Category: System Admin

21 June 2026
pipe_buffer tmp_page reuse in Linux kernel

tmp_page reuse sounds neat until you try to make it behave, and then the pipe accounting starts getting in the way. I have found the useful part is usually not the obvious corruption, but the ugly timing and reuse rules that decide whether pipe_buffer tmp_page reuse helps at all.

Read more
19 June 2026
Checking Proxmox VE 9.2 cluster networking before upgrade

Before I touch Proxmox VE 9.2, I make the cluster prove itself under strain, because corosync, migration, and storage paths always fail in the places you skipped. A node that looks fine at idle can still fall apart the moment quorum starts counting.

Read more
16 June 2026
Filter large zones in Cloudflare DNS records page

Cloudflare’s DNS records page is finally usable when a zone turns ugly, but only if you stop treating it like a flat list. I set filters, pin the useful row, and hide the clutter; otherwise I waste half the afternoon staring at the wrong TXT record.

Read more
13 June 2026
Kubernetes v1.36 PodGroup scheduling cycle explained

Kubernetes v1.36 makes gang scheduling less hand-wavy, and the PodGroup scheduling cycle is where the sharp edges show. I like the clarity, but it also means there is nowhere for a bad placement to hide when the group cannot fit, which is exactly when people start blaming the scheduler.

Read more
13 June 2026
Kubernetes Service externalIPs deprecation and migration

Kubernetes Service externalIPs was always a blunt instrument, and I have seen enough clusters to know blunt tools get misused. The warnings in 1.36 are the polite bit, because once address ownership moves back where it belongs, a lot of old YAML will start to look very silly.

Read more
5 June 2026
Kernel ring-buffer drops in Inspektor Gadget

Inspektor Gadget is only useful if I can trust the trace, and a full kernel ring-buffer makes that harder than it ought to be. Once events start dropping, the neat output is lying by omission, which is exactly the sort of thing that bites later.

Read more
3 June 2026
F_SETPIPE_SZ and soft page quota effects

Soft page quota effects are easy to miss, until a pipe that should be 65536 bytes turns up at 8192 and your spray no longer lands where you expected. I have seen pipe_buffer capacity limits quietly wreck tidy assumptions; the kernel does not care that your test looked sensible a minute ago.

Read more
2 June 2026
Audit RFI history offline with CSV export

Cloudflare Security Center CSV export is one of those dull features that matters once you need a clean paper trail. I prefer the file on disk, where I can sort it, cross-check it, and stop relying on whatever the dashboard feels like showing me today.

Read more
24 May 2026
Detecting node contention with Pressure Stall Information

Kubernetes PSI metrics are useful because they show waiting, not just work, and that is where the awkward node problems usually hide. I trust them more than busy-looking charts, but only after I have checked the kernel, kubelet, and whether the data is actually there.

Read more
24 May 2026
Topology-aware scheduling with PodGroup and DRA

Kubernetes PodGroup scheduling only makes sense once you stop treating the group as a template trick and start treating it as live state. I like that split, because it forces the scheduler to deal with the actual queue, the actual claims, and the actual node shape, rather than pretending those things line up neatly.

Read more
23 May 2026
Mixed Version Proxy during Kubernetes 1.36 upgrades

Kubernetes Mixed Version Proxy is one of those fixes you only notice when it is missing. During a 1.36 control plane upgrade, it stops an older API server from handing out tidy little lies, the sort that turn into 404s and wasted evenings.

Read more
22 May 2026
Measuring route_controller_route_sync_total in Kubernetes

`route_controller_route_sync_total` is the sort of metric I trust only when I put it next to real node activity. By itself it tells you little; alongside churn, it shows whether the route controller is polling on a timer or only waking when something actually changes.

Read more
19 May 2026
Using ISC Stormcast to set patch priority

ISC Stormcast strips the noise out of vulnerability watching, and that matters when patch windows are tight. I use it to decide what jumps the queue, what stays logged, and what is simply not worth the panic; the difference is usually clearer than vendor advice makes it look.

Read more
23 April 2026
Safe ways to remove Copilot from Windows applications

Windows has a habit of putting Copilot back after updates, so I check policy first, then the package itself. If you need to remove Microsoft Copilot from Windows properly, the trick is knowing which layer is actually responsible, rather than ripping out the wrong bit and making a mess.

Read more
1 April 2026
Zram and zswap: which memory compression fits your homelab

I've built systems that swap differently depending on what dies first: the CPU or the storage. Zram and zswap solve adjacent problems, and picking the wrong one costs you either write cycles or latency.

Read more
25 March 2026
Running Chromium on ARM64 Linux Servers: docker-compose Setup and Pitfalls

Google doesn't publish ARM64 Chrome. Chromium fills that gap on Debian-based ARM64 Linux systems, and any CDP automation library works identically against it. Pin the version, fix `/dev/shm`, work around the M113 CDP bind change with socat, and you've got a solid headless setup.

Read more
18 February 2026
Assessing collision risks for AWS Outpost deployments

You should check telemetry for attitude alerts, sudden shutdowns, thermal spikes and short comms blackouts to identify collision risks for AWS Outpost deployments. Record exact timestamps, correlate them with your CPU and BMC logs, and run diagnostic commands to trace the root cause and apply conservative fixes.

Read more
25 January 2026
Remote work network policies that keep the LAN tidy

Remote Work Network Configuration guide shows how to set VLANs by role, configure DHCP pools and secure remote access. You get concrete VLAN IDs, DHCP ranges, and test steps to verify isolation. Apply ACLs on the router, use WireGuard or managed VPNs, enforce short leases and clear IT policies to keep your network reliable.

Read more
22 January 2026
Troubleshooting LSI RAID issues in Proxmox with CLI

Discover effective strategies for managing LSI RAID in Proxmox using CLI tools. Learn how to troubleshoot and optimise your RAID setup for improved performance.

Read more
22 January 2026
Implement session reminders with .bashrc on Proxmox

Enhance your Proxmox SSH experience with this simple .bashrc tweak! It monitors screen and tmux sessions, ensuring you never leave detached sessions behind.

Read more
19 January 2026
Migrating from VMware to Proxmox

Migrating from VMware to Proxmox? This practical guide shows the Proxmox configuration choices that matter. You get step-by-step commands for KVM setup, network and VLAN mapping, storage imports, backup patterns and firewall rules. Use your checklist and verify restores to make the migration repeatable and auditable.

Read more
15 January 2026
Resolving PDQ Connect package failures with Sophos XDR

What you see Error codes from PDQ Connect Typical PDQ output looks like this: Step failed, Exit Code: 1 The PDQ deployment log shows the step failed and returned code 1 Exit code 1 is a generic failure. It means the installer returned a non-zero exit status when PDQ ran it. Do not assume the […]

Read more
13 January 2026
Transitioning from Windows to Ubuntu: Key commands

Transitioning from Windows to Ubuntu can seem daunting. This guide simplifies essential Linux commands, covering navigation, permissions, and package management to ease your migration.

Read more
9 January 2026
Installing SurfSense on Docker

SurfSense installation on Docker guides you to run a self-hosted AI agent on your machine. Get Docker running, use a named volume for persistent data, reserve ports 3000 and 8000, and start with one local LLM. Follow commands, watch logs, and verify the dashboard.

Read more
6 January 2026
Best practices for a resilient Kubernetes cluster

I build Kubernetes clusters to survive real faults, not to win configuration contests. This is what I do during setup to keep them standing when something fails, and the places I see people cut corners if they are rushing. Keep it concrete. Test it, then test the restore. Control plane and data store Run an […]

Read more