sysadmin

OpenBSD Jumpstart 8.0 is a concise quick-start guide for new users covering installation, PF firewall, networking configuration, and daily administration of the security-focused OpenBSD operating system.

一篇技术博客，介绍如何在 Windows/IIS 上的 ColdFusion 或 Lucee 服务器中检测意外安装的 PHP（可能由控制面板或 phpMyAdmin 残留），并安全移除它以消除安全隐患。

A practitioner asks enterprise AI deployers which requests from clients they still can't fulfill, citing poor internal adoption (e.g., one sysadmin reported only ~5 of 300 users actually using it), and flags gaps like company-specific knowledge, answer provenance, and access control.

一段关于服务器磁盘满时老派运维技巧的趣味对话：资深工程师用 fallocate 预留 10G 占位文件，以便快速腾出空间排查问题，调侃新人忘了这些老技巧。

A detailed guide to replacing a Cisco dual WAN router with an N100 mini PC running Debian 13, covering ifupdown configuration, PPPoE/VLAN setup for KPN, baby jumbo frames, sysctl routing settings, and dnsmasq for LAN DHCP/DNS.

Debian security maintainer Samuel Henrique bumps rsync to 3.5.0 instead of backporting patches to fix 33 CVEs, introducing behavior changes including stricter symlink handling, tighter rsyncd access controls, and certificate verification in rsync-ssl.

A comprehensive guide for securing Linux servers, covering SSH hardening, firewall configuration with UFW, and intrusion detection using tools like Fail2Ban and CrowdSec.

A detailed overview of a restored PDP-11/83 system running 2.11BSD Unix, showcasing its hardware components, software setup, and networking capabilities for serving a web page.

The article discusses the importance of backups, sharing a personal story of data loss and explaining technical concepts like Recovery Point Objective (RPO) to emphasize backup strategies.

The author explores replacing traditional git forges with a static site generator approach to reduce server load, introducing 'sorcery' as a tool that builds static HTML for git repos and uses client-side rendering for history viewing.

This article explains how to use the m4 macro processor to reduce repetitive code in OpenBSD's httpd configuration by creating custom macros.

A user reports using locally-run DeepSeek-V4-Flash via OpenCode to autonomously diagnose and fix Linux admin issues, including a syncthing sync problem and a /boot partition issue, finding local AI sufficient for such tasks.

Verity Stob presents a humorous index for measuring the accumulation of 'cruft' on a PC, modeled after the Beaufort wind scale, describing stages of system degradation.

FSF sysadmins share how they block botnets and DDoS attacks using the reaction tool, an alternative to fail2ban that works with ipset to handle large volumes of malicious IP addresses.

The author argues for using memcached over Redis as a caching layer, highlighting its simplicity, ease of handling downtime, and straightforward clustering, contrasting with Redis's feature creep and tendency to be misused as a persistent database.

Systemd 261 is released with significant new features including the systemd-sysinstall OS installer, IMDSD for unified cloud metadata access, and storagectl for storage management.

A technical blog post explaining how to create persistent live USB images for Debian, Fedora, and Ubuntu by injecting ext4 partitions and using OverlayFS, noting the lack of standardization between distributions. It covers kernel parameters, partition labels, and a hacky byte-swap trick to modify ISO boot parameters without rebuilding the image.

Legacy Labs, a retro-computing summer camp event, invites participants to explore old or permacomputing topics over two months, starting with a deep dive into Windows Server 2008 Core.

NMLinux is a free, open-source Linux adaptation of NETworkManager, providing a unified GUI for common network tools. Built with Python and PySide6, it includes modules for SSH, RDP, VNC, Wi-Fi, traceroute, speed test, and more, aimed at sysadmins and power users.

Sharing a $73.76 network optimization prompt that provides detailed guidance for an AI assistant to remotely diagnose and optimize home or enterprise network issues via SSH, emphasizing minimal interruption, layered troubleshooting, and quantifiable verification.