https://blog.iphpo.com/Recent content on 戲中話Hugozh-twherb09638@gmail.com (Herb)herb09638@gmail.com (Herb)Thu, 14 Nov 2019 23:50:29 +0800https://blog.iphpo.com/blog/2019/golang-%E8%A7%A3%E6%B1%BA-go-1.13-%E4%B9%8B%E5%BE%8C%E4%B8%8B%E8%BC%89%E7%A7%81%E6%9C%89%E5%80%89%E5%BA%AB%E5%B0%88%E6%A1%88%E9%8C%AF%E8%AA%A4/Thu, 14 Nov 2019 23:50:29 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2019/golang-%E8%A7%A3%E6%B1%BA-go-1.13-%E4%B9%8B%E5%BE%8C%E4%B8%8B%E8%BC%89%E7%A7%81%E6%9C%89%E5%80%89%E5%BA%AB%E5%B0%88%E6%A1%88%E9%8C%AF%E8%AA%A4/Go 1.13 之後會預設 GOPROXY 為 proxy.golang.org，導致私有專案無法被檢查checksum，然後下載失敗https://blog.iphpo.com/blog/2019/ubuntu-mysql5.7%E7%84%A1%E7%97%9B%E5%8D%87%E7%B4%9A%E5%88%B08.0/Wed, 15 May 2019 22:53:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2019/ubuntu-mysql5.7%E7%84%A1%E7%97%9B%E5%8D%87%E7%B4%9A%E5%88%B08.0/完整紀錄從Mysql 5.7 升級到 8.0 的過程https://blog.iphpo.com/blog/2019/%E5%8D%87%E7%B4%9A%E7%B7%A8%E8%AD%AF-sshd-8.0-%E4%B8%A6%E7%A7%BB%E9%99%A4%E7%89%88%E6%9C%AC%E8%B3%87%E8%A8%8A/Sun, 05 May 2019 01:00:29 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2019/%E5%8D%87%E7%B4%9A%E7%B7%A8%E8%AD%AF-sshd-8.0-%E4%B8%A6%E7%A7%BB%E9%99%A4%E7%89%88%E6%9C%AC%E8%B3%87%E8%A8%8A/自己從source編譯的好處是可以隱藏版本資訊，並能即時更新到最新版本，修復各種新發現的漏洞https://blog.iphpo.com/blog/nchan/summary/Sat, 29 Dec 2018 16:28:29 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/nchan/summary/<h1 id="summary">Summary</h1> <ul> <li>大綱</li> <li><a href="https://blog.iphpo.com/blog/2018/03/%E5%8D%B3%E6%99%82%E9%80%9A%E7%9F%A5%E7%B3%BB%E7%B5%B1%E7%B0%A1%E4%BB%8B/">即時通知系統簡介</a></li> <li><a href="https://blog.iphpo.com/blog/2018/03/nchan-%E7%89%B9%E8%89%B2/">Nchan 特色</a></li> <li><a href="https://blog.iphpo.com/blog/2018/03/%E5%AE%89%E8%A3%9Dnchan/">安裝 Nchan</a> <ul> <li>用套件管理程式安裝</li> <li><a href="https://blog.iphpo.com/blog/2018/03/nchan%E5%AE%89%E8%A3%9D-%E7%B7%A8%E8%AD%AF%E5%8E%9F%E5%A7%8B%E7%A2%BC-install-nginx-from-source/">編譯原始碼</a></li> <li><a href="https://blog.iphpo.com/blog/2018/03/%E4%BD%BF%E7%94%A8docker%E5%95%9F%E5%8B%95-install-nchan-docker/">使用 Docker 啟動</a></li> </ul> </li> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E5%9F%BA%E7%A4%8E%E8%A8%AD%E5%AE%9A-basic-setting/">基礎設定</a></li> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E5%9F%BA%E7%A4%8E%E8%A8%AD%E5%AE%9A%E5%AF%A6%E4%BD%9C/">基礎設定實作</a></li> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E9%A0%BB%E9%81%93-channel-id/">頻道 Channel ID</a></li> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E9%A0%BB%E9%81%93-group-id/">頻道 Group ID</a></li> <li><a href="https://blog.iphpo.com/blog/2018/04/%E7%99%BC%E4%BD%88%E8%80%85publisher%E8%A8%AD%E5%AE%9A/">發佈者(Publisher)設定</a></li> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%82%E9%96%B1%E8%80%85subscriber%E8%A8%AD%E5%AE%9A/">訂閱者(Subscriber)設定</a></li> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E5%90%8C%E6%99%82%E6%94%AF%E6%8F%B4%E7%99%BC%E4%BD%88%E8%88%87%E8%A8%82%E9%96%B1pubsub%E8%A8%AD%E5%AE%9A/">同時支援發佈與訂閱(PubSub)設定</a></li> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E8%88%87%E5%BE%8C%E7%AB%AF%E7%A8%8B%E5%BC%8F%E7%9A%84%E7%B5%90%E5%90%88/">Nchan 與後端程式的結合</a> <ul> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%82%E9%96%B1%E8%80%85%E4%B8%8A%E7%B7%9A%E8%88%87%E4%B8%8B%E7%B7%9A%E9%80%9A%E7%9F%A5/">訂閱者上線與下線通知</a></li> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%82%E9%96%B1%E8%88%87%E7%99%BC%E4%BD%88%E6%99%82%E7%9A%84%E9%A9%97%E8%AD%89/">訂閱與發佈時的驗證</a></li> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%8A%E6%81%AF%E8%BD%89%E7%99%BC/">訊息轉發</a></li> </ul> </li> <li>安全性設置 <ul> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E7%99%BC%E4%BD%88%E7%9A%84%E5%AE%89%E5%85%A8%E6%80%A7%E8%A8%AD%E7%BD%AE/">發佈的安全性設置</a></li> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%82%E9%96%B1%E7%9A%84%E5%AE%89%E5%85%A8%E8%A8%AD%E7%BD%AE/">訂閱的安全性設置</a></li> </ul> </li> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E5%A6%82%E4%BD%95%E6%B0%B4%E5%B9%B3%E6%93%B4%E5%B1%95%E8%88%87%E9%81%94%E5%88%B0%E9%AB%98%E5%8F%AF%E7%94%A8%E6%80%A7high-availability/">如何水平擴展與達到高可用性(HA)</a></li> </ul>https://blog.iphpo.com/blog/2018-12/%E5%88%A4%E6%96%B7%E5%85%A9%E7%B7%9A%E6%96%B7%E7%9B%B8%E4%BA%A4/Sat, 29 Dec 2018 16:28:29 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018-12/%E5%88%A4%E6%96%B7%E5%85%A9%E7%B7%9A%E6%96%B7%E7%9B%B8%E4%BA%A4/利用向量積判斷 AB 線段與 CD 線段是否相交https://blog.iphpo.com/blog/2018/04/%E5%88%A9%E7%94%A8yubikey%E7%99%BB%E5%85%A5%E9%81%A0%E7%AB%AFssh%E4%B8%BB%E6%A9%9F-yubikey-login-ssh/Sun, 29 Apr 2018 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/%E5%88%A9%E7%94%A8yubikey%E7%99%BB%E5%85%A5%E9%81%A0%E7%AB%AFssh%E4%B8%BB%E6%A9%9F-yubikey-login-ssh/<p>Yubikey 是一個硬體鎖</p> <p>可以產生金鑰並把私鑰儲存在上面</p> <p>這次就是要利用這個特性</p> <p>來登入遠端主機的SSH服務</p> <p>這樣除非拿到這個硬體裝置</p> <p>不然沒有人可以登入你的伺服器</p> <p>首先我是<a href="https://medium.com/@SSWilsonKao/%E5%A6%82%E4%BD%95%E5%9C%A8-mac-%E4%B8%8A-%E6%8A%8A-yubikey-%E8%88%87-gpg-ssh-%E6%90%AD%E9%85%8D%E5%9C%A8%E4%B8%80%E8%B5%B7-5f842d20ad6a">照著</a>這篇文章來做</p> <p>但因為在Mac上有一些變化需要更新</p> <p>所以我就整理我的步驟讓整個流程更順利些</p>https://blog.iphpo.com/blog/2018/04/nchan-%E5%A6%82%E4%BD%95%E6%B0%B4%E5%B9%B3%E6%93%B4%E5%B1%95%E8%88%87%E9%81%94%E5%88%B0%E9%AB%98%E5%8F%AF%E7%94%A8%E6%80%A7high-availability/Sun, 15 Apr 2018 12:01:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/nchan-%E5%A6%82%E4%BD%95%E6%B0%B4%E5%B9%B3%E6%93%B4%E5%B1%95%E8%88%87%E9%81%94%E5%88%B0%E9%AB%98%E5%8F%AF%E7%94%A8%E6%80%A7high-availability/<h1 id="如何水平擴展與達到高可用性high-availability">如何水平擴展與達到高可用性(High Availability)</h1> <p>Nchan可將訊息儲存在檔案、記憶體與Redis，速度最快的是儲存在記憶體裡，但如果重開機訊息就會不見，而且如果需要兩台做Load Balance，彼此之間的訊息也無法同步，很可能造成A連線上第一台，B卻往第二台發送訊息，卻永遠發送不到的狀況發生，所以要做到水平擴展，勢必要跟Redis做結合，而在Nchan要做到這件事，也相當容易。</p>https://blog.iphpo.com/blog/2018/04/nchan-%E7%99%BC%E4%BD%88%E7%9A%84%E5%AE%89%E5%85%A8%E6%80%A7%E8%A8%AD%E7%BD%AE/Sun, 15 Apr 2018 12:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/nchan-%E7%99%BC%E4%BD%88%E7%9A%84%E5%AE%89%E5%85%A8%E6%80%A7%E8%A8%AD%E7%BD%AE/<h1 id="發佈的安全性設置">發佈的安全性設置</h1> <p>官方的建議，是將發佈的端點完全隱藏，只允許local存取發佈的位置。