daocloud / dao-2048

2048 is a number puzzle game.

2048

2048 is a number puzzle game. When the squares of the same number are merged together, they will add up. Each round will have an extra square with 2 or 4 written on it, and the game ends when the square cannot be moved. Players have to find a way to make up a square with 2048 (or larger) in this small 16 squares.

Quick Start

Run as docker container

open shell and input:

export VERSION=v1.4.1
docker run -d -p 8080:80 ghcr.io/daocloud/dao-2048:$VERSION

open browser and view http://:8080 .

Run in kubernetes

export VERSION=v1.4.1
helm repo add dao-2048 http://daocloud.github.io/dao-2048/
helm install dao-2048 dao-2048/dao-2048 --version $VERSION 

Advanced Usage

Use LoadBalancer Service

helm upgrade --install dao-2048 dao-2048/dao-2048 --version $VERSION --set service.type=LoadBalancer

Use Dual Stack Service

helm upgrade --install dao-2048 dao-2048/dao-2048 --version $VERSION --set service.ipFamilyPolicy=PreferDualStack

Use Static Image

helm upgrade --install dao-2048 dao-2048/dao-2048 --version $VERSION --set image.repository=daocloud/dao-2048-static

Thanks

This image is derived from the Docker Hub image alexwhen/docker-2048, thanks to the developer alexwhen enthusiastic support. And thanks to gabrielecirulli's 2048 project

dao-2048's Issues

Use Helm OCI replace file

Change the Helm Charts to Bitnami Style

参考：

https://github.com/vmware-tanzu/asset-relocation-tool-for-kubernetes/blob/main/examples/simple-chart/image-hints.yaml

Support loongarch

发布新版本

v1.1.1

文档 加入 "快速开始"

Static Image no file list

Ref: halverneus/static-file-server#74

支持持续构建

通过 github ci 持续构建

Support RDMA

提供一个“蓝绿”的版本

提供更多的 pod info 信息

Use go static as the default image to replace the nginx

remove bash

resize nginx work to 1

to reduce the mem usage

Support Windows

Helm 一键部署

add dependency bot

failed to visit port 80 via ipv6

bash-5.1# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: tunl0@NONE: <NOARP> mtu 1480 qdisc noop state DOWN qlen 1000
    link/ipip 0.0.0.0 brd 0.0.0.0
3: eth0@if6: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue state UP
    link/ether d6:f0:8a:58:cd:34 brd ff:ff:ff:ff:ff:ff
    inet 172.17.8.190/21 brd 172.17.15.255 scope global eth0
       valid_lft forever preferred_lft forever
    inet6 fd00:1033::172:17:8:158/64 scope global
       valid_lft forever preferred_lft forever
    inet6 fe80::d4f0:8aff:fe58:cd34/64 scope link
       valid_lft forever preferred_lft forever
4: veth0@if185050: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue state UP
    link/ether 66:30:c3:c5:55:7d brd ff:ff:ff:ff:ff:ff
    inet6 fe80::6430:c3ff:fec5:557d/64 scope link
       valid_lft forever preferred_lft forever
5: net1@if6: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue state UP
    link/ether e6:db:9a:c2:34:66 brd ff:ff:ff:ff:ff:ff
    inet 172.81.0.195/16 brd 172.81.255.255 scope global net1
       valid_lft forever preferred_lft forever
    inet6 fd00:81::172:81:0:144/64 scope global
       valid_lft forever preferred_lft forever
    inet6 fe80::e4db:9aff:fec2:3466/64 scope link
       valid_lft forever preferred_lft forever
bash-5.1# curl [fd00:81::172:81:0:144]
curl: (7) Failed to connect to fd00:81::172:81:0:144 port 80 after 0 ms: Connection refused

ipv4 works.

yaml:

spec:
  progressDeadlineSeconds: 600
  replicas: 2
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/instance: dao2048-macvlan-overlay
      app.kubernetes.io/name: dao2048-macvlan-overlay
  strategy:
    rollingUpdate:
      maxSurge: 25%
      maxUnavailable: 25%
    type: RollingUpdate
  template:
    metadata:
      annotations:
        ipam.spidernet.io/ippool: |-
          {
              "interface": "net1",
              "ipv4pools": [
                "172-81-0-1"
              ],
              "ipv6pools": [
                "172-81-0-1-v6"
              ]
          }
        k8s.v1.cni.cncf.io/networks: kube-system/macvlan-vlan0
      creationTimestamp: null
      labels:
        app.kubernetes.io/instance: dao2048-macvlan-overlay
        app.kubernetes.io/name: dao2048-macvlan-overlay
    spec:
      containers:
      - env:
        - name: NODE_NAME
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: spec.nodeName
        - name: POD_NAME
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
        image: ghcr.io/daocloud/dao-2048:v1.1.0-beta.4
        imagePullPolicy: IfNotPresent
        livenessProbe:
          failureThreshold: 3
          httpGet:
            path: /
            port: http
            scheme: HTTP
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: dao-macvlan-overlay
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /
            port: http
            scheme: HTTP
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources: {}
        securityContext:
          capabilities:
            add:
            - NET_ADMIN
            - SYS_TIME
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext: {}
      terminationGracePeriodSeconds: 30

CI for loongarch

The loongarch can not run continuously.

