linux k8s tips life security algorithms docker lua ci/cd 容器 go specification cryptography inf network