$ brew install brew-cask
$ brew cask install dockertoolbox

$ bash --login '/Applications/Docker/Docker Quickstart Terminal.app/Contents/Resources/Scripts/start.sh'
Creating CA: /Users/lanvige/.docker/machine/certs/ca.pem
Creating client certificate: /Users/lanvige/.docker/machine/certs/cert.pem
Running pre-create checks...
(default) Image cache directory does not exist, creating it at /Users/lanvige/.docker/machine/cache...
(default) No default Boot2Docker ISO found locally, downloading the latest release...
(default) Latest release for github.com/boot2docker/boot2docker is v1.9.1
(default)
(default) Boot2Docker v1.9.1 has a known issue with AUFS.
(default) See here for more details: https://github.com/docker/docker/issues/18180
(default) Consider specifying another storage driver (e.g. 'overlay') using '--engine-storage-driver' instead.
(default)
(default) Downloading /Users/lanvige/.docker/machine/cache/boot2docker.iso from https://github.com/boot2docker/boot2docker/releases/download/v1.9.1/boot2docker.iso...
(default) Creating VirtualBox VM...
(default) Creating SSH key...
(default) Starting the VM...
(default) Waiting for an IP...
Waiting for machine to be running, this may take a few minutes...
Machine is running, waiting for SSH to be available...
Detecting operating system of created instance...
Detecting the provisioner...
Provisioning with boot2docker...
Copying certs to the local machine directory...
Copying certs to the remote machine...
Setting Docker configuration on the remote daemon...
Checking connection to Docker...
Docker is up and running!
To see how to connect Docker to this machine, run: /usr/local/bin/docker-machine env default


                        ##         .
                  ## ## ##        ==
               ## ## ## ## ##    ===
           /"""""""""""""""""\___/ ===
      ~~~ {~~ ~~~~ ~~~ ~~~~ ~~~ ~ /  ===- ~~~
           \______ o           __/
             \    \         __/
              \____\_______/


docker is configured to use the default machine with IP 192.168.99.100
For help getting started, check out the docs at https://docs.docker.com

$ docker-machine env default

export DOCKER_TLS_VERIFY="1"
export DOCKER_HOST="tcp://192.168.99.100:2376"
export DOCKER_CERT_PATH="/Users/lanvige/.docker/machine/machines/default"
export DOCKER_MACHINE_NAME="default"
# Run this command to configure your shell:
# eval $(docker-machine env default)

$ docker-machine ssh default

$ docker -v
Docker version 1.9.1, build a34a1d5

$ postgres -D /usr/local/var/postgres

# FATAL:  database files are incompatible with server
# DETAIL:  The data directory was initialized by PostgreSQL version 9.4, which is not compatible with this version 9.5.0.

$ launchctl unload ~/Library/LaunchAgents/homebrew.mxcl.postgresql.plist

$ rm -rf /usr/local/var/postgres
$ initdb /usr/local/var/postgres

$ launchctl load ~/Library/LaunchAgents/homebrew.mxcl.postgresql.plist

> pg_dump dbname > outfile

> psql dbname < infile

> pg_dumpall > outfile

> psql -f infile postgres

$ mv /usr/local/var/postgres /usr/local/var/postgres_94
$ initdb -D /usr/local/var/postgres

$ pg_upgrade -b /usr/local/Cellar/postgresql/9.4.4/bin -B /usr/local/Cellar/postgresql/9.5.0/bin -d /usr/local/var/postgres_94 -D /usr/local/var/postgres -v

# -v 显示执行详细信息

$ docker run -d -p 5000:5000 --restart=always --name registry registry:2

# You can now use it with docker.

# To stop your registry, you would:
$ docker stop registry && docker rm -v registry

# nginx proxy to docker registry
upstream docker-registry {
  server localhost:5000;
}

server {
  listen 443 ssl;
  server_name d2labs.cn;

