几年前再二手书网站上买了本旧书的复印版，初读下来确实和作者角度思想都不在一个层次。书名《zhengzhi的人生》，读这个也是当时追风。最近生活一团糟，突然又想起这本书：

先少摘几段：

生活在这个世界上的人，有的是弱者，有的是强者；有的要别人来设定目标，有的给别人设定目标；有的需要感情支持生活，有的需要意志支持生活。

要在生命流失的过程中，尽量地实现自己的理想和意志，完成人的选择，这将是有价值的生命。历史在一年一年地过往，生命在一天一天地减少。对个人来说是这样，但是对整个人类来说，历史在一年一年地延长，生命在一天一天地增加。

多年来养成一种习惯，或者说不得不养成这样的习惯，就是在夜深人静的时候，静静地思考一天来的经历。

近来，工作平淡无奇，没有太多激情投入，机械的进行着，自我管理与积极性明显降低。感情生活像一滩泥水，都不知道该甩谁身上。烦恼愈多，思考越多。联想到书中作者所分享的情景，自愧不如，我的烦恼是有多么低级。

• 有工作，但是没事业。自以为工作能力超过90%的人，但是很难有带入感，获得感。做再好也难以唤起最开始的激情。
• 有爱好，但是没什么用。对很多事都有兴趣，但又很难精进。比如休息时搞搞厨艺，只是为了让自己能按规矩办事，注重细节，在生活上能给自己提个醒，不要带入过多的程序员思维。总是感觉这些爱好开始的很功利，也难以体会其中快乐。
• 能赚钱，但没有卖苦力的心。一年几十万真的很难让我全心全意的付出。再多钱吧，又没人愿意给我。。。
• 渴望爱情，但不太知道该怎么办，这个倒是可以往后放放

总体看来确实难以实现自己的理想和意志，甚至难有理想，或者不知道如何实现。我总觉得要做1%的人才有意思，但是近几年真的迷惘了。缺少了意志的支持，不知道下一步能不能走下去。

多思无益，还是得行动起来，准备给自己找点事情做，加大搜索范围，看看能不能碰上最优解。生活还是得乐起来，不行找点新的乐子。情感方面还是得放平心态。自己的发展方向还是随遇而安，再重点收获。希望能坚持下去，找到生活的重心，支持自己的生活，实现自己的意志。

scala> val ll = List(1,2,3,5,5)
ll: List[Int] = List(1, 2, 3, 5, 5)

scala> ll.take(2)
res3: List[Int] = List(1, 2)

scala> def compare(a:Int, b:Int):Boolean = {
     |   println("comparing %s and %s".format(a,b))
     |   a>b
     | }
compare: (a: Int, b: Int)Boolean

scala> compare(33,11)
comparing 33 and 11
res4: Boolean = true

scala> ll.sortWith(compare)
comparing 2 and 1
comparing 3 and 2
comparing 5 and 3
comparing 5 and 5
comparing 5 and 5
comparing 5 and 2
comparing 5 and 3
comparing 5 and 5
comparing 5 and 5
res5: List[Int] = List(5, 5, 3, 2, 1)

scala> List(10, 5, 8, 1, 7).sortWith(_ < _)
res1: List[Int] = List(1, 5, 7, 8, 10)

偶尔在豆瓣相亲组发现了一个漂亮温柔的女孩子，简单聊下就加了QQ。我承认我主要看脸了。在深入交流了几天后，收到了如下对话：

我抱着看热闹的心情，下载了app。。。对标东南亚电商Bukalapak，可惜APP太山寨，名字叫Bukalapak-l。开屏页还是中文，首页如下：

是个商城APP, 从如此简陋的风格，我推测这个APP不简单，当然了小姐姐开始让我联系客服充钱了，此时开始，我的兴趣点转移了。想看看这个APP到底是个啥。
第一步，监听APP流量，能做这个软件很多，过程跳过。拿到了APP后台的地址，直接打开根目录有惊喜：

看似是个正规站，但是查了网站备案，具体公司信息，全是假的。遂准备搞他。
打开Burp Suite, 使用常用用户名密码爆破网站账户。经过测试，admin是存在的用户名，所以缩小字典范围，专攻admin：

没有5分钟。。。弱密码暴露了，000000.
咱们一起看下这个后台都有啥，有个当日流水，忘了截屏，大概3万多，当然包括拖儿自己冲的钱。

我先搜到了自己的账户，发现这个分销系统有上下级关系，然后我就查到了“女神”的电话。。。而且这个干了三年的多的人，只有前两天冲了6000块，而且没有任何交易。。。杀猪盘稳了。既然这么喜欢这个商城，我就送了她1000000：

