This article explains the Linux file I/O stack by outlining the path from user space through system calls to the kernel layers—VFS, filesystem, block layer, and SCSI—detailing each layer's role, page cache mechanisms, writeback processes, and direct I/O implementations with code examples.
This article explains how zero‑copy techniques such as DMA, sendfile, mmap and Direct I/O reduce the four data copies and context switches normally required for disk‑to‑network transfers, improving performance for systems like Kafka and MySQL while outlining their trade‑offs.
This article explains Linux memory addressing by covering logical, virtual, and physical addresses, the role of the MMU, segmentation and paging mechanisms, hardware and Linux-specific segment structures, and the 4‑level page‑table system that maps virtual memory to physical memory.
This article provides a comprehensive overview of Podman, an open‑source container runtime that runs without a daemon or root privileges, compares it with Docker, explains its architecture, and presents essential commands, deployment steps, configuration files, volume handling, and user‑namespace considerations for Linux environments.
This guide explains Linux performance optimization by defining key metrics such as throughput and latency, clarifying average load, detailing CPU context switches, describing common performance analysis tools, and providing practical methods for diagnosing and improving CPU, memory, and I/O bottlenecks in production environments.
This article explains in detail how Linux handles local network I/O for 127.0.0.1, comparing it with cross‑machine communication, describing the routing, device subsystem, driver code, and soft‑interrupt processing, and concluding with performance considerations and a discussion on eBPF acceleration.
This comprehensive guide walks you through the fundamentals of Linux, covering operating system concepts, core commands, file management, user permissions, process monitoring, networking, package management, compression, backup, and Vim editing, empowering beginners to confidently navigate and administer Linux environments.
This guide walks you through the hard‑way method for upgrading a Kubernetes cluster from version 1.22 to 1.23, covering prerequisites, master and worker node procedures, package handling, and verification steps to ensure a successful, fully controlled upgrade.
This article explains seven real‑world applications of the Linux find command, covering file name patterns, type filtering, timestamps, size, permissions, ownership, and executing actions on matched files, with clear examples for system administrators and developers.
This article analyzes why Linux reports "fork: cannot allocate memory" when the real issue is an excessive number of threads or PID allocation failures, explains the kernel's do_fork and alloc_pid implementations, and offers guidance for diagnosing and fixing such misleading ENOMEM errors.
This article provides a comprehensive guide to Nginx, covering its high‑performance architecture, reverse‑proxy concepts, load‑balancing strategies, static‑dynamic separation, installation commands, configuration file structure, practical reverse‑proxy and load‑balancing examples, and high‑availability setup with Keepalived.
This article presents a curated list of practical Linux operation tools—including Nethogs, IOzone, IOTop, IPtraf, IFTop, HTop, NMON, MultiTail, Fail2ban, Tmux, Agedu, NMap, and Httperf—detailing their purpose, download links, installation commands, and basic usage to help system administrators improve monitoring, performance testing, and security on Linux servers.
The newly disclosed Linux kernel vulnerability CVE‑2022‑0847, dubbed “Dirty Pipe,” affects kernels 5.8 and later (including many Android 12 devices), allowing unprivileged users to overwrite read‑only files and gain root privileges, with existing PoC/EXP and patches already released.
The newly disclosed CVE‑2022‑0847 “Dirty Pipe” flaw affects Linux kernels 5.8 and later—including many Android 12 devices—allowing unprivileged users to overwrite read‑only files and gain root privileges, with existing PoC/EXP, and researchers urge immediate kernel upgrades.
This guide demonstrates how to perform a full MySQL backup, create incremental backups, handle accidental database deletions, and restore the data using Percona XtraBackup on a Linux server, including detailed command-line steps and permission adjustments.
This article explains the Linux file I/O stack by outlining its clear route from user space to hardware, detailing the roles of VFS, the filesystem, the block layer, and the SCSI driver, and then dives into page cache mechanisms and code paths for both buffered and direct I/O.
The article explains why Linux’s fork() can return a misleading “fork: cannot allocate memory” error, tracing the issue to PID allocation failures in the kernel’s do_fork and alloc_pid functions, and shows how excessive threads, not actual memory shortage, trigger the problem.
This article presents nine practical Bash scripts covering DOS attack mitigation, email alerts, MySQL backups, Nginx log rotation and analysis, network traffic monitoring, server initialization, and disk usage checks across multiple hosts, each with ready-to-use code examples.
This guide explains what a Linux shell is, how prompts and carriage returns work, the usage of echo, quoting rules, variable assignment and export, differences between exec and source, command grouping, parameter expansion, arrays, test operators, I/O redirection, and control‑flow structures, providing concise examples for each.