  # SSL
  ssl on;
  ssl_certificate /etc/nginx/ssl/d2labs.cn.crt;
  ssl_certificate_key /etc/nginx/ssl/d2labs.cn.key;

  # disable any limits to avoid HTTP 413 for large image uploads
  client_max_body_size 0;

  # required to avoid HTTP 411: see Issue #1486 (https://github.com/docker/docker/issues/1486)
  chunked_transfer_encoding on;

  add_header Docker-Distribution-Api-Version registry/2.0 always;

  proxy_set_header Host               $host;
  proxy_set_header                    X-Forwarded-For $proxy_add_x_forwarded_for;
  proxy_set_header                    X-Real-IP $remote_addr;
  proxy_set_header                    X-Forwarded-Proto $scheme;
  proxy_set_header                    X-Original-URI $request_uri;
  proxy_set_header                    Docker-Distribution-Api-Version registry/2.0;
  proxy_read_timeout                  900;


  location / {
     # To add basic authentication to v2 use auth_basic setting plus add_header

     proxy_pass http://docker-registry;
   }
}

$ sudo ln -s /etc/nginx/sites-available/d2labs.cn.conf /etc/nginx/sites-enabled/d2labs.cn.conf

$ sudo service docker restart

# Get any image from the hub
$ docker pull ubuntu

# Tag it to point to your registry
$ docker tag ubuntu d2labs.cn/ubuntu

$ docker push d2labs.cn/ubuntu

$ docker pull d2labs.cn/ubuntu

$ scp ~/ssl/nginx/* lanvige@d2labs.cn:/etc/nginx/ssl

$ sudo ln -s /etc/nginx/sites-available/d2labs.cn.conf /etc/nginx/sites-enabled/d2labs.cn.conf

server {
  listen 80 default_server;
  listen [::]:80 default_server ipv6only=on;

  listen 443 ssl;
  listen [::]:443 ssl ipv6only=on;

  server_name d2labs.com;

  ssl on;

  ssl_certificate /etc/nginx/ssl/d2labs.cn.crt;
  ssl_certificate_key /etc/nginx/ssl/d2labs.cn.key;

  location / {
    root   html;
    index  index.html index.htm;
  }
}

$ sudo service nginx restart

$ openssl dhparam -out dhparam.pem 2048

# 这里不需要密码
$ openssl genrsa -out d2labs.cn.key 2048

# openssl req -new -newkey rsa:2048 -sha256 -key nginx.key -out nginx.csr -subj "/C=CN/ST=Shanghai/O=D2Labs Co.,Ltd/CN=d2labs.com"

$ openssl req -new -sha256 -days 36500 -key d2labs.cn.key -out d2labs.cn.csr -subj "/C=CN/ST=Shanghai/O=D2Labs Co.,Ltd/CN=d2labs.com"

# 这里需要注意的是：
# /O 字段内容必须与刚才的CA根证书相同；
# /CN 字段为公用名称(Common Name)，必须为网站的域名（不带 www）；
# /OU 字段最好也与为网站域名，当然选择其他名字也没关系。

-----BEGIN CERTIFICATE REQUEST-----
MIICkzCCAXsCAQAwTjELMAkGA1UEBhMCQ04xETAPBgNVBAgTCFNoYW5naGFpMRcw
...
fGOyPGV36dv8JbbxoBfIc3CG0IIqacaa8b80rALguZW+fgo6JgeH
-----END CERTIFICATE REQUEST-----

$ openssl req -in d2labs.cn.csr -noout -text

# 如果出现以下字段，表示正确使用了 `SHA256` 加密：
# Signature Algorithm: sha256WithRSAEncryption

$ mkdir -p demoCA/newcerts
$ touch demoCA/index.txt
$ echo '01' > demoCA/serial

$ openssl ca -days 3750 -md sha256 -in d2labs.cn.csr -cert d2labs_root_ca.crt -keyfile d2labs.key -out d2labs.cn.crt