同时也能看到，她在半个月里拉来了6个憨憨了。。。就不晒账号了。
发现一个加分类栏的模块，可以上架商品，当然了也查过库存之类的信息，全是假的。我心中的正义感不允许对这个局熟视无睹，我在分类主页面加了个新分类：警示信息和站主手机号

还能做点什么呢？ 我顺手把站主密码和管理员密码全改了，应该能拖一阵子。
搞完一通，向“女神”通报了最新情况，当然了她直接把我删了。。。

dockerhub免费套餐用户六小时只能拉取镜像200次了

事情时这样的：

上周在公司对负责系统进行负载测试，第一轮测得很happy，响应速度与自动扩展能力都符合预期。奇怪的事在第二轮时出现了。。。线上系统新增容器不断重启。。。整个系统能力被卡脖子了。。。

这绝对是见了鬼了，系统基于AWS ECS服务(AWS提供的基于docker的容器集群，不要和阿里云的主机服务混淆），频繁的Task启动失败绝对是有大问题了。我第一时间查看了AWS console 上关于启动失败的任务推出码：

ECS任务定义下有一个是主程序，还挂了几个Side-Car模式的容器做指标转发和程序追踪。出了主程序是自己构建的，其他都是从dockerhub直接取的，而这些镜像都拉取失败了，致使整个ECS任务不能正常启动。这是怎么回事? 居然拉取镜像都不成功了。

Docker is both a company and an Open Source project which revolutionised how users deploy code to production. Containers rather than Virtual Machines (VMs) are now considered the lingua franca of deployments, and containers are packed in “images”. These images need to be distributed through a container registry, such as the registry created and operated by Docker called the Docker Hub.

根据docker给的提示信息再结合谷歌大法：

基本锁定了dockerhub变坏了，对用户要差别对待了。深挖一下有了结果,注册的免费用户六小时只有200次的拉取机会。匿名用户只有100次。。。

根据DockerHub给的文档检验下剩余的使用额度：(https://www.docker.com/blog/checking-your-current-docker-pull-rate-limits-and-status/)

实锤了！做负载测试时把账号的使用限额给超了。DockerHub对这个账号进行了限流。

DockerHub新政策的影响

在开源软件社区，匿名拉取镜像是非常常见的，尤其在CI/CD系统中，几乎所有人都会用到Docker Hub中的镜像或者以公有镜像作为基准继续构建自己的镜像。基于容器的服务也基本都会遇到这个问题，比如AWS ECS, EKS 或者Kubernetes。当进行扩展时，如果对dockerhub的请求已经超过限制，就会持续失败状态，造成服务停机。CI/CD流水线上会造成打包发布失败等问题。

解决方法

1. 直接交钱，升级到付费版本，重新获得无限使用权

2. 找新的docker仓库或着dockerhub的镜像站点使用

对于AWS用户，可以使用Amazon ECR Public Gallery -- Share and deploy container images, publicly and privately.
在AWS环境内使用这个公共仓库可以获得无限的使用频率。

我的解决方法也是ECR Public Gallery，将images全部换掉，重新部署服务，一切恢复正常了。

参考链接：

• https://www.docker.com/blog/checking-your-current-docker-pull-rate-limits-and-status/
• https://www.docker.com/blog/what-you-need-to-know-about-upcoming-docker-hub-rate-limiting/
• https://www.openshift.com/blog/mitigate-impact-of-docker-hub-pull-request-limits
• https://thenewstack.io/docker-hub-limits-what-they-are-and-how-to-route-around-them/
• https://inlets.dev/blog/2020/10/29/preparing-docker-hub-rate-limits.html
• https://blog.container-solutions.com/dealing-with-docker-hub-rate-limiting
• https://aws.amazon.com/blogs/containers/advice-for-customers-dealing-with-docker-hub-rate-limits-and-a-coming-soon-announcement/
• https://aws.amazon.com/about-aws/whats-new/2020/12/announcing-amazon-ecr-public-and-amazon-ecr-public-gallery/

$ echo "QUIT" | openssl s_client -connect cdf-retrieval-ocs-205065-main-public-production.tr-fr-prod.aws-int.thomsonreuters.com:443 2>/dev/null | openssl x509 -noout -enddate 2>/dev/null
notAfter=Jan 25 23:59:59 2022 GMT

# echo "QUIT" | openssl d-connect google.com:443 2>/dev/null | openssl x509 -noout -startdate 2>/dev/null

Install

https://www.terraform.io/downloads.html

brew install hashicorp/tap/terraform

curl -fsSL https://apt.releases.hashicorp.com/gpg | sudo apt-key add -
sudo apt-add-repository "deb [arch=amd64] https://apt.releases.hashicorp.com $(lsb_release -cs) main"
sudo apt-get update && sudo apt-get install terraform

• https://learn.hashicorp.com/tutorials/terraform/install-cli

Verify the installation

yuyang@YYStation ~ % terraform
Usage: terraform [-version] [-help] <command> [args]

The available commands for execution are listed below.
The most common, useful commands are shown first, followed by
less common or more advanced commands. If you're just getting
started with Terraform, stick with the common commands. For the
other commands, please read the help and docs before usage.

Common commands:
    apply              Builds or changes infrastructure
    console            Interactive console for Terraform interpolations
    destroy            Destroy Terraform-managed infrastructure
    env                Workspace management
    fmt                Rewrites config files to canonical format
    get                Download and install modules for the configuration
    graph              Create a visual graph of Terraform resources
    import             Import existing infrastructure into Terraform
    init               Initialize a Terraform working directory
    login              Obtain and save credentials for a remote host
    logout             Remove locally-stored credentials for a remote host
    output             Read an output from a state file
    plan               Generate and show an execution plan
    providers          Prints a tree of the providers used in the configuration
    refresh            Update local state file against real resources
    show               Inspect Terraform state or plan
    taint              Manually mark a resource for recreation
    untaint            Manually unmark a resource as tainted
    validate           Validates the Terraform files
    version            Prints the Terraform version
    workspace          Workspace management

All other commands:
    0.12upgrade        Rewrites pre-0.12 module source code for v0.12
    0.13upgrade        Rewrites pre-0.13 module source code for v0.13
    debug              Debug output management (experimental)
    force-unlock       Manually unlock the terraform state
    push               Obsolete command for Terraform Enterprise legacy (v1)
    state              Advanced state management
yuyang@YYStation ~ % terraform version
Terraform v0.13.2

Quick start tutorial

need docker service on your machine

terraform {
  required_providers {
    docker = {
      source = "terraform-providers/docker"
    }
  }
}

provider "docker" {}

resource "docker_image" "nginx" {
  name         = "nginx:latest"
  keep_locally = false
}

resource "docker_container" "nginx" {
  image = docker_image.nginx.latest
  name  = "tutorial"
  ports {
    internal = 80
    external = 8000
  }
}

yuyang@YYStation mkdir terraform-docker-demo
yuyang@YYStation cd terraform-docker-demo
yuyang@YYStation ls
main.tf
yuyang@YYStation terraform-docker-demo % terraform init

Initializing the backend...

Initializing provider plugins...
- Finding latest version of terraform-providers/docker...
- Installing terraform-providers/docker v2.7.2...
- Installed terraform-providers/docker v2.7.2 (signed by HashiCorp)

The following providers do not have any version constraints in configuration,
so the latest version was installed.

To prevent automatic upgrades to new major versions that may contain breaking
changes, we recommend adding version constraints in a required_providers block
in your configuration, with the constraint strings suggested below.

* terraform-providers/docker: version = "~> 2.7.2"

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.
yuyang@YYStation terraform-docker-demo % terraform apply

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  + create

Terraform will perform the following actions:

  # docker_container.nginx will be created
  + resource "docker_container" "nginx" {
      + attach           = false
      + bridge           = (known after apply)
      + command          = (known after apply)
      + container_logs   = (known after apply)
      + dns              = (known after apply)
      + dns_opts         = (known after apply)
      + entrypoint       = (known after apply)
      + exit_code        = (known after apply)
      + gateway          = (known after apply)
      + hostname         = (known after apply)
      + id               = (known after apply)
      + image            = (known after apply)
      + ip_address       = (known after apply)
      + ip_prefix_length = (known after apply)
      + ipc_mode         = (known after apply)
      + log_driver       = (known after apply)
      + log_opts         = (known after apply)
      + logs             = false
      + must_run         = true
      + name             = "tutorial"
      + network_data     = (known after apply)
      + read_only        = false
      + restart          = "no"
      + rm               = false
      + shm_size         = (known after apply)
      + start            = true
      + user             = (known after apply)
      + working_dir      = (known after apply)

      + ports {
          + external = 8000
          + internal = 80
          + ip       = "0.0.0.0"
          + protocol = "tcp"
        }
    }

  # docker_image.nginx will be created
  + resource "docker_image" "nginx" {
      + id           = (known after apply)
      + keep_locally = false
      + latest       = (known after apply)
      + name         = "nginx:latest"
    }

Plan: 2 to add, 0 to change, 0 to destroy.

