diff --git "a/1.Linux\345\237\272\347\241\200/1.1\345\270\270\347\224\250shell/03\351\230\262\347\201\253\345\242\231\345\274\200\346\224\276\347\253\257\345\217\243.md" "b/1.Linux\345\237\272\347\241\200/1.1\345\270\270\347\224\250shell/03\351\230\262\347\201\253\345\242\231\345\274\200\346\224\276\347\253\257\345\217\243.md"
deleted file mode 100644
index 4c437cf0..00000000
--- "a/1.Linux\345\237\272\347\241\200/1.1\345\270\270\347\224\250shell/03\351\230\262\347\201\253\345\242\231\345\274\200\346\224\276\347\253\257\345\217\243.md"
+++ /dev/null
@@ -1,20 +0,0 @@
-### 防火墙开放端口
-
-- `el6`
-
-```shell
-#开放端口（7777）
-iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 7777 -j ACCEPT
-#保存
-/etc/rc.d/init.d/iptables save
-#重载
-service iptables restart
-```
-
-- `el7`
-
-```shell
-firewall-cmd --zone=public --add-port=7777/tcp --permanent
-#重新载入
-firewall-cmd --reload
-```
\ No newline at end of file
diff --git "a/1.Linux\345\237\272\347\241\200/1.1\345\270\270\347\224\250shell/99\350\216\267\345\217\226\347\263\273\347\273\237\344\277\241\346\201\257.md" "b/1.Linux\345\237\272\347\241\200/1.1\345\270\270\347\224\250shell/99\350\216\267\345\217\226\347\263\273\347\273\237\344\277\241\346\201\257.md"
new file mode 100644
index 00000000..e31f987d
--- /dev/null
+++ "b/1.Linux\345\237\272\347\241\200/1.1\345\270\270\347\224\250shell/99\350\216\267\345\217\226\347\263\273\347\273\237\344\277\241\346\201\257.md"
@@ -0,0 +1,6 @@
+### 查看系统UUID
+
+```shell
+$ cat /sys/class/dmi/id/product_uuid
+ff594d56-e05f-a672-39de-806201d083e4
+```
\ No newline at end of file
diff --git "a/1.Linux\345\237\272\347\241\200/1.1\345\270\270\347\224\250shell/\351\230\262\347\201\253\345\242\231\347\233\270\345\205\263.md" "b/1.Linux\345\237\272\347\241\200/1.1\345\270\270\347\224\250shell/\351\230\262\347\201\253\345\242\231\347\233\270\345\205\263.md"
new file mode 100644
index 00000000..9d849f55
--- /dev/null
+++ "b/1.Linux\345\237\272\347\241\200/1.1\345\270\270\347\224\250shell/\351\230\262\347\201\253\345\242\231\347\233\270\345\205\263.md"
@@ -0,0 +1,48 @@
+### 防火墙开放端口
+
+- `el6`
+
+```shell
+#开放端口（7777）
+iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 7777 -j ACCEPT
+#保存
+/etc/rc.d/init.d/iptables save
+#重载
+service iptables restart
+```
+
+- `el7`
+
+```shell
+firewall-cmd --zone=public --add-port=7777/tcp --permanent
+#重新载入
+firewall-cmd --reload
+```
+
+### 删除所有规则
+
+```shell
+iptables -Z
+iptables -t nat -F
+iptables -t nat -X
+iptables -t nat -P PREROUTING ACCEPT
+iptables -t nat -P POSTROUTING ACCEPT
+iptables -t nat -P OUTPUT ACCEPT
+iptables -t mangle -F
+iptables -t mangle -X
+iptables -t mangle -P PREROUTING ACCEPT
+iptables -t mangle -P INPUT ACCEPT
+iptables -t mangle -P FORWARD ACCEPT
+iptables -t mangle -P OUTPUT ACCEPT
+iptables -t mangle -P POSTROUTING ACCEPT
+iptables -F
+iptables -X
+iptables -P FORWARD ACCEPT
+iptables -P INPUT ACCEPT
+iptables -P OUTPUT ACCEPT
+iptables -t raw -F
+iptables -t raw -X
+iptables -t raw -P PREROUTING ACCEPT
+iptables -t raw -P OUTPUT ACCEPT
+
+```
\ No newline at end of file
diff --git "a/1.Linux\345\237\272\347\241\200/1.2\345\214\205\347\256\241\347\220\206\345\231\250/yum/yum\346\211\247\350\241\214\345\221\275\344\273\244\345\215\241\344\275\217\350\247\243\345\206\263\346\226\271\346\241\210.md" "b/1.Linux\345\237\272\347\241\200/1.2\345\214\205\347\256\241\347\220\206\345\231\250/yum/yum\346\211\247\350\241\214\345\221\275\344\273\244\345\215\241\344\275\217\350\247\243\345\206\263\346\226\271\346\241\210.md"
new file mode 100644
index 00000000..d6189eb8
--- /dev/null
+++ "b/1.Linux\345\237\272\347\241\200/1.2\345\214\205\347\256\241\347\220\206\345\231\250/yum/yum\346\211\247\350\241\214\345\221\275\344\273\244\345\215\241\344\275\217\350\247\243\345\206\263\346\226\271\346\241\210.md"
@@ -0,0 +1,11 @@
+```shell
+ps aux | awk '/yum/{system("kill-9"$2)}'
+#清除rpm库文件
+rm -f /var/lib/rpm/__db*
+#重新构建
+rpm --rebuilddb
+#清除yum缓存
+yum clean all && rm -rf /var/cache/yum
+#重新缓存
+yum makecache
+```
\ No newline at end of file
diff --git "a/1.Linux\345\237\272\347\241\200/1.3\347\263\273\347\273\237\350\256\276\347\275\256/01\346\227\266\351\222\237\346\234\215\345\212\241\345\231\250\351\205\215\347\275\256.md" "b/1.Linux\345\237\272\347\241\200/1.3\347\263\273\347\273\237\350\256\276\347\275\256/01\346\227\266\351\222\237\346\234\215\345\212\241\345\231\250\351\205\215\347\275\256.md"
index 29dc6a66..06dffd72 100644
--- "a/1.Linux\345\237\272\347\241\200/1.3\347\263\273\347\273\237\350\256\276\347\275\256/01\346\227\266\351\222\237\346\234\215\345\212\241\345\231\250\351\205\215\347\275\256.md"
+++ "b/1.Linux\345\237\272\347\241\200/1.3\347\263\273\347\273\237\350\256\276\347\275\256/01\346\227\266\351\222\237\346\234\215\345\212\241\345\231\250\351\205\215\347\275\256.md"
@@ -25,4 +25,10 @@ $ hwclock -r
 
 ```shell
 $ hwclock --systohc
+```
+
+手动同步
+
+```shell
+timedatectl set-ntp true
 ```
\ No newline at end of file
diff --git "a/1.Linux\345\237\272\347\241\200/1.6\350\231\232\346\213\237\345\214\226/01vsphere\344\275\277\347\224\250.md" "b/1.Linux\345\237\272\347\241\200/1.6\350\231\232\346\213\237\345\214\226/01vsphere\344\275\277\347\224\250.md"
index febaae19..a32c192f 100644
--- "a/1.Linux\345\237\272\347\241\200/1.6\350\231\232\346\213\237\345\214\226/01vsphere\344\275\277\347\224\250.md"
+++ "b/1.Linux\345\237\272\347\241\200/1.6\350\231\232\346\213\237\345\214\226/01vsphere\344\275\277\347\224\250.md"
@@ -84,5 +84,4 @@ df -h
 ```
     
 ![](images/extended_disk.jpg)
-
     
\ No newline at end of file
diff --git "a/1.Linux\345\237\272\347\241\200/1.6\350\231\232\346\213\237\345\214\226/exsi.md" "b/1.Linux\345\237\272\347\241\200/1.6\350\231\232\346\213\237\345\214\226/exsi.md"
new file mode 100644
index 00000000..80880057
--- /dev/null
+++ "b/1.Linux\345\237\272\347\241\200/1.6\350\231\232\346\213\237\345\214\226/exsi.md"
@@ -0,0 +1,5 @@
+## 设置主机名
+
+```shell
+esxcfg-advcfg -s 新的主机名称 /Misc/hostname
+```
\ No newline at end of file
diff --git "a/1.Linux\345\237\272\347\241\200/1.7\345\255\230\345\202\250/ceph/04\345\257\271\346\216\245k8s/03\346\226\207\344\273\266\347\263\273\347\273\237\347\261\273\345\236\213\345\255\230\345\202\250\344\275\277\347\224\250.md" "b/1.Linux\345\237\272\347\241\200/1.7\345\255\230\345\202\250/ceph/04\345\257\271\346\216\245k8s/03\346\226\207\344\273\266\347\263\273\347\273\237\347\261\273\345\236\213\345\255\230\345\202\250\344\275\277\347\224\250.md"
index a41f177e..b37c37ac 100644
--- "a/1.Linux\345\237\272\347\241\200/1.7\345\255\230\345\202\250/ceph/04\345\257\271\346\216\245k8s/03\346\226\207\344\273\266\347\263\273\347\273\237\347\261\273\345\236\213\345\255\230\345\202\250\344\275\277\347\224\250.md"
+++ "b/1.Linux\345\237\272\347\241\200/1.7\345\255\230\345\202\250/ceph/04\345\257\271\346\216\245k8s/03\346\226\207\344\273\266\347\263\273\347\273\237\347\261\273\345\236\213\345\255\230\345\202\250\344\275\277\347\224\250.md"
@@ -129,12 +129,12 @@ metadata:
   namespace: ceph-csi
 stringData:
   # Required for statically provisioned volumes
-  userID: cephfs
-  userKey: AQCoW0dgQk4qGhAAwayKv70OSyyWB3XpZ1JLYQ==
+  userID: admin
+  userKey: AQCJe+Bfb6JtOhAANdn/FmcTj179PW6EI4KTng==
 
   # Required for dynamically provisioned volumes
   adminID: admin
-  adminKey: AQDkTjNgNObEHBAANGLCF23SLKYmqUd2Nxtbaw==
+  adminKey: AQCJe+Bfb6JtOhAANdn/FmcTj179PW6EI4KTng==
 EOF
 ```
 
@@ -157,15 +157,15 @@ sed -i -e "/^kind: ServiceAccount/{N;N;a\  namespace: ceph-csi  # 输入到这
 > 8.创建`ServiceAccount`和`RBAC ClusterRole/ClusterRoleBinding`资源对象
 
 ```shell
-kubectl create -f ceph-csi-3.2.0/deploy/cephfs/kubernetes/csi-provisioner-rbac.yaml
-kubectl create -f ceph-csi-3.2.0/deploy/cephfs/kubernetes/csi-nodeplugin-rbac.yaml
+kubectl apply -f ceph-csi-3.2.0/deploy/cephfs/kubernetes/csi-provisioner-rbac.yaml
+kubectl apply -f ceph-csi-3.2.0/deploy/cephfs/kubernetes/csi-nodeplugin-rbac.yaml
 ```
 
 > 9.创建`PodSecurityPolicy`
 
 ```shell
-kubectl create -f ceph-csi-3.2.0/deploy/cephfs/kubernetes/csi-provisioner-psp.yaml
-kubectl create -f ceph-csi-3.2.0/deploy/cephfs/kubernetes/csi-nodeplugin-psp.yaml
+kubectl apply -f ceph-csi-3.2.0/deploy/cephfs/kubernetes/csi-provisioner-psp.yaml
+kubectl apply -f ceph-csi-3.2.0/deploy/cephfs/kubernetes/csi-nodeplugin-psp.yaml
 ```
 
 > 10.调整`csi-cephfsplugin-provisioner.yaml`和`csi-cephfsplugin.yaml`
@@ -190,8 +190,8 @@ k8s.gcr.io/sig-storage/csi-resizer:v1.0.1
 > 11.发布`csi-cephfsplugin-provisioner.yaml`和`csi-cephfsplugin.yaml`
 
 ```shell
-kubectl -n ceph-csi create -f ceph-csi-3.2.0/deploy/cephfs/kubernetes/csi-cephfsplugin-provisioner.yaml
-kubectl -n ceph-csi create -f ceph-csi-3.2.0/deploy/cephfs/kubernetes/csi-cephfsplugin.yaml
+kubectl -n ceph-csi apply -f ceph-csi-3.2.0/deploy/cephfs/kubernetes/csi-cephfsplugin-provisioner.yaml
+kubectl -n ceph-csi apply -f ceph-csi-3.2.0/deploy/cephfs/kubernetes/csi-cephfsplugin.yaml
 ```
 
 > 12.查看运行状态
@@ -212,10 +212,10 @@ cat <<EOF > ceph-csi-3.2.0/deploy/cephfs/kubernetes/storageclass.yaml
 apiVersion: storage.k8s.io/v1
 kind: StorageClass
 metadata:
-  name: ceph-csi-cephfs-sc
+  name: kubernetes-csi-fs-sc
 provisioner: cephfs.csi.ceph.com
 parameters:
-  clusterID: b1c2511e-a1a5-4d6d-a4be-0e7f0d6d4294
+  clusterID: 1fc9f495-498c-4fe2-b3d5-80a041bc5c49
   pool: cephfs_data
   fsName: k8s-cephfs
   imageFeatures: layering
diff --git "a/1.Linux\345\237\272\347\241\200/1.9\345\256\211\345\205\250/06-\350\256\276\347\275\256\344\274\232\350\257\235\350\266\205\346\227\266.md" "b/1.Linux\345\237\272\347\241\200/1.9\345\256\211\345\205\250/06-\350\256\276\347\275\256\344\274\232\350\257\235\350\266\205\346\227\266.md"
index 8ff0d9fa..223b20bd 100644
--- "a/1.Linux\345\237\272\347\241\200/1.9\345\256\211\345\205\250/06-\350\256\276\347\275\256\344\274\232\350\257\235\350\266\205\346\227\266.md"
+++ "b/1.Linux\345\237\272\347\241\200/1.9\345\256\211\345\205\250/06-\350\256\276\347\275\256\344\274\232\350\257\235\350\266\205\346\227\266.md"
@@ -3,6 +3,5 @@
 将值设置为`readonly` 防止用户更改
 ```shell
 echo "export TMOUT=300" >>/etc/profile
-echo "readonly TMOUT" >>/etc/profile
 . /etc/profile
 ```
\ No newline at end of file
diff --git "a/1.Linux\345\237\272\347\241\200/rockylinux/08\345\256\211\350\243\205mysql.md" "b/1.Linux\345\237\272\347\241\200/rockylinux/08\345\256\211\350\243\205mysql.md"
index 347eb078..420c621f 100644
--- "a/1.Linux\345\237\272\347\241\200/rockylinux/08\345\256\211\350\243\205mysql.md"
+++ "b/1.Linux\345\237\272\347\241\200/rockylinux/08\345\256\211\350\243\205mysql.md"
@@ -9,17 +9,17 @@ https://downloads.mysql.com/archives/get/p/23/file/mysql-5.7.38-linux-glibc2.12-
 2. 解压
 
 ```shell
-$ tar zxvf mysql-5.7.38-linux-glibc2.12-x86_64.tar.gz -C /usr/local
+tar zxvf mysql-5.7.38-linux-glibc2.12-x86_64.tar.gz -C /usr/local
 ```
 
 3. 创建用户授权
 
 ```shell
-$ useradd mysql
-$ mv /usr/local/mysql-5.7.38-linux-glibc2.12-x86_64 /usr/local/mysql
-$ chown mysql:mysql -R /usr/local/mysql
-$ echo "export PATH=\$PATH:/usr/local/mysql/bin" >> ~/.bash_profile
-$ source ~/.bash_profile
+useradd mysql
+mv /usr/local/mysql-5.7.38-linux-glibc2.12-x86_64 /usr/local/mysql
+chown mysql:mysql -R /usr/local/mysql
+echo "export PATH=\$PATH:/usr/local/mysql/bin" >> ~/.bash_profile
+source ~/.bash_profile
 ```
 
 4. 创建配置文件
@@ -103,11 +103,11 @@ EOF
 5. 创建所需目录
 
 ```shell
-$ mkdir -p /var/run/mysqld
-$ chown mysql:mysql /var/run/mysqld
-$ touch /var/log/mysqld.log /var/log/slow-query.log
-$ chown mysql:mysql /var/log/mysqld.log
-$ chown mysql:mysql /var/log/slow-query.log
+mkdir -p /var/run/mysqld
+chown mysql:mysql /var/run/mysqld
+touch /var/log/mysqld.log /var/log/slow-query.log
+chown mysql:mysql /var/log/mysqld.log
+chown mysql:mysql /var/log/slow-query.log
 ```
 
 6. 创建service
@@ -158,7 +158,7 @@ EOF
 7. 初始化数据
 
 ```shell
-$ /usr/local/mysql/bin/mysql_install_db --user=mysql --datadir=/var/lib/mysql
+/usr/local/mysql/bin/mysql_install_db --user=mysql --datadir=/var/lib/mysql
 ```
 
 8. 启动mysql
diff --git "a/1.Linux\345\237\272\347\241\200/rockylinux/10\351\205\215\347\275\256chrony.md" "b/1.Linux\345\237\272\347\241\200/rockylinux/10\351\205\215\347\275\256chrony.md"
index a3383bd4..7b5aed0d 100644
--- "a/1.Linux\345\237\272\347\241\200/rockylinux/10\351\205\215\347\275\256chrony.md"
+++ "b/1.Linux\345\237\272\347\241\200/rockylinux/10\351\205\215\347\275\256chrony.md"
@@ -14,4 +14,10 @@ EOF
 启动
 ```shell
 $ systemctl enable chronyd --now
+```
+
+手动同步
+
+```shell
+timedatectl set-ntp true
 ```
\ No newline at end of file
diff --git "a/2.\345\256\271\345\231\250/cni/cilium/ddd.md" "b/2.\345\256\271\345\231\250/cni/cilium/ddd.md"
new file mode 100644
index 00000000..9c7f5d60
--- /dev/null
+++ "b/2.\345\256\271\345\231\250/cni/cilium/ddd.md"
@@ -0,0 +1,333 @@
+
+cat <<EOF | kubectl create -f -
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: clusterconfigurations.installer.kubesphere.io
+spec:
+  group: installer.kubesphere.io
+  versions:
+  - name: v1alpha1
+    served: true
+    storage: true
+    schema:
+      openAPIV3Schema:
+        type: object
+        properties:
+          spec:
+            type: object
+            x-kubernetes-preserve-unknown-fields: true
+          status:
+            type: object
+            x-kubernetes-preserve-unknown-fields: true
+  scope: Namespaced
+  names:
+    plural: clusterconfigurations
+    singular: clusterconfiguration
+    kind: ClusterConfiguration
+    shortNames:
+    - cc
+
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: kubesphere-system
+
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: ks-installer
+  namespace: kubesphere-system
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: ks-installer
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - apps
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - extensions
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - batch
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - apiregistration.k8s.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - apiextensions.k8s.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - tenant.kubesphere.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - certificates.k8s.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - devops.kubesphere.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - monitoring.coreos.com
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - logging.kubesphere.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - jaegertracing.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - policy
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - autoscaling
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - networking.istio.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - config.istio.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - iam.kubesphere.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - notification.kubesphere.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - auditing.kubesphere.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - events.kubesphere.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - core.kubefed.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - installer.kubesphere.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - storage.kubesphere.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - security.istio.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - monitoring.kiali.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - kiali.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - networking.k8s.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - kubeedge.kubesphere.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - types.kubefed.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - scheduling.k8s.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - kubevirt.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - cdi.kubevirt.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - network.kubesphere.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - virtualization.kubesphere.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - snapshot.storage.k8s.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: ks-installer
+subjects:
+- kind: ServiceAccount
+  name: ks-installer
+  namespace: kubesphere-system
+  roleRef:
+  kind: ClusterRole
+  name: ks-installer
+  apiGroup: rbac.authorization.k8s.io
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: ks-installer
+  namespace: kubesphere-system
+  labels:
+  app: ks-install
+spec:
+  replicas: 1
+  selector:
+  matchLabels:
+  app: ks-install
+  template:
+  metadata:
+  labels:
+  app: ks-install
+  spec:
+  serviceAccountName: ks-installer
+  containers:
+  - name: installer
+  image: harbor.chs.neusoft.com/kubespheredev/ksv-installer:v1.6.1
+  imagePullPolicy: "Always"
+  resources:
+  limits:
+  cpu: "1"
+  memory: 1Gi
+  requests:
+  cpu: 20m
+  memory: 100Mi
+  volumeMounts:
+  - mountPath: /etc/localtime
+  name: host-time
+  volumes:
+  - hostPath:
+  path: /etc/localtime
+  type: ""
+  name: host-time
+
+EOF
\ No newline at end of file
diff --git "a/2.\345\256\271\345\231\250/k8s/install/k8s-rke.md" "b/2.\345\256\271\345\231\250/k8s/install/k8s-rke.md"
index 420b8acb..8661b776 100644
--- "a/2.\345\256\271\345\231\250/k8s/install/k8s-rke.md"
+++ "b/2.\345\256\271\345\231\250/k8s/install/k8s-rke.md"
@@ -137,10 +137,12 @@
 
