SOCKS5 Over SSH: Selective Routing Without a VPN
Route only the traffic you want through a SOCKS5 proxy via ssh -D. Browser extensions, curl, git, ProxyChains, autossh, and DNS leak gotchas, no VPN needed.
Tag: linux
All the articles with the tag "linux".
Sunshine + Moonlight: Roll Your Own Cloud Gaming
Stream your own gaming PC with Sunshine + Moonlight. Low-latency NVIDIA NVENC, AMD VAAPI, Intel QSV, Tailscale remote play, and no monthly bill.
Linux PSI: The Pressure Metrics Load Average Wishes It Were
Linux PSI (Pressure Stall Information) exposes real CPU, memory, and IO stall percentages, here's why it beats load average for monitoring.
NUT: Network UPS Tools for Home Labs That Don't Want to Crash
NUT (Network UPS Tools) monitors APC, CyberPower, and Eaton UPSes and triggers graceful shutdowns before your home lab eats a corrupt ZFS pool.
cgroups v2 in Practice: Limits, Pressure, Containers
cgroups v2 unified hierarchy explained: read /sys/fs/cgroup/, limit CPU/IO/memory, use systemd slices and PSI pressure files.
Tang & Clevis: LUKS Auto-Unlock Without a Typed Passphrase
Stop typing LUKS passphrases on every headless reboot. Tang + Clevis = NBDE: disks unlock automatically on your trusted network, stay sealed everywhere else.
crun vs runc vs youki: OCI Runtimes Compared
runc, crun, and youki all run your containers, but they differ wildly in startup speed, language, and cgroups v2 support. Here's which to pick.
nftables in 2026: Stop Pretending iptables Will Live Forever
iptables is in soft retirement. Here's why the nft shim isn't a long-term plan and what direct nftables syntax actually buys you.
YubiKey + age: Hardware-Backed Encryption Without GPG
Use age + age-plugin-yubikey to encrypt files with a key that literally cannot leave your hardware token. No GPG drama required.
systemd-resolved: The DNS Resolver You're Already Using Wrong
systemd-resolved does way more than mangle /etc/resolv.conf. Here's how its stub resolver, split DNS, DoT, DNSSEC, and resolvectl actually work.
Atuin: Shell History That Actually Works Across Machines
Atuin replaces your broken $HISTFILE with a SQLite DB, fzf-style search, and optional E2E-encrypted sync across every machine you own.
io_uring: Linux's Async I/O Future Is Already Here
io_uring slashes syscall overhead vs epoll and AIO. Covers the submission/completion queue model, liburing examples, security caveats, and when to skip it.