1. 创建 GMC 账户 注册 GMC .

2. 配置以下帐户设置:

   • 网站所有权设置 .
   • 税率设置（仅限美国）.

3. 在 GMC 中，找到商家 ID，即页面右上角帐户电子邮件地址上方的数字。

4. 在 API 资源管理器 设置products.list

   1. 输入merchantId. 所有其他请求参数都是可选的。
   2. 在Credentials那里,选 Google OAuth 2.0 and API key
   3. 点击Execute按钮
   4. 如果出现提示，请使用与您的 GMC 帐户关联的 Google 帐户登录
      image

如果设置正确,则会返回 200 状态, 但如果还没有创建商品的话, 则products.list 方法 不会返回任何商品.添加以后则会显示如下的返回值

API

products.list request

cCURL

1 2 3 4 5

curl \ 'https://shoppingcontent.googleapis.com/content/v2.1/536169960/products?key=[YOUR_API_KEY]' \ --header 'Authorization: Bearer [YOUR_ACCESS_TOKEN]' \ --header 'Accept: application/json' \ --compressed

HTTP

1 2 3 4

GET https://shoppingcontent.googleapis.com/content/v2.1/536169960/products?key=[YOUR_API_KEY] HTTP/1.1 Authorization: Bearer [YOUR_ACCESS_TOKEN] Accept: application/json

JAVASCRIPT

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37

<script src="https://apis.google.com/js/api.js"></script> <script> /** * Sample JavaScript code for content.products.list * See instructions for running APIs Explorer code samples locally: * https://developers.google.com/explorer-help/guides/code_samples#javascript */ function authenticate() { return gapi.auth2.getAuthInstance() .signIn({scope: "https://www.googleapis.com/auth/content"}) .then(function() { console.log("Sign-in successful"); }, function(err) { console.error("Error signing in", err); }); } function loadClient() { gapi.client.setApiKey("YOUR_API_KEY"); return gapi.client.load("https://shoppingcontent.googleapis.com/$discovery/rest?version=v2.1") .then(function() { console.log("GAPI client loaded for API"); }, function(err) { console.error("Error loading GAPI client for API", err); }); } // Make sure the client is loaded and sign-in is complete before calling this method. function execute() { return gapi.client.content.products.list({ "merchantId": 536169960 }) .then(function(response) { // Handle the results here (response.result has the parsed body). console.log("Response", response); }, function(err) { console.error("Execute error", err); }); } gapi.load("client:auth2", function() { gapi.auth2.init({client_id: "YOUR_CLIENT_ID"}); }); </script> <button onclick="authenticate().then(loadClient)">authorize and load</button> <button onclick="execute()">execute</button>

products.list response

application/json

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

{ "kind": "content#productsListResponse", "resources": [ { "kind": "content#product", "id": "online:ja:JP:jmanxfrv", "offerId": "jmanxfrv", "title": "ps5", "description": "play station 5", "imageLink": "https://www.dotenn.com/2022/01/13/4948872415026/", "contentLanguage": "ja", "targetCountry": "JP", "channel": "online", "availability": "in stock", "brand": "sony", "condition": "new", "gtin": "4948872415026", "price": { "value": "120000.00", "currency": "JPY" } } ] }

1. Use official Docker images as base image.

   • cleaner dockerfile
   • verified and already built with best practices
   • official docker image

2. Use specific image versions

   • you might get different docker image versions
   • might break stuff
   • latest tag is unpredictable

3. Use small-sized official images(alpline version)

   • full blown OS distro with lots of tools installed inside uses larger image size
     and more security vulnerabilities
   • leaner OS distro only bundle necessary utilities

4. Optimize caching image layers

   • order Dockerfile commands from least to most frequently changing,
     this way optimize how fast the image gets build

5. Use .dockerignore file to explicitly exclude files and folders in order to:

   • reduce image size
   • prevent unintended secrets exposure

6. Make use of “Multi-Stagte Builds”

   • less dependencies and much smaller in size some contents in the project that you need for building the image during the build process but don’t need them in the final image that will increase the image size and the attack surface some.
     a specific example for this is package.json, palm.xml or any other dependencies file.
     more interesting use case is when building java based applications for example, we need jdk to compile the java source code but jdk is not needed to run the java application itself. that you might be using tools like maven or gradle to build your java application those are also not needed in the final image.

   • “Multi-Stagte” builds feature allows you to use multiple temporary.
     an example docker file with two build stages:

     1 2 3 4 5 6 7 8 9

     # Build stage FROM maven AS build WORKDIR /app COPY myapp /app RUN mvn package

     1 2 3 4 5 6 7 8

     # Run stage # we use the files generated in the previous build stage and copy them in the final iamge # so the final application image is created only in the last stage FROM tomcat COPY --from=build /app/target/file.war /usr/local/tomcat/myapp.war

7. Use the least privileged user

   • the bad security practices

     • container could potentially have root access on the Docker host default when a docker file does not specify a user, it uses a root user but reality there is mostly no reason to run container with root privileges
     • easier privilege escalation for an attacker. application inside the container with a root user will make it eaiser for an attacker to escalate privileges on the host and basically get hold of the underlying host and its processes,
       not only inside the container itself especially if the application inside the container is vulnerable to exploitation

   • to avoid this is simply create a dedicated user and the dedicated group in the docker

     1 2 3 4 5 6 7 8 9 10

     # create group and user RUN groupadd -r foo && useradd -g foo foo # set owership and permissions RUN chown -R foo:foo /app # switch to user USER foo CMD node index.js

     some base images have a generic user bundled in which you can use , so you don’t have to create new one:

     1 2 3 4 5

     RUN node:10-alpline USER node CMD ["node", "index.js"]

8. Scan your images for vulnerabilities

   • uses the docker scan commands docker scan [image-name]
   • uses snyk to to the vulnerability scanning
   • configure docker hub to scan the images automatically

Download links:

VMware Fusion
link

UUP dump for Windows 11 builds https://uupdump.net/

Virtual machine setting

Choose operating system -> Other 64bit arm
Hard disk setting -> more than 30GB

.vmx file setting

1. go to the folder where you created
2. show package contents
3. open the xxx.vmx file you renamed before with texteditor
4. rename arm-other-64 to arm-windows11-64 in xxx.vmx

1	guestOS = "arm-windows11-64"

1. save and restart VMware Fusion

Installing Windows11

1. use Shift + Fn + F10 keys to open the CMD screen in the below setup step
   
2. and then type regedit to open Registy editor
3. go to the location below

1	HKEY_LOCAL_MACHINE\SYSTEM\Setup

1. right click the Setup folder and hit new key name LabConfig
   
2. create two dword 32bit values in LabConfig
   
3. the names are going to call BypassTPMCheck and BypassSecureBootCheck and set the values to 1
   
4. finally exit the editor and hit next

Fixing network access issue in Windows 11

When you first time boot into the OS , you’ll notice that your internet does not work in Windows11. so this is how you fix it and you would do is

1. go down the search and type cmd , and run cmd with Administrator
2. type

1 2	bcdedit /debug on bcdedit /dbgsettings net hostip:10.0.0.1 port:55555

You’ll see the key show up right there you’ll know you’re good to go. restart your virtual machine and when it boots back up you should the internet access.

]]> https://wenhuachen.com/2021/10/23/Installing-Windows11-on-Apple-silicon-VMware-Fusion/ 2021-10-23T14:23:36.000Z

Download links:

VMware Fusion

2026-07-18T01:01:02.523Z