How To
openSUSE Leap 16 Initial Server Setup and Hardening
A fresh openSUSE Leap 16 server is reachable over SSH the moment it boots, and straight out of…
Tag
ssh
How To
Configure SSH on Cisco Routers and Switches
Telnet sends your username and enable password across the wire in cleartext. SSH does not, and on a…
How To
Cisco Device Base Configuration: Hostname, SSH, and Secure Access
A factory-fresh Cisco router or switch trusts whoever reaches the console, answers to the generic name Router or…
Security
How to Create SSH Tunnels on Linux (Local, Remote, Dynamic)
An SSH tunnel moves a network port from one machine to another inside an encrypted SSH session. No…
Linux
FreeIPA as an Internal ACME CA with certbot and acme.sh
Enable FreeIPA 4.12 ACMEv2, issue 90-day RSA certs with certbot and acme.sh, auto-renew via systemd timer and cron.…
Linux
FreeIPA Random Serial Numbers (RSNv3) on Fresh Installs
Verify, decode, and ship the 128-bit random serial that became default in FreeIPA 4.12. Five proof methods, the…
Linux
FreeIPA Sudo Rules Cookbook: 10 Real-World Patterns You Can Copy
10 production-tested FreeIPA sudo rules: Defaults, NOPASSWD, RunAs, deny patterns, break-glass, auth-indicator gated, time-bound, AD-trusted, GSSAPI passwordless. Built…
Linux Tutorials
Set Up FreeIPA Server and Enroll Linux Clients on Rocky Linux 10
A small FreeIPA lab on Rocky Linux 10 buys you the same identity stack Red Hat ships under…
Linux Tutorials
Configure OpenLDAP Server and SSSD Clients on Rocky Linux 10
Rocky Linux 10 dropped openldap-servers from BaseOS. The slapd daemon now lives in EPEL, which means a working…
Linux
Install Tailscale Mesh VPN on Ubuntu 26.04 LTS
Two laptops, three home-lab servers, and a VPS in Frankfurt. Old me wired that together with WireGuard, an…
FreeBSD
Configure Sudo on FreeBSD 15: wheel Group, sudoers, doas vs sudo
FreeBSD ships without sudo or doas by default, which surprises Linux admins on day one. The base system…
Containers
Install MetalLB on Kubernetes
MetalLB fills the one gap that bare-metal Kubernetes has no native answer for: Services of type LoadBalancer. On…