 安装自动补全
 
-	yum install -y bash-completion
-	source /usr/share/bash-completion/bash_completion
-	source <(kubectl completion bash)
-	echo "source <(kubectl completion bash)" >> ~/.bashrc
+```shell
+yum install -y bash-completion
+source /usr/share/bash-completion/bash_completion
+source <(kubectl completion bash)
+echo "source <(kubectl completion bash)" >> ~/.bashrc
+```
 
 > 13、查看节点信息
 
@@ -150,45 +152,46 @@
 
 > 14、发布应用测试
 
-	cat >> nginx.yaml <<EOF
-	apiVersion: v1
-	kind: Service
-	metadata:
-	  labels:
-	    app: nginx-service
-	  name: nginx-service
-	  namespace: default
-	spec:
-	  ports:
-	  - port: 80
-	    protocol: TCP
-	    targetPort: 80
-	  selector:
-	    app: nginx
-	  sessionAffinity: None
-	  type: ClusterIP
-	---
-	apiVersion: apps/v1
-	kind: Deployment
-	metadata:
-	  name: nginx-deployment
-	spec:
-	  selector:
-	    matchLabels:
-	      app: nginx
-	  replicas: 6
-	  template:
-	    metadata:
-	      labels:
-	        app: nginx
-	    spec:
-	      containers:
-	      - name: nginx
-	        image: nginx:1.16.0
-	        ports:
-	        - containerPort: 80
-	EOF
-
+```shell
+cat >> nginx.yaml <<EOF
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: nginx-service
+  name: nginx-service
+  namespace: default
+spec:
+  ports:
+  - port: 80
+    protocol: TCP
+    targetPort: 80
+  selector:
+    app: nginx
+  sessionAffinity: None
+  type: ClusterIP
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-deployment
+spec:
+  selector:
+    matchLabels:
+      app: nginx
+  replicas: 6
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.16.0
+        ports:
+        - containerPort: 80
+EOF
+```
 创建
 
