争光的技术栈 – Docs

Redis高可用部署指南

Thu, 16 Oct 2025 04:29:30 +0800

知乎这篇概念讲的挺好的: https://zhuanlan.zhihu.com/p/543953543

高可用方案概览

根据业务需求和技术要求，Redis高可用方案可以分为以下几种：

方案	适用场景	说明	优点	缺点
单机版	开发测试或稳定性要求不高	通过持久化机制保证数据安全	配置简单，资源消耗少	无法应对硬件故障，恢复时间长
主从复制	读多写少场景,要求数据不丢失,节点故障后能快速恢复,能接受宕机时间	配置数据同步,但主从切换手动控制或自行实现	维护相对简单,高可用也有保证,客户端不用改造	需要自己实现主从切换或者手动切换
哨兵模式	要求数据不丢失,节点故障后能恢复数据,单机故障能够快速自愈	通过哨兵监听主redis的状态,故障后自动切换并通知客户端	自动故障恢复，配置灵活	客户端需要支持哨兵协议或在客户端和redis直接加一层proxy
集群模式	大数据量，高并发	数据分片存储，横向扩展（其实就是数据库的分库分表概念,根据key计算存放到那个节点上,每个节点只承担部分key的读写）	水平扩展，高性能	跨节点操作限制，运维复杂

详细配置指南

注意: 这里配置只是各种模式的简要示例,请不要用于生产

1. 单机版配置

AOF持久化配置

AOF（Append Only File）通过记录每个写命令来持久化数据：

# redis.conf 配置
appendonly yes
appendfilename "appendonly.aof"

# AOF同步策略
appendfsync everysec # 推荐：每秒同步一次

# AOF重写配置
auto-aof-rewrite-percentage 100
auto-aof-rewrite-min-size 64mb

# AOF文件损坏修复
aof-load-truncated yes

RDB快照配置

# RDB快照配置
save 900 1 # 900秒内至少1次修改
save 300 10 # 300秒内至少10次修改 
save 60 10000 # 60秒内至少10000次修改

# RDB文件配置
dbfilename dump.rdb
dir /var/lib/redis

# 压缩配置
rdbcompression yes
rdbchecksum yes

混合持久化配置（推荐）

# 启用混合持久化（Redis 4.0+）
aof-use-rdb-preamble yes

# 同时启用AOF和RDB
appendonly yes
save 900 1
save 300 10
save 60 10000

2. 主从复制配置

主节点配置（redis-master.conf）

# 基础配置
port 6379
bind 0.0.0.0

# 主从复制配置
replica-serve-stale-data yes
replica-read-only yes

从节点配置（redis-slave.conf）

# 基础配置
port 6379
bind 0.0.0.0

# 主从复制配置
replicaof 192.168.1.100 6379
#masterauth masterpassword

# 从节点只读
replica-read-only yes

启动主从节点

# 启动主节点
redis-server /etc/redis/redis-master.conf

# 启动从节点
redis-server /etc/redis/redis-slave.conf

# 验证主从状态
redis-cli -h 192.168.1.100 -a masterpassword info replication

3. 哨兵模式配置

哨兵配置文件（sentinel.conf）

# 哨兵端口
port 26379

# 哨兵工作目录
dir /var/lib/redis-sentinel

# 监控主节点配置
sentinel monitor mymaster 192.168.1.100 6379 2

# 认证配置
sentinel auth-pass mymaster masterpassword

# 故障检测配置
sentinel down-after-milliseconds mymaster 5000
sentinel parallel-syncs mymaster 1
sentinel failover-timeout mymaster 15000

# 通知脚本
sentinel notification-script mymaster /etc/redis/notify.sh
sentinel client-reconfig-script mymaster /etc/redis/reconfig.sh

# 日志配置
logfile /var/log/redis/sentinel.log
loglevel notice

启动哨兵集群

# 在三台机器上分别启动哨兵
redis-sentinel /etc/redis/sentinel.conf

# 验证哨兵状态
redis-cli -h 192.168.1.100 -p 26379 sentinel masters
redis-cli -h 192.168.1.100 -p 26379 sentinel slaves mymaster

Java客户端连接示例

// Jedis哨兵配置
Set<String> sentinels = new HashSet<>();
sentinels.add("192.168.1.100:26379");
sentinels.add("192.168.1.101:26379");
sentinels.add("192.168.1.102:26379");

JedisSentinelPool pool = new JedisSentinelPool("mymaster", sentinels);
Jedis jedis = pool.getResource();

4. 集群模式配置

集群节点配置（redis-cluster.conf）

# 基础配置
port 7000
bind 0.0.0.0

# 集群配置
cluster-enabled yes
cluster-config-file nodes-7000.conf
cluster-node-timeout 15000

# 内存配置
maxmemory 2gb
maxmemory-policy allkeys-lru

创建集群

# 创建6节点集群（3主3从）
redis-cli --cluster create \
 192.168.1.100:7000 192.168.1.101:7000 192.168.1.102:7000 \
 192.168.1.100:7001 192.168.1.101:7001 192.168.1.102:7001 \
 --cluster-replicas 1

# 验证集群状态
redis-cli -h 192.168.1.100 -p 7000 cluster nodes
redis-cli -h 192.168.1.100 -p 7000 cluster info

性能优化建议

1. 内存优化

# 内存配置
maxmemory 4gb
maxmemory-policy allkeys-lru

# 内存使用优化
hash-max-ziplist-entries 512
hash-max-ziplist-value 64
list-max-ziplist-size -2
set-max-intset-entries 512
zset-max-ziplist-entries 128
zset-max-ziplist-value 64

监控与运维

1. 监控指标

关键性能指标

# 内存使用情况
redis-cli info memory

# 连接数统计
redis-cli info clients

# 命令统计
redis-cli info commandstats

# 主从复制状态
redis-cli info replication

# 持久化状态
redis-cli info persistence

2. 故障处理

常见故障处理流程

主节点宕机

# 手动切换到从节点
redis-cli -h slave-ip -p 6379 SLAVEOF NO ONE

# 更新应用配置指向新主节点
# 修复原主节点后设为从节点
redis-cli -h old-master-ip -p 6379 SLAVEOF new-master-ip 6379

数据恢复

# 从AOF文件恢复
redis-server --appendonly yes --appendfilename appendonly.aof

# 从RDB文件恢复
redis-server --dbfilename dump.rdb --dir /path/to/rdb

集群节点故障

# 查看故障节点
redis-cli --cluster check 192.168.1.100:7000

# 移除故障节点
redis-cli --cluster del-node 192.168.1.100:7000 node-id

# 添加新节点
redis-cli --cluster add-node new-node-ip:7000 192.168.1.100:7000

3. 参考资料

Release Note Changelog 20260712_092041

Sun, 12 Jul 2026 09:20:41 +0800

Release Note Changelog (20260712_092041)

本次共新增 27 个 release note 文件：

项目: coredns/coredns
- 版本: v1.14.6
- 文件: coredns/coredns/v1.14.6
项目: coredns/coredns
- 版本: v1.14.5
- 文件: coredns/coredns/v1.14.5
项目: etcd-io/etcd
- 版本: v3.7.0
- 文件: etcd-io/etcd/v3.7.0
项目: etcd-io/etcd
- 版本: v3.6.13
- 文件: etcd-io/etcd/v3.6.13
项目: etcd-io/etcd
- 版本: v3.5.32
- 文件: etcd-io/etcd/v3.5.32
项目: goharbor/harbor
- 版本: v2.15.2
- 文件: goharbor/harbor/v2.15.2
项目: goharbor/harbor
- 版本: v2.15.2-rc3
- 文件: goharbor/harbor/v2.15.2-rc3
项目: containerd/containerd
- 版本: v2.3.3
- 文件: containerd/containerd/v2.3.3
项目: containerd/containerd
- 版本: v2.2.6
- 文件: containerd/containerd/v2.2.6
项目: containerd/containerd
- 版本: v2.0.11
- 文件: containerd/containerd/v2.0.11
项目: containerd/containerd
- 版本: v1.7.34
- 文件: containerd/containerd/v1.7.34
项目: containers/podman
- 版本: v6.0.1
- 文件: containers/podman/v6.0.1
项目: containers/podman
- 版本: v5.8.5
- 文件: containers/podman/v5.8.5
项目: cilium/cilium
- 版本: v1.20.0-pre.4
- 文件: cilium/cilium/v1.20.0-pre.4
项目: prometheus/prometheus
- 版本: v3.13.1
- 文件: prometheus/prometheus/v3.13.1
项目: prometheus/prometheus
- 版本: v3.5.5
- 文件: prometheus/prometheus/v3.5.5
项目: prometheus/prometheus
- 版本: v3.13.0
- 文件: prometheus/prometheus/v3.13.0
项目: argoproj/argo-cd
- 版本: v3.4.5
- 文件: argoproj/argo-cd/v3.4.5
项目: argoproj/argo-cd
- 版本: v3.5.0-rc2
- 文件: argoproj/argo-cd/v3.5.0-rc2
项目: helm/helm
- 版本: v4.2.3
- 文件: helm/helm/v4.2.3
项目: helm/helm
- 版本: v3.21.3
- 文件: helm/helm/v3.21.3
项目: jenkinsci/jenkins
- 版本: jenkins-2.568.1
- 文件: jenkinsci/jenkins/jenkins-2.568.1
项目: jenkinsci/jenkins
- 版本: jenkins-2.572
- 文件: jenkinsci/jenkins/jenkins-2.572
项目: jenkinsci/jenkins
- 版本: jenkins-2.571
- 文件: jenkinsci/jenkins/jenkins-2.571
项目: keycloak/keycloak
- 版本: 26.7.0
- 文件: keycloak/keycloak/26.7.0
项目: kyverno/kyverno
- 版本: v1.18.2
- 文件: kyverno/kyverno/v1.18.2
项目: thanos-io/thanos
- 版本: v0.42.0
- 文件: thanos-io/thanos/v0.42.0

Release Note Changelog 20260701_082402

Wed, 01 Jul 2026 08:24:02 +0800

Release Note Changelog (20260701_082402)

本次共新增 4 个 release note 文件：

项目: containerd/nerdctl
- 版本: v2.3.4
- 文件: containerd/nerdctl/v2.3.4
项目: karmada-io/karmada
- 版本: v1.18.1
- 文件: karmada-io/karmada/v1.18.1
项目: karmada-io/karmada
- 版本: v1.17.4
- 文件: karmada-io/karmada/v1.17.4
项目: karmada-io/karmada
- 版本: v1.16.7
- 文件: karmada-io/karmada/v1.16.7

Release Note Changelog 20260629_082258

Mon, 29 Jun 2026 08:22:58 +0800

Release Note Changelog (20260629_082258)

本次共新增 5 个 release note 文件：

项目: goharbor/harbor
- 版本: v2.15.2-rc2
- 文件: goharbor/harbor/v2.15.2-rc2
项目: containers/podman
- 版本: v5.8.4
- 文件: containers/podman/v5.8.4
项目: projectcalico/calico
- 版本: v3.32.1
- 文件: projectcalico/calico/v3.32.1
项目: keycloak/keycloak
- 版本: 26.6.4
- 文件: keycloak/keycloak/26.6.4
项目: volcano-sh/volcano
- 版本: v1.14.3
- 文件: volcano-sh/volcano/v1.14.3

Release Note Changelog 20260625_082401

Thu, 25 Jun 2026 08:24:01 +0800

Release Note Changelog (20260625_082401)

本次共新增 1 个 release note 文件：

项目: containers/podman
- 版本: v6.0.0
- 文件: containers/podman/v6.0.0

Release Note Changelog 20260624_081915

Wed, 24 Jun 2026 08:19:15 +0800

Release Note Changelog (20260624_081915)

本次共新增 162 个 release note 文件：

项目: kubernetes/kubernetes
- 版本: v1.36.2
- 文件: kubernetes/kubernetes/v1.36.2
项目: kubernetes/kubernetes
- 版本: v1.35.6
- 文件: kubernetes/kubernetes/v1.35.6
项目: kubernetes/kubernetes
- 版本: v1.34.9
- 文件: kubernetes/kubernetes/v1.34.9
项目: kubernetes/kubernetes
- 版本: v1.33.13
- 文件: kubernetes/kubernetes/v1.33.13
项目: kubernetes/kubernetes
- 版本: v1.36.1
- 文件: kubernetes/kubernetes/v1.36.1
项目: kubernetes/kubernetes
- 版本: v1.35.5
- 文件: kubernetes/kubernetes/v1.35.5
项目: kubernetes/kubernetes
- 版本: v1.34.8
- 文件: kubernetes/kubernetes/v1.34.8
项目: kubernetes/kubernetes
- 版本: v1.33.12
- 文件: kubernetes/kubernetes/v1.33.12
项目: kubernetes/kubernetes
- 版本: v1.36.0
- 文件: kubernetes/kubernetes/v1.36.0
项目: coredns/coredns
- 版本: v1.14.4
- 文件: coredns/coredns/v1.14.4
项目: coredns/coredns
- 版本: v1.14.3
- 文件: coredns/coredns/v1.14.3
项目: coredns/coredns
- 版本: v1.14.2
- 文件: coredns/coredns/v1.14.2
项目: coredns/coredns
- 版本: v1.14.1
- 文件: coredns/coredns/v1.14.1
项目: coredns/coredns
- 版本: v1.14.0
- 文件: coredns/coredns/v1.14.0
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.15.1
- 文件: kubernetes/ingress-nginx/helm-chart-4.15.1
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.14.5
- 文件: kubernetes/ingress-nginx/helm-chart-4.14.5
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.13.9
- 文件: kubernetes/ingress-nginx/helm-chart-4.13.9
项目: kubernetes/ingress-nginx
- 版本: controller-v1.15.1
- 文件: kubernetes/ingress-nginx/controller-v1.15.1
项目: kubernetes/ingress-nginx
- 版本: controller-v1.14.5
- 文件: kubernetes/ingress-nginx/controller-v1.14.5
项目: kubernetes/ingress-nginx
- 版本: controller-v1.13.9
- 文件: kubernetes/ingress-nginx/controller-v1.13.9
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.15.0
- 文件: kubernetes/ingress-nginx/helm-chart-4.15.0
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.14.4
- 文件: kubernetes/ingress-nginx/helm-chart-4.14.4
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.13.8
- 文件: kubernetes/ingress-nginx/helm-chart-4.13.8
项目: kubernetes/ingress-nginx
- 版本: controller-v1.15.0
- 文件: kubernetes/ingress-nginx/controller-v1.15.0
项目: etcd-io/etcd
- 版本: v3.6.12
- 文件: etcd-io/etcd/v3.6.12
项目: etcd-io/etcd
- 版本: v3.5.31
- 文件: etcd-io/etcd/v3.5.31
项目: etcd-io/etcd
- 版本: v3.4.45
- 文件: etcd-io/etcd/v3.4.45
项目: etcd-io/etcd
- 版本: v3.6.11
- 文件: etcd-io/etcd/v3.6.11
项目: etcd-io/etcd
- 版本: v3.5.30
- 文件: etcd-io/etcd/v3.5.30
项目: etcd-io/etcd
- 版本: v3.4.44
- 文件: etcd-io/etcd/v3.4.44
项目: etcd-io/etcd
- 版本: v3.6.10
- 文件: etcd-io/etcd/v3.6.10
项目: etcd-io/etcd
- 版本: v3.5.29
- 文件: etcd-io/etcd/v3.5.29
项目: goharbor/harbor
- 版本: v2.15.2-rc1
- 文件: goharbor/harbor/v2.15.2-rc1
项目: goharbor/harbor
- 版本: v2.14.4
- 文件: goharbor/harbor/v2.14.4
项目: goharbor/harbor
- 版本: v2.14.4-rc1
- 文件: goharbor/harbor/v2.14.4-rc1
项目: goharbor/harbor
- 版本: v2.15.1
- 文件: goharbor/harbor/v2.15.1
项目: goharbor/harbor
- 版本: v2.15.1-rc2
- 文件: goharbor/harbor/v2.15.1-rc2
项目: goharbor/harbor
- 版本: v2.15.1-rc1
- 文件: goharbor/harbor/v2.15.1-rc1
项目: goharbor/harbor
- 版本: v2.15.0
- 文件: goharbor/harbor/v2.15.0
项目: goharbor/harbor
- 版本: v2.15.0-rc4
- 文件: goharbor/harbor/v2.15.0-rc4
项目: goharbor/harbor
- 版本: v2.15.0-rc3
- 文件: goharbor/harbor/v2.15.0-rc3
项目: goharbor/harbor
- 版本: v2.15.0-rc2
- 文件: goharbor/harbor/v2.15.0-rc2
项目: containerd/containerd
- 版本: v2.3.2
- 文件: containerd/containerd/v2.3.2
项目: containerd/containerd
- 版本: v2.2.5
- 文件: containerd/containerd/v2.2.5
项目: containerd/containerd
- 版本: v2.1.9
- 文件: containerd/containerd/v2.1.9
项目: containerd/containerd
- 版本: v2.0.10
- 文件: containerd/containerd/v2.0.10
项目: containerd/containerd
- 版本: v1.7.33
- 文件: containerd/containerd/v1.7.33
项目: containerd/containerd
- 版本: v2.1.8
- 文件: containerd/containerd/v2.1.8
项目: containerd/containerd
- 版本: v2.3.1
- 文件: containerd/containerd/v2.3.1
项目: containerd/containerd
- 版本: v2.2.4
- 文件: containerd/containerd/v2.2.4
项目: containerd/containerd
- 版本: v2.0.9
- 文件: containerd/containerd/v2.0.9
项目: containerd/containerd
- 版本: v1.7.32
- 文件: containerd/containerd/v1.7.32
项目: containerd/nerdctl
- 版本: v2.3.3
- 文件: containerd/nerdctl/v2.3.3
项目: containerd/nerdctl
- 版本: v2.3.2
- 文件: containerd/nerdctl/v2.3.2
项目: containerd/nerdctl
- 版本: v2.3.1
- 文件: containerd/nerdctl/v2.3.1
项目: containerd/nerdctl
- 版本: v2.3.0
- 文件: containerd/nerdctl/v2.3.0
项目: containerd/nerdctl
- 版本: v2.2.2
- 文件: containerd/nerdctl/v2.2.2
项目: containerd/nerdctl
- 版本: v2.2.1
- 文件: containerd/nerdctl/v2.2.1
项目: containerd/nerdctl
- 版本: v2.2.0
- 文件: containerd/nerdctl/v2.2.0
项目: containers/podman
- 版本: v6.0.0-rc1
- 文件: containers/podman/v6.0.0-rc1
项目: containers/podman
- 版本: v5.8.3
- 文件: containers/podman/v5.8.3
项目: containers/podman
- 版本: v5.8.2
- 文件: containers/podman/v5.8.2
项目: containers/podman
- 版本: v5.8.1
- 文件: containers/podman/v5.8.1
项目: containers/podman
- 版本: v5.8.0
- 文件: containers/podman/v5.8.0
项目: containers/podman
- 版本: v5.8.0-rc1
- 文件: containers/podman/v5.8.0-rc1
项目: containers/podman
- 版本: v5.7.1
- 文件: containers/podman/v5.7.1
项目: containers/podman
- 版本: v5.7.0
- 文件: containers/podman/v5.7.0
项目: containers/podman
- 版本: v5.7.0-rc3
- 文件: containers/podman/v5.7.0-rc3
项目: projectcalico/calico
- 版本: v3.31.6
- 文件: projectcalico/calico/v3.31.6
项目: projectcalico/calico
- 版本: v3.32.0
- 文件: projectcalico/calico/v3.32.0
项目: projectcalico/calico
- 版本: v3.31.5
- 文件: projectcalico/calico/v3.31.5
项目: projectcalico/calico
- 版本: v3.30.7
- 文件: projectcalico/calico/v3.30.7
项目: projectcalico/calico
- 版本: v3.31.4
- 文件: projectcalico/calico/v3.31.4
项目: projectcalico/calico
- 版本: v3.30.6
- 文件: projectcalico/calico/v3.30.6
项目: projectcalico/calico
- 版本: v3.31.3
- 文件: projectcalico/calico/v3.31.3
项目: projectcalico/calico
- 版本: v3.30.5
- 文件: projectcalico/calico/v3.30.5
项目: projectcalico/calico
- 版本: v3.29.7
- 文件: projectcalico/calico/v3.29.7
项目: projectcalico/calico
- 版本: v3.31.2
- 文件: projectcalico/calico/v3.31.2
项目: cilium/cilium
- 版本: v1.19.5
- 文件: cilium/cilium/v1.19.5
项目: cilium/cilium
- 版本: v1.18.11
- 文件: cilium/cilium/v1.18.11
项目: cilium/cilium
- 版本: v1.17.17
- 文件: cilium/cilium/v1.17.17
项目: cilium/cilium
- 版本: v1.20.0-pre.3
- 文件: cilium/cilium/v1.20.0-pre.3
项目: cilium/cilium
- 版本: v1.19.4
- 文件: cilium/cilium/v1.19.4
项目: cilium/cilium
- 版本: v1.18.10
- 文件: cilium/cilium/v1.18.10
项目: cilium/cilium
- 版本: v1.17.16
- 文件: cilium/cilium/v1.17.16
项目: cilium/cilium
- 版本: v1.20.0-pre.2
- 文件: cilium/cilium/v1.20.0-pre.2
项目: cilium/cilium
- 版本: v1.19.3
- 文件: cilium/cilium/v1.19.3
项目: cilium/cilium
- 版本: v1.18.9
- 文件: cilium/cilium/v1.18.9
项目: karmada-io/karmada
- 版本: v1.18.0
- 文件: karmada-io/karmada/v1.18.0
项目: karmada-io/karmada
- 版本: v1.17.3
- 文件: karmada-io/karmada/v1.17.3
项目: karmada-io/karmada
- 版本: v1.16.6
- 文件: karmada-io/karmada/v1.16.6
项目: karmada-io/karmada
- 版本: v1.15.9
- 文件: karmada-io/karmada/v1.15.9
项目: karmada-io/karmada
- 版本: v1.17.2
- 文件: karmada-io/karmada/v1.17.2
项目: karmada-io/karmada
- 版本: v1.16.5
- 文件: karmada-io/karmada/v1.16.5
项目: karmada-io/karmada
- 版本: v1.15.8
- 文件: karmada-io/karmada/v1.15.8
项目: prometheus/prometheus
- 版本: v3.5.4
- 文件: prometheus/prometheus/v3.5.4
项目: prometheus/prometheus
- 版本: v3.12.0
- 文件: prometheus/prometheus/v3.12.0
项目: prometheus/prometheus
- 版本: v3.11.3
- 文件: prometheus/prometheus/v3.11.3
项目: prometheus/prometheus
- 版本: v3.5.3
- 文件: prometheus/prometheus/v3.5.3
项目: prometheus/prometheus
- 版本: v3.11.2
- 文件: prometheus/prometheus/v3.11.2
项目: prometheus/prometheus
- 版本: v3.5.2
- 文件: prometheus/prometheus/v3.5.2
项目: prometheus/prometheus
- 版本: v3.11.1
- 文件: prometheus/prometheus/v3.11.1
项目: prometheus/prometheus
- 版本: v3.11.0
- 文件: prometheus/prometheus/v3.11.0
项目: argoproj/argo-cd
- 版本: v3.4.4
- 文件: argoproj/argo-cd/v3.4.4
项目: argoproj/argo-cd
- 版本: v3.3.12
- 文件: argoproj/argo-cd/v3.3.12
项目: argoproj/argo-cd
- 版本: v3.5.0-rc1
- 文件: argoproj/argo-cd/v3.5.0-rc1
项目: argoproj/argo-cd
- 版本: v3.4.3
- 文件: argoproj/argo-cd/v3.4.3
项目: argoproj/argo-cd
- 版本: v3.3.11
- 文件: argoproj/argo-cd/v3.3.11
项目: argoproj/argo-cd
- 版本: v3.2.12
- 文件: argoproj/argo-cd/v3.2.12
项目: argoproj/argo-cd
- 版本: v3.4.2
- 文件: argoproj/argo-cd/v3.4.2
项目: argoproj/argo-cd
- 版本: v3.3.10
- 文件: argoproj/argo-cd/v3.3.10
项目: argoproj/argo-cd
- 版本: v3.4.1
- 文件: argoproj/argo-cd/v3.4.1
项目: argoproj/argo-cd
- 版本: v3.1.16
- 文件: argoproj/argo-cd/v3.1.16
项目: helm/helm
- 版本: v3.21.2
- 文件: helm/helm/v3.21.2
项目: helm/helm
- 版本: v4.2.2
- 文件: helm/helm/v4.2.2
项目: helm/helm
- 版本: v4.2.1
- 文件: helm/helm/v4.2.1
项目: helm/helm
- 版本: v3.21.1
- 文件: helm/helm/v3.21.1
项目: helm/helm
- 版本: v4.2.0
- 文件: helm/helm/v4.2.0
项目: helm/helm
- 版本: v3.21.0
- 文件: helm/helm/v3.21.0
项目: helm/helm
- 版本: v4.1.4
- 文件: helm/helm/v4.1.4
项目: helm/helm
- 版本: v3.20.2
- 文件: helm/helm/v3.20.2
项目: helm/helm
- 版本: v4.1.3
- 文件: helm/helm/v4.1.3
项目: helm/helm
- 版本: v3.20.1
- 文件: helm/helm/v3.20.1
项目: jenkinsci/jenkins
- 版本: jenkins-2.570
- 文件: jenkinsci/jenkins/jenkins-2.570
项目: jenkinsci/jenkins
- 版本: jenkins-2.569
- 文件: jenkinsci/jenkins/jenkins-2.569
项目: jenkinsci/jenkins
- 版本: jenkins-2.568
- 文件: jenkinsci/jenkins/jenkins-2.568
项目: jenkinsci/jenkins
- 版本: jenkins-2.555.3
- 文件: jenkinsci/jenkins/jenkins-2.555.3
项目: jenkinsci/jenkins
- 版本: jenkins-2.567
- 文件: jenkinsci/jenkins/jenkins-2.567
项目: jenkinsci/jenkins
- 版本: jenkins-2.566
- 文件: jenkinsci/jenkins/jenkins-2.566
项目: jenkinsci/jenkins
- 版本: jenkins-2.565
- 文件: jenkinsci/jenkins/jenkins-2.565
项目: jenkinsci/jenkins
- 版本: jenkins-2.555.2
- 文件: jenkinsci/jenkins/jenkins-2.555.2
项目: keycloak/keycloak
- 版本: 26.6.3
- 文件: keycloak/keycloak/26.6.3
项目: keycloak/keycloak
- 版本: 26.6.2
- 文件: keycloak/keycloak/26.6.2
项目: keycloak/keycloak
- 版本: 26.6.1
- 文件: keycloak/keycloak/26.6.1
项目: keycloak/keycloak
- 版本: 26.6.0
- 文件: keycloak/keycloak/26.6.0
项目: keycloak/keycloak
- 版本: 26.5.7
- 文件: keycloak/keycloak/26.5.7
项目: keycloak/keycloak
- 版本: 26.5.6
- 文件: keycloak/keycloak/26.5.6
项目: keycloak/keycloak
- 版本: 26.5.5
- 文件: keycloak/keycloak/26.5.5
项目: keycloak/keycloak
- 版本: 26.5.4
- 文件: keycloak/keycloak/26.5.4
项目: keycloak/keycloak
- 版本: 26.5.3
- 文件: keycloak/keycloak/26.5.3
项目: kyverno/kyverno
- 版本: v1.18.1
- 文件: kyverno/kyverno/v1.18.1
项目: kyverno/kyverno
- 版本: v1.18.0
- 文件: kyverno/kyverno/v1.18.0
项目: kyverno/kyverno
- 版本: v1.17.2
- 文件: kyverno/kyverno/v1.17.2
项目: kyverno/kyverno
- 版本: v1.16.4
- 文件: kyverno/kyverno/v1.16.4
项目: kyverno/kyverno
- 版本: v1.17.1
- 文件: kyverno/kyverno/v1.17.1
项目: volcano-sh/volcano
- 版本: v1.15.0
- 文件: volcano-sh/volcano/v1.15.0
项目: volcano-sh/volcano
- 版本: v1.14.2
- 文件: volcano-sh/volcano/v1.14.2
项目: volcano-sh/volcano
- 版本: v1.13.3
- 文件: volcano-sh/volcano/v1.13.3
项目: volcano-sh/volcano
- 版本: v1.12.4
- 文件: volcano-sh/volcano/v1.12.4
项目: volcano-sh/volcano
- 版本: v1.13.2
- 文件: volcano-sh/volcano/v1.13.2
项目: volcano-sh/volcano
- 版本: v1.14.1
- 文件: volcano-sh/volcano/v1.14.1
项目: volcano-sh/volcano
- 版本: v1.14.0
- 文件: volcano-sh/volcano/v1.14.0
项目: volcano-sh/volcano
- 版本: v1.12.3
- 文件: volcano-sh/volcano/v1.12.3
项目: volcano-sh/volcano
- 版本: v1.13.1
- 文件: volcano-sh/volcano/v1.13.1
项目: thanos-io/thanos
- 版本: v0.41.0
- 文件: thanos-io/thanos/v0.41.0
项目: open-telemetry/opentelemetry.io
- 版本: 2026.05
- 文件: open-telemetry/opentelemetry.io/2026.05
项目: open-telemetry/opentelemetry.io
- 版本: 2026.04
- 文件: open-telemetry/opentelemetry.io/2026.04
项目: open-telemetry/opentelemetry.io
- 版本: 2026.03
- 文件: open-telemetry/opentelemetry.io/2026.03
项目: open-telemetry/opentelemetry.io
- 版本: 2026.02
- 文件: open-telemetry/opentelemetry.io/2026.02
项目: open-telemetry/opentelemetry.io
- 版本: 2026.01
- 文件: open-telemetry/opentelemetry.io/2026.01
项目: open-telemetry/opentelemetry.io
- 版本: 2025.12
- 文件: open-telemetry/opentelemetry.io/2025.12
项目: open-telemetry/opentelemetry.io
- 版本: 2025.11
- 文件: open-telemetry/opentelemetry.io/2025.11

