Skip to main content

Filed under

Linux

6 entries

  1. Linux 10 min read

    The Command Said It Worked

    Five commands this site published reported success while doing nothing. A small container lab reproduces four, and the cheap defense is running each command once where it must fail.

  2. Virtualization 5 min read

    Two Processes, One Page Cache: Testing Shared State Before Blaming the VM

    A small Linux experiment separates shared file identity from identical bytes, with a failed tmpfs control and a careful look at a July 2026 VM-isolation preprint.

  3. Supply Chain 12 min read

    Patch Fast, Pull Slow: Defending in the Year of Copy Fail

    AI is finding bugs faster, researchers pile on the moment one drops, and registries ship malware by the hundred-thousand. Defenders are caught between two contradictory imperatives. The fix is architectural, not temporal.

  4. Linux 8 min read

    Multiboxing EverQuest on Linux: Deterministic Wine Prefixes and Programmatic Window Layout

    I left Windows behind for good. Norrath-Native is an IaC-style toolkit that deploys EverQuest on Ubuntu 24.04 with Wine and DXVK, and a growing exploration into what you can actually do with programmatic window management on Linux.

  5. Container Security 12 min read

    Docker Runtime Security Hardening with Linux Security Modules

    Harden Docker containers using AppArmor and SELinux for isolation without orchestration overhead. LSM profiles, seccomp filters, and capability dropping at homelab scale.

  6. Linux 17 min read

    eBPF for Security Monitoring: A Practical Guide

    Implement eBPF security monitoring for real-time kernel visibility—track syscalls and network activity with production-ready patterns for threat detection.