Tag: linux

Hide your SSH port from scanners with port knocking. It's not a replacement for security, but it's a valid defense-in-depth tactic.

PipeWire replaced PulseAudio and ALSA routing on every major distro. Here's the new audio stack, CLI tools, and how to fix the annoying stuff.

Set up Chrony for NTP time sync in your home lab. Covers chrony.conf, chronyc tracking, stratum levels, LAN NTP server setup, and why correct time matters more than you think.

You turned the VPN on and half your traffic still leaves over the normal route. How VPN routing works, reading the routing table, and forcing all traffic.

Kernel live patching applies CVE fixes to a running kernel with no reboot, using kpatch or Canonical Livepatch. Setup for Ubuntu and RHEL, plus what it can't fix.

IPv6 isn't just for the future, it's broken on your network right now. Here's why you should care and how to actually set it up.

Tmpfs vs ramfs on Linux: mount RAM-backed filesystems for blazing-fast temp storage. Covers fstab, Docker tmpfs mounts, CI/CD use cases, and the key differences.

One app logging to one file becomes a 50GB disk emergency. logrotate config, size-based rotation, Docker log driver limits, and app-level log control.

You don't need a GUI to see network packets. Learn tcpdump filters, flags, and pcap capture to debug servers from the command line, no Wireshark needed.

AppArmor vs SELinux: what mandatory access control actually does, writing AppArmor profiles with aa-genprof, SELinux labels and audit2allow, and when to use each.

Linux entropy pools decide how fast a box generates SSH keys and TLS certs. What haveged, virtio-rng, and hardware RNG fix on a freshly booted VM.

Restic, Borg, and Kopia all deduplicate and encrypt, but differ on backends, compression, and UI. Pick the right backup tool for your Linux home lab.