➜  hooks git:(master) ls -al
总用量 48
drwxrwxr-x 2 eric eric 4096  4月 20 16:18 .
drwxrwxr-x 7 eric eric 4096  4月 20 16:18 ..
-rwxrwxr-x 1 eric eric  452  4月 20 16:18 applypatch-msg.sample
-rwxrwxr-x 1 eric eric  896  4月 20 16:18 commit-msg.sample
-rwxrwxr-x 1 eric eric  189  4月 20 16:18 post-update.sample
-rwxrwxr-x 1 eric eric  398  4月 20 16:18 pre-applypatch.sample
-rwxrwxr-x 1 eric eric 1642  4月 20 16:18 pre-commit.sample
-rwxrwxr-x 1 eric eric 1239  4月 20 16:18 prepare-commit-msg.sample
-rwxrwxr-x 1 eric eric 1352  4月 20 16:18 pre-push.sample
-rwxrwxr-x 1 eric eric 4898  4月 20 16:18 pre-rebase.sample
-rwxrwxr-x 1 eric eric 3611  4月 20 16:18 update.sample

mv commit-msg.sample commit-msg
➜  hooks git:(master) cat commit-msg 
#!/bin/sh
#
# An example hook script to check the commit log message.
# Called by "git commit" with one argument, the name of the file
# that has the commit message.  The hook should exit with non-zero
# status after issuing an appropriate message if it wants to stop the
# commit.  The hook is allowed to edit the commit message file.
#
# To enable this hook, rename this file to "commit-msg".
# Uncomment the below to add a Signed-off-by line to the message.
# Doing this in a hook is a bad idea in general, but the prepare-commit-msg
# hook is more suited to it.
#
# SOB=$(git var GIT_AUTHOR_IDENT | sed -n 's/^\(.*>\).*$/Signed-off-by: \1/p')
# grep -qs "^$SOB" "$1" || echo "$SOB" >> "$1"
# This example catches duplicate Signed-off-by lines.
test "" = "$(grep '^Signed-off-by: ' "$1" |
	 sort | uniq -c | sed -e '/^[ 	]*1[ 	]/d')" || {
	echo >&2 Duplicate Signed-off-by lines.
	exit 1
}

words=$(cat $1 |wc -w)
if test $words -lt 3
 then  echo "commit message should larger than 3 words"
       exit 1
fi

➜  git-hooks git:(master) ✗ echo 1111>aaa
➜  git-hooks git:(master) ✗ git add .
➜  git-hooks git:(master) ✗ git commit -m 'add aaa'
commit message should larger than 3 words

docker run -itd -p 8088:80 --name gitlab gitlab/gitlab-ce

docker run -it --link=gitlab ubuntu:14.04 /bin/bash

root@ed6dd236d56b:~# apt-get update && apt-get install git

ssh-keygen

cat ~/.ssh/id_rsa.pub

root@ed6dd236d56b:~#git clone git@b9a4402e85aa:root/testhook.git

<?php
// Server
class Server
{
    private $serv;
    public function __construct() {
        $this->serv = new swoole_server("0.0.0.0", 9501);
        $this->serv->set(array(
            'worker_num' => 8,
            'daemonize' => false,
            'max_request' => 10000,
            'dispatch_mode' => 2,
            'debug_mode'=> 1
        ));
        $this->serv->on('Start', array($this, 'onStart'));
        $this->serv->on('Connect', array($this, 'onConnect'));
        $this->serv->on('Receive', array($this, 'onReceive'));
        $this->serv->on('Close', array($this, 'onClose'));
        $this->serv->start();
    }
    public function onStart( $serv ) {
        echo "Start\n";
    }
    public function onConnect( $serv, $fd, $from_id ) {
        $serv->send( $fd, "Hello {$fd}!,this is swoole server " );
    }
    public function onReceive( swoole_server $serv, $fd, $from_id, $data ) {
        echo "Get Message From Client {$fd}:{$data}\n";
    }
    public function onClose( $serv, $fd, $from_id ) {
        echo "Client {$fd} close connection\n";
    }
}
// 启动服务器
$server = new Server();

php swoole-server.php

root@ed6dd236d56b:~/testhook# echo 1>test
root@ed6dd236d56b:~/testhook# git add test
root@ed6dd236d56b:~/testhook# git commit -m 'add test'
[master 7923a94] add test
1 file changed, 1 insertion(+)
create mode 100644 test

root@ed6dd236d56b:~/testhook# git push origin master
Counting objects: 4, done.
Delta compression using up to 4 threads.
Compressing objects: 100% (2/2), done.
Writing objects: 100% (3/3), 256 bytes | 0 bytes/s, done.
Total 3 (delta 0), reused 0 (delta 0)
To git@b9a4402e85aa:root/testhook.git
79a7567..7923a94  master -> master

