4e8e\u591a\u4e48\u7b80\u5355\u7684\u76ee\u7684\u4f7f\u7528 JWT \u90fd\u65e0\u6d4e\u4e8e\u4e8b\uff0c\u8fd9\u662f\u53e6\u4e00\u4e2a\u5b8c\u5168\u72ec\u7acb\u7684\u95ee\u9898\u4e86\u3002\u53e6\u5916\uff0c\u8bd5\u56fe\u8ba9\u8eab\u4efd\u8ba4\u8bc1\u8fc7\u7a0b\u5728\u6ca1\u6709 Cookies \u7684\u60c5\u51b5\u4e0b\u6b63\u5e38\u8fdb\u884c\uff0c\u57fa\u672c\u6ca1\u620f\u3002\n\u6700\u91cd\u8981\u7684\u662f\uff0c\u7981\u7528\u6389\u6240\u6709 Cookies \u7684\u591a\u6570\u7528\u6237\u90fd\u660e\u767d\u8fd9\u4f1a\u5bfc\u81f4\u8eab\u4efd\u8ba4\u8bc1\u65e0\u6cd5\u4f7f\u7528\uff0c\u4ed6\u4eec\u4f1a\u5355\u72ec\u89e3\u9501\u90a3\u4e9b\u4ed6\u4eec\u6bd4\u8f83\u5173\u5fc3\u7684\u7ad9\u70b9\u3002\u8fd9\u5e76\u4e0d\u662f\u4f60 \u2014\u2014 \u4e00\u4e2a Web \u5f00\u53d1\u8005\u5e94\u5f53\u89e3\u51b3\u7684\u95ee\u9898\u3002\u66f4\u597d\u7684\u65b9\u6848\u662f\uff0c\u5411\u4f60\u7684\u7528\u6237\u4eec\u8be6\u7ec6\u5730\u89e3\u91ca\u4e3a\u4f55\u4f60\u7684\u7f51\u7ad9\u9700\u8981 Cookies \u624d\u80fd\u4f7f\u7528\u3002\nJWT \u7684\u52a3\u52bf \u4ee5\u4e0a\uff0c\u6211\u5df2\u7ecf\u5bf9\u5e38\u89c1\u7684\u8bef\u89e3\u505a\u4e86\u8bf4\u660e\uff0c\u4ee5\u53ca\u4e3a\u4ec0\u4e48\u5b83\u4eec\u662f\u9519\u8bef\u7684\u3002\u4f60\u6216\u8bb8\u5728\u60f3\uff1a\u300c\u8fd9\u597d\u50cf\u4e5f\u6ca1\u4ec0\u4e48\u5927\u4e0d\u4e86\u7684\uff0c\u5373\u4fbf JWT \u65e0\u6cd5\u5e26\u6765\u4efb\u4f55\u597d\u5904\uff0c\u4f46\u4e5f\u4e0d\u4f1a\u9020\u6210\u4ec0\u4e48\u5f71\u54cd\u300d\uff0c\u90a3\u4f60\u771f\u662f\u5927\u9519\u7279\u9519\u4e86\u3002\n\u4f7f\u7528 JWT \u4f5c\u4e3a Session \u673a\u5236\u5b58\u5728\u5f88\u591a\u7f3a\u70b9\uff0c\u5176\u4e2d\u4e00\u90e8\u5206\u4f1a\u9020\u6210\u4e25\u91cd\u7684\u5b89\u5168\u95ee\u9898\u3002\n\u66f4\u8d39\u7a7a\u95f4 JWT Tokens \u5b9e\u9645\u4e0a\u5e76\u4e0d\u300c\u5c0f\u300d\u3002\u5c24\u5176\u662f\u4f7f\u7528\u65e0\u72b6\u6001 JWT \u65f6\uff0c\u6240\u6709\u7684\u6570\u636e\u5c06\u4f1a\u88ab\u76f4\u63a5\u7f16\u7801\u8fdb Tokens \u5185\uff0c\u5f88\u5feb\u5c06\u4f1a\u8d85\u8fc7 Cookies \u6216 URL \u7684\u957f\u5ea6\u9650\u5236\u3002\u4f60\u53ef\u80fd\u5728\u60f3\u5c06\u5b83\u4eec\u5b58\u50a8\u5230 Local Storage\uff0c\u7136\u800c…\n\u66f4\u4e0d\u5b89\u5168 \u82e5\u5c06 JWT Tokens \u5b58\u50a8\u5230 Cookies \u5185\uff0c\u90a3\u4e48\u5b89\u5168\u6027\u4e0e\u5176\u4ed6 Session \u673a\u5236\u65e0\u5f02\u3002\u4f46\u5982\u679c\u4f60\u5c06 JWT \u5b58\u50a8\u81f3\u5176\u5b83\u5730\u65b9\uff0c\u4f1a\u5bfc\u81f4\u4e00\u4e2a\u65b0\u7684\u6f0f\u6d1e\uff0c\u8be6\u89c1\u672c\u6587\uff0c\u5c24\u5176\u662f\u300cStoring sessions\u300d\u8fd9\u4e00\u90e8\u5206\u3002\n \u4e66\u63a5\u4e0a\u56de\uff1aLocal Storage\uff0c\u4e00\u4e2a HTML5 \u5185\u5f88\u68d2\u7684\u529f\u80fd\uff0c\u4f7f\u6d4f\u89c8\u5668\u652f\u6301 Key\/Value \u5b58\u50a8\u3002\u6240\u4ee5\u6211\u4eec\u5e94\u5f53\u5c06 JWT Tokens \u5b58\u50a8\u5230 Local Storage \u5417\uff1f\u8003\u8651\u5230\u8fd9\u4e9b Tokens \u53ef\u80fd\u8d8a\u6765\u8d8a\u5927\uff0c\u6216\u8bb8\u4f1a\u5f88\u6709\u7528\u3002Cookies \u901a\u5e38\u5728 4k \u5de6\u53f3\u7684\u5b58\u50a8\u65f6\u6bd4\u8f83\u5360\u4f18\u52bf\uff0c\u5bf9\u4e8e\u8f83\u5927\u7684 Tokens\uff0cCookies \u53ef\u80fd\u65e0\u6cd5\u80dc\u4efb\uff0c\u800c Local Storage \u6216\u8bb8\u6210\u4e86\u660e\u786e\u7684\u89e3\u51b3\u65b9\u6848\u3002\u7136\u800c\uff0cLocal Storage \u5e76\u6ca1\u6709\u63d0\u4f9b\u4efb\u4f55\u7c7b\u4f3c Cookies \u7684\u5b89\u5168\u63aa\u65bd\u3002 LocalStorage \u4e0e Cookies \u4e0d\u540c\uff0c\u5e76\u4e0d\u4f1a\u5728\u6bcf\u6b21\u8bf7\u6c42\u65f6\u53d1\u9001\u5b58\u50a8\u7684\u6570\u636e\u3002\u83b7\u53d6\u6570\u636e\u7684\u552f\u4e00\u65b9\u6cd5\u662f\u4f7f\u7528 JavaScript\uff0c\u8fd9\u610f\u5473\u7740\u4efb\u4f55\u653b\u51fb\u8005\u6ce8\u5165\u7684 JavaScript \u811a\u672c\u53ea\u9700\u901a\u8fc7\u5185\u5bb9\u5b89\u5168\u7b56\u7565\u68c0\u67e5\uff0c\u5c31\u80fd\u4efb\u610f\u8bbf\u95ee\u6216\u6cc4\u9732\u6570\u636e\u3002\u4e0d\u5149\u662f\u8fd9\u6837\uff0cJavaScript \u5e76\u4e0d\u5728\u610f\u6216\u8ffd\u8e2a\u6570\u636e\u662f\u5426\u901a\u8fc7 HTTPS \u53d1\u9001\u3002\u5c31 JavaScript \u800c\u8a00\uff0c\u5b83\u5c31\u53ea\u662f\u4e2a\u6570\u636e\u800c\u5df2\uff0c\u6d4f\u89c8\u5668\u4f1a\u50cf\u64cd\u4f5c\u5176\u5b83\u6570\u636e\u4e00\u6837\u6765\u5904\u7406\u5b83\u3002 \u5728\u5386\u4ee3\u5de5\u7a0b\u5e08\u4eec\u7ecf\u5386\u4e86\u5404\u79cd\u9ebb\u70e6\u4e4b\u540e\uff0c\u7ec8\u4e8e\u80fd\u591f\u786e\u4fdd\u6ca1\u6709\u4eba\u53ef\u4ee5\u6076\u610f\u63a5\u89e6\u5230\u6211\u4eec\u7684 