Linux tutorial - IT technology blog
Posted inLinux

Landlock LSM on Linux: Sandbox Applications Without Root Using Built-in Kernel Security

Landlock LSM is a security module built into the Linux kernel since version 5.13, allowing applications to restrict their own filesystem access without root privileges. This post shares real-world deployment experience on Ubuntu 22.04 in production over six months: Python examples using ctypes, wrapping binaries with landlockrun, and combining with systemd hardening.
Fedora tutorial - IT technology blog
Posted inFedora

Using Podman Compose on Fedora: Replacing Docker Compose for Rootless Multi-Container Application Management

Podman Compose lets you run multi-container stacks on Fedora without needing a Docker daemon or root privileges. This article compares four approaches — Docker Compose, Podman Pods, Quadlet, and Podman Compose — then walks through a real-world deployment with a web app, PostgreSQL, and Redis, including notes on SELinux and rootless port handling.