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

  Enter a value: yes

docker_image.nginx: Creating...
docker_image.nginx: Still creating... [10s elapsed]
docker_image.nginx: Creation complete after 20s [id=sha256:7e4d58f0e5f3b60077e9a5d96b4be1b974b5a484f54f9393000a99f3b6816e3dnginx:latest]
docker_container.nginx: Creating...
docker_container.nginx: Creation complete after 2s [id=3225d6f72fc01577bd30e21d537ee78e3937898c7fd41914341e6d1a3678bc1c]

Apply complete! Resources: 2 added, 0 changed, 0 destroyed.
yuyang@YYStation terraform-docker-demo %
yuyang@YYStation terraform-docker-demo % terraform destroy
docker_image.nginx: Refreshing state... [id=sha256:7e4d58f0e5f3b60077e9a5d96b4be1b974b5a484f54f9393000a99f3b6816e3dnginx:latest]
docker_container.nginx: Refreshing state... [id=3225d6f72fc01577bd30e21d537ee78e3937898c7fd41914341e6d1a3678bc1c]

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  - destroy

Terraform will perform the following actions:

  # docker_container.nginx will be destroyed
  - resource "docker_container" "nginx" {
      - attach            = false -> null
      - command           = [
          - "nginx",
          - "-g",
          - "daemon off;",
        ] -> null
      - cpu_shares        = 0 -> null
      - dns               = [] -> null
      - dns_opts          = [] -> null
      - dns_search        = [] -> null
      - entrypoint        = [
          - "/docker-entrypoint.sh",
        ] -> null
      - gateway           = "172.17.0.1" -> null
      - group_add         = [] -> null
      - hostname          = "3225d6f72fc0" -> null
      - id                = "3225d6f72fc01577bd30e21d537ee78e3937898c7fd41914341e6d1a3678bc1c" -> null
      - image             = "sha256:7e4d58f0e5f3b60077e9a5d96b4be1b974b5a484f54f9393000a99f3b6816e3d" -> null
      - ip_address        = "172.17.0.2" -> null
      - ip_prefix_length  = 16 -> null
      - ipc_mode          = "private" -> null
      - links             = [] -> null
      - log_driver        = "json-file" -> null
      - log_opts          = {} -> null
      - logs              = false -> null
      - max_retry_count   = 0 -> null
      - memory            = 0 -> null
      - memory_swap       = 0 -> null
      - must_run          = true -> null
      - name              = "tutorial" -> null
      - network_data      = [
          - {
              - gateway          = "172.17.0.1"
              - ip_address       = "172.17.0.2"
              - ip_prefix_length = 16
              - network_name     = "bridge"
            },
        ] -> null
      - network_mode      = "default" -> null
      - privileged        = false -> null
      - publish_all_ports = false -> null
      - read_only         = false -> null
      - restart           = "no" -> null
      - rm                = false -> null
      - shm_size          = 64 -> null
      - start             = true -> null
      - sysctls           = {} -> null
      - tmpfs             = {} -> null

      - ports {
          - external = 8000 -> null
          - internal = 80 -> null
          - ip       = "0.0.0.0" -> null
          - protocol = "tcp" -> null
        }
    }

  # docker_image.nginx will be destroyed
  - resource "docker_image" "nginx" {
      - id           = "sha256:7e4d58f0e5f3b60077e9a5d96b4be1b974b5a484f54f9393000a99f3b6816e3dnginx:latest" -> null
      - keep_locally = false -> null
      - latest       = "sha256:7e4d58f0e5f3b60077e9a5d96b4be1b974b5a484f54f9393000a99f3b6816e3d" -> null
      - name         = "nginx:latest" -> null
    }

Plan: 0 to add, 0 to change, 2 to destroy.

Do you really want to destroy all resources?
  Terraform will destroy all your managed infrastructure, as shown above.
  There is no undo. Only 'yes' will be accepted to confirm.

  Enter a value: yes

docker_container.nginx: Destroying... [id=3225d6f72fc01577bd30e21d537ee78e3937898c7fd41914341e6d1a3678bc1c]
docker_container.nginx: Destruction complete after 0s
docker_image.nginx: Destroying... [id=sha256:7e4d58f0e5f3b60077e9a5d96b4be1b974b5a484f54f9393000a99f3b6816e3dnginx:latest]
docker_image.nginx: Destruction complete after 1s

Destroy complete! Resources: 2 destroyed.

https://wiki.ubuntu.com/ARM/RaspberryP

download ubuntu server

https://ubuntu.com/download/raspberry-pi

use Raspberry Pi Imager

https://www.raspberrypi.org/downloads/

Use Raspberry Pi Imager for an easy way to install Raspberry Pi OS and other operating systems to an SD card ready to use with your Raspberry Pi

use cmd on mac

yuyangdeMacBook-Pro:Downloads yuyang$ diskutil list
/dev/disk0 (internal, physical):
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:      GUID_partition_scheme                        *121.3 GB   disk0
   1:                        EFI EFI                     209.7 MB   disk0s1
   2:                 Apple_APFS Container disk1         121.1 GB   disk0s2

/dev/disk1 (synthesized):
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:      APFS Container Scheme -                      +121.1 GB   disk1
                                 Physical Store disk0s2
   1:                APFS Volume disk - 数据             78.6 GB    disk1s1
   2:                APFS Volume Preboot                 81.3 MB    disk1s2
   3:                APFS Volume Recovery                528.5 MB   disk1s3
   4:                APFS Volume VM                      3.2 GB     disk1s4
   5:                APFS Volume disk                    10.7 GB    disk1s5

/dev/disk2 (internal, physical):
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:     FDisk_partition_scheme                        *31.9 GB    disk2
   1:             Windows_FAT_32 NO NAME                 31.9 GB    disk2s1

yuyangdeMacBook-Pro:Downloads yuyang$ diskutil unmountDisk /dev/disk2
Unmount of all volumes on disk2 was successful
yuyangdeMacBook-Pro:Downloads yuyang$ sudo dd bs=1m if=ubuntu-18.04.3-server-arm64.iso of=/dev/disk2 conv=sync
Password:
Sorry, try again.
Password:
902+1 records in
903+0 records out
946864128 bytes transferred in 353.327691 secs (2679847 bytes/sec)

sudo sh -c 'gunzip -c ~/Downloads/< image file > | sudo dd of=< drive address > bs=32m'

Ubuntu 20.04: Connect to WiFi from command line with Netplan step by step instructions

vim /etc/netplan/50-cloud-init.yaml

sudo netplan apply
# sudo netplan --debug apply

# This file is generated from information provided by the datasource.  Changes
# to it will not persist across an instance reboot.  To disable cloud-init's
# network configuration capabilities, write a file
# /etc/cloud/cloud.cfg.d/99-disable-network-config.cfg with the following:
# network: {config: disabled}
network:
    ethernets:
        eth0:
            dhcp4: true
            optional: true
    version: 2
    wifis:
        wlp3s0:
            optional: true
            access-points:
                "SSID-NAME-HERE":
                    password: "PASSWORD-HERE"
            dhcp4: true

enable ssh

sudo apt update
sudo apt install openssh-server
sudo system status ssh

update source with ustc if you in china

http://mirrors.ustc.edu.cn/help/ubuntu-ports.html

deb https://mirrors.ustc.edu.cn/ubuntu-ports/ focal main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu-ports/ focal main main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu-ports/ focal-updates main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu-ports/ focal-updates main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu-ports/ focal-backports main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu-ports/ focal-backports main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu-ports/ focal-security main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu-ports/ focal-security main restricted universe multiverse

Install a desktop

You can install a desktop if you like, here are some popular ones:

sudo apt-get install xubuntu-desktop
sudo apt-get install lubuntu-desktop
sudo apt-get install kubuntu-desktop
sudo apt-get install ubuntu-desktop

# sudo apt autoremove kubuntu-desktop

1. ipinfo.io

~ % curl ipinfo.io
{
  "ip": "198.179.137.192",
  "city": "Eagan",
  "region": "Minnesota",
  "country": "US",
  "loc": "44.8041,-93.1669",
  "org": "AS4583 West Publishing Corporation",
  "postal": "55123",
  "timezone": "America/Chicago",
  "readme": "https://ipinfo.io/missingauth"
}

2. ifconfig.me

 ~ % curl http://ifconfig.me/
198.179.137.192
```d

https://ec.haxx.se/http/http-post

#POSTing binary
curl --data-binary @filename http://example.com/

yuyang@YYStation Downloads % curl -v -i  https://i-bp18d4yolzv6lk76d7zm.mycloud.com/78deaab2-0000-1111-2222-6b332213dfaf/sdk/v2/files/ra6dgixuzqzumfosggddvdssf/resumable/content \
-X PUT \
-H "authorization:Bearer XXX" \
--data-binary @balenaEtcher-1.5.78.dmg