Posts
Page 41 of 47
-
The Firewall Rule Order That's Breaking Your Setup
Firewall rules are evaluated top-down, first match wins. One misplaced ALLOW rule silently defeats all security.
5 min read -
Sticky Bit, Setuid, Setgid: Linux Special Permissions Explained
Understand sticky bit, setuid, and setgid: what they do, how to set them, security implications, and real-world use cases.
6 min read -
Is fail2ban Actually Working? Here's How to Check
Verify fail2ban is protecting you: check jails, test bans, monitor logs, common misconfiguration, and unban IPs when needed.
6 min read -
Diagnosing Slow Linux Boot with systemd-analyze
Use systemd-analyze to find which services are slowing down boot. Fix the bottlenecks.
6 min read -
Docker CMD vs ENTRYPOINT: The Final Answer
CMD and ENTRYPOINT work together. Learn the difference, exec vs shell form, and when to use the combo pattern.
5 min read -
SSHFS: Ditch SCP & Access Remote Files
SSHFS mounts remote filesystems over SSH so you can browse and edit files locally — faster than scp for interactive work.
15 min read -
How to Actually Read `systemctl status` Output
Decode systemctl status: Active state, CGroup processes, recent logs, loaded/enabled state. What each field tells you.
7 min read -
SSH Agent Forwarding: How It Works
Understand SSH agent forwarding security risks. When it's safe (almost never), and better alternatives like ProxyJump for jump hosts.
5 min read -
Is Your Linux Server Destroying Its SSD?
Check SSD health, find excessive write patterns, use noatime, move logs to tmpfs to extend lifespan.
5 min read -
Docker Compose Profiles: Run Only What You Need
Profiles let you conditionally start services in Compose. Perfect for dev vs prod service splits without multiple files.
5 min read -
journalctl Queries Every Sysadmin Needs
Essential journalctl commands: -u, -f, --since, -p, -k, -b, --no-pager, JSON output. The queries you need on a broken server at 2 AM.
6 min read -
Why Your SSH Connection Keeps Dropping
Fix SSH timeouts: ServerAliveInterval, ServerAliveCountMax, ClientAliveInterval. Understand NAT, firewalls, and TCP keepalive.
5 min read
