Posts by Larvitz@burningboard.net
 (DIR) Post #B4efJKTmuSWF49aUBk by Larvitz@burningboard.net
       0 likes, 1 repeats
       
       New post: shell tricks that aren't exactly secret, but aren't always taught either.Split into two sections: what works on any POSIX sh (FreeBSD, OpenBSD, Alpine...) and what's Bash/Zsh-specific. Because not everyone is on Linux with bash as their login shell.Things like CTRL+W, $_, pushd/popd, fc, set -euo pipefail caveats, and more.https://blog.hofstede.it/shell-tricks-that-actually-make-life-easier-and-save-your-sanity/#unix #bash #shell #sysadmin #freebsd #linux #cli
       
 (DIR) Post #B50ls1alzwc5pGtt8C by Larvitz@burningboard.net
       1 likes, 0 repeats
       
       Running Podman :podman: in production for years now, and I don't miss the Docker daemon one bit.I just published a deep dive on managing OCI containers the Unix way: daemonless, rootless, and natively integrated with systemd via Quadlets.I cover:- Real secrets management- Auto-updates via systemd timers- The Docker compatibility layerThis is the guide I wish I had when making the switch.Read it here: https://blog.hofstede.it/podman-in-production-quadlets-secrets-auto-updates-and-docker-compatibility/#Podman #Linux #DevOps #Systemd #Homelab #Sysadmin #Containers
       
 (DIR) Post #B5IIhL7zcl2dP8GoZU by Larvitz@burningboard.net
       0 likes, 0 repeats
       
       It's been so long since I mailed a physical letter that I had to look up mailbox locations on OpenStreetMap for the village I moved to. Even with a cold, I made the trek today because it was for the Red Hat Germany Works Council election. Democracy is important, and every single vote counts. 🗳️#RedHat #LifeAtRedHat #WorksCouncil #Democracy
       
 (DIR) Post #B5Pol0OVD7cKtjVHeK by Larvitz@burningboard.net
       0 likes, 0 repeats
       
       @kuketzblog Nur iOS und Android? Ich nutze ein Sony W810i als daily driver.. werde bestimmt kein Mini-Tablet mit 1 Tag  Akku Laufzeit nur wegen so einem Quatsch mit mir rum tragen.
       
 (DIR) Post #B5vnV0mM87hGYuBjSS by Larvitz@burningboard.net
       0 likes, 0 repeats
       
       Fresh gist: mitigating CVE-2026-31431 ("Copy Fail") on RHEL 8/9/10 with a tiny Ansible playbook.It blacklists algif_aead via a kernel boot arg (initcall_blacklist=algif_aead_init), reboots only when needed, and asserts the mitigation actually stuck after reboot. Idempotent & safe to re-run.https://codeberg.org/Larvitz/gists/src/branch/main/2026/20260501-CVE-2026-31431_RHEL_Mitigation.md#Ansible #RHEL #Linux #InfoSec #SysAdmin #DevOps #CVE #CVE_2026_31431 #copyfail
       
 (DIR) Post #B6KoocSZDObhppqNc0 by Larvitz@burningboard.net
       1 likes, 3 repeats
       
       Several years of Deutsche Bahn business travel taught me something unexpected: eventually you stop fighting the system and start learning its moods, failure domains, and hidden virtues.I wrote down the practical folklore that actually helps: apps, routing habits, delay survival, seat choices, fallback lines, and the strange civilisation of the Bordrestaurant at 250 km/h.“A Field Manual for Three Years on Deutsche Bahn”: https://blog.hofstede.it/a-field-manual-for-three-years-on-deutsche-bahn/#travel #db #trains #bahn
       
 (DIR) Post #B6Qk1WGMETxfYeDyYy by Larvitz@burningboard.net
       1 likes, 4 repeats
       
       I’ve been replacing sudo/doas on most of my FreeBSD boxes with something much smaller: mdo(1) + mac_do(4) from base.No port. No sudoers parser. No setuid helper. Just a kernel MAC policy, a sysctl rule, and an explicit “SSH is the gate” security model.Wrote up the full walkthrough for FreeBSD 15, including rule syntax, examples, caveats, and my surrounding hardening sysctls:https://blog.hofstede.it/mdo-on-freebsd-15-base-system-privilege-delegation-with-mac_do/#FreeBSD #runbsd #mdo #mac_do #sysadmin #security