Cookies\uff0c\u7136\u800c\u6211\u4eec\u5374\u8bd5\u56fe\u5ffd\u7565\u8fd9\u4e9b\u7ecf\u9a8c\u3002\u8fd9\u5bf9\u6211\u6765\u8bf4\u4f3c\u4e4e\u662f\u5728\u9000\u6b65\u3002\n \u7b80\u5355\u6765\u8bf4\uff0c\u4f7f\u7528 Cookies \u5e76\u4e0d\u662f\u53ef\u9009\u7684\uff0c\u65e0\u8bba\u4f60\u662f\u5426\u91c7\u7528 JWT\u3002\n\u65e0\u6cd5\u5355\u72ec\u9500\u6bc1 \u8fd8\u6709\u66f4\u591a\u5b89\u5168\u95ee\u9898\u3002\u4e0d\u50cf Sessions \u65e0\u8bba\u4f55\u65f6\u90fd\u53ef\u4ee5\u5355\u72ec\u5730\u5728\u670d\u52a1\u7aef\u9500\u6bc1\u3002\u65e0\u72b6\u6001 JWT Tokens \u65e0\u6cd5\u88ab\u5355\u72ec\u7684\u9500\u6bc1\u3002\u6839\u636e JWT \u7684\u8bbe\u8ba1\uff0c\u65e0\u8bba\u600e\u6837 Tokens \u5728\u8fc7\u671f\u524d\u5c06\u4f1a\u4e00\u76f4\u4fdd\u6301\u6709\u6548\u3002\u4e3e\u4e2a\u4f8b\u5b50\uff0c\u8fd9\u610f\u5473\u7740\u5728\u68c0\u6d4b\u5230\u653b\u51fb\u65f6\uff0c\u4f60\u5374\u4e0d\u80fd\u9500\u6bc1\u653b\u51fb\u8005\u7684 Session\u3002\u540c\u6837\uff0c\u5728\u7528\u6237\u4fee\u6539\u5bc6\u7801\u540e\uff0c\u4e5f\u65e0\u6cd5\u9500\u6bc1\u65e7\u7684 Sessions\u3002\n\u5bf9\u6b64\uff0c\u6211\u4eec\u51e0\u4e4e\u65e0\u80fd\u4e3a\u529b\uff0c\u9664\u975e\u91cd\u65b0\u6784\u5efa\u590d\u6742\u4e14\u6709\u72b6\u6001\uff08Stateful\uff09\u7684\u57fa\u7840\u8bbe\u65bd\u6765\u660e\u786e\u5730\u68c0\u6d4b\u6216\u62d2\u7edd\u7279\u5b9a Session\uff0c\u5426\u5219\u5c06\u65e0\u6cd5\u7ed3\u675f\u4f1a\u8bdd\u3002\u4f46\u8fd9\u5b8c\u5168\u8fdd\u80cc\u4e86\u4f7f\u7528\u65e0\u72b6\u6001 JWT Tokens \u7684\u6700\u521d\u76ee\u7684\u3002\n\u6570\u636e\u5ef6\u8fdf \u4e0e\u4e0a\u6587\u7684\u5b89\u5168\u95ee\u9898\u7c7b\u4f3c\uff0c\u8fd8\u6709\u53e6\u4e00\u4e2a\u6f5c\u5728\u7684\u5b89\u5168\u9690\u60a3\u3002\u5c31\u50cf\u7f13\u5b58\uff0c\u5728\u65e0\u72b6\u6001 Tokens \u5185\u5b58\u50a8\u7684\u6570\u636e\u6700\u7ec8\u4f1a\u300c\u8fc7\u65f6\u300d\uff0c\u4e0d\u518d\u53cd\u6620\u6570\u636e\u5e93\u5185\u6700\u65b0\u7684\u6570\u636e\u3002\n\u8fd9\u610f\u5473\u7740\uff0cTokens \u5185\u4fdd\u7559\u7684\u53ef\u80fd\u662f\u8fc7\u671f\u7684\u4fe1\u606f\uff0c\u4f8b\u5982\uff1a\u7528\u6237\u5728\u4e2a\u4eba\u4fe1\u606f\u9875\u9762\u4fee\u6539\u8fc7\u7684\u65e7 URL\u3002\u66f4\u4e25\u8083\u70b9\u8bb2\uff0c\u4e5f\u53ef\u80fd\u662f\u4e2a\u5177\u5907 