 	kubectl apply -f nginx.yaml
diff --git "a/2.\345\256\271\345\231\250/k8s/uninstall/uninstall.md" "b/2.\345\256\271\345\231\250/k8s/uninstall/uninstall.md"
new file mode 100644
index 00000000..484f1c8f
--- /dev/null
+++ "b/2.\345\256\271\345\231\250/k8s/uninstall/uninstall.md"
@@ -0,0 +1,27 @@
+```shell
+sudo rm -rvf $HOME/.kube
+sudo rm -rvf ~/.kube/
+sudo rm -rvf /etc/kubernetes/
+sudo rm -rvf /etc/systemd/system/kubelet.service.d
+sudo rm -rvf /etc/systemd/system/kubelet.service
+sudo rm -rvf /usr/bin/kube*
+sudo rm -rvf /etc/cni
+sudo rm -rvf /opt/cni
+sudo rm -rvf /var/lib/etcd
+sudo rm -rvf /var/etcd
+
+docker kill $(docker ps -a -q)
+docker rm $(docker ps -a -q)
+docker rmi -f $(docker images -q)
+
+yum remove docker-ce -y
+rm -rf /var/lib/docker*
+rm -f /usr/bin/docker
+
+rm -rf /var/lib/kubelet
+mount | grep '/var/lib/kubelet'| awk '{print $3}'|xargs sudo umount
+sudo iptables -F && sudo iptables -X && sudo iptables -F -t nat && sudo iptables -X -t nat
+
+ 
+```
+
diff --git "a/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/create-repo.png" "b/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/create-repo.png"
new file mode 100644
index 00000000..963db00b
Binary files /dev/null and "b/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/create-repo.png" differ
diff --git "a/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/fork.png" "b/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/fork.png"
new file mode 100644
index 00000000..8cf312be
Binary files /dev/null and "b/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/fork.png" differ
diff --git "a/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/github-secret.png" "b/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/github-secret.png"
new file mode 100644
index 00000000..e90500d5
Binary files /dev/null and "b/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/github-secret.png" differ
diff --git "a/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/linux-install.png" "b/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/linux-install.png"
new file mode 100644
index 00000000..9fe4b616
Binary files /dev/null and "b/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/linux-install.png" differ
diff --git "a/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/new-secrect.png" "b/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/new-secrect.png"
new file mode 100644
index 00000000..50988884
Binary files /dev/null and "b/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/images/new-secrect.png" differ
diff --git "a/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/oss-emulator.md" "b/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/oss-emulator.md"
new file mode 100644
index 00000000..e2948fd8
--- /dev/null
+++ "b/2.\345\256\271\345\231\250/\345\274\200\346\272\220\345\256\271\345\231\250\345\214\226/oss-emulator.md"
@@ -0,0 +1,317 @@
+# 基于kubernetes使用阿里云OSS服务
+
+## 背景介绍
+
+离线开发环境需要连接阿里云 OSS 服务， 通过调研我们决定使用 oss-emulator 模拟 OSS 服务。
+
+## 项目介绍
+
+oss-emulator 是阿里开源的轻量级 OSS 服务模拟器，提供与 OSS 服务相同的 API 接口
+
+但该项目仅提供基于 linux 部署方案，不支持容器化，无法满足容器化部署场景
+
+![](images/linux-install.png)
+
+因此，我将 oss-emulator 项目打包成镜像发布到 docker hub，并提供容器化部署方案，便于后续使用。
+
+## 容器化过程及验证
+
+需求依赖：docker hub 账号
+
+1. fork项目
+
+![](images/fork.png)
+
+2. 配置 docker hub 账号口令
+
+用于后续 github action 自动构建使用
+
+![](images/new-secrect.png)
+
+票据内容如下：
+
+![](images/github-secret.png)
+
+3. 登录 docker hub 创建 oss-emulator 仓库
+
+![](images/create-repo.png)
+
+到此为止，我们准备工作已经完成，接下来就是将项目打包成镜像
+
+4. 项目根新增 Dockerfile ,内容如下
+
+```dockerfile
+FROM ruby:alpine
+MAINTAINER weiliang-ms@github
+WORKDIR /work
+ADD . .
+RUN gem install thor builder webrick
+CMD ["ruby","/work/bin/emulator", "-r", "store", "-p", "8080"]
+```
+
+5. 项目根新增 github action 流水线配置
+
+配置路径：.github/workflows/build.yml
+
+配置内容如下：
+
+```yaml
+name: ci
+on:
+  push:
+    branches:
+      - 'master'
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      -
+        name: Set up QEMU
+        uses: docker/setup-qemu-action@v1
+      -
+        name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v1
+      -
+        name: Login to DockerHub
+        uses: docker/login-action@v1
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      -
+        name: Build and push
+        uses: docker/build-push-action@v2
+        with:
+          context: ./
+          file: Dockerfile
+          push: true
+          tags: xzxwl/oss-emulator
+```
+
+提交变更后，github action 流水线基于配置进行镜像构建，最终将生成的 xzxwl/oss-emulator 镜像推送至 docker hub
+
+6. 启动 oss-emulator 容器
+
+```shell
+$ mkdir -p /work/oss-data
+$ docker run -idt --name oss-emulator -p 8080:8080 -v /work/oss-data:/work/store xzxwl/oss-emulator
+```
+
+7. 下载 ossutil 测试管理 oss-emulator
+
+下载授权
+
+```shell
+$ wget https://gosspublic.alicdn.com/ossutil/1.7.14/ossutil64
+$ chmod 755 ossutil64
+```
+
+8. 测试 OSS 可用性
+
+测试创建 bucket 功能
+
+```shell
+$ ./ossutil64 -e http://127.0.0.1:8080 -i  AccessKeyId -k AccessKeySecret mb oss://bucket-test
+0.005875(s) elapsed
+```
+
+测试查询 bucket
+
+```shell
+$ ./ossutil64 -e http://127.0.0.1:8080 -i  AccessKeyId -k AccessKeySecret ls oss://bucket-test
+Object Number is: 0
+
+0.006463(s) elapsed
+```
+
+测试上传文件
+
+```shell
+$ touch test.file
+$ ./ossutil64 -e http://127.0.0.1:8080 -i  AccessKeyId -k AccessKeySecret cp test.file oss://bucket-test/
+Succeed: Total num: 1, size: 0. OK num: 1(upload 1 files).
+
+average speed 0(byte/s)
+
+0.014518(s) elapsed
+$ ./ossutil64 -e http://127.0.0.1:8080 -i  AccessKeyId -k AccessKeySecret ls oss://bucket-test/
+LastModifiedTime                   Size(B)  StorageClass   ETAG                                  ObjectName
+2023-01-11 21:56:51 -0500 EST            0      Standard   D41D8CD98F00B204E9800998ECF8427E      oss://bucket-test/test.file
+Object Number is: 1
+
+0.008415(s) elapsed
+```
+
+该项目并非完全兼容 OSS 接口，仅支持以下接口内容，使用时注意
+
+## 接口兼容性
+
+- *oss-emulator* 支持 `put, get, list, copy, delete, multipart` 等数据操作API接口，支持部分Bucket操作接口。
+
+### Bucket相关接口
+- 支持
+```
+ListBuckets(GetService),PutBucket(CreateBucket),GetBucket,DeleteBucket,
+GetBucketLocation,GetBucketInfo,PutBucketACL,GetBucketACL
+```
+
+- 不支持
+```
+PutBucketLogging,PutBucketWebsite,PutBucketReferer,PutBucketLifecycle,
+GetBucketLogging,GetBucketWebsite,GetBucketReferer,GetBucketLifecycle,
+DeleteBucketLogging,DeleteBucketWebsite,DeleteBucketLifecycle
+```
+
+### Object相关接口
+- 支持
+```
+PutObject,CopyObject,AppendObject,GetObject,DeleteObject,DeleteMultipleObjects,
+HeadObject,GetObjectMeta,PutObjectACL,GetObjectACL
+```
+
+- 不支持
+```
+PostObject,Callback,PutSymlink,GetSymlink,RestoreObject
+```
+
+### Multipart相关接口
+- 支持
+```
+InitiateMultipartUpload,UploadPart,CompleteMultipartUpload
+```
+
+- 不支持
+```
+UploadPartCopy,AbortMultipartUpload,ListMultipartUpload,ListParts
+```
+
+
+## 容器化部署方式
+
+### docker
+
+创建数据持久化目录
+
+```shell
+$ mkdir -p /oss-store
+```
+
+启动服务
+
+```shell
+$ docker run -idt --name oss-emulator -p 8080:8080 --restart=always -v /work/oss-data:/work/store xzxwl/oss-emulator
+```
+
+### kubernetes
+
+创建 pvc
+
+```shell
+$ cat <<EOF | kubectl apply -f -
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: oss-emulator-volume
+  namespace: test
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 50Gi
+EOF
+```
+
+创建 deployment
+
+```shell
+$ cat <<EOF | kubectl apply -f -
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: oss-emulator
+  namespace: test
+  labels:
+    app: oss-emulator
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: oss-emulator
+  template:
+    metadata:
+      labels:
+        app: oss-emulator
+    spec:
+      volumes:
+        - name: host-time
+          hostPath:
+            path: /etc/localtime
+            type: ''
+        - name: volume-b5cw22
+          persistentVolumeClaim:
+            claimName: oss-emulator-volume
+      containers:
+        - name: container-14y7vu
+          image: xzxwl/oss-emulator
+          ports:
+            - name: http-8080
+              containerPort: 8080
+              protocol: TCP
+          resources:
+            limits:
+              cpu: 200m
+              memory: 400Mi
+          volumeMounts:
+            - name: host-time
+              readOnly: true
+              mountPath: /etc/localtime
+            - name: volume-b5cw22
+              mountPath: /work/store
+          imagePullPolicy: IfNotPresent
+      restartPolicy: Always
+      terminationGracePeriodSeconds: 30
+      dnsPolicy: ClusterFirst
+      serviceAccountName: default
+      serviceAccount: default
+      securityContext: {}
+      schedulerName: default-scheduler
+EOF
+```
+
+创建 service
+
+```shell
+$ cat <<EOF | kubectl apply -f -
+kind: Service
+apiVersion: v1
+metadata:
+  name: oss-emulator-svc
+  namespace: test
+  labels:
+    app: oss-emulator-svc
+spec:
+  ports:
+    - name: http-8080
+      protocol: TCP
+      port: 80
+      targetPort: 8080
+  selector:
+    app: oss-emulator
+EOF
+```
+
+此时即可在 kubernetes 内部通过以下地址使用 oss 服务
+
+```
+oss-emulator-svc.test:80
+```
+
+AK, SK 可以配置如下
+
+```
+AK: AccessKeyId
+SK: AccessKeySecret
+```
+
+对于 xzxwl/oss-emulator 这个镜像，离线环境下可以上传至私有镜像库（例如harbor）进行管理使用
\ No newline at end of file
diff --git "a/3.\351\233\206\346\210\220\351\203\250\347\275\262/chrony/chrony.md" "b/3.\351\233\206\346\210\220\351\203\250\347\275\262/chrony/chrony.md"
index 2f4ea7eb..6af86d42 100644
--- "a/3.\351\233\206\346\210\220\351\203\250\347\275\262/chrony/chrony.md"
+++ "b/3.\351\233\206\346\210\220\351\203\250\347\275\262/chrony/chrony.md"
@@ -73,4 +73,17 @@ Name/IP Address            NP  NR  Span  Frequency  Freq Skew  Offset  Std Dev
 dns.sdly.hsip.gov.cn.165>  24  11   30m     -0.003      0.032   -255ns    21us
 ```
 
-观察`Offset`那列即可
\ No newline at end of file
+观察`Offset`那列即可
+
+
+强制同步
+
+```shell
+chronyc -a makestep
+timedatectl set-ntp yes
+```
+
+查看同步状态
+```shell
+timedatectl
+```
\ No newline at end of file
diff --git "a/6.\347\274\226\347\250\213/letcode/202107/04.go" "b/6.\347\274\226\347\250\213/letcode/202107/04.go"
new file mode 100644
index 00000000..4a9902ab
--- /dev/null
+++ "b/6.\347\274\226\347\250\213/letcode/202107/04.go"
@@ -0,0 +1,5 @@
+package main
+
+func main() {
+	//
+}
diff --git a/README.md b/README.md
index d7fc36cc..f94545ea 100644
--- a/README.md
+++ b/README.md
@@ -11,7 +11,7 @@
     - [1.1常用shell](1.Linux基础/1.1常用shell/README.md)
         * [01查询文件内`tab`键](1.Linux基础/1.1常用shell/01查询文件内`tab`键.md)
