Time Is a Lie and Chrony Is Here to Fix It: NTP for Home Labs
Set up Chrony for NTP time sync in your home lab. Covers chrony.conf, chronyc tracking, stratum levels, LAN NTP server setup, and why correct time matters more than you think.
Tag: linux
All the articles with the tag "linux".
SSH Keys in 2026: Ed25519 Is the Standard
RSA SSH keys are aging out. Why Ed25519 is the 2026 default, how to generate one in 30 seconds, and how to audit and rotate your legacy keys safely.
Why Your VPN Isn't Routing What You Think
You enabled the VPN but half your traffic still bypasses it. Here's why and how routing actually works.
Kernel Live Patching: Security Updates Without the 3am Reboot
Apply Linux kernel security patches without rebooting using kpatch and Canonical Livepatch. Keep servers secure and online simultaneously, here's the practical setup guide.
IPv6 on Your Home Lab: You Should Care (Here's Why)
IPv6 isn't just for the future, it's broken on your network right now. Here's why you should care and how to actually set it up.
Tmpfs vs Ramfs: When Your Disk Is Too Slow and Your RAM Is Just Sitting There
Tmpfs vs ramfs on Linux: mount RAM-backed filesystems for blazing-fast temp storage. Covers fstab, Docker tmpfs mounts, CI/CD use cases, and the key differences.
Log Rotation for Self-Hosted Apps
Your app is logging to a single file. It's 50GB now. Here's how to rotate logs before your disk dies.
tcpdump Basics: Capture Traffic Without Wireshark
You don't need a GUI to see network packets. Learn tcpdump filters, flags, and pcap capture to debug servers from the command line, no Wireshark needed.
AppArmor vs SELinux: Mandatory Access Control Without the Existential Dread
AppArmor vs SELinux: what mandatory access control actually does, writing AppArmor profiles with aa-genprof, SELinux labels and audit2allow, and when to use each.
Your Server Doesn't Know What Random Means (And That's a Problem)
Linux entropy explained: /dev/random vs /dev/urandom, entropy pools, haveged, virtio-rng, and hardware RNG. Fix low entropy on VMs and containers for safe crypto key generation.
TCP Keepalives: Why Connections Die and How to Fix It
Long-lived connections dropping randomly? Your OS is killing them. Here's why keepalives matter and how to tune them.
Auditd & Audit Logging: Know Exactly Who Touched What on Your Server
Master auditd for Linux audit logging: watch critical files, audit syscalls, use aureport and ausearch, and ship logs to Loki or Elasticsearch for compliance and security monitoring.