Posted inLinux
Protecting Linux Files From Root: Mastering chattr and lsattr
Root privileges aren't the final word. Discover the power of chattr and lsattr to lock files, prevent accidental deletion, and harden your Linux server security.
Posted inUbuntu
Using Chisel on Ubuntu: Building Ultra-Minimal Container Images for Enhanced Security
Chisel is Canonical's tool for 'slicing' Ubuntu packages, extracting only the runtime files your container image actually needs. Combined with Docker multi-stage builds, image size can drop from 250MB to 45MB and CVE count from 47 to just 2.
Posted inVirtualization
Kasm Workspaces on Ubuntu: Setting Up Browser Isolation and Open-Source Desktop-as-a-Service
A complete guide to installing Kasm Workspaces on Ubuntu for open-source Browser Isolation and Desktop-as-a-Service. An effective security solution for remote DevOps teams — easy to deploy and free with the Community Edition.
Posted inFedora
Setting Up WireGuard VPN on Fedora Server: Secure Remote Access with firewalld and SELinux
A complete guide to setting up WireGuard VPN on Fedora Server, covering firewalld, SELinux, and IP forwarding configuration. Includes a script to auto-generate client configs and practical debugging tips.
Posted inSecurity
How to Use Canarytokens for Early Intrusion Detection: Setting Traps in Files, URLs, and Emails
Canarytokens is a technique for planting information traps inside files, URLs, and emails to detect hackers the moment they access sensitive data — receiving instant alerts with IP address and timestamp. A step-by-step practical guide: creating tokens and embedding them in fake credential files, .env files, Word documents, and DNS config on Linux servers.
Posted inSecurity
Secure Internal Dashboards with OAuth2 Proxy: Block Unauthorized Access in a 15-Minute Setup
Don't leave your internal dashboards passwordless! Detailed guide on using OAuth2 Proxy to add a Google/GitHub authentication layer in just 15 minutes.
Posted inVMware
How to Configure Native Key Provider and VM Encryption on VMware vSphere
A step-by-step guide to configuring the Native Key Provider built into vCenter and setting up VM Encryption to protect virtual machines with AES-256 on VMware vSphere 7.0 U2 and later. No external KMS required — up and running in 30 minutes.
Posted inSecurity
Linux Password Auditing: Using John the Ripper and Hashcat to Hunt Down User Vulnerabilities
Don't let weak passwords become a security liability. A hands-on guide to using John the Ripper and Hashcat for professional Linux system auditing.
Posted inGit
Signing Git Commits with SSH Keys: The Fastest Way to Get the “Verified” Badge
Forget GPG; you can now sign Git commits lightning-fast using SSH keys. Here is a detailed guide to getting that 'Verified' badge on GitHub with simple steps.
Posted inVMware
Guide to Joining VMware ESXi to Active Directory: Centralized Management and Professional Permissions
Managing local users on individual ESXi servers is manual and poses security risks. This guide helps you join ESXi to Active Directory for centralized management and professional authorization.