Posted inLinux
Protecting Linux Files From Root: Mastering chattr and lsattr
Root privileges aren't the final word. Discover the power of chattr and lsattr to lock files, prevent accidental deletion, and harden your Linux server security.
Posted inLinux
Mastering OverlayFS: How to Create an ‘Undo Button’ for Your Linux System
Learn how to use OverlayFS on Linux to protect system data. This article provides a detailed guide on the Copy-on-Write mechanism and how to create a secure sandbox environment.
Posted inLinux
Landlock LSM on Linux: Sandbox Applications Without Root Using Built-in Kernel Security
Landlock LSM is a security module built into the Linux kernel since version 5.13, allowing applications to restrict their own filesystem access without root privileges. This post shares real-world deployment experience on Ubuntu 22.04 in production over six months: Python examples using ctypes, wrapping binaries with landlockrun, and combining with systemd hardening.
Posted inFedora
Dual Boot Fedora Linux and Windows 11: Configuring UEFI, Secure Boot, and GRUB2 for Safe Parallel Booting
A guide to setting up Fedora Linux and Windows 11 dual boot on UEFI, keeping Secure Boot enabled through MOK enrollment, properly partitioning the EFI partition, and recovering GRUB2 after Windows Update overwrites the boot entry.
Posted inFedora
Setting Up WireGuard VPN on Fedora Server: Secure Remote Access with firewalld and SELinux
A complete guide to setting up WireGuard VPN on Fedora Server, covering firewalld, SELinux, and IP forwarding configuration. Includes a script to auto-generate client configs and practical debugging tips.
Posted inFedora
Using Podman Compose on Fedora: Replacing Docker Compose for Rootless Multi-Container Application Management
Podman Compose lets you run multi-container stacks on Fedora without needing a Docker daemon or root privileges. This article compares four approaches — Docker Compose, Podman Pods, Quadlet, and Podman Compose — then walks through a real-world deployment with a web app, PostgreSQL, and Redis, including notes on SELinux and rootless port handling.
Posted inFedora
Fedora Server: 6 Things to Do Right Away for a Clean and Secure Server
Don't leave your Fedora Server at default settings. This 6-step guide covers SSH hardening, Firewalld, zRAM, and SELinux to keep your system running smoothly and securely.
Posted inFedora
Podman Pod on Fedora: Group Containers with Kubernetes-native Architecture and Auto-generate systemd Services
A guide to using Podman Pod on Fedora to group related containers into a single unit following Kubernetes-native architecture. Covers a real-world WordPress + MariaDB example and how to auto-generate systemd services with podman generate systemd so the Pod starts automatically after a reboot.
Posted inFedora
Greenboot on Fedora IoT and CoreOS: Automatic Health Checks and Rollback on Failed Updates
Greenboot automatically runs health check scripts after every boot on Fedora IoT and CoreOS — if the system is unhealthy, it rolls back to the previous deployment after 3 consecutive failures. This guide covers installation, writing real-world check scripts, and how to test rollback without waiting for an actual failed update.
Posted inLinux
Boost HDD Speed by 10x with bcache: Use an Old SSD as Cache on Linux
Don't let slow HDDs bottleneck your system. Here is a detailed guide on using bcache to turn an SSD into a cache for your HDD, multiplying IOPS at a minimal cost.