Choosing Between Rootless and Root-full Podman for Production
Learn how to decide between rootless and root-full Podman deployments, comparing security risks, networking performance, and user namespace configuration.
Loading…
ReadMeFeed / Community knowledge
#linux-security
Real questions. Useful conversations. Find the people who know your stack.
podmanAlmaLinux FIPS Mode: Architecture, Trust Boundaries, and Operational Checks
Enabling FIPS mode on AlmaLinux changes the cryptographic trust boundary. Learn the minimal design, operational checks, and failure modes before you rebuild initramfs.
Replacing SSH Password Authentication with Key-Based Access
Learn how to replace insecure SSH password authentication with Ed25519 key-based access to protect your Linux servers from brute-force attacks.
sshImplementing Rootless Containers with Podman: User Namespaces and API Access
Learn how Podman's rootless mode uses User Namespaces to run containers without root privileges, including API socket configuration and networking limitations.
SSH Public Key Authentication: How It Works and How to Set It Up Correctly
SSH public key authentication replaces passwords with a cryptographic challenge-response. Here's how the signature mechanism works, a correct Ed25519 setup, and the permission pitfalls that break it.
Architecture Note: Implementing Ubuntu Canonical Livepatch for Zero-Downtime Kernel Security
Learn the architecture of Ubuntu Canonical Livepatch, including ftrace-based function redirection, trust boundaries, and operational verification for zero-downtime kernel patching.
ubuntuEnable Persistent Storage on a Kali Linux Live USB – A Practical Guide
Turn a Kali live USB into a stateful system by creating a persistence partition, configuring unionfs, and verifying that data and settings survive reboots. Follow this step‑by‑step workflow to keep your tools, scripts, and user files across sessions.
Keeping SELinux Enforcing on RHEL: Diagnose AVC Denials and Fix Labels, Ports, and Booleans
Keep RHEL's targeted SELinux policy in enforcing mode: diagnose AVC denials, fix file contexts, ports, and booleans correctly, and recover a system that breaks under enforcement.
redhatDiagnosing SELinux AVC Denials on AlmaLinux 8 and 9
Permission denied despite correct file permissions on AlmaLinux usually means SELinux. Learn to read AVC denials, run ordered checks, and apply the right fix — boolean, context, port, or module.