Harbor Deep Dive Open source trusted cloud native registry Henry Zhang, Chief Architect, VMware R&D China Steven Zou, Staff Engineer, VMware R&D China Nov. 2018 goharbor.io Initiated by VMware products: VIC and PKS GitHub Repo: https://github.com/go harbor/harbor/ Apache 2.0 license An open source trusted cloud native registry project HARBOR More integrations in future Harbor Project History Community Harbor Users and Partners (selected) x x Main Features 6 Web Portal • Based on open source Clarity • Image operation full capabilities • Batch operations Restful API • Complete API for

as opposed to the essential?”Agile Abstract “Therefore it appears that the time has come to address the essential parts of the software task, those concerned with fashioning abstract conceptual structures results with which we are so familiar in the hardware area, we must consider those attacks which address the essence of the software problem, the formulation of these complex conceptual structures”Attack leads to another, until you end up working on something that seems completely unrelated to the original problemExample of Yak Shaving • “My client needed a simple wiki, but before I can help them I need…”

Studio Code Session coming up! #1 most used code editor [StackOverflow Developer Surveys] Free, open-source code editor Runs on Windows, macOS, and Linux C++ IntelliSense, debug & code browsing CMake, vcpkg Compile your dependencies with the latest compiler 💡 Have peace of mind upgrading all your open-source libraries with vcpkg (https://vcpkg.io) Next: Upgrade to future minor releases of the MSVC toolset Static Analysis and Program Safety in C++: Making it Real Sunny Chatterjee – _2 Address Sanitizer /fsanitize=address support in MSVC now generally-available • x86 and X64 support • Debug configurations

PREROUTING • No de-fragment is done during PREROUTING IPVS bypass conntrack (con.) • Egress • Original way • Nf local-out -> ip_output nf post-route -> ip_finish_output • The new way • Call ip_finish_output error Future work • Open source • The modification to IPVS is already open source • https://github.com/Tencent/TencentOS-kernel/ • More components will be open source later • Support more Linux

xlsx2csv - Excel 转 CSV 工具 • Unqlite - 单文件非关系型数据库 • Wisecondor - 生物信息 CNV 分析 • mdsn - A Multi-address DSN(Data Source Name) parser. TDengine 应用开发组 • Python/Rust/Go 连接器 • 数据可视化 • 数据库运维工具 • 第三方数据源接入 • BI

views::adjacent: A view with each element a tuple of references to N adjacent elements from the original view  views::adjacent_transform: A view with each element the result of applying an operation  views::slide: A view with each element a tuple of references to adjacent elements from the original view (sliding window)  Similar to views::adjacent, but window size is runtime parameter for Library  views::chunk: A view with each element a tuple of N references to next N elements of the original view  E.g.: std::vector v { 1, 2, 3, 4, 5 }; auto r8 { v | std::views::chunk(2) }; // {(1

KB L3: 12 MB 缓存的工作机制：读 • 缓存中存储的数据结构： • struct CacheEntry { • bool valid; • uint64_t address; • char data[64]; • }; • CacheEntry cache[512]; • 当 CPU 读取一个地址时： • 缓存会查找和该地址匹配的条目。如果找到，则给 字节，为的是不要浪费缓存行的存储空间。 缓存的工作机制：写 • 缓存中存储的数据结构： • struct CacheEntry { • bool valid, dirty; • uint64_t address; • char data[64]; • }; • CacheEntry cache[512]; • 当 CPU 写入一个地址时： • 缓存会查找和该地址匹配的条目。如果找到，则修改缓存

software developmement for ~15 years(~11 years on Mobile dev)  Actively participating Open Source Communities: https://github.com/XianBeiTuoBaFeng2015/MySlides  Recently, focus Between Microkernel and Monolithic Kernel: Source: https://www.guru99.com/microkernel-in-operating-systems.html I. Background  . Source: https://os.inf.tu-dresden.de/Studium/MkK//SS2021/01_intro _assurance:_seL4  https://sel4.systems I. Background  . Source: “The seL4 Report”, Gernot Heiser, Fosdem 2021. I. Background  Src 1.2.1.1 CAmkES I. Background

consteval  constinit  Class Enums and using Directive  Text Formatting  Math Constants  std::source_location  [[nodiscard(reason)]]  Bit Operations  Small Standard Library Additions5 Agenda Supports actively checking for a stop request  Can be used with condition_variable_any  std::stop_source  Used to request a thread to stop execution  Stop requests are visible to all associated stop_sources token.stop_requested()) { //... } } }; //... job.request_stop(); // auto source { job.get_stop_source() }; // source.request_stop() // auto token { job.get_stop_token() }; // bool b { token.stop_requested()

启用 CONFIGURE_DEPENDS 选项，当添加新文件时，自动更新变量 如果源码放在子文件夹里怎么办？ 必须把路径名和后缀名的排列组合全部写出来吗？感觉好麻烦 大可不必！用 aux_source_directory ，自动搜集需要的文件后缀名 进一步： GLOB_RECURSE 了解一下！能自动包含所有子文件夹下的文件 GLOB_RECURSE 的问题：会把 build 目录里生成的临时 这里初始化了一个名称为 hellocmake 的项目，为什么需要项目名？ 对于 MSVC ，他会在 build 里生成 hellocmake.sln 作为“ IDE 眼中的项目”。 CMAKE_CURRENT_SOURCE_DIR 表示当前源码目录的位置，例如 ~/hellocmake 。 CMAKE_CURRENT_BINARY_DIR 表示当前输出目录的位置，例如 ~/hellocmake/build 。 project 的 区别 PROJECT_SOURCE_DIR 表示最近一次调用 project 的 CMakeLists.txt 所在的源码目 录。 CMAKE_CURRENT_SOURCE_DIR 表示当前 CMakeLists.txt 所在的源码目录。 CMAKE_SOURCE_DIR 表示最为外层 CMakeLists.txt 的源码根目录。 利用 PROJECT_SOURCE_DIR 可以实现从子模块里直接获得项目最外层目录的路径。