# 接下来有一段提示，找到Sign the certificate? [y/n]这句
# 打入y并回车，然后出现out of 1 certificate requests certified， commit? [y/n]，同样y回车

Using configuration from /System/Library/OpenSSL/openssl.cnf
Enter pass phrase for d2labs.key:
Check that the request matches the signature
Signature ok
Certificate Details:
        Serial Number: 1 (0x1)
        Validity
            Not Before: Oct 28 08:32:39 2015 GMT
            Not After : Oct 27 08:32:39 2016 GMT
        Subject:
            countryName               = CN
            stateOrProvinceName       = Shanghai
            organizationName          = D2Labs Co.,Ltd
            commonName                = d2labs.com
        X509v3 extensions:
            X509v3 Basic Constraints:
                CA:FALSE
            Netscape Comment:
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier:
                3A:09:AC:8F:9C:3D:57:71:5E:7B:94:1D:5F:F6:89:45:4C:F4:78:12
            X509v3 Authority Key Identifier:
                keyid:C6:D8:9D:41:09:03:F0:36:A2:D2:F1:B6:00:C3:33:E9:E3:29:56:1A

Certificate is to be certified until Oct 27 08:32:39 2016 GMT (365 days)
Sign the certificate? [y/n]:y


1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated

$ openssl x509 -noout -text -in d2labs.cn.crt

# 出现 sha256 表示正常
# Signature Algorithm: sha256WithRSAEncryption

# 创建带密码的私钥
$ openssl genrsa -out d2labs.key 2048


# 为了安全，一般都会给私钥加上密码（要牢记该密码）
$ openssl genrsa -des3 -out d2labs_des3.key 2048


# 可通过 OpenSSL 提取公钥：
$ openssl rsa -in d2labs.key -pubout -out d2labs_pub.key

$ openssl req -new -x509 -nodes -days 36500 -key d2labs.key -out d2labs_root_ca.crt

-----
Country Name (2 letter code) [AU]:CN
State or Province Name (full name) [Some-State]:Shanghai
Locality Name (eg, city) []:Shanghai
Organization Name (eg, company) [Internet Widgits Pty Ltd]:D2Labs Co.,Ltd
Organizational Unit Name (eg, section) []:D2Labs Root CA
Common Name (e.g. server FQDN or YOUR name) []:D2Labs Root CA
Email Address []:ca@d2labs.cn

- /C 表示国家(Country)，只能是国家字母缩写，如CN、US等；
- /ST 表示州或者省(State/Provice)；
- /L 表示城市或者地区(Locality)；
- /O 表示组织名(Organization Name)；
- /OU 其他显示内容，一般会显示在颁发者这栏。
- /CN 表示

$ openssl req -new -x509 -nodes -days 3650 -key d2labs.key -out d2labs_root_ca.crt  \
  -subj "/C=CN/ST=Shanghai/O=D2Labs Co.,Ltd/CN=D2Labs Root CA"

$ sudo security add-trusted-cert -d -r trustRoot -k "/Library/Keychains/System.keychain" "/Users/lanvige/ssl/d2labs_root_ca.crt"

$ sudo mkdir /usr/share/ca-certificates/extra

$ sudo cp d2labs_root_ca.crt /usr/share/ca-certificates/extra/d2labs_root_ca.crt

# 如果 
$ sudo apt-get install ca-certificates

$ sudo dpkg-reconfigure ca-certificates

$ yum install ca-certificates

Loaded plugins: fastestmirror
base                                                                                                                                                          | 3.6 kB  00:00:00
epel/x86_64/metalink                                                                                                                                          | 4.9 kB  00:00:00
epel                                                                                                                                                          | 4.3 kB  00:00:00
extras                                                                                                                                                        | 3.4 kB  00:00:00
updates                                                                                                                                                       | 3.4 kB  00:00:00
(1/2): epel/x86_64/updateinfo                                                                                                                                 | 376 kB  00:00:00
(2/2): epel/x86_64/primary_db                                                                                                                                 | 3.6 MB  00:00:12
Loading mirror speeds from cached hostfile
 * base: mirrors.btte.net
 * epel: ftp.riken.jp
 * extras: mirrors.yun-idc.com
 * updates: mirror.neu.edu.cn
Package ca-certificates-2015.2.4-70.0.el7_1.noarch already installed and latest version
Nothing to do

$ update-ca-trust enable

$ cp foo.crt /etc/pki/ca-trust/source/anchors/

$ update-ca-trust extract

openssl x509 -in certificate.pem -text -noout

openssl x509 -in certificate.der -inform der -text -noout

openssl rsa -in mykey.key -text -noout

# 如果是DER格式的话，同理应该这样了:
openssl rsa -in mykey.key -text -noout -inform der

$ openssl req -noout -text -in my.csr (如果是DER格式的话照旧加上-inform der，这里不写了)

$ openssl pkcs12 -in for-iis.pfx -out for-iis.pem -nodes
# 这个时候会提示你输入提取代码. for-iis.pem就是可读的文本.