         * [02计算shell运行时间](1.Linux基础/1.1常用shell/02计算shell运行时间.md)
-        * [03防火墙开放端口](1.Linux基础/1.1常用shell/03防火墙开放端口.md)
+        * [03防火墙开放端口](1.Linux基础/1.1常用shell/防火墙相关.md)
         * [04关闭selinux](1.Linux基础/1.1常用shell/04关闭selinux.md)
         * [05开启tcp端口监听](1.Linux基础/1.1常用shell/05开启tcp端口监听.md)
         * [06文件切割](1.Linux基础/1.1常用shell/06文件切割.md)
diff --git a/SUMMARY.md b/SUMMARY.md
index 82ae4dd0..461d7e81 100644
--- a/SUMMARY.md
+++ b/SUMMARY.md
@@ -4,7 +4,7 @@
   - [1.1常用shell](1.Linux基础/1.1常用shell/README.md)
     * [01查询文件内`tab`键](1.Linux基础/1.1常用shell/01查询文件内`tab`键.md)
     * [02计算shell运行时间](1.Linux基础/1.1常用shell/02计算shell运行时间.md)
-    * [03防火墙开放端口](1.Linux基础/1.1常用shell/03防火墙开放端口.md)
+    * [03防火墙开放端口](1.Linux基础/1.1常用shell/防火墙相关.md)
     * [04关闭selinux](1.Linux基础/1.1常用shell/04关闭selinux.md)
     * [05开启tcp端口监听](1.Linux基础/1.1常用shell/05开启tcp端口监听.md)
     * [06文件切割](1.Linux基础/1.1常用shell/06文件切割.md)
diff --git a/arm/harbor.md b/arm/harbor.md
new file mode 100644
index 00000000..0a50688c
--- /dev/null
+++ b/arm/harbor.md
@@ -0,0 +1,26 @@
+###
+
+```shell
+$ docker-compose ps
+NAME                COMMAND                  SERVICE             STATUS                PORTS
+harbor-core         "/harbor/entrypoint.…"   core                running (healthy)
+harbor-db           "/docker-entrypoint.…"   postgresql          running (healthy)
+harbor-jobservice   "/harbor/entrypoint.…"   jobservice          running (healthy)
+harbor-log          "/bin/sh -c /usr/loc…"   log                 running (healthy)     127.0.0.1:1514->10514/tcp
+harbor-portal       "nginx -g 'daemon of…"   portal              running (unhealthy)
+nginx               "nginx -g 'daemon of…"   proxy               restarting
+redis               "redis-server /etc/r…"   redis               running (unhealthy)
+registry            "/home/harbor/entryp…"   registry            restarting
+registryctl         "/home/harbor/start.…"   registryctl         restarting
+```
+
+异常一: `registry` 服务 `configuration error: open /etc/registry/config.yml: permission denied`
+
+```shell
+$ docker-compose logs -f registry
+registry  | Appending internal tls trust CA to ca-bundle ...
+registry  | find: '/etc/harbor/ssl': No such file or directory
+registry  | Internal tls trust CA appending is Done.
+registry  | ls: /harbor_cust_cert: Permission denied
+registry  | configuration error: open /etc/registry/config.yml: permission denied
+```
\ No newline at end of file
diff --git a/arm/images/elasticsearch-oss.png b/arm/images/elasticsearch-oss.png
new file mode 100644
index 00000000..27157e27
Binary files /dev/null and b/arm/images/elasticsearch-oss.png differ
diff --git a/arm/images/logsidecar-injector-deploy.png b/arm/images/logsidecar-injector-deploy.png
new file mode 100644
index 00000000..133a0f95
Binary files /dev/null and b/arm/images/logsidecar-injector-deploy.png differ
diff --git a/arm/kubesphere.md b/arm/kubesphere.md
new file mode 100644
index 00000000..252d0038
--- /dev/null
+++ b/arm/kubesphere.md
@@ -0,0 +1,113 @@
+# 
+
+v3.3.1
+
+## kubesphere-system
+
+### ks-console 启动异常
+
+异常信息：
+
+```shell
+$ kubectl logs -f ks-console-695ccff5f9-v9jsm -n kubesphere-system
+
+<--- Last few GCs --->
+
+
+<--- JS stacktrace --->
+
+
+#
+# Fatal process OOM in insufficient memory to create an Isolate
+#
+```
+
+解决方式 -> 本地编译运行
+
+流程如下：
+
+1. 下载源码
+
+```shell
+$ git clone --branch v3.3.1 https://github.com/kubesphere/console.git
+```
+
+2. 修改 build/Dockerfile
+
+```shell
+$ cd console
+$ vim build/Dockerfile
+```
+
+调整内容：构建基础镜像、设置 yarn 源、调整目录权限等
+
+```dockerfile
+
+```
+
+
+3. 编译
+
+```shell
+$ docker buildx build --platform linux/arm64 -t kubesphere/ks-console:v3.3.1 -f build/Dockerfile .
+```
+
+4. 重启服务
+
+```shell
+$ kubectl rollout restart deploy ks-console -n kubesphere-system
+```
+
+## kubesphere-logging-system
+
+logsidecar-injector-deploy 启动异常
+
+![](images/logsidecar-injector-deploy.png)
+
+更换镜像版本
+
+```shell
+$ kubectl set image deployment/logsidecar-injector-deploy \
+    logsidecar-injector=kubesphere/log-sidecar-injector:v1.2.0 -n kubesphere-logging-system
+```
+
+elasticsearch-logging-discovery、 启动异常
+
+![](images/elasticsearch-oss.png)
+
+更换镜像版本
+
+```shell
+$ kubectl set image sts/elasticsearch-logging-discovery \
+    chown=kubesphere/elasticsearch-oss:6.7.0-1-arm64 -n kubesphere-logging-system
+$ kubectl set image sts/elasticsearch-logging-discovery \
+    elasticsearch=kubesphere/elasticsearch-oss:6.7.0-1-arm64 -n kubesphere-logging-system
+    
+$ kubectl set image sts/elasticsearch-logging-data \
+    chown=kubesphere/elasticsearch-oss:6.7.0-1-arm64 -n kubesphere-logging-system
+$ kubectl set image sts/elasticsearch-logging-data \
+    elasticsearch=kubesphere/elasticsearch-oss:6.7.0-1-arm64 -n kubesphere-logging-system
+```
+
+强制重启
+
+```shell
+$ kubectl delete pod elasticsearch-logging-discovery-0 -n kubesphere-logging-system --force
+$ kubectl delete pod elasticsearch-logging-data-0 -n kubesphere-logging-system --force
+```
+
+
+## istio-system
+
+```shell
+$ kubectl set image deploy/kiali-operator \
+    operator=kubesphere/kiali-operator:v1.50.1 -n istio-system
+```
+
+```shell
+$ kubectl set image deploy/istiod-1-11-2 \
+    discovery=istio/pilot:1.15.6 -n istio-system
+```
+
+
+