Cilium 启动后其他节点无法访问k8s的apiserver排除记录

Thu, 18 Jun 2026 01:17:46 +0800

避坑指南：Oracle Cloud (OCI) + Ubuntu 24.04 搭建 Kubernetes 踩坑 Cilium 网络死锁全记录

在云厂商环境（特别是 Oracle Cloud Infrastructure, OCI）中使用最新的 Ubuntu 24.04 运行 Kubernetes，并采用 Cilium 作为 CNI（容器网络接口）时，极易遭遇两类网络致命暗坑：

系统整机阻断/业务端口无法外网访问。
多节点集群间宿主机物理网络（Ping/6443 端口）在内核 eBPF 内部产生死循环断连。

本文将深度还原排查过程，剖析技术原理，并提供经过验证、最彻底的终极重装修复方案。

🛑 坑一：Oracle 官方镜像自带的 iptables 拦截

1. 现象描述

在 OCI 控制台的安全组（NSG）或安全列表里已经完全放行了端口，但无论是外网、节点内，只要系统重启，新放行的业务端口（如 NodePort）依然无法访问。

2. 根因剖析

运行 cat /etc/iptables/rules.v4 会发现 Oracle 官方定制镜像（Cloud Image）自带了以下两条兜底的硬拒绝规则：

-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited

防火墙规则自上而下匹配。后续 K8s 动态追加的规则往往在 REJECT 之后，导致规则直接失效。
FORWARD 链的 REJECT 会直接粉碎 Pod 的跨节点通信及 Service 流量。

3. 彻底解决方案

利用 sed 命令注释掉这两条阻碍规则，并使用系统的持久化工具刷新内存规则，确保重启不丢失：

# 安全注释 INPUT 和 FORWARD 链的 REJECT 规则
sudo sed -i '/-A INPUT -j REJECT --reject-with icmp-host-prohibited/s/^/# /' /etc/iptables/rules.v4
sudo sed -i '/-A FORWARD -j REJECT --reject-with icmp-host-prohibited/s/^/# /' /etc/iptables/rules.v4

# 重新加载使其立即且永久生效
sudo netfilter-persistent reload

🌪️ 坑二：Cilium 默认网段与主机网段重叠，引发 eBPF 内部“打水漂”死循环

1. 现象描述

关闭 kubelet 时，集群各节点之间内网完全互通，可以正常 ping 对方，也可以访问主节点的 6443 端口。但只要开启 kubelet 启动 Cilium，两台机器立刻失联（无法 ping，无法通信），而奇怪的是，你本地电脑依然可以通过公网 SSH 正常登录它们。

2. 排查与抓包取证

在被访问节点（IP1）的物理网卡和虚拟网卡上同时开启 tcpdump 观测流量，可以捕捉到罕见的 eBPF 广播风暴死锁（eBPF Broadcast Loop） 奇观：

# 终端 1 抓物理网卡
sudo tcpdump -i enp0s6 port 6443 or icmp -nn
# 终端 2 抓 Cilium 虚拟网卡
sudo tcpdump -i cilium_host port 6443 or icmp -nn

抓包结果重现：

enp0s6 In IP IP2 > IP1: ICMP echo request ...
cilium_host Out IP IP1 > IP2: ICMP echo reply ...
cilium_net In IP IP1 > IP2: ICMP echo reply ...
cilium_host Out IP IP1 > IP2: ICMP echo reply ...
cilium_net In IP IP1 > IP2: ICMP echo reply ...

分析：请求确实平安到达了物理网卡 enp0s6（证明云安全组无错）。但响应的回包在不到 1毫秒 内，在系统的 cilium_host 和 cilium_net 虚拟网卡之间被无限交替转发。流量在内存中疯狂打转，根本无法回到物理网卡发出去！

3. 冲突根因：Cilium CLI 默认网段（10.0.0.0/8）污染

通过快捷命令 cilium install 默认安装时，Cilium 采用 cluster-pool 模式，其全局大网段默认是极其霸道的 10.0.0.0/8。 Cilium 会完全无视 K8s 节点自带的 podCIDR 配置，强行为当前节点切出一个子网段（比如 10.0.1.0/24）。

然而，Oracle 云宿主机的真实物理内网网段刚好就是 10.0.1.0/24。这直接导致宿主机物理子网与集群容器子网在空间上彻底重叠，Cilium 强行改写的 cilium_host 内核路由直接将宿主机之间的基础流量“截胡”，引发了死锁。

⚙️ 彻底解决：无残留精准网段重装方案

在已有历史残留的集群中，仅通过命令升级极易遭遇 CiliumNode CRD 对象历史缓存死锁，导致新网段参数被架空。最稳妥、干净的方法是通过以下三步进行肉体毁灭后的重新安装：

第一步：卸载旧版并拔除 CRD 历史残留

# 1. 执行官方卸载
cilium uninstall

# 2. 强行删除所有历史节点遗留的 CRD 网络分配数据（最核心，否则重装后 IP 依然不变）
kubectl delete ciliumnodes --all

第二步：使用精准的 IPAM 层级变量重新安装

使用 ipam.operator.clusterPoolIPv4PodCIDRList 参数，显式将 Cilium 的地址批发池强制挪到完全不冲突的干净网段（例如 10.251.0.0/16）：

cilium install \
 --set ipam.mode=cluster-pool \
 --set ipam.operator.clusterPoolIPv4PodCIDRList='10.251.0.0/16'

第三步：驱逐业务 Pod 刷新网络

等待 Cilium 顺利安装 Ready 后，成批量产驱逐那些拿着历史错误旧网段的业务 Pod，触发其重新在 10.251 网段获取新 IP：

kubectl delete pods --all -A --field-selector status.phase=Running

🏁 见证奇迹的时刻

完成重装后，在宿主机终端输入命令查看虚拟网卡：

ip addr show cilium_host

此时 inet 会成功抛弃危险的 10.0.0.199 历史冲突值，精准蜕变为： inet 10.251.0.x/32 scope global cilium_host

运行 ip route show 也会发现原本大面积重叠的路由表在空间上彻底被剥离。多节点之间的内网 ping 探测和 6443 控制平面瞬间全部恢复畅通，暗坑完美修复！

Gpu驱动安装

Sun, 07 Jun 2026 22:52:36 +0800

大概分这几层

linux 驱动(cuda 安装): 让直接以linux 进程运行的程序能够访问gpu(比如在linux 服务器上直接安装pytouch等后运行程序 python xxx)
容器驱动(NVIDIA Container Toolkit): 让容器内的程序可以访问gpu(如docker run 或nerdctl run等,镜像内的容器能够访问到gpu–其实就是自动挂载gpu相关驱动文件到容器内)
k8s 驱动(gpu operator): 让k8s 的pod 内的程序能够访问gpu(让pod能够通过配置声明自己需要gpu,然后把gpu驱动挂载到pod内),

linux 驱动（cuda 安装）

参考: https://docs.nvidia.com/cuda/cuda-installation-guide-linux/#runfile-installation

查找自己的gpu 对应的驱动版本和安装

如下图，我的型号是: GeForce MX350

root@192-168-1-205:~# lspci |grep -i nvi
00:14.3 Network controller: Intel Corporation Ice Lake-LP PCH CNVi WiFi (rev 30)
01:00.0 3D controller: NVIDIA Corporation GP107M [GeForce MX350] (rev a1)

到这里填写如型号（如我的填写: GeForce MX350）https://www.nvidia.cn/geforce/drivers/ 选择自己系统型号,点击后，会自动填写信息，点击"查找"

回到结果界面,这里就是你的驱动版本

然后下载,复制到服务器,进行安装(但这种方式废弃了,新的按照见下)

# 将 Nouveau 加入黑名单
disable-nouveau(){
cat > /etc/modprobe.d/nvidia-installer-disable-nouveau.conf <<-EOF
blacklist nouveau
options nouveau modeset=0
EOF
update-initramfs -u
reboot
}
lsmod | grep nouveau && disable-nouveau
apt install build-essential dkms linux-headers-$(uname -r)
chmod +x NVIDIA-Linux-x86_64-580.159.04.run
./NVIDIA-Linux-x86_64-580.159.04.run
# 验证
nvidia-smi

容器驱动(NVIDIA Container Toolkit)

参考: https://docs.nvidia.com/datacenter/cloud-native/container-toolkit/latest/install-guide.html

k8s 驱动(gpu operator)

参考: https://docs.nvidia.com/datacenter/cloud-native/gpu-operator/latest/getting-started.html

Cilium入门

Sun, 07 Jun 2026 21:38:35 +0800

路由模式

是否启用bgp 路由等

网络模式

也有类似calico 的直连, vxlan隧道

可观测

Hubble

替换 kube-proxy

kubeadm init 时添加 –skip-phases=addon/kube-proxy
安装 Cilium 并设置 kubeProxyReplacement=strict (完全替换)

替换 ingress

替换 istio?

坑

执行cilium uninstall 后,并不会清理iptables等,如果有问题需要自己重启下主机进行重置

参考:

Esp_小智学习

Wed, 03 Jun 2026 07:53:53 +0800

最近买了esp32的开发版,投入了几十块钱,在复刻小智项目地址: https://github.com/78/xiaozhi-esp32

debug 记录:

接线:

ESP-IDF 命令行工具 (`idf.py`) 使用指南

Wed, 03 Jun 2026 07:44:42 +0800

ESP-IDF 命令行工具 (`idf.py`) 使用指南

1. 常用核心命令

项目配置与构建

命令	说明	使用场景
`idf.py menuconfig`	打开图形化配置菜单，修改项目参数并生成 `sdkconfig`	修改 WiFi、蓝牙、日志级别等配置时
`idf.py build`	智能构建： 1. 自动检测配置变化 2. 必要时自动重新配置 3. 编译修改过的代码	日常开发必用。无论修改了代码还是配置，都直接运行此命令。
`idf.py reconfigure`	强制重新配置：仅运行 CMake，生成构建文件，不编译代码	修改 `CMakeLists.txt` 后检查语法，或仅刷新 IDE 配置索引而不想编译时。
`idf.py clean`	清理编译生成的对象文件	清除中间产物，保留配置。
`idf.py fullclean`	彻底清理：删除 `build/` 目录和 `sdkconfig`	解决极度诡异的编译错误（慎用）。

烧录与调试

命令	说明
`idf.py -p PORT flash`	烧录固件到指定串口（如 `/dev/ttyUSB0` 或 `COM3`）
`idf.py -p PORT monitor`	打开串口监视器，查看日志输出
`idf.py -p PORT flash monitor`	组合命令：烧录完成后自动打开监视器（最常用）
`idf.py size`	查看 Flash 和 RAM 的内存使用情况
`idf.py size-components`	分析各个组件占用的内存大小
`idf.py size-files`	分析各个源文件占用的内存大小

2. 配置文件层级关系

idf.py 读取配置的优先级如下：

sdkconfig (最高优先级)
- 性质：实际生效的配置文件。
- 来源：由 menuconfig 生成或修改。
- Git：不要提交（加入 .gitignore）。
sdkconfig.defaults
- 性质：项目通用默认配置模板。
- 作用：适用于所有芯片型号的基础配置。
- Git：建议提交。
sdkconfig.defaults.<TARGET> (如 esp32s3)
- 性质：特定芯片配置模板。
- 作用：仅当目标芯片匹配时生效，优先级高于通用 defaults。
- Git：建议提交。

⚠️ 注意：修改 defaults 文件后，若 sdkconfig 已存在，编译器默认不会自动更新它。如需应用新配置，请删除 sdkconfig 并重新运行 idf.py menuconfig。

3. 命令辨析：build vs reconfigure

❌ 常见误区：认为修改代码后要先 reconfigure 再 build。

✅ 正确理解：

idf.py build 是全能命令。它会自动判断是否需要重新配置。日常开发中，只需一直使用 build。
idf.py reconfigure 是低频命令。它不编译代码，仅用于更新构建文件或检查 CMakeLists.txt 语法。

4. 编译日志与常见问题排查

4.1 识别编译状态

成功标志：日志末尾出现 [100%] Built target ... 或 Generating binary image from built executable。
Bootloader 信息：关注 Bootloader binary size ... bytes free，确保启动加载器未超限。

4.2 常见警告：宏定义重定义

错误日志示例：

Esp安装

Thu, 28 May 2026 01:42:06 +0800

吐槽: 感觉新版本安装是傻瓜式了，但感觉调试不友好: https://docs.espressif.com/projects/esp-idf/zh_CN/stable/esp32/get-started/macos-setup.html

我这里还是参考老文档，安装5.4.1: https://docs.espressif.com/projects/esp-idf/zh_CN/stable/esp32/get-started/linux-macos-setup-legacy.html

我的环境备注:(或者每次新建一个版本的环境)

mkdir -p ~/esp
cd ~/esp
#git clone -b v5.5.2 --recursive https://github.com/espressif/esp-idf.git v5.5.2
git clone -b v5.5.2 --recursive git@github.com:espressif/esp-idf.git v5.5.2
cd ~/esp/v5.5.2
./install.sh esp32,esp32s3,esp32c3

使用

. $HOME/esp/v5.5.2/export.sh
或者增加到配置文件（.profile、.bashrc、.zprofile 等）
alias get_idf_v5.5.2='. $HOME/esp/v5.5.2/export.sh'

在vscode 中使用: https://github.com/espressif/vscode-esp-idf-extension/blob/master/README_CN.md

TODO: 在vscode中，无法选择不同版本，可能是vscode搜索不同版本是通过新工具

Linux入门

Thu, 27 Nov 2025 05:00:23 +0800

入门

基础命令: (学习资料太多,这里只是列举下常用命令, 方便后续自己复制粘贴😄)

基本概念

Linux 类似 Windows，是个开源免费的操作系统；凭借稳定、占用资源少、易于自动化运维等优点，线上服务器几乎都以 Linux 为主力。

Linux = 内核 + 发行版：常见发行版有 Ubuntu、CentOS、Debian 等，命令大体一致，包管理工具略有差异。
交互方式以 Shell 为主：登录后默认会进入 Bash/Zsh 等 Shell，通过命令行和脚本完成绝大部分操作。
文件系统采用单根目录 /：所有文件都挂载在根目录下，常见路径如 /etc（配置）、/var/log（日志）。
一切皆文件：设备、进程、网络套接字都以文件形式呈现，便于统一的权限和管理。

快速上手流程

先熟悉导航命令（pwd、ls、cd），确保敢在目录间穿梭。
学会查看与编辑文件（cat、less、vi），可以快速定位配置与日志问题。
掌握权限概念（chmod、chown、sudo），避免“不够权限”的常见陷阱。
通过包管理器安装工具（apt、yum、dnf），扩充系统能力。
利用 man、--help、tldr 等文档查找功能，遇到新命令不慌张。

基础命令

熟悉下表中的常用命令，就能覆盖 80% 的日常运维与排障场景；示例使用了最常见的组合，遇到新需求时可在此基础上扩展参数。

分类	命令	说明	示例
文件/目录	`ls`	列出目录内容	`ls -lah /var/log`
文件/目录	`cd`	切换目录	`cd /etc/systemd/system`
文件/目录	`cp` / `mv`	复制、移动文件	`cp app.conf app.conf.bak`
文本编辑	`vi` / `nano`	终端编辑器	`vi /etc/hosts`
远程传输	`scp`	远程复制文件	`scp file user@host:/tmp/`
远程传输	`rsync`	增量同步目录	`rsync -avz ./dist/ user@host:/srv/dist/`
权限管理	`chmod` / `chown`	修改权限、所有者	`chmod 640 secret.txt`
文本处理	`grep`	按模式过滤	`grep -i error app.log`
文本处理	`sed` / `awk`	流式文本处理	`awk '{print $1}' access.log`
查看内容	`cat` / `tac`	快速查看文件	`tac latest.log`
查看内容	`head` / `tail`	查看开头、结尾	`tail -f /var/log/syslog`
查看磁盘	`df` / `du`	磁盘使用情况	`du -sh *`
进程管理	`ps` / `top`	查看进程、占用	`ps aux \| grep nginx`
进程管理	`kill`	发送信号终止进程	`kill -9 <pid>`
网络	`ss` / `netstat`	查看端口连接	`ss -ltnp`
网络	`curl` / `wget`	HTTP 请求与下载	`curl -I https://example.com`
包管理	`apt` / `yum` / `dnf`	安装、升级软件	`yum install -y htop`
系统信息	`uname` / `hostnamectl`	查看内核、主机信息	`uname -a`
帮助	`man` / `--help`	查看命令帮助	`man grep`

文本处理常见场景

grep -R "pattern" /path：递归搜索目录中的匹配文本
sed -n '1,20p' file：按行范围打印内容
awk -F',' '{print $2}' data.csv：指定分隔符抽取字段
sort -nr data.txt / uniq -c：排序与去重计数
wc -l access.log：统计行数；常配合 grep 查看命中量

文件与归档

tar czf logs.tar.gz /var/log/nginx：打包并压缩目录
tar xzf pkg.tar.gz -C /opt/app：指定目录解压
find /data -type f -size +100M：查找大文件
find . -mtime -1 -name "*.log"：查找最近 1 天生成的日志

权限与用户

chmod 750 script.sh：限定执行权限
chown user:group /srv/app：修改所有者
usermod -aG docker user：把用户加入补充组
sudo -l：列出当前用户可使用的 sudo 命令

系统监控与诊断

top / htop：实时监控 CPU、内存、负载
vmstat 1 5：快速观察 CPU/内存/IO 趋势
iostat -xz 1：检查磁盘瓶颈
free -h：查看内存概况
dmesg | tail：读取最新内核日志，排查硬件/驱动问题
journalctl -u service --since "10 min ago"：查看 systemd 服务日志

网络排查

ping / traceroute：连通性与路径检查
dig example.com +short：解析域名
curl -v http://127.0.0.1:8080/health：调试接口
ss -s：汇总当前 socket 状态
tcpdump -i eth0 port 443 -nn：抓包分析，故障定位时常用

常用组合拳

# 快速锁定高 CPU 进程
ps aux --sort=-%cpu | head

# 查找日志里 5 分钟内的 Error 并按时间排序
journalctl -u app --since "5 min ago" | grep -i error | sort

# 排查监听端口对应的进程
ss -ltnp | grep 8080

# 对比最近两次配置差异
diff -u config.old config.new

# 批量替换文件中的文本
find ./ -type f -name "*.yaml" -exec sed -i '' 's/old/new/g' {} +

提示：遇到不熟悉的命令时，先使用 man command 或 command --help 查看内置文档；配合 tldr command（需额外安装）能快速浏览常见用法。

Linux资料

Thu, 27 Nov 2025 04:49:43 +0800

背景

我个人不是专攻 linux 系统的, 但工作会涉及linux 相关的使用和在linux 上的服务的问题定位如:

常规的使用: 部署 k8s 等
基础问题排除: 部署问题排除, 容器故障排除, 容器的网络问题排除等
性能分析: 容器或进程的内存怎么占用这么高？是不是泄漏了？为什么cpu占用不高性能上不去?

所以, 这里主要以汇总资料为主,方便自己后续方便查找

入门资料

见入门资料

概念

个人理解: Linux 的核心是"内核 + 用户空间"协作，它向下管理硬件资源，向上提供统一的接口供程序运行。几条常用的心智模型：

内核负责调度 CPU、内存、磁盘、网络等资源，用户态应用通过系统调用与内核交互。
“一切皆文件”：无论是磁盘文件、设备节点还是网络套接字，都可用类似的方式读写、赋权。
进程和线程是最小的执行单元；Shell 只是用户与系统的桥梁，命令本质上是启动新的进程。

对我大多数使用场景,也都是围绕进程的生命周期来工作

进程的创建: 部署或叫运行应用
- 启动 python,shell 等程序: python xx.py, bash xx.sh, ./app
- 启动服务: systemctl start sshd xxx
- 其实在 shell 中执行的命令，大部分也会启动一个进程(也有例外哈): sleep 3600
进程的查看和问题排除:
- 进程列表: ps -ef, ps aux --sort=-%cpu
- 进程树: pstree -p, ps -eo pid,ppid,cmd --forest 便于确认父子关系
- 资源占用: top, htop, pidstat -u -p <pid> 查看 CPU/内存/IO 压力
- 打开的文件与端口: lsof -p <pid>, ls -l /proc/<pid>/fd, ss -lptn
- 实时监控: watch -n 1 'ps -o pid,cmd,%cpu,%mem -p <pid>', 或结合 systemd-cgls, systemctl status <service>
进程的修改: 我理解一般很少操作😄
进程的删除:
- 服务停止: systemctl stop xxx
- 杀死: kill xxx

开机过程(第一个进程如何启动起来的)

当我们打开安装了linux系统的设备(不管是服务器还是虚拟机)的电源(服务器的物理按钮或者是虚拟机的开始按钮),就会执行linux系统的加载过程

大概过程:

系统的引导过程: 固件(BIOS/UEFI) 启动并找到linux系统存储在那个存储上（可能是硬盘，u盘，光碟，网络）(),并开始运行
linux 内核的加载和启动
系统就会运行1号进程
其他开机默认启动的服务(进程)

学习资料:

一个文件为什么能运行

一个二进制文件或命令能够直接运行的原因: 一般程序经过编译构建为二进制的时候, 是按 ELF 格式写入文件保存的, 运行时linux 会根据这种格式启动进程

学习资料:

从ELF文件到Linux进程

K8s生产运维的一些注意事项

Fri, 14 Nov 2025 07:56:44 +0800

这篇文章总结一些我遇到过的 k8s 故障以及如何防患同样: 仅代表个人观点，如有不对欢迎反馈

介绍

大家可以思考一个问题: 当自己被安排需要对 k8s 配置监控和告警, 你是否知道应该对那些组件或指标配置告警?

这篇文章就试图回答这个问题(如果已会, 可跳过, 也可帮我评阅下😄 )

这里是我对 k8s 配置监控告警时,分析监控点的总结, 希望对你有帮助或启发

我建设监控告警的思考

如果大家做 K8S 监控, 一般都会了解到这个项目: https://github.com/prometheus-operator/kube-prometheus 这个项目是社区对 k8s 监控指标, 告警指标, 大盘的汇总

那社区都有了部署上不就完事了?

其实不是的, 针对自己的环境和部署方式, 版本 , 使用方式等差异,还是需要自己对监控告警进行查漏补缺, 并且结合故障复盘发现的缺失,持续完善所以大家一般都是基于这个项目,再增加一些自己的监控告警, 才能满足 k8s 监控告警的高覆盖, 真正实现90%问题告警先发现

监控点

etcd

k8s 管控面 - apiserver, kube-controller,scheduler

k8s service - kube-proxy

k8s dns - coredns

k8s 节点 - kubelet, containerd

k8s pod 网络 - calico 等

K8s入门资料

Fri, 14 Nov 2025 07:55:55 +0800

介绍

一般我们接触 k8s ，大概路径都是(注: 这里并没有必须的递进关系，只是工作方向不同, 大家投入不同而已 ):

了解 k8s 是干什么的 (了解,比如产品经理等,了解就够了)
会基本的使用 k8s 部署自己的应用 (入门,比如研发,应用运维等)
应用出问题时能够排除和解决, 或者定位到是 k8s 平台故障反馈给 k8s 团队 (会使用,比如应用运维等)
会部署 k8s,能够对集群的各种问题进行排除和定位,快速恢复 (运维入门,比如 k8s 方向的运维等)
能够对 k8s 的故障面进行分析并建设全面的监控告警体系,变更管理规范,故障处理手册, 对上层应用部署建立相应的规范等,保证集群的稳定运行 (会运维,比如 k8s 方向的运维等)
能够对 k8s 代码的故障进行分析定位,反馈社区或提交代码修复, 结合自己公司的使用场景对 k8s 开发一些功能特性或插件 ( k8s 开发者 )

本来想着现在 k8s 基本已经是事实上的新操作系统 (就像linux 一样普及),但发现还是有一些人还没接触过因此为了我避免每次都要找资料进行分享, 这里汇总下我收集的感觉比较好的学习资料

准备

学习k8s 前,建议你会如下内容,如果不会建议先学习下 (这部分自己搜资料吧😄)

了解linux: 知道linux,会常见的命令
了解开发语言,如java,go,python (不需要会写代码)
了解 api 概念, 知道 yaml,json 的语法

k8s 介绍

动画方式讲解 k8s 的概念

中文版: https://mp.weixin.qq.com/s?src=11&timestamp=1763170282&ver=6359&signature=RICB4M13QlaeXpgfPfJBLM-iuWWRVLqy7dGC3znn59nMscYzQg2d7YLMQpbIdutdoNKRNjWxHXj7hcqiGRpG6HQjps*5clDk8t84enfBq-cmoZv7tAXn2y5klXvajL&new=1

官方动画 https://www.cncf.io/phippy/the-childrens-illustrated-guide-to-kubernetes/
程序员版

官方: https://kubernetes.io/zh-cn/docs/concepts/overview/

好的培训资料: https://edu.aliyun.com/course/314614/

k8s 本地部署

现成的环境如果你不想倒腾安装(因为大部分人只需要使用就行了),想快速有个k8s 的练手环境, 可以用这个: https://labs.play-with-k8s.com/

说明见: https://zhuanlan.zhihu.com/p/674130426
自己安装环境

我个人推荐用kind (因为后续其他开源的k8s 相关的项目, demo 也都是用这个)

官方指导: https://kubernetes.io/zh-cn/docs/tasks/tools/

k8s 使用(如何部署应用)

免费的培训资料: https://edu.aliyun.com/course/314614/

先从一个hello work 开始体会

官方: https://kubernetes.io/zh-cn/docs/tutorials/kubernetes-basics/
全面了解使用

可以全面阅读下这个目录下的每个文档: https://kubernetes.io/zh-cn/docs/concepts/ 这里基本包含了所有k8s 的功能的使用说明

k8s 常见问题排查

K8s部署规划

Thu, 06 Nov 2025 07:48:55 +0800

介绍

本文汇总在部署 Kubernetes（后文简称 K8s）过程中与稳定性、维护成本相关的注意事项（仅个人观点），供规划集群规模、拆分策略与网络/节点选型时参考。

集群规模

官方大规模集群建议： https://kubernetes.io/docs/setup/best-practices/cluster-large/

单节点建议不超过 110 个 Pod（源于 kubelet 默认上限；进程/连接数激增会影响系统调度性能）。
单集群节点数量不建议超过 500（官方理论上限约 5000；若每节点 Pod 很少，例如 AI 集群每节点少于 10 个 Pod，可适当提高上限）。
单集群 Pod 数量不建议超过 60,000（官方理论上限约 150,000）。
单命名空间下同类资源（Pod 等）数量建议不超过 1,000。原因：API 的 List/Watch 无分页，超大量对象初始 List 会明显放大响应时间（可用缓存/索引缓解，但复杂度上升）。

图：绿色为实践建议区间，蓝色为官方可达上限。规模越靠近上限，调度/存储/网络的系统性风险与维护复杂度呈非线性上升。

注意：

Q: 为什么不做一个超大单集群，这样只需要维护一个集群即可？ A: 集群越大，维护难度越大，各组件更容易触发性能瓶颈，随之而来的是大量高难度的维护工作。例如：

比如：

etcd：当对象数与写入 QPS 持续上升，压缩与事务延迟会明显增大，需要分片或替换。

字节的方案：自研替代 etcd 的存储组件 https://github.com/kubewharf/kubebrain/blob/main/docs/design_in_detail_cn.md

蚂蚁的方案：分多个 etcd 存储 https://www.sofastack.tech/blog/ant-massive-sigma-cluster-etcd-splitting-in-practice/

阿里：修改了 etcd 代码 https://zhuanlan.zhihu.com/p/657824957
apiserver：仅仅是海量节点的 kubelet 心跳与各类 Controller/Operator 的并发请求会产生就有高的 QPS，需要扩容、限流与网关分流等规划。

字节的方案：自研 KubeGateway 组件 https://zhuanlan.zhihu.com/p/546398348

阿里：https://zhuanlan.zhihu.com/p/657824957
scheduler：大规模集群下，Pod 并发创建量高；默认调度串行绑定，一个一个调度会导致排队时间显著增加。

社区调优参考：https://kubernetes.io/docs/concepts/scheduling-eviction/scheduler-perf-tuning/

其他大厂通常自研调度器：https://zhuanlan.zhihu.com/p/563944955
controller 与 operator：瓶颈主要源于 List/Watch 机制。其会将目标资源全量缓存到内存并持续 Watch 变化；当对象规模巨大时，启动全量 List 耗时（分钟级）、内存占用暴涨，事件吞吐可能跟不上（控制器通常逐条处理事件）。
网络：取决于网络方案。例如使用 Calico 时，节点上的路由/策略规则会非常多。一般推荐下沉到 IaaS 网络能力（如 MacVLAN 等）承载复杂度。
故障爆炸半径：出现故障后，受影响的 Pod 数量多，影响面广。

图：单一“超大集群”会在 etcd、apiserver、scheduler、控制器、网络以及故障影响半径多个维度放大复杂度。

集群部署策略（什么时候建新集群）

是否新建集群没有统一标准，以下从稳定性、维护与隔离等维度给出参考：

拆分的好处：集群更小稳定性更高；同类业务归群管理更方便。

合并的好处：集群数量更少，统一运维与资源利用率更高。

网络区隔离：若存在互联网区/内网区等严格隔离的安全域，建议每个网络区独立一个集群。比如银行等,会划分互联网区和内网区等,则推荐每个网络区一个集群
多活/高可用：同城双活、两地三中心等架构，建议按高可用要求为每个机房（或可用区）建设 1–2 个集群，避免集群层面单点故障。
跨区高时延：若机房之间网络时延较高（如 >100ms），建议分别建设集群。
规模逼近阈值：当单集群规模已接近建议上限，可按业务域等维度拆分（如电商核心/内部支撑分别建集群）。
业务特性截然不同：如 AI 训练/推理集群与通用业务集群建议分离，便于资源、网络与调度策略独立演进。

图：满足任一关键触发条件（安全域隔离 / 多活 / 规模逼近阈值 / 业务类型截然不同 / 高跨区延迟）即可进入“新建集群”路径。

网络选型

Calico：常规场景推荐使用 Calico 直通/BGP 模式，架构简单，基于 Linux 路由表实现。网络或 Linux 运维同学稍加学习即可完成日常维护与应急处理。
Cilium：基于内核 eBPF 的高性能方案，功能强大，支持 L4/L7 与网关能力，可替代 kube-proxy，观测能力也很强；团队具备相应维护能力时推荐采用。
MacVLAN：适用于对 IP 审计/合规要求高、规模较大的场景，使容器网络更贴近虚拟机网络形态，可复用现有 IaaS 网络管理平台/工具/规范（强烈推荐使用道客开源的 Spiderpool，已在大规模金融客户生产落地，稳定且功能丰富）。

图：Calico（简单稳定）、Cilium（高性能 + eBPF 能力）、MacVLAN（合规 / 大规模 / 复用 IaaS）。依据团队能力、合规要求、性能与可观测诉求选择。

节点配置

由于单节点不建议超过 110 个 Pod（110 个 Pod 往往对应 220+ 容器进程，进程/连接数较大，Linux 上的上下文切换与内核资源压力都会上升），因此单机配置并非越大越好，否则可能造成资源浪费。

可结合业务场景进行节点规格估算。大致逻辑：

节点可用 CPU ≈ (Pod 平均请求 CPU × 110) ÷ 超卖系数 ÷ 系统资源预留比例
节点可用内存 ≈ (Pod 平均请求内存 × 110) ÷ 超卖系数 ÷ 系统资源预留比例

其中：
- 超卖系数：例如超卖 50% 则为 1.5（即请求 1.5 Core，实际物理仅预留 1 Core）。
- 系统资源预留比例：实际运行期为系统与突发预留的比例，例如 0.8 表示最多使用到物理资源的 80%。

示例：若多数业务 Pod 为 Java，常见请求比例为 CPU:内存 = 1:4 或 1:2，例如 1 Core / 4 GiB、4 Core / 8 GiB。

按 1 Core / 4 GiB 估算，超卖系数 1.5（超卖 50%），系统资源预留 0.8（预留 20%）：

CPU ≈ 1 × 110 / 1.5 / 0.8 ≈ 92 Core 内存 ≈ 4 × 110 / 1.5 / 0.8 ≈ 367 GiB

可选购约 96 Core / 512 GiB 规格的物理服务器（向上规整并考虑中间件占用与突发）。

以上仅为示例，需结合实际业务画像进行修正（例如中间件集群往往需要更高内存作为缓存）。

图：通过“平均单 Pod 资源 × 110 / 超卖系数 / 系统预留”得到近似节点规格；再结合真实画像（语言栈 / 中间件 / 波峰波谷）修正。

Release Note Changelog 20251104_084327

Tue, 04 Nov 2025 08:43:27 +0800

Release Note Changelog (20251104_084327)

本次共新增 5 个 release note 文件：

项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.14.0
- 文件: kubernetes/ingress-nginx/helm-chart-4.14.0
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.13.4
- 文件: kubernetes/ingress-nginx/helm-chart-4.13.4
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.12.8
- 文件: kubernetes/ingress-nginx/helm-chart-4.12.8
项目: cilium/cilium
- 版本: v1.19.0-pre.2
- 文件: cilium/cilium/v1.19.0-pre.2
项目: open-telemetry/opentelemetry.io
- 版本: 2025.10
- 文件: open-telemetry/opentelemetry.io/2025.10

Release Note Changelog 20251102_084710

Sun, 02 Nov 2025 08:47:10 +0800

Release Note Changelog (20251102_084710)

本次共新增 41 个 release note 文件：

项目: karmada-io/karmada
- 版本: v1.13.9
- 文件: karmada-io/karmada/v1.13.9
项目: karmada-io/karmada
- 版本: v1.14.6
- 文件: karmada-io/karmada/v1.14.6
项目: karmada-io/karmada
- 版本: v1.15.2
- 文件: karmada-io/karmada/v1.15.2
项目: keycloak/keycloak
- 版本: 26.4.2
- 文件: keycloak/keycloak/26.4.2
项目: keycloak/keycloak
- 版本: 26.4.1
- 文件: keycloak/keycloak/26.4.1
项目: keycloak/keycloak
- 版本: 26.4.0
- 文件: keycloak/keycloak/26.4.0
项目: keycloak/keycloak
- 版本: 26.3.5
- 文件: keycloak/keycloak/26.3.5
项目: keycloak/keycloak
- 版本: 26.3.4
- 文件: keycloak/keycloak/26.3.4
项目: keycloak/keycloak
- 版本: 26.3.3
- 文件: keycloak/keycloak/26.3.3
项目: keycloak/keycloak
- 版本: 26.3.2
- 文件: keycloak/keycloak/26.3.2
项目: keycloak/keycloak
- 版本: 26.3.1
- 文件: keycloak/keycloak/26.3.1
项目: keycloak/keycloak
- 版本: 26.3.0
- 文件: keycloak/keycloak/26.3.0
项目: kyverno/kyverno
- 版本: v1.15.2
- 文件: kyverno/kyverno/v1.15.2
项目: kyverno/kyverno
- 版本: v1.15.1
- 文件: kyverno/kyverno/v1.15.1
项目: kyverno/kyverno
- 版本: v1.15.0
- 文件: kyverno/kyverno/v1.15.0
项目: volcano-sh/volcano
- 版本: v1.13.0
- 文件: volcano-sh/volcano/v1.13.0
项目: volcano-sh/volcano
- 版本: v1.12.2
- 文件: volcano-sh/volcano/v1.12.2
项目: volcano-sh/volcano
- 版本: v1.12.1
- 文件: volcano-sh/volcano/v1.12.1
项目: volcano-sh/volcano
- 版本: v1.12.0
- 文件: volcano-sh/volcano/v1.12.0
项目: volcano-sh/volcano
- 版本: v1.11.2
- 文件: volcano-sh/volcano/v1.11.2
项目: volcano-sh/volcano
- 版本: v1.11.0-network-topology-preview.3
- 文件: volcano-sh/volcano/v1.11.0-network-topology-preview.3
项目: volcano-sh/volcano
- 版本: v1.10.2
- 文件: volcano-sh/volcano/v1.10.2
项目: volcano-sh/volcano
- 版本: v1.9.1
- 文件: volcano-sh/volcano/v1.9.1
项目: volcano-sh/volcano
- 版本: v1.11.0-network-topology-preview.2
- 文件: volcano-sh/volcano/v1.11.0-network-topology-preview.2
项目: volcano-sh/volcano
- 版本: v1.11.1
- 文件: volcano-sh/volcano/v1.11.1
项目: thanos-io/thanos
- 版本: v0.40.1
- 文件: thanos-io/thanos/v0.40.1
项目: thanos-io/thanos
- 版本: v0.40.0
- 文件: thanos-io/thanos/v0.40.0
项目: thanos-io/thanos
- 版本: v0.39.2
- 文件: thanos-io/thanos/v0.39.2
项目: thanos-io/thanos
- 版本: v0.39.1
- 文件: thanos-io/thanos/v0.39.1
项目: thanos-io/thanos
- 版本: v0.39.0
- 文件: thanos-io/thanos/v0.39.0
项目: thanos-io/thanos
- 版本: v0.38.0
- 文件: thanos-io/thanos/v0.38.0
项目: open-telemetry/opentelemetry.io
- 版本: 2025.09
- 文件: open-telemetry/opentelemetry.io/2025.09
项目: open-telemetry/opentelemetry.io
- 版本: 2025.08
- 文件: open-telemetry/opentelemetry.io/2025.08
项目: open-telemetry/opentelemetry.io
- 版本: 2025.07
- 文件: open-telemetry/opentelemetry.io/2025.07
项目: open-telemetry/opentelemetry.io
- 版本: 2025.06
- 文件: open-telemetry/opentelemetry.io/2025.06
项目: open-telemetry/opentelemetry.io
- 版本: 2025.05
- 文件: open-telemetry/opentelemetry.io/2025.05
项目: open-telemetry/opentelemetry.io
- 版本: 2025.04
- 文件: open-telemetry/opentelemetry.io/2025.04
项目: open-telemetry/opentelemetry.io
- 版本: 2025.03
- 文件: open-telemetry/opentelemetry.io/2025.03
项目: open-telemetry/opentelemetry.io
- 版本: 2025.02
- 文件: open-telemetry/opentelemetry.io/2025.02
项目: open-telemetry/opentelemetry.io
- 版本: 2025.01
- 文件: open-telemetry/opentelemetry.io/2025.01
项目: open-telemetry/opentelemetry.io
- 版本: 2024.12
- 文件: open-telemetry/opentelemetry.io/2024.12

CNCF 项目变更记录 20251031_084313

Fri, 31 Oct 2025 08:43:13 +0800

CNCF 项目变更记录

OAuth2 Proxy

类型: 新增项目

name: OAuth2 Proxy
stage: sandbox
github: https://github.com/oauth2-proxy/oauth2-proxy
docs: https://oauth2-proxy.github.io/oauth2-proxy/
description: A generic reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

Oxia

类型: 新增项目

name: Oxia
stage: sandbox
github: https://github.com/oxia-db/oxia
docs: https://oxia-db.github.io
description: Oxia is a scalable metadata store and coordination system

Dalec

类型: 新增项目

name: Dalec
stage: sandbox
github: https://github.com/project-dalec/dalec
docs: https://github.com/project-dalec/dalec
description: Dalec provides a declarative format for building system packages and containers from those packages in a secure way for supply chain security.

Dragonfly

类型: 项目阶段变更

阶段变更: incubating → graduated

name: Dragonfly
stage: graduated
github: https://github.com/dragonflyoss/dragonfly
docs: https://d7y.io/
description: https://d7y.io/

OpenFGA

类型: 项目阶段变更

阶段变更: sandbox → incubating

name: OpenFGA
stage: incubating
github: https://github.com/openfga/openfga
docs: https://openfga.dev
description: OpenFGA is a high performance and flexible authorization/permission system built for developers and inspired by Google Zanzibar

Crossplane

类型: 项目阶段变更

阶段变更: incubating → graduated

name: Crossplane
stage: graduated
github: https://github.com/crossplane/crossplane
docs: https://crossplane.io/
description: Crossplane is the cloud native control plane framework that allows you to build control planes without needing to write code. Crossplane has a highly extensible backend that enables you to orchestrate applications and infrastructure no matter where they run and a highly configurable frontend that lets you define the declarative API it offers.

CNCF 项目变更记录 20251020_084544

Mon, 20 Oct 2025 08:45:44 +0800

CNCF 项目变更记录

Lima

类型: 项目阶段变更

阶段变更: sandbox → incubating

name: Lima
stage: incubating
github: https://github.com/lima-vm/lima
docs: https://github.com/lima-vm/lima
description: Linux virtual machines, typically on macOS, for running containerd

Air780EP其他资料

Sun, 19 Oct 2025 01:58:54 +0800

为了避免后续官方删除,这里还是把相关资料截图保存下

如果能访问这里,可以下面文档看官方文档即可: https://docs.openluat.com/air780ep/product/

开发版引脚信息

见: https://c.vue2.cn/attachment/20241025095559636_%E5%BC%80%E5%8F%91%E6%9D%BFCore_Air780EP%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8EV1.0.1.pdf

这里存档20241025095559636_开发板Core_Air780EP使用说明V1.0.1.pdf

硬件手册

见 https://docs.openluat.com/air780ep/product/file/Air780EP%E7%A1%AC%E4%BB%B6%E6%89%8B%E5%86%8CV1.1.pdf

这里存档Air780EP硬件手册V1.1.pdf

这里存档合宙Air780EP模组使用手册-V1.0.7.pdf

Air780EP入门指南

Sat, 18 Oct 2025 21:17:05 +0800

今天补办电信手机卡的时候,发现电信套餐可以办理一共5个电话卡了,想起我好久之前买的4G 模块AIR780EP, 果断花了0元申请新开了一个副卡因为这个板子官方已经放入归档,很多资料比较乱,今天折腾了大半天才搞定这个板子的下载,这里记录下(也是担心那天官方就把资料全清理了😄)

下载

参考: https://docs.openluat.com/air780ep/luatos/app/Public_data/

硬件准备

板子插入卡,然后连接上线
点击板子上的power按键,检测电脑的"设备管理器",是否多出对应的设备

注: 如果用线连接电话和板子后,点击boot按键,电脑的"设备管理器"里面没有重新加载出新设备,一般会向下图一样,多出几个设备如果没有,可能是线是只充电的线,不是数据线(充电线里面只有两根电源和地线—-我这换了好几根才找到一根数据线)

软件准备

usb 驱动程序

这个板子是不用下载的,这里说明下😄
Luatools 工具下载

见: https://docs.openluat.com/Luatools/ 下载后,根据说明进行安装

安装完成后需要下载core 文件(固件)

点击"账户"-> “打开资源下载”,会弹出一个窗口,选择"Air780EP"对应的luatos 固件,点击"开始下载即可"

这一步只是下载文件到你电脑上

下载固件

用线重新连接板子

如果之前连接着,插拔一下板子(避免板子已经开机),然后记得不要点任何按键—这个时候板子只有红色的电源灯亮
这里什么都不选,点击"下载固件"按钮

注: 第一次没有从项目下载固件是因为 “下载固件” 界面的提示信息更多一些
在打开的如下界面中,选择上一步下载的core文件,点击"下载按钮"

一般是安装Luatools目录的"resource"目录下
点击"下载按钮"后,进度条会变化,然后
```
a. 按住"BOOT"按钮不放
b. 按住"power"按钮,待进度条变化后,松开"power"按钮
c. 待下载完成后,在松开"BOOT" 按钮
```
注: 我这边下载第一次完成后,后续下载貌似是不需要点击任何按键的(感觉是默认安装的固件和程序导致我这里尝试了很久)

下载第一个程序

准备程序

创建个代码目录,比如"luatos/4g-websocket"目录,然后目录下创建一个main.lua,贴如如下内容

PROJECT = "airtun"
VERSION = "1.0.0"

-- sys库是标配
_G.sys = require("sys")
-- _G.sysplus = require("sysplus")


-- Air780EP的AT固件默认会为开机键防抖, 导致部分用户刷机很麻烦
if rtos.bsp() == "EC618" and pm and pm.PWK_MODE then
 pm.power(pm.PWK_MODE, false)
end

-- 报错信息自动上报到平台,默认是iot.openluat.com
-- 支持自定义, 详细配置请查阅API手册
-- 开启后会上报开机原因, 这需要消耗流量,请留意
if errDump then
 errDump.config(true, 600)
end

local wsc = nil

sys.taskInit(function()

 sys.waitUntil("IP_READY") -- 等待联网成功

 -- 这是个测试服务, 当发送的是json,且action=echo,就会回显所发送的内容
 -- 加密TCP链接 wss 表示加密
 wsc = websocket.create(nil, "wss://echo.airtun.air32.cn/ws/echo")
 -- 这是另外一个测试服务, 能响应websocket的二进制帧
 -- wsc = websocket.create(nil, "ws://echo.airtun.air32.cn/ws/echo2")
 -- 以上两个测试服务是Java写的, 源码在 https://gitee.com/openLuat/luatos-airtun/tree/master/server/src/main/java/com/luatos/airtun/ws

 if wsc.headers then
 wsc:headers({Auth="Basic ABCDEGG"})
 end
 wsc:autoreconn(true, 3000) -- 自动重连机制
 wsc:on(function(wsc, event, data, fin, optcode)
 --[[
 event的值有:
 conack 连接服务器成功,已经收到websocket协议头部信息,通信已建立
 recv 收到服务器下发的信息, data, payload 不为nil
 sent send函数发送的消息,服务器在TCP协议层已确认收到
 disconnect 服务器连接已断开

 其中 sent/disconnect 事件在 2023.04.01 新增
 ]]
 -- data 当事件为recv是有接收到的数据
 -- fin 是否为最后一个数据包, 0代表还有数据, 1代表是最后一个数据包
 -- optcode, 0 - 中间数据包, 1 - 文本数据包, 2 - 二进制数据包
 -- 因为lua并不区分文本和二进制数据, 所以optcode通常可以无视
 -- 若数据不多, 小于1400字节, 那么fid通常也是1, 同样可以忽略
 log.info("wsc", event, data, fin, optcode)
 -- 显示二进制数据
 -- log.info("wsc", event, data and data:toHex() or "", fin, optcode)
 if event == "conack" then -- 连接websocket服务后, 会有这个事件
 log.info("WebSocket connect succeed!")
 sys.publish("wsc_conack")
 end
 end)
 wsc:connect()
 -- 等待conack是可选的
 sys.waitUntil("wsc_conack")
 --local stat = wsc:ready()
 -- 定期发业务ping也是可选的, 但为了保存连接, 也为了继续持有wsc对象, 这里周期性发数据
 while true do
 wsc:send((json.encode({action="echo", msg=os.date()})))
 sys.wait(15000)
 -- 发送二进制帧, 2023.06.21 之后编译的固件支持
 -- wsc:send(string.char(0xA5, 0x5A, 0xAA, 0xF2), 1, 1)
 end
 wsc:close()
 wsc = nil
end)


-- 用户代码已结束---------------------------------------------
-- 结尾总是这一句
sys.run()
-- sys.run()之后后面不要加任何语句!!!!!

开始安装第一个程序

点击"项目管理测试",会弹出下面的窗口,然后点击"创建"按钮,在弹窗中输入项目名,如"4g-demo"
选择core 文件

我一般是把上面"下载固件" 步骤的选择的core文件,复制一份到代码目录的core目录下,然后选择
然后选中"添加默认lib",然后点击"增加目录(递归)",选择之前的代码目录
然后点击"下载脚本",等待执行完成

执行完成(这里一般会比其他板子时间久,中间会重启板子切换到下载模式,下载完成后又重启板子进入正常启动模式)如下图:
检测输出,选中"4G模块USB打印"后,就会自动选择"开始打印"

点击"重启模块",可以看到右边的网络信息,以及下面的日志

CNCF 项目变更记录 20251008_084041

Wed, 08 Oct 2025 08:40:41 +0800

CNCF 项目变更记录

Cadence Workflow

类型: 新增项目

name: Cadence Workflow
stage: sandbox
github: https://github.com/cadence-workflow/cadence
docs: https://cadenceworkflow.io/
description: Cadence is a distributed, scalable, durable, and highly available fault-oblivious stateful code platform.

CNCF 项目变更记录 20251001_064144

Wed, 01 Oct 2025 06:12:09 +0800

CNCF 项目变更记录

KServe

类型: 新增项目

name: KServe
stage: incubating
github: https://github.com/kserve/kserve
docs: https://kserve.github.io/website/
description: Standardized Distributed Generative and Predictive AI Inference Platform for Scalable, Multi-Framework Deployment on Kubernetes

Release Note Changelog 20251001_064152

Wed, 01 Oct 2025 06:12:09 +0800

Release Note Changelog (20251001_064152)

本次共新增 116 个 release note 文件：

项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.13.3
- 文件: kubernetes/ingress-nginx/helm-chart-4.13.3
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.12.7
- 文件: kubernetes/ingress-nginx/helm-chart-4.12.7
项目: kubernetes/ingress-nginx
- 版本: controller-v1.13.3
- 文件: kubernetes/ingress-nginx/controller-v1.13.3
项目: kubernetes/ingress-nginx
- 版本: controller-v1.12.7
- 文件: kubernetes/ingress-nginx/controller-v1.12.7
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.13.2
- 文件: kubernetes/ingress-nginx/helm-chart-4.13.2
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.12.6
- 文件: kubernetes/ingress-nginx/helm-chart-4.12.6
项目: kubernetes/ingress-nginx
- 版本: controller-v1.13.2
- 文件: kubernetes/ingress-nginx/controller-v1.13.2
项目: kubernetes/ingress-nginx
- 版本: controller-v1.12.6
- 文件: kubernetes/ingress-nginx/controller-v1.12.6
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.13.1
- 文件: kubernetes/ingress-nginx/helm-chart-4.13.1
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.12.5
- 文件: kubernetes/ingress-nginx/helm-chart-4.12.5
项目: etcd-io/etcd
- 版本: v3.6.5
- 文件: etcd-io/etcd/v3.6.5
项目: etcd-io/etcd
- 版本: v3.5.23
- 文件: etcd-io/etcd/v3.5.23
项目: etcd-io/etcd
- 版本: v3.6.4
- 文件: etcd-io/etcd/v3.6.4
项目: etcd-io/etcd
- 版本: v3.6.3
- 文件: etcd-io/etcd/v3.6.3
项目: etcd-io/etcd
- 版本: v3.5.22
- 文件: etcd-io/etcd/v3.5.22
项目: etcd-io/etcd
- 版本: v3.6.2
- 文件: etcd-io/etcd/v3.6.2
项目: etcd-io/etcd
- 版本: v3.6.1
- 文件: etcd-io/etcd/v3.6.1
项目: etcd-io/etcd
- 版本: v3.6.0
- 文件: etcd-io/etcd/v3.6.0
项目: goharbor/harbor
- 版本: v2.14.0
- 文件: goharbor/harbor/v2.14.0
项目: goharbor/harbor
- 版本: v2.14.0-rc2
- 文件: goharbor/harbor/v2.14.0-rc2
项目: goharbor/harbor
- 版本: v2.14.0-rc1
- 文件: goharbor/harbor/v2.14.0-rc1
项目: goharbor/harbor
- 版本: v2.13.2
- 文件: goharbor/harbor/v2.13.2
项目: goharbor/harbor
- 版本: v2.13.2-rc1
- 文件: goharbor/harbor/v2.13.2-rc1
项目: goharbor/harbor
- 版本: v2.13.1
- 文件: goharbor/harbor/v2.13.1
项目: goharbor/harbor
- 版本: v2.13.1-rc3
- 文件: goharbor/harbor/v2.13.1-rc3
项目: goharbor/harbor
- 版本: v2.12.4
- 文件: goharbor/harbor/v2.12.4
项目: goharbor/harbor
- 版本: v2.12.4-rc1
- 文件: goharbor/harbor/v2.12.4-rc1
项目: goharbor/harbor
- 版本: v2.13.1-rc2
- 文件: goharbor/harbor/v2.13.1-rc2
项目: containerd/containerd
- 版本: v2.1.4
- 文件: containerd/containerd/v2.1.4
项目: containerd/containerd
- 版本: v2.0.6
- 文件: containerd/containerd/v2.0.6
项目: containerd/containerd
- 版本: v1.7.28
- 文件: containerd/containerd/v1.7.28
项目: containerd/containerd
- 版本: v1.6.39
- 文件: containerd/containerd/v1.6.39
项目: containerd/containerd
- 版本: v2.1.3
- 文件: containerd/containerd/v2.1.3
项目: containerd/containerd
- 版本: v2.1.2
- 文件: containerd/containerd/v2.1.2
项目: containerd/containerd
- 版本: v2.1.1
- 文件: containerd/containerd/v2.1.1
项目: containerd/containerd
- 版本: v2.1.0
- 文件: containerd/containerd/v2.1.0
项目: containerd/nerdctl
- 版本: v2.1.6
- 文件: containerd/nerdctl/v2.1.6
项目: containerd/nerdctl
- 版本: v2.1.5
- 文件: containerd/nerdctl/v2.1.5
项目: containerd/nerdctl
- 版本: v2.1.4
- 文件: containerd/nerdctl/v2.1.4
项目: containerd/nerdctl
- 版本: v2.1.3
- 文件: containerd/nerdctl/v2.1.3
项目: containerd/nerdctl
- 版本: v2.1.2
- 文件: containerd/nerdctl/v2.1.2
项目: containerd/nerdctl
- 版本: v2.1.1
- 文件: containerd/nerdctl/v2.1.1
项目: containerd/nerdctl
- 版本: v2.1.0
- 文件: containerd/nerdctl/v2.1.0
项目: containerd/nerdctl
- 版本: v2.0.5
- 文件: containerd/nerdctl/v2.0.5
项目: containerd/nerdctl
- 版本: v2.0.4
- 文件: containerd/nerdctl/v2.0.4
项目: containers/podman
- 版本: v5.6.2
- 文件: containers/podman/v5.6.2
项目: containers/podman
- 版本: v5.6.1
- 文件: containers/podman/v5.6.1
项目: containers/podman
- 版本: v5.6.0
- 文件: containers/podman/v5.6.0
项目: containers/podman
- 版本: v5.6.0-rc2
- 文件: containers/podman/v5.6.0-rc2
项目: containers/podman
- 版本: v5.6.0-rc1
- 文件: containers/podman/v5.6.0-rc1
项目: containers/podman
- 版本: v5.5.2
- 文件: containers/podman/v5.5.2
项目: containers/podman
- 版本: v5.5.1
- 文件: containers/podman/v5.5.1
项目: containers/podman
- 版本: v5.5.0
- 文件: containers/podman/v5.5.0
项目: containers/podman
- 版本: v5.5.0-rc2
- 文件: containers/podman/v5.5.0-rc2
项目: containers/podman
- 版本: v5.5.0-rc1
- 文件: containers/podman/v5.5.0-rc1
项目: projectcalico/calico
- 版本: v3.29.6
- 文件: projectcalico/calico/v3.29.6
项目: projectcalico/calico
- 版本: v3.30.3
- 文件: projectcalico/calico/v3.30.3
项目: projectcalico/calico
- 版本: v3.29.5
- 文件: projectcalico/calico/v3.29.5
项目: projectcalico/calico
- 版本: v3.30.2
- 文件: projectcalico/calico/v3.30.2
项目: projectcalico/calico
- 版本: v3.28.5
- 文件: projectcalico/calico/v3.28.5
项目: projectcalico/calico
- 版本: v3.30.1
- 文件: projectcalico/calico/v3.30.1
项目: projectcalico/calico
- 版本: v3.29.4
- 文件: projectcalico/calico/v3.29.4
项目: projectcalico/calico
- 版本: v3.30.0
- 文件: projectcalico/calico/v3.30.0
项目: projectcalico/calico
- 版本: v3.28.4
- 文件: projectcalico/calico/v3.28.4
项目: projectcalico/calico
- 版本: v3.29.3
- 文件: projectcalico/calico/v3.29.3
项目: cilium/cilium
- 版本: v1.17.8
- 文件: cilium/cilium/v1.17.8
项目: cilium/cilium
- 版本: v1.16.15
- 文件: cilium/cilium/v1.16.15
项目: cilium/cilium
- 版本: v1.18.2
- 文件: cilium/cilium/v1.18.2
项目: cilium/cilium
- 版本: v1.19.0-pre.0
- 文件: cilium/cilium/v1.19.0-pre.0
项目: cilium/cilium
- 版本: v1.18.1
- 文件: cilium/cilium/v1.18.1
项目: cilium/cilium
- 版本: v1.17.7
- 文件: cilium/cilium/v1.17.7
项目: cilium/cilium
- 版本: v1.16.13
- 文件: cilium/cilium/v1.16.13
项目: cilium/cilium
- 版本: v1.18.0
- 文件: cilium/cilium/v1.18.0
项目: cilium/cilium
- 版本: v1.17.6
- 文件: cilium/cilium/v1.17.6
项目: cilium/cilium
- 版本: v1.16.12
- 文件: cilium/cilium/v1.16.12
项目: karmada-io/karmada
- 版本: v1.15.1
- 文件: karmada-io/karmada/v1.15.1
项目: karmada-io/karmada
- 版本: v1.14.5
- 文件: karmada-io/karmada/v1.14.5
项目: karmada-io/karmada
- 版本: v1.13.8
- 文件: karmada-io/karmada/v1.13.8
项目: karmada-io/karmada
- 版本: v1.15.0
- 文件: karmada-io/karmada/v1.15.0
项目: karmada-io/karmada
- 版本: v1.14.4
- 文件: karmada-io/karmada/v1.14.4
项目: karmada-io/karmada
- 版本: v1.13.7
- 文件: karmada-io/karmada/v1.13.7
项目: karmada-io/karmada
- 版本: v1.12.10
- 文件: karmada-io/karmada/v1.12.10
项目: karmada-io/karmada
- 版本: v1.12.9
- 文件: karmada-io/karmada/v1.12.9
项目: prometheus/prometheus
- 版本: v3.6.0
- 文件: prometheus/prometheus/v3.6.0
项目: prometheus/prometheus
- 版本: v3.5.0
- 文件: prometheus/prometheus/v3.5.0
项目: prometheus/prometheus
- 版本: v2.53.5
- 文件: prometheus/prometheus/v2.53.5
项目: prometheus/prometheus
- 版本: v3.4.2
- 文件: prometheus/prometheus/v3.4.2
项目: prometheus/prometheus
- 版本: v3.4.1
- 文件: prometheus/prometheus/v3.4.1
项目: prometheus/prometheus
- 版本: v3.4.0
- 文件: prometheus/prometheus/v3.4.0
项目: argoproj/argo-cd
- 版本: v3.2.0-rc2
- 文件: argoproj/argo-cd/v3.2.0-rc2
项目: argoproj/argo-cd
- 版本: v3.1.8
- 文件: argoproj/argo-cd/v3.1.8
项目: argoproj/argo-cd
- 版本: v3.0.19
- 文件: argoproj/argo-cd/v3.0.19
项目: argoproj/argo-cd
- 版本: v2.14.20
- 文件: argoproj/argo-cd/v2.14.20
项目: argoproj/argo-cd
- 版本: v3.1.7
- 文件: argoproj/argo-cd/v3.1.7
项目: argoproj/argo-cd
- 版本: v3.0.18
- 文件: argoproj/argo-cd/v3.0.18
项目: argoproj/argo-cd
- 版本: v2.14.19
- 文件: argoproj/argo-cd/v2.14.19
项目: argoproj/argo-cd
- 版本: v3.1.6
- 文件: argoproj/argo-cd/v3.1.6
项目: argoproj/argo-cd
- 版本: v3.0.17
- 文件: argoproj/argo-cd/v3.0.17
项目: argoproj/argo-cd
- 版本: v2.14.18
- 文件: argoproj/argo-cd/v2.14.18
项目: helm/helm
- 版本: v3.19.0
- 文件: helm/helm/v3.19.0
项目: helm/helm
- 版本: v3.18.6
- 文件: helm/helm/v3.18.6
项目: helm/helm
- 版本: v3.18.5
- 文件: helm/helm/v3.18.5
项目: helm/helm
- 版本: v3.17.4
- 文件: helm/helm/v3.17.4
项目: helm/helm
- 版本: v3.18.4
- 文件: helm/helm/v3.18.4
项目: helm/helm
- 版本: v3.18.3
- 文件: helm/helm/v3.18.3
项目: helm/helm
- 版本: v3.18.2
- 文件: helm/helm/v3.18.2
项目: helm/helm
- 版本: v3.18.1
- 文件: helm/helm/v3.18.1
项目: jenkinsci/jenkins
- 版本: jenkins-2.530
- 文件: jenkinsci/jenkins/jenkins-2.530
项目: jenkinsci/jenkins
- 版本: jenkins-2.529
- 文件: jenkinsci/jenkins/jenkins-2.529
项目: jenkinsci/jenkins
- 版本: jenkins-2.528
- 文件: jenkinsci/jenkins/jenkins-2.528
项目: jenkinsci/jenkins
- 版本: jenkins-2.516.3
- 文件: jenkinsci/jenkins/jenkins-2.516.3
项目: jenkinsci/jenkins
- 版本: jenkins-2.527
- 文件: jenkinsci/jenkins/jenkins-2.527
项目: jenkinsci/jenkins
- 版本: jenkins-2.526
- 文件: jenkinsci/jenkins/jenkins-2.526
项目: jenkinsci/jenkins
- 版本: jenkins-2.525
- 文件: jenkinsci/jenkins/jenkins-2.525
项目: jenkinsci/jenkins
- 版本: jenkins-2.516.2
- 文件: jenkinsci/jenkins/jenkins-2.516.2
项目: jenkinsci/jenkins
- 版本: jenkins-2.524
- 文件: jenkinsci/jenkins/jenkins-2.524

