You often need to access a Git server that only accepts internal connections, but you have SSH access to an intermediate host that can reach it. This is common in corporate environments where the Git server sits behind a firewall. You can tunnel Git traffic through the intermediate host without manually managing tunnels for each…
The Problem You’ve got internal hosts on RFC 1918 addresses (10.0.3.0/24, 172.16.0.0/12, etc.) behind a gateway, and you need SSH access to them from your workstation. Traditional solutions involve iptables port forwarding, non-standard ports, and a maintenance nightmare. ProxyCommand offers a cleaner approach: direct SSH connections to internal IPs that actually work. How ProxyCommand Works…
SSH performance is constrained by cipher choice, especially for large file transfers over high-bandwidth links where CPU becomes the bottleneck. Selecting the right cipher, key exchange algorithm, and compression settings can yield substantial throughput improvements. Current Cipher Landscape Modern OpenSSH (7.4+) has deprecated or removed weak ciphers. Here’s what’s viable today: Secure and performant: chacha20-poly1305@openssh.com…
WordPress performance depends on three complementary caching layers: PHP bytecode caching (OPcache), page caching (WP Super Cache), and asset optimization (Autoptimize). Combined properly, they’ll cut your Time to First Byte in half and significantly improve Core Web Vitals. Enable OPcache in PHP OPcache caches compiled PHP bytecode in shared memory, eliminating parse and compile overhead…
The Problem Emacs startup is slow. If you’re using it for quick edits alongside other tools, waiting 2-3 seconds every time becomes friction. Heavy mode configurations, lazy loading chains, and initialization hooks add up fast. The server/client architecture solves this: start an Emacs server once, then spawn lightweight clients that connect almost instantly. Your first…
GNOME’s default Settings app doesn’t expose comprehensive font options, but GNOME Tweaks and command-line tools give you full control over typefaces across the desktop, shell, and window decorations. Installing GNOME Tweaks GNOME Tweaks is the easiest way to customize fonts. Install it on your system: Fedora: sudo dnf install gnome-tweaks Debian/Ubuntu: sudo apt install gnome-tweaks…
Vim tips and configuration Vim remains one of the most efficient editors available on Linux and Unix systems. While it has a steep learning curve, the payoff in speed and capability is substantial once you develop muscle memory. This guide covers practical tips, configuration strategies, and workflow improvements. Configuration and dotfiles A solid .vimrc provides…
Benchmarks exist to answer one question: how fast can this system process data? The AMPLab Big Data Benchmark, developed by UC Berkeley, became a foundational effort to answer that question systematically across different distributed query engines. The Benchmark’s Original Scope The AMPLab benchmark evaluated five systems circa 2013: Redshift – Amazon’s columnar data warehouse (built…
Sending email notifications when commits are pushed to a central Git repository helps teams stay coordinated and maintains audit trails. This is handled through Git hooks—scripts triggered by repository events. How Post-Receive Hooks Work When a client pushes to your Git server, the post-receive hook executes automatically. This hook lives at GIT_DIR/hooks/post-receive in your bare…
Gitolite provides fine-grained access control over Git repositories without the overhead of a full-featured platform. It uses SSH keys for authentication and handles per-user, per-repository, and even per-branch permissions through a simple configuration file. This guide covers a working installation on modern Linux distributions. Prerequisites Server: Linux (Ubuntu 20.04 LTS or later, Debian 11+, RHEL/Rocky…
Resource management and error handling are critical in systems programming. RAII (Resource Acquisition Is Initialization) originated in C++ and ties resource lifecycles to object scope, with destructors automatically cleaning up resources. C lacks destructors and exceptions, but you can achieve similar semantics using established patterns that are battle-tested in production systems. The goto-based cleanup pattern…
Fedora is a cutting-edge distribution sponsored by Red Hat that serves as a testing ground for technologies eventually stabilized in RHEL. This guide covers essential infrastructure, system administration, and desktop tools for modern Fedora systems, with practical installation and usage examples. Desktop Environment Setup GNOME Configuration Modern GNOME desktops (GNOME 40+) use dconf for configuration,…
VNC provides graphical remote access to Linux servers. For security, tunnel VNC traffic through SSH rather than expose it directly to the network. This guide covers Windows client setup with SSH tunneling. Prerequisites Windows client: SSH client: Native OpenSSH (built into Windows 10/11) or PuTTY VNC viewer: RealVNC Viewer, TigerVNC Viewer, or TightVNC Viewer Linux…
Self-hosting a photo gallery gives you control over your content. If you want to skip database management entirely, a handful of PHP solutions still work—though most are unmaintained. This post covers what’s still functional, where the limits are, and when you should choose something else instead. Static File-Based Gallery Scripts Single File PHP Gallery Status:…
Choosing the right cloud storage service requires understanding how each platform handles data consistency. This post covers the current consistency guarantees from the three major providers and how they affect your application design. Amazon S3 S3 is a key-based object store built for Internet-scale workloads. The consistency model is now straightforward across all operations. S3…
Why Static Linking? Before statically linking C and C++ programs, understand the tradeoffs. With glibc, “static” binaries aren’t truly static — libc uses dynamic features like NSS (Name Service Switch) that load additional shared libraries at runtime. This can cause: Larger binaries DNS resolution issues without proper NSS configuration Inability to use dlopen() Compatibility problems…
Setting up OCaml indentation in Vim with ocp-indent Vim’s default OCaml indentation leaves much to be desired. The ocp-indent tool provides intelligent, OCaml-aware indentation that respects the language’s syntax and common style conventions. Installing ocp-indent Start by installing ocp-indent via opam: opam install ocp-indent This installs both the indentation engine and the Vim plugin integration….
RAID0 (striping) on enterprise RAID controllers like Broadcom MegaRAID is used to expose multiple disks as a single logical volume with no redundancy. This configuration is appropriate only for performance-critical workloads where data loss from a single disk failure is acceptable, or for temporary/cache storage. This guide covers the full setup process on servers with…
Linux device names like /dev/sda and /dev/sdb are unreliable identifiers for physical hardware. They shift when you add, remove, or reseat drives, and there’s no guaranteed mapping between a SATA port and its device name. When a disk fails, you need to know exactly which physical slot to replace—guessing wrong takes down the wrong system….
mailx (heirloom-mailx) and s-nail are lightweight CLI tools for sending email from scripts, cron jobs, and system alerts. They’re especially useful in corporate or campus networks with internal SMTP servers that don’t require authentication. Installation Debian/Ubuntu: apt install heirloom-mailx RHEL/CentOS/Fedora: dnf install mailx Alpine: apk add mailx Arch: pacman -S s-nail s-nail is a modern…