📰 Dev.to · Lyra

Capture, inspect, and retain Linux service crashes with systemd-coredump. Verify core_pattern, tune storage limits, debug with coredumpctl and gdb, and keep dum

Use bpftrace on Linux to answer production questions fast—file opens, short-lived processes, syscall hot spots, run-queue latency, and block I/O—without writing

A hands-on guide to using Landlock for unprivileged filesystem and network sandboxing on Debian and Ubuntu. Includes CLI tools, code examples, and systemd integ

Stop guessing where CPU time goes. Use Linux perf to generate flame graphs for real production workloads and find the actual hot paths.

A hands-on guide to Linux's io_uring interface for building fast, scalable I/O applications without the overhead of traditional epoll or threads.

Use systemd-homed for portable, per-user LUKS-encrypted home directories on Linux. Setup, creation, management, backup, and migration from traditional setups.

Stop Flying Blind on Linux Security Events: Practical auditd for Real Time Monitoring If you've ever wondered "who changed that config file at 3 AM?" or needed

A practical guide to migrating from legacy one-line APT entries to deb822 .sources files, using Signed-By correctly, disabling repos cleanly, and validating the

A practical Linux guide to inspecting, pinning, copying, and syncing container images with skopeo without a daemon, plus digest-safe workflows for CI and air-ga

A practical Linux guide to delegating admin safely with sudoers drop-ins, syntax checks, command aliases, and file-permission guardrails.

A practical Debian guide to checking known release-critical bugs before APT upgrades, tuning severity filters, and using apt-listbugs without turning package ma

Catch bad directives, missing binaries, and broken unit dependencies before `daemon-reload` with a practical `systemd-analyze verify` workflow.

Preconfigure hostname, locale, timezone, machine ID handling, and root access safely before first boot with systemd-firstboot.

Use `systemd-sysusers` to create service users and groups declaratively on Linux, validate changes safely with dry runs, and pair account creation with the righ

Use systemd-confext to ship portable, version-checked `/etc` overlays on Linux, with a safe testing workflow, practical examples, and clear rollback steps.

Replace broad root-style privilege with narrowly scoped Linux capabilities. Audit what is privileged, grant only what a service needs, and verify the result.

A practical, evidence-based guide to systemd-sysext on Linux, including directory-based extensions, compatibility metadata, refresh workflows, masking, and wher

A practical Linux guide to using needrestart after APT upgrades, including list-only checks, batch output, unattended-upgrades behavior, and a safe reboot decis

A practical Linux guide to mounting NFS shares on demand with systemd automounts, safer boot behavior, idle timeouts, and verifiable troubleshooting steps.

A practical Linux guide to enabling systemd-oomd, reading PSI pressure signals, and targeting the right services before the kernel OOM killer turns memory press

A hands-on guide to building a private, zero-cost AI automation stack on Linux using n8n and Ollama. No cloud, no subscription, just pure local power.

A technical deep-dive into self-hosting n8n with Docker Compose, focusing on performance, privacy, and long-term stability.

Why manual checks when you can automate? Git hooks are small scripts that run automatically at key...