</p>https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%82%E9%96%B1%E7%9A%84%E5%AE%89%E5%85%A8%E8%A8%AD%E7%BD%AE/Sun, 15 Apr 2018 11:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%82%E9%96%B1%E7%9A%84%E5%AE%89%E5%85%A8%E8%A8%AD%E7%BD%AE/<h1 id="訂閱的安全設置">訂閱的安全設置</h1> <p>在訂閱的安全方面，官方建議三種做法：</p> <ol> <li>產生編碼過的Channel ID</li> <li>使用<code>nchan_authorize_request</code>做驗證</li> <li>使用<code>X-Accel-Redirect</code>隱藏Channel ID</li> </ol>https://blog.iphpo.com/blog/2018/04/%E5%9C%A8centos7%E4%BF%AE%E6%94%B9%E7%94%B1systemd%E6%8E%A7%E5%88%B6%E7%9A%84service%E9%96%8B%E6%AA%94%E6%95%B8%E7%9B%AE%E9%99%90%E5%88%B6-edit-open-file-limit-on-centos7-systemd/Sun, 15 Apr 2018 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/%E5%9C%A8centos7%E4%BF%AE%E6%94%B9%E7%94%B1systemd%E6%8E%A7%E5%88%B6%E7%9A%84service%E9%96%8B%E6%AA%94%E6%95%B8%E7%9B%AE%E9%99%90%E5%88%B6-edit-open-file-limit-on-centos7-systemd/<p>今天在解決C10K問題的時候</p> <p>發現一般Linux可以在sysctl控制開檔數目</p> <p>但是在CentOS7一直被限制在1024個而已</p> <p>不管任何修改方式都一樣</p>https://blog.iphpo.com/blog/2018/04/nchan-%E8%88%87%E5%BE%8C%E7%AB%AF%E7%A8%8B%E5%BC%8F%E7%9A%84%E7%B5%90%E5%90%88/Mon, 09 Apr 2018 10:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/nchan-%E8%88%87%E5%BE%8C%E7%AB%AF%E7%A8%8B%E5%BC%8F%E7%9A%84%E7%B5%90%E5%90%88/<h1 id="nchan與後端程式的結合">Nchan與後端程式的結合</h1> <p>我之所以推薦nchan，是因為他可以與現有程式做緊密結合，包括但不限於</p> <ul> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%82%E9%96%B1%E8%80%85%E4%B8%8A%E7%B7%9A%E8%88%87%E4%B8%8B%E7%B7%9A%E9%80%9A%E7%9F%A5/">訂閱者上線與下線通知</a></li> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%82%E9%96%B1%E8%88%87%E7%99%BC%E4%BD%88%E6%99%82%E7%9A%84%E9%A9%97%E8%AD%89/">訊息轉發</a></li> <li><a href="https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%8A%E6%81%AF%E8%BD%89%E7%99%BC/">訂閱與發佈時的驗證</a></li> </ul> <p>當然還有更多的應用場景，這邊只列出我有用到的部分，其他可以參考<a href="https://nchan.io/#hooks-and-callbacks">官方網站的Hooks and Callbacks</a>章節。</p>https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%82%E9%96%B1%E8%80%85%E4%B8%8A%E7%B7%9A%E8%88%87%E4%B8%8B%E7%B7%9A%E9%80%9A%E7%9F%A5/Mon, 09 Apr 2018 09:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%82%E9%96%B1%E8%80%85%E4%B8%8A%E7%B7%9A%E8%88%87%E4%B8%8B%E7%B7%9A%E9%80%9A%E7%9F%A5/<h1 id="訂閱者上線與下線通知">訂閱者上線與下線通知</h1> <p>上線與下線，其實只是該設定的其中一種應用，要達到此種效果，使用的是nchan提供的<code>nchan_subscribe_request</code>與<code>nchan_unsubscribe_request</code>這兩個設定。</p> <p>顧名思義，就是在訂閱者訂閱時發送一個request到後端伺服器，進而達到上線追蹤的功能，但也不限定此種應用，要如何應用，全由通知的後端伺服器來決定。</p>https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%82%E9%96%B1%E8%88%87%E7%99%BC%E4%BD%88%E6%99%82%E7%9A%84%E9%A9%97%E8%AD%89/Mon, 09 Apr 2018 08:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%82%E9%96%B1%E8%88%87%E7%99%BC%E4%BD%88%E6%99%82%E7%9A%84%E9%A9%97%E8%AD%89/<h1 id="訂閱與發佈時的驗證">訂閱與發佈時的驗證</h1> <p>這是一個滿重要的應用，想像一個場景，在聊天室裡，每個人有自己的channel id，如果沒有經過身份驗證，任何一個人都可以訂閱別人的channel，代表大家的聊天訊息會被監聽，或是沒有經過驗證，就可以隨意發送訊息給任意的人，這都是很危險的情況。</p> <p>在Nchan裡它提供了<code>nchan_authorize_request</code>的設定，這不管是訂閱的路徑還是發佈的路徑都可以使用。</p>https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%8A%E6%81%AF%E8%BD%89%E7%99%BC/Mon, 09 Apr 2018 07:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%8A%E6%81%AF%E8%BD%89%E7%99%BC/<h1 id="訊息轉發">訊息轉發</h1> <p>訊息轉發可以讓後端伺服器接收傳來的訊息，可以儲存、處理甚至修改原有的訊息。</p>https://blog.iphpo.com/blog/2018/04/nchan-%E5%90%8C%E6%99%82%E6%94%AF%E6%8F%B4%E7%99%BC%E4%BD%88%E8%88%87%E8%A8%82%E9%96%B1pubsub%E8%A8%AD%E5%AE%9A/Thu, 05 Apr 2018 06:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/nchan-%E5%90%8C%E6%99%82%E6%94%AF%E6%8F%B4%E7%99%BC%E4%BD%88%E8%88%87%E8%A8%82%E9%96%B1pubsub%E8%A8%AD%E5%AE%9A/<h1 id="同時支援發佈與訂閱pubsub設定">同時支援發佈與訂閱(PubSub)設定</h1> <p>Nchan也支援同時可以訂閱與發佈的設定，這對WebSocket全雙工的通道來說，是最方便的，連上一個位置，就可以訂閱訊息也可以發送訊息到同個channel。</p>https://blog.iphpo.com/blog/2018/04/%E7%99%BC%E4%BD%88%E8%80%85publisher%E8%A8%AD%E5%AE%9A/Thu, 05 Apr 2018 05:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/%E7%99%BC%E4%BD%88%E8%80%85publisher%E8%A8%AD%E5%AE%9A/<h1 id="發佈者40publisher41設定">發佈者(Publisher)設定</h1> <p>可以從之前章節發現，要讓某個位置成為發佈的端點，只需要加入<code>nchan_publisher</code>的關鍵字，至於要發送到哪個channel則是設定<code>nchan_channel_id</code>跟<code>nchan_channel_group</code>即可。</p> <p>除了使用WebSocket發送訊息之外，Nchan還提供一般的HTTP POST方式發送訊息，以下用curl作為範例。</p> <p>假設在<code>/pub</code>位置設定了publisher</p>https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%82%E9%96%B1%E8%80%85subscriber%E8%A8%AD%E5%AE%9A/Thu, 05 Apr 2018 04:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/nchan-%E8%A8%82%E9%96%B1%E8%80%85subscriber%E8%A8%AD%E5%AE%9A/<h1 id="訂閱者40subscriber41設定">訂閱者(Subscriber)設定</h1> <p>Nchan提供多種訂閱方式，包括<a href="https://nchan.io/#websocket">WebSocket</a>、<a href="https://nchan.io/#eventsource">EventSource</a>、<a href="https://nchan.io/#long-polling">Long Poll</a>、<a href="https://nchan.io/#interval-polling">Interval-Poll</a>、<a href="https://nchan.io/#http-chunked-transfer">HTTP Chunked Transfer</a>、<a href="https://nchan.io/#http-multipart-mixed">HTTP multipart/mixed，</a>但我只有使用過WebSocket，所以會以WebSocket為主，若對其他方式有興趣的可以到<a href="https://nchan.io">nchan官方</a>網站上查看。</p> <p>經過前面幾個章節，大家一定都已經知道，要讓某個位置變成可訂閱，只需要加上<code>nchan_subscriber</code>的關鍵字</p>https://blog.iphpo.com/blog/2018/04/nchan-%E9%A0%BB%E9%81%93-channel-id/Sun, 01 Apr 2018 03:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/nchan-%E9%A0%BB%E9%81%93-channel-id/<h1 id="頻道-channel-id">頻道 Channel ID</h1> <p>經過以上實作</p> <p>可以發現channel id是nchan流通資訊的識別ID</p> <p>所以在設定channel id時就特別重要</p> <p>以下提供三種設定方式</p>https://blog.iphpo.com/blog/2018/04/nchan-%E9%A0%BB%E9%81%93-group-id/Sun, 01 Apr 2018 02:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/nchan-%E9%A0%BB%E9%81%93-group-id/<h1 id="頻道-group-id">頻道 Group ID</h1> <p>Group ID是用來輔助Channel ID的，在某些設計下，channel ID會有重複的情況，Group ID則是避免在Channel ID重複下，彼此收到同樣的訊息。</p>https://blog.iphpo.com/blog/2018/04/nchan-%E5%9F%BA%E7%A4%8E%E8%A8%AD%E5%AE%9A%E5%AF%A6%E4%BD%9C/Sun, 01 Apr 2018 01:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/nchan-%E5%9F%BA%E7%A4%8E%E8%A8%AD%E5%AE%9A%E5%AF%A6%E4%BD%9C/<h1 id="基礎設定實作">基礎設定實作</h1> <p>我們把剛剛提到的基礎設定放進nginx，並用docker跑起來實驗看看</p> <p>直接修改 nginx.vh.default.conf 並加入</p>https://blog.iphpo.com/blog/2018/04/nchan-%E5%9F%BA%E7%A4%8E%E8%A8%AD%E5%AE%9A-basic-setting/Sun, 01 Apr 2018 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/04/nchan-%E5%9F%BA%E7%A4%8E%E8%A8%AD%E5%AE%9A-basic-setting/<h1 id="基礎設定">基礎設定</h1> <p>nchan提供了pub/sub的功能，所以最主要設定也會圍繞在這兩者之上</p> <p>最基礎的設定，就是指定兩個固定位置，提供pub/sub的功能</p> <pre tabindex="0"><code>#... http { server { #... location = /sub { nchan_subscriber; nchan_channel_id $arg_id; } location = /pub { nchan_publisher; nchan_channel_id $arg_id; } } } </code></pre><p>這裡使用query string(get參數)id當作channel id</p>https://blog.iphpo.com/blog/2018/03/golang-%E7%9A%84%E8%B7%A8%E5%B9%B3%E5%8F%B0%E7%B7%A8%E8%AD%AF/Sat, 31 Mar 2018 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/03/golang-%E7%9A%84%E8%B7%A8%E5%B9%B3%E5%8F%B0%E7%B7%A8%E8%AD%AF/<p>Golang 可在任何平台上做 cross compile</p> <p>所以可以在MacOSX編譯出Linux的可執行檔</p> <p>只要給定編譯平台的環境變數</p> <p>go build時就會依照環境變數</p> <p>編譯出相對應的平台</p>https://blog.iphpo.com/blog/2018/03/%E4%BD%BF%E7%94%A8docker%E5%95%9F%E5%8B%95-install-nchan-docker/Mon, 26 Mar 2018 05:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/03/%E4%BD%BF%E7%94%A8docker%E5%95%9F%E5%8B%95-install-nchan-docker/<h1 id="使用docker啟動">使用Docker啟動</h1> <h2 id="使用別人製作好的image">使用別人製作好的image</h2> <p>可以使用我製作好的docker image</p> <pre><code>docker run -p 80:80 herb123456/nchan-alpine </code></pre> <p>Google後有其他人也有製作nchan的docker image</p> <pre><code>docker run -p 80:80 meroje/alpine-nchan </code></pre> <p>只是版本還停留在1.1.5</p> <h2 id="從nginx官方docker-file修改40建議41">從nginx官方Docker file修改(建議)</h2> <p>自己修改dockerfile不僅自由度高，掌握度也比較高，而且也不難，讓我們先看看nginx官方dockerfile長怎樣吧。