Tmpfs vs Ramfs: When Your Disk Is Too Slow and Your RAM Is Just Sitting There
Tmpfs vs ramfs on Linux: mount RAM-backed filesystems for blazing-fast temp storage. Covers fstab, Docker tmpfs mounts, CI/CD use cases, and the key differences.
Tag: linux
All the articles with the tag "linux".
Log Rotation for Self-Hosted Apps
Your app is logging to a single file. It's 50GB now. Here's how to rotate logs before your disk dies.
tcpdump Basics: Capture Traffic Without Wireshark
You don't need a GUI to see network packets. Learn tcpdump filters, flags, and pcap capture to debug servers from the command line, no Wireshark needed.
AppArmor vs SELinux: Mandatory Access Control Without the Existential Dread
AppArmor vs SELinux: what mandatory access control actually does, writing AppArmor profiles with aa-genprof, SELinux labels and audit2allow, and when to use each.
Your Server Doesn't Know What Random Means (And That's a Problem)
Linux entropy explained: /dev/random vs /dev/urandom, entropy pools, haveged, virtio-rng, and hardware RNG. Fix low entropy on VMs and containers for safe crypto key generation.
TCP Keepalives: Why Connections Die and How to Fix It
Long-lived connections dropping randomly? Your OS is killing them. Here's why keepalives matter and how to tune them.
Auditd & Audit Logging: Know Exactly Who Touched What on Your Server
Master auditd for Linux audit logging: watch critical files, audit syscalls, use aureport and ausearch, and ship logs to Loki or Elasticsearch for compliance and security monitoring.
Time Sync on VMs: Why NTP Keeps Drifting
Your VM's clock is off by minutes, NTP says it's synced, yet the system keeps drifting. Here's why the hypervisor is the real culprit, and how to fix it.
The MTU Problem Nobody Diagnoses Correctly
MTU mismatches silently break large file transfers, backups, and video calls. Here's how to find and fix the wrong frame size on your network.
VPN Kill Switch and DNS Leak Prevention: Paranoia, Justified
Set up a WireGuard VPN kill switch and prevent DNS leaks on Linux. Practical iptables rules, resolv.conf locking, and systemd-resolved config.
BGP in Your Home Lab: Dynamic Routing for People Who've Run Out of Static Routes
Run BGP in your home lab with FRRouting. Covers iBGP vs eBGP, FRR installation, basic BGP config, peering with OPNsense, route filtering, and when BGP is actually worth the complexity.
DNS Troubleshooting from the Command Line
DNS broke again. Here's the exact command sequence to figure out what's happening without touching a GUI.