ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Developer tools · #linux
Guide to choosing and validating seccomp‑BPF allowlist or deny‑list filters for Linux services, with a concrete libseccomp example and validation steps.
A practical guide to running Podman containers rootless on Linux: set up user namespaces, enable systemd user socket, run and verify a container, and recover from permission and networking issues.
Shows how to use multiple routing tables and ip rule to select next‑hop based on source address, ingress interface or firewall mark, with a step‑by‑step example and verification.
Learn how to diagnose and fix 'Timeout waiting for SSH connection' errors in Packer by analyzing network paths, guest OS boot times, and authentication credentials.
Discover how Podman’s rootless mode lets you run containers without root, the role of user namespaces, how to set up networking, build images, and verify your environment. Practical steps and trade‑offs are included.
Rootless Podman lets unprivileged users run fully isolated containers. This guide maps the architecture, minimal design, trust boundaries, operational checks, and failure modes to help you decide if rootless mode fits your CI or shared‑workstation use case.
Configure CPU and memory limits for systemd services using Linux cgroups v2. Verify the unified hierarchy, create a slice, assign services, and monitor usage with systemd-cgtop.
Compare eBPF socket filters, classic BPF, and nftables for Linux packet filtering, then load and validate an eBPF program.
Enable TCP Fast Open on Linux to send data in the initial SYN, then verify it with curl and tcpdump before rolling it out.
podman
ssh