This article explains the Linux kernel’s internal process for binding a server socket to 0.0.0.0 (INADDR_ANY), covering the bind operation, handshake handling, and how the kernel matches incoming packets, with illustrative C code snippets.
This comprehensive guide explains Linux performance fundamentals, covering key metrics like throughput and latency, how to interpret average load, CPU context switching, memory management, and the most effective tools and techniques for diagnosing and optimizing system performance.
The article explains why Linux reports "fork: cannot allocate memory" when the real issue is PID allocation failure caused by excessive threads, analyzes the kernel's do_fork and alloc_pid implementations, and shows that newer kernels still return ENOMEM for non‑memory errors.
This article explains what Podman is, highlights its key architectural differences from Docker, provides Docker‑compatible command references, shows how to install and configure accelerators, demonstrates rootless operation, and covers essential configuration files and volume handling for secure container management on Linux.
This step‑by‑step guide shows how to set up a Raspberry Pi Zero W with Raspbian Lite, enable headless SSH, configure Wi‑Fi, install Nginx, and expose the server to the public internet using Ngrok, turning a credit‑card‑sized board into a functional web host.
Under Jason Donenfeld’s leadership, Linux kernel’s random number generator was overhauled in versions 5.17 and 5.18, replacing SHA1 with BLAKE2s and shifting from per‑NUMA to per‑CPU structures, delivering up to a 131% speed increase and an astonishing 8450% boost in getrandom() performance on multi‑core systems.
This article explains how Linux handles local network I/O for 127.0.0.1, detailing the differences from cross‑machine communication, the routing decisions, the loopback device driver, soft‑interrupt processing, and the complete kernel execution flow for both sending and receiving packets.
The Linux kernel community announced an upgrade from the decades‑old C89 standard to C11 after a subtle bug in the list_for_each_entry macro, exposed by a speculative‑execution vulnerability study, convinced Linus Torvalds to modernize the kernel’s C language version.
This guide explains why the command‑line interface is called a Shell, clarifies prompts and carriage returns, and walks through essential Bash features such as echo options, quoting rules, variable export, exec vs source, grouping, parameter expansion, arrays, arithmetic, redirection, conditional statements, loops, and control flow operators.
On arm64 Linux kernels (e.g., 5.10.27), the mlock system call marks VMAs with VM_LOCKED, forces page faults, sets the PG_mlocked flag and moves pages into the unevictable LRU so they cannot be reclaimed, while munlock clears these flags and returns pages to regular LRU lists, guaranteeing resident memory for latency‑sensitive applications.
This guide explains Linux performance optimization by defining key metrics such as throughput, latency, average load, and CPU usage, describing how to select and interpret tools like vmstat, pidstat, perf, and dstat, and offering concrete steps to diagnose and fix CPU, memory, I/O, and context‑switch bottlenecks.
This guide walks through essential Linux commands—which, whereis, locate, and find—detailing how to discover executable paths, locate specific files, query the file database, and perform advanced searches with options for name, size, type, time, permissions, and execution of actions.
Learn how to install the tcpping utility on various Linux distributions, understand its TCP half‑open connection technique for measuring RTT, and master its command‑line options for probing network latency, even when ICMP ping is blocked by firewalls.
This guide explains Linux performance optimization by defining core metrics such as throughput, latency, and average load, describing how to select and benchmark indicators, outlining essential analysis tools like vmstat, pidstat, and perf, and providing practical CPU and memory tuning strategies to eliminate bottlenecks.
nginxWebUI is a web‑based graphical interface that simplifies configuring, managing, and deploying Nginx—including HTTP/TCP forwarding, reverse proxy, load balancing, SSL certificate automation, and multi‑server cluster support—while providing Docker images and detailed installation steps for Linux, Windows, and macOS environments.
This article provides an in‑depth overview of Linux memory architecture, including address spaces, segmentation and paging, memory allocation strategies such as the buddy and slab allocators, kernel and user‑space memory pools, DMA considerations, common pitfalls, and practical tools for monitoring and optimizing memory usage.
This article compiles 109 practical shell scripts covering a wide range of Linux automation tasks such as security, monitoring, backup, deployment, and system management, providing clear, copy‑ready code for hands‑on practice and interview preparation.
This article dissects the Linux kernel’s fork implementation, explaining why the child receives a return value of 0, how parent and child share code execution, the internal steps of sys_fork, kernel_clone, copy_process, thread handling, scheduling initialization, and the final insertion of the new task into the run‑queue.
