via https://x.com/levelsio/status/1960409975655694546
service monitor
via https://x.com/levelsio/status/1960409975655694546
service monitor
Only by unblinding the returned signed blinded data, the signature can be extracted.
only those who can unblind the data can get the sig from coordinator?
nice guaranty, but why?
最简单的,通过公钥加密就能实现这一点,coordinator 将 sig 使用 user 的公钥加密,这样,只有拥有私钥的人才能获得 sig,而这个私钥也用于 data 的 blind 过程
submits a to-be-funded address alongside the coordinator's signature and the unblinded ticket.
这一步不会暴露 A 地址么?
根据 blind signature 的原理,不会,因为这一步提交的是信件的内容,而前面提交的是信封✉️,两者在外部人员看来,无法建立联系
nodejs cmd line
```
ethers.utils.RLP.encode(["0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045", ethers.utils.stripZeros(ethers.utils.arrayify(0x0)) ]) '0xd694d8da6bf26964af9d7eed9e03e53415d37aa9604580'
✗ cast keccak 0xd694d8da6bf26964af9d7eed9e03e53415d37aa9604580 0xabb18b93dff3ee19c50127123e4ea2156166390f880071d94458efb098473311 ```
0xabb18b93dff3ee19c50127123e4ea2156166390f880071d94458efb098473311
An Application Binary Interface (ABI) is a collection of Fragments which specify how to interact with various components of a Contract.
difference btw. ABI & Fragments & Interface ?
ABI is a collection of Fragments
and fragment is?<br /> fragment is a piece of definition of function/event/error/constructor
and fragment vs interface?<br /> interface is a collection of Fragments<br /> interface is ABI
``` const ABI = [ // Constructor "constructor(address ens)",
// Constant functions (pure or view) "function balanceOf(address owner) view returns (uint)",
// State-mutating functions (payable or non-payable) "function mint(uint amount) payable", "function transfer(address to, uint amount) returns (bool)",
// Events "event Transfer(address indexed from, address indexed to, uint amount)",
// Errors "error InsufficientFunds(address from, uint balance)", ] ```
AbiCoder: encode/decode btw. types and binary data
Most developers will never need to use this class directly, since the Interface class greatly simplifies these operations.
AbiCoder vs Interface
difference?
validium
After the verification passes, the batch of transactions is considered final like any other Ethereum transaction
actually https://hypothes.is/a/DsLSWgmVEe6bEJM6fFGNwA
but showed up here
入门零知识需要的预备知识
zkp 学习班
The state in Ethereum essentially consists of a key-value map, where the keys are addresses and the values are account declarations, listing the balance, nonce, code and storage for each account (where the storage is itself a tree).
state in eth: a k-v map
via https://stackoverflow.blog/2021/04/23/podcast-332-non-fungible-talking/?cb=1
check if devlop on Ethereum still sucks
Fork Uniswap & Create Your Own Sushiswap
evm_mine
await network.provider.send("evm_mine")
hardhat mining timestamp
formatEther
ethers.utils.formatEther(await vault.totalSupply())
'53.670765503837765998'
IRC client
deposit LP token to Bunny's VaultFlipToCake
add Liquidity to USDT-BUSD pool at PancakeSwap
uPic upload pic
a.addUint(b); meaning a is passed automatically as first argument to the library function.
using count for uint;
a.addUint(b)
// equal
count.addUint(a, b)
看起来 using for
就是个语法糖🍬
The using A for B; directive means we attach library functions( from the library A to any type B). When this happens, these functions will receive the object they are called on as their first parameter
using A for typeB;
typeB.fooFunc(1) => A.fooFunc(typeB, 1)
then the library doesn’t need to be deployed
?
不部署 library 的代码从哪儿来?
Function Types
via https://medium.com/coinmonks/all-you-should-know-about-libraries-in-solidity-dd8bc953eae7
If a smart contract is consuming a library which have only internal functions than EVM simply embeds library into the contract.
? 没看懂
the famous gas fee problem
still not read yet
A records
对于普通的 Service, A 记录对应的形式是 svc-name.namesapce.svc.cluster-domain.example
, 指向 service 的 cluster ip
headless service 没有 cluster ip,指向的直接是 service 匡选的 pods 对应的 IPs
svc.cluster-domain.example
是什么东西?
这个是 DNS search list
seems a interesting talk on k8s
听了一半,这里的 Builders and Operators 指的是运维而非 k8s controller 里的 operator,以后有机会再看看吧
配合自己用 kubeadm 部署一个 cluster 可能不错
via https://news.ycombinator.com/item?id=25640976
LOL, my tag makes me laugh
isCA: false
certificate as CA?
啥意思,证书可以作为 CA 去签其他证书?
CA 本质上就是一个证书(包含一对公私钥),公钥用来表示自己,私钥用来签名
a book on Golang
via Aladdin, when talking about Kalm potential user
Creating a Single Post Page
todo, make this link to single post work
serve_from_sub_path
example config: https://grafana.com/tutorials/run-grafana-behind-a-proxy/#1
database
grafana data 持久化
配置 grafana sub path
参考
Understand how CMD and ENTRYPOINT interact
CMD v.s ENTRYPOINT
via 磊哥
via Mattermost
open source slack
via 磊哥
open source slack
This will make GitOps more natural as data sources and dashboards can be defined via files that can be version controlled. We hope to extend this system to later add support for users, orgs and alerts as well.
support:
not support yet:
labelmap: Match regex against all label names. Then copy the values of the matching labels to label names given by replacement with match group references (${1}, ${2}, …) in replacement substituted by their value.
- action: labelmap
regex: __meta_kubernetes_service_label_(.+)
// all __meta_kubernetes_service_label_(.+) will be changed to the (.+)
// e.g.
// __meta_kubernetes_service_label_app='armada-api'
// to
// app='armada-api'
from https://gist.github.com/reachlin/a98b90afcbff4604c90c183a0169474f#file-prometheus-yml-L43-L46
role types
roles types for kubernetes_sd_config
:
labelmap
nice example on how labelmap
in relabel_configs
works
nice workout site
Auth Proxy Authentication
seems related to Kalm integrating PLG (Promtail Loki Grafana)
might worth reading for loki multi-tenancy
Grafana Loki
energetic intro to Grafana Loki
a discussion on abandon multi-org in Grafana
see it again via https://twitter.com/patrickc/status/1351650517869465601
multi-tenant log aggregation system
nice!
MARK
a story for production Positioning?
via https://framagit.org/tom79/fedilab
this is a site for what?
eth
Finally, to jump up to a full blown audit node, we recommend the following specs:A solid state drive (SSD) of 8 TBAt least 32 GB of RAMIntel i7 or equivalent
8TB 的 SSD,有点儿夸张。。。
a interesting service for ETH
后半段没看懂,dispatch not only object, but also func
下面是它的源码
天书
via http://www.ruanyifeng.com/blog/2016/09/redux_tutorial_part_one_basic_usages.html
不错
好听
这套视频不错啊
肌肉 放松
via david
有意思的问题
startup class
combineReducer的简单实现
不明觉厉
dispatch({});
这行调用是干啥的?
完成了 MAIN CONCEPTS
via our kalm SaaS project
好文章
Tim Roughgarden 对 EIP-1559 的经济分析视频
surprising PDF
MARK 19:21
MARK 19:21
MARK
精准扶贫
陈文非
via B站 2020 跨年晚会
kubevela, ali, kalm
kubevela, ali, kalm
kubevela, ali, kalm
这个时序图的工具貌似也不错
KubeSail.com can also forward kube-api and Ingress traffic to your cluster! This allows you to host internet-facing applications on your cluster, even if it does not have a reliable static IP address, and without having to forward ports. HTTPS traffic is kept secure and encrypted from the internet all the way to your cluster's applications - it's never decrypted by KubeSail (or the KubeSail agent).
怎么做到的
哈哈哈,就从评价和标记都没了这点,就知道这部电影可以一看
牛逼 airdrop
被人开心使用的 SaaS
不错的自由泳总述
有意思 老照片修复
via bfd-engine
牛逼 有意思
p.eft is the effect for a policy, it can be allow or deny
eft == effect
骚气的简写,给跪
粗略过了一遍,基本没懂,还得再学习...
设置 networkservice DHCP
DHCP
sudo networksetup -setdhcp Wi-Fi
networksetup -setdnsservers Wi-Fi 192.168.1.1
Koolshare
networksetup -setmanual Wi-Fi 192.168.1.234 255.255
.255.0 192.168.1.233
networksetup -setdnsservers Wi-Fi 192.168.1.233
You can change default privileges only for objects that will be created by yourself or by roles that you are a member of.
没看懂但是和我们这个错误貌似相关
ALTER DEFAULT PRIVILEGES FOR ROLE bfd IN SCHEMA public REVOKE ALL ON TABLES FROM bfd;
# ERROR: must be member of role "bfd"
via PGraham
有点儿意思
蠢驴不蠢,精明得很
gsutil cp gs://ddex-db-export/bfd.sql /mnt/disks/tmp-for-bucket/
deal with google bucket using: gsutil
Cloud Storage FUSE
mount bucket to vm
via https://www.youtube.com/watch?v=rI7GRUhWtuI&t=62s
A Promised Land
生财有术
生财有术
思路不错
Sometimes, applications are temporarily unable to serve traffic. For example, an application might need to load large data or configuration files during startup, or depend on external services after startup. In such cases, you don't want to kill the application, but you don't want to send it requests either. Kubernetes provides readiness probes to detect and mitigate these situations. A pod with containers reporting that they are not ready does not receive traffic through Kubernetes Services.
alive but not ready for requests
All DNS servers fall into one of four categories: Recursive resolvers, root nameservers, TLD nameservers, and authoritative nameservers.
4 types of DNS Server:
start of authority
SOA = Start Of Authority
Domain Information Groper
DIG: Domain Info Groper
time-to-live (TTL)
TTL for cache
the .com Top-Level Domain (TLD)
TLD: Top Level Domain
recursive resolver
recursive resolver, 这是个什么鬼?
The authoritative name servers that serve the DNS root zone, commonly known as the “root servers”, are a network of hundreds of servers in many countries around the world. They are configured in the DNS root zone as 13 named authorities
13 个 root servers
competitor of Istio?
DeferredDiscoveryRESTMapper
There are multiple different implementations of the RESTMapper interface. The most important one for client applications is the discovery-based DeferredDiscoveryRESTMapper in the package k8s.io/client-go/restmapper: it uses discovery information from the Kubernetes API server to dynamically build up the REST mapping. It will also work with non-core resources like custom resources.
From: programming kubernetes
有点儿意思
v2ray config
主要是其中分别检查各个部分是否正确,给了我debug的思路。。。
这个牛逼,有科幻的意思了
cool coding site
probers point to a new endpoint at port 15020, this is expected. As the name indicates, "prober rewrites" means the actual podspec container prober configuration is configured to different path and port.
Istio re-write probe port to 15020
doorDash CTO
Why Zapier has always been 100% remote
gcloud config set xxx yyy
controller-runtime is doing this
not sure how this works but yes, it works
price oracle
intro of PoS
and may not even exist.
?
intro of ETH2
Sharding the network in a proof-of-work system would simply lower the power needed to compromise a portion of the network
如果是挖矿的模式下(PoW),多条链的 sharding 模式意味着算力的分散,51% 攻击某条链的成本更低了
and more nodes doesn't mean increased % returns
?
Crosslinks
?
After each epoch, the committee is disbanded and reformed with different, random participants.
?
seems a good place to start learning of PoS
The Eth2 upgrades
三步走:
How the upgrades fit together
这个图不错啊
beacon chain 和 mainnet 现在以及将来的关系非常直观
ETH2 home page
不错的一个 eth2 扫盲科普
sharding
But it won't be like the Ethereum mainnet of today. It can't handle accounts or smart contracts.
?
原文: A Proof of Stake Design Philosophy
https://medium.com/@VitalikButerin/a-proof-of-stake-design-philosophy-506585978d51
Vitalik on PoS
科学上网
不错的思路,点子💡 绞肉机,meat grinder
一个胶水项目,为 UnifFi 自动部署 Cloud 版本
部署的这个程序是官方提供的,这个项目其实就是将起VPS,和安装自动化了
还是非常有启发的
No Surprise, SNS
lsof -i :80
lsof
rocks
coding style
John Carmack on coding style
seems interesting
API Machinery SIG
nice talks, especially from Daniel Smith
The Envoy proxy uses 0.35 vCPU and 40 MB memory per 1000 requests per second going through the proxy.
too good to be true?
In a large namespace, the proxy consumes approximately 50 MB of memory.
in our setup, istio memory limit 64Mi will cause:
command 'pilot-agent wait' exited with 137
seems SIGKILLED by out of ram?
todo 20201130
just objects, so you can pass them as props like any other data
这里并没有用到魔法,left 和 right 都是普通的 properties,只不过赋的值是 React Element
SplitPane 相当于是一个什么都能装的容器,放什么进来,就展示什么
pass arbitrary children
下面这段代码的重点是 FancyBorder 这个 Component 里面,放入了任意内容,这个之前是没见到过的
<FancyBorder color="blue">
<h1 className="Dialog-title">
Welcome
</h1>
<p className="Dialog-message">
Thank you for visiting our spacecraft!
</p>
</FancyBorder>
via https://reactjs.org/docs/forms.html#alternatives-to-controlled-components
这诗写的也太好了吧
青山一道同云雨,明月何曾是两乡