💡 他山石

Upgrade Your SSH Key to Ed25519：为何应当使用 Ed25519 类型的 SSH 密钥：EdDSA 使用 Twisted Edwards 曲线实现。与 DSA 和 ECDSA 相比具有更好的安全性和更快的性能。RSA 虽然使用最广，但比 Ed25519 更慢，且小于 2048 位长不安全。

Upgrade Your SSH Key to Ed25519

If you’re a DevOps engineer or a web developer, there’s a good chance that you’re already familiar and using the SSH key authentication on a daily basis. Whether it’s for logging into the remote…

Risan Bagja Pradanarisan

The Life of a Data Byte：一字节数据的生命旅程，非常详细的介绍了存储设备的发展历史。

The Life of a Data Byte

A trip through time of various storage technologies.

Ramblings from Jessie

Attack matrix for Kubernetes：针对 Kubernetes 的攻击矩阵，从初始访问、执行、持久化、提权等方面描述了 Kubernetes 的安全挑战。

Attack matrix for Kubernetes

While Kubernetes has many advantages, it also brings new security challenges.

Yossi Weizman Security Research Software Engineer, Azure Security Center, ILDCMicrosoft Security

🔧 百宝箱

buku：功能强大的书签管理器，包括如下特色功能：自动从浏览器导入书签、自动抓取标题和描述、可使用喜欢的编辑器编辑和更新书签、具有多种搜索选项，包括正则表达式和深度扫描、从 Wayback Machine 查询快照等。我将它整合到我的 Read It Later 系统中，用起来不错。

jarun/buku

:bookmark: Browser-independent bookmark manager. Contribute to jarun/buku development by creating an account on GitHub.

jarunGitHub

filestash：基于 Web 的文件管理器，可在任意地方管理数据，支持 FTP/SFTP、WebDAV、Git、S3、Dropbox、Google Drive 等，包括灵活的分享机制，能够查看图片、播放音视频、编辑办公文档、编写笔记等等。

mickael-kerjean/filestash

🦄 A modern web client for SFTP, S3, FTP, WebDAV, Git, Minio, LDAP, CalDAV, CardDAV, Mysql, Backblaze, ... - mickael-kerjean/filestash

mickael-kerjeanGitHub

kmon：这个工具提供基于文本的界面来管理 Linux 内核模块，并监视内核活动，包括：载入、卸载及显示模块的信息，实时跟踪模块更新、硬件日志及其它内核消息。

orhun/kmon

Linux Kernel Manager and Activity Monitor 🐧💻. Contribute to orhun/kmon development by creating an account on GitHub.

orhunGitHub

organice：Org-mode 的浏览器版本，支持移动和桌面浏览器。

200ok-ch/organice

An implementation of Org mode without the dependency of Emacs - built for mobile and desktop browsers - 200ok-ch/organice

200ok-chGitHub

org-web：Org-mode 的 Web 版本，利用 React 构建，为移动设备进行了优化，支持 Dropbox 和 Google Drive 同步。

DanielDe/org-web

org-mode on the web, built with React, optimized for mobile, synced with Dropbox and Google Drive - DanielDe/org-web

DanielDeGitHub

Drawpile：协同绘画程序，它允许你与其它用户实时共享画布。

drawpile/Drawpile

A collaborative drawing program. Contribute to drawpile/Drawpile development by creating an account on GitHub.

drawpileGitHub

Talkyard：组合 StackOverflow、Discourse、Slack、HackerNews/Reddit、Disqus 等主要功能的论坛软件。

debiki/talkyard

Forum software, brings together the best from StackOverflow, Discourse, Slack, Reddit, Disqus. - debiki/talkyard

debikiGitHub

📅 大事记

开源音乐播放器 Audacious 4.0 从 GTK 切换到了 Qt 5。

💡 他山石

Speeding up Linux disk encryption：尽管数据加密在现代互联网公司是必备。然而，很多公司并不加密磁盘，因为他们担心加密影响性能。本文研究了 Linux 上磁盘加密的性能，并通过改造将其提升至两倍快。

Speeding up Linux disk encryption

Encrypting data at rest is vital for Cloudflare with more than 200 data centres across the world. In this post, we will investigate the performance of disk encryption on Linux and explain how we made it at least two times faster for ourselves and our customers!

Ignat KorchaginThe Cloudflare Blog

Things you can do with a browser in 2020：在浏览器中能做的事，比较鲜为人知的特性。

luruke/browser-2020

Things you can do with a browser in 2020 ☕️. Contribute to luruke/browser-2020 development by creating an account on GitHub.

lurukeGitHub

7 Terminal Commands That Will Just Make You Smile：Linux 命令行不只严肃的工作，当然也包含能够令你一笑的有趣事物。

7 Terminal Commands That Will Just Make You Smile

Shell command is a powerful tool for improving a developer’s productivity. There are also some really funny command tools that will make you smile after a long day of work. toilet can be used to…

CodersCatBetter Programming

“Let’s use Kubernetes!” Now you have 8 problems：本文讨论了 Kubernetes 为何不适合小团队。

“Let’s use Kubernetes!” Now you have 8 problems

If you’re using Docker, the next natural step seems to be Kubernetes, aka K8s: that’s how you run things in production, right? Well, maybe. Solutions designed for 500 software engineers working on the same application are quite different than solutions for 50 software engineers. And both will be dif…

Itamar Turner-TrauringPython⇒Speed

Essential Free Software for Remote Work：本文介绍了一些可以用在远程工作中的自由软件。

Essential Free Software for Remote Work – Purism

Purism — Private and Secure Hardware, Software, and Services

Sean PackhamPurism

How FZF and ripgrep improved my workflow：利用 fzf 和 rg 来改进工作流，有一些很好的用例。

How FZF and ripgrep improved my workflow

In my never ending quest for simplicity I recently discovered FZF and ripgrep. Two command-line tools that have the potential to make every dag programming tasks easier. In this post I will explain how I use these tools to do things in a matter of keystrokes rather than having to re-google that comm…

Sidney Liebrandhttps://sidneyliebrand.io

Please don't write your documentation in Markdown：请不要使用 Markdown 编写文档，为什么？

Please don’t write your documentation in Markdown

Please don’t write your documentation in Markdown. Please. I’m begging you. Markdown is tolerable for short documentation, like a readme.md. Past that, it’s...

How to sign and distribute container images using Podman：利用 Podman 签名并分发容器镜像。

containers/libpod

libpod is a library used to create container pods. Home of Podman. - containers/libpod

containersGitHub

Highlights from Git 2.26：Git 新版 2.26 的新特性介绍。

Highlights from Git 2.26

Take a look at some of the new features in the latest Git release.

Taylor BlauThe GitHub Blog

Using Org-mode as a PostgreSQL client：将 Org-mode 作为 PostgreSQL 的客户端使用。

How you can manage the i3 window manager on multiple computers：当在多台电脑使用 i3 时，比较麻烦的是需要维护多份配置文件。本文通过编写 shell 脚本来解决这个问题，将手动维护变成自动生成。

How do Unix pipes work?：介绍管道的工作原理，包含 Python 和 Go 代码示例。

Illustrated jq tutorial：jq 用法例解。

🔧 百宝箱

hostctl：管理 /etc/hosts 的命令行工具，不仅可以对主机名分组，而且能按需启用或禁用，真专业！

guumaster/hostctl

Manage your hosts file like a pro! Contribute to guumaster/hostctl development by creating an account on GitHub.

guumasterGitHub

ffcms：使 FFmpeg 的 -filter_complex 变简单。

stryku/ffcms

FFmpeg’s `-filter_complex` made simple. Contribute to stryku/ffcms development by creating an account on GitHub.

strykuGitHub

📅 大事记

好用的开源直播软件 OBS Studio 25.0 发布，能捕获基于 Vulkan 的游戏，新的窗口捕获方法可捕获浏览器、基于浏览器的窗口、Microsoft Store (UWP) 程序，新增高级场景集导入等功能。

Open Broadcaster Software | OBS

OBS (Open Broadcaster Software) is free and open source software for video recording and live streaming. Stream to Twitch, YouTube and many other providers or record your own videos with high quality H264 / AAC encoding.

OBS

💡 他山石

How to Make Yourself Into a Learning Machine：这篇采访文给了我一些做笔记的新启发，该文描述了利用下列工具打造高效的学习系统：Readwise：自动爬 Kindle 中的高亮文本、标签、回顾，Anki：转换成 flashcard，间隔重复，Zettelkasten：导入笔记系统，处理、连接。

How to Make Yourself Into a Learning Machine

Shopify’s Director of Production Engineering explains how reading broadly helps him get to the bottom of things

Dan ShipperSuperorganizers

Adventure: source：详细讨论 Bash 中 source 的使用方法。

LinuxCommand.org: source

Learn the Linux command line

William Shotts, Jr.

在 Bash 的条件判断中为何具有 [] 和 [[]] 两种风格？[ 是 Bash 内置命令，跟 test 相似。它们分别对应 /bin/[ 和 /bin/test 命令的功能。为了向后兼容，仍然存在。[[ 是更现代的 Bash 选择，具有更好的语法。如果不在乎可移植性的话，那么 [[ 是更好的选择。

What do the two types of brackets do in Bash?