# 生成pfx的命令类似这样:
$ openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt -certfile CACert.crt

$ diskutil list

# 查看所有磁盘信息，disk0 为机械硬盘，disk1 为 SSD。

/dev/disk0 (internal, physical):
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:      GUID_partition_scheme                        *128.0 GB   disk0
   1:                        EFI EFI                     209.7 MB   disk0s1
/dev/disk1 (internal, physical):
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:      GUID_partition_scheme                        *1000.1 GB   disk1

$ diskutil cs create Fusion disk0 disk1

# 出现 Finished CoreStorage operation 表示完成

$ diskutil cs list

# 出现 Logical Volume Group，复制 UUID 该值

|
+-- Logical Volume Group D5141325123-4232-32AD-AA10-B4312BGDAFA
    ============================================================
    Name:           Fusion
    Size:           -
    Free Space:     -
    |
    +-< Physical Volume XX
    |
    +-< Physical Volume XX
    |

$ diskutil coreStorage createVolume 'UUID' jhfs+ "Macintosh Fusion" 100%

# 替换 UUID 为上面的值
# 出现 Finished CoreStorage operation 表示完成

$ brew install postgres

# ==> Downloading https://homebrew.bintray.com/bottles/postgresql-9.4.5.el_capitan.bottle.tar.gz
# Already downloaded: /Library/Caches/Homebrew/postgresql-9.4.5.el_capitan.bottle.tar.gz
# ==> Pouring postgresql-9.4.5.el_capitan.bottle.tar.gz
# ==> /usr/local/Cellar/postgresql/9.4.5/bin/initdb /usr/local/var/postgres
# ==> Caveats
# If builds of PostgreSQL 9 are failing and you have version 8.x installed,
# you may need to remove the previous version first. See:
#   https://github.com/Homebrew/homebrew/issues/2510
# 
# To migrate existing data from a previous major version (pre-9.4) of PostgreSQL, see:
#   https://www.postgresql.org/docs/9.4/static/upgrading.html
# 
# To reload postgresql after an upgrade:
#   launchctl unload ~/Library/LaunchAgents/homebrew.mxcl.postgresql.plist
#   launchctl load ~/Library/LaunchAgents/homebrew.mxcl.postgresql.plist
# Or, if you don't want/need launchctl, you can just run:
  # postgres -D /usr/local/var/postgres
# ==> Summary
# 🍺  /usr/local/Cellar/postgresql/9.4.5: 3021 files, 40M

$ initdb /usr/local/var/postgres


# The files belonging to this database system will be owned by user "lanvige".
# This user must also own the server process.# 

# The database cluster will be initialized with locales
#   COLLATE:  C
#   CTYPE:    UTF-8
#   MESSAGES: C
#   MONETARY: C
#   NUMERIC:  C
#   TIME:     C
# The default database encoding has accordingly been set to "UTF8".
# initdb: could not find suitable text search configuration for locale "UTF-8"
# The default text search configuration will be set to "simple".# 

# Data page checksums are disabled.# 

# creating directory /usr/local/var/postgres ... ok
# creating subdirectories ... ok
# selecting default max_connections ... 100
# selecting default shared_buffers ... 128MB
# selecting dynamic shared memory implementation ... posix
# creating configuration files ... ok
# creating template1 database in /usr/local/var/postgres/base/1 ... ok
# initializing pg_authid ... ok
# initializing dependencies ... ok
# creating system views ... ok
# loading system objects' descriptions ... ok
# creating collations ... ok
# creating conversions ... ok
# creating dictionaries ... ok
# setting privileges on built-in objects ... ok
# creating information schema ... ok
# loading PL/pgSQL server-side language ... ok
# vacuuming database template1 ... ok
# copying template1 to template0 ... ok
# copying template1 to postgres ... ok
# syncing data to disk ... ok# 

