Kernel Live Patching: Security Updates Without the 3am Reboot
Kernel live patching applies CVE fixes to a running kernel with no reboot, using kpatch or Canonical Livepatch. Setup for Ubuntu and RHEL, plus what it can't fix.
All the articles with the tag "linux".
Kernel live patching applies CVE fixes to a running kernel with no reboot, using kpatch or Canonical Livepatch. Setup for Ubuntu and RHEL, plus what it can't fix.
IPv6 isn't just for the future, it's broken on your network right now. Here's why you should care and how to actually set it up.
Tmpfs vs ramfs on Linux: mount RAM-backed filesystems for blazing-fast temp storage. Covers fstab, Docker tmpfs mounts, CI/CD use cases, and the key differences.
Your app is logging to a single file. It's 50GB now. Here's how to rotate logs before your disk dies.
You don't need a GUI to see network packets. Learn tcpdump filters, flags, and pcap capture to debug servers from the command line, no Wireshark needed.
AppArmor vs SELinux: what mandatory access control actually does, writing AppArmor profiles with aa-genprof, SELinux labels and audit2allow, and when to use each.
Your freshly booted VM just generated SSH keys instantly, and that's not a good sign. Linux entropy pools explained: haveged, virtio-rng, and hardware RNG fixes.
Restic, Borg, and Kopia all deduplicate and encrypt, but differ on backends, compression, and UI. Pick the right backup tool for your Linux home lab.
Long-lived connections dropping randomly? Your OS is killing them. Here's why keepalives matter and how to tune them.
Set up auditd to log every sudo command and file change on Linux: auditctl rules, ausearch, aureport, and shipping logs to Loki or Elasticsearch for compliance.
Your VM's clock is off by minutes, NTP says it's synced, yet the system keeps drifting. Here's why the hypervisor is the real culprit, and how to fix it.
MTU mismatches silently break large file transfers, backups, and video calls. Here's how to find and fix the wrong frame size on your network.