This guide shows how to quickly locate and resolve the “Address already in use” error on Linux and macOS by using netstat, ss, and lsof to list listening ports, interpret their output, and filter results for specific services or ports.
This article details the background, functional capabilities, development journey, technical architecture, and deployment experience of ByteDance's iOS automation testing driver tool BDC, illustrating how it automates device interaction, app management, UI control, and large‑scale testing on both macOS and Linux environments.
This article introduces Podman, explains how to install it on CentOS, demonstrates pulling and running Nginx, MySQL, and a SpringBoot application, compares Podman with Docker, and shows how to manage containers visually with Cockpit, providing a practical alternative to Docker.
Learn how to boost Linux server efficiency with 20 practical tips—from kernel elevator adjustments and disabling unnecessary daemons to optimizing TCP, choosing the right filesystem, and leveraging performance tools like top, vmstat, iostat, free, and sar—ensuring faster, more secure, and cost-effective operations.
ssar is Alibaba’s open‑source system performance monitoring tool that extends traditional sar capabilities with comprehensive machine‑level, process‑level, and load metrics, offering rapid development, flexible configuration, and advanced diagnostics such as load5s, thread analysis, and custom Python query extensions for detailed OS troubleshooting.
This article explains how DMA offloads memory‑to‑device data transfers, reduces the four data copies and context switches of traditional I/O, and introduces zero‑copy methods such as sendfile, mmap and Direct I/O, illustrating their mechanisms, advantages, limitations, and real‑world use cases like Kafka and MySQL.
This article explains why Linux kernels 3.9+ allow multiple processes to bind the same port, how the REUSEPORT option implements kernel‑level load balancing, and provides step‑by‑step examples showing configuration, code snippets, and performance verification.
This article introduces the built‑in Cockpit web console for CentOS 8, explains how to install and configure CentOS 8, set up Cockpit, and demonstrates its various management functions such as system overview, storage, networking, containers, user accounts, updates, and SELinux control.
Intel's new SDSi feature, now supported in Linux kernel 5.18, lets customers pay to unlock additional CPU cores and potentially other performance enhancements, a strategy originally designed for data‑center processors that could reshape how processor capabilities are monetized.
Based on Google Project Zero data from 2019 to 2021, Linux leads with an average bug‑fix time of 15 days, while Oracle shows the most delay, and Chrome and iOS consistently rank among the fastest in patching security vulnerabilities.
This article provides a comprehensive guide to Linux Virtual Server (LVS), covering its history, four operating modes, scheduling algorithms, installation steps, MySQL load‑balancing configuration, ARP suppression techniques, and high‑availability setup using keepalived, all illustrated with diagrams and code snippets.
This article systematically explains the Linux driver ecosystem by covering the bus‑device‑driver model, the role of device trees in decoupling hardware description from driver code, and step‑by‑step guidance for creating a custom development board with full DTS and kernel integration.
This article explains how DMA offloads memory‑to‑device data transfers, reduces the four data copies and context switches of traditional I/O, and introduces zero‑copy mechanisms such as sendfile, mmap and Direct I/O, with practical examples like Kafka and MySQL.
This article explains the Linux top command syntax, options, and interactive hotkeys, interprets its output, and then presents a curated list of contemporary replacements—including bashtop, bpytop, btop, bottom, glances, gotop, gtop, htop, nvtop, vtop, and zenith—along with their key features, installation steps for various distributions, and basic usage examples.
This article explains the purpose, output format, and frequently used options of the cross‑platform netstat command, illustrating how to list active TCP/UDP connections, UNIX domain sockets, and various statistics, and notes modern replacements such as ss and ip.
Learn how to efficiently manage Debian-based packages on Ubuntu and other Linux distributions using APT, covering updating the package index, upgrading system and individual packages, installing and removing software, handling dependencies, and leveraging powerful commands like list, search, and show for comprehensive system maintenance.
The Linux kernel 5.17 RC4, nicknamed "Superb Owl", has been released with balanced commit activity, significant driver and architecture updates, new hardware support including the latest Qualcomm SoC, and various filesystem, networking, and tool fixes, with the stable version slated for late March.
This article presents a curated collection of practical Linux command‑line shortcuts and tips—ranging from tab completion and directory navigation to log monitoring and command chaining—that can dramatically reduce keystrokes, prevent common errors, and streamline everyday system‑administration tasks.
This article explains the Linux SO_REUSEPORT feature introduced in kernel 3.9, how it allows multiple processes to bind and listen on the same port, the kernel's load‑balancing mechanism, and provides practical C examples and verification steps for developers.
