Free VPNs on iOS have legitimate uses—testing geolocation-dependent content, accessing region-locked resources, or bypassing network restrictions. But understand the tradeoffs: free providers often log traffic, inject ads, sell bandwidth, or disappear without notice. Use free VPNs only for non-sensitive browsing. For actual security work or traveling to high-risk regions, a paid provider with a documented…
When SSH fails but the daemon still runs, or when kernel panics strike, you need automated recovery without physical access. This guide covers three essential techniques: forcing reboots when the system is unresponsive, auto-recovery from kernel panics, and alerting you when it happens. Force a reboot when SSH is unresponsive If a server stops responding…
A toggle-on-demand terminal you can summon and hide with a single keystroke is useful for quick commands without cluttering your workspace. This guide walks you through creating one using GNOME Terminal and basic shell scripting. Prerequisites You need xdotool and wmctrl installed to manipulate windows: # Debian/Ubuntu sudo apt install xdotool wmctrl # Fedora sudo…
Chrome on Linux uses NSS (Network Security Services) for certificate management. Install the certutil utility from your distribution: Debian/Ubuntu/Linux Mint: sudo apt install libnss3-tools CentOS/Fedora/RHEL: sudo dnf install nss-tools Arch Linux: sudo pacman -S nss Extract and Import the Certificate The most reliable approach is to extract the certificate directly from the server and import…
Playing video files stored on a remote server without downloading them locally is practical with modern tools. Whether you’re accessing a home NAS, media server, or remote workstation, SSH combined with a media player gives you several approaches depending on network conditions and your use case. We’ll assume a file located at ~/movie.mp4 on user@example.org….
Hadoop 2.x reached end-of-life in 2016. This guide covers setup for learning purposes and legacy system maintenance only. For production deployments, use Hadoop 3.x or later, which includes performance improvements, better YARN scheduling, HDFS erasure coding, and improved security. Cloud-managed options like AWS EMR, Google Dataproc, and Azure HDInsight eliminate most operational overhead. This guide…
A file-backed VBD stores the entire VM disk in a single file on the Dom0 filesystem. This approach works well for testing and development, though LVM-backed or disk-backed storage provides better performance for production workloads. Create a working directory and a 20GB sparse file-backed VBD: mkdir -p /home/xen/f41install cd /home/xen/f41install dd if=/dev/zero of=./vmdisk0 bs=1k seek=20480k…
git clone https://example.com/your/repo.git git clone git@github.com:user/repo.git Use HTTPS for better firewall compatibility, or SSH if you have keys configured. HTTPS requires authentication via personal access tokens or git credentials; SSH uses key-based auth. List branches # Local branches only git branch # All branches (local and remote) git branch -a # Show branch tracking information…
You often need to access a Git server that only accepts internal connections, but you have SSH access to an intermediate host that can reach it. This is common in corporate environments where the Git server sits behind a firewall. You can tunnel Git traffic through the intermediate host without manually managing tunnels for each…
SSH performance is constrained by cipher choice, especially for large file transfers over high-bandwidth links where CPU becomes the bottleneck. Selecting the right cipher, key exchange algorithm, and compression settings can yield substantial throughput improvements. Current Cipher Landscape Modern OpenSSH (7.4+) has deprecated or removed weak ciphers. Here’s what’s viable today: Secure and performant: chacha20-poly1305@openssh.com…
WordPress performance depends on three complementary caching layers: PHP bytecode caching (OPcache), page caching (WP Super Cache), and asset optimization (Autoptimize). Combined properly, they’ll cut your Time to First Byte in half and significantly improve Core Web Vitals. Enable OPcache in PHP OPcache caches compiled PHP bytecode in shared memory, eliminating parse and compile overhead…
Emacs startup is slow. If you’re using it for quick edits alongside other tools, waiting 2-3 seconds every time becomes friction. Heavy mode configurations, lazy loading chains, and initialization hooks add up fast. The server/client architecture solves this: start an Emacs server once, then spawn lightweight clients that connect almost instantly. Your first edit waits…
Vim remains one of the most efficient editors available on Linux and Unix systems. While it has a steep learning curve, the payoff in speed and capability is substantial once you develop muscle memory. This guide covers practical configuration strategies, essential keybindings, and workflow improvements that actually matter in daily use. Setting up your configuration…
Sending email notifications when commits are pushed to a central Git repository helps teams stay coordinated and maintains audit trails. This is handled through Git hooks—scripts triggered by repository events. How Post-Receive Hooks Work When a client pushes to your Git server, the post-receive hook executes automatically. This hook lives at GIT_DIR/hooks/post-receive in your bare…
Gitolite provides fine-grained access control over Git repositories without the overhead of a full-featured platform. It uses SSH keys for authentication and handles per-user, per-repository, and even per-branch permissions through a simple configuration file. This guide covers a working installation on modern Linux distributions. Prerequisites Server: Linux (Ubuntu 20.04 LTS or later, Debian 11+, RHEL/Rocky…
VNC provides graphical remote access to Linux servers. For security, tunnel VNC traffic through SSH rather than expose it directly to the network. This guide covers Windows client setup with SSH tunneling. Prerequisites Windows client: SSH client: Native OpenSSH (built into Windows 10/11) or PuTTY VNC viewer: RealVNC Viewer, TigerVNC Viewer, or TightVNC Viewer Linux…
Self-hosting a photo gallery gives you control over your content. If you want to skip database management entirely, a handful of PHP solutions still work—though most are unmaintained. This post covers what’s still functional, where the limits are, and when you should choose something else instead. Static File-Based Gallery Scripts Single File PHP Gallery Status:…
RAID0 (striping) on enterprise RAID controllers like Broadcom MegaRAID is used to expose multiple disks as a single logical volume with no redundancy. This configuration is appropriate only for performance-critical workloads where data loss from a single disk failure is acceptable, or for temporary/cache storage. This guide covers the full setup process on servers with…
Linux device names like /dev/sda and /dev/sdb are unreliable identifiers for physical hardware. They shift when you add, remove, or reseat drives, and there’s no guaranteed mapping between a SATA port and its device name. When a disk fails, you need to know exactly which physical slot to replace—guessing wrong takes down the wrong system….
mailx (heirloom-mailx) and s-nail are lightweight CLI tools for sending email from scripts, cron jobs, and system alerts. They’re especially useful in corporate or campus networks with internal SMTP servers that don’t require authentication. Installation Debian/Ubuntu: apt install heirloom-mailx RHEL/CentOS/Fedora: dnf install mailx Alpine: apk add mailx Arch: pacman -S s-nail s-nail is a modern…