Hadoop 2.x reached end-of-life in 2016. This guide covers setup for learning purposes and legacy system maintenance only. For production deployments, use Hadoop 3.x or later, which includes performance improvements, better YARN scheduling, HDFS erasure coding, and improved security. Cloud-managed options like AWS EMR, Google Dataproc, and Azure HDInsight eliminate most operational overhead. This guide…
git clone https://example.com/your/repo.git git clone git@github.com:user/repo.git Use HTTPS for better firewall compatibility, or SSH if you have keys configured. HTTPS requires authentication via personal access tokens or git credentials; SSH uses key-based auth. List branches # Local branches only git branch # All branches (local and remote) git branch -a # Show branch tracking information…
Git submodules let you keep external repositories as subdirectories within your project while maintaining separate commit histories. They’re useful for managing dependencies, shared libraries, or multi-repo projects—but they require explicit commands to work properly. Adding a Submodule To add a submodule to your repository: git submodule add https://github.com/user/repo.git ./path/to/submodule This creates or updates .gitmodules and…
You often need to access a Git server that only accepts internal connections, but you have SSH access to an intermediate host that can reach it. This is common in corporate environments where the Git server sits behind a firewall. You can tunnel Git traffic through the intermediate host without manually managing tunnels for each…
You’ve got internal hosts on RFC 1918 addresses (10.0.3.0/24, 172.16.0.0/12, etc.) behind a gateway, and you need SSH access to them from your workstation. Traditional solutions involve iptables port forwarding, non-standard ports, and a maintenance nightmare. ProxyCommand offers a cleaner approach: direct SSH connections to internal IPs that actually work. How ProxyCommand Works SSH’s ProxyCommand…
SSH performance is constrained by cipher choice, especially for large file transfers over high-bandwidth links where CPU becomes the bottleneck. Selecting the right cipher, key exchange algorithm, and compression settings can yield substantial throughput improvements. Current Cipher Landscape Modern OpenSSH (7.4+) has deprecated or removed weak ciphers. Here’s what’s viable today: Secure and performant: chacha20-poly1305@openssh.com…
Emacs startup is slow. If you’re using it for quick edits alongside other tools, waiting 2-3 seconds every time becomes friction. Heavy mode configurations, lazy loading chains, and initialization hooks add up fast. The server/client architecture solves this: start an Emacs server once, then spawn lightweight clients that connect almost instantly. Your first edit waits…
Vim remains one of the most efficient editors available on Linux and Unix systems. While it has a steep learning curve, the payoff in speed and capability is substantial once you develop muscle memory. This guide covers practical configuration strategies, essential keybindings, and workflow improvements that actually matter in daily use. Setting up your configuration…
Gitolite provides fine-grained access control over Git repositories without the overhead of a full-featured platform. It uses SSH keys for authentication and handles per-user, per-repository, and even per-branch permissions through a simple configuration file. This guide covers a working installation on modern Linux distributions. Prerequisites Server: Linux (Ubuntu 20.04 LTS or later, Debian 11+, RHEL/Rocky…
VNC provides graphical remote access to Linux servers. For security, tunnel VNC traffic through SSH rather than expose it directly to the network. This guide covers Windows client setup with SSH tunneling. Prerequisites Windows client: SSH client: Native OpenSSH (built into Windows 10/11) or PuTTY VNC viewer: RealVNC Viewer, TigerVNC Viewer, or TightVNC Viewer Linux…
SSH port forwarding lets you tunnel network traffic through an encrypted connection, making it essential for accessing services on restricted networks, exposing local services safely, or routing traffic through a jump host. This guide covers the three main types and production-ready practices. Local Forwarding Local forwarding listens on your local machine and relays connections through…
Xen remains in production use at scale across AWS EC2, Citrix Hypervisor, and various cloud providers, though KVM has become the default hypervisor for most Linux distributions. If you’re operating a Xen environment, Dom0 resource management is critical to system stability. Why Dom0 Resource Management Matters Dom0 performance directly affects your entire virtualized infrastructure. Since…
This guide sets up OpenLDAP for centralized authentication and NFS with automount to provide unified home directories across a cluster. The setup uses modern OpenLDAP backends and current NFS4 best practices. System Environment Server: LDAP and NFS: 10.0.0.2, Fedora 41 x86_64 Base DN: dc=lgcpu1 Clients: Range: 10.0.0.1/24, Fedora 41 x86_64 LDAP Server Setup Package Installation…
The passwd command is designed for interactive use—it prompts for input rather than accepting passwords via stdin by default. When you need to set passwords programmatically (bulk user provisioning, CI/CD automation, remote administration), you need methods that bypass the interactive prompt. Using passwd with –stdin The –stdin flag tells passwd to read the new password…
Ubuntu locks the root account by default as a safety measure—it prevents accidental system damage and enforces audit trails through sudo. If you genuinely need direct root access, here’s how to enable it and the security tradeoffs involved. Set a root password The simplest approach: sudo passwd root You’ll be prompted to enter and confirm…
iOS doesn’t expose SOCKS proxy settings in the Settings UI, but it supports Proxy Auto-Config (PAC) files natively. This lets you route iOS traffic through an SSH tunnel on a Linux/Unix host without installing a VPN app. Prerequisites iOS device (iPhone/iPad) on WiFi Linux/Unix host (same network or internet-accessible) with SSH access Web server to…
xclip is a utility that bridges the command line and X11 selections, letting you pipe command output directly to your clipboard. It’s indispensable for workflows where you’re generating content in the terminal and pasting it elsewhere—whether that’s a browser, text editor, or another application. Installation On Fedora/RHEL-based systems: sudo dnf install xclip On Debian/Ubuntu: sudo…
SSH tunneling on Windows routes your traffic through a remote server over an encrypted connection, letting you bypass network restrictions and access resources as if you were on the remote network. The setup creates a SOCKS proxy that listens locally and forwards all traffic through the SSH tunnel. The traffic flow is straightforward: Your application…
Firefox’s extension ecosystem is mature enough that you should install conservatively. Each extension consumes memory, introduces potential compatibility issues, and creates another surface for security problems. The extensions listed here solve genuine problems; install only what you use. Ad Blocking uBlock Origin remains the standard. It uses significantly less memory than alternatives and supports complex…
Running an SSH server on Windows enables remote administration, port forwarding, and integration with Unix-like workflows. Modern Windows provides native OpenSSH support that’s far superior to legacy third-party solutions. Installation Windows 10 (build 1809+), Windows 11, and Windows Server 2019+ include OpenSSH as an optional feature. Via Settings: Open Settings → System → Optional features…