Linux system administration, network programming, server management, and DevOps practices
eBPF programs that verify cleanly in CI can still cause latency spikes under specific kernel configurations. An honest account of our partial rollout.
io_uring's submission queue / completion queue model reduces syscall overhead measurably — even on a quad-core A53 at 1.4 GHz with constrained memory bandwidth.
PREEMPT_RT turns most of the Linux kernel into preemptible code. On an i.MX8M with a tuned configuration, worst-case latency dropped from 300 µs to under 50 µs.
Comprehensive guide to advanced Linux system administration covering performance tuning, security hardening, monitoring, and troubleshooting techniques for production environments.
AddressSanitizer on an i.MX8M found a use-after-free that only manifested under high-frequency sensor interrupts. The build configuration and performance overhead on real hardware.
Trivy and Snyk have different vulnerability databases and different severity calibrations. Running both on the same image produces non-overlapping findings — and that matters for prioritization.
Kubernetes memory limits and cgroups v2 interact in ways that surprise engineers who learned on v1. A precise look at where the accounting differs.
Buildroot builds faster and is easier to understand. Yocto scales better across hardware variants and has a larger ecosystem. The choice is not really about which is better.
nftables replaces iptables with a cleaner rule model and better performance. Translating an existing iptables ruleset reveals the semantic differences that break naive migrations.
mDNS works well until it doesn't. On a network with 80+ IoT devices all announcing simultaneously after a power cycle, the probing storm is a real problem.
WireGuard is fast and simple until you need to rotate keys without dropping sessions. The cryptokey routing model bites you in ways the man page glosses over.
SQLite on a single-board computer handles 90% of embedded data storage needs elegantly. The 10% that breaks — WAL mode on eMMC with power loss — is worth knowing in advance.