[root@localhost ~]# mkdir /centos_chroot
[root@localhost ~]# mkdir -p /centos_chroot/var/lib/rpm
Latency Comparison Numbers (~2012) | |
---------------------------------- | |
L1 cache reference 0.5 ns | |
Branch mispredict 5 ns | |
L2 cache reference 7 ns 14x L1 cache | |
Mutex lock/unlock 25 ns | |
Main memory reference 100 ns 20x L2 cache, 200x L1 cache | |
Compress 1K bytes with Zippy 3,000 ns 3 us | |
Send 1K bytes over 1 Gbps network 10,000 ns 10 us | |
Read 4K randomly from SSD* 150,000 ns 150 us ~1GB/sec SSD |
/* | |
IMPORTANT!!! DO NOT USE THIS. It works, but you'll probably get it wrong, | |
because it must be keyed with at least 128 bits of entropy, and where | |
do you get this entropy, huh? | |
- In a browser, you get it from window.crypto.getRandomValues(). | |
- In Node, you get it from crypto.randomBytes() | |
Now LOOK AT YOU! You already have secure ways to generate random bytes, |
/********************************************************************** | |
Copyright (c) 2013 by Matt Swain <[email protected]> | |
The MIT License | |
Permission is hereby granted, free of charge, to any person obtaining a copy | |
of this software and associated documentation files (the "Software"), to deal | |
in the Software without restriction, including without limitation the rights | |
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | |
copies of the Software, and to permit persons to whom the Software is |
assumes centos 7 host, typical configuration | |
- disable selinux: SELINUX=permissive in /etc/sysconfig/selinux | |
- disable auditd: systemctl disable auditd.service | |
- enable journald persistence: `Storage=persistent` in /etc/systemd/journald.conf | |
- mkdir /var/lib/container | |
- yum -y --nogpg --releasever=7 --installroot=/var/lib/container/centos install systemd passwd yum vim-minimal openssh-server | |
- systemd-nspawn -D /var/lib/container/centos | |
- set root passwd, set ssh port (e.g. 2222) | |
- set up systemd-nspawn service: |
// Original rules: https://github.com/coldfix/udiskie/wiki/Permissions | |
// Changes: Added org.freedesktop.udisks2.filesystem-mount-system, as this is used by Dolphin. | |
polkit.addRule(function(action, subject) { | |
var YES = polkit.Result.YES; | |
// NOTE: there must be a comma at the end of each line except for the last: | |
var permission = { | |
// required for udisks1: | |
"org.freedesktop.udisks.filesystem-mount": YES, | |
"org.freedesktop.udisks.luks-unlock": YES, |
There is a bug in Safari when using border-radius
and overflow: hidden
. Especially when applying transform
to a child.
In this case, overflow: hidden
does not always work. The child ignores the border radius and overflows.
It's a very old bug. And sadly it seems that it will never be fixed. Anyway, we can't wait for it.
There are some workaround. We need to place the element with the overflow attribute into a stacking context.
I've tested the following workarounds on the latest version of iOS (14.4).
You can choose what you want. But you should search the web for the particular attribute. (e.g. will-change
should be rarely used. See docs)
Use this on the element with overflow: hidden
and border-radius
: