Tag: linux

Compile software on Raspberry Pi or cheap VPS with 512MB, 2GB RAM. Swap, parallel jobs, ccache, and swappiness tuning make it work.

Migrate your Zim Wiki notes to Obsidian using zim2obsidian, escape a dated GTK app for modern sync, mobile access, and a thriving plugin ecosystem.

CVE-2026-31431 (copy.fail) lets any local user become root on virtually every Linux system since 2017. Here's what it is, why it matters, and how to fix it.

GeForce Now figured out what Stadia never did: use games you already own. A Founders tier member's deep dive into the best cloud gaming platform running in 2026.

A honeypot sits quietly on your network pretending to be valuable. Touch it and you've found an intruder. Deploy OpenCanary in Docker, dead simple.

iptables is being phased out. nftables is faster, cleaner, and already the default on modern Linux. Here's how to actually use it without wanting to quit.

rsync is not a backup. Restic, Borg, and Kopia do deduplication, encryption, and incremental snapshots properly. Here's which one fits your home lab and why.

Snort invented network intrusion detection. Suricata multi-threaded its way past it. Here's how to set up real IDS/IPS on your home lab and actually understand what it's telling you.

Linux ships with conservative kernel defaults. These sysctl settings tune your server for networking, memory, and file I/O, with explanations, not just paste-and-pray values.

Falco watches every syscall your containers make and screams when something sketchy happens. Like someone exec'ing a shell inside your nginx container at 3am.

Cockpit is the modern systemd-native Linux admin panel. Webmin is the veteran that configures everything. Here's which one should be on your servers, and which shouldn't.

Fail2ban bans IPs that attack you. CrowdSec bans them before they attack you, using community threat intelligence. Here's how to set up both and why you might want both.