</p>https://blog.iphpo.com/blog/2018/03/nchan%E5%AE%89%E8%A3%9D-%E7%B7%A8%E8%AD%AF%E5%8E%9F%E5%A7%8B%E7%A2%BC-install-nginx-from-source/Mon, 26 Mar 2018 04:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/03/nchan%E5%AE%89%E8%A3%9D-%E7%B7%A8%E8%AD%AF%E5%8E%9F%E5%A7%8B%E7%A2%BC-install-nginx-from-source/<h1 id="編譯原始碼">編譯原始碼</h1> <p>以下流程皆是在CentOS 7下進行，其他系統雖有不同，但都大同小異。</p> <h2 id="編譯前的準備">編譯前的準備</h2> <p>安裝編譯所需套件</p>https://blog.iphpo.com/blog/2018/03/%E5%AE%89%E8%A3%9Dnchan/Mon, 26 Mar 2018 03:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/03/%E5%AE%89%E8%A3%9Dnchan/<h1 id="安裝nchan">安裝Nchan</h1> <p>安裝方法有三種</p> <ol> <li>用套件管理程式安裝</li> <li><a href="https://blog.iphpo.com/blog/2018/03/nchan%E5%AE%89%E8%A3%9D-%E7%B7%A8%E8%AD%AF%E5%8E%9F%E5%A7%8B%E7%A2%BC-install-nginx-from-source/">編譯原始碼</a></li> <li><a href="https://blog.iphpo.com/blog/2018/03/%E4%BD%BF%E7%94%A8docker%E5%95%9F%E5%8B%95-install-nchan-docker/">使用Docker</a></li> </ol> <p>選擇適合自己的方式即可</p>https://blog.iphpo.com/blog/2018/03/nchan-%E7%89%B9%E8%89%B2/Mon, 26 Mar 2018 02:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/03/nchan-%E7%89%B9%E8%89%B2/<h1 id="nchan-特色">Nchan 特色</h1> <h2 id="nchan-簡介">Nchan 簡介</h2> <p>Nchan是Nginx與Channel兩個字的新造字，顧名思義Nchan是一個Nginx的module，所以帶有Nginx的可擴展性，與多種服務結合的高彈性，甚至可輕鬆與現有後端程式結合，並支援將訊息暫存在記憶體、檔案或Redis內，不僅提高訊息傳遞效率，與Redis Cluster結合更可達到無縫水平擴展的強大韌性。</p>https://blog.iphpo.com/blog/2018/03/%E5%8D%B3%E6%99%82%E9%80%9A%E7%9F%A5%E7%B3%BB%E7%B5%B1%E7%B0%A1%E4%BB%8B/Mon, 26 Mar 2018 01:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/03/%E5%8D%B3%E6%99%82%E9%80%9A%E7%9F%A5%E7%B3%BB%E7%B5%B1%E7%B0%A1%E4%BB%8B/<h1 id="即時通知系統簡介">即時通知系統簡介</h1> <p>即時通知系統，顧名思義，就是在 發佈者（Publisher） 發佈訊息時能立即通知所有 訂閱者（Subscriber），實際例子就像Facebook的訊息牆，只要好友發了一則動態，我不必重新整理頁面，即可立即收到通知，我的好友即是發佈者，而我則是訂閱者。</p> <p>在過去（約十幾年前），要達到這樣的效果，必須讓Client端不斷向伺服器發出詢問，才能在短時間內知道變化，此種方法耗費大量無謂的系統資源，最差情況是從上線到下線都無任何新訊息，但Client卻向伺服器發出了上萬次的請求，最終都得到無任何變化的回覆，此種方式稱為Polling。</p>https://blog.iphpo.com/blog/2018/03/%E5%88%A9%E7%94%A8-nchan-%E5%BF%AB%E9%80%9F%E6%89%93%E9%80%A0%E5%8D%B3%E6%99%82%E8%81%8A%E5%A4%A9%E7%B3%BB%E7%B5%B1/Mon, 26 Mar 2018 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/03/%E5%88%A9%E7%94%A8-nchan-%E5%BF%AB%E9%80%9F%E6%89%93%E9%80%A0%E5%8D%B3%E6%99%82%E8%81%8A%E5%A4%A9%E7%B3%BB%E7%B5%B1/<h1 id="利用-nchan-快速打造即時聊天系統">利用 Nchan 快速打造即時聊天系統</h1> <p>此一系列文章，將教導大家如何使用 Nchan 融入現有系統，極快速的時間將未有 Server push 的傳統 Web Application，瞬間變成可主動通知使用者的即時通知系統。</p>https://blog.iphpo.com/blog/2018/02/upsert-mysql-oracle/Mon, 19 Feb 2018 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/02/upsert-mysql-oracle/<p>UPSERT 是由 Update 和 Insert 所組成的</p> <p>顧名思義就是用一道SQL指令</p> <p>完成Insert或Update的動作</p> <p>這通常用在不知道這筆資料新增過了沒</p> <p>往往要先下一道SELECT確認之後</p> <p>再用SELECT結果判斷要 Insert 還是 Update</p> <p>而如果用 UPSERT 語法就可以用一道SQL完成這件事</p>https://blog.iphpo.com/blog/2018/01/kubernetes-%E5%88%87%E6%8F%9B-cluster/Sat, 27 Jan 2018 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/01/kubernetes-%E5%88%87%E6%8F%9B-cluster/<p>在學習時</p> <p>通常都是使用 minikube</p> <p>來練習各種指令</p>https://blog.iphpo.com/blog/2018/01/kops-%E5%BB%BA%E7%AB%8B-cluster-%E6%99%82%E5%8A%A0%E5%85%A5-insecure-registry/Thu, 25 Jan 2018 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/01/kops-%E5%BB%BA%E7%AB%8B-cluster-%E6%99%82%E5%8A%A0%E5%85%A5-insecure-registry/<p>用 kops 可以輕易在 aws or gcp 上建立 kubernetes cluster</p> <p>但如果有自己的私人倉庫</p> <p>又沒有為這個倉庫買憑證的話</p> <p>就會遇到 pull 不了 image 的問題</p>https://blog.iphpo.com/blog/2018/01/%E7%94%A2%E7%94%9F%E8%87%AA%E7%B0%BD%E7%9A%84ssl%E6%86%91%E8%AD%89/Sun, 21 Jan 2018 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/01/%E7%94%A2%E7%94%9F%E8%87%AA%E7%B0%BD%E7%9A%84ssl%E6%86%91%E8%AD%89/<p>只是做個紀錄</p> <pre><code>$ openssl genrsa -des3 -passout pass:x -out server.pass.key 2048 ... $ openssl rsa -passin pass:x -in server.pass.key -out server.key writing RSA key $ rm server.pass.key $ openssl req -new -key server.key -out server.csr ... Country Name (2 letter code) [AU]:US State or Province Name (full name) [Some-State]:California ... A challenge password []: $ openssl x509 -req -sha256 -days 365 -in server.csr -signkey server.key -out server.crt </code></pre> <p>Nginx ssl config</p>https://blog.iphpo.com/blog/2018/01/kubernetes-%E4%BD%BF%E7%94%A8-%E7%A7%81%E6%9C%89-docker-%E5%80%89%E5%BA%AB%E4%B8%A6%E8%A7%A3%E6%B1%BAssl%E6%86%91%E8%AD%89%E5%95%8F%E9%A1%8C-kubernetes-private-registry-insecure/Sat, 20 Jan 2018 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/01/kubernetes-%E4%BD%BF%E7%94%A8-%E7%A7%81%E6%9C%89-docker-%E5%80%89%E5%BA%AB%E4%B8%A6%E8%A7%A3%E6%B1%BAssl%E6%86%91%E8%AD%89%E5%95%8F%E9%A1%8C-kubernetes-private-registry-insecure/<p>要在 Kubernetes 使用私有倉庫並不難</p> <p>只需要照著<a href="https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/">官方的教學</a>設定即可</p> <p>當我在用 <a href="https://github.com/kubernetes/minikube">minikube</a> 時卻一直無法成功 pull image</p> <p>我的 pod yaml 設定：</p>https://blog.iphpo.com/blog/2018/01/%E6%9C%80%E5%BF%AB%E7%9A%84-hash-function-fastest-hash-xxxhash/Sat, 13 Jan 2018 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/01/%E6%9C%80%E5%BF%AB%E7%9A%84-hash-function-fastest-hash-xxxhash/<p>今天在找速度最快的 hash function</p> <p>不必考慮安全因素</p> <p>只要速度!!</p> <p>主要用途是給css, js加上 hash name</p>https://blog.iphpo.com/blog/2018/01/build-docker-image-%E6%99%82%E5%87%BA%E7%8F%BE-no-space-left-device/Tue, 02 Jan 2018 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/01/build-docker-image-%E6%99%82%E5%87%BA%E7%8F%BE-no-space-left-device/<p>我的 Macbook air 只有 128 GB 的硬碟空間(對這不叫內存!!!!!!)