Tag: linux

Restic, Borg, and Kopia all deduplicate and encrypt, but differ on backends, compression, and UI. Pick the right backup tool for your Linux home lab.

Set, verify, and sync your timezone in Ubuntu using timedatectl, one command to fix the clock on a newly provisioned server.

socat wires TCP, UDP, Unix sockets, files, and serial ports together. Port forwarding, OpenSSL tunnels, traffic capture, this is netcat with superpowers.

ss replaces netstat on modern Linux: faster, shows more socket detail, and reads from the kernel. Every netstat command you rely on, rewritten for ss.

Generate SSH keys, set up passwordless auth, configure SSH, and transfer files securely with SCP, the foundation of headless Linux work.

Suricata beats Snort on multi-threading and EVE JSON logging. Side-by-side IDS/IPS breakdown with Suricata install, suricata.yaml config, and OPNsense setup for home labs.

Running new hardware on Ubuntu LTS? The HWE kernel backports newer kernel and graphics support. Here's how to switch from generic to HWE safely.

Write bash scripts that don't silently fail, set -euo pipefail, error handling, input validation, and logging patterns for production scripts.

What is lost+found and why does it exist? fsck puts recovered file fragments there after a crash, and no, you can't delete it.

AV vs EDR, traditional antivirus signatures vs behavioral endpoint detection. What each catches, what it misses, and what you actually need.

Packages have been kept back during apt upgrade, what it means, why it happens, and how to safely install or hold those packages.

UFW makes iptables manageable, allow and deny rules, app profiles, default policies, and the 5-minute setup for any new Linux server.