admin \u6743\u9650\u7684 Token\uff0c\u5373\u4f7f\u4f60\u5df2\u7ecf\u5e9f\u9664\u4e86 admin \u6743\u9650\u3002\u56e0\u4e3a\u65e0\u6cd5\u9500\u6bc1\u8fd9\u4e9b Tokens\uff0c\u6240\u4ee5\u9762\u5bf9\u9700\u8981\u79fb\u9664\u7684\u7ba1\u7406\u5458\u6743\u9650\uff0c\u9664\u975e\u5173\u95ed\u6574\u4e2a\u7cfb\u7edf\uff0c\u522b\u65e0\u4ed6\u6cd5\u3002\n\u5b9e\u73b0\u5e93\u7f3a\u4e4f\u751f\u4ea7\u73af\u5883\u9a8c\u8bc1\u6216\u538b\u6839\u4e0d\u5b58\u5728 \u4f60\u6216\u8bb8\u5728\u60f3\uff0c\u4ee5\u4e0a\u7684\u8fd9\u4e9b\u95ee\u9898\u90fd\u662f\u56f4\u7ed5\u7740\u300c\u65e0\u72b6\u6001 JWT\u300d\u5c55\u5f00\u7684\uff0c\u8fd9\u79cd\u8bf4\u6cd5\u5927\u90e8\u5206\u60c5\u51b5\u662f\u5bf9\u7684\u3002\u7136\u800c\uff0c\u4f7f\u7528\u6709\u72b6\u6001 Tokens \u4e0e\u4f20\u7edf\u7684 Session cookies \u57fa\u672c\u4e0a\u662f\u7b49\u6548\u7684… \u4f46\u5374\u7f3a\u4e4f\u751f\u4ea7\u73af\u5883\u7684\u5927\u91cf\u9a8c\u8bc1\u3002\n\u73b0\u5b58\u7684 Session \u5b9e\u73b0\uff08\u4f8b\u5982\u9002\u7528\u4e8e Express \u7684 express-session\uff09\u5df2\u7ecf\u88ab\u7528\u4e8e\u751f\u4ea7\u73af\u5883\u5f88\u591a\u5f88\u591a\u5e74\uff0c\u5b83\u4eec\u7684\u5b89\u5168\u6027\u4e5f\u7ecf\u8fc7\u4e86\u5927\u91cf\u7684\u6539\u826f\u3002\u5018\u82e5\u4f7f\u7528 JWT \u4f5c\u4e3a Session cookies \u7684\u4e34\u65f6\u66ff\u4ee3\u54c1\uff0c\u4f60\u5c06\u65e0\u6cd5\u4eab\u53d7\u5230\u8fd9\u4e9b\u597d\u5904\uff0c\u5e76\u4e14\u5fc5\u987b\u4e0d\u65ad\u6539\u8fdb\u81ea\u5df1\u7684\u5b9e\u73b0\uff08\u5728\u6b64\u8fc7\u7a0b\u4e2d\u5f88\u5bb9\u6613\u5f15\u5165\u6f0f\u6d1e\uff09\uff0c\u6216\u4f7f\u7528\u7b2c\u4e09\u65b9\u7684\u5b9e\u73b0\uff0c\u5c3d\u7ba1\u8fd8\u6ca1\u6709\u5728\u771f\u5b9e\u4e16\u754c\u91cc\u5927\u91cf\u5e94\u7528\u3002\n \u8bd1\u8005\u6ce8\uff1a\u5b9e\u9645\u4e0a\uff0cLaravel Passport \u4fbf\u662f\u4f7f\u7528\u7c7b\u4f3c\u300c\u6709\u72b6\u6001 JWT\u300d\u7684\u65b9\u5f0f\u6765\u5b58\u50a8 OAuth Access Token\u3002\u5e78\u8fd0\u7684\u662f\uff0cPassport \u5df2\u7ecf\u6709\u4e0d\u5c11\u5b9e\u9645\u5e94\u7528\uff0c\u4e14\u4e0d\u5b8c\u5168\u4f9d\u8d56\u4e8e JWT\u3002\n \u7ed3\u8bba \u65e0\u72b6\u6001 JWT Tokens \u65e0\u6cd5\u88ab\u5355\u72ec\u5730\u9500\u6bc1\u6216\u66f4\u65b0\uff0c\u53d6\u51b3\u4e8e\u4f60\u5982\u4f55\u5b58\u50a8\uff0c\u53ef\u80fd\u8fd8\u4f1a\u5bfc\u81f4\u957f\u5ea6\u95ee\u9898\u3001\u5b89\u5168\u9690\u60a3\u3002\u6709\u72b6\u6001 JWT Tokens \u5728\u529f\u80fd\u65b9\u9762\u4e0e Session cookies \u65e0\u5f02\uff0c\u4f46\u7f3a\u4e4f\u751f\u4ea7\u73af\u5883\u7684\u9a8c\u8bc1\u3001\u7ecf\u8fc7\u5927\u91cf Review \u7684\u5b9e\u73b0\uff0c\u4ee5\u53ca\u826f\u597d\u7684\u5ba2\u6237\u7aef\u652f\u6301\u3002\n\u9664\u975e\uff0c\u4f60\u5de5\u4f5c\u5728\u50cf BAT \u90a3\u6837\u89c4\u6a21\u7684\u516c\u53f8\uff0c\u5426\u5219\u6ca1\u4ec0\u4e48\u4f7f\u7528 JWT \u4f5c\u4e3a Session \u673a\u5236\u7684\u7406\u7531\u3002\u8fd8\u662f\u76f4\u63a5\u7528 Session \u5427\u3002\n\u6240\u4ee5… JWT \u9002\u5408\u505a\u4ec0\u4e48\uff1f \u5728\u672c\u6587\u4e4b\u521d\uff0c\u6211\u5c31\u63d0\u5230 JWT \u867d\u7136\u4e0d\u9002\u5408\u4f5c\u4e3a Session \u673a\u5236\uff0c\u4f46\u5728\u5176\u5b83\u65b9\u9762\u7684\u786e\u6709\u5b83\u7684\u7528\u6b66\u4e4b\u5730\u3002\u8be5\u4e3b\u5f20\u4f9d\u65e7\u6210\u7acb\uff0cJWT \u7279\u522b\u6709\u6548\u7684\u4f7f\u7528\u4f8b\u5b50\u901a\u5e38\u662f\u4f5c\u4e3a\u4e00\u6b21\u6027\u7684\u6388\u6743\u4ee4\u724c\u3002\n\u5f15\u7528 JSON Web Token specification\uff1a\n JSON Web Token (JWT) is a compact, URL-safe means of representing claims to be transferred between two parties. […] enabling the claims to be digitally signed or integrity protected with a Message Authentication Code (MAC) and\/or encrypted.\n \u5728\u6b64\u4e0a\u4e0b\u6587\u4e2d\uff0c\u300cClaim\u300d\u53ef\u80fd\u662f\u4e00\u6761\u300c\u547d\u4ee4\u300d\uff0c\u4e00\u6b21\u6027\u7684\u8ba4\u8bc1\uff0c\u6216\u662f\u57fa\u672c\u4e0a\u80fd\u591f\u7528\u4ee5\u4e0b\u53e5\u5b50\u63cf\u8ff0\u7684\u4efb\u4f55\u60c5\u51b5\uff1a\n \u4f60\u597d\uff0c\u670d\u52a1\u5668 B\uff0c\u670d\u52a1\u5668 A \u544a\u8bc9\u6211\u6211\u53ef\u4ee5 < …Claim… >\uff0c\u8fd9\u662f\u6211\u7684\u8bc1\u636e\uff1a< …\u5bc6\u94a5… >\u3002\n \u4e3e\u4e2a\u4f8b\u5b50\uff0c\u4f60\u6709\u4e2a\u6587\u4ef6\u670d\u52a1\uff0c\u7528\u6237\u5fc5\u987b\u8ba4\u8bc1\u540e\u624d\u80fd\u4e0b\u8f7d\u6587\u4ef6\uff0c\u4f46\u6587\u4ef6\u672c\u8eab\u5b58\u50a8\u5728\u4e00\u53f0\u5b8c\u5168\u5206\u79bb\u4e14\u65e0\u72b6\u6001\u7684\u300c\u4e0b\u8f7d\u670d\u52a1\u5668\u300d\u5185\u3002\u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0c\u4f60\u53ef\u80fd\u60f3\u8981\u300c\u5e94\u7528\u670d\u52a1\u5668\uff08\u670d\u52a1\u5668 