Unplugging a network cable does not immediately terminate a TCP connection; the kernel’s socket state remains ESTABLISHED, and the connection’s fate depends on data transmission, retransmission limits, TCP keepalive settings, and whether either side detects a failure.
Mark Shuttleworth, the South African entrepreneur who became the first African in space, later founded Canonical and created the Ubuntu Linux distribution, blending his idealistic Ubuntu philosophy with open‑source development to make free software accessible worldwide.
This article explains the Linux Filesystem Hierarchy Standard (FHS), describes the purpose and typical contents of each top‑level directory such as /home, /boot, /etc, /usr, and /var, and demonstrates essential shell commands for navigating and managing these directories, including absolute and relative paths.
This guide explains Linux performance optimization by covering key metrics such as throughput, latency, load average, CPU context switching, and memory management, and demonstrates how to use built‑in tools like vmstat, pidstat, perf, and cachetop to diagnose and resolve bottlenecks.
This article explains how Linux namespaces provide resource isolation while cgroups enforce resource limits, detailing their types, system calls, configuration steps, and practical Go code examples to demonstrate CPU share control in container-like environments.
This guide explains the Linux Filesystem Hierarchy Standard (FHS), the purpose of each top‑level directory, the difference between absolute and relative paths, and provides practical command examples for navigating and managing directories safely and efficiently.
This article provides a comprehensive reference of essential Linux commands and procedures, covering system shutdown and reboot, hardware and environment inspection, file and directory management, user and permission handling, networking utilities, performance monitoring tools, and common text processing techniques for administrators and developers.
This article explains Go 1.16's madvise integration, detailing the MADV_DONTNEED and MADV_FREE options, their impact on physical memory release, RSS reduction, and the underlying mmap-based heap allocation with code examples.
This article explains Linux processes and threads, their relationship, key kernel parameters like ulimit, threads‑max, and pid_max, and how to limit thread and PID usage in containers using cgroups, Docker, and Kubernetes to prevent resource exhaustion.
This article presents a collection of practical Bash scripts for Linux servers, covering DOS attack IP blocking, alert emailing, MySQL backup (single and multi‑loop), Nginx log rotation and analysis, real‑time network traffic monitoring, system initialization, and disk usage checks across multiple hosts.
This guide explains why IPVS outperforms iptables for large Kubernetes clusters, then walks through installing ipvsadm, loading kernel modules on master and worker nodes, configuring kube-proxy to use IPVS, cleaning iptables rules, and verifying network and DNS functionality with a BusyBox pod.
A dramatized Linux security incident shows how administrators use commands like top, ps, netstat, and the unhide tool to discover hidden mining processes, isolate suspicious network connections, and finally terminate the malicious hidden PID, illustrating practical techniques for rootkit detection and response.
Even when a Linux system reports a full disk, deleted files may still occupy space because active processes keep them open; using commands like df, du, and lsof reveals hidden usage, and understanding the virtual file system, inode structures, and link management explains how to release the space.
Learn how to instantly watch and follow log files on Linux using tools like tail, tailf, tail -F, multitail, lnav, and less, with installation tips, command options, and practical examples for both single and multiple log streams.
This article explains the reasons behind Linux's sophisticated memory management, covering virtual memory mechanisms, page tables, MMU/TLB interactions, page fault handling, the layout of a process's address space, glibc's malloc internals, memory reclamation techniques, and the OOM killer's decision process.
This article provides a comprehensive overview of Podman, an open‑source, daemon‑less container runtime, comparing it with Docker, detailing its architecture, installation, configuration, common commands, image building, registry acceleration, user namespace setup, volume handling, and rootless port mapping for Linux systems.
This guide explains how to monitor Linux server performance using built‑in tools such as top, vmstat, pidstat, iostat, netstat, sar and tcpdump, detailing the metrics each provides and how to interpret them for CPU, memory, disk I/O and network troubleshooting.
This article provides a comprehensive introduction to Docker, explaining what containers are, how they differ from virtual machines, the role of Linux namespaces and cgroups, and includes step‑by‑step practices for limiting container resources using CPU quotas and task assignment.
This article provides a comprehensive overview of the most frequently used Linux compression utilities (zip, gzip, bzip2, xz) and the tar archiving command, detailing their syntax, key options, how to combine them, and practical examples for compressing and extracting files and directories.
The article examines how the proliferation of Linux‑powered IoT devices has made them prime targets for malware families like XorDDoS, Mirