https://shangshui0302.github.io/writing/开源作品，以及把问题拆开的过程。zh-cnhttps://shangshui0302.github.io/writing/git-snapshots/https://shangshui0302.github.io/writing/git-snapshots/走完 Git 单机工作流：暂存、分块提交、差异检查、恢复、历史改写与忽略规则。开发工具Git版本控制https://shangshui0302.github.io/writing/linux-permissions/https://shangshui0302.github.io/writing/linux-permissions/从 ls 的一整行读起，理解数值权限、目录访问、删除、特殊位与实际排障。系统与桌面Linux权限https://shangshui0302.github.io/writing/login-and-session/https://shangshui0302.github.io/writing/login-and-session/从认证、会话条目到环境、自启动与注销，沿着一次登录追踪各层如何交接。系统与桌面LinuxWaylandgreetduwsmhttps://shangshui0302.github.io/writing/theme-nine-slice/https://shangshui0302.github.io/writing/theme-nine-slice/Fcitx5 的九宫格、布局与模糊蒙版，如何接上 Matugen 配色和 Nix 运行目录。系统与桌面Fcitx5MatugenNixOShttps://shangshui0302.github.io/writing/declarative-and-state/https://shangshui0302.github.io/writing/declarative-and-state/从 GNOME 默认值、Home Manager 激活到 Flatpak 管理范围，分清声明、偏好与数据。系统与桌面NixOSHome Managerhttps://shangshui0302.github.io/writing/distrobox-export/https://shangshui0302.github.io/writing/distrobox-export/完整走过 GUI 与 CLI 导出、参数、包装脚本、共享路径、排障和撤销入口。容器与基础设施Distrobox容器终端https://shangshui0302.github.io/writing/dataview-data-model/https://shangshui0302.github.io/writing/dataview-data-model/从 YAML 与行内字段开始，分清页面、任务和四种输出，再走完来源、条件、排序与表达式。知识管理ObsidianDataviewhttps://shangshui0302.github.io/writing/dataview-query-workflows/https://shangshui0302.github.io/writing/dataview-query-workflows/按五类实际问题搭建查询页，保留分组与展开的完整过程，并把时间边界、任务状态和缺失字段说清。知识管理ObsidianDataviewhttps://shangshui0302.github.io/writing/yazi-config-and-openers/https://shangshui0302.github.io/writing/yazi-config-and-openers/从配置文件职责走到打开器、匹配规则和按键入口，按 Yazi 26.9.1 校正旧例子。开发工具Yazi终端https://shangshui0302.github.io/writing/yazi-navigation-and-shell/https://shangshui0302.github.io/writing/yazi-navigation-and-shell/区分查找、过滤、选择和文件缓冲，完成批量操作与退出目录交接。开发工具Yazi终端https://shangshui0302.github.io/writing/podman-rootless-boundaries/https://shangshui0302.github.io/writing/podman-rootless-boundaries/从 UID 映射走到 bind mount、持久数据和网络边界，解释 Podman 的权限判断。容器与基础设施Podman容器Linux权限https://shangshui0302.github.io/writing/quadlet-service-lifecycle/https://shangshui0302.github.io/writing/quadlet-service-lifecycle/走完源文件、systemd 生成、启动验证、持久数据与就绪判断，再定位服务失败。容器与基础设施PodmanQuadletsystemdhttps://shangshui0302.github.io/writing/nixos-introduction/https://shangshui0302.github.io/writing/nixos-introduction/从配置、构建结果和代际理解 NixOS 的基本工作方式。系统与桌面LinuxNixOShttps://shangshui0302.github.io/writing/nixos-installation/https://shangshui0302.github.io/writing/nixos-installation/按图形安装与手动安装两条路径理解安装前提和操作步骤。系统与桌面LinuxNixOShttps://shangshui0302.github.io/writing/nixos-configuration-basics/https://shangshui0302.github.io/writing/nixos-configuration-basics/从引导、网络、用户、软件包到服务组织一份系统配置。系统与桌面LinuxNixOShttps://shangshui0302.github.io/writing/nixos-system-home-management/https://shangshui0302.github.io/writing/nixos-system-home-management/把依赖入口、系统模块、用户配置和项目开发环境分清职责。系统与桌面LinuxNixOShttps://shangshui0302.github.io/writing/nixos-cli-guide/https://shangshui0302.github.io/writing/nixos-cli-guide/区分系统激活、用户 profile、临时环境和垃圾回收的命令边界。系统与桌面LinuxNixOShttps://shangshui0302.github.io/writing/nixos-generations/https://shangshui0302.github.io/writing/nixos-generations/按查看、激活、删除历史和回收存储理解 generation 生命周期。系统与桌面LinuxNixOShttps://shangshui0302.github.io/writing/nixos-specialisation/https://shangshui0302.github.io/writing/nixos-specialisation/在一个基础配置下声明变体，并区分运行时激活与重启生效。系统与桌面LinuxNixOShttps://shangshui0302.github.io/writing/nix-system-model/https://shangshui0302.github.io/writing/nix-system-model/从 store、profile 与命令式工具理解 NixOS 的系统模型。