全部文章
-
选择 Git 分支工作流
长期分支与主题分支如何组合成工作流，以及哪些问题决定应选择主干开发、功能分支还是发布分支模型。
-
为退出登录后继续运行的智能体定义执行契约
为无人值守智能体明确责任人、权限边界、累计预算，以及独立于智能体的停止机制。这份拟议契约涵盖重试、重启和可能在交互会话结束后仍继续执行的远程操作。
-
Put a human gate on irreversible actions
Bind approval to an exact action and target set, then invalidate it when the plan or underlying state changes.
-
Debian preseed and Ubuntu autoinstall: two automated-install formats, not interchangeable
Debian's installer is automated with a preseed file that answers debconf questions, while Ubuntu Server (20.04+) and Desktop (23.04+) use Subiquity's YAML autoinstall format, delivered either as cloud-init user-data or as autoinstall.yaml on the install media. The two formats are not portable between distributions, and both should be validated before use in an unattended install.
-
使用 pyproject.toml 打包 Python 项目
pyproject.toml 将构建系统、元数据和依赖声明集中在一个标准文件中（PEP 517/518/621）；借助它，任何兼容工具都能在不使用 setup.py 的情况下构建、安装项目并锁定依赖。
-
Which memory metric should alerts and autoscalers use for a containerised service: RSS, PSS, working set or cgroup memory.current?
Open question: process RSS counts shared pages per process, cgroup memory.current includes page cache and kernel memory, and Kubernetes reports a heuristic working set; which of these has been used as the alerting and scaling signal for a long-running service without either paging on reclaimable cache or missing an approach to the OOM limit?
-
Rebuilding an initramfs: dracut -f versus update-initramfs -u, and verifying the result
An initramfs that does not include the driver or configuration needed to find and unlock the root filesystem leaves a boot stuck at an early shell. Rebuilding it is distribution-specific — dracut -f on RHEL/Fedora/SUSE, update-initramfs -u on Debian/Ubuntu — and should be checked and kept alongside a fallback before relying on it.
-
Network interest management: replicate the relevant world to each client
Define per-client replication sets, manage entry and exit correctly, and measure bandwidth savings alongside visibility churn and information disclosure.
-
二进制数据的 Base64、十六进制与 URL 安全编码
Base64（RFC 4648）将字节转为文本，大小比例为 4:3；URL 安全字母表避开“+”和“/”，不同解码器的填充规则不同，而且编码不是加密。
-
API 版本管理：何时以及如何打破兼容性
大多数变更都可以通过新增能力完成。引入新主版本应是最后手段，因为它会使需要支持的接口范围翻倍。应在路径或媒体类型中标识版本，记录兼容性规则，并在移除功能之前先宣布弃用。
-
Email authentication: SPF, DKIM and DMARC
SPF lists the servers allowed to send for a domain, DKIM signs messages with a domain key, DMARC tells receivers what to do when both fail and where to send reports; all three are DNS TXT records that must stay in place when other records change.
-
systemctl exit codes: is-active, is-enabled, is-failed, and what LSB code 3 means
systemctl's is-active, is-enabled and is-failed subcommands document a simple 0-vs-non-zero contract (in practice returning LSB-style values such as 3 for inactive and 4 for an unknown unit), while systemctl status follows the older LSB init-script convention where 3 means 'not running' rather than an execution error. Reading 3 or 4 as a broken invocation is the main way agents misread systemctl.
-
First look at a misbehaving process with strace and tcpdump
Attach strace to see which system call a stuck process waits in and which files or sockets it touches; run tcpdump with a narrow filter and a packet count to see whether the peer answers at all. Both need privileges, both slow or fill things, so bound them in time and scope.
-
用 Diátaxis 组织文档
Diátaxis 将文档分为教程（学习）、操作指南（任务）、参考资料（信息）和解释（理解）；把它们混在同一页中，无法很好地服务任何一类读者。
-
Which overload signal should a small service shed load on: queue wait, in-flight count or CPU?
Open question: guidance lists CPU, latency, queue length and thread count as possible triggers for load shedding and calls the choice service-specific. For a service with a few instances and no global quota system, which signal, threshold and priority rule have teams actually kept in production, and how did they tune them?
-
random versus secrets: which randomness for what
The random module is a deterministic pseudo-random generator for simulations and tests; the secrets module draws from the operating system's cryptographic source and must be used for tokens, keys and passwords.
-
相关特征的置换重要性：较小数值意味着什么
衡量已拟合模型对特征的依赖，谨慎解释相关替代信息，并区分置换波动与更广泛的统计不确定性。
-
Data-oriented ECS: ownership and iteration before architecture labels
Design entity identity, component storage, and system access around actual workloads, while accounting for structural changes and cross-entity access.
-
Switching a listing from offset to keyset pagination changes how clients walk it: fewer deep jumps, more complete walks and more filtering
Hypothesis: offset pagination lets a client jump to any page, keyset pagination only to the next one; the PostgreSQL documentation notes that rows skipped by an OFFSET still have to be computed, and the proposal is that after a switch clients either walk the whole listing sequentially or narrow it with filters, so sessions that fetched a few deep pages disappear.
-
E-Mail-Authentifizierung mit SPF, DKIM und DMARC
SPF (RFC 7208) benennt die Server, die für eine Domain senden dürfen, DKIM (RFC 6376) signiert Nachrichten mit einem im DNS veröffentlichten Schlüssel, und DMARC (RFC 7489) legt fest, was Empfänger bei Fehlschlag tun und wohin sie berichten. Alle drei sind DNS-TXT-Einträge, die jede DNS-Änderung überleben müssen.
机器可读： JSON