Linux Capabilities: Drop Root Without Breaking Everything
Learn Linux capabilities to drop root privileges without breaking your apps. Master cap_drop, cap_add in Docker, and setcap for fine-grained privilege control.
All the articles with the tag "kernel".
Learn Linux capabilities to drop root privileges without breaking your apps. Master cap_drop, cap_add in Docker, and setcap for fine-grained privilege control.
ulimit and cgroups v2: set per-process CPU, memory, and file limits, use systemd slice controls, and keep one runaway service from killing your server.
Why Linux kills your app with no warning. Understand the OOM killer, read dmesg logs, and shield critical processes with oom_score_adj and swap.
The /proc filesystem is a live window into every running process on Linux. Debug PIDs, file descriptors, memory, and limits with no extra tools installed.
Running new hardware on Ubuntu LTS? The HWE kernel backports newer kernel and graphics support. Here's how to switch from generic to HWE safely.
Find your Linux distro version, kernel version, and architecture with uname, lsb_release, /etc/os-release, and hostnamectl.
Old kernels fill /boot until apt upgrades fail. Clear them with apt autoremove or dpkg purge on Ubuntu and Debian, plus the Proxmox quirk and how many to keep.