New article covering Bash scripts from ServerSuit remote Linux monitoring and management.

Barry allenServerSuit® New Way To Manage Your Linux

🔧 百宝箱

Sarasa Gothic：找一个好的中文等宽字体并不容易，但 Sarasa Gothic（更纱黑体）看起来还不错。它基于 Iosevka 和思源黑体，包含中日韩支持，免费开源，推荐。

be5invis/Sarasa-Gothic

Sarasa Gothic / 更纱黑体 / 更紗黑體 / 更紗ゴシック / 사라사 고딕. Contribute to be5invis/Sarasa-Gothic development by creating an account on GitHub.

be5invisGitHub

lazygit：这个程序为 Git 版本控制系统提供一个终端界面，比较高级的 Git 功能如 rebase、cherry-pick、合并冲突等用起来更容易了。(Linux/macOS/Windows)

jesseduffield/lazygit

simple terminal UI for git commands. Contribute to jesseduffield/lazygit development by creating an account on GitHub.

jesseduffieldGitHub

LessPass：这个程序提供一种被称为无状态的密码管理方法，它利用站点网址、账号名以及一个主密码来自动生成密码。这样，只需记住主密码即可，没有同步要求。该程序开源，可以自架，提供 Firefox/Chrome、Android、命令行等客户端。

lesspass/lesspass

:key: stateless open source password manager. Contribute to lesspass/lesspass development by creating an account on GitHub.

lesspassGitHub

Bottlerocket OS：Amazon 为了托管容器而推出的新 Linux 发行版。亮点：通过 API 配置系统、基于 partition flip 的系统升级、模型配置可通过升级自动化迁移、安全作为最高优先级。

bottlerocket-os/bottlerocket

An operating system designed for hosting containers - bottlerocket-os/bottlerocket

bottlerocket-osGitHub

Roam Research：遵循 Zettelkasten 笔记方法的在线工具。

Roam Research – A note taking tool for networked thought.

As easy to use as a word document or bulleted list, and as powerful for finding, collecting, and connecting related ideas as a graph database. Collaborate with others in real time, or store all your data locally.

Roam Research

bach.sed：利用 sed 编写的巴赫 C 大调前奏曲，挺有意思。

laserbat/bach.sed

Bach’s prelude in C major from WTC book I, written in pure sed - laserbat/bach.sed

laserbatGitHub

📅 大事记

systemd 245 正式发布，其最大的变化是增加了管理用户主目录的 systemd-homed。

systemd 245 released

Systemd 245 is out. As usual, the list of new features is long; perhaps the one that has gained the most attention is systemd-homed: A small new service systemd-homed.service has been added, that may be used to securely manage home directories with built-in encryption. The co…

LWN.net

💡 他山石

The History of the URL：这篇说 URL 历史的文章谈了与它有关的 DNS、协议、端口、查询参数、认证等各种细节，可说十分详尽了。一些冷知识：第一个 TLD 是 .arpa、xn-- 开头的域名表示已编码、URL 中的 // 来自于 Apollo 计算系统。

The History of the URL

On the 11th of January 1982 twenty-two computer scientists met to discuss an issue with ‘computer mail’ (now known as email). Attendees included the guy who would create Sun Microsystems, the guy who made Zork, the NTP guy, and the guy who convinced the government to pay for Unix.

Zack BloomThe Cloudflare Blog

Managed Kubernetes Price Comparison (2020)：托管 Kubernetes 费用比较，包括 GKE、EKS、AKS 及 DO。

Managed Kubernetes Price Comparison (2020)

TL;DR: Azure and Digital Ocean don’t charge for the compute resources used for the control plane, making AKS and DO the cheapest for running many, smaller clusters. For running fewer, larger clusters GKE is the most affordable option. Also, running on spot/preemptible/low-priority nodes or long-term…

DevOps Directive

Clear Your Terminal in Style：别具风味的终端清屏。

Clear Your Terminal in Style - Adam.

You know you wanna look :)

Adam.

What happens behind the scenes of a rootless Podman container? 对于 Podman 非 root 容器的内幕解释。

What happens behind the scenes of a rootless Podman container?

Have you ever wondered what happens behind the scenes of a rootless Podman container? Let’s walk through an example.

Matthew Heon (Red Hat)Enable Sysadmin

The growth of command line options, 1979-Present：这篇文章统计了常用命令的选项从 1979 至今的增加情况，tar 有 100 多个，ls、cp 也有几十个。发展下来感觉与 UNIX 所推崇的 KISS 出入更大了。

🔧 百宝箱

Raspberry Pi Imager：树莓派官方新发布的用于将系统镜像轻易写到 microSD 卡的工具。该工具既支持 Raspbian，也能写其它系统，可在 Linux、macOS、Windows 等系统运行。

Introducing Raspberry Pi Imager, our new imaging utility - Raspberry Pi

Flash Raspbian to your SD card with the Raspberry Pi Imager, our brand new imaging utility. Download it free today!

Gordon HollingworthRaspberry Pi

Monitoror：看起来不错的监视墙，一处之地，监视所有服务。内建支持 Jenkins、GitHub、Azure DevOps、Travis CI 等流行服务。

Monitoror — Unified monitoring wallboard

Monitoror is a wallboard monitoring app to monitor server status; monitor CI builds progress or even display critical values

Monitoror

Dangerzone：将危险的 PDF、文档、图像转换成安全的 PDF。

firstlookmedia/dangerzone

Take potentially dangerous PDFs, office documents, or images and convert them to a safe PDF - firstlookmedia/dangerzone

firstlookmediaGitHub

GuiLite：5 千行 C++ 代码，单一头文件，全平台 GUI 库。

idea4good/GuiLite

✔️The smallest header-only GUI library(5 KLOC) for all platforms - idea4good/GuiLite

idea4goodGitHub

📅 大事记

Android 史上最大的 Firefox 浏览器更新即将登场，包括浏览速度更快、预设资料保密、支持扩展、使用收藏整理标签、一键进入隐私模式、亮色和暗色主题等。

The 7 best things about the new Firefox browser for Android – The Firefox Frontier

The biggest ever update to the Firefox browser for Android is on its way later this spring with faster speeds and more privacy protections. Here’s what else you can look forward to.

The Firefox Frontier

GIMP 2.10.18 full review：一篇新近发布的 GIMP 2.10.18 的详细评测。

Coming soon: A new site for fully free collaboration：FSF（即自由软件基金会）计划在今年推出公开的代码托管及协作平台，该平台将具有合并请求、bug 跟踪以及其它常用工具。

💡 他山石

Home Lab Beginners guide – Hardware：非常详细的家用实验室硬件介绍。

Home Lab Beginners guide - Hardware

Until recently, and for well over the past decade, my wife and I have been nomads. Moving from the Caribbean to Miami, New York, Las Vegas, Vancouver, and

Hayden JamesLinux Systems Analyst Blog - haydenjames.io

Stack Overflow is leaking user emails：作者通过 Stack Overflow 默认的用户配置发现它使用了 Gravatar 服务，再通过 Gravatar 的地址进行 MD5 反推，最终解析出用户的 Email 地址。

Stack Overflow is leaking user emails

I am developing a “Google Alerts” for developers service GitSpo. I have not figured out exactly what it is, but it is growing fast and people are liking it. A big part of GitSpo is aggregating data…

Gajus KuizinasMedium

How 1500 bytes became the MTU of the internet：以太网的 MTU（最大传输单元）为什么是 1500 字节？本文对此进行了解释，其中既有历史的因素（如当时硬件的限制），也有基于效率的考量。

🔧 百宝箱

Hacker laws：这个仓库收录了对开发人员有用的常见定律、原则以及模式的解释。比如：康威定律、墨菲定律、帕累托法则、SOLID、DRY、KISS 原则等等。

dwmkerr/hacker-laws

💻📖 Laws, Theories, Principles and Patterns that developers will find useful. #hackerlaws - dwmkerr/hacker-laws

dwmkerrGitHub

Updog：非常简单且开箱即用的 Web 服务器，除了支持上传下载之外，还具有密码访问、SSL 等功能。用来搭临时 Web 服务器不错。

sc0tfree/updog

Updog is a replacement for Python’s SimpleHTTPServer. It allows uploading and downloading via HTTP/S, can set ad hoc SSL certificates and use http basic auth. - sc0tfree/updog

sc0tfreeGitHub

IRedis：基于终端的 Redis 客户端，具有代码自动补全、语法高亮、命令验证等不错的功能。

laixintao/iredis

Interactive Redis: A Terminal Client for Redis with AutoCompletion and Syntax Highlighting. - laixintao/iredis

laixintaoGitHub

xnu-qemu-arm64：该项目 fork 自官方的 QEMU 仓库，其目的是在 QEMU 上运行 iOS 操作系统。

alephsecurity/xnu-qemu-arm64

Contribute to alephsecurity/xnu-qemu-arm64 development by creating an account on GitHub.

alephsecurityGitHub