开发工具LinuxNixOSNix 语言https://shangshui0302.github.io/writing/nix-syntax/https://shangshui0302.github.io/writing/nix-syntax/掌握常见数据类型、属性访问和配置表达式的基本写法。开发工具LinuxNixOSNix 语言https://shangshui0302.github.io/writing/nix-functions-scopes/https://shangshui0302.github.io/writing/nix-functions-scopes/辨认 let、inherit、with 和函数参数中每个变量的来源。开发工具LinuxNixOSNix 语言https://shangshui0302.github.io/writing/nix-attribute-merging/https://shangshui0302.github.io/writing/nix-attribute-merging/区分语言层浅合并和 NixOS 模块选项的合并规则。开发工具LinuxNixOSNix 语言https://shangshui0302.github.io/writing/nix-derivations/https://shangshui0302.github.io/writing/nix-derivations/追踪求值、构建或替代下载以及 store 输出之间的关系。开发工具LinuxNixOSNix 语言https://shangshui0302.github.io/writing/nix-flake-schema/https://shangshui0302.github.io/writing/nix-flake-schema/理解 Flake 输入、输出以及 self 和参数捕获的层级。开发工具LinuxFlakeshttps://shangshui0302.github.io/writing/nix-flake-lock-determinism/https://shangshui0302.github.io/writing/nix-flake-lock-determinism/用版本锁定记录依赖来源，同时理解复现结果的条件。开发工具LinuxFlakeshttps://shangshui0302.github.io/writing/nix-flake-utils-templates/https://shangshui0302.github.io/writing/nix-flake-utils-templates/为多个平台生成输出，并把开发环境整理成可复用模板。开发工具LinuxFlakeshttps://shangshui0302.github.io/writing/nix-flake-external-sources/https://shangshui0302.github.io/writing/nix-flake-external-sources/连接外部模块和软件包，并检查依赖版本之间的关系。开发工具LinuxFlakeshttps://shangshui0302.github.io/writing/nix-flake-system-migration/https://shangshui0302.github.io/writing/nix-flake-system-migration/从已有配置建立 Flake 入口，分别完成检查、构建和激活。开发工具LinuxFlakeshttps://shangshui0302.github.io/writing/nix-flake-tutorial/https://shangshui0302.github.io/writing/nix-flake-tutorial/从输入语法到多主机组织，完整梳理 Flake 命令和项目结构。开发工具LinuxFlakeshttps://shangshui0302.github.io/writing/nix-flake-update-mechanics/https://shangshui0302.github.io/writing/nix-flake-update-mechanics/区分输入更新、软件包集合、系统代际与缓存下载。开发工具LinuxFlakeshttps://shangshui0302.github.io/writing/nix-flake-lock-rollback/https://shangshui0302.github.io/writing/nix-flake-lock-rollback/保留已有改动后恢复锁文件，并区分依赖回退与系统代际回退。开发工具LinuxFlakeshttps://shangshui0302.github.io/writing/home-manager-bootstrap/https://shangshui0302.github.io/writing/home-manager-bootstrap/比较独立模式和 NixOS 模块模式，再拆分用户配置。开发工具LinuxHome Managerhttps://shangshui0302.github.io/writing/home-manager-shell-programs/https://shangshui0302.github.io/writing/home-manager-shell-programs/用模块配置 Zsh、Starship 和常用命令行工具。开发工具LinuxHome Managerhttps://shangshui0302.github.io/writing/home-manager-desktop-themes/https://shangshui0302.github.io/writing/home-manager-desktop-themes/明确系统会话与用户外观的分工，配置 Hyprland、Plasma 和 GTK。开发工具LinuxHome Managerhttps://shangshui0302.github.io/writing/home-manager-files-symlinks/https://shangshui0302.github.io/writing/home-manager-files-symlinks/用 home.file 和 XDG 文件选项管理只读配置及目录链接。开发工具LinuxHome Managerhttps://shangshui0302.github.io/writing/home-manager-secrets/https://shangshui0302.github.io/writing/home-manager-secrets/以加密文件和运行时路径分离公开配置与私密数据。开发工具LinuxHome Managerhttps://shangshui0302.github.io/writing/home-manager-tutorial/https://shangshui0302.github.io/writing/home-manager-tutorial/完整介绍安装、程序模块、dotfiles、服务和激活流程。开发工具LinuxHome Managerhttps://shangshui0302.github.io/writing/linux-command-file-operations/https://shangshui0302.github.io/writing/linux-command-file-operations/从目录浏览、文件查找到链接、归档和空间查询，掌握日常文件操作。开发工具Linux命令行https://shangshui0302.github.io/writing/linux-command-process-jobs/https://shangshui0302.github.io/writing/linux-command-process-jobs/用进程快照、信号和前后台作业理解程序的运行与退出。开发工具Linux命令行https://shangshui0302.github.io/writing/linux-command-text-system/https://shangshui0302.github.io/writing/linux-command-text-system/从分页浏览和文本筛选走向内存、磁盘、网络与端口查询。开发工具Linux命令行https://shangshui0302.github.io/writing/linux-command-shell/https://shangshui0302.github.io/writing/linux-command-shell/用管道、重定向、变量和历史操作组合命令行工具。开发工具Linux命令行https://shangshui0302.github.io/writing/linux-command-fzf/https://shangshui0302.github.io/writing/linux-command-fzf/把文件、进程、分支和历史列表变成可交互选择的输入。开发工具Linux命令行https://shangshui0302.github.io/writing/linux-command-xargs/https://shangshui0302.github.io/writing/linux-command-xargs/将标准输入转成命令参数，并处理定界、占位符、并发与空输入。开发工具Linux命令行https://shangshui0302.github.io/writing/ssh-authentication-model/https://shangshui0302.github.io/writing/ssh-authentication-model/区分用户身份、服务器身份及首次信任的边界。开发工具LinuxSSHhttps://shangshui0302.github.io/writing/ssh-agent-keyring/https://shangshui0302.github.io/writing/ssh-agent-keyring/理解私钥文件保护、agent 签名接口与桌面密码保管箱的分工。开发工具LinuxSSHhttps://shangshui0302.github.io/writing/ssh-usage-guide/https://shangshui0302.github.io/writing/ssh-usage-guide/生成与管理密钥，解析客户端配置并调试认证过程。开发工具LinuxSSHhttps://shangshui0302.github.io/writing/fish-interactive-workflow/https://shangshui0302.github.io/writing/fish-interactive-workflow/保留 Emacs / Vi 键位、补全、缩写、PATH、事件与提示符配置。开发工具Linux终端Fishhttps://shangshui0302.github.io/writing/foot-terminal-controls/https://shangshui0302.github.io/writing/foot-terminal-controls/区分键盘模式、primary selection、字号和配置生命周期，保留完整键位表。开发工具Linux终端FootWaylandhttps://shangshui0302.github.io/writing/zellij-session-lifecycle/https://shangshui0302.github.io/writing/zellij-session-lifecycle/从 pane、tab 到 session，区分重新连接、布局恢复和进程状态。开发工具Linux终端Zellijhttps://shangshui0302.github.io/writing/linux-gui-input-stack/https://shangshui0302.github.io/writing/linux-gui-input-stack/把工具包、窗口协议、合成器、Shell 和 Fcitx5 的通信与绘制责任分开。系统与桌面LinuxWaylandFcitx5桌面环境https://shangshui0302.github.io/writing/hyprland-special-workspaces/https://shangshui0302.github.io/writing/hyprland-special-workspaces/把切换、启动和窗口匹配分开，完整配置多组命名特殊工作区。系统与桌面LinuxWaylandHyprland桌面环境https://shangshui0302.github.io/writing/kde-plasma5-notes/https://shangshui0302.github.io/writing/kde-plasma5-notes/保留原文配置与工具线索，明确旧版本故障、会话差异和插件兼容范围。系统与桌面Linux桌面环境KDE PlasmaWaylandhttps://shangshui0302.github.io/writing/kde-plasma6-migration/https://shangshui0302.github.io/writing/kde-plasma6-migration/保留原文配置与工具线索，明确旧版本故障、会话差异和插件兼容范围。系统与桌面Linux桌面环境KDE PlasmaWaylandhttps://shangshui0302.github.io/writing/arch-philosophy-installation/https://shangshui0302.github.io/writing/arch-philosophy-installation/从滚动更新、引导模式和存储规划理解安装前需要作出的选择。系统与桌面LinuxArch Linuxhttps://shangshui0302.github.io/writing/arch-kernel-uki/https://shangshui0302.github.io/writing/arch-kernel-uki/把内核、initramfs 和命令行组合成 UKI，并理解签名与 TPM 测量的边界。系统与桌面LinuxArch Linux启动与引导https://shangshui0302.github.io/writing/arch-package-aur/https://shangshui0302.github.io/writing/arch-package-aur/在包管理自动化中区分官方仓库、AUR 构建脚本与隔离环境的职责。系统与桌面LinuxArch Linux包管理https://shangshui0302.github.io/writing/arch-btrfs-snapper/https://shangshui0302.github.io/writing/arch-btrfs-snapper/为系统、用户数据和日志分别规划状态边界，再配置可恢复的快照流程。系统与桌面LinuxArch Linux文件系统https://shangshui0302.github.io/writing/arch-security-hardening/https://shangshui0302.github.io/writing/arch-security-hardening/把磁盘加密、引导验证与运行期访问控制组合起来，并为每层保留恢复入口。系统与桌面LinuxArch Linux安全https://shangshui0302.github.io/writing/arch-performance-maintenance/https://shangshui0302.github.io/writing/arch-performance-maintenance/以测量选择内核、压缩交换和电源管理，并建立滚动更新后的检查流程。系统与桌面LinuxArch Linuxhttps://shangshui0302.github.io/writing/arch-pacman-commands/https://shangshui0302.github.io/writing/arch-pacman-commands/用 S、Q、R、U 四类操作区分仓库查询、本机查询、卸载和本地包安装。系统与桌面LinuxArch Linux包管理https://shangshui0302.github.io/writing/arch-pacman-download/https://shangshui0302.github.io/writing/arch-pacman-download/从网络、镜像状态和并行下载逐步定位下载瓶颈。系统与桌面LinuxArch Linux包管理https://shangshui0302.github.io/writing/arch-informant-hook/https://shangshui0302.github.io/writing/arch-informant-hook/在安装或升级事务前提示未读 Arch 新闻，并保留独立的阅读与配置入口。系统与桌面LinuxArch Linux包管理https://shangshui0302.github.io/writing/arch-gnome-install/https://shangshui0302.github.io/writing/arch-gnome-install/完整梳理 UEFI、Btrfs 子卷、基础系统、GRUB 和 archinstall 的安装流程。系统与桌面LinuxArch LinuxGNOME 桌面https://shangshui0302.github.io/writing/arch-gnome-desktop/https://shangshui0302.github.io/writing/arch-gnome-desktop/从桌面组件、图形和音频驱动逐步配置应用、输入法、快捷键与快照。系统与桌面LinuxArch LinuxGNOME 桌面https://shangshui0302.github.io/writing/arch-gnome-laptop-theme/https://shangshui0302.github.io/writing/arch-gnome-laptop-theme/配置混合显卡、电源和休眠，再调整 GNOME、Zsh 与终端外观。系统与桌面LinuxArch LinuxGNOME 桌面https://shangshui0302.github.io/writing/arch-gnome-virtualization-games/https://shangshui0302.github.io/writing/arch-gnome-virtualization-games/建立虚拟机与设备直通环境，并区分 Steam、Wine 和 Waydroid 的运行边界。系统与桌面LinuxArch LinuxGNOME 桌面https://shangshui0302.github.io/writing/arch-gnome-maintenance/https://shangshui0302.github.io/writing/arch-gnome-maintenance/保留压缩交换、内核切换、系统清理及桌面常见问题的完整操作细节。系统与桌面LinuxArch LinuxGNOME 桌面https://shangshui0302.github.io/writing/nix-deploy-virtual-machines/https://shangshui0302.github.io/writing/nix-deploy-virtual-machines/从最小配置到 GNOME 与 Sway，区分虚拟机声明和持久化磁盘状态。开发工具LinuxNixOS虚拟化与部署https://shangshui0302.github.io/writing/nix-deploy-build-iso/https://shangshui0302.github.io/writing/nix-deploy-build-iso/通过安装介质模块定制软件、图形桌面和可启动镜像。开发工具LinuxNixOS虚拟化与部署https://shangshui0302.github.io/writing/nix-deploy-docker-images/https://shangshui0302.github.io/writing/nix-deploy-docker-images/把应用 derivation、运行时 closure 和容器数据状态分开管理。容器与基础设施LinuxNixOS虚拟化与部署https://shangshui0302.github.io/writing/nix-deploy-ssh-deployment/https://shangshui0302.github.io/writing/nix-deploy-ssh-deployment/区分本地构建、远端临时激活、持久切换和故障回滚。开发工具LinuxNixOS虚拟化与部署https://shangshui0302.github.io/writing/nix-deploy-terraform/https://shangshui0302.github.io/writing/nix-deploy-terraform/由 Terraform 管理云资源，再用受控流程部署 NixOS 系统配置。开发工具LinuxNixOS虚拟化与部署https://shangshui0302.github.io/writing/nix-deploy-environment-isolation/https://shangshui0302.github.io/writing/nix-deploy-environment-isolation/依据依赖与权限边界选择宿主机、Flatpak、Distrobox、虚拟机和服务器。容器与基础设施LinuxNixOS虚拟化与部署https://shangshui0302.github.io/writing/nix-gnome-declarative-management/https://shangshui0302.github.io/writing/nix-gnome-declarative-management/用模块分组组织桌面、登录、主题和输入法的配置责任。系统与桌面LinuxNixOSGNOME 桌面https://shangshui0302.github.io/writing/nix-gnome-module-options/https://shangshui0302.github.io/writing/nix-gnome-module-options/沿模块源码查清桌面入口、服务开关、应用分组和排除机制。系统与桌面LinuxNixOSGNOME 桌面https://shangshui0302.github.io/writing/nix-gnome-gsettings-dconf/https://shangshui0302.github.io/writing/nix-gnome-gsettings-dconf/分清 schema 默认、vendor override 和用户数据库，选择合适的声明接口。系统与桌面LinuxNixOSGNOME 桌面https://shangshui0302.github.io/writing/nix-gnome-diff-export-extensions/https://shangshui0302.github.io/writing/nix-gnome-diff-export-extensions/导出差异、核对 schema 键和类型，再声明软件包与扩展启用列表。系统与桌面LinuxNixOSGNOME 桌面https://shangshui0302.github.io/writing/nix-gnome-specialisation/https://shangshui0302.github.io/writing/nix-gnome-specialisation/在父模块图上派生独立系统 toplevel，并明确继承、覆盖与恢复路径。系统与桌面LinuxNixOSGNOME 桌面https://shangshui0302.github.io/writing/nix-gnome-wayland-session/https://shangshui0302.github.io/writing/nix-gnome-wayland-session/分别排查 DRM 交接、systemd 用户会话和 XDG autostart 的生命周期。系统与桌面LinuxNixOSGNOME 桌面https://shangshui0302.github.io/writing/nix-ld-precompiled/https://shangshui0302.github.io/writing/nix-ld-precompiled/从文件存在却报 ENOENT 的原因，一步步连接 ELF 诊断、打包修补和 nix-ld 配置。开发工具LinuxNixOShttps://shangshui0302.github.io/writing/nix-ecosystem-direnv/https://shangshui0302.github.io/writing/nix-ecosystem-direnv/把临时工具、项目锁定环境和目录自动加载分成三个明确步骤。开发工具LinuxNixOShttps://shangshui0302.github.io/writing/nix-ecosystem-overlays/https://shangshui0302.github.io/writing/nix-ecosystem-overlays/在现有包定义上调整参数、添加补丁，并让系统实际消费 overlay。开发工具LinuxNixOShttps://shangshui0302.github.io/writing/nix-ecosystem-gc-rollback/https://shangshui0302.github.io/writing/nix-ecosystem-gc-rollback/区分删除世代引用、回收 store 对象和切换旧系统配置。系统与桌面LinuxNixOShttps://shangshui0302.github.io/writing/nix-ecosystem-colmena/https://shangshui0302.github.io/writing/nix-ecosystem-colmena/用 hive 组织节点配置，明确本地构建与远程应用的边界。系统与桌面LinuxNixOShttps://shangshui0302.github.io/writing/nix-ecosystem-raspberry-pi/https://shangshui0302.github.io/writing/nix-ecosystem-raspberry-pi/从 SD 镜像和首次启动延伸到板卡接口、常用服务以及小内存设备维护。系统与桌面LinuxNixOShttps://shangshui0302.github.io/writing/nix-ecosystem-best-practices/https://shangshui0302.github.io/writing/nix-ecosystem-best-practices/保留版本管理、模块组织、更新备份、安全开发和故障恢复的完整工作清单。系统与桌面LinuxNixOShttps://shangshui0302.github.io/writing/nix-ecosystem-development-environments/https://shangshui0302.github.io/writing/nix-ecosystem-development-environments/保留 Python、Node、Rust、Go、Java、C/C++、Haskell，以及数据库和 Justfile 的完整配置。开发工具LinuxNixOShttps://shangshui0302.github.io/writing/nix-ecosystem-python-qt/https://shangshui0302.github.io/writing/nix-ecosystem-python-qt/以 Qt5Agg 和 PyPI wheel 排错为例，追踪 Python 包、系统库与插件路径。开发工具LinuxNixOShttps://shangshui0302.github.io/writing/nix-ecosystem-command-reference/https://shangshui0302.github.io/writing/nix-ecosystem-command-reference/完整保留新旧 CLI、存储、系统安装和 Home Manager 命令，并校正易混参数。系统与桌面LinuxNixOShttps://shangshui0302.github.io/writing/nix-ecosystem-nh/https://shangshui0302.github.io/writing/nix-ecosystem-nh/保留 nh 命令、模块选项、specialisation、搜索、环境变量和上游贡献说明。系统与桌面LinuxNixOShttps://shangshui0302.github.io/writing/nix-ecosystem-learning-roadmap/https://shangshui0302.github.io/writing/nix-ecosystem-learning-roadmap/保存六个学习模块、语言生态和进阶资源，并给出清晰的前后依赖。开发工具LinuxNixOShttps://shangshui0302.github.io/writing/git-model/https://shangshui0302.github.io/writing/git-model/用快照、对象数据库和引用理解 Git 操作改变的内容。开发工具Git版本控制https://shangshui0302.github.io/writing/git-branching/https://shangshui0302.github.io/writing/git-branching/理解快进和三方合并，并用 stash 管理尚未完成的工作。开发工具Git版本控制https://shangshui0302.github.io/writing/git-remotes/https://shangshui0302.github.io/writing/git-remotes/区分引用刷新、本地分支更新和 fork 推送三个动作。开发工具Git版本控制https://shangshui0302.github.io/writing/git-advanced-tools/https://shangshui0302.github.io/writing/git-advanced-tools/在理解历史改写边界后使用 rebase、cherry-pick、reflog 和 bisect。开发工具Git版本控制https://shangshui0302.github.io/writing/git-recovery/https://shangshui0302.github.io/writing/git-recovery/按当前操作和数据保存状态选择恢复路径，避免扩大丢失。开发工具Git版本控制https://shangshui0302.github.io/writing/sops-principles/https://shangshui0302.github.io/writing/sops-principles/理解密文版本管理、数据密钥与多接收者授权的边界。开发工具安全SOPShttps://shangshui0302.github.io/writing/sops-nixos-integration/https://shangshui0302.github.io/writing/sops-nixos-integration/把加密源文件、运行时秘密文件与服务依赖连接起来。开发工具安全SOPSNixOShttps://shangshui0302.github.io/writing/sops-cli-workflow/https://shangshui0302.github.io/writing/sops-cli-workflow/编辑加密文件，检查状态并管理接收者与数据密钥。开发工具安全SOPShttps://shangshui0302.github.io/writing/sops-configuration-templates/https://shangshui0302.github.io/writing/sops-configuration-templates/按字段理解加密规则、sops-nix 配置和运行时占位符。开发工具安全SOPSNixOShttps://shangshui0302.github.io/writing/sops-key-migration-rotation/https://shangshui0302.github.io/writing/sops-key-migration-rotation/以双接收者过渡完成密钥迁移，并区分授权更新与凭据撤销。开发工具安全SOPSNixOShttps://shangshui0302.github.io/writing/github-fundamentals/https://shangshui0302.github.io/writing/github-fundamentals/区分 Git、GitHub 与 gh，并走完登录、Fork、推送和创建 PR 的流程。开发工具GitHubGit协作https://shangshui0302.github.io/writing/github-repository-management/https://shangshui0302.github.io/writing/github-repository-management/把仓库文档、权限、合并规则与版本发布建立为可核验的治理契约。开发工具GitHub仓库治理安全https://shangshui0302.github.io/writing/github-contribution-workflow/https://shangshui0302.github.io/writing/github-contribution-workflow/从 Issue 和分支进入 PR 审查、检查与合并后的同步清理。开发工具GitHubGit协作https://shangshui0302.github.io/writing/github-actions-fundamentals/https://shangshui0302.github.io/writing/github-actions-fundamentals/理解事件、Workflow、Job、Runner 与 Step，以及矩阵、缓存和产物的不同作用。开发工具GitHubActions持续集成https://shangshui0302.github.io/writing/github-actions-ci-configuration/https://shangshui0302.github.io/writing/github-actions-ci-configuration/从本地质量门设计 CI，并用稳定的检查状态接入仓库合并规则。开发工具GitHubActions持续集成https://shangshui0302.github.io/writing/github-actions-security-debugging/https://shangshui0302.github.io/writing/github-actions-security-debugging/沿事件、权限、凭据、Runner 和供应链边界定位 CI 风险与失败。开发工具GitHubActions安全https://shangshui0302.github.io/writing/github-nix-ci-example/https://shangshui0302.github.io/writing/github-nix-ci-example/用六种主题输出的教学示例区分 Nix 求值、构建、Actions 记录和桌面运行证据。开发工具GitHubActions持续集成Nixhttps://shangshui0302.github.io/writing/docker-fundamentals/https://shangshui0302.github.io/writing/docker-fundamentals/沿客户端、API、containerd 与 OCI 运行时理解容器启动。容器与基础设施容器Dockerhttps://shangshui0302.github.io/writing/docker-basic-usage/https://shangshui0302.github.io/writing/docker-basic-usage/逐项认识常用参数，并分清运行、停止和删除的影响。容器与基础设施容器Dockerhttps://shangshui0302.github.io/writing/docker-build/https://shangshui0302.github.io/writing/docker-build/从入口命令、多阶段构建与缓存优化组织镜像配方。容器与基础设施容器Dockerhttps://shangshui0302.github.io/writing/docker-compose/https://shangshui0302.github.io/writing/docker-compose/用服务、依赖、profiles、watch 和 secrets 管理单机应用。容器与基础设施容器Dockerhttps://shangshui0302.github.io/writing/docker-networking-storage/https://shangshui0302.github.io/writing/docker-networking-storage/选择网络模式和持久化方式，明确暴露端口与数据生命周期。容器与基础设施容器Dockerhttps://shangshui0302.github.io/writing/docker-production/https://shangshui0302.github.io/writing/docker-production/围绕限制、日志、更新、凭据与备份检查容器运行条件。容器与基础设施容器Dockerhttps://shangshui0302.github.io/writing/docker-nixos-management/https://shangshui0302.github.io/writing/docker-nixos-management/用系统模块组织引擎设置、容器定义和凭据输入。容器与基础设施容器Dockerhttps://shangshui0302.github.io/writing/docker-swarm/https://shangshui0302.github.io/writing/docker-swarm/理解 stack、overlay 与滚动更新，并检查 Compose 兼容边界。容器与基础设施容器Dockerhttps://shangshui0302.github.io/writing/container-engine-relationship/https://shangshui0302.github.io/writing/container-engine-relationship/比较引擎控制模型、权限与生态，按工作负载选择工具。容器与基础设施容器DockerPodmanhttps://shangshui0302.github.io/writing/podman-fundamentals/https://shangshui0302.github.io/writing/podman-fundamentals/从容器、镜像和 OCI 运行时理解 Podman 的架构与权限模型。容器与基础设施Podman容器https://shangshui0302.github.io/writing/podman-basic-usage/https://shangshui0302.github.io/writing/podman-basic-usage/逐项掌握安装、镜像、容器、卷、网络和日常维护命令。容器与基础设施Podman容器https://shangshui0302.github.io/writing/podman-rootless-configuration/https://shangshui0302.github.io/writing/podman-rootless-configuration/在已有权限边界文章基础上，补充管理员配置和 rootless 环境条件。容器与基础设施Podman容器https://shangshui0302.github.io/writing/podman-pods-kubernetes/https://shangshui0302.github.io/writing/podman-pods-kubernetes/组织共享网络的本地容器，并检查 Kubernetes 清单导入导出的范围。容器与基础设施Podman容器https://shangshui0302.github.io/writing/podman-quadlet-multi-service/https://shangshui0302.github.io/writing/podman-quadlet-multi-service/补充 Pod、数据库、API 和代理资源的完整依赖模板。容器与基础设施Podman容器https://shangshui0302.github.io/writing/podman-compose-interoperability/https://shangshui0302.github.io/writing/podman-compose-interoperability/分开 Compose 实现、Podman wrapper 和兼容 API socket 的职责。容器与基础设施Podman容器https://shangshui0302.github.io/writing/podman-nixos-management/https://shangshui0302.github.io/writing/podman-nixos-management/通过系统模块、Home Manager 或 quadlet-nix 声明容器运行环境。容器与基础设施Podman容器NixOShttps://shangshui0302.github.io/writing/podman-advanced-operations/https://shangshui0302.github.io/writing/podman-advanced-operations/管理资源、健康状态、镜像工具链、日志与存储清理。容器与基础设施Podman容器https://shangshui0302.github.io/writing/distrobox-fundamentals/https://shangshui0302.github.io/writing/distrobox-fundamentals/理解默认共享哪些资源，以及 rootless、镜像和容器各自提供什么边界。容器与基础设施Linux容器Distroboxhttps://shangshui0302.github.io/writing/distrobox-installation/https://shangshui0302.github.io/writing/distrobox-installation/从后端、UID 映射到首次进入，逐层建立可用的容器环境。容器与基础设施Linux容器Distroboxhttps://shangshui0302.github.io/writing/distrobox-lifecycle/https://shangshui0302.github.io/writing/distrobox-lifecycle/用完整命令管理创建、进入、升级、删除与临时用户空间。容器与基础设施Linux容器Distroboxhttps://shangshui0302.github.io/writing/distrobox-integration-workflows/https://shangshui0302.github.io/writing/distrobox-integration-workflows/把 app/bin 导出的验证流程与独立的 init 服务生命周期分别处理。容器与基础设施Linux容器Distroboxhttps://shangshui0302.github.io/writing/distrobox-advanced-workflows/https://shangshui0302.github.io/writing/distrobox-advanced-workflows/保留 assemble、GPU、多容器协作及平台实践，并区分清单和服务管理契约。容器与基础设施Linux容器Distroboxhttps://shangshui0302.github.io/writing/distrobox-on-nixos/https://shangshui0302.github.io/writing/distrobox-on-nixos/在声明式宿主上配置 rootless 后端，诊断 Nix profile、图形与传统用户空间的边界。容器与基础设施Linux容器DistroboxNixOShttps://shangshui0302.github.io/writing/distrobox-backup/https://shangshui0302.github.io/writing/distrobox-backup/用三种互补方式保存 guest 环境，并明确共享目录和应用数据的独立恢复责任。容器与基础设施Linux容器Distroboxhttps://shangshui0302.github.io/writing/distrobox-internals/https://shangshui0302.github.io/writing/distrobox-internals/通过真实路径诊断解释同名工具、共享配置和 Nix 二进制的不同来源。容器与基础设施Linux容器Distroboxhttps://shangshui0302.github.io/writing/kvm-fundamentals/https://shangshui0302.github.io/writing/kvm-fundamentals/从硬件虚拟化、KVM API 到 QEMU 设备模型，建立理解管理栈的基础。容器与基础设施LinuxKVM虚拟化https://shangshui0302.github.io/writing/kvm-installation/https://shangshui0302.github.io/writing/kvm-installation/逐项检查宿主能力、发行版组件、管理授权和默认网络的实际状态。容器与基础设施LinuxKVM虚拟化https://shangshui0302.github.io/writing/kvm-libvirt-virsh/https://shangshui0302.github.io/writing/kvm-libvirt-virsh/保留命令分类和 XML 参数，并明确持久定义、运行实例、快照与离线备份的区别。容器与基础设施LinuxKVM虚拟化https://shangshui0302.github.io/writing/kvm-virt-manager/https://shangshui0302.github.io/writing/kvm-virt-manager/将 GUI 创建向导、设备设置和远程显示对应到实际 domain 配置与认证条件。容器与基础设施LinuxKVM虚拟化https://shangshui0302.github.io/writing/kvm-advanced-features/https://shangshui0302.github.io/writing/kvm-advanced-features/解释高级参数的作用，并为直通、镜像修改和共享目录补齐兼容性与恢复条件。容器与基础设施LinuxKVM虚拟化https://shangshui0302.github.io/writing/kvm-nixos-host/https://shangshui0302.github.io/writing/kvm-nixos-host/通过固定版本的模块接口配置 libvirt，同时管理网络、固件和 VM 外部运行状态。容器与基础设施LinuxKVM虚拟化NixOShttps://shangshui0302.github.io/writing/kvm-frontends/https://shangshui0302.github.io/writing/kvm-frontends/比较桌面、Web 和自动化工具，并区分 libvirt 前端、独立平台与离线镜像构建。容器与基础设施LinuxKVM虚拟化https://shangshui0302.github.io/writing/waydroid-architecture/https://shangshui0302.github.io/writing/waydroid-architecture/沿容器管理、用户会话和 Android 服务三条路径理解 Waydroid。容器与基础设施LinuxWaydroid容器https://shangshui0302.github.io/writing/waydroid-installation/https://shangshui0302.github.io/writing/waydroid-installation/检查 Wayland、内核和图形条件，再安装镜像并逐层验证启动。容器与基础设施LinuxWaydroid容器https://shangshui0302.github.io/writing/waydroid-nixos/https://shangshui0302.github.io/writing/waydroid-nixos/用实际模块源码区分系统声明、Android 镜像和用户运行状态。容器与基础设施LinuxWaydroid容器https://shangshui0302.github.io/writing/waydroid-gpu/https://shangshui0302.github.io/writing/waydroid-gpu/从 DRM 节点、Android 图形属性和合成器交互定位渲染问题。容器与基础设施LinuxWaydroid容器https://shangshui0302.github.io/writing/waydroid-network-security/https://shangshui0302.github.io/writing/waydroid-network-security/沿 veth、网桥、DHCP、DNS 和防火墙逐段排查容器联网。容器与基础设施LinuxWaydroid容器https://shangshui0302.github.io/writing/waydroid-configuration/https://shangshui0302.github.io/writing/waydroid-configuration/按应用需求调整窗口、输入与转译，并保留能退回的配置记录。容器与基础设施LinuxWaydroid容器https://shangshui0302.github.io/writing/waydroid-troubleshooting/https://shangshui0302.github.io/writing/waydroid-troubleshooting/按内核、容器、网络、图形和应用层的证据定位故障。容器与基础设施LinuxWaydroid容器https://shangshui0302.github.io/writing/waydroid-practical-tips/https://shangshui0302.github.io/writing/waydroid-practical-tips/保留 Ivon 的使用技巧与操作细节，并注明历史版本和兼容性边界。容器与基础设施LinuxWaydroid容器https://shangshui0302.github.io/writing/wine-fundamentals/https://shangshui0302.github.io/writing/wine-fundamentals/从 Windows API 兼容理解 Wine 的 DLL、前缀、配置与运行边界。开发工具WineLinux兼容层https://shangshui0302.github.io/writing/wine-proton-gaming/https://shangshui0302.github.io/writing/wine-proton-gaming/区分 Steam、官方 Proton、GE 与 umu，并按游戏管理运行器和前缀。开发工具Proton游戏Winehttps://shangshui0302.github.io/writing/wine-bottles-manager/https://shangshui0302.github.io/writing/wine-bottles-manager/通过管理器维护依赖、前缀和恢复点，同时核对 Flatpak 的实际权限。开发工具BottlesFlatpakWinehttps://shangshui0302.github.io/writing/wine-proton-bottles-relationships/https://shangshui0302.github.io/writing/wine-proton-bottles-relationships/用技术谱系、分层模型和场景矩阵判断兼容引擎与管理器的职责。开发工具WineProtonBottleshttps://shangshui0302.github.io/writing/wine-nixos-management/https://shangshui0302.github.io/writing/wine-nixos-management/将锁定的软件、Steam 工具注册、Flatpak 运行时与可变前缀分层管理。开发工具NixOSWine游戏https://shangshui0302.github.io/writing/wine-proton-troubleshooting/https://shangshui0302.github.io/writing/wine-proton-troubleshooting/沿图形栈、前缀、媒体、音频和日志建立可以复核的故障定位流程。开发工具WineProton排错https://shangshui0302.github.io/writing/wine-advanced-configuration/https://shangshui0302.github.io/writing/wine-advanced-configuration/按组件和版本使用环境变量、DLL、注册表、多 GPU、HDR 与性能参数。开发工具WineProton配置https://shangshui0302.github.io/writing/umu-wine-proton-runners/https://shangshui0302.github.io/writing/umu-wine-proton-runners/从 Steam 外的 Proton 运行环境，到 Soda、ProtoSoda、GE 与其他运行器的选择顺序。开发工具WineProtonBottles游戏NixOS兼容层