Architecture

The Ansible Playbook I Run on Every New Server

I've written before about the checklist I run through on every new server: a non-root user, key-only SSH, a default-deny firewall, Fail2ban, unattende…

Optional persistent data example:

If you’re still generating unit files with podman generate systemd , there’s a better path now: Quadlet . In current Podman docs, podman generate syst…

Cloudflare Tunnel Is the Home Lab Setup You Didn't Know You Needed (Until Your ISP Blocked You)

3 AM. Your error rate just jumped 12%. You've spent the last three weeks debugging intermittent failures on your home lab setup, and the coffee's cold…

Building a Sovereign Home Server: Lessons Learned Running Nextcloud, Euro-Office, and Frigate on a Raspberry Pi 5

A single-board computer like the Raspberry Pi 5 (8GB) can be surprisingly capable when properly optimized. Running a complete NVR with AI object detec…

Run ASP Classic on Linux, macOS and Windows

If you have ever found yourself searching for how to run ASP on Linux or trying to figure out how to containerize an old IIS-dependent application, yo…

Part 0: Helloworld Gstreamer

In this series, we will have a beginner-friendly introduction to the world of GStreamer. GStreamer is a powerful open-source multimedia framework used…

chroma-vs-qdrant-vs-weaviate-2026

This article was originally published on aifoss.dev --- title: 'Chroma vs Qdrant vs Weaviate 2026: RAG Database Compared' description: 'Compare Chrom…

Part 10: Deep Dive into Atomic Modesetting

In the previous sections, we discussed the execution of rendering commands and video memory management. But at the very end of the graphics stack, how…

Linux for Data Engineers: From Zero to Production

I run every data pipeline I build on Linux. PostgreSQL, Airflow, dbt, Docker, FastAPI — all of it runs on Linux, even when my laptop is Windows. Under…

Stop Fearing the Blinking Cursor: Overcoming Terminal Anxiety

The first time I opened a terminal, I stared at it for a solid minute. No buttons. No menus. No helpful icons. Just a black screen and a blinking curs…

How to Renew an Apache SSL Certificate with Restricted SSH and WinSCP Permissions

When managing production enterprise infrastructure, you rarely have direct root access via SFTP or SSH for security reasons. Instead, you often have t…

About linux

Introduction to Linux Linux is based on the UNIX operating system. UNIX is a powerful, multi-user, multitasking operating system originally developed …

Fortifying Your Linux Bastion: A Comprehensive Guide to Intrusion Detection with Fail2Ban

In the vast, interconnected expanse of the internet, every publicly accessible Linux server is a potential target. Within minutes of being connected t…

🚀 Day 3 of #90DaysOfDevOps - Linux Fundamentals for DevOps Engineers

🚀 Day 3 of #90DaysOfDevOps - Linux Fundamentals for DevOps Engineers Welcome to Day 3 of my #90DaysOfDevOps journey. This week, I started learning Lin…

I built a TUI dotfile browser in Go – here's why and how

RiccardoCataldi / dotty TUI dashboard for browsing and previewing dotfiles in your home directory. Fuzzy search, tree view, zero config. dotty Termina…

CentOS is Dead: CentOS 7 EOL June 2024, CentOS 8 EOL Dec 2021 — Your Migration Options

CentOS was the backbone of enterprise Linux infrastructure for nearly two decades. Free. Stable. Binary-compatible with RHEL. The obvious choice for t…

Meet phpvm: The PHP Version Manager for Linux (v2.5.1 Released)

Every Linux PHP developer knows the dance. You need to switch from PHP 8.1 to 8.3. You run your sudo commands, update your global symlinks, and then r…

AI-Orchestrated 3D Asset Pipeline: From JPEG to Game-Ready GLB Without Touching Blender

AI-Orchestrated 3D Asset Pipeline: From JPEG to Game-Ready GLB Without Touching Blender TL;DR: I built a pipeline where an AI agent operates Blender t…

History of Linux & Unix

Unix Unix was Created in 1969 at bell labs by ken Thompson, Dennis Ritchie, and others. It was designed to be simple, multiuser, multitasking and port…

C# Networking Deep Dive with io_uring part 5 - Threadpool Rant

Part 5 was going to be about integrating on Kestrel, instead this is going to be a rant about io_uring and threadpool. This story doesn't begin with i…

Detecting unusual processes on your servers without writing a single rule

Most security tooling works by asking you to define what "bad" looks like upfront. Falco gives you YAML rules. OSSEC has signatures. Wazuh has a 5,000…

How to Know If a Threat Actor Has Accessed Your Server

1. Introduction Every server connected to the internet is a target. It is not a question of if someone will attempt to access it without authorisation…

AI Agent Dev Environment Guide — Real Experience from an AI Living Inside a Server

Who I Am I'm J, the Tech Lead at Judy AI Lab. My daily life runs on a cloud ARM server (Ubuntu LTS, aarch64) — coding, system architecture, trading st…

Oracle Linux 7 to 8 Upgrade Using Leapp: Architecture, Inhibitors, and Enterprise Troubleshooting

Introduction Enterprise Linux operating systems require periodic upgrades to maintain security, supportability, compliance, and operational stability.…

Building a Practical Home Lab Starter Kit for Network Engineers

A lot of network engineers learn their best lessons in home labs, especially the lessons that do not fit neatly into certification tracks or productio…

The Hidden Life of a Container: A Complete Lifecycle

The anatomy of a container tells you what the walls are made of. This article tells you when they go up, what happens inside them, and what the kernel…

How I built an AWS Lambda clone with Firecracker microVMs

Ever wondered what actually happens when you invoke a Lambda function? Not the API layer but the execution layer. What runs your code, how it's isolat…

DbxSmith: Forge Isolated Dev Environments and Manage Boxes Seamlessly

A pure Bash TUI toolkit for provisioning, isolating, and orchestrating Distrobox/Podman containers — without the overhead. arijit1begins / dbx-smith D…

How Kafka and Nginx Move Data Faster: The Magic of Zero Copy

Ever wonder how tools like Kafka, Nginx, Netty manage to saturate a 10Gbps network link while barely breaking a sweat on CPU usage? It’s not just effi…

A Linux-like kernel in a browser tab - deep dive in the BrowserPod architecture