If you don’t already have a key pair, use Ed25519 — it’s faster and more secure than RSA: ssh-keygen -t ed25519 -C “your_email@example.com” For older systems that don’t support Ed25519, RSA with 4096 bits still works: ssh-keygen -t rsa -b 4096 Keys are stored in ~/.ssh/ by default: id_ed25519 (private) and id_ed25519.pub (public) for Ed25519,…
sshfs is the standard tool for mounting remote filesystems over SSH. It’s available in most distribution repositories. Debian/Ubuntu: sudo apt install sshfs RHEL/CentOS/Fedora: sudo dnf install sshfs Alpine: apk add sshfs On some systems you may need to ensure the fuse kernel module is loaded: sudo modprobe fuse Basic Mount Mount a remote directory to…
A Linux box serving as a network gateway needs two network interfaces: eth0: Connected to the local network (LAN) with IP 192.168.0.1 eth1: Connected to the upstream network (Internet) with IP 198.51.100.1 The goal is to allow clients on the 192.168.0.0/16 network to route traffic through this gateway to reach external networks. Enable IP Forwarding…
SELinux provides mandatory access controls that catch security violations most firewall and file permission rules miss. Before disabling it, exhaust other options — SELinux warnings often reveal real security problems worth understanding. That said, there are legitimate reasons to adjust SELinux: testing application behavior without policy violations, troubleshooting misbehaving software, or running systems where the…
Accessing a remote desktop environment on a Linux server securely requires proper tunneling. While SSH X11 forwarding works for single applications, VNC provides a full graphical desktop session. By combining VNC with an SSH tunnel, you encrypt all traffic and can work around firewall restrictions that only allow port 22. Why VNC Over SSH? VNC…
To connect to HKUST’s sMobileNet wireless network via NetworkManager, you’ll need to configure WPA2 Enterprise authentication with PEAP. This guide covers the required settings. Network Settings Configure the following parameters in NetworkManager: Basic Settings: SSID: sMobileNet Wireless security: WPA & WPA2 Enterprise Authentication method: Protected EAP (PEAP) Authentication Details: Anonymous identity: (leave empty) PEAP version:…
Hadoop 1.x reached end-of-life in 2014 and is no longer maintained. This post documents a deprecated architecture for historical reference only. For new deployments, use Hadoop 3.x+ with YARN, which offers significant improvements in resource management, multi-tenancy, and reliability. See the Apache Hadoop documentation for current versions. For managed services, consider AWS EMR, Google Dataproc,…
Gitosis is unmaintained and shouldn’t be used for new deployments. Use Gitolite or Forgejo instead. This guide covers Gitolite, which provides fine-grained access control, is actively maintained, and handles multiple repositories under a single system user. Prerequisites A server running Linux (Debian, Ubuntu, CentOS, or similar) SSH access to the server with sudo privileges A…