A\uff09\u300d\u9881\u53d1\u4e00\u6b21\u6027\u7684\u300c\u4e0b\u8f7d Tokens\u300d\uff0c\u7528\u6237\u80fd\u591f\u4f7f\u7528\u5b83\u53bb\u300c\u4e0b\u8f7d\u670d\u52a1\u5668\uff08\u670d\u52a1\u5668 B\uff09\u300d\u83b7\u53d6\u9700\u8981\u7684\u6587\u4ef6\u3002\n\u4ee5\u8fd9\u79cd\u65b9\u5f0f\u4f7f\u7528 JWT\uff0c\u5177\u5907\u51e0\u4e2a\u660e\u786e\u7684\u7279\u6027\uff1a\n Tokens \u751f\u547d\u671f\u8f83\u77ed\u3002\u5b83\u4eec\u53ea\u9700\u5728\u51e0\u5206\u949f\u5185\u53ef\u7528\uff0c\u8ba9\u5ba2\u6237\u7aef\u80fd\u591f\u5f00\u59cb\u4e0b\u8f7d\u3002 Tokens \u4ec5\u5355\u6b21\u4f7f\u7528\u3002\u5e94\u7528\u670d\u52a1\u5668\u5e94\u5f53\u5728\u6bcf\u6b21\u4e0b\u8f7d\u65f6\u9881\u53d1\u65b0\u7684 Token\u3002\u6240\u4ee5\u4efb\u4f55 Token \u53ea\u7528\u4e8e\u4e00\u6b21\u8bf7\u6c42\u5c31\u4f1a\u88ab\u629b\u5f03\uff0c\u4e0d\u5b58\u5728\u4efb\u4f55\u6301\u4e45\u5316\u7684\u72b6\u6001\u3002 \u5e94\u7528\u670d\u52a1\u5668\u4f9d\u65e7\u4f7f\u7528 Sessions\u3002\u4ec5\u4ec5\u4e0b\u8f7d\u670d\u52a1\u5668\u4f7f\u7528 Tokens \u6765\u6388\u6743\u6bcf\u6b21\u4e0b\u8f7d\uff0c\u56e0\u4e3a\u5b83\u4e0d\u9700\u8981\u4efb\u4f55\u6301\u4e45\u5316\u72b6\u6001\u3002 \u6b63\u5982\u4ee5\u4e0a\u4f60\u6240\u770b\u5230\u7684\uff0c\u7ed3\u5408 Sessions \u548c JWT Tokens \u6709\u7406\u6709\u636e\u3002\u5b83\u4eec\u5206\u522b\u62e5\u6709\u5404\u81ea\u7684\u76ee\u7684\uff0c\u6709\u65f6\u5019\u4f60\u9700\u8981\u4e24\u8005\u4e00\u8d77\u4f7f\u7528\u3002\u53ea\u662f\u4e0d\u8981\u628a JWT \u7528\u4f5c \u6301\u4e45\u7684\u3001\u957f\u671f\u7684 \u6570\u636e\u5c31\u597d\u3002\n \u62d3\u5c55\u9605\u8bfb\uff1ahttps:\/\/paragonie.com\/blog\/2017\/03\/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid\n","permalink":"https:\/\/wi1dcard.dev\/posts\/stop-using-jwt-for-sessions\/","summary":"JWT<\/code>\u3002\u672c\u6587\u4f5c\u8005\u5c06\u8be6\u89e3\uff1a\u4e3a\u4f55 JWT \u4e0d\u9002\u5408\u5b58\u50a8 Session\uff0c\u4ee5\u53ca JWT \u5f15\u53d1\u7684\u5b89\u5168\u9690\u60a3\u3002\u671b\u5404\u4f4d\u4f7f\u7528\u524d\u4e09\u601d\u3002<\/p>","title":"\u505c\u6b62\u4f7f\u7528 JWT \u4f5c\u4e3a Session \u7cfb\u7edf"},{"content":"\u539f\u6765 Travis CI \u5b98\u65b9\u4e00\u76f4\u63d0\u4f9b\u7740\u90e8\u7f72\u5230 GitHub Pages \u7684\u65b9\u5f0f…\n\u90a3\u4e48\u90a3\u4e9b\u626f\u86cb\u7684\u6559\u7a0b\u53ef\u4ee5\u4e00\u8fb9\u73a9\u53bb\u4e86\u3002\n\u4eca\u5929\u840c\u751f\u4e00\u4e2a\u60f3\u6cd5\uff0c\u4f7f\u7528 Travis CI + Qshell\uff08\u4e03\u725b\u4e91\u5b98\u65b9 CLI \u5ba2\u6237\u7aef\uff09\u5b9e\u73b0\u6bcf\u6b21\u90e8\u7f72\u535a\u5ba2\uff0c\u81ea\u52a8\u5c06\u7b80\u5386 HTML \u9875\u9762\u6e32\u67d3\u6210 PDF \u5e76\u4e0a\u4f20\u81f3\u4e03\u725b\u4ee5\u4f9b\u4e0b\u8f7d\u7684\u529f\u80fd\u3002\n\u5728\u9605\u8bfb Travis \u5b98\u65b9\u6587\u6863\u7684\u65f6\u5019\u5076\u7136\u770b\u5230\uff1a\n More than running tests:\ndeploy to GitHub pages\n \u8fdb\u53bb\u53d1\u73b0 Travis \u4e00\u76f4\u4ee5\u6765\u5c31\u63d0\u4f9b\u4e86\u7b80\u6613\u7684 Deploy \u96c6\u6210\uff0c\u9664\u4e86 Pages \u8fd8\u6709 S3 \u7b49\u670d\u52a1\u53ef\u4ee5\u5f00\u7bb1\u5373\u7528\u3002\n\u7136\u540e\u53c8\u7784\u4e86\u4e00\u773c Travis \u6587\u6863\u4ed3\u5e93\u7684 File History\uff0c\u53d1\u73b0… Emmmm\u3002\n\u539f\u6765\u8fd9\u4e2a\u529f\u80fd\u4e00\u76f4\u90fd\u5728\uff0c\u6700\u65e9\u80fd\u8ffd\u6eaf\u5230 2016 \u5e74\u4e86\u3002\n\u9614\u6015\u9614\u6015\u3002\u7136\u9e45\u5373\u4f7f\u8fd9\u6837\uff0c\u7f51\u7edc\u4e0a\u8fd8\u6d41\u4f20\u7740\u4e00\u5927\u6279\u4e71\u4e03\u516b\u7cdf\u300c\u8bbe\u7f6e SSH \u5bc6\u94a5\u300d\u3001\u300c\u624b\u52a8\u8fdb\u884c Commit \u548c Push\u300d \u7684\u4e2d\u6587\u6559\u7a0b\uff08\u5c24\u5176\u767e\u5ea6\uff09\u3002\u7b80\u76f4\u5bb3\u4eba\u4e0d\u6d45\u3002\n\u7531\u6b64\u53ef\u89c1\uff0c\u4e0d\u8981\u76f8\u4fe1\u91ce\u8def\u5b50\u7684\u5947\u8469\u6559\u7a0b\uff0c\u6709\u80fd\u529b\u8fd8\u662f\u9605\u8bfb\u5b98\u65b9\u6587\u6863\u6bd4\u8f83\u597d\u3002\n\u8d8a\u6765\u8d8a\u89c9\u5f97\u65e5\u5e38\u79d1\u5b66\u4e0a\u7f51\u662f\u7a0b\u5e8f\u5458\u7684\u5fc5\u5907\u6280\u80fd\u4e4b\u4e00\uff0c\u5c24\u5176\u662f\u5728\u5982\u4eca\u7684\u5927\u73af\u5883\u4e0b\u3002\n\u53e6\uff0c\u4eca\u5929\u770b\u5230\u4e00\u56fe\uff0c\u6709\u70b9\u611f\u60f3\uff0c\u8bb0\u5f55\u4e00\u4e0b\uff1a\n","permalink":"https:\/\/wi1dcard.dev\/posts\/deploy-github-pages-with-travis-ci\/","summary":"