Posts
Page 64 of 76
-
xargs vs while read: Which One and When
xargs and while read both loop over input, but they handle arguments, signals, and performance differently. Here's when to use each.
5 min read -
Where Environment Variables Actually Live in Linux
Environment variables live in five places on Linux: /etc/environment, ~/.bashrc, ~/.profile, systemd Environment=, and the shell. When to use each one.
6 min read -
The Firewall Rule Order That's Breaking Your Setup
Firewall rules are evaluated top-down, first match wins. One misplaced ALLOW rule above your denials silently defeats all your security. Here's the fix.
5 min read -
Sticky Bit, Setuid, Setgid: Linux Special Permissions Explained
Understand sticky bit, setuid, and setgid: what they do, how to set them, security implications, and real-world use cases.
· Updated:6 min read -
Is fail2ban Actually Working? Here's How to Check
Verify fail2ban is protecting you: check jails, test bans, monitor logs, common misconfiguration, and unban IPs when needed.
6 min read -
Diagnosing Slow Linux Boot with systemd-analyze
Your Linux box takes forever to boot? systemd-analyze shows exactly which services drag it down. Read blame, critical-chain, plot, and fix the slow ones.
6 min read -
Docker CMD vs ENTRYPOINT: The Final Answer
CMD and ENTRYPOINT work together rather than competing. Exec form vs shell form, the full behavior matrix, the combo pattern, and the debug override.
6 min read -
SSHFS: Ditch SCP & Access Remote Files
SSHFS mounts remote filesystems over SSH so you can browse and edit files locally, faster than scp for interactive work.
· Updated:16 min read -
How to Actually Read `systemctl status` Output
systemctl status packs a lot into 12 lines. What Loaded, Active, Invocation, Main PID, Tasks, and the CGroup tree each tell you when a service misbehaves.
· Updated:7 min read -
SSH Agent Forwarding: How It Works
Understand SSH agent forwarding security risks. When it's safe (almost never), and better alternatives like ProxyJump for jump hosts.
5 min read -
Is Your Linux Server Destroying Its SSD?
Default mount options and journald settings burn SSD write endurance. Check health with smartctl, mount noatime, move logs to tmpfs, find the real writer.
5 min read -
Docker Compose Profiles: Run Only What You Need
Profiles let you conditionally start services in Compose. Perfect for dev vs prod service splits without multiple files.
5 min read
