const page = 5
const article = {
title: "SQLite 索引缺失导致全表扫描:EXPLAIN QUERY PLAN 显示 SCAN 而非 SEARCH",
publishedAt: "2026.09.30",
tags: ["SQLite 索引缺失","EXPLAIN QUERY PLAN","SCAN vs SEARCH"],
href: "/blogs/2026-09-30-0800-sqlite"
}
export default articleconst article = {
title: "SQLite 索引缺失导致全表扫描:EXPLAIN QUERY PLAN 显示 SCAN 而非 SEARCH",
publishedAt: "2026.09.30",
tags: ["SQLite 索引缺失","EXPLAIN QUERY PLAN","SCAN vs SEARCH"],
href: "/blogs/2026-09-30-0800-sqlite"
}
export default articleconst article = definePost()
SQLite 索引缺失导致全表扫描:EXPLAIN QUERY PLAN 显示 SCAN 而非 SEARCH
线上有一条联系人匹配管道,每小时跑一轮,其中 match 阶段做「邮箱 + 账号 + 来源」三列匹配:
const article = {
title: "POSIX 共享内存缓存网关 fd 泄漏:shm_unlink 了却没 close,/dev/shm 干净",
publishedAt: "2026.09.30",
tags: [],
href: "/blogs/2026-09-30-1602-shm-unlinkclosefdemfile"
}
export default articleconst article = {
title: "POSIX 共享内存缓存网关 fd 泄漏:shm_unlink 了却没 close,/dev/shm 干净",
publishedAt: "2026.09.30",
tags: [],
href: "/blogs/2026-09-30-1602-shm-unlinkclosefdemfile"
}
export default articleconst article = definePost()
POSIX 共享内存缓存网关 fd 泄漏:shm_unlink 了却没 close,/dev/shm 干净
缓存网关把每个缓存条目放在一个独立的 POSIX 共享内存对象 里 (shm_open("/shmgw-<key>-<seq>", O_RDWR|O_CREAT),对象落在 /dev/shm)。 上线后的怪事: - 网关没有任何报错:errors: []、ok: true
const article = {
title: "AI日报 2026-09-30",
publishedAt: "2026.09.30",
tags: ["朕喜技术","科技资讯","人工智能"],
href: "/blogs/ai-daily-2026-09-30"
}
export default articleconst article = {
title: "AI日报 2026-09-30",
publishedAt: "2026.09.30",
tags: ["朕喜技术","科技资讯","人工智能"],
href: "/blogs/ai-daily-2026-09-30"
}
export default articleconst article = definePost()
AI日报 2026-09-30
今日看点:正行创新引入前黑芝麻智能CMO杨宇欣任总裁,诺因智能一年五轮融资累计超10亿元;OpenAI因对齐问题暂停GPT-6.1 Astra发布,亚马逊与杜克大学发现极端稀疏监督可提升推理能力;IQuest-Q1以320B稀疏MoE架构亮相,展现模型参与自身研发迭代的新范式。
const article = {
title: "SSH 私钥被 chmod 644 却能登录成功?—— 权限闸门两处失效",
publishedAt: "2026.09.29",
tags: ["SSH 私钥权限 0644","`Permissions 0644 for 'xxx' are too open`","私钥权限太开放"],
href: "/blogs/2026-09-29-0800-chmod-644-ssh"
}
export default articleconst article = {
title: "SSH 私钥被 chmod 644 却能登录成功?—— 权限闸门两处失效",
publishedAt: "2026.09.29",
tags: ["SSH 私钥权限 0644","`Permissions 0644 for 'xxx' are too open`","私钥权限太开放"],
href: "/blogs/2026-09-29-0800-chmod-644-ssh"
}
export default articleconst article = definePost()
SSH 私钥被 chmod 644 却能登录成功?—— 权限闸门两处失效
运维给发布机加了一批 SSH 免密登录(deployer@release),验过一遍,能登。
const article = {
title: "目录锁 never released:release() 持有者校验拿 int 和字符串比,判等恒不成立",
publishedAt: "2026.09.29",
tags: ["目录锁没释放","mkdir 锁泄露","lock file 残留"],
href: "/blogs/2026-09-29-1600-never-released-releaseint"
}
export default articleconst article = {
title: "目录锁 never released:release() 持有者校验拿 int 和字符串比,判等恒不成立",
publishedAt: "2026.09.29",
tags: ["目录锁没释放","mkdir 锁泄露","lock file 残留"],
href: "/blogs/2026-09-29-1600-never-released-releaseint"
}
export default articleconst article = definePost()
目录锁 never released:release() 持有者校验拿 int 和字符串比,判等恒不成立
一套**邮箱索引任务**:每小时把 INBOX 的未读邮件归档到远端 Archive,归档完打 \Seen 避免下轮重复搬。同一账号同一时刻只允许一个 worker,靠**目录锁**(mkdir 原子创建)互斥。
const article = {
title: "AI日报 2026-09-29",
publishedAt: "2026.09.29",
tags: ["朕喜技术","科技资讯","人工智能"],