文档 加入 “快速开始

发布 1.1.0 版本

Feature Add themes

It would be handy to be able to switch themes

图标显示不出来

更新 2048 的基础代码

镜像扫描

https://github.com/aquasecurity/trivy-action

修改github 流程

打 tag 自动推镜像，不打tag 不推镜像

relase dev 的一个文档。

tag 缺 V

通过 github 提供 hub 发布

[kubeaduit] AutomountServiceAccountTokenTrueAndDefaultSA

-- [error] AutomountServiceAccountTokenTrueAndDefaultSA
   Message: Default service account with token mounted. automountServiceAccountToken should be set to 'false' on either the ServiceAccount or on the PodSpec or a non-default service account should be used.


---------------- Results for ---------------

  apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: sdf
    namespace: default

--------------------------------------------

Source Control Management (SCM) Files Accessible (HTTP)

Summary

The script attempts to identify files of a SCM accessible at the webserver.

Detection Result

The following SCM files/folders were identified:
Match: 0000000000000000000000000000000000000000 3c339934223032805780a4992f15e74b41ecc0e9 runner <[e-mail]> 1677754632 +0000	checkout: moving from master to refs/tags/v1.4.1

URL:   http://10.6.205.205:8084/.git/logs/HEAD

Match: [core]

[remote "origin"]

URL:   http://10.6.205.205:8084/.git/config

Match: # git ls-files --others --exclude-from=.git/info/exclude

URL:   http://10.6.205.205:8084/.git/info/exclude

Match: Unnamed repository; edit this file 'description' to name the repository.

URL:   http://10.6.205.205:8084/.git/description

Insight

Currently the script is checking for files of the following SCM:

• Git (.git)

• Mercurial (.hg)

• Bazaar (.bzr)

• CVS (CVS/Root, CVS/Entries)

• Subversion (.svn)

Detection Method

Check the response if SCM files are accessible.

Details:	Source Control Management (SCM) Files Accessible (HTTP) OID: 1.3.6.1.4.1.25623.1.0.111084
Version used:	2022-09-13T10:15:09Z

Summary The script attempts to identify files of a SCM accessible at the webserver. Detection Result The following SCM files/folders were identified:

Match: 0000000000000000000000000000000000000000 3c33993 runner [e-mail] 1677754632 +0000 checkout: moving from master to refs/tags/v1.4.1
URL: http://10.6.205.205:8084/.git/logs/HEAD
Match: [core]
[remote "origin"]
URL: http://10.6.205.205:8084/.git/config
Match: # git ls-files --others --exclude-from=.git/info/exclude
URL: http://10.6.205.205:8084/.git/info/exclude
Match: Unnamed repository; edit this file 'description' to name the repository.
URL: http://10.6.205.205:8084/.git/description
Insight
Currently the script is checking for files of the following SCM:

• Git (.git)

• Mercurial (.hg)

• Bazaar (.bzr)

• CVS (CVS/Root, CVS/Entries)

• Subversion (.svn)
  Detection Method
  Check the response if SCM files are accessible.
  Details:
  Source Control Management (SCM) Files Accessible (HTTP) OID: 1.3.6.1.4.1.25623.1.0.111084
  Version used:
  2022-09-13T10:15:09Z
  Impact
  Based on the information provided in these files an attacker might
  be able to gather additional info about the structure of the system and its applications.
  Solution
  Solution Type:
  Mitigation
  Restrict access to the SCM files for authorized systems only.
  References
  Other
  http://pen-testing.sans.org/blog/pen-testing/2012/12/06/all-your-svn-are-belong-to-us
  https://github.com/anantshri/svn-extractor
  https://blog.skullsecurity.org/2012/using-git-clone-to-get-pwn3d
  https://blog.netspi.com/dumping-git-data-from-misconfigured-web-servers/
  http://resources.infosecinstitute.com/hacking-svn-git-and-mercurial/

提供非 nginx 版本

nginx 的cve 漏洞太多，提供一个不需要nginx 的版本。

支持多架构

支持 arm 等架构

Service Type Support

Support NodePort and LoadBalancer, with docs.

Support DPDK

add some network tools

such as

• ping
• telnet