</p> <p>在某次build image的時候出現空間不足的錯誤</p>https://blog.iphpo.com/blog/2018/01/macos-x-%E4%B8%8B-docker-compose-%E9%80%9F%E5%BA%A6%E9%9D%9E%E5%B8%B8%E6%85%A2%E7%9A%84%E8%A7%A3%E6%B1%BA%E6%96%B9%E6%B3%95/Tue, 02 Jan 2018 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/01/macos-x-%E4%B8%8B-docker-compose-%E9%80%9F%E5%BA%A6%E9%9D%9E%E5%B8%B8%E6%85%A2%E7%9A%84%E8%A7%A3%E6%B1%BA%E6%96%B9%E6%B3%95/<p>每次執行 docker-compose up</p> <p>跟docker-compose down</p> <p>速度都超級慢</p> <p>正常來講</p> <p>幾秒鐘之內就可以關掉好幾個container</p> <p>但在我家電腦要花最少一分鐘以上</p> <p>這速度真是無法忍受</p> <p>搜尋後找到神奇的答案</p>https://blog.iphpo.com/blog/2018/01/%E5%9C%A8-centos-7-%E5%B0%87-yum-base-repo-%E6%94%B9%E7%82%BA-hinet/Tue, 02 Jan 2018 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2018/01/%E5%9C%A8-centos-7-%E5%B0%87-yum-base-repo-%E6%94%B9%E7%82%BA-hinet/<p>最近在用 docker</p> <p>預設的 CentOS 7</p> <p>yum install 都超慢</p> <p>所以就找了方法把 base repo 改成 hinet</p> <p>果然速度就快多了</p> <p>首先先備份原本的base repo</p>https://blog.iphpo.com/blog/2017/12/php7-2-%E6%96%B0%E7%89%B9%E6%80%A7-%E6%96%B0%E5%8A%9F%E8%83%BD-php72-new-feature/Sun, 31 Dec 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/12/php7-2-%E6%96%B0%E7%89%B9%E6%80%A7-%E6%96%B0%E5%8A%9F%E8%83%BD-php72-new-feature/<p>PHP 7.2 在 2017年十一月30號釋出了</p> <p>趕緊用 phpbrew 裝在 Mac 上測試玩玩</p> <p>來看看有哪些新功能吧</p>https://blog.iphpo.com/blog/2017/12/golang-%E7%94%A8-goroutine-%E6%B8%9B%E5%B0%91%E5%A4%A7%E9%87%8F%E6%AA%94%E6%A1%88%E8%AE%80%E5%8F%96%E6%99%82%E9%96%93/Sat, 30 Dec 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/12/golang-%E7%94%A8-goroutine-%E6%B8%9B%E5%B0%91%E5%A4%A7%E9%87%8F%E6%AA%94%E6%A1%88%E8%AE%80%E5%8F%96%E6%99%82%E9%96%93/<p>之前做了一個可以掃描多資料夾下檔案變動的程式</p> <p>但只要檔案變多</p> <p>速度就會變很慢</p> <p>所以這次要用 golang 自帶的 goroutine 來優化</p>https://blog.iphpo.com/blog/2017/12/%E7%82%BA%E4%BB%80%E9%BA%BC%E8%A6%81%E5%AF%AB%E9%83%A8%E8%90%BD%E6%A0%BC/Sat, 30 Dec 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/12/%E7%82%BA%E4%BB%80%E9%BA%BC%E8%A6%81%E5%AF%AB%E9%83%A8%E8%90%BD%E6%A0%BC/<p>好久沒更新了</p> <p>最近的技術心得都是片段片段的</p> <p>沒法寫出太完整的文章</p> <p>就來寫點抒情文</p> <p>到底為什麼要寫部落格？</p>https://blog.iphpo.com/blog/2017/12/choosing-mysql-postgresql/Fri, 15 Dec 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/12/choosing-mysql-postgresql/<p><a href="https://blog.kedare.net/blog/choosing-mysql-or-postgresql.html">https://blog.kedare.net/blog/choosing-mysql-or-postgresql.html</a></p> <p>好文</p>https://blog.iphpo.com/blog/2017/11/ansible-%E5%88%A9%E7%94%A8-ad-hoc-command-%E5%88%97%E5%87%BA%E6%89%80%E6%9C%89%E5%8F%AF%E7%94%A8%E5%8F%83%E6%95%B8/Sat, 25 Nov 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/11/ansible-%E5%88%A9%E7%94%A8-ad-hoc-command-%E5%88%97%E5%87%BA%E6%89%80%E6%9C%89%E5%8F%AF%E7%94%A8%E5%8F%83%E6%95%B8/<p>所謂 ad-hoc，意思比較偏向 &ldquo;即時的&rdquo; 的意思</p> <p>就是直接在command line調用 ansible 的模組並執行</p> <p>完整的介紹可以看<a href="http://docs.ansible.com/ansible/latest/intro_adhoc.html">官方網站</a></p>https://blog.iphpo.com/blog/2017/11/logrotate-%E7%9A%84%E8%A8%AD%E5%AE%9A%E7%BF%BB%E8%AD%AF/Sat, 25 Nov 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/11/logrotate-%E7%9A%84%E8%A8%AD%E5%AE%9A%E7%BF%BB%E8%AD%AF/<p>logrotate 是一個自動分割、打包檔案的工具</p> <p>log檔案會隨著時間日益增大</p> <p>不止不好查看</p> <p>大到一個程度寫入Log效能也會變差</p> <p>所以需要 logrotate 來幫忙分割打包壓縮處理</p> <p>有鑒於網路上都是分享自己的設定</p> <p>並沒有一個很全面的說明</p> <p>所以我就把 man logrotate 的設定翻譯一下</p>https://blog.iphpo.com/blog/2017/11/%E5%9C%A8command-line%E4%B8%8B%E7%A7%BB%E5%8B%95%E6%B8%B8%E6%A8%99-move-cursor-in-command/Sat, 25 Nov 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/11/%E5%9C%A8command-line%E4%B8%8B%E7%A7%BB%E5%8B%95%E6%B8%B8%E6%A8%99-move-cursor-in-command/<p>對常使用command line的人來說</p> <p>移動游標一直是很不方便的事情</p> <p>尤其是打了一大串指令</p> <p>發現中間有錯字</p> <p>就會很崩潰的按著方向鍵等游標飄過去</p> <p>或是從網路上複製一大串指令</p> <p>發現中間要修改一個參數</p> <p>也是只能嘆口氣按下方向鍵等它飄過去</p> <p>其實不必這麼麻煩</p> <p>目前在 MacOSX 跟 Linux 上實測</p> <p>都有移動指標的快速鍵</p>https://blog.iphpo.com/blog/2017/11/%E6%B8%AC%E8%A9%A6-php-%E8%A3%A1%E7%9A%84-serialize-%E5%87%BD%E5%BC%8F%E6%95%88%E8%83%BD/Mon, 13 Nov 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/11/%E6%B8%AC%E8%A9%A6-php-%E8%A3%A1%E7%9A%84-serialize-%E5%87%BD%E5%BC%8F%E6%95%88%E8%83%BD/<p>這次比較的有最常用的三種方式</p> <p>PHP內建的serialize</p> <p>還有json_encode</p> <p>另一個可能有人不知道</p> <p>叫 igbinary</p> <p>這東西在PHP5時代</p> <p>效能可是海放 PHP 內建的 serialize</p> <p>但是在效能大耀進的PHP 7上呢？</p> <p>馬上來做個實驗看看</p>https://blog.iphpo.com/blog/2017/11/%E8%A3%BD%E4%BD%9C%E5%8F%AF%E5%AE%89%E8%A3%9D%E5%A4%9A%E7%B3%BB%E7%B5%B1%E7%9A%84usb/Tue, 07 Nov 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/11/%E8%A3%BD%E4%BD%9C%E5%8F%AF%E5%AE%89%E8%A3%9D%E5%A4%9A%E7%B3%BB%E7%B5%B1%E7%9A%84usb/<p>目前測試可用的有</p> <p>CentOS7</p> <p>Ubuntu 17.04</p> <p>Windows 10</p> <p><a href="https://www.pendrivelinux.com/yumi-multiboot-usb-creator/">https://www.pendrivelinux.com/yumi-multiboot-usb-creator/</a></p> <p>使用方法也超簡單</p> <p>下載這軟體之後</p> <p>把各OS安裝ISO依序丟進去就好了</p>https://blog.iphpo.com/blog/2017/11/ansible-%E8%88%87-vagrant-%E7%B5%90%E5%90%88%E7%B7%B4%E7%BF%92%E5%A4%9A%E7%92%B0%E5%A2%83%E7%8B%80%E6%B3%81/Mon, 06 Nov 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/11/ansible-%E8%88%87-vagrant-%E7%B5%90%E5%90%88%E7%B7%B4%E7%BF%92%E5%A4%9A%E7%92%B0%E5%A2%83%E7%8B%80%E6%B3%81/<p>Vagrant <a href="https://www.vagrantup.com/">https://www.vagrantup.com/</a></p> <p>是一個輕量化簡單建置與管理VM的工具</p> <p>不同於VirtualBox，Vagrant沒有圖形介面</p> <p>一切都是文字（console）</p> <p>這也剛好可以用它來開多個不同vm</p> <p>來模擬多個環境下的Ansible play script</p> <p>為什麼不用docker呢？</p> <p>docker 跟實體的VM其實還有一段小小的差距</p> <p>像是我的playbook第一步驟是設定時區</p> <p>結果docker下的centos不能設定時區</p> <p>雖然可以跳過這一步驟</p> <p>但這就失去了測試的意義</p> <p>所以最後決定還是回到VM的懷抱</p>https://blog.iphpo.com/blog/2017/11/reactstudio-v1-2-%E6%96%B0%E7%89%88%E9%87%8B%E5%87%BA/Mon, 06 Nov 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/11/reactstudio-v1-2-%E6%96%B0%E7%89%88%E9%87%8B%E5%87%BA/<p><a href="https://reactstudio.com/">https://reactstudio.com/</a></p> <p>之前是寫 Vue.js</p> <p>ReactJS一直是我心裡的痛</p> <p>希望這東西能讓我順利玩下去啊~~</p>https://blog.iphpo.com/blog/2017/11/linux-%E4%B8%8B%E7%94%A8%E5%90%8D%E7%A8%B1%E5%88%AA%E9%99%A4-process/Sun, 05 Nov 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/11/linux-%E4%B8%8B%E7%94%A8%E5%90%8D%E7%A8%B1%E5%88%AA%E9%99%A4-process/<p>kill <process-id> 可刪除某個程序</p> <p>但如果他開了一堆sub-process</p> <p>要一個一個砍就很麻煩</p> <p>這時候可以用其他指令來達成</p>https://blog.iphpo.com/blog/2017/10/mariadb-10-2-2-%E9%96%8B%E5%A7%8B%E6%94%AF%E6%8F%B4-recursive-query/Tue, 17 Oct 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/10/mariadb-10-2-2-%E9%96%8B%E5%A7%8B%E6%94%AF%E6%8F%B4-recursive-query/<p>我現在是用 10.2.7</p> <p>雖然 CTE 在其他資料庫上可以用很久了</p> <p>但是從MySQL入門</p> <p>甚至一直以來都只用MySQL的人應該對這很陌生</p> <p>因為MySQL還要等到未來的 MySQL 8 才會支援 with</p>https://blog.iphpo.com/blog/2017/09/%E5%A6%82%E4%BD%95%E5%AF%AB-fail2ban-%E7%9A%84-filter/Sun, 24 Sep 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/09/%E5%A6%82%E4%BD%95%E5%AF%AB-fail2ban-%E7%9A%84-filter/<p>如果要在Fail2ban自訂封鎖條件</p> <p>就要先寫好 filter</p> <p>並在jail裡開啟</p>https://blog.iphpo.com/blog/2017/09/%E5%9C%A8-centos-7-%E4%B8%8A%E5%AE%89%E8%A3%9Dnginx-%E7%9A%84-modsecurity-module/Sun, 10 Sep 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/09/%E5%9C%A8-centos-7-%E4%B8%8A%E5%AE%89%E8%A3%9Dnginx-%E7%9A%84-modsecurity-module/<p>之前有寫過<a href="https://blog.iphpo.com/blog/2017/03/%E5%9C%A8centos7-%E4%B8%8A-%E5%AE%89%E8%A3%9Dnginx-modsecurity%E5%BB%BA%E7%AB%8B%E5%85%8D%E8%B2%BBwaf-build-free-waf-using-nginx-and-modsecurity/">如何自己Compile Nginx + Modsecurity</a></p> <p>這次在官方網站上看到<a href="https://www.nginx.com/blog/compiling-and-installing-modsecurity-for-open-source-nginx/">一篇</a></p> <p>不需要重新compile nginx</p> <p>只需要把 modsecurity compile 成 module 就可以用的方案</p> <p>這對使用 yum 安裝 nginx 的人來說才是最好的方案</p>https://blog.iphpo.com/blog/2017/09/nested-transaction-using-savepoint/Sat, 09 Sep 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/09/nested-transaction-using-savepoint/<p>這次測試的資料庫是 Oracle 12c</p> <p>但MySQL Postgre SQL應該都有支援savepoint</p> <p>這次測試的code有用到doctrine ORM</p>https://blog.iphpo.com/blog/2017/09/%E8%B3%87%E6%96%99%E5%BA%AB%E7%9A%84-acid/Sat, 09 Sep 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/09/%E8%B3%87%E6%96%99%E5%BA%AB%E7%9A%84-acid/<p>一直以來都沒把ACID的定義記清楚</p> <p>只知道在程式裡開transaction</p> <p>最後commit或rollback</p> <p>不過這也誤打誤撞的符合ACID要求</p>https://blog.iphpo.com/blog/2017/09/%E5%8F%AF%E5%B0%87id%E7%B7%A8%E7%A2%BC%E7%9A%84%E5%B7%A5%E5%85%B7/Fri, 08 Sep 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/09/%E5%8F%AF%E5%B0%87id%E7%B7%A8%E7%A2%BC%E7%9A%84%E5%B7%A5%E5%85%B7/<p>其實應用很廣泛</p> <p>也因為可以控制雜湊的長度</p> <p>所以可以做為短網址的應用</p>https://blog.iphpo.com/blog/2017/08/%E7%A7%9F%E5%B1%8B%E5%90%88%E7%B4%84%E8%A6%81%E7%9C%8B%E6%B8%85%E6%A5%9A%E5%86%8D%E7%B0%BD/Sun, 13 Aug 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/08/%E7%A7%9F%E5%B1%8B%E5%90%88%E7%B4%84%E8%A6%81%E7%9C%8B%E6%B8%85%E6%A5%9A%E5%86%8D%E7%B0%BD/<p>今天租屋經驗非常不愉快</p> <p>我本來都會詳細看合約書</p> <p>之前簽約房東也會帶著我看一遍合約</p> <p>這次我準備要看的時候</p> <p>旁邊的仲介開始說</p> <p>這你都要看？</p> <p>這些都很制式啦</p> <p>書局都買得到</p> <p>不用看吧</p>https://blog.iphpo.com/blog/2017/08/ansible-%E5%AE%89%E8%A3%9D%E5%A4%9A%E5%80%8B-package/Fri, 11 Aug 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/08/ansible-%E5%AE%89%E8%A3%9D%E5%A4%9A%E5%80%8B-package/<p>安裝一個package</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml"><span class="line"><span class="cl">- <span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l">install epel</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">yum</span><span class="p">:</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l">epel-release</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">state</span><span class="p">:</span><span class="w"> </span><span class="l">latest</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">update_cache</span><span class="p">:</span><span class="w"> </span><span class="kc">yes</span><span class="w"> </span></span></span></code></pre></div><p>安裝多個package</p> <p>不能在name的部分用空格給多個package名稱</p> <p>該怎麼辦呢？</p>https://blog.iphpo.com/blog/2017/08/linux-commands-every-devops-engineer-know/Tue, 08 Aug 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/08/linux-commands-every-devops-engineer-know/<p>今天看到一篇文章滿實用</p> <p>轉貼來記錄一下XD</p> <p><a href="https://vinta.ws/code/linux-commands-that-every-devops-engineer-should-know.html">https://vinta.ws/code/linux-commands-that-every-devops-engineer-should-know.html</a></p>https://blog.iphpo.com/blog/2017/08/%E9%9D%A2%E8%A9%A6%E5%BF%83%E5%BE%97/Tue, 08 Aug 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/08/%E9%9D%A2%E8%A9%A6%E5%BF%83%E5%BE%97/<p>最近面試告一段落</p> <p>其實滿喜歡跟大家交流的感覺</p> <p>我也收穫滿多</p>https://blog.iphpo.com/blog/2017/07/%E9%96%92%E8%81%8A-%E7%A4%BE%E7%BE%A4%E8%A3%A1%E7%9A%84%E5%A4%A7%E7%A5%9E%E5%B0%B1%E7%9C%9F%E7%9A%84%E6%98%AF%E5%A4%A7%E7%A5%9E%E5%97%8E/Sun, 30 Jul 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/07/%E9%96%92%E8%81%8A-%E7%A4%BE%E7%BE%A4%E8%A3%A1%E7%9A%84%E5%A4%A7%E7%A5%9E%E5%B0%B1%E7%9C%9F%E7%9A%84%E6%98%AF%E5%A4%A7%E7%A5%9E%E5%97%8E/<p>這是一篇抒情文</p> <p>前因是這陣子陸續有在面試</p> <p>跟其中一間聊到一些大神不需要丟履歷</p> <p>別人都會搶著找他去工作</p> <p>其實我不反對社群裡有些真的是大神</p>https://blog.iphpo.com/blog/2017/07/centos%E4%B8%8A%E7%9A%84nginx%E5%9C%A8%E6%96%B0%E7%89%88chrome%E4%B8%8A%E7%84%A1%E6%B3%95%E5%95%9F%E5%8B%95-http2/Thu, 27 Jul 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/07/centos%E4%B8%8A%E7%9A%84nginx%E5%9C%A8%E6%96%B0%E7%89%88chrome%E4%B8%8A%E7%84%A1%E6%B3%95%E5%95%9F%E5%8B%95-http2/<p>我一直以為 我在設定檔裡加入http2 就會開啟http2</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-sh" data-lang="sh"><span class="line"><span class="cl">server <span class="o">{</span> </span></span><span class="line"><span class="cl"> listen <span class="m">443</span> ssl http2<span class="p">;</span> </span></span></code></pre></div><p>結果我用 Chrome 內建的工具檢查</p> <p>卻沒有啟動 HTTP/2</p> <p><a href="chrome://net-internals/#http2">chrome://net-internals/#http2</a></p> <p>這才驚覺我的網站一直都沒有啟動HTTP/2</p> <p>原來是 CentOS 內建的OpenSSL版本</p> <p>沒有支援 ALPN</p> <p>導致Chrome會自動切換成HTTP/1.1</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-sh" data-lang="sh"><span class="line"><span class="cl"> <span class="c1"># ./openssl version </span> </span></span><span class="line"><span class="cl">OpenSSL 1.0.1e-fips <span class="m">11</span> Feb <span class="m">2013</span> </span></span></code></pre></div><p>但是用 yum update這就已經是最新版本</p> <p>所以只好自己編譯新版OpenSSL了</p>https://blog.iphpo.com/blog/2017/07/vue-js-webpack-template-%E5%9C%A8ie%E4%B8%8B%E9%A1%AF%E7%A4%BA%E7%A9%BA%E7%99%BD/Wed, 19 Jul 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/07/vue-js-webpack-template-%E5%9C%A8ie%E4%B8%8B%E9%A1%AF%E7%A4%BA%E7%A9%BA%E7%99%BD/<p>打開開發人員工具</p> <p>出現的錯誤是</p> <blockquote> <p>polyfill-eventsource added missing EventSource to window</p> </blockquote> <p>Google後加入 Babel-polyfill 即可正常運作</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-sh" data-lang="sh"><span class="line"><span class="cl">npm install -save babel-polyfill </span></span></code></pre></div><p>然後在初始文件加入</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-js" data-lang="js"><span class="line"><span class="cl"><span class="kr">import</span> <span class="s1">&#39;babel-polyfill&#39;</span> </span></span></code></pre></div><p> </p>https://blog.iphpo.com/blog/2017/05/%E5%B7%A5%E5%85%B7-%E6%AA%A2%E6%9F%A5%E6%AA%94%E6%A1%88%E6%98%AF%E5%90%A6%E8%A2%AB%E4%BB%BB%E6%84%8F%E8%AE%8A%E6%9B%B4-filechecker/Thu, 04 May 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/05/%E5%B7%A5%E5%85%B7-%E6%AA%A2%E6%9F%A5%E6%AA%94%E6%A1%88%E6%98%AF%E5%90%A6%E8%A2%AB%E4%BB%BB%E6%84%8F%E8%AE%8A%E6%9B%B4-filechecker/<p>最近用Golang寫了一個工具</p> <p>這是很久以前就想寫的</p> <p>那時候還沒有golang</p> <p>當初的想法是</p> <p>一台Server被成功入侵</p> <p>大部分都是看Log才知道</p> <p>但一台被針對並且成功提權的機器</p> <p>是不會留下任何被入侵的Log的</p> <p>但是絕對會留下駭客下次進入的後門</p> <p>或是被置入的惡意程式</p> <p>畢竟漏洞只是一時的</p> <p>如果沒放後門等漏洞被補起來</p> <p>這台機器就不能用了</p>https://blog.iphpo.com/blog/2017/04/golang%E5%A6%82%E4%BD%95%E7%A2%BA%E8%AA%8D%E6%AA%94%E6%A1%88%E6%98%AF%E5%90%A6%E5%AD%98%E5%9C%A8/Mon, 17 Apr 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/04/golang%E5%A6%82%E4%BD%95%E7%A2%BA%E8%AA%8D%E6%AA%94%E6%A1%88%E6%98%AF%E5%90%A6%E5%AD%98%E5%9C%A8/<p>在php裡有個函式可以檢查檔案是否存在</p> <p><a href="http://php.net/manual/en/function.file-exists.php">file_exists</a></p> <p>那在Golang又該如何判斷呢？