chcf_project_changgelog_20250930_061209

Tue, 30 Sep 2025 06:12:09 +0800

Release Note Changelog (20250930_061209)

本次共新增 16 个 release note 文件：

项目: kubernetes/kubernetes
- 版本: v1.33.5
- 文件: kubernetes/kubernetes/v1.33.5
项目: kubernetes/kubernetes
- 版本: v1.32.9
- 文件: kubernetes/kubernetes/v1.32.9
项目: kubernetes/kubernetes
- 版本: v1.31.13
- 文件: kubernetes/kubernetes/v1.31.13
项目: kubernetes/kubernetes
- 版本: v1.34.0
- 文件: kubernetes/kubernetes/v1.34.0
项目: kubernetes/kubernetes
- 版本: v1.33.4
- 文件: kubernetes/kubernetes/v1.33.4
项目: kubernetes/kubernetes
- 版本: v1.32.8
- 文件: kubernetes/kubernetes/v1.32.8
项目: kubernetes/kubernetes
- 版本: v1.31.12
- 文件: kubernetes/kubernetes/v1.31.12
项目: coredns/coredns
- 版本: v1.12.3
- 文件: coredns/coredns/v1.12.3
项目: coredns/coredns
- 版本: v1.12.2
- 文件: coredns/coredns/v1.12.2
项目: coredns/coredns
- 版本: v1.12.1
- 文件: coredns/coredns/v1.12.1
项目: coredns/coredns
- 版本: v1.12.0
- 文件: coredns/coredns/v1.12.0
项目: coredns/coredns
- 版本: v1.11.4
- 文件: coredns/coredns/v1.11.4
项目: coredns/coredns
- 版本: v1.11.3
- 文件: coredns/coredns/v1.11.3
项目: coredns/coredns
- 版本: v1.11.1
- 文件: coredns/coredns/v1.11.1
项目: coredns/coredns
- 版本: v1.11.0
- 文件: coredns/coredns/v1.11.0
项目: coredns/coredns
- 版本: v1.10.1
- 文件: coredns/coredns/v1.10.1

coredns_v1.10.1_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.10.1

coredns/coredns v1.10.1 Release Notes

Published at: 2023-02-06T18:30:04Z

This release fixes some bugs, and adds some new features including:

Corrected architecture labels in multi-arch image manifest
A new plugin timeouts that allows configuration of server listener timeout durations
acl can drop queries as an action
template supports creating responses with extended DNS errors
New weighted policy in loadbalance
Option to serve original record TTLs from cache

Brought to You By

Arthur Outhenin-Chalandre, Ben Kaplan, Chris O’Haver, Gabor Dozsa, Grant Spence, Kumiko as a Service, LAMRobinson, Miciah Dashiel Butler Masters, Ondřej Benkovský, Rich, Stephen Kitt, Yash Singh, Yong Tang, rsclarke, sanyo0714

Noteworthy Changes

plugin/timeouts - Allow ability to configure listening server timeouts (https://github.com/coredns/coredns/pull/5784)
plugin/acl: adding ability to drop queries (https://github.com/coredns/coredns/pull/5722)
plugin/template : add support for extended DNS errors (https://github.com/coredns/coredns/pull/5659)
plugin/kubernetes: error NXDOMAIN for TXT lookups (https://github.com/coredns/coredns/pull/5737)
plugin/kubernetes: dont match external services when endpoint is specified (https://github.com/coredns/coredns/pull/5734)
plugin/k8s_external: Fix rcode for headless services (https://github.com/coredns/coredns/pull/5657)
plugin/edns: remove truncating of question section on bad EDNS version (https://github.com/coredns/coredns/pull/5787)
plugin/dnstap: Fix behavior when multiple dnstap plugins specified (https://github.com/coredns/coredns/pull/5773)
plugin/cache: cache now uses source query DNSSEC option for upstream refresh (https://github.com/coredns/coredns/pull/5671)
Workaround for incorrect architecture (https://github.com/coredns/coredns/pull/5691)
plugin/loadbalance: Add weighted policy (https://github.com/coredns/coredns/pull/5662)
plugin/cache: Add keepttl option (https://github.com/coredns/coredns/pull/5879)
plugin/forward: Fix dnstap for forwarded request/response (https://github.com/coredns/coredns/pull/5890)

Full Changelog: https://github.com/coredns/coredns/compare/v1.10.0...v1.10.1

coredns_v1.11.0_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.11.0

coredns/coredns v1.11.0 Release Notes

Published at: 2023-08-08T14:15:16Z

Release Highlights

Adds support for accepting DNS connections over QUIC (doq).
Adds CNAME target rewrites to the rewrite plugin.
Plus many bug fixes, and some security improvements.

This release introduces the following backward incompatible changes:

In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta, since all supported K8s versions now use Endpointslice.
The bufsize plugin changed its default size limit value to 1232
Some changes to forward plugin metrics.

Brought to You By

Amila Senadheera, Antony Chazapis, Ayato Tokubi, Ben Kochie, Catena cyber, Chris O’Haver, Dan Salmon, Dan Wilson, Denis MACHARD, Diogenes Pelisson, Eng Zer Jun, Fish-pro, Gabor Dozsa, Gary McDonald, João Henri, Justin, Lio李歐, Marcos Mendez, Marius Kimmina, Ondřej Benkovský, Pat Downey, Petr Menšík, Rotem Kfir, Sebastian Dahlgren, Vancl, Vinayak Goyal, W. Trevor King, Yash Singh, Yashpal, Yong Tang, Yuheng, cui fliter, jeremiejig, junhwong, rokkiter, yyzxw

Other Noteworthy Changes

add support for RISC-V (https://github.com/coredns/coredns/pull/6195)
doh: allow http as the protocol (https://github.com/coredns/coredns/pull/5762)
doq: add DNS-Over-QUIC server support (https://github.com/coredns/coredns/pull/6182)
plugin/bufsize: change default value to 1232 (https://github.com/coredns/coredns/pull/6183)
plugin/clouddns: fix answers limited to one response (https://github.com/coredns/coredns/pull/5986)
plugin/dnssec: on delegation, sign DS or NSEC of no DS. (https://github.com/coredns/coredns/pull/5899)
plugin/dnstap: add tls support (https://github.com/coredns/coredns/pull/5917)
plugin/forward: continue waiting after receiving malformed responses (https://github.com/coredns/coredns/pull/6014)
plugin/forward: fix forward metrics for backwards compatibility (https://github.com/coredns/coredns/pull/6178)
plugin/health: poll localhost by default (https://github.com/coredns/coredns/pull/5934)
plugin/k8s_external: add fallthrough option (https://github.com/coredns/coredns/pull/5959)
plugin/kubernetes: expose client-go internal request metrics (https://github.com/coredns/coredns/pull/5991)
plugin/kubernetes: filter ExternalName service queries for subdomains of subdomains (https://github.com/coredns/coredns/pull/6162)
plugin/kubernetes: fix headless/endpoint query panics when endpoints are disabled (https://github.com/coredns/coredns/pull/6137)
plugin/kubernetes: fix ports panic (https://github.com/coredns/coredns/pull/6179)
plugin/kubernetes: remove Endpoint and EndpointSlice v1beta Support (https://github.com/coredns/coredns/pull/6147)
plugin/loadbalance: improve weights update (https://github.com/coredns/coredns/pull/5906)
plugin/rewrite: introduce cname target rewrite rule to rewrite plugin (https://github.com/coredns/coredns/pull/6004)
plugin/transfer: send notifies after adding zones all zones (https://github.com/coredns/coredns/pull/5774)
prevent fail counter of a proxy overflows (https://github.com/coredns/coredns/pull/5990)
prevent panics when using DoHWriter (https://github.com/coredns/coredns/pull/6120)
run coredns as non root. (https://github.com/coredns/coredns/pull/5969)
support unix socket for GRPC (https://github.com/coredns/coredns/pull/5943)

coredns_v1.11.1_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.11.1

coredns/coredns v1.11.1 Release Notes

Published at: 2023-08-15T20:00:30Z

This release fixes a major performance regression introduced in 1.11.0 that affected DoT (TLS) forwarded connections. It also adds a new option to dnstap to add metadata to the dnstap extra field, and fixes a config parsing bug in cache.

Brought to You By

Chris O’Haver, P. Radha Krishna, Yong Tang, Yuheng, Zhizhen He

Noteworthy Changes

Revert “plugin/forward: Continue waiting after receiving malformed responses (https://github.com/coredns/coredns/pull/6014)" (#6270)
plugin/dnstap: add support for “extra” field in payload (https://github.com/coredns/coredns/pull/6226)
plugin/cache: fix keepttl parsing (https://github.com/coredns/coredns/pull/6250)

coredns_v1.11.3_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.11.3

coredns/coredns v1.11.3 Release Notes

Published at: 2024-07-29T17:29:13Z

This release contains some new features, bug fixes, and package updates. Because of the deployment issues with the previous release, all changed features from 1.11.2 have been included in this release. New features include:

When the forward plugin receives a malformed upstream response that overflows, it will now send an empty response to the client with the truncated (TC) bit set to prompt the client to retry over TCP.
The rewrite plugin can now rewrite response codes.
The dnstap plugin now supports adding metadata to the dnstap extra field.

Brought to You By

Amila Senadheera, Ben Kochie, Benjamin, Chris O’Haver, Grant Spence, John Belamaric, Keita Kitamura, Marius Kimmina, Michael Grosser, Ondřej Benkovský, P. Radha Krishna, Rahil Bhimjiani, Sri Harsha, Tom Thorogood, Willow (GHOST), Yong Tang, Yuheng, Zhizhen He, guangwu, journey-c, pschou Ted Ford

Noteworthy Changes

plugin/tls: respect the path specified by root plugin (https://github.com/coredns/coredns/pull/6138)
plugin/auto: warn when auto is unable to read elements of the directory tree (https://github.com/coredns/coredns/pull/6333)
plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (https://github.com/coredns/coredns/pull/6351)
plugin/cache: key cache on Checking Disabled (CD) bit (https://github.com/coredns/coredns/pull/6354)
plugin/forward: Use the correct root domain name in the forward plugin’s health checks (https://github.com/coredns/coredns/pull/6395)
plugin/forward: Handle UDP responses that overflow with TC bit (https://github.com/coredns/coredns/pull/6277)
plugin/rewrite: fix multi request concurrency issue in cname rewrite (https://github.com/coredns/coredns/pull/6407)
plugin/rewrite: add rcode as a rewrite option (https://github.com/coredns/coredns/pull/6204)
plugin/dnstap: add support for “extra” field in payload (https://github.com/coredns/coredns/pull/6226)
plugin/cache: fix keepttl parsing (https://github.com/coredns/coredns/pull/6250)
Return RcodeServerFailure when DNS64 has no next plugin (https://github.com/coredns/coredns/pull/6590)
Change the log flags to be a variable that can be set (https://github.com/coredns/coredns/pull/6546)
Bump go version to 1.21 (https://github.com/coredns/coredns/pull/6533)
replace the mutex locks in logging with atomic bool for the “on” flag (https://github.com/coredns/coredns/pull/6525)
Enable Prometheus native histograms (https://github.com/coredns/coredns/pull/6524)

coredns_v1.11.4_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.11.4

coredns/coredns v1.11.4 Release Notes

Published at: 2024-11-13T03:07:13Z

This release adds some new features and fixes some bugs. New features of note:

forward plugin: new option next, to try alternate upstreams when receiving specified response codes upstreams on (functions like the external plugin alternate)
dnssec plugin: new option to load keys from AWS Secrets Manager
rewrite plugin: new option to revert EDNS0 option rewrites in responses

Brought to You By

AdamKorcz, Anifalak, Ben Kochie, Chris O’Haver, Frederic Hemery, Grant Spence, Harshita Sao, Jason Joo, Jasper Bernhardt, Johnny Bergström, Keith Coleman, Kevin Lyda, Lan, Lin-1997, Manuel Rüger, Nathan Currier, Nicolai Søborg, Nikita Usatov, Paco Xu, Reinhard Nägele, Robbie Ostrow, TAKAHASHI Shuuji, Till Riedel, Tobias Klauser, YASH JAIN, cedar-gao, chenylh, wmkuipers, xinbenlv, zhangguanzhang

Noteworthy Changes

core: set cache-control max-age as integer, not float (https://github.com/coredns/coredns/pull/6764)
plugin/metadata: evaluate metadata in plugin order (https://github.com/coredns/coredns/pull/6729)
plugin/dnssec: dnssec load keys from AWS Secrets Manager (https://github.com/coredns/coredns/pull/6618)
plugin/rewrite: Add “revert” parameter for EDNS0 options (https://github.com/coredns/coredns/pull/6893)
container: Restored backwards compatibility of Current Workdir (https://github.com/coredns/coredns/pull/6731)
plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (https://github.com/coredns/coredns/pull/6705)
plugin/dnstap: log queue and buffer memory size configuration (https://github.com/coredns/coredns/pull/6591)
plugin/bind: add zone for link-local IPv6 instead of skipping (https://github.com/coredns/coredns/pull/6547)
plugin/kubernetes: only create PTR records for endpoints with hostname defined (https://github.com/coredns/coredns/pull/6898)
plugin/rewrite: execute the reversion in reversed order (https://github.com/coredns/coredns/pull/6872)
plugin/etcd: fix etcd connection leakage during reload (https://github.com/coredns/coredns/pull/6646)
plugi/kubernetes: Add useragent (https://github.com/coredns/coredns/pull/6484)
plugin/hosts: add hostsfile as label for coredns_hosts_entries (https://github.com/coredns/coredns/pull/6801)
plugin/file: Fix zone parser error handling (https://github.com/coredns/coredns/pull/6680)
plugin/forward: Add alternate option to forward plugin (https://github.com/coredns/coredns/pull/6681)
plugin/file: return error when parsing the file fails (https://github.com/coredns/coredns/pull/6699)
build: Generate zplugin.go correctly with third-party plugins (https://github.com/coredns/coredns/pull/6692)

Full Changelog: https://github.com/coredns/coredns/compare/v1.11.3...v1.11.4

coredns_v1.12.0_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.12.0

coredns/coredns v1.12.0 Release Notes

Published at: 2024-11-21T19:41:27Z

This release adds a new feature:

New multisocket plugin - allows CoreDNS to listen on multiple sockets

Brought to You By

Ben Kochie, Chris O’Haver, Emmanuel Ferdman, Viktor

Noteworthy Changes

plugin/multisocket (https://github.com/coredns/coredns/pull/6882)

coredns_v1.12.1_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.12.1

coredns/coredns v1.12.1 Release Notes

Published at: 2025-03-31T20:26:21Z

In this release:

kubernetes: Revert recent change to only create PTR records for endpoints with hostname defined.
forward: added option to return SERVFAIL immediately if all upstreams are unhealthy.

Brought to You By

Adrian Moisey, Arthur Outhenin-Chalandre, Bartosz Borkowski, Ben Kochie, Chris O’Haver, Min Woo Kim, Puneet Loya, Rich, Viktor, momantech

Noteworthy Changes

core: Increase CNAME lookup limit from 7 to 10 (https://github.com/coredns/coredns/pull/7153)
plugin/kubernetes: Fix handling of pods having DeletionTimestamp set (https://github.com/coredns/coredns/pull/7119) (#7131)
plugin/kubernetes: Revert “only create PTR records for endpoints with hostname defined (https://github.com/coredns/coredns/pull/6898)" (#7194)
plugin/forward: added option failfast_all_unhealthy_upstreams to return servfail if all upstreams are down (https://github.com/coredns/coredns/pull/6999)

coredns_v1.12.2_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.12.2

coredns/coredns v1.12.2 Release Notes

Published at: 2025-06-06T11:42:00Z

This release introduces significant improvements to plugin stability and extensibility. It adds multicluster support to the Kubernetes plugin, fallthrough support in the file plugin, and a new SetProxyOptions function for the forward plugin. Notably, the QUIC (DoQ) plugin now limits concurrent streams, improving performance under load. Several bug fixes and optimizations improve reliability across plugins, including rewrite, proxy, and metrics.

Brought to You By

Ambrose Chua, Arthur Outhenin-Chalandre, Ben Kochie, Colden Cullen, Gleb Kogtev, Hirotaka Tagawa, Kevin Lyda, Manuel Rüger, Mark Mickan, Parfenov Ivan, skipper, vdbe, Viktor Oreshkin, Ville Vesilehto, Yannick Epstein, Yong Tang

Noteworthy Changes

core: Enable plugins via environment during build (https://github.com/coredns/coredns/pull/7310)
core: Ensure DNS query name reset in plugin.NS error path (https://github.com/coredns/coredns/pull/7142)
plugin/forward: Added SetProxyOptions function for forward plugin (https://github.com/coredns/coredns/pull/7229)
plugin/ready: Do not interrupt querying readiness probes for plugins (https://github.com/coredns/coredns/pull/6975)
plugin/secondary: Make transfer property mandatory (https://github.com/coredns/coredns/pull/7249)
plugin/rewrite: Truncated upstream response (https://github.com/coredns/coredns/pull/7277)
plugin/quic: Limit concurrent DoQ streams and goroutines (https://github.com/coredns/coredns/pull/7296)
plugin/kubernetes: Add multicluster support (https://github.com/coredns/coredns/pull/7266)
plugin/bind: Remove zone for link-local IPv4 (https://github.com/coredns/coredns/pull/7295)
plugin/metrics: Preserve request size from plugins (https://github.com/coredns/coredns/pull/7313)
plugin/proxy: Avoid Dial hang after Transport stopped (https://github.com/coredns/coredns/pull/7321)
plugin/file: Add fallthrough support (https://github.com/coredns/coredns/pull/7327)
plugin/kubernetes: Optimize AutoPath slice allocation (https://github.com/coredns/coredns/pull/7323)

coredns_v1.12.3_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.12.3

coredns/coredns v1.12.3 Release Notes

Published at: 2025-08-05T17:24:51Z

This release improves plugin reliability and standards compliance, adding startup timeout to the Kubernetes plugin, fallthrough to gRPC, and EDNS0 unset to rewrite. The file plugin now preserves SRV record case per RFC 6763, route53 is updated to AWS SDK v2, and multiple race conditions in cache and connection handling in forward are fixed.

Brought to You By

blakebarnett Brennan Kinney Cameron Steel Dave Brown Dennis Simmons Guillaume Jacquet harshith-2411-2002 houpo-bob Oleg Guba Sebastian Mayr Stephen Kitt Syed Azeez Ville Vesilehto Yong Tang Yoofi Quansah

Noteworthy Changes

plugin/auto: Return REFUSED when no next plugin is available (https://github.com/coredns/coredns/pull/7381)
plugin/cache: Create a copy of a response to ensure original msg is never modified (https://github.com/coredns/coredns/pull/7357)
plugin/cache: Fix data race when refreshing cached messages (https://github.com/coredns/coredns/pull/7398)
plugin/cache: Fix data race when updating the TTL of cached messages (https://github.com/coredns/coredns/pull/7397)
plugin/file: Return REFUSED when no next plugin is available (https://github.com/coredns/coredns/pull/7381)
plugin/file: Preserve case in SRV record names and targets per RFC 6763 (https://github.com/coredns/coredns/pull/7402)
plugin/forward: Handle cached connection closure in forward plugin (https://github.com/coredns/coredns/pull/7427)
plugin/grpc: Add support for fallthrough to the grpc plugin (https://github.com/coredns/coredns/pull/7359)
plugin/kubernetes: Add startup_timeout for kubernetes plugin (https://github.com/coredns/coredns/pull/7068)
plugin/kubernetes: Properly create hostname from IPv6 (https://github.com/coredns/coredns/pull/7431)
plugin/rewrite: Add EDNS0 unset action (https://github.com/coredns/coredns/pull/7380)
plugin/route53: Port to AWS Go SDK v2 (https://github.com/coredns/coredns/pull/6588)
plugin/test: Fix TXT record comparison logic for multi-string vs multi-record scenarios (https://github.com/coredns/coredns/pull/7413)

chcf_project_changgelog_20250929_054905

Mon, 29 Sep 2025 05:50:33 +0800

Release Note Changelog (20250929_054905)

本次共新增 2 个 release note 文件：

项目: kubernetes/kubernetes
- 版本: v1.34.1
- 文件: kubernetes/kubernetes/v1.34.1
项目: coredns/coredns
- 版本: v1.12.4
- 文件: coredns/coredns/v1.12.4

chcf_project_changgelog_20250929_045842

Mon, 29 Sep 2025 05:22:25 +0800

CNCF 项目变更记录

Akri

类型: 新增项目

name: Akri
stage: sandbox
github: https://github.com/project-akri/akri
docs: https://docs.akri.sh
description: https://docs.akri.sh

Atlantis

类型: 新增项目

name: Atlantis
stage: sandbox
github: https://github.com/runatlantis/atlantis
docs: https://www.runatlantis.io/
description: Terraform Pull Request Automation for Teams

CDK for Kubernetes (CDK8s)

类型: 新增项目

name: CDK for Kubernetes (CDK8s)
stage: sandbox
github: https://github.com/cdk8s-team/cdk8s
docs: https://cdk8s.io/
description: CDK8s lets you define Kubernetes apps and components using familiar programming languages and object-oriented APIs.

Cloud Custodian

类型: 新增项目

name: Cloud Custodian
stage: incubating
github: https://github.com/cloud-custodian/cloud-custodian
docs: https://cloudcustodian.io/
description: https://cloudcustodian.io/

DevStream

类型: 新增项目

name: DevStream
stage: archived
github: https://github.com/devstream-io/devstream
docs: https://www.devstream.io/
description: https://www.devstream.io/

kagent

类型: 新增项目

name: kagent
stage: sandbox
github: https://github.com/kagent-dev/kagent
docs: https://kagent.dev/
description: Kagent is an open source programming framework designed for DevOps and platform engineers to run AI agents in Kubernetes

Kairos

类型: 新增项目

name: Kairos
stage: sandbox
github: https://github.com/kairos-io/kairos
docs: https://kairos.io
description: https://kairos.io

KCL

类型: 新增项目

name: KCL
stage: sandbox
github: https://github.com/kcl-lang/kcl
docs: https://kcl-lang.io/
description: A constraint-based record & functional language mainly used in configuration and policy scenarios.

KitOps

类型: 新增项目

name: KitOps
stage: sandbox
github: https://github.com/kitops-ml/kitops
docs: https://kitops.org/
description: An open standard for packaging, managing, and deploying ML models and artifacts across different systems

kpt

类型: 新增项目

name: kpt
stage: sandbox
github: https://github.com/kptdev/kpt
docs: https://kpt.dev
description: https://kpt.dev

Kubean

类型: 新增项目

name: Kubean
stage: sandbox
github: https://github.com/kubean-io/kubean
docs: https://kubean-io.github.io/kubean/
description: Product ready cluster lifecycle management toolchains based on kubespray and other cluster LCM engine.

KubeDL

类型: 新增项目

name: KubeDL
stage: archived
github: https://github.com/kubedl-io/kubedl
docs: https://kubedl.io
description: https://kubedl.io

KubeEdge

类型: 新增项目

name: KubeEdge
stage: graduated
github: https://github.com/kubeedge/kubeedge
docs: https://kubeedge.io/en/
description: https://kubeedge.io/en/

KusionStack

类型: 新增项目

name: KusionStack
stage: sandbox
github: https://github.com/KusionStack/kusion
docs: https://kusionstack.io/
description: https://kusionstack.io/

Meshery

类型: 新增项目

name: Meshery
stage: sandbox
github: https://github.com/meshery/meshery
docs: https://meshery.io
description: https://meshery.io

Metal³

类型: 新增项目

name: Metal³
stage: incubating
github: https://github.com/metal3-io/baremetal-operator
docs: https://metal3.io/
description: https://metal3.io/

OpenTofu

类型: 新增项目

name: OpenTofu
stage: sandbox
github: https://github.com/opentofu/opentofu
docs: https://opentofu.org/
description: OpenTofu is an open source infrastructure as code tool that enables users to safely and predictably provision and manage cloud and on-prem infrastructure. It’s a community-driven fork of Terraform that maintains backward compatibility while offering enhanced features, stability.

OpenYurt

类型: 新增项目

name: OpenYurt
stage: incubating
github: https://github.com/openyurtio/openyurt
docs: https://openyurt.io/
description: An open platform that extending your native Kubernetes to edge.

Runme Notebooks

类型: 新增项目

name: Runme Notebooks
stage: sandbox
github: https://github.com/runmedev/runme
docs: https://runme.dev/
description: A toolchain that turns Markdown into interactive, cloud-native, runnable Notebook experiences for DevOps.

SuperEdge

类型: 新增项目

name: SuperEdge
stage: archived
github: https://github.com/superedge/superedge
docs: https://superedge.io/
description: An edge-native container management system for edge computing

Tinkerbell

类型: 新增项目

name: Tinkerbell
stage: sandbox
github: https://github.com/tinkerbell/tinkerbell
docs: https://tinkerbell.org/
description: https://tinkerbell.org/

Distribution

类型: 新增项目

name: Distribution
stage: sandbox
github: https://github.com/distribution/distribution
docs: https://github.com/distribution/distribution
description: https://github.com/distribution/distribution

Dragonfly

类型: 新增项目

name: Dragonfly
stage: incubating
github: https://github.com/dragonflyoss/dragonfly
docs: https://d7y.io/
description: https://d7y.io/

Harbor

类型: 新增项目

name: Harbor
stage: graduated
github: https://github.com/goharbor/harbor
docs: https://goharbor.io/
description: https://goharbor.io/

zot

类型: 新增项目

name: zot
stage: sandbox
github: https://github.com/project-zot/zot
docs: https://zotregistry.dev/
description: Zot is an OCI-native container registry for distributing container images and OCI artifacts.

Bank-Vaults

类型: 新增项目

name: Bank-Vaults
stage: sandbox
github: https://github.com/bank-vaults/bank-vaults
docs: https://bank-vaults.dev/
description: Bank-Vaults is a Vault swiss-army knife: a K8s operator, Go client with automatic token renewal, automatic configuration, multiple unseal options and more. A CLI tool to init, unseal and configure Vault (auth methods, secret engines). Direct secret injection into Pods.

bpfman

类型: 新增项目

name: bpfman
stage: sandbox
github: https://github.com/bpfman/bpfman
docs: https://bpfman.io/
description: An eBPF Manager for Linux and Kubernetes

Cartography

类型: 新增项目

name: Cartography
stage: sandbox
github: https://github.com/cartography-cncf/cartography
docs: https://cartography.dev
description: Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view.

cert-manager

类型: 新增项目

name: cert-manager
stage: graduated
github: https://github.com/cert-manager/cert-manager
docs: https://cert-manager.io/
description: https://cert-manager.io/

Confidential Containers

类型: 新增项目

name: Confidential Containers
stage: sandbox
github: https://github.com/confidential-containers/confidential-containers
docs: https://confidentialcontainers.org/
description: Confidential Containers is an open source community working to enable cloud native confidential computing by leveraging Trusted Execution Environments to protect containers and data.

ContainerSSH

类型: 新增项目

name: ContainerSSH
stage: sandbox
github: https://github.com/containerssh/containerssh
docs: https://containerssh.io
description: ContainerSSH launches a new container for each SSH connection in Kubernetes, Podman or Docker. The user is transparently dropped in the container and the container is removed when the user disconnects. Authentication and container configuration are dynamic using webhooks, no system users required.

Copa

类型: 新增项目

name: Copa
stage: sandbox
github: https://github.com/project-copacetic/copacetic
docs: https://github.com/project-copacetic/copacetic
description: https://github.com/project-copacetic/copacetic

Curiefense

类型: 新增项目

name: Curiefense
stage: archived
github: None
docs: https://www.curiefense.io/
description: https://www.curiefense.io/

Dex

类型: 新增项目

name: Dex
stage: sandbox
github: https://github.com/dexidp/dex
docs: https://dexidp.io/
description: https://dexidp.io/

external-secrets

类型: 新增项目

name: external-secrets
stage: sandbox
github: https://github.com/external-secrets/external-secrets
docs: https://external-secrets.io/
description: https://external-secrets.io/

Falco

类型: 新增项目

name: Falco
stage: graduated
github: https://github.com/falcosecurity/falco
docs: https://falco.org/
description: https://falco.org/

Hexa

类型: 新增项目

name: Hexa
stage: sandbox
github: https://github.com/hexa-org/policy-orchestrator
docs: https://hexaorchestration.org/
description: https://hexaorchestration.org/

in-toto

类型: 新增项目

name: in-toto
stage: graduated
github: https://github.com/in-toto/in-toto
docs: https://in-toto.io
description: https://in-toto.io

Keycloak

类型: 新增项目

name: Keycloak
stage: incubating
github: https://github.com/keycloak/keycloak
docs: https://www.keycloak.org/
description: Keycloak is an open-source identity and access management solution for modern applications and services, built on top of industry security standard protocols.

Keylime

类型: 新增项目

name: Keylime
stage: sandbox
github: https://github.com/keylime/keylime
docs: https://keylime.dev/
description: Bootstrap & Maintain Trust on the Edge / Cloud and IoT.

KubeArmor

类型: 新增项目

name: KubeArmor
stage: sandbox
github: https://github.com/kubearmor/kubearmor
docs: https://kubearmor.io/
description: Runtime protection for Kubernetes & other cloud Workloads. Kubearmor provides a observability and policy enforcement system to restrict any unwanted, malicious behaviour of cloud-native workloads at runtime.

Kubescape

类型: 新增项目

name: Kubescape
stage: incubating
github: https://github.com/kubescape/kubescape
docs: https://kubescape.io/
description: Kubescape is an open source security and compliance platform that scans clusters, Kubernetes manifest files (YAML files, and Helm charts), code repositories, container registries and images. It detects misconfigurations according to frameworks such as the NSA-CISA, MITRE ATT&CK® and CIS, as well as software vulnerabilities, and calculates risk scores.

Kubewarden

类型: 新增项目

name: Kubewarden
stage: sandbox
github: https://github.com/kubewarden/kubewarden-controller
docs: https://www.kubewarden.io
description: Kubewarden is a Policy Engine powered by WebAssembly policies. Its policies can be written in CEL, Rego (OPA & Gatekeeper flavours), Rust, Go, YAML, and others. Kubewarden simplifies Policy-As-Code by allowing policy authors and consumers to use their preferred tooling and stack, develop and test policies out of cluster.

Kyverno

类型: 新增项目

name: Kyverno
stage: incubating
github: https://github.com/kyverno/kyverno
docs: https://kyverno.io/
description: https://kyverno.io/

Notary Project

类型: 新增项目

name: Notary Project
stage: incubating
github: https://github.com/notaryproject/notation
docs: https://notaryproject.dev/
description: https://notaryproject.dev/

Open Policy Agent (OPA)

类型: 新增项目

name: Open Policy Agent (OPA)
stage: graduated
github: https://github.com/open-policy-agent/opa
docs: https://www.openpolicyagent.org/
description: https://www.openpolicyagent.org/

Open Policy Containers

类型: 新增项目

name: Open Policy Containers
stage: sandbox
github: https://github.com/opcr-io/policy
docs: https://openpolicycontainers.com
description: A docker-inspired CLI for building, tagging, pushing, pulling, and signing OPA policies to and from OCI-compliant registries.

OpenFGA

类型: 新增项目

name: OpenFGA
stage: sandbox
github: https://github.com/openfga/openfga
docs: https://openfga.dev
description: OpenFGA is a high performance and flexible authorization/permission system built for developers and inspired by Google Zanzibar

OSCAL-COMPASS

类型: 新增项目

name: OSCAL-COMPASS
stage: sandbox
github: https://github.com/oscal-compass/compliance-trestle
docs: https://github.com/oscal-compass/community
description: The OSCAL COMPASS project is set of tools that enable the creation, validation, and governance of documentation artifacts for compliance needs. It leverages NIST’s OSCAL (Open Security Controls Assessment Language) as a standard data format for interchange between tools and people, and provides an opinionated approach to OSCAL SDK and adoption by policy engines.

Paralus

类型: 新增项目

name: Paralus
stage: sandbox
github: https://github.com/paralus/paralus
docs: https://www.paralus.io/
description: Paralus is a free, open source tool that enables controlled, audited access to Kubernetes infrastructure and Zero trust Kubernetes with zero friction.

Parsec

类型: 新增项目

name: Parsec
stage: sandbox
github: https://github.com/parallaxsecond/parsec
docs: https://parsec.community/
description: https://parsec.community/

Ratify

类型: 新增项目

name: Ratify
stage: sandbox
github: https://github.com/ratify-project/ratify
docs: https://ratify.dev/
description: A verification engine on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies you create.

SlimToolkit

类型: 新增项目

name: SlimToolkit
stage: sandbox
github: https://github.com/slimtoolkit/slim
docs: https://slimtoolkit.org/
description: Inspect, Optimize and Debug Your Containers

SOPS

类型: 新增项目

name: SOPS
stage: sandbox
github: https://github.com/getsops/sops
docs: https://github.com/getsops
description: sops is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.

The Update Framework (TUF)

类型: 新增项目

name: The Update Framework (TUF)
stage: graduated
github: https://github.com/theupdateframework/python-tuf
docs: https://theupdateframework.github.io/
description: https://theupdateframework.github.io/

Tokenetes

类型: 新增项目

name: Tokenetes
stage: sandbox
github: https://github.com/tokenetes/tokenetes
docs: https://tokenetes.io/
description: Tokenetes implements Transaction Tokens (TraTs) for microservices call chains. It’s a Kubernetes-native framework providing immutable identity and context in service-to-service communication to prevent attacks like software supply chain or privileged user compromise.

Athenz

类型: 新增项目

name: Athenz
stage: sandbox
github: https://github.com/AthenZ/athenz
docs: https://www.athenz.io
description: Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures

SPIFFE

类型: 新增项目

name: SPIFFE
stage: graduated
github: https://github.com/spiffe/spiffe
docs: https://spiffe.io/
description: https://spiffe.io/

SPIRE

类型: 新增项目

name: SPIRE
stage: graduated
github: https://github.com/spiffe/spire
docs: https://spiffe.io/spire/
description: https://spiffe.io/spire/

Teller

类型: 新增项目

name: Teller
stage: archived
github: https://github.com/tellerops/teller
docs: https://tlr.dev
description: https://tlr.dev

Carina

类型: 新增项目

name: Carina
stage: sandbox
github: https://github.com/carina-io/carina
docs: https://carina-io.github.io/
description: https://carina-io.github.io/

CubeFS

类型: 新增项目

name: CubeFS
stage: graduated
github: https://github.com/cubeFS/cubefs
docs: https://cubefs.io/
description: https://cubefs.io/

Curve

类型: 新增项目

name: Curve
stage: archived
github: https://github.com/opencurve/curve
docs: http://www.opencurve.io/
description: Curve is a distributed storage system designed and developed independently by NetEase, featured with high performance, high availability, high reliability and well expansibility, and it can serve as the basis for storage systems designed for different scenario.

HwameiStor

类型: 新增项目

name: HwameiStor
stage: sandbox
github: https://github.com/hwameistor/hwameistor
docs: https://hwameistor.io/
description: Hwameistor is an HA local storage system for cloud-native stateful workloads

K8up

类型: 新增项目

name: K8up
stage: sandbox
github: https://github.com/k8up-io/k8up
docs: https://www.k8up.io/
description: https://www.k8up.io/

Kanister

类型: 新增项目

name: Kanister
stage: sandbox
github: https://github.com/kanisterio/kanister
docs: https://kanister.io
description: https://kanister.io

Longhorn

类型: 新增项目

name: Longhorn
stage: incubating
github: https://github.com/longhorn/longhorn
docs: https://longhorn.io/
description: Cloud-native distributed storage for Kubernetes

OpenEBS

类型: 新增项目

name: OpenEBS
stage: sandbox
github: https://github.com/openebs/openebs
docs: https://www.openebs.io/
description: https://www.openebs.io/

ORAS

类型: 新增项目

name: ORAS
stage: sandbox
github: https://github.com/oras-project/oras
docs: https://oras.land/
description: https://oras.land/

Piraeus Datastore

类型: 新增项目

name: Piraeus Datastore
stage: sandbox
github: https://github.com/piraeusdatastore/piraeus-operator
docs: https://piraeus.io/
description: https://piraeus.io/

Rook

类型: 新增项目

name: Rook
stage: graduated
github: https://github.com/rook/rook
docs: https://rook.io/
description: https://rook.io/

Vineyard

类型: 新增项目

name: Vineyard
stage: sandbox
github: https://github.com/v6d-io/v6d
docs: https://v6d.io
description: Vineyard (v6d) is an in-memory immutable data manager.

containerd

类型: 新增项目

name: containerd
stage: graduated
github: https://github.com/containerd/containerd
docs: https://containerd.io/
description: https://containerd.io/

composefs

类型: 新增项目

name: composefs
stage: sandbox
github: https://github.com/containers/composefs
docs: https://github.com/containers/composefs
description: A project that combines Linux kernel features to provide read-only mountable filesystem trees stacking on top of an underlying “lower” Linux filesystem, particularly useful for mounting container images.

bootc

类型: 新增项目

name: bootc
stage: sandbox
github: https://github.com/containers/bootc
docs: https://github.com/containers/bootc
description: The bootc provides transactional, in-place operating system images and updates using OCI/Docker container images. This project applies the Docker container layering model to bootable host systems, using standard OCI/Docker containers as a transport and delivery format for base operating system updates.

CRI-O

类型: 新增项目

name: CRI-O
stage: graduated
github: https://github.com/cri-o/cri-o
docs: https://cri-o.io/
description: https://cri-o.io/

Hyperlight

类型: 新增项目

name: Hyperlight
stage: sandbox
github: https://github.com/hyperlight-dev/hyperlight
docs: https://github.com/hyperlight-dev/hyperlight
description: A lightweight, secure container runtime solution designed for modern cloud-native workloads

Inclavare Containers

类型: 新增项目

name: Inclavare Containers
stage: sandbox
github: https://github.com/inclavare-containers/inclavare-containers
docs: https://github.com/inclavare-containers/
description: https://github.com/inclavare-containers/

Krustlet

类型: 新增项目

name: Krustlet
stage: archived
github: https://github.com/krustlet/krustlet
docs: https://krustlet.dev
description: https://krustlet.dev

Kuasar

类型: 新增项目

name: Kuasar
stage: sandbox
github: https://github.com/kuasar-io/kuasar
docs: https://kuasar.io/
description: A multi-sandbox container runtime that provides cloud-native, all-scenario multiple sandbox container solutions.

Lima

类型: 新增项目

name: Lima
stage: sandbox
github: https://github.com/lima-vm/lima
docs: https://github.com/lima-vm/lima
description: Linux virtual machines, typically on macOS, for running containerd

Podman Container Tools

类型: 新增项目

name: Podman Container Tools
stage: sandbox
github: https://github.com/containers/podman
docs: https://podman.io/
description: A set of tools providing full management of container lifecycle, including Podman, Buildah, and Skopeo, which manage containers and images without requiring a daemon or root privileges.

rkt

类型: 新增项目

name: rkt
stage: archived
github: https://github.com/rkt/rkt
docs: https://github.com/rkt/rkt
description: https://github.com/rkt/rkt

urunc

类型: 新增项目

name: urunc
stage: sandbox
github: https://github.com/urunc-dev/urunc
docs: https://urunc.io/
description: A CRI-compatible runtime for running unikernels and application kernels as containers. urunc bridges the gap between unikernels and containerized environments, enabling seamless integration with cloud-native architectures while maintaining OCI compatibility.

Virtual Kubelet

类型: 新增项目

name: Virtual Kubelet
stage: sandbox
github: https://github.com/virtual-kubelet/virtual-kubelet
docs: https://virtual-kubelet.io/
description: https://virtual-kubelet.io/

Interlink

类型: 新增项目

name: Interlink
stage: sandbox
github: https://github.com/interTwin-eu/interLink
docs: https://intertwin-eu.github.io/interLink/
description: InterLink aims to provide an abstraction for the execution of a Kubernetes pod on any remote resource capable of managing a Container execution lifecycle thanks to the Virtual Kubelet interface. It allows you to extend your cloud environment anywhere by running Kubernetes workloads on various infrastructures, creating a seamless cloud-native experience across diverse environments.

WasmEdge Runtime

类型: 新增项目

name: WasmEdge Runtime
stage: sandbox
github: https://github.com/WasmEdge/WasmEdge
docs: https://wasmedge.org/
description: https://wasmedge.org/

youki

类型: 新增项目

name: youki
stage: sandbox
github: https://github.com/youki-dev/youki
docs: https://youki-dev.github.io/youki/
description: https://youki-dev.github.io/youki/

Antrea

类型: 新增项目

name: Antrea
stage: sandbox
github: https://github.com/antrea-io/antrea
docs: https://antrea.io/
description: https://antrea.io/

Cilium

类型: 新增项目

name: Cilium
stage: graduated
github: https://github.com/cilium/cilium
docs: https://cilium.io/
description: https://cilium.io/

CNI-Genie

类型: 新增项目

name: CNI-Genie
stage: archived
github: https://github.com/cni-genie/CNI-Genie
docs: https://cnigenie.netlify.app
description: https://cnigenie.netlify.app

Container Network Interface (CNI)

类型: 新增项目

name: Container Network Interface (CNI)
stage: incubating
github: https://github.com/containernetworking/cni
docs: https://www.cni.dev/
description: https://www.cni.dev/

FabEdge

类型: 新增项目

name: FabEdge
stage: archived
github: https://github.com/FabEdge/fabedge
docs: https://github.com/FabEdge/
description: https://github.com/FabEdge/

Kube-OVN

类型: 新增项目

name: Kube-OVN
stage: sandbox
github: https://github.com/kubeovn/kube-ovn
docs: https://kube-ovn.io
description: https://kube-ovn.io

kube-vip

类型: 新增项目

name: kube-vip
stage: sandbox
github: https://github.com/kube-vip/kube-vip
docs: https://kube-vip.io
description: Kubernetes Virtual IP and Load-Balancer for both control plane and Kubernetes services

Network Service Mesh

类型: 新增项目

name: Network Service Mesh
stage: sandbox
github: https://github.com/networkservicemesh/api
docs: https://networkservicemesh.io/
description: https://networkservicemesh.io/

OVN-Kubernetes

类型: 新增项目

name: OVN-Kubernetes
stage: sandbox
github: https://github.com/ovn-kubernetes/ovn-kubernetes
docs: https://ovn-kubernetes.io/
description: https://ovn-kubernetes.io/

Spiderpool

类型: 新增项目

name: Spiderpool
stage: sandbox
github: https://github.com/spidernet-io/spiderpool
docs: https://spidernet-io.github.io/spiderpool/
description: Spiderpool is the underlay and RDMA network solution of the Kubernetes, for bare metal, VM and public cloud

Submariner

类型: 新增项目

name: Submariner
stage: sandbox
github: https://github.com/submariner-io/submariner
docs: https://submariner.io
description: Submariner enables direct networking between Pods and Services in different Kubernetes clusters, either on-premises or in the cloud.

Armada

类型: 新增项目

name: Armada
stage: sandbox
github: https://github.com/armadaproject/armada
docs: https://armadaproject.io/
description: https://armadaproject.io/

Capsule

类型: 新增项目

name: Capsule
stage: sandbox
github: https://github.com/projectcapsule/capsule
docs: https://capsule.clastix.io
description: Capsule implements a multi-tenant and policy-based environment in your Kubernetes cluster. It is designed as a micro-services-based ecosystem with the minimalist approach, leveraging only on upstream Kubernetes.

Clusternet

类型: 新增项目

name: Clusternet
stage: sandbox
github: https://github.com/clusternet/clusternet
docs: https://clusternet.io
description: https://clusternet.io

Clusterpedia

类型: 新增项目

name: Clusterpedia
stage: sandbox
github: https://github.com/clusterpedia-io/clusterpedia
docs: https://clusterpedia.io
description: Clusterpedia is used for complex resources search across multiple clusters, support simultaneous search of a single kind of resource or multiple kinds of resources existing in multiple clusters.

Crossplane

类型: 新增项目

name: Crossplane
stage: incubating
github: https://github.com/crossplane/crossplane
docs: https://crossplane.io/
description: Crossplane is the cloud native control plane framework that allows you to build control planes without needing to write code. Crossplane has a highly extensible backend that enables you to orchestrate applications and infrastructure no matter where they run and a highly configurable frontend that lets you define the declarative API it offers.

Eraser

类型: 新增项目

name: Eraser
stage: sandbox
github: https://github.com/eraser-dev/eraser
docs: https://eraser-dev.github.io/eraser/
description: Eraser uses vulnerability data to remove non-running images from all Kubernetes nodes in a cluster.

Fluid

类型: 新增项目

name: Fluid
stage: sandbox
github: https://github.com/fluid-cloudnative/fluid
docs: https://fluid-cloudnative.github.io/
description: Fluid is an orchestration platform for elastic data abstraction and acceleration in cloud native environment.

hami

类型: 新增项目

name: hami
stage: sandbox
github: https://github.com/Project-HAMi/HAMi
docs: https://project-hami.github.io/HAMi/
description: Heterogeneous AI Computing Virtualization Middleware

Karmada

类型: 新增项目

name: Karmada
stage: incubating
github: https://github.com/karmada-io/karmada
docs: https://karmada.io/
description: https://karmada.io/

kcp

类型: 新增项目

name: kcp
stage: sandbox
github: https://github.com/kcp-dev/kcp
docs: https://kcp.io
description: https://kcp.io

k0s

类型: 新增项目

name: k0s
stage: sandbox
github: https://github.com/k0sproject/k0s
docs: https://k0sproject.io/
description: https://k0sproject.io/

KEDA

类型: 新增项目

name: KEDA
stage: graduated
github: https://github.com/kedacore/keda
docs: https://keda.sh/
description: https://keda.sh/

Knative

类型: 新增项目

name: Knative
stage: graduated
github: https://github.com/knative/serving
docs: https://knative.dev
description: Knative is a developer-focused serverless application layer which is a great complement to the existing Kubernetes application constructs. Knative consists of three components: an HTTP-triggered autoscaling container runtime called “Knative Serving”, a CloudEvents-over-HTTP asynchronous routing layer called “Knative Eventing”, and a developer-focused function framework which leverages the Serving and Eventing components, called “Knative Functions”.

Koordinator

类型: 新增项目

name: Koordinator
stage: sandbox
github: https://github.com/koordinator-sh/koordinator
docs: https://koordinator.sh
description: QoS based scheduling system for hybrid orchestration workloads on Kubernetes, bringing workloads the best layout and status.

kube-rs

类型: 新增项目

name: kube-rs
stage: sandbox
github: https://github.com/kube-rs/kube
docs: https://kube.rs
description: kube-rs is the core Rust ecosystem for building applications against Kubernetes

Kubeflow

类型: 新增项目

name: Kubeflow
stage: incubating
github: https://github.com/kubeflow/kubeflow
docs: https://kubeflow.org
description: The Kubeflow project is dedicated to making deployments of machine learning workflows on Kubernetes simple, portable and scalable by providing a straightforward way to deploy best-of-breed open-source systems for ML to diverse infrastructures.

KubeFleet

类型: 新增项目

name: KubeFleet
stage: sandbox
github: https://github.com/kubefleet-dev/kubefleet
docs: https://github.com/kubefleet-dev/kubefleet
description: A multi-cluster solution that enables users to effectively manage their applications running in multiple Kubernetes clusters.

Kubernetes

类型: 新增项目

name: Kubernetes
stage: graduated
github: https://github.com/kubernetes/kubernetes
docs: https://kubernetes.io/
description: Kubernetes is an open-source system for automating deployment, scaling, and management of containerized applications

KubeSlice

类型: 新增项目

name: KubeSlice
stage: sandbox
github: https://github.com/kubeslice/kubeslice
docs: https://kubeslice.io
description: https://kubeslice.io

KubeStellar

类型: 新增项目

name: KubeStellar
stage: sandbox
github: https://github.com/kubestellar/kubestellar
docs: https://kubestellar.io
description: https://kubestellar.io

Kured

类型: 新增项目

name: Kured
stage: sandbox
github: https://github.com/kubereboot/kured
docs: https://kured.dev
description: Kured (KUbernetes REboot Daemon) is a Kubernetes daemonset that performs safe automatic node reboots when the need to do so is indicated by the package management system of the underlying OS

Open Cluster Management

类型: 新增项目

name: Open Cluster Management
stage: sandbox
github: https://github.com/open-cluster-management-io/ocm
docs: https://open-cluster-management.io/
description: https://open-cluster-management.io/

OpenFunction

类型: 新增项目

name: OpenFunction
stage: sandbox
github: https://github.com/OpenFunction/OpenFunction
docs: https://openfunction.dev
description: https://openfunction.dev

Serverless Devs

类型: 新增项目

name: Serverless Devs
stage: sandbox
github: https://github.com/serverless-devs/serverless-devs
docs: https://www.serverless-devs.com/
description: https://www.serverless-devs.com/

Volcano

类型: 新增项目

name: Volcano
stage: incubating
github: https://github.com/volcano-sh/volcano
docs: https://volcano.sh/
description: https://volcano.sh/

wasmCloud

类型: 新增项目

name: wasmCloud
stage: incubating
github: https://github.com/wasmCloud/wasmCloud
docs: https://wasmcloud.com
description: https://wasmcloud.com

CoreDNS

类型: 新增项目

name: CoreDNS
stage: graduated
github: https://github.com/coredns/coredns
docs: https://coredns.io/
description: https://coredns.io/

etcd

类型: 新增项目

name: etcd
stage: graduated
github: https://github.com/etcd-io/etcd
docs: https://etcd.io/
description: https://etcd.io/

k8gb

类型: 新增项目

name: k8gb
stage: sandbox
github: https://github.com/k8gb-io/k8gb
docs: https://www.k8gb.io
description: https://www.k8gb.io

Xline

类型: 新增项目

name: Xline
stage: archived
github: https://github.com/xline-kv/Xline
docs: https://www.xline.cloud
description: Xline is a high-performance geo-distributed metadata management system, which is compatible with the ETCD interface.

gRPC

类型: 新增项目

name: gRPC
stage: incubating
github: https://github.com/grpc/grpc
docs: https://grpc.io/
description: https://grpc.io/

Connect RPC

类型: 新增项目

name: Connect RPC
stage: sandbox
github: https://github.com/connectrpc/connect-go
docs: https://connectrpc.com/
description: Connect is a family of libraries for building browser and gRPC-compatible HTTP APIs.

BFE

类型: 新增项目

name: BFE
stage: sandbox
github: https://github.com/bfenetworks/bfe
docs: https://www.bfe-networks.net
description: Open-source layer 7 load balancer derived from proprietary Baidu FrontEnd

Contour

类型: 新增项目

name: Contour
stage: incubating
github: https://github.com/projectcontour/contour
docs: https://projectcontour.io
description: https://projectcontour.io

Envoy

类型: 新增项目

name: Envoy
stage: graduated
github: https://github.com/envoyproxy/envoy
docs: https://www.envoyproxy.io
description: https://www.envoyproxy.io

LoxiLB

类型: 新增项目

name: LoxiLB
stage: sandbox
github: https://github.com/loxilb-io/loxilb
docs: https://loxilb.io
description: eBPF based cloud-native load-balancer. Powering Kubernetes|Edge|5G|IoT|XaaS Apps.

MetalLB

类型: 新增项目

name: MetalLB
stage: sandbox
github: https://github.com/metallb/metallb
docs: https://metallb.universe.tf
description: https://metallb.universe.tf

OpenELB

类型: 新增项目

name: OpenELB
stage: archived
github: https://github.com/openelb/openelb
docs: https://openelb.github.io
description: https://openelb.github.io

Easegress

类型: 新增项目

name: Easegress
stage: sandbox
github: https://github.com/easegress-io/easegress
docs: https://megaease.com/easegress
description: https://megaease.com/easegress

Emissary-Ingress

类型: 新增项目

name: Emissary-Ingress
stage: incubating
github: https://github.com/emissary-ingress/emissary
docs: https://emissary-ingress.dev/
description: https://emissary-ingress.dev/

Kgateway

类型: 新增项目

name: Kgateway
stage: sandbox
github: https://github.com/kgateway-dev/kgateway
docs: https://kgateway.dev/
description: An Envoy-powered, Kubernetes-native API Gateway that integrates Kubernetes Gateway API with a control plane for API connectivity in any cloud environment.

Kuadrant

类型: 新增项目

name: Kuadrant
stage: sandbox
github: https://github.com/kuadrant/kuadrant-operator
docs: https://kuadrant.io
description: Kuadrant combines Gateway API and Istio-based gateway controllers to enhance application connectivity. It enables platform engineers and application developers to easily connect, secure, and protect their services and infrastructure across multiple clusters with policies for TLS, DNS, application authentication & authorization, and rate limiting.

Aeraki Mesh

类型: 新增项目

name: Aeraki Mesh
stage: sandbox
github: https://github.com/aeraki-mesh/aeraki
docs: https://www.aeraki.net/
description: Aeraki Mesh allows you to manage any layer-7 traffic in a service mesh

Istio

类型: 新增项目

name: Istio
stage: graduated
github: https://github.com/istio/istio
docs: https://istio.io/
description: Simplify observability, traffic management, security, and policy with the Istio service mesh.

Kmesh

类型: 新增项目

name: Kmesh
stage: sandbox
github: https://github.com/kmesh-net/kmesh
docs: https://kmesh.net
description: Kmesh is a high-performance and low overhead service mesh data plane based on eBPF and programmable kernel. Kmesh brings traffic management, security and monitoring to service communication without needing application code changes. It is natively sidecarless, zero intrusion and without adding any resource cost to application container.

Kuma

类型: 新增项目

name: Kuma
stage: sandbox
github: https://github.com/kumahq/kuma
docs: https://kuma.io
description: https://kuma.io

Linkerd

类型: 新增项目

name: Linkerd
stage: graduated
github: https://github.com/linkerd/linkerd2
docs: https://linkerd.io/
description: Ultra light, ultra simple, ultra powerful. Linkerd adds security, observability, and reliability to Kubernetes, without the complexity.

Merbridge

类型: 新增项目

name: Merbridge
stage: archived
github: https://github.com/merbridge/merbridge
docs: https://merbridge.io/
description: Use eBPF to speed up your Service Mesh like crossing an Einstein-Rosen Bridge.

Open Service Mesh

类型: 新增项目

name: Open Service Mesh
stage: archived
github: https://github.com/openservicemesh/osm
docs: https://openservicemesh.io/
description: https://openservicemesh.io/

Sermant

类型: 新增项目

name: Sermant
stage: sandbox
github: https://github.com/sermant-io/Sermant
docs: https://sermant.io/
description: Sermant a proxyless service mesh solution based on Javaagent.

Service Mesh Interface (SMI)

类型: 新增项目

name: Service Mesh Interface (SMI)
stage: archived
github: https://github.com/servicemeshinterface/smi-spec
docs: https://smi-spec.io
description: https://smi-spec.io

Service Mesh Performance

类型: 新增项目

name: Service Mesh Performance
stage: archived
github: https://github.com/service-mesh-performance/service-mesh-performance
docs: https://smp-spec.io/
description: https://smp-spec.io/

CloudNativePG

类型: 新增项目

name: CloudNativePG
stage: sandbox
github: https://github.com/cloudnative-pg/cloudnative-pg
docs: https://www.cloudnative-pg.io/
description: CloudNativePG is a comprehensive platform designed to seamlessly manage PostgreSQL databases within Kubernetes environments, covering the entire operational lifecycle from initial deployment to ongoing maintenance

openGemini

类型: 新增项目

name: openGemini
stage: sandbox
github: https://github.com/openGemini/openGemini
docs: https://www.opengemini.org
description: openGemini is an open source distributed time series DBMS with high concurrency, high performance, and high scalability, focusing on the storage and analysis of massive observability data.

SchemaHero

类型: 新增项目

name: SchemaHero
stage: sandbox
github: https://github.com/schemahero/schemahero
docs: https://schemahero.io
description: https://schemahero.io

TiKV

类型: 新增项目

name: TiKV
stage: graduated
github: https://github.com/tikv/tikv
docs: https://tikv.org
description: A distributed transactional key-value database. Based on the design of Google Spanner and HBase, but simpler to manage and without dependencies on any distributed filesystem

Vitess

类型: 新增项目

name: Vitess
stage: graduated
github: https://github.com/vitessio/vitess
docs: https://vitess.io/
description: MySQL-compatible, horizontally scalable, cloud-native database solution.

CloudEvents

类型: 新增项目

name: CloudEvents
stage: graduated
github: https://github.com/cloudevents/spec
docs: https://cloudevents.io/
description: Standardizing common eventing metadata and their location to help with event identification and routing.

Drasi

类型: 新增项目

name: Drasi
stage: sandbox
github: http://github.com/drasi-project/drasi-platform
docs: https://drasi.io
description: A data change processing platform to simplify change-driven systems that need to detect, evaluate, and react to data changes quickly and efficiently at scale.

NATS

类型: 新增项目

name: NATS
stage: incubating
github: https://github.com/nats-io/nats-server
docs: https://nats.io/
description: NATS.io is a connective technology for distributed systems and is a perfect fit to connect devices, edge, cloud or hybrid deployments. True multi-tenancy makes NATS ideal for SaaS and self-healing and scaling technology allows for topology changes anytime with zero downtime.

Pravega

类型: 新增项目

name: Pravega
stage: archived
github: https://github.com/pravega/pravega
docs: https://cncf.pravega.io
description: https://cncf.pravega.io

Strimzi

类型: 新增项目

name: Strimzi
stage: incubating
github: https://github.com/strimzi/strimzi-kafka-operator
docs: https://strimzi.io/
description: https://strimzi.io/

Tremor

类型: 新增项目

name: Tremor
stage: sandbox
github: https://github.com/tremor-rs/tremor-runtime
docs: https://www.tremor.rs/
description: https://www.tremor.rs/

Artifact Hub

类型: 新增项目

name: Artifact Hub
stage: incubating
github: https://github.com/artifacthub/hub
docs: https://artifacthub.io
description: https://artifacthub.io

Backstage

类型: 新增项目

name: Backstage
stage: incubating
github: https://github.com/backstage/backstage
docs: https://backstage.io/
description: https://backstage.io/

Buildpacks

类型: 新增项目

name: Buildpacks
stage: incubating
github: https://github.com/buildpacks/pack
docs: https://buildpacks.io/
description: https://buildpacks.io/

Carvel

类型: 新增项目

name: Carvel
stage: sandbox
github: https://github.com/carvel-dev/ytt
docs: https://carvel.dev
description: Carvel provides a set of reliable, single-purpose, composable tools that aid in your application building, configuration, and deployment to Kubernetes.

Dapr

类型: 新增项目

name: Dapr
stage: graduated
github: https://github.com/dapr/dapr
docs: https://dapr.io
description: https://dapr.io

Devfile

类型: 新增项目

name: Devfile
stage: sandbox
github: https://github.com/devfile/api
docs: https://devfile.io
description: https://devfile.io

DevSpace

类型: 新增项目

name: DevSpace
stage: sandbox
github: https://github.com/devspace-sh/devspace
docs: https://devspace.sh
description: https://devspace.sh

Helm

类型: 新增项目

name: Helm
stage: graduated
github: https://github.com/helm/helm
docs: https://helm.sh/
description: https://helm.sh/

ko

类型: 新增项目

name: ko
stage: sandbox
github: https://github.com/ko-build/ko
docs: https://ko.build/
description: https://ko.build/

Konveyor

类型: 新增项目

name: Konveyor
stage: sandbox
github: https://github.com/konveyor/operator
docs: https://www.konveyor.io/
description: https://www.konveyor.io/

Krator

类型: 新增项目

name: Krator
stage: archived
github: https://github.com/krator-rs/krator
docs: https://docs.rs/crate/krator/latest
description: https://docs.rs/crate/krator/latest

KubeVela

类型: 新增项目

name: KubeVela
stage: incubating
github: https://github.com/kubevela/kubevela
docs: https://kubevela.io
description: https://kubevela.io

KubeVirt

类型: 新增项目

name: KubeVirt
stage: incubating
github: https://github.com/kubevirt/kubevirt
docs: https://kubevirt.io/
description: https://kubevirt.io/

KUDO

类型: 新增项目

name: KUDO
stage: sandbox
github: https://github.com/kudobuilder/kudo
docs: https://kudo.dev/
description: https://kudo.dev/

Microcks

类型: 新增项目

name: Microcks
stage: sandbox
github: https://github.com/microcks/microcks
docs: https://microcks.io
description: https://microcks.io

ModelPack

类型: 新增项目

name: ModelPack
stage: sandbox
github: https://github.com/modelpack/model-spec
docs: https://github.com/modelpack/model-spec
description: The project establishes open standards for packaging, distributing and running AI artifacts in the cloud-native environment.

Nocalhost

类型: 新增项目

name: Nocalhost
stage: archived
github: https://github.com/nocalhost/nocalhost
docs: https://nocalhost.dev
description: https://nocalhost.dev

Operator Framework

类型: 新增项目

name: Operator Framework
stage: incubating
github: https://github.com/operator-framework/operator-sdk
docs: https://operatorframework.io/
description: https://operatorframework.io/

Podman Desktop

类型: 新增项目

name: Podman Desktop
stage: sandbox
github: https://github.com/podman-desktop/podman-desktop
docs: https://podman-desktop.io/
description: An open-source tool for developers to work with containers and Kubernetes with an intuitive and user-friendly interface to effortlessly build, manage, and deploy containers and Kubernetes — all from the desktop.

Porter

类型: 新增项目

name: Porter
stage: sandbox
github: https://github.com/getporter/porter
docs: https://porter.sh/
description: https://porter.sh/

Radius

类型: 新增项目

name: Radius
stage: sandbox
github: https://github.com/radius-project/radius
docs: https://radapp.io/
description: Radius is a cloud-native application platform that enables developers and the platform engineers that support them to collaborate on delivering and managing cloud-native applications that follow organizational best practices for cost, operations and security, by default.

Score

类型: 新增项目

name: Score
stage: sandbox
github: https://github.com/score-spec/spec
docs: https://score.dev/
description: Score is an open-source workload specification designed to simplify development for cloud-native developers.

sealer

类型: 新增项目

name: sealer
stage: archived
github: https://github.com/sealerio/sealer
docs: http://sealer.cool/
description: http://sealer.cool/

Serverless Workflow

类型: 新增项目

name: Serverless Workflow
stage: sandbox
github: https://github.com/serverlessworkflow/specification
docs: https://serverlessworkflow.io
description: https://serverlessworkflow.io

Shipwright

类型: 新增项目

name: Shipwright
stage: sandbox
github: https://github.com/shipwright-io/build
docs: https://shipwright.io
description: https://shipwright.io

Stacker

类型: 新增项目

name: Stacker
stage: sandbox
github: https://github.com/project-stacker/stacker
docs: https://stackerbuild.io
description: Stacker is a tool for building OCI images and related artifacts such as SBOMs natively via a declarative yaml format.

Telepresence

类型: 新增项目

name: Telepresence
stage: sandbox
github: https://github.com/telepresenceio/telepresence
docs: https://www.telepresence.io/
description: https://www.telepresence.io/

Visual Studio Code Kubernetes Tools

类型: 新增项目

name: Visual Studio Code Kubernetes Tools
stage: sandbox
github: https://github.com/vscode-kubernetes-tools/vscode-kubernetes-tools
docs: https://marketplace.visualstudio.com/items?itemName=ms-kubernetes-tools.vscode-kubernetes-tools
description: The extension for developers building applications to run in Kubernetes clusters and for DevOps staff troubleshooting Kubernetes applications.

xRegistry

类型: 新增项目

name: xRegistry
stage: sandbox
github: https://github.com/xregistry/server
docs: https://xregistry.io
description: The xRegistry project defines an abstract model for managing metadata about resources and provides a REST-based interface to discover, create, modify and delete those resources.

Argo

类型: 新增项目

name: Argo
stage: graduated
github: https://github.com/argoproj/argo-cd
docs: https://argoproj.github.io/
description: Kubernetes-native tools to run workflows, manage clusters, and do GitOps right.

Brigade

类型: 新增项目

name: Brigade
stage: archived
github: https://github.com/brigadecore/brigade
docs: https://brigade.sh/
description: https://brigade.sh/

Flux

类型: 新增项目

name: Flux
stage: graduated
github: https://github.com/fluxcd/flux2
docs: https://fluxcd.io/
description: https://fluxcd.io/

Keptn

类型: 新增项目

name: Keptn
stage: archived
github: https://github.com/keptn/lifecycle-toolkit
docs: https://www.keptn.sh
description: Cloud-native application life-cycle orchestration. Keptn automates your SLO-driven multi-stage delivery and operations & remediation of your applications.

OpenGitOps

类型: 新增项目

name: OpenGitOps
stage: sandbox
github: https://github.com/open-gitops/project
docs: https://opengitops.dev/
description: https://opengitops.dev/

OpenKruise

类型: 新增项目

name: OpenKruise
stage: incubating
github: https://github.com/openkruise/kruise
docs: https://openkruise.io/
description: https://openkruise.io/

PipeCD

类型: 新增项目

name: PipeCD
stage: sandbox
github: https://github.com/pipe-cd/pipecd
docs: https://pipecd.dev/
description: GitOps style continuous delivery platform that provides consistent deployment and operations experience for any applications

werf

类型: 新增项目

name: werf
stage: sandbox
github: https://github.com/werf/werf
docs: https://werf.io/
description: werf is a solution for implementing efficient and consistent software delivery to Kubernetes. It covers the entire CI/CD lifecycle and all related artifacts, glues commonly used tools (Git, Docker/Buildah, Helm, K8s) and facilitates best practices.

Kube-burner

类型: 新增项目

name: Kube-burner
stage: sandbox
github: https://github.com/kube-burner/kube-burner
docs: https://kube-burner.github.io/kube-burner/
description: https://kube-burner.github.io/kube-burner/

Flatcar Container Linux

类型: 新增项目

name: Flatcar Container Linux
stage: incubating
github: https://github.com/flatcar/Flatcar
docs: https://www.flatcar.org/
description: A community Linux distribution designed for container workloads, with high security and low maintenance

k3s

类型: 新增项目

name: k3s
stage: sandbox
github: https://github.com/k3s-io/k3s
docs: https://k3s.io
description: Lightweight Kubernetes

KubeClipper

类型: 新增项目

name: KubeClipper
stage: sandbox
github: https://github.com/kubeclipper/kubeclipper
docs: https://www.kubeclipper.io/
description: Manage kubernetes in the most light and convenient way.

Cozystack

类型: 新增项目

name: Cozystack
stage: sandbox
github: https://github.com/cozystack/cozystack
docs: https://cozystack.io
description: Cozystack is a free PaaS platform and framework for building private clouds and providing users/customers with managed Kubernetes, KubeVirt-based VMs, databases as a service, NATS, message brokers, etc. with GPU support in VMs and Kubernetes clusters.

SlimFaaS

类型: 新增项目

name: SlimFaaS
stage: sandbox
github: https://github.com/SlimPlanet/SlimFaas
docs: https://github.com/SlimPlanet/SlimFaas
description: The slimest and simplest Function As A Service

OpenFeature

类型: 新增项目

name: OpenFeature
stage: incubating
github: https://github.com/open-feature/spec
docs: https://openfeature.dev/
description: Standardizing Feature Flagging for Everyone

Chaos Mesh

类型: 新增项目

name: Chaos Mesh
stage: incubating
github: https://github.com/chaos-mesh/chaos-mesh
docs: https://chaos-mesh.org/
description: https://chaos-mesh.org/

Chaosblade

类型: 新增项目

name: Chaosblade
stage: sandbox
github: https://github.com/chaosblade-io/chaosblade
docs: https://chaosblade.io/
description: https://chaosblade.io/

Litmus

类型: 新增项目

name: Litmus
stage: incubating
github: https://github.com/litmuschaos/litmus
docs: https://litmuschaos.io/
description: https://litmuschaos.io/

Krkn

类型: 新增项目

name: Krkn
stage: sandbox
github: https://github.com/krkn-chaos/krkn
docs: https://krkn-chaos.github.io/krkn
description: Chaos testing tool for Kubernetes to identify bottlenecks and improve resilience and performance under failure conditions.

OpenCost

类型: 新增项目

name: OpenCost
stage: incubating
github: https://github.com/opencost/opencost
docs: https://www.opencost.io/
description: OpenCost provides visibility into current and historical Kubernetes spend and resource allocation.

Cortex

类型: 新增项目

name: Cortex
stage: incubating
github: https://github.com/cortexproject/cortex
docs: https://cortexmetrics.io/
description: https://cortexmetrics.io/

Fluentd

类型: 新增项目

name: Fluentd
stage: graduated
github: https://github.com/fluent/fluentd
docs: https://www.fluentd.org/
description: https://www.fluentd.org/

Fonio

类型: 新增项目

name: Fonio
stage: archived
github: https://github.com/foniod/foniod
docs: https://ingraind.org/
description: https://ingraind.org/

Inspektor Gadget

类型: 新增项目

name: Inspektor Gadget
stage: sandbox
github: https://github.com/inspektor-gadget/inspektor-gadget
docs: https://inspektor-gadget.io/
description: Open source eBPF debugging and data collection tool for Kubernetes and Linux

Jaeger

类型: 新增项目

name: Jaeger
stage: graduated
github: https://github.com/jaegertracing/jaeger
docs: https://www.jaegertracing.io/
description: https://www.jaegertracing.io/

K8sGPT

类型: 新增项目

name: K8sGPT
stage: sandbox
github: https://github.com/k8sgpt-ai/k8sgpt
docs: https://www.k8sgpt.ai
description: https://www.k8sgpt.ai

Kepler

类型: 新增项目

name: Kepler
stage: sandbox
github: https://github.com/sustainable-computing-io/kepler
docs: https://sustainable-computing.io/
description: Kepler (Kubernetes-based Efficient Power Level Exporter) uses eBPF to probe energy related system stats and exports as Prometheus metrics.

Kuberhealthy

类型: 新增项目

name: Kuberhealthy
stage: sandbox
github: https://github.com/kuberhealthy/kuberhealthy
docs: https://github.com/kuberhealthy/kuberhealthy
description: https://github.com/kuberhealthy/kuberhealthy

Logging Operator (Kube Logging)

类型: 新增项目

name: Logging Operator (Kube Logging)
stage: sandbox
github: https://github.com/kube-logging/logging-operator
docs: https://kube-logging.dev/
description: https://kube-logging.dev/

OpenMetrics

类型: 新增项目

name: OpenMetrics
stage: archived
github: https://github.com/OpenObservability/OpenMetrics
docs: https://openmetrics.io/
description: https://openmetrics.io/

OpenTelemetry

类型: 新增项目

name: OpenTelemetry
stage: incubating
github: https://github.com/open-telemetry/community
docs: https://opentelemetry.io/
description: https://opentelemetry.io/

OpenTracing

类型: 新增项目

name: OpenTracing
stage: archived
github: https://github.com/opentracing/opentracing-go
docs: https://opentracing.io/
description: https://opentracing.io/

Perses

类型: 新增项目

name: Perses
stage: sandbox
github: https://github.com/perses/perses
docs: https://perses.dev
description: Perses is a dashboard tool to visualize observability data from Prometheus/Thanos/Jaeger.

Pixie

类型: 新增项目

name: Pixie
stage: sandbox
github: https://github.com/pixie-io/pixie
docs: https://px.dev/
description: Open source Kubernetes observability for developers

Prometheus

类型: 新增项目

name: Prometheus
stage: graduated
github: https://github.com/prometheus/prometheus
docs: https://prometheus.io/
description: https://prometheus.io/

Skooner

类型: 新增项目

name: Skooner
stage: archived
github: https://github.com/skooner-k8s/skooner
docs: https://skooner.io/
description: https://skooner.io/

Thanos

类型: 新增项目

name: Thanos
stage: incubating
github: https://github.com/thanos-io/thanos
docs: https://thanos.io/
description: https://thanos.io/

Trickster

类型: 新增项目

name: Trickster
stage: sandbox
github: https://github.com/trickstercache/trickster
docs: https://trickstercache.org
description: https://trickstercache.org

SpinKube

类型: 新增项目

name: SpinKube
stage: sandbox
github: https://github.com/spinframework/spin-operator
docs: https://www.spinkube.dev/
description: Open source platform for efficiently running (containerless) Spin-based WebAssembly (Wasm) applications on Kubernetes.

container2wasm

类型: 新增项目

name: container2wasm
stage: sandbox
github: https://github.com/container2wasm/container2wasm
docs: https://github.com/container2wasm/container2wasm
description: A tool to run containers on Wasm-enabled environments.

KAITO

类型: 新增项目

name: KAITO
stage: sandbox
github: https://github.com/kaito-project/kaito
docs: https://kaito-project.netlify.app/
description: Kubernetes AI Toolchain Operator (KAITO) simplifies LLM inference, tuning, and RAG workloads on Kubernetes.

coredns_v1.12.4_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.12.4

coredns/coredns v1.12.4 Release Notes

Published at: 2025-09-09T00:12:27Z

This release improves stability and security, fixing context propagation in DoH, label offset handling in the file plugin, and connection leaks in gRPC and transfer. It also adds support for the prefer option in loadbalance, introduces timeouts to the metrics server, and fixes several security vulnerabilities (see details in related security advisories).

Brought to You By

Archy Ilya Kulakov Olli Janatuinen Qasim Sarfraz Syed Azeez Ville Vesilehto wencyu Yong Tang

Noteworthy Changes

core: Improve caddy.GracefulServer conformance checks (https://github.com/coredns/coredns/pull/7416)
core: Propagate HTTP request context in DoH (https://github.com/coredns/coredns/pull/7491)
plugin/file: Fix label offset problem in ClosestEncloser (https://github.com/coredns/coredns/pull/7465)
plugin/grpc: Check proxy list length in policies (https://github.com/coredns/coredns/pull/7512)
plugin/grpc: Fix span leak and deadline on error attempt (https://github.com/coredns/coredns/pull/7487)
plugin/header: Remove deprecated syntax (https://github.com/coredns/coredns/pull/7436)
plugin/loadbalance: Support prefer option (https://github.com/coredns/coredns/pull/7433)
plugin/metrics: Add timeouts to metrics HTTP server (https://github.com/coredns/coredns/pull/7469)
plugin/trace: Migrate dd-trace-go v1 to v2 (https://github.com/coredns/coredns/pull/7466)
plugin/transfer: Fix goroutine leak on axfr err (https://github.com/coredns/coredns/pull/7516)

kubernetes_v1.31.12_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.31.12

kubernetes/kubernetes v1.31.12 Release Notes

Published at: 2025-08-13T19:50:00Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes_v1.31.13_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.31.13

kubernetes/kubernetes v1.31.13 Release Notes

Published at: 2025-09-10T04:03:49Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes_v1.32.8_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.32.8

kubernetes/kubernetes v1.32.8 Release Notes

Published at: 2025-08-13T19:45:14Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes_v1.32.9_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.32.9

kubernetes/kubernetes v1.32.9 Release Notes

Published at: 2025-09-10T00:19:23Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes_v1.33.4_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.33.4

kubernetes/kubernetes v1.33.4 Release Notes

Published at: 2025-08-13T19:46:26Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes_v1.33.5_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.33.5

kubernetes/kubernetes v1.33.5 Release Notes

Published at: 2025-09-10T01:38:50Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes_v1.34.0_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.34.0

kubernetes/kubernetes v1.34.0 Release Notes

Published at: 2025-08-27T17:19:17Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes_v1.34.1_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.34.1

kubernetes/kubernetes v1.34.1 Release Notes

Published at: 2025-09-10T03:28:09Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

IOS自签名应用安装指南

Sun, 07 Sep 2025 22:08:11 +0800

介绍

苹果手机安装应用正常来说有以下方式:

app store 下载: 需要开发者上架(需要开发者掏钱并且通过苹果的审核)
testflight 下载: (需要开发者掏钱并且通过苹果的审核,但比app store 审核宽松)

非正常的:

开发者模式: 只要有apple 账户就可以
越狱: 一般都不考虑

这里将的是开发者模式

开发者模式

环境准备

MacOS 升级到最新版，并下载Xcode
用USB连接电脑和手机。解锁手机。
打开 XCode 应用, 从顶部菜单项选择 “Window” -> “Devices and Simulators”
这里一般就有自己手机了，如果没有，可以按下面的截图自己加一下
第一次连接，一般会提示这个信息，让你的手机开启开发者模式，根据提示操作即可
比如我的手机就是"设置"->“隐私与安装”,然后划到最下面有个"",选择打开后会提示重启手机,然后会再让你确认一次,然后就好了

下载app

这里就分两种情况:

代码构建方式

如果你是基于代码构建(比如开源下载的代码或自己写的代码),打开项目,然后选择设备,点击运行,就会自动构建和下载到手机了(测试发现,在同一个WIFI网络内,后续的升级不用USB线连接电脑也可以)
第一次安装会提示"不受信任的开发者", 然后打开"设置"->“通用”->“VPN与设备管理"选择对应的证书点击"信任 xxx”,然后再重新打开app或者重新在Xcode里面点击运行即可

ipa 文件方式

如有你已经构建了带签名的 ipa 包,可以打开 XCode 应用, 从顶部菜单项选择"Window" -> “Devices and Simulators”,选择自己手机的
一样会提示签名问题,参考上面的操作即可另: 如果ipa 没有签名,修改ipa的签名见(未测试): https://www.reddit.com/r/jailbreak/comments/ecojvu/help_how_to_fix_this_when_trying_to_installsign/

博客编写说明

Sun, 07 Sep 2025 08:26:52 +0800

针对非关键事情,特别是琐碎杂事,我的记性一直不好😄 为了避免自己遗忘如何维护本博客,记录下博客的关键信息

初始化

参考: https://imfing.github.io/hextra/zh-cn/docs/getting-started/

hugo new site zzg-blog --format=yaml
cd zzg-blog
# 下载主题
hugo mod get github.com/imfing/hextra
# 配置自动发布
mkdir -p .github/workflows
curl -o .github/workflows/pages2.yaml https://raw.githubusercontent.com/imfing/hextra-starter-template/refs/heads/main/.github/workflows/pages.yaml
cat > hugo.yaml <<-EOF
module:
imports:
- path: github.com/imfing/hextra
run: |
hugo \
--gc --minify \
--baseURL "https://zgfh.github.io/"
EOF
hugo new content/_index.md
hugo new content/docs/_index.md
hugo server --buildDrafts --disableFastRender

提交

# 这里手动配置下
vi .gitignore
# 修改 title, 导航 等
vi hugo.yaml
git init
git add .
git remote add origin git@github.com:zgfh/zgfh.github.io.git
git push -u origin main

写博客

运行服务,可以试试看到效果

hugo server --buildDrafts --disableFastRender

增加 docs 文章

hugo new content/docs/xx/xxx.md

markdown 格式: https://imfing.github.io/hextra/zh-cn/docs/guide/markdown/

go_start.md

Mon, 08 Jan 2018 22:08:09 +0000

环境准备教程： https://www.jianshu.com/p/eb35a47a157e 测试用例：https://github.com/astaxie/build-web-application-with-golang/blob/master/zh/11.3.md go init: http://blog.csdn.net/rznice/article/details/18987047

争光的技术栈 – Docs

Redis高可用部署指南

高可用方案概览

详细配置指南

1. 单机版配置

AOF持久化配置

RDB快照配置

混合持久化配置（推荐）

2. 主从复制配置

主节点配置（redis-master.conf）

从节点配置（redis-slave.conf）

启动主从节点

3. 哨兵模式配置

哨兵配置文件（sentinel.conf）

启动哨兵集群

Java客户端连接示例

4. 集群模式配置

集群节点配置（redis-cluster.conf）

创建集群

性能优化建议

1. 内存优化

监控与运维

1. 监控指标

关键性能指标

2. 故障处理

常见故障处理流程

主节点宕机

数据恢复

集群节点故障

3. 参考资料

Release Note Changelog 20260712_092041

Release Note Changelog (20260712_092041)

Release Note Changelog 20260701_082402

Release Note Changelog (20260701_082402)

Release Note Changelog 20260629_082258

Release Note Changelog (20260629_082258)

Release Note Changelog 20260625_082401

Release Note Changelog (20260625_082401)

Release Note Changelog 20260624_081915

Release Note Changelog (20260624_081915)

Cilium 启动后其他节点无法访问k8s的apiserver排除记录

避坑指南：Oracle Cloud (OCI) + Ubuntu 24.04 搭建 Kubernetes 踩坑 Cilium 网络死锁全记录

🛑 坑一：Oracle 官方镜像自带的 iptables 拦截

1. 现象描述

2. 根因剖析

3. 彻底解决方案

🌪️ 坑二：Cilium 默认网段与主机网段重叠，引发 eBPF 内部“打水漂”死循环

1. 现象描述

2. 排查与抓包取证

3. 冲突根因：Cilium CLI 默认网段（10.0.0.0/8）污染

⚙️ 彻底解决：无残留精准网段重装方案

第一步：卸载旧版并拔除 CRD 历史残留

第二步：使用精准的 IPAM 层级变量重新安装

第三步：驱逐业务 Pod 刷新网络

🏁 见证奇迹的时刻

Gpu驱动安装

linux 驱动（cuda 安装）

查找自己的gpu 对应的驱动版本和安装

容器驱动(NVIDIA Container Toolkit)

k8s 驱动(gpu operator)

Cilium入门

路由模式

网络模式

可观测

替换 kube-proxy

替换 ingress

替换 istio?

坑

参考:

Esp_小智学习

ESP-IDF 命令行工具 (`idf.py`) 使用指南

ESP-IDF 命令行工具 (idf.py) 使用指南

1. 常用核心命令

项目配置与构建

烧录与调试

2. 配置文件层级关系

3. 命令辨析：build vs reconfigure

4. 编译日志与常见问题排查

4.1 识别编译状态

4.2 常见警告：宏定义重定义

ESP-IDF 命令行工具 (`idf.py`) 使用指南