The solution is not to install packages manually with rpm-ostree but to always go through generating a new OCI image with the desired packages. This keeps a consistent state between the image and the deployed system. Let’s generate a new image with cowsay and push it to Harbor so the update service can retrieve it.
The ISS does have its own defenses, of course. Fabric-y buffers envelope some of the systems, and a bumper called the Whipple Shield helps blunt impact. That shield is only built to stop debris up to about 1 cubic centimeter, though, and the debris tracker is only designed to catch pieces 10 cubic centimeters and larger. In other words, there’s a gap in defenses.
，更多细节参见91视频
// We need access to the raw memory of the Wasm code, so
$ /usr/bin/time go build