</p>https://blog.iphpo.com/blog/2017/04/%E5%9C%A8golang%E7%94%A8%E7%B0%A1%E5%96%AE%E7%9A%84%E6%96%B9%E5%BC%8Fmock-function-how-to-mock-function-in-golang/Wed, 12 Apr 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/04/%E5%9C%A8golang%E7%94%A8%E7%B0%A1%E5%96%AE%E7%9A%84%E6%96%B9%E5%BC%8Fmock-function-how-to-mock-function-in-golang/<p>其實<a href="https://github.com/golang/mock">官方有Mock package</a></p> <p>但我稍微看了一下</p> <p>都是在Mock interface</p> <p>我遇到的問題是</p> <p>我用到其他package的function</p> <p>而那隻package沒有用interface</p> <p>所以無法產生Mock object</p> <p>Google上的解法</p> <p>都偏向Dependency Injection</p>https://blog.iphpo.com/blog/2017/04/%E5%9C%A8composer%E5%8A%A0%E5%85%A5%E6%9C%AC%E5%9C%B0%E7%AB%AF%E9%96%8B%E7%99%BC%E4%B8%AD%E7%9A%84package-add-local-package-in-composer/Tue, 11 Apr 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/04/%E5%9C%A8composer%E5%8A%A0%E5%85%A5%E6%9C%AC%E5%9C%B0%E7%AB%AF%E9%96%8B%E7%99%BC%E4%B8%AD%E7%9A%84package-add-local-package-in-composer/<p>在PHP已經進化到7的時代</p> <p>不只速度的提升</p> <p>也代表很多標準被定義出來</p> <p>標準被定義出來也代表著</p> <p>遵循這些定義所產生的Package, Library就會很多</p> <p>用<a href="https://getcomposer.org/">Composer</a>管理套件的相依性就變成無法阻擋的趨勢</p>https://blog.iphpo.com/blog/2017/04/%E5%A6%82%E4%BD%95%E8%87%AA%E8%A3%BDcomposer%E7%9A%84%E5%A5%97%E4%BB%B6-how-to-create-own-composer-package/Tue, 11 Apr 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/04/%E5%A6%82%E4%BD%95%E8%87%AA%E8%A3%BDcomposer%E7%9A%84%E5%A5%97%E4%BB%B6-how-to-create-own-composer-package/<p>首先一定要有<a href="https://getcomposer.org/">Composer</a></p> <p>建議安裝在可直接執行的地方</p> <p>像我就裝在 /usr/local/bin</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-sh" data-lang="sh"><span class="line"><span class="cl">php -r <span class="s2">&#34;copy(&#39;https://getcomposer.org/installer&#39;, &#39;composer-setup.php&#39;);&#34;</span> </span></span><span class="line"><span class="cl">php composer-setup.php --install-dir<span class="o">=</span>/usr/local/bin </span></span><span class="line"><span class="cl">mv /usr/local/bin/composer.phar /usr/local/bin/composer </span></span><span class="line"><span class="cl">chmod +x /usr/local/bin/composer </span></span></code></pre></div><p>然後建立一個專案資料夾</p>https://blog.iphpo.com/blog/2017/04/webpack-%E7%AD%86%E8%A8%98%E4%BA%8C%E5%88%9D%E5%A7%8B%E5%8C%96%E8%A8%AD%E5%AE%9A%E6%AA%94/Sun, 09 Apr 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/04/webpack-%E7%AD%86%E8%A8%98%E4%BA%8C%E5%88%9D%E5%A7%8B%E5%8C%96%E8%A8%AD%E5%AE%9A%E6%AA%94/<p>當剛安裝完Webpack</p> <p>第一次執行會看到如下的訊息</p> <p><img src="../%E8%9E%A2%E5%B9%95%E5%BF%AB%E7%85%A7-2017-04-07-%E4%B8%8B%E5%8D%8811.09.36-300x31.png" alt=""></p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-sh" data-lang="sh"><span class="line"><span class="cl"> $ webpack <span class="o">[</span>23:07:04<span class="o">]</span> </span></span><span class="line"><span class="cl">No configuration file found and no output filename configured via CLI option. </span></span><span class="line"><span class="cl">A configuration file could be named <span class="s1">&#39;webpack.config.js&#39;</span> in the current directory. </span></span><span class="line"><span class="cl">Use --help to display the CLI options. </span></span></code></pre></div><p>也就是他找不到 webpack.config.js 的設定檔</p> <p>所以就在專案目錄下新增一個webpack.config.js</p> <p>裡面的內容可以參考<a href="https://webpack.js.org/configuration/">官方的Document</a></p> <p>設定檔的基礎架構由幾個部分組成</p>https://blog.iphpo.com/blog/2017/04/webpack-%E7%AD%86%E8%A8%98%E4%B8%89%E7%94%A8npm-script%E7%AE%A1%E7%90%86%E9%96%8B%E7%99%BC%E6%B5%81%E7%A8%8B%E8%A3%A1%E7%9A%84%E6%8C%87%E4%BB%A4/Sun, 09 Apr 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/04/webpack-%E7%AD%86%E8%A8%98%E4%B8%89%E7%94%A8npm-script%E7%AE%A1%E7%90%86%E9%96%8B%E7%99%BC%E6%B5%81%E7%A8%8B%E8%A3%A1%E7%9A%84%E6%8C%87%E4%BB%A4/<p><img src="../%E8%9E%A2%E5%B9%95%E5%BF%AB%E7%85%A7-2017-04-09-%E4%B8%8B%E5%8D%883.06.01-300x64.png" alt=""></p> <p>通常開發跟最終的輸出會有一定差距</p> <p>像是在開發時需要自動compile</p> <p>或是autoreload</p> <p>而最終的輸出會需要minify</p> <p>所以這時候的webpack指令就會不同</p> <p>一般不使用config的使用方法是</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-sh" data-lang="sh"><span class="line"><span class="cl">webpack entry.js output.js </span></span></code></pre></div>https://blog.iphpo.com/blog/2017/04/php-fpm%E5%A6%82%E4%BD%95%E7%94%A2%E7%94%9Fcore-dump%E6%AA%94%E6%A1%88-how-to-generate-core-dump-file-on-nginx/Sat, 08 Apr 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/04/php-fpm%E5%A6%82%E4%BD%95%E7%94%A2%E7%94%9Fcore-dump%E6%AA%94%E6%A1%88-how-to-generate-core-dump-file-on-nginx/<p>這陣子裝了Jetpack plugin</p> <p>發現一直有 <a href="https://blog.iphpo.com/blog/2017/04/%E6%95%B4%E7%90%86-exited-on-signal-11-sigsegv-%E8%A7%A3%E6%B1%BA%E6%96%B9%E6%B3%95/">EXITED ON SIGNAL 11 (SIGSEGV)</a> 的問題</p> <p>改了一堆設定</p> <p>把buffer加大</p> <p>timeout加大</p> <p>都沒用</p> <p>伺服器上的php是用remi repo安裝的</p> <p>預設沒有開啟debug</p> <p>所以無法產生core dump文件</p> <p>今天心一橫</p> <p>決定自己來compile php</p>https://blog.iphpo.com/blog/2017/04/webpack-%E7%AD%86%E8%A8%98%E4%B8%80%E5%AE%89%E8%A3%9Dwebpack/Fri, 07 Apr 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/04/webpack-%E7%AD%86%E8%A8%98%E4%B8%80%E5%AE%89%E8%A3%9Dwebpack/<p><img src="../%E8%9E%A2%E5%B9%95%E5%BF%AB%E7%85%A7-2017-04-07-%E4%B8%8B%E5%8D%883.38.34-300x159.png" alt=""></p> <p>最近在看<a href="https://laracasts.com/series/webpack-for-everyone">Laracasts上的Webpack課程</a></p> <p>做點筆記加強記憶</p> <p>對我來說gulp比較清晰明瞭</p> <p>一個一個task各自獨立之後再以先後順序串起來</p> <p>但是Webpack就不是了</p>https://blog.iphpo.com/blog/2017/04/%E6%95%B4%E7%90%86-exited-on-signal-11-sigsegv-%E8%A7%A3%E6%B1%BA%E6%96%B9%E6%B3%95/Fri, 07 Apr 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/04/%E6%95%B4%E7%90%86-exited-on-signal-11-sigsegv-%E8%A7%A3%E6%B1%BA%E6%96%B9%E6%B3%95/<p><code> [06-Apr-2017 22:55:02] WARNING: [pool www] child 6785 exited on signal 11 (SIGSEGV) after 7896.992354 seconds from start </code></p> <p> </p> <p>首先這個錯誤是某個php script崩潰</p> <p>不是error也不是遇到什麼錯誤</p> <p>而是執行過程整個process崩潰</p> <p>查了一些資料</p> <p>整理出有幾個原因</p>https://blog.iphpo.com/blog/2017/03/bootstrap-3-%E8%AE%93%E7%89%A9%E4%BB%B6%E5%9E%82%E7%9B%B4%E7%BD%AE%E4%B8%AD%E7%9A%84%E6%96%B0%E6%96%B9%E6%B3%95/Fri, 31 Mar 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/03/bootstrap-3-%E8%AE%93%E7%89%A9%E4%BB%B6%E5%9E%82%E7%9B%B4%E7%BD%AE%E4%B8%AD%E7%9A%84%E6%96%B0%E6%96%B9%E6%B3%95/<p>之前要垂直置中</p> <p>不外乎就是設定height跟line-height</p> <p>不然就是parent position relative</p> <p>child position absolute</p> <p>top, right, bottom, left = 0</p> <p>或是<a href="http://vanseodesign.com/css/vertical-centering/">這篇文章</a>有提供六種垂直置中方法</p> <p>今天看到一個沒看過的用法</p>https://blog.iphpo.com/blog/2017/03/google-%E6%8F%90%E4%BE%9B%E7%9A%84%E9%A1%8F%E8%89%B2%E9%81%B8%E6%93%87%E5%99%A8-color-picker/Fri, 31 Mar 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/03/google-%E6%8F%90%E4%BE%9B%E7%9A%84%E9%A1%8F%E8%89%B2%E9%81%B8%E6%93%87%E5%99%A8-color-picker/<p><img src="../%E8%9E%A2%E5%B9%95%E5%BF%AB%E7%85%A7-2017-03-31-%E4%B8%8A%E5%8D%8810.16.31-300x220.png" alt=""></p> <p>之前偶然發現的</p> <p>只要在搜尋列上打 color picker</p> <p>google就會跑出顏色選擇器</p> <p>實在很方便啊！</p> <p> </p>https://blog.iphpo.com/blog/2017/03/%E7%94%A8js%E5%8F%96%E5%BE%97get%E5%8F%83%E6%95%B8/Fri, 31 Mar 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/03/%E7%94%A8js%E5%8F%96%E5%BE%97get%E5%8F%83%E6%95%B8/<p><a href="http://stackoverflow.com/a/21210643">出自這裡</a></p> <p>主要是利用 location.search</p> <p>一開始會得到包含 ? 的字串</p> <p>像我的網址是</p>https://blog.iphpo.com/blog/2017/03/%E5%9C%A8electron%E6%96%B0%E5%A2%9E%E9%81%B8%E6%93%87%E8%B3%87%E6%96%99%E5%A4%BE%E7%9A%84%E6%8C%89%E9%88%95/Fri, 31 Mar 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/03/%E5%9C%A8electron%E6%96%B0%E5%A2%9E%E9%81%B8%E6%93%87%E8%B3%87%E6%96%99%E5%A4%BE%E7%9A%84%E6%8C%89%E9%88%95/<p>一般瀏覽器</p> <p>依據安全性問題</p> <p>不會讓使用者選擇整個資料夾</p> <p>而electron是用chrome當底層</p> <p>所以一般的 <input type="file"></p> <p>也就不能選擇整個資料夾</p> <p>這時候可以用electron所提供的dialog來實現</p>https://blog.iphpo.com/blog/2017/03/%E5%9C%A8mac%E8%A3%A1%E7%94%A8bless%E6%89%BE%E5%95%9F%E5%8B%95%E7%A3%81%E7%A2%9F-find-boot-drive-on-mac-using-bless-command/Fri, 31 Mar 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/03/%E5%9C%A8mac%E8%A3%A1%E7%94%A8bless%E6%89%BE%E5%95%9F%E5%8B%95%E7%A3%81%E7%A2%9F-find-boot-drive-on-mac-using-bless-command/<p>雖然筆電通常只有一顆硬碟</p> <p>但寫程式為了通用性</p> <p>還是會以某方式確定是哪一顆為準</p> <p>在Mac底下可以用以下指令確認</p>https://blog.iphpo.com/blog/2017/03/%E5%A2%9E%E5%8A%A0handlebars%E6%9B%B4%E5%A4%9A%E7%9A%84if%E5%88%A4%E6%96%B7/Fri, 31 Mar 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/03/%E5%A2%9E%E5%8A%A0handlebars%E6%9B%B4%E5%A4%9A%E7%9A%84if%E5%88%A4%E6%96%B7/<p><a href="http://stackoverflow.com/a/16315366">出自這裡</a></p> <p>handlebars 只有提供簡單的 true, false判斷</p> <p>如果要判斷某個值大於多少</p> <p>就要另外寫extension了</p> <p>在stackoverflow上已經有人寫好完整的extension</p> <p>所有比較都在裡面了</p>https://blog.iphpo.com/blog/2017/03/javascript-array-filter/Thu, 30 Mar 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/03/javascript-array-filter/<p>今天在處理一串資料</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-go" data-lang="go"><span class="line"><span class="cl"><span class="mf">1.</span><span class="w"> </span><span class="mf">2.</span><span class="w"> </span><span class="mi">3</span><span class="w"> </span><span class="mi">4</span><span class="w"> </span><span class="mi">5</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"></span><span class="mi">1</span><span class="w"> </span><span class="mi">2</span><span class="w"> </span><span class="mi">4</span><span class="w"> </span><span class="mi">5</span><span class="w"> </span></span></span></code></pre></div><p>要取出第三個並顯示3</p> <p>很顯然的第二行的第三個是4</p> <p>這不是我要的資訊</p>https://blog.iphpo.com/blog/2017/03/%E6%9F%AF%E6%96%87%E5%93%B2%E6%87%89%E7%B5%A6%E8%94%A3%E4%BB%8B%E7%9F%B3%E5%85%AC%E5%B9%B3%E6%AD%A3%E7%A2%BA%E7%9A%84%E8%A9%95%E6%96%B7-%E4%B8%8D%E8%A6%81%E4%B8%80%E9%96%8B%E5%A7%8B%E5%B0%B1/Wed, 29 Mar 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/03/%E6%9F%AF%E6%96%87%E5%93%B2%E6%87%89%E7%B5%A6%E8%94%A3%E4%BB%8B%E7%9F%B3%E5%85%AC%E5%B9%B3%E6%AD%A3%E7%A2%BA%E7%9A%84%E8%A9%95%E6%96%B7-%E4%B8%8D%E8%A6%81%E4%B8%80%E9%96%8B%E5%A7%8B%E5%B0%B1/<p><a href="https://tw.news.yahoo.com/%E6%9F%AF%E6%96%87%E5%93%B2%EF%BC%9A%E6%87%89%E7%B5%A6%E8%94%A3%E4%BB%8B%E7%9F%B3%E5%85%AC%E5%B9%B3%E6%AD%A3%E7%A2%BA%E7%9A%84%E8%A9%95%E6%96%B7-054959391.html">https://tw.news.yahoo.com/%E6%9F%AF%E6%96%87%E5%93%B2%EF%BC%9A%E6%87%89%E7%B5%A6%E8%94%A3%E4%BB%8B%E7%9F%B3%E5%85%AC%E5%B9%B3%E6%AD%A3%E7%A2%BA%E7%9A%84%E8%A9%95%E6%96%B7-054959391.html</a></p> <p>228已經過去多日</p> <p>各方的情緒已經消退不少</p> <p>這時候出來講真話</p> <p>是最佳的時機</p> <p>蔣家過去做了多少事</p> <p>有好有壞</p> <p>有功有過</p> <p>但是有些人喜歡抓著他的功勞</p> <p>炫耀吹捧</p> <p>有些人喜歡抓著他的過失</p>https://blog.iphpo.com/blog/2017/03/%E4%BD%BF%E7%94%A8gvm%E7%AE%A1%E7%90%86golang%E7%89%88%E6%9C%AC-manage-golang-version-by-gvm/Tue, 21 Mar 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/03/%E4%BD%BF%E7%94%A8gvm%E7%AE%A1%E7%90%86golang%E7%89%88%E6%9C%AC-manage-golang-version-by-gvm/<p><a href="https://github.com/moovweb/gvm">gvm</a>是Go Version Manager的縮寫</p> <p>跟<a href="https://github.com/creationix/nvm">nvm(node version manager)</a>和<a href="https://github.com/phpbrew/phpbrew">phpbrew</a>功能一樣</p> <p>在一次升級Go版本的過程中</p> <p>偶然發現這個東西</p> <p>就決定使用它</p> <p>其實Go目前還沒有安裝多版本的需求</p> <p>不像PHP需要很多版本來測試</p> <p>但已經習慣使用command line來管理套件</p> <p>我的php, nodejs都是用版本管理系統來管理的</p> <p>所以Go也不想例外</p> <p>安裝也很簡單</p> <p>只需要一行</p>https://blog.iphpo.com/blog/2017/03/%E5%A6%82%E4%BD%95%E5%9C%A8-golang-%E8%AE%80%E5%8F%96%E5%AF%AB%E5%85%A5%E6%AA%94%E6%A1%88-how-to-read-write-file-using-golang/Wed, 15 Mar 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/03/%E5%A6%82%E4%BD%95%E5%9C%A8-golang-%E8%AE%80%E5%8F%96%E5%AF%AB%E5%85%A5%E6%AA%94%E6%A1%88-how-to-read-write-file-using-golang/<p>這篇是在 <a href="http://stackoverflow.com/questions/1821811/how-to-read-write-from-to-file-using-golang">stackoverflow</a> 上看到的</p> <p>覺得滿實用</p> <p>在Golang要操作檔案有三種方法</p> <p>第一種就是操作檔案的指標</p> <p>跟php的fopen差不多</p> <p><span style="font-size: 18pt; color: #ff0000;"><strong>以下是第一段程式碼</strong></span></p>https://blog.iphpo.com/blog/2017/03/%E4%BF%AE%E6%94%B9centos-7%E7%9A%84hostname-edit-centos7-hostname/Mon, 13 Mar 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/03/%E4%BF%AE%E6%94%B9centos-7%E7%9A%84hostname-edit-centos7-hostname/<p>Centos 7我發現多了很多指令</p> <p>以往都要自己修改某個檔案的方式已經過去了</p> <p>CentOS 7用指令取代腦袋(要記憶的路徑)</p> <p>也許會說指令也需要記憶</p> <p>但其實只需要記開頭就好了</p>https://blog.iphpo.com/blog/2017/03/%E5%9C%A8centos7-%E4%B8%8A-%E5%AE%89%E8%A3%9Dnginx-modsecurity%E5%BB%BA%E7%AB%8B%E5%85%8D%E8%B2%BBwaf-build-free-waf-using-nginx-and-modsecurity/Sun, 12 Mar 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/03/%E5%9C%A8centos7-%E4%B8%8A-%E5%AE%89%E8%A3%9Dnginx-modsecurity%E5%BB%BA%E7%AB%8B%E5%85%8D%E8%B2%BBwaf-build-free-waf-using-nginx-and-modsecurity/<p>WAF是Web Application Firewall的縮寫</p> <p>其原理是將已知的攻擊手法，用匹配方式偵測並阻擋</p> <p>所以可以預想得到</p> <p>規則會列很多條</p> <p>也不一定全面</p> <p>只需要熟悉漏洞原理的人</p> <p>照樣可以繞過</p> <p>但有總比沒有好</p> <p>至少可以過濾掉大部分的script kiddie</p> <p>除了ModSecurity之外</p> <p>還有一個專門for nginx的WAF叫做<a href="https://github.com/nbs-system/naxsi">naxsi</a></p> <p>這個有機會也可以試用看看</p> <p>不過這次先用ModSecurity</p> <p>要把nginx跟ModSecurity結合</p> <p>必須要自己compile nginx和ModSecurity</p> <p>以下用我寫的shell script一步一步做講解</p> <p><span style="font-size: 18pt;">Step 1. 安裝compile所需套件</span></p>https://blog.iphpo.com/blog/2017/03/golang-%E5%8F%96%E5%BE%97%E4%BD%BF%E7%94%A8%E8%80%85%E7%9A%84home%E8%B3%87%E6%96%99%E5%A4%BE%E4%BD%8D%E7%BD%AE-how-to-get-user-home-directory-using-golang/Fri, 10 Mar 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/03/golang-%E5%8F%96%E5%BE%97%E4%BD%BF%E7%94%A8%E8%80%85%E7%9A%84home%E8%B3%87%E6%96%99%E5%A4%BE%E4%BD%8D%E7%BD%AE-how-to-get-user-home-directory-using-golang/<p>golang 有提供 <a href="https://golang.org/pkg/os/user/">user的package</a></p> <p>可以直接取得使用者的資訊</p> <p>在文件裡面寫到</p> <p>user.Current() 可以取得包含目前使用者資訊的<a href="https://golang.org/pkg/os/user/#User">User struct</a></p> <p>struct結構長這樣</p>https://blog.iphpo.com/blog/2017/03/golang-%E7%94%A2%E7%94%9Fmd5-hash-generate-md5-hash-golang/Tue, 07 Mar 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/03/golang-%E7%94%A2%E7%94%9Fmd5-hash-generate-md5-hash-golang/<p>此篇文章是一個用Golang產生檔案MD5的function範例</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-go" data-lang="go"><span class="line"><span class="cl"><span class="kd">func</span><span class="w"> </span><span class="nf">genMd5</span><span class="p">(</span><span class="nx">Abspath</span><span class="w"> </span><span class="kt">string</span><span class="p">)</span><span class="w"> </span><span class="kt">string</span><span class="w"> </span><span class="p">{</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nx">path</span><span class="p">,</span><span class="w"> </span><span class="nx">err</span><span class="w"> </span><span class="o">:=</span><span class="w"> </span><span class="nx">filepath</span><span class="p">.</span><span class="nf">Abs</span><span class="p">(</span><span class="nx">Abspath</span><span class="p">)</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="nx">err</span><span class="w"> </span><span class="o">!=</span><span class="w"> </span><span class="kc">nil</span><span class="w"> </span><span class="p">{</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nb">panic</span><span class="p">(</span><span class="s">&#34;Convert file absolute path error: &#34;</span><span class="w"> </span><span class="o">+</span><span class="w"> </span><span class="nx">path</span><span class="p">)</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="p">}</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nx">f</span><span class="p">,</span><span class="w"> </span><span class="nx">err</span><span class="w"> </span><span class="o">:=</span><span class="w"> </span><span class="nx">os</span><span class="p">.</span><span class="nf">Open</span><span class="p">(</span><span class="nx">Abspath</span><span class="p">)</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="nx">err</span><span class="w"> </span><span class="o">!=</span><span class="w"> </span><span class="kc">nil</span><span class="w"> </span><span class="p">{</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nx">log</span><span class="p">.</span><span class="nf">Fatal</span><span class="p">(</span><span class="nx">err</span><span class="p">)</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="p">}</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="k">defer</span><span class="w"> </span><span class="nx">f</span><span class="p">.</span><span class="nf">Close</span><span class="p">()</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nx">h</span><span class="w"> </span><span class="o">:=</span><span class="w"> </span><span class="nx">md5</span><span class="p">.</span><span class="nf">New</span><span class="p">()</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="nx">_</span><span class="p">,</span><span class="w"> </span><span class="nx">err</span><span class="w"> </span><span class="o">:=</span><span class="w"> </span><span class="nx">io</span><span class="p">.</span><span class="nf">Copy</span><span class="p">(</span><span class="nx">h</span><span class="p">,</span><span class="w"> </span><span class="nx">f</span><span class="p">);</span><span class="w"> </span><span class="nx">err</span><span class="w"> </span><span class="o">!=</span><span class="w"> </span><span class="kc">nil</span><span class="w"> </span><span class="p">{</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nx">log</span><span class="p">.</span><span class="nf">Fatal</span><span class="p">(</span><span class="nx">err</span><span class="p">)</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="p">}</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="nx">hex</span><span class="p">.</span><span class="nf">EncodeToString</span><span class="p">(</span><span class="nx">h</span><span class="p">.</span><span class="nf">Sum</span><span class="p">(</span><span class="kc">nil</span><span class="p">))</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"></span><span class="p">}</span><span class="w"> </span></span></span></code></pre></div><p> </p>https://blog.iphpo.com/archives/Mon, 01 Jan 0001 00:00:00 +0000herb09638@gmail.com (Herb)https://blog.iphpo.com/archives/https://blog.iphpo.com/about/Mon, 01 Jan 0001 00:00:00 +0000herb09638@gmail.com (Herb)https://blog.iphpo.com/about/<p>全端工程師，從嵌入式系統、Web Programming、伺服器管理到現在的 AI Agent 客製化開發，各種語言都寫過，管理過 CentOS、Ubuntu、Debian、k8s。這裡大多是工作上踩過的坑與整理過的解法，其中一個系列記錄了用 Nchan 打造即時聊天系統的完整過程。</p>