tmpfs delivers exceptional I/O performance since it lives entirely in RAM. Exporting it via NFS can be useful for temporary caches, build artifacts, or high-speed data sharing between systems on a trusted network. The catch: NFS needs additional configuration to export pseudo-filesystems like /dev/shm. Without the right settings, you’ll hit access denied errors or fsid…
If you don’t already have a key pair, use Ed25519 — it’s faster and more secure than RSA: ssh-keygen -t ed25519 -C “your_email@example.com” For older systems that don’t support Ed25519, RSA with 4096 bits still works: ssh-keygen -t rsa -b 4096 Keys are stored in ~/.ssh/ by default: id_ed25519 (private) and id_ed25519.pub (public) for Ed25519,…
sshfs is the standard tool for mounting remote filesystems over SSH. It’s available in most distribution repositories. Debian/Ubuntu: sudo apt install sshfs RHEL/CentOS/Fedora: sudo dnf install sshfs Alpine: apk add sshfs On some systems you may need to ensure the fuse kernel module is loaded: sudo modprobe fuse Basic Mount Mount a remote directory to…
A Linux box serving as a network gateway needs two network interfaces: eth0: Connected to the local network (LAN) with IP 192.168.0.1 eth1: Connected to the upstream network (Internet) with IP 198.51.100.1 The goal is to allow clients on the 192.168.0.0/16 network to route traffic through this gateway to reach external networks. Enable IP Forwarding…
SELinux provides mandatory access controls that catch security violations most firewall and file permission rules miss. Before disabling it, exhaust other options — SELinux warnings often reveal real security problems worth understanding. That said, there are legitimate reasons to adjust SELinux: testing application behavior without policy violations, troubleshooting misbehaving software, or running systems where the…
Guake is a drop-down terminal emulator for GNOME that brings the Quake-style console experience to Linux desktops. When you press a hotkey (F12 by default), a terminal slides down from the top of the screen. Press it again and it retracts. It’s fast, minimal, and designed purely around keyboard efficiency. Installation On Fedora/RHEL-based systems: sudo…
Accessing a remote desktop environment on a Linux server securely requires proper tunneling. While SSH X11 forwarding works for single applications, VNC provides a full graphical desktop session. By combining VNC with an SSH tunnel, you encrypt all traffic and can work around firewall restrictions that only allow port 22. Why VNC Over SSH? VNC…
Xen remains in active production use—particularly in cloud infrastructure like AWS EC2 and Citrix Hypervisor—though KVM has become the standard hypervisor for most Linux distributions. If you’re managing legacy Xen deployments, this guide covers the essential steps for cloning VBD-based DomU instances. Prerequisites Before starting, ensure: The source VM is powered off (critical to avoid…
ISO images are sector-by-sector copies of optical media stored as binary files. They’re useful for archiving DVDs or creating portable copies without keeping physical disks around. On Linux, several tools can accomplish this—dd is the simplest, but modern alternatives offer better features. Using dd to Create an ISO Image The most straightforward approach uses dd:…
To connect to HKUST’s sMobileNet wireless network via NetworkManager, you’ll need to configure WPA2 Enterprise authentication with PEAP. This guide covers the required settings. Network Settings Configure the following parameters in NetworkManager: Basic Settings: SSID: sMobileNet Wireless security: WPA & WPA2 Enterprise Authentication method: Protected EAP (PEAP) Authentication Details: Anonymous identity: (leave empty) PEAP version:…
Configuring proper Chinese character rendering in Fedora requires attention to font selection and system settings. This guide covers configuration for contemporary Fedora/RHEL systems where you run an English locale but need reliable Chinese character display. Font Selection You have several solid open-source options for Chinese fonts. Each has different characteristics suited to different use cases….
Gitosis is unmaintained and shouldn’t be used for new deployments. Use Gitolite or Forgejo instead. This guide covers Gitolite, which provides fine-grained access control, is actively maintained, and handles multiple repositories under a single system user. Prerequisites A server running Linux (Debian, Ubuntu, CentOS, or similar) SSH access to the server with sudo privileges A…