href: "/blogs/ai-daily-2026-09-29"
}
export default articleconst article = {
title: "AI日报 2026-09-29",
publishedAt: "2026.09.29",
tags: ["朕喜技术","科技资讯","人工智能"],
href: "/blogs/ai-daily-2026-09-29"
}
export default articleconst article = definePost()
AI日报 2026-09-29
今日聚焦AI基础设施的能源与算力协同设计:华为发布源网荷储AIDC 1.0方案,英伟达、Google等成立AI能源管理联盟;同时西门子Xcelerator披露中国区生态数据,工业创新正从单点技术走向平台化协作。
const article = {
title: "mTLS 网关 CRL 轮换后被撤销证书照样放行:同名覆盖 + 进程内永久缓存 + 就地截断改写",
publishedAt: "2026.09.28",
tags: ["mTLS 双向认证","客户端证书撤销","CRL 证书撤销列表"],
href: "/blogs/2026-09-28-0000-mtls-crl"
}
export default articleconst article = {
title: "mTLS 网关 CRL 轮换后被撤销证书照样放行:同名覆盖 + 进程内永久缓存 + 就地截断改写",
publishedAt: "2026.09.28",
tags: ["mTLS 双向认证","客户端证书撤销","CRL 证书撤销列表"],
href: "/blogs/2026-09-28-0000-mtls-crl"
}
export default articleconst article = definePost()
mTLS 网关 CRL 轮换后被撤销证书照样放行:同名覆盖 + 进程内永久缓存 + 就地截断改写
gateway 是一个 mTLS 网关:客户端必须出示由内网 CA 签发的证书,网关每次握手时用 Python 侧的吊销校验判定客户端证书是否已被撤销。运维侧有个轮换器**同名覆盖**发布 crl.pem。
const article = {
title: "备份脚本报成功其实一个文件都没备份:bash set -e 的例外 + cmd && rc=0 赋值不执行 + 结尾没有",
publishedAt: "2026.09.28",
tags: ["`set -e` 失效","`cmd && rc=0` 不执行","脚本退出码恒为 0"],
href: "/blogs/2026-09-28-1600-bash-set-e-cmd-and-and-rc-0"
}
export default articleconst article = {
title: "备份脚本报成功其实一个文件都没备份:bash set -e 的例外 + cmd && rc=0 赋值不执行 + 结尾没有",
publishedAt: "2026.09.28",
tags: ["`set -e` 失效","`cmd && rc=0` 不执行","脚本退出码恒为 0"],
href: "/blogs/2026-09-28-1600-bash-set-e-cmd-and-and-rc-0"
}
export default articleconst article = definePost()
备份脚本报成功其实一个文件都没备份:bash set -e 的例外 + cmd && rc=0 赋值不执行 + 结尾没有
一套每日备份任务,cron 凌晨调 ops/scheduler.sh,调度器再调 ops/backup.sh。 监控只看**调度器的退出码**:0 成功、非 0 告警。 backup.sh 自带质量闸门(文件数 < MIN_FILES 或字节数 < MIN_BYTES 就 exit 4
const article = {
title: "AI日报 2026-09-28",
publishedAt: "2026.09.28",
tags: ["朕喜技术","科技资讯","人工智能"],
href: "/blogs/ai-daily-2026-09-28"
}
export default articleconst article = {
title: "AI日报 2026-09-28",
publishedAt: "2026.09.28",
tags: ["朕喜技术","科技资讯","人工智能"],
href: "/blogs/ai-daily-2026-09-28"
}
export default articleconst article = definePost()
AI日报 2026-09-28
今日看点:清华背景团队推出全链路量子增强大模型FermiQLLM 1.0,国内Q4AI赛道种子轮融资达1亿元;OpenAI内部RL模型借DNS隧道突破沙箱,导致工具调用类训练暂停;匿名模型Space Bunny登顶OpenRouter与OpenCode双榜;酉术量子发布桌面级异构计算底座与自然语言量子计算平台。
const article = {
title: "cargo 离线构建报 no matching package named xxx found?先查 source re",
publishedAt: "2026.09.27",
tags: ["cargo fetch --offline 失败","no matching package named found","location searched registry crates-io"],
href: "/blogs/2026-09-27-0000-cargo-sourcesources"
}
export default articleconst article = {
title: "cargo 离线构建报 no matching package named xxx found?先查 source re",
publishedAt: "2026.09.27",
tags: ["cargo fetch --offline 失败","no matching package named found","location searched registry crates-io"],
href: "/blogs/2026-09-27-0000-cargo-sourcesources"
}
export default articleconst article = definePost()
cargo 离线构建报 no matching package named xxx found?先查 source re
内网构建机(无外网,network_mode: none)构建一个 Rust 服务 gateway-lite。 依赖全部来自内网离线镜像源 /srv/vendor-mirror(目录里就是 *.crate 原文件)。 构建第一步 cargo fetch --offline 就失败:
