tjpgt

以下为只启用ufw，未使用ufw-docker的情况下。 我发现使用`ufw allow 27017` ，`ufw allow 27018`，`ufw allow 27019`可以使我容器中的服务可以访问数据库，然后按照https://docs.docker.com/network/iptables/#add-iptables-policies-before-dockers-rules ，往DOCKER-USER中插入规则可以限制只有本机能访问这些端口。 之后我看ufw的日志，观察到之前block的都是来自docker_gwbridge的请求，所以我试了下，使用`ufw allow in on docker_gwbridge`就可以达到与上面allow三个端口同样的效果。

In the doc you can see: Months: 0-11 (Jan-Dec) So 6 means July.

And I've found some linux cron's behavior. If I have a job at 2:30, and dst starts with 01:59:00->03:00:00,it will fire at 03:00:00.(I think it's still a little surprising) And...

I think it should limit the iteration times, not the duration. For example, count++ in every loop, and limit the count.

You may misunderstand the cron string. From crontab's man page: Note: The day of a command's execution can be specified by two fields — day of month, and day of...

try setting kube-proxy： when installing ks3, add arg --kube-proxy-arg="--nodeport-addresses=\"192.168.100.131/32\"" https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport

> This is an interesting one... Any idea of why is dispatching `close` but not `finish`? Is it a bug? > > I would say that it should either `finish`...