← Home

Writing

29 Jun 2026

Linux for DevOps, Part 8: Performance & eBPF Observability

The USE method as a troubleshooting framework, perf and flame graphs, and eBPF — how tools like bpftrace, Cilium, and Falco hook the kernel without a single kernel patch.

25 Jun 2026

Linux for DevOps, Part 7: Security Hardening

Capabilities, seccomp, and mandatory access control (SELinux/AppArmor) in depth — the three layers runc applies to every container, and how they map to Kubernetes Pod Security Standards.

21 Jun 2026

Linux for DevOps, Part 6: Namespaces & cgroups Deep Dive

The two primitives containers are built from, in full depth: cgroups v1 vs v2, every namespace type with hands-on unshare/nsenter, OverlayFS mechanics, and the runc container lifecycle.

17 Jun 2026

Linux for DevOps, Part 5: Storage & Disk I/O

From block device to bytes on platter: partitions, LVM, filesystem choice, the page cache, I/O schedulers, and how it all backs a Kubernetes PersistentVolume.

13 Jun 2026

Linux for DevOps, Part 4: Networking Deep Dive

Network namespaces, veth pairs and bridges, the netfilter hook chain, iptables/nftables, and how Kubernetes Services turn all of this into ClusterIP routing.

9 Jun 2026

Linux for DevOps, Part 3: Processes, Signals & systemd

How Linux creates, schedules, and tears down processes — fork/exec, process state, the full signal set, and how systemd turns single binaries into managed services.

5 Jun 2026

Linux for DevOps, Part 2: Users, Permissions & the Filesystem

How Linux decides who can do what to which file — UID/GID, permission bits, special bits, ACLs, links, and the Filesystem Hierarchy Standard, explained from first principles.

1 Jun 2026

Linux for DevOps, Part 1: Ecosystem, Kernel, and What You Must Know

A ground-up walkthrough of the Linux ecosystem — from kernel space to userland — with the practical depth a DevOps or platform engineer actually needs.