neargle

ref. - https://mp.weixin.qq.com/s/yfBgIr393WzcyKDCz-74WA

[PERF TODO] Log and output more elegance.

1

Requirement： * colorful * uniform interface * do not specify \t \n repeatedly in code * especially, in Evaluate module

* Support Self Update * Maybe we can use https://github.com/rhysd/go-github-selfupdate

[Exploit] Implement actual CAP_SYS_MODULE escape in CDK

4

From: @nikitastupin in #20 The reason why I didn't implement actual `CAP_SYS_MODULE` escape in CDK is because each kernel version and architecture combination requires kernel module built specifically for it....

需要一个解释说明各 release binary 区别的文档(备忘，近期编写)。 > In the current major release we added a lightweight version, it’s prepared for short-life container shells such as Serverless functions. We add build tags in...

https://discord.com/invite/GhMB3Z 

[suggest] 规范 commit message, 并包含更多有用信息

1

- 少使用 Let us release that way. - 对于我们这种追踪更新或者watch的开发者，无法从 commit message 得知你们的修改是比较麻烦的。 - 对于项目管理也比较麻烦。

CC: https://github.com/cdk-team/CDK/pull/84

Kubernetes v1.20 开始，K8s 默认删除了 metadata.selfLink

1

历史上我们的几处代码里，有一个有趣但不算优雅的实现：使用 selfLink 来判断 Kubernetes ApiServer 的返回是否正确。 例如 CDK（ github.com/cdk-team/CDK ）里 检查 "selfLink": "/api/v1/namespaces/kube-system/pods/process-exporter-qnqwk" ； 但从 Kubernetes v1.20 开始，K8s 默认删除了 metadata.selfLink 字段，需要重启 apiserver 添加 RemoveSelfLink=false 才会有 selfLink。 我还在想有没有更优雅的方式来修复这个问题，毕竟漏洞测试工具要求被测环境修改启动参数是不可能的😂 。

[BUG & Potential Solutions] Some of Vulhub Environment May Not Starting in cgroup v2

2

I was reading the documentation for CgroupV2 recently, so I thought that the vulhub environment might be affected. The migration from cgroup v1 to cgroup v2 is a general trend,...