cgroups v2 in Practice: Limits, Pressure, Containers
cgroups v2 unified hierarchy explained: read /sys/fs/cgroup/, limit CPU/IO/memory, use systemd slices and PSI pressure files.
Tag: linux
All the articles with the tag "linux".
Tang & Clevis: LUKS Auto-Unlock Without a Typed Passphrase
Stop typing LUKS passphrases on every headless reboot. Tang + Clevis = NBDE: disks unlock automatically on your trusted network, stay sealed everywhere else.
crun vs runc vs youki: OCI Runtimes Compared
runc, crun, and youki all run your containers, but they differ wildly in startup speed, language, and cgroups v2 support. Here's which to pick.
nftables in 2026: Stop Pretending iptables Will Live Forever
iptables is in soft retirement. Here's why the nft shim isn't a long-term plan and what direct nftables syntax actually buys you.
YubiKey + age: Hardware-Backed Encryption Without GPG
Use age + age-plugin-yubikey to encrypt files with a key that literally cannot leave your hardware token. No GPG drama required.
systemd-resolved: The DNS Resolver You're Already Using Wrong
systemd-resolved does way more than mangle /etc/resolv.conf. Here's how its stub resolver, split DNS, DoT, DNSSEC, and resolvectl actually work.
Atuin: Shell History That Actually Works Across Machines
Atuin replaces your broken $HISTFILE with a SQLite DB, fzf-style search, and optional E2E-encrypted sync across every machine you own.
Btrfs RAID 5/6: Still Don't
The kernel docs still warn about it. The Btrfs wiki still warns about it. People still build it and lose data. Here's the write hole, why RAID 1/10 are fine, and what to use instead.
SnapRAID: Parity Without Real-Time RAID
Your media library doesn't write often enough to justify mdadm or ZFS overhead. SnapRAID calculates parity on a schedule, mixes drive sizes, and pairs with MergerFS for a unified pool. Here's the setup.
mdadm Day-2: Grow, Replace, Scrub
Creating a RAID array is the easy part. The drama starts six months later when one drive starts dying. Here's the survival guide for everything that happens after mdadm --create.
Hardware RAID vs Software RAID in 2026
Hardware RAID controllers used to be necessary. Now they're often a liability. Here's when to flash that LSI card to IT mode, when to keep it, and why ZFS specifically refuses to share.
RAID-Z and dRAID: ZFS Parity Explained
RAID-Z isn't just RAID 5 with a new name. Variable stripe widths, no write hole, and dRAID's distributed spares change the rebuild math entirely.