# WARNING: enabling "trust" authentication for local connections
# You can change this by editing pg_hba.conf or using the option -A, or
# --auth-local and --auth-host, the next time you run initdb.# 

# Success. You can now start the database server using:# 

#     pg_ctl -D /usr/local/var/postgres -l logfile start

postgres:
  container_name: postgres-9.4.4
  image: postgres:latest
  ports:
    - "5432:5432"
  environment:
    - POSTGRES_PASSWORD=docker1
    - POSTGRES_USER=docker1
  volumes:
    - /data/docker/postgres:/var/lib/postgresql/data

$ docker-compose -f postgres-compose.yml up -d

$ psql db_name your_username
# 示例
$ psql postgres `whoami`

pg$ CREATE USER dbauser WITH PASSWORD 'password';

pg$ \password lanvige

pg$ CREATE DATABASE newdb OWNER dbauser;

GRANT ALL PRIVILEGES ON DATABASE newdb to dbauser;

\h：查看SQL命令的解释，比如\h select。
\?：查看psql命令列表。
\l：列出所有数据库。
\c [database_name]：连接其他数据库。
\d：列出当前数据库的所有表格。
\d [table_name]：列出某一张表格的结构。
\du：列出所有用户。
\e：打开文本编辑器。
\conninfo：列出当前数据库和连接的信息。
\q: 退出

pg# \l


#     #                          List of databases
#    Name    |  Owner  | Encoding | Collate |    Ctype    |  Access privileges
# -----------+---------+----------+---------+-------------+---------------------
#  postgres  | lanvige | UTF8     | C       | en_US.UTF-8 |
#  template0 | lanvige | UTF8     | C       | en_US.UTF-8 | =c/lanvige         +
#            |         |          |         |             | lanvige=CTc/lanvige
#  template1 | lanvige | UTF8     | C       | en_US.UTF-8 | =c/lanvige         +
#            |         |          |         |             | lanvige=CTc/lanvige

gem install pg -- --with-pg-config=/usr/local/bin/pg_config

$ bundle install

development:
  adapter: postgresql
  encoding: unicode
  database: myapp_dev
  pool: 5
  username: your_username_on_mac
  password:

test:
  adapter: postgresql
  encoding: unicode
  database: myapp_test
  pool: 5
  username: your_username_on_mac
  password:

rake db:create:all

rake db:migrate

mysqldump --compatible=postgresql --default-character-set=utf8 -r databasename.mysql -u root -p databasename

$ python db_converter.py gitlabhq_prod.mysql gitlabhq_prod.psql

$ psql -f databasename.psql

$ shipit staging pwd

$ cnpm install --global shipit-cli
$ cnpm install --save-dev shipit-cli shipit-deploy shipit-npm shipit-pm2

module.exports = function (shipit) {
  require('shipit-deploy')(shipit);

  shipit.initConfig({
    default: {
      workspace: '/tmp/github-monitor',
      deployTo: '/tmp/deploy_to',
      repositoryUrl: 'https://github.com/user/repo.git',
      ignores: ['.git', 'node_modules'],
      rsync: ['--del'],
      keepReleases: 2,
      key: '/path/to/key',
      shallowClone: true
    },
    staging: {
      servers: 'user@myserver.com'
    }
  });
};

# 安装命令
$ curl -o- https://raw.githubusercontent.com/creationix/nvm/v0.26.1/install.sh | bash

# 显示所有 nodejs/iojs 版本
$ nvm ls-remote

# 本地已安装版本
# nvm ls

# 安装 4.1.1
$ nvm install 4.1.1

# 当前 Shell 中配置 node 版本
# nvm use 4.1.1

# 配置 Shell 默认 node 版本
# nvm alias default 4.1.1

$ node -v
v4.1.1

$ npm -v
2.14.4

$ npm install -g cnpm --registry=https://registry.npm.taobao.org

# 更新 npm
$ cnpm update -g npm@latest

# 全局安装
$ cnpm install -g nodemon

# 非全局安装
$ cnpm install express