System & Network Admin

Sorry for the delayed response, hope it helps. Documenting anyway as it might help others as well. The idea is to have a systemd target (tailscale-online.target) that we ensure is enabled if and only if tailscale is up and vice versa. To do that write and enable tailscale-dispatcher.timer: [Unit] Description=Checks for tailscale state and syncs with `tailscale-online.target` BindsTo=tailscaled.service After=tailscaled.service [Timer] OnBootSec=0 OnUnitInactiveSec=10 AccuracySec=1 [Install]...

I installed NixOS on a Raspberry Pi 3B. Here’s a write-up on the process, the problems I encountered and what I learned. Let me tell you: the Pi’s boot process is weird. Also it’s too slow to even evaluate my NixOS config so I had to build and deploy it remotely, and some other fun stuff.

The launch of the new version of Nebula 1.5 has just been announced, which is positioned as a collection of tools ...

Learn the step-by-step process to upgrade a Ubuntu Linux system to the latest version of the distribution.

Learn how to start a shell in a new or running Alpine Docker container.

I have a directory containing only two files, Dockerfile and sayhello.sh: . ├── Dockerfile └── sayhello.sh The Dockerfile reads FROM alpine COPY sayhello.sh sayhello.sh CMD ["sayhello.sh&quot...

tcpdump is the world’s premier network analysis tool—combining both power and simplicity into a single command-line interface. This guide will show

I'm trying to run tcpdump on linux machine, which needs to write pcap on the remote server with file rotation every 10 seconds. tcpdump -s0 -i eth0 -G 10 -w - | ssh {remote_ip} "cat > capture_%...

Imagine if we could establish a level of trust that in our network, we can verify with certainty that a computer really is who it says it is. By bringing mutual authentication and trust into networking, we can better make security decisions on when connections should be allowed. This can enable our services to talk to each other securely over the global internet, and reduce the dependence on a a trusted perimeter.

In my previous blog post, I delved into the powerful combination of Node Exporter, Prometheus, and Grafana for robust monitoring. This…

If you’ve read this blog for any length of time, you’ll know that I’m a big fan of Splunk, and using Splunk to solve everyday problems. But…

A collection of awesome resources for running your own federated social media website.

Make your web services secure by default with BunkerWeb, the open source and next generation WAF.

I have created Nix Flake for Livebook if you are interested. This Flake takes care of all dependencies that you would need I plan on expanding it with more OTP-related projects to be more like Fenix but for OTP related stuff.

FFMPEG is a powerful tool for working with video and audio files, offering a wide range of features for encoding, decoding, transcoding, and manipulating media. […]

Getting an SHA-256 hash of a file in Linux is straightforward and essential for ensuring data integrity and security. This cryptographic hash function

Bash is great for automating little tasks, but sometimes a little script you think will take a minute to write turns into a half hour or more. This is the story of one of those half-hour scripts. I…

Linux is considered one of the most secure operating systems, but even so, we will discuss some of its loopholes and exploits.

Documentation and guides from the team at Fly.io.

Documentation and guides from the team at Fly.io.

Learn about LXC and its differences from Docker Containers.

Many CLIs are general enough to be powerful in many situations; fzf is a good example. Fast, highly customizable, it answers many needs.

Multi-layer keyboard customization

Maybe you’re sufficiently Linux-nerdy that you’ll enjoy glancing at this. Or maybe not, whatever. 😉