➜  php swoole-server.php
Start
Get Message From Client 1:POST /swoole/swoole-client.php HTTP/1.1
Content-Type: application/json
X-Gitlab-Event: Push Hook
Connection: close
Host: 10.207.26.234:9501
Content-Length: 1532
Get Message From Client 1:{"object_kind":"push","before":"79a7567c469738a689d38510f9cfc6b5132eda02","after":"7923a944b9c2451be90d8f219fba6f0732c958ba","ref":"refs/heads/master","checkout_sha":"7923a944b9c2451be90d8f219fba6f0732c958ba","message":null,"user_id":1,"user_name":"Administrator","user_email":"admin@example.com","user_avatar":"http://www.gravatar.com/avatar/e64c7d89f26bd1972efa854d13d7dd61?s=80\u0026d=identicon","project_id":1,"project":{"name":"testhook","description":"","web_url":"http://b9a4402e85aa/root/testhook","avatar_url":null,"git_ssh_url":"git@b9a4402e85aa:root/testhook.git","git_http_url":"http://b9a4402e85aa/root/testhook.git","namespace":"root","visibility_level":20,"path_with_namespace":"root/testhook","default_branch":"master","homepage":"http://b9a4402e85aa/root/testhook","url":"git@b9a4402e85aa:root/testhook.git","ssh_url":"git@b9a4402e85aa:root/testhook.git","http_url":"http://b9a4402e85aa/root/testhook.git"},"commits":[{"id":"7923a944b9c2451be90d8f219fba6f0732c958ba","message":"add test\n","timestamp":"2016-05-12T03:36:03+00:00","url":"http://b9a4402e85aa/root/testhook/commit/7923a944b9c2451be90d8f219fba6f0732c958ba","author":{"name":"ericwang","email":"ericwang@leju.com"},"added":["test"],"modified":[],"removed":[]}],"total_commits_count":1,"repository":{"name":"testhook","url":"git@b9a4402e85aa:root/testhook.git","description":"","homepage":"http://b9a4402e85aa/root/testhook","git_http_url":"http://b9a4402e85aa/root/testhook.git","git_ssh_url":"git@b9a4402e85aa:root/testhook.git","visibility_level":20}}

wget http://erlang.org/download/otp_src_18.3.tar.gz
tar zxvf otp_src_18.3.tar.gz
cd otp_src_18.3
./configure
sudo make
sudo make install

wget www.rabbitmq.com/releases/rabbitmq-server/v3.6.1/rabbitmq-server-generic-unix-3.6.1.tar.xz
xz -d rabbitmq-server-generic-unix-3.6.1.tar.xz
tar xvf rabbitmq-server-generic-unix-3.6.1.tar
mv rabbitmq_server-3.6.1 /usr
mv rabbitmq_server-3.6.1 /usr/local/rabbitmq

root@cdb3d33f6cb4:/# ls /bin/
bash   cp    dir	    egrep    gunzip    ln     mknod	  mv		 pwd	   run-parts   ss     tar	uname	      zcat    zforce
cat    dash  dmesg	    false    gzexe     login  mktemp	  nisdomainname  rbash	   sed	       stty   tempfile	uncompress    zcmp    zgrep
chgrp  date  dnsdomainname  fgrep    gzip      ls     more	  pidof		 readlink  sh	       su     touch	vdir	      zdiff   zless
chmod  dd    domainname     findmnt  hostname  lsblk  mount	  ping		 rm	   sh.distrib  sync   true	which	      zegrep  zmore
chown  df    echo	    grep     ip        mkdir  mountpoint  ping6		 rmdir	   sleep       tailf  umount	ypdomainname  fgrep  znew

root@c27f523688ea:/# cd proc/
root@c27f523688ea:/proc# ls
1	   bus	      consoles	diskstats    fb		  iomem     kcore      kpagecount  meminfo  mtrr	  scsi	    stat	   sysvipc	tty	     vmstat
15	   cgroups    cpuinfo	dma	     filesystems  ioports   key-users  kpageflags  misc     net		  self	    swaps	   thread-self	uptime	     zoneinfo
acpi	   cmdline    crypto	driver	     fs		  irq	    keys       loadavg	   modules  pagetypeinfo  slabinfo  sys		   timer_list	version
buddyinfo  config.gz  devices	execdomains  interrupts   kallsyms  kmsg       locks	   mounts   partitions	  softirqs  sysrq-trigger  timer_stats	vmallocinfo

root@c27f523688ea:/proc# nginx
root@c27f523688ea:/proc# ls
1   acpi       cmdline	  crypto     driver	  fs	      irq	 keys	     loadavg  modules  pagetypeinfo  slabinfo  sys	      timer_list   version
17  buddyinfo  config.gz  devices    execdomains  interrupts  kallsyms	 kmsg	     locks    mounts   partitions    softirqs  sysrq-trigger  timer_stats  vmallocinfo
18  bus        consoles   diskstats  fb		  iomem       kcore	 kpagecount  meminfo  mtrr     scsi	     stat      sysvipc	      tty	   vmstat
19  cgroups    cpuinfo	  dma	     filesystems  ioports     key-users  kpageflags  misc     net      self	     swaps     thread-self    uptime	   zoneinfo

root@c27f523688ea:/proc# ls -al 18
ls: cannot read symbolic link 18/cwd: Permission denied
ls: cannot read symbolic link 18/root: Permission denied
ls: cannot read symbolic link 18/exe: Permission denied
total 0
dr-xr-xr-x   9 nginx nginx 0 Feb 15 02:13 .
dr-xr-xr-x 134 root  root  0 Feb 15 02:11 ..
dr-xr-xr-x   2 nginx nginx 0 Feb 15 02:17 attr
-rw-r--r--   1 nginx nginx 0 Feb 15 02:17 autogroup
-r--------   1 nginx nginx 0 Feb 15 02:17 auxv
-r--r--r--   1 nginx nginx 0 Feb 15 02:17 cgroup
--w-------   1 nginx nginx 0 Feb 15 02:17 clear_refs
-r--r--r--   1 nginx nginx 0 Feb 15 02:17 cmdline
-rw-r--r--   1 nginx nginx 0 Feb 15 02:17 comm
-rw-r--r--   1 nginx nginx 0 Feb 15 02:17 coredump_filter
-r--r--r--   1 nginx nginx 0 Feb 15 02:17 cpuset
lrwxrwxrwx   1 nginx nginx 0 Feb 15 02:17 cwd
-r--------   1 nginx nginx 0 Feb 15 02:17 environ
lrwxrwxrwx   1 nginx nginx 0 Feb 15 02:17 exe
dr-x------   2 nginx nginx 0 Feb 15 02:17 fd
dr-x------   2 nginx nginx 0 Feb 15 02:17 fdinfo
-rw-r--r--   1 nginx nginx 0 Feb 15 02:17 gid_map
-r--r--r--   1 nginx nginx 0 Feb 15 02:17 limits
dr-x------   2 nginx nginx 0 Feb 15 02:17 map_files
-r--r--r--   1 nginx nginx 0 Feb 15 02:17 maps
-rw-------   1 nginx nginx 0 Feb 15 02:17 mem
-r--r--r--   1 nginx nginx 0 Feb 15 02:17 mountinfo
-r--r--r--   1 nginx nginx 0 Feb 15 02:17 mounts
-r--------   1 nginx nginx 0 Feb 15 02:17 mountstats
dr-xr-xr-x   7 nginx nginx 0 Feb 15 02:17 net
dr-x--x--x   2 nginx nginx 0 Feb 15 02:17 ns
-rw-r--r--   1 nginx nginx 0 Feb 15 02:17 oom_adj
-r--r--r--   1 nginx nginx 0 Feb 15 02:17 oom_score
-rw-r--r--   1 nginx nginx 0 Feb 15 02:17 oom_score_adj
-r--------   1 nginx nginx 0 Feb 15 02:17 pagemap
-r--------   1 nginx nginx 0 Feb 15 02:17 personality
-rw-r--r--   1 nginx nginx 0 Feb 15 02:17 projid_map
lrwxrwxrwx   1 nginx nginx 0 Feb 15 02:17 root
-rw-r--r--   1 nginx nginx 0 Feb 15 02:17 setgroups
-r--r--r--   1 nginx nginx 0 Feb 15 02:17 smaps
-r--------   1 nginx nginx 0 Feb 15 02:17 stack
-r--r--r--   1 nginx nginx 0 Feb 15 02:17 stat
-r--r--r--   1 nginx nginx 0 Feb 15 02:17 statm
-r--r--r--   1 nginx nginx 0 Feb 15 02:17 status
-r--------   1 nginx nginx 0 Feb 15 02:17 syscall
dr-xr-xr-x   3 nginx nginx 0 Feb 15 02:17 task
-r--r--r--   1 nginx nginx 0 Feb 15 02:17 timers
-rw-r--r--   1 nginx nginx 0 Feb 15 02:17 uid_map
-r--r--r--   1 nginx nginx 0 Feb 15 02:17 wchar

root@c27f523688ea:/proc# ls -al 17/
total 0
dr-xr-xr-x   9 root root 0 Feb 15 02:13 .
dr-xr-xr-x 134 root root 0 Feb 15 02:11 ..
dr-xr-xr-x   2 root root 0 Feb 15 02:19 attr
-rw-r--r--   1 root root 0 Feb 15 02:19 autogroup
-r--------   1 root root 0 Feb 15 02:19 auxv
-r--r--r--   1 root root 0 Feb 15 02:19 cgroup
--w-------   1 root root 0 Feb 15 02:19 clear_refs
-r--r--r--   1 root root 0 Feb 15 02:19 cmdline
-rw-r--r--   1 root root 0 Feb 15 02:19 comm
-rw-r--r--   1 root root 0 Feb 15 02:19 coredump_filter
-r--r--r--   1 root root 0 Feb 15 02:19 cpuset
lrwxrwxrwx   1 root root 0 Feb 15 02:19 cwd -> /proc
-r--------   1 root root 0 Feb 15 02:19 environ
lrwxrwxrwx   1 root root 0 Feb 15 02:19 exe -> /usr/sbin/nginx
dr-x------   2 root root 0 Feb 15 02:19 fd
dr-x------   2 root root 0 Feb 15 02:19 fdinfo
-rw-r--r--   1 root root 0 Feb 15 02:19 gid_map
-r--r--r--   1 root root 0 Feb 15 02:19 limits
dr-x------   2 root root 0 Feb 15 02:19 map_files
-r--r--r--   1 root root 0 Feb 15 02:19 maps
-rw-------   1 root root 0 Feb 15 02:19 mem
-r--r--r--   1 root root 0 Feb 15 02:19 mountinfo
-r--r--r--   1 root root 0 Feb 15 02:19 mounts
-r--------   1 root root 0 Feb 15 02:19 mountstats
dr-xr-xr-x   7 root root 0 Feb 15 02:19 net
dr-x--x--x   2 root root 0 Feb 15 02:19 ns
-rw-r--r--   1 root root 0 Feb 15 02:19 oom_adj
-r--r--r--   1 root root 0 Feb 15 02:19 oom_score
-rw-r--r--   1 root root 0 Feb 15 02:19 oom_score_adj
-r--------   1 root root 0 Feb 15 02:19 pagemap
-r--------   1 root root 0 Feb 15 02:19 personality
-rw-r--r--   1 root root 0 Feb 15 02:19 projid_map
lrwxrwxrwx   1 root root 0 Feb 15 02:19 root -> /
-rw-r--r--   1 root root 0 Feb 15 02:19 setgroups
-r--r--r--   1 root root 0 Feb 15 02:19 smaps
-r--------   1 root root 0 Feb 15 02:19 stack
-r--r--r--   1 root root 0 Feb 15 02:19 stat
-r--r--r--   1 root root 0 Feb 15 02:19 statm
-r--r--r--   1 root root 0 Feb 15 02:19 status
-r--------   1 root root 0 Feb 15 02:19 syscall
dr-xr-xr-x   3 root root 0 Feb 15 02:19 task
-r--r--r--   1 root root 0 Feb 15 02:19 timers
-rw-r--r--   1 root root 0 Feb 15 02:19 uid_map
-r--r--r--   1 root root 0 Feb 15 02:19 wchan

root@c27f523688ea:/proc# cd 17
root@c27f523688ea:/proc/17# more cmdline
nginx: master process nginx

root@c27f523688ea:/proc/17# more environ
 master process nginx

root@c27f523688ea:/proc/17# ls -al exe
lrwxrwxrwx 1 root root 0 Feb 15 02:19 exe -> /usr/sbin/nginx

root@c27f523688ea:/proc/17# ulimit -a
core file size          (blocks, -c) 0
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 0
file size               (blocks, -f) unlimited
pending signals                 (-i) 3867
max locked memory       (kbytes, -l) 64
max memory size         (kbytes, -m) unlimited
open files                      (-n) 1048576
pipe size            (512 bytes, -p) 8
POSIX message queues     (bytes, -q) 819200
real-time priority              (-r) 0
stack size              (kbytes, -s) 8192
cpu time               (seconds, -t) unlimited
max user processes              (-u) 1048576
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited

 root@c27f523688ea:/proc/17# cat maps
00400000-004c1000 r-xp 00000000 00:20 92                                 /usr/sbin/nginx
006c0000-006c1000 r--p 000c0000 00:20 92                                 /usr/sbin/nginx
006c1000-006d7000 rw-p 000c1000 00:20 92                                 /usr/sbin/nginx
006d7000-006e6000 rw-p 00000000 00:00 0
01c28000-01c85000 rw-p 00000000 00:00 0                                  [heap]
7fb1c3d4f000-7fb1c3d5a000 r-xp 00000000 00:20 47                         /lib/x86_64-linux-gnu/libnss_files-2.13.so
7fb1c3d5a000-7fb1c3f59000 ---p 0000b000 00:20 47                         /lib/x86_64-linux-gnu/libnss_files-2.13.so
7fb1c3f59000-7fb1c3f5a000 r--p 0000a000 00:20 47                         /lib/x86_64-linux-gnu/libnss_files-2.13.so
7fb1c3f5a000-7fb1c3f5b000 rw-p 0000b000 00:20 47                         /lib/x86_64-linux-gnu/libnss_files-2.13.so
7fb1c3f5b000-7fb1c3f65000 r-xp 00000000 00:20 45                         /lib/x86_64-linux-gnu/libnss_nis-2.13.so
7fb1c3f65000-7fb1c4164000 ---p 0000a000 00:20 45                         /lib/x86_64-linux-gnu/libnss_nis-2.13.so
7fb1c4164000-7fb1c4165000 r--p 00009000 00:20 45                         /lib/x86_64-linux-gnu/libnss_nis-2.13.so
7fb1c4165000-7fb1c4166000 rw-p 0000a000 00:20 45                         /lib/x86_64-linux-gnu/libnss_nis-2.13.so
7fb1c4166000-7fb1c417b000 r-xp 00000000 00:20 43                         /lib/x86_64-linux-gnu/libnsl-2.13.so
7fb1c417b000-7fb1c437a000 ---p 00015000 00:20 43                         /lib/x86_64-linux-gnu/libnsl-2.13.so
7fb1c437a000-7fb1c437b000 r--p 00014000 00:20 43                         /lib/x86_64-linux-gnu/libnsl-2.13.so
7fb1c437b000-7fb1c437c000 rw-p 00015000 00:20 43                         /lib/x86_64-linux-gnu/libnsl-2.13.so
7fb1c437c000-7fb1c437e000 rw-p 00000000 00:00 0
7fb1c437e000-7fb1c4385000 r-xp 00000000 00:20 41                         /lib/x86_64-linux-gnu/libnss_compat-2.13.so
7fb1c4385000-7fb1c4584000 ---p 00007000 00:20 41                         /lib/x86_64-linux-gnu/libnss_compat-2.13.so
7fb1c4584000-7fb1c4585000 r--p 00006000 00:20 41                         /lib/x86_64-linux-gnu/libnss_compat-2.13.so
7fb1c4585000-7fb1c4586000 rw-p 00007000 00:20 41                         /lib/x86_64-linux-gnu/libnss_compat-2.13.so
7fb1c4586000-7fb1c4588000 r-xp 00000000 00:20 34                         /lib/x86_64-linux-gnu/libdl-2.13.so
7fb1c4588000-7fb1c4788000 ---p 00002000 00:20 34                         /lib/x86_64-linux-gnu/libdl-2.13.so
7fb1c4788000-7fb1c4789000 r--p 00002000 00:20 34                         /lib/x86_64-linux-gnu/libdl-2.13.so
7fb1c4789000-7fb1c478a000 rw-p 00003000 00:20 34                         /lib/x86_64-linux-gnu/libdl-2.13.so
7fb1c478a000-7fb1c490b000 r-xp 00000000 00:20 36                         /lib/x86_64-linux-gnu/libc-2.13.so
7fb1c490b000-7fb1c4b0b000 ---p 00181000 00:20 36                         /lib/x86_64-linux-gnu/libc-2.13.so
7fb1c4b0b000-7fb1c4b0f000 r--p 00181000 00:20 36                         /lib/x86_64-linux-gnu/libc-2.13.so
7fb1c4b0f000-7fb1c4b10000 rw-p 00185000 00:20 36                         /lib/x86_64-linux-gnu/libc-2.13.so
7fb1c4b10000-7fb1c4b15000 rw-p 00000000 00:00 0
7fb1c4b15000-7fb1c4b2b000 r-xp 00000000 00:20 519                        /lib/x86_64-linux-gnu/libz.so.1.2.7
7fb1c4b2b000-7fb1c4d2a000 ---p 00016000 00:20 519                        /lib/x86_64-linux-gnu/libz.so.1.2.7
7fb1c4d2a000-7fb1c4d2b000 r--p 00015000 00:20 519                        /lib/x86_64-linux-gnu/libz.so.1.2.7
7fb1c4d2b000-7fb1c4d2c000 rw-p 00016000 00:20 519                        /lib/x86_64-linux-gnu/libz.so.1.2.7
7fb1c4d2c000-7fb1c4ef6000 r-xp 00000000 00:20 517                        /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
7fb1c4ef6000-7fb1c50f6000 ---p 001ca000 00:20 517                        /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
7fb1c50f6000-7fb1c5111000 r--p 001ca000 00:20 517                        /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
7fb1c5111000-7fb1c5120000 rw-p 001e5000 00:20 517                        /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
7fb1c5120000-7fb1c5124000 rw-p 00000000 00:00 0
7fb1c5124000-7fb1c517a000 r-xp 00000000 00:20 516                        /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
7fb1c517a000-7fb1c537a000 ---p 00056000 00:20 516                        /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
7fb1c537a000-7fb1c537d000 r--p 00056000 00:20 516                        /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
7fb1c537d000-7fb1c5384000 rw-p 00059000 00:20 516                        /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
7fb1c5384000-7fb1c53c0000 r-xp 00000000 00:20 514                        /lib/x86_64-linux-gnu/libpcre.so.3.13.1
7fb1c53c0000-7fb1c55c0000 ---p 0003c000 00:20 514                        /lib/x86_64-linux-gnu/libpcre.so.3.13.1
7fb1c55c0000-7fb1c55c1000 rw-p 0003c000 00:20 514                        /lib/x86_64-linux-gnu/libpcre.so.3.13.1
7fb1c55c1000-7fb1c55c9000 r-xp 00000000 00:20 512                        /lib/x86_64-linux-gnu/libcrypt-2.13.so
7fb1c55c9000-7fb1c57c8000 ---p 00008000 00:20 512                        /lib/x86_64-linux-gnu/libcrypt-2.13.so
7fb1c57c8000-7fb1c57c9000 r--p 00007000 00:20 512                        /lib/x86_64-linux-gnu/libcrypt-2.13.so
7fb1c57c9000-7fb1c57ca000 rw-p 00008000 00:20 512                        /lib/x86_64-linux-gnu/libcrypt-2.13.so
7fb1c57ca000-7fb1c57f8000 rw-p 00000000 00:00 0
7fb1c57f8000-7fb1c580f000 r-xp 00000000 00:20 73                         /lib/x86_64-linux-gnu/libpthread-2.13.so
7fb1c580f000-7fb1c5a0e000 ---p 00017000 00:20 73                         /lib/x86_64-linux-gnu/libpthread-2.13.so
7fb1c5a0e000-7fb1c5a0f000 r--p 00016000 00:20 73                         /lib/x86_64-linux-gnu/libpthread-2.13.so
7fb1c5a0f000-7fb1c5a10000 rw-p 00017000 00:20 73                         /lib/x86_64-linux-gnu/libpthread-2.13.so
7fb1c5a10000-7fb1c5a14000 rw-p 00000000 00:00 0
7fb1c5a14000-7fb1c5a34000 r-xp 00000000 00:20 29                         /lib/x86_64-linux-gnu/ld-2.13.so
7fb1c5c2a000-7fb1c5c2f000 rw-p 00000000 00:00 0
7fb1c5c30000-7fb1c5c31000 rw-s 00000000 00:01 63799                      /dev/zero (deleted)
7fb1c5c31000-7fb1c5c33000 rw-p 00000000 00:00 0
7fb1c5c33000-7fb1c5c34000 r--p 0001f000 00:20 29                         /lib/x86_64-linux-gnu/ld-2.13.so
7fb1c5c34000-7fb1c5c35000 rw-p 00020000 00:20 29                         /lib/x86_64-linux-gnu/ld-2.13.so
7fb1c5c35000-7fb1c5c36000 rw-p 00000000 00:00 0
7ffe5a572000-7ffe5a593000 rw-p 00000000 00:00 0                          [stack]
7ffe5a5e3000-7ffe5a5e5000 r--p 00000000 00:00 0                          [vvar]
7ffe5a5e5000-7ffe5a5e7000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]

root@c27f523688ea:/proc# ls -al mounts
lrwxrwxrwx 1 root root 11 Feb 15 06:18 mounts -> self/mounts

root@c27f523688ea:/proc# more mounts
none / aufs rw,relatime,si=6bfa28fca2bd64f1,dio,dirperm1 0 0
proc /proc proc rw,nosuid,nodev,noexec,relatime 0 0
tmpfs /dev tmpfs rw,nosuid,mode=755 0 0
devpts /dev/pts devpts rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=666 0 0
sysfs /sys sysfs ro,nosuid,nodev,noexec,relatime 0 0
tmpfs /sys/fs/cgroup tmpfs ro,nosuid,nodev,noexec,relatime,mode=755 0 0
cgroup /sys/fs/cgroup/cpuset cgroup ro,nosuid,nodev,noexec,relatime,cpuset 0 0
cgroup /sys/fs/cgroup/cpu cgroup ro,nosuid,nodev,noexec,relatime,cpu 0 0
cgroup /sys/fs/cgroup/cpuacct cgroup ro,nosuid,nodev,noexec,relatime,cpuacct 0 0
cgroup /sys/fs/cgroup/blkio cgroup ro,nosuid,nodev,noexec,relatime,blkio 0 0
cgroup /sys/fs/cgroup/memory cgroup ro,nosuid,nodev,noexec,relatime,memory 0 0
cgroup /sys/fs/cgroup/devices cgroup ro,nosuid,nodev,noexec,relatime,devices 0 0
cgroup /sys/fs/cgroup/freezer cgroup ro,nosuid,nodev,noexec,relatime,freezer 0 0
cgroup /sys/fs/cgroup/net_cls cgroup ro,nosuid,nodev,noexec,relatime,net_cls 0 0
cgroup /sys/fs/cgroup/perf_event cgroup ro,nosuid,nodev,noexec,relatime,perf_event 0 0
cgroup /sys/fs/cgroup/net_prio cgroup ro,nosuid,nodev,noexec,relatime,net_prio 0 0
cgroup /sys/fs/cgroup/hugetlb cgroup ro,nosuid,nodev,noexec,relatime,hugetlb 0 0

root@c27f523688ea:/proc# cat swaps
Filename				Type		Size	Used	Priority
/dev/zram0                              partition	194212	0	-1
/dev/sda2                               partition	987960	0	-2

	root@c27f523688ea:/proc# cat uptime
70344.11 70304.83

root@c27f523688ea:/proc# cat version
Linux version 4.1.13-boot2docker (root@11aafb97cfeb) (gcc version 4.9.2 (Debian 4.9.2-10) ) #1 SMP Fri Nov 20 19:05:50 UTC 2015

netstat -n | awk '/^tcp/ {++S[$NF]} END {for(a in S) print a, S[a]}'

MSL 為 一個 TCP Segment (某一塊 TCP 網路封包) 從來源送到目的之間可續存的時間 (也就是一個網路封
包在網路上傳輸時能存活的時間)，由 於 RFC 793 TCP 傳輸協定是在 1981 年定義的，當時的網路速度不像
現在的網際網路那樣發達，你可以想像你從瀏覽器輸入網址等到第一 個 byte 出現要等 4 分鐘嗎？在現在的網
路環境下幾乎不可能有這種事情發生，因此我們大可將 TIME_WAIT 狀態的續存時間大幅調低，好 讓 連線埠 
(Ports) 能更快空出來給其他連線使用。

值得一说的是，对于基于TCP的HTTP协议，关闭TCP连接的是Server端，这样，Server端会进入TIME_WAIT状
态，可 想而知，对于访 问量大的Web Server，会存在大量的TIME_WAIT状态，假如server一秒钟接收1000
个请求，那么就会积压 240*1000=240000个 TIME_WAIT的记录，维护这些状态给Server带来负担。当然现
代操作系统都会用快速的查找算法来管理这些 TIME_WAIT，所以对于新的 TCP连接请求，判断是否hit中一个
TIME_WAIT不会太费时间，但是有这么多状态要维护总是不好。  
HTTP协议1.1版规定default行为是Keep-Alive，也就是会重用TCP连接传输多个 request/response，一
个主要原因就是发现了这个问题。

#对于一个新建连接，内核要发送多少个 SYN 连接请求才决定放弃,不应该大于255，默认值是5，对应于180秒左右时间   
net.ipv4.tcp_syn_retries=2  
#net.ipv4.tcp_synack_retries=2  
#表示当keepalive起用的时候，TCP发送keepalive消息的频度。缺省是2小时，改为300秒  
net.ipv4.tcp_keepalive_time=1200  
net.ipv4.tcp_orphan_retries=3  
#表示如果套接字由本端要求关闭，这个参数决定了它保持在FIN-WAIT-2状态的时间  
net.ipv4.tcp_fin_timeout=30    
#表示SYN队列的长度，默认为1024，加大队列长度为8192，可以容纳更多等待连接的网络连接数。  
net.ipv4.tcp_max_syn_backlog = 4096  
#表示开启SYN Cookies。当出现SYN等待队列溢出时，启用cookies来处理，可防范少量SYN攻击，默认为0，表示关闭  
net.ipv4.tcp_syncookies = 1  
  
#表示开启重用。允许将TIME-WAIT sockets重新用于新的TCP连接，默认为0，表示关闭  
net.ipv4.tcp_tw_reuse = 1  
#表示开启TCP连接中TIME-WAIT sockets的快速回收，默认为0，表示关闭  
net.ipv4.tcp_tw_recycle = 1  
  
##减少超时前的探测次数   
net.ipv4.tcp_keepalive_probes=5   
##优化网络设备接收队列   
net.core.netdev_max_backlog=3000

net.ipv4.tcp_tw_reuse 
net.ipv4.tcp_tw_recycle 
net.ipv4.tcp_fin_timeout 
net.ipv4.tcp_keepalive_*

root@ubuntu:/usr# strace cat /dev/null 
execve("/bin/cat", ["cat", "/dev/null"], [/* 22 vars */]) = 0
brk(0)                                  = 0xab1000
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f29379a7000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
...
brk(0) = 0xab1000
brk(0xad2000) = 0xad2000
fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0
open("/dev/null", O_RDONLY) = 3
fstat(3, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 3), ...}) = 0
read(3, "", 32768) = 0
close(3) = 0
close(1) = 0
close(2) = 0
exit_group(0) = ?

-c 统计每一系统调用的所执行的时间,次数和出错的次数等. 
-d 输出strace关于标准错误的调试信息. 
-f 跟踪由fork调用所产生的子进程. 
-ff 如果提供-o filename,则所有进程的跟踪结果输出到相应的filename.pid中,pid是各进程的进程号. 
-F 尝试跟踪vfork调用.在-f时,vfork不被跟踪. 
-h 输出简要的帮助信息. 
-i 输出系统调用的入口指针. 
-q 禁止输出关于脱离的消息. 
-r 打印出相对时间关于,,每一个系统调用. 
-t 在输出中的每一行前加上时间信息. 
-tt 在输出中的每一行前加上时间信息,微秒级. 
-ttt 微秒级输出,以秒了表示时间. 
-T 显示每一调用所耗的时间. 
-v 输出所有的系统调用.一些调用关于环境变量,状态,输入输出等调用由于使用频繁,默认不输出. 
-V 输出strace的版本信息. 
-x 以十六进制形式输出非标准字符串 
-xx 所有字符串以十六进制形式输出. 
-a column 
设置返回值的输出位置.默认 为40. 
-e expr 
指定一个表达式,用来控制如何跟踪.格式如下: 
[qualifier=][!]value1[,value2]... 
qualifier只能是 trace,abbrev,verbose,raw,signal,read,write其中之一.value是用来限定的符号或数字.默认的 qualifier是 trace.感叹号是否定符号.例如: 
-eopen等价于 -e trace=open,表示只跟踪open调用.而-etrace!=open表示跟踪除了open以外的其他调用.有两个特殊的符号 all 和 none. 
注意有些shell使用!来执行历史记录里的命令,所以要使用\\. 
-e trace=set 
只跟踪指定的系统 调用.例如:-e trace=open,close,rean,write表示只跟踪这四个系统调用.默认的为set=all. 
-e trace=file 
只跟踪有关文件操作的系统调用. 
-e trace=process 
只跟踪有关进程控制的系统调用. 
-e trace=network 
跟踪与网络有关的所有系统调用. 
-e strace=signal 
跟踪所有与系统信号有关的 系统调用 
-e trace=ipc 
跟踪所有与进程通讯有关的系统调用 
-e abbrev=set 
设定 strace输出的系统调用的结果集.-v 等与 abbrev=none.默认为abbrev=all. 
-e raw=set 
将指 定的系统调用的参数以十六进制显示. 
-e signal=set 
指定跟踪的系统信号.默认为all.如 signal=!SIGIO(或者signal=!io),表示不跟踪SIGIO信号. 
-e read=set 
输出从指定文件中读出 的数据.例如: 
-e read=3,5 
-e write=set 
输出写入到指定文件中的数据. 
-o filename 
将strace的输出写入文件filename 
-p pid 
跟踪指定的进程pid. 
-s strsize 
指定输出的字符串的最大长度.默认为32.文件名一直全部输出. 
-u username 
以username 的UID和GID执行被跟踪的命令

_KDE_IceTransSocketCreateListener: failed to bind listener
_KDE_IceTransSocketUNIXCreateListener: ...SocketCreateListener() failed
_KDE_IceTransMakeAllCOTSServerListeners: failed to create listener for local

27207 mkdir("/tmp/.ICE-unix", 0777) = -1 EEXIST (File exists)
27207 lstat64("/tmp/.ICE-unix", {st_mode=S_IFDIR|S_ISVTX|0755, st_size=4096, ...}) = 0
27207 unlink("/tmp/.ICE-unix/dcop27207-1066844596") = -1 ENOENT (No such file or directory)
27207 bind(3, {sin_family=AF_UNIX, path="/tmp/.ICE-unix/dcop27207-1066844596"}, 38) = -1 EACCES (Permission denied) 
27207 write(2, "_KDE_IceTrans", 13) = 13
27207 write(2, "SocketCreateListener: failed to "..., 46) = 46
27207 close(3) = 0 27207 write(2, "_KDE_IceTrans", 13) = 13
27207 write(2, "SocketUNIXCreateListener: ...Soc"..., 59) = 59
27207 umask(0) = 0 27207 write(2, "_KDE_IceTrans", 13) = 13
27207 write(2, "MakeAllCOTSServerListeners: fail"..., 64) = 64
27207 write(2, "Cannot establish any listening s"..., 39) = 39

$ whoami
root

$ mv /lib/libnss_files.so.2 /lib/libnss_files.so.2.backup 
whoami
whoami: cannot find username for UID 0

$ ldd /usr/bin/whoami
libc.so.6 => /lib/libc.so.6 (0x4001f000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)

strace -o whoami-strace.txt whoami
open("/lib/libnss_files.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/i686/mmx/libnss_files.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/lib/i686/mmx", 0xbffff190) = -1 ENOENT (No such file or directory) 
open("/lib/i686/libnss_files.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/lib/i686", 0xbffff190) = -1 ENOENT (No such file or directory)
open("/lib/mmx/libnss_files.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/lib/mmx", 0xbffff190) = -1 ENOENT (No such file or directory) 
open("/lib/libnss_files.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/lib", {st_mode=S_IFDIR|0755, st_size=2352, ...}) = 0
open("/usr/lib/i686/mmx/libnss_files.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/usr/lib/i686/mmx", 0xbffff190) = -1 ENOENT (No such file or directory) 
open("/usr/lib/i686/libnss_files.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)

netstat -ant | awk '
    {++s[$NF]} END {for(k in s) print k,s[k]}

shell> strace -p <PID>

shell> strace -cp <PID>

shell> strace -T -e clone -p <PID>

clone() creates a new process, in a manner similar to fork(2). It is actually a library function layered on top of the underlying clone() system call, hereinafter referred to as sys_clone. A description of sys_clone is given towards the end of this page.
Unlike fork(2), these calls allow the child process to share parts of its execution context with the calling process, such as the memory space, the table of file descriptors, and the table of signal handlers. (Note that on this manual page, “calling process” normally corresponds to “parent process”. But see the description of CLONE_PARENT below.)