244.0.0/16" accept' # firewall-cmd --run�me-to-permanent # firewall-cmd --list-all ★如果有硬件交换机做ACL或基于云的安全组做访问控制，则可关闭服务器上的 防火墙软件 ⑨加载ipvs模块 # cat > /etc/modules-load.d/k8s-ipvs.conf <cd /etc/yum.repos.d/ # wget h�ps://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo #aliyun的源 ： h�ps://docs.�gera.io/calico/latest/ge�ng- started/kubernetes/quickstart # mkdir ~/calico # cd ~/calico # wget h�ps://raw.githubusercontent.com/projectcalico/calico/v3.26.1/manifests/�gera-

DEPLOYMENT PIPELINE i. CD pipelines represent a new attack surface. If not properly secured, credentials could be compromised or malicious code & changes injected. 1. Harden CI/CD servers and ensure they calls from certain types of test code) 4. Ensure every CI process is in an isolated container 5. Make the version control credentials of the CI system read-only 3. Ch. 23 – Protecting the Deployment

due to integrating late in the lifecycle. Downward spiral of pain b. HP LaserJet Firmware –i. Before CI: 2 releases per year. 5% of effort supporting new features, 20% on detailed planning, 25% on porting branches, 10% integrating, 15% manual testing. ii. Implemented Trunk-based development & CI iii. After CI: 40% effort on new features, 40% decrease in development costs, 140% increase in programs under dependency improvements often provide high-payoffs d. ADOPT TRUNK-BASED DEVELOPMENT PRACTICES i. CI and Trunk-based development (TBD) are countermeasures to large batch size ii. TBD enables: 1. Frequent

#查看全局设置 ★本地设置 针 对 单 一 项 目 的 设 置 ， 使 用 --local 参 数 ， 本 地 设 置 信 息 保 存 在 项 目 目 录/.git/config文件里 # cd 项目目录 # git init #初始化仓库，将在当前路径下生成.git子目录，子目录里有 此git仓库的相关信息 # git config --local 0以前的默认配置项是matching） matching 推送本地和远程都存在的同名分支 ★仓库操作 # mkdir ~/testgit #创建项目目录 # cd ~/testgit # git init #初始化仓库，将在当前路径下生成.git子目录，子目录里 有此git仓库的相关信息，初始化后要设置当前工作的用户名等相关信息，否则 h�ps://gitlab.cof-lee.com/cof/pro-1.git #克隆远程仓库到本地，默认 克隆的是远程的默认分支，本例中远程仓库默认分支为main（克隆后会自动在 当前目录下生成项目目录） # cd pro-1/ #进入克隆后的项目目录 # git remote -v #直接克隆的话，默认将远程仓库映射到本地，别

monitoring 1. Create telemetry in application & environments (to include production, pre-production, and CD pipeline) iii. Ian Malpass, Etsy – “If Engineering at Etsy has a religion, it’s the Church of Graphs identify opportunity costs. d. INTEGRATE A/B TESTING INTO OUR RELEASE i. A/B testing requires fast CD to support ii. Use feature toggles to control experiments, cohort creation, etc. iii. Use telemetry

Requirements Definition Packages (RDPs) to capture a subset of the IS ICD scope and/or Capability Drop (CD) documents for smaller items such as applications o Replace comprehensive Preliminary Design Reviews

com/redis/redis/archive/7.0.12.tar.gz # yum install gcc tcl make # tar -xvf redis-6.2.13.tar.gz # cd redis-6.2.13 # make # make install #默认安装路径 /usr/local/bin/ ★也可指定安装目录，如下操作：

gdbm-devel xz-devel libpcap-devel db4-devel # tar -xvf Python-3.x.x.tgz #解压源码包 # cd Python-3.x.x #进入解压目录 # ./configure prefix=/usr/local/python3.x.x 这样就成了，在源程序目录下生成一个名为dist的子目录，里面有生成 的安装包 压缩包内容： ★pyinstaller打包为.exe程序 # pip3 install pyinstaller cmd> cd 项目名称\venv\Scripts> > pyinstaller.exe ..\..\test.py -F --hidden-import ..\..\cofable.py -i