System & Network Admin

Learn how to remove unnecessary Linux capabilities from Podman containers to minimize the attack surface and follow the principle of least privilege.

Want more control over your internet traffic? Follow these simple steps to set up a proxy server, block unwanted websites, mask your IP address, and more.

Setting up a forward proxy can be a powerful tool for managing network traffic, enhancing privacy,...

NaProxy is the highest quality proxy with over 90 million IPs in over 200 countries worldwide. NaProxy provides residential Ip resource services at the cheapest price!

Complete guide to installing Ubuntu on GMKtec EVO-X2 with Ryzen AI 9 HX 395 MAX via PXE boot. Includes memory management comparison, BIOS configuration, SSH setup, and practical troubleshooting for AI inference workloads.

Step-by-step guide to building a quiet home lab for local LLMs. Covers hardware, Ubuntu setup, BIOS tweaks, Docker, Ollama, and llama.cpp with Vulkan.

The GMK EVO-X2, which was recently showcased at AMD’s “ADVANCING AI” Summit, is designed to meet this need, packing impressive AI processing capabilities into a small form factor.

Over the past few months, I've been building a local LLM inference stack on an AMD Ryzen AI Max+ 395 (Strix Halo) — a chip with 128GB of unified LPDDR5X memory shared between CPU and GPU. My original goal was to play with local LLMs and learn more about the hardware and software stacks required to r

AMD Ryzen AI Max+ 395 (“Strix Halo”) | Radeon 8060S | Framework Desktop | GMKtec EVO‑X2 | vLLM on AMD (ROCm)

Strix Halo 128GB RAM, 100% local LLM agents, my tests

Improving my workflow

Simple single user image host with guest upload passes

Sysadmin doing syadmin stuff

Public Wi-Fi exposes Linux systems to monitoring, spoofed networks, and data interception. This guide shows how to secure your device with VPNs, firewalls, and browser protections.

Learn how to create trusted HTTPS .local domains for your local projects on Linux using slim - no browser warnings, no manual certificate setup.

Bombadillo: a non-web browser

How we are periodically dumping metrics about our most demanding BEAM processes into an easy-to-query ClickHouse table.

About a year ago I switched from arch linux to NixOS as a daily driver on my laptop... I fell in love with the idea of NixOS: as input you (basically) define y

Containers changed how we package and ship software, but they did not rewrite the basic security rules. Trust boundaries, privilege, and attack surface are all still there. That was probably the main thing I learned while digging into container security, partly from Liz Rice's Container Security and partly from spending time with the Linux pieces underneath.

The open-source Postman alternative. 50MB RAM. 2s startup. Zero login.

Explore data and build apps seamlessly with marimo, a next-generation Python notebook.

My thoughts on using Emacs in the terminal.

Arca Noae is an OS/2-focused software and development company, providing expert consulting for a wide variety of OS/2 and eComStation installations.

Easily convert Docker run commands to Docker Compose YAML. Streamline container orchestration and boost productivity with our online tool.

Configuring Macvlan and Ipvlan Linux Networking and the Docker Plugin

If you use the bridge or host network drivers in Docker, containers must use different port numbers to be accessible on the host network. Here’s how to use the macvlan driver to assign a unique IP address to each container, allowing containers (and the host) to use the same port numbers.

A simple and easy-to-use OIDC provider that allows users to authenticate with their passkeys to your services.

Learn how to use and administer GitLab, the most scalable Git-based fully integrated platform for software development.

AWS provides a feature that allows mirroring your infrastructure’s network traffic to a separate system for analysis purposes. This is called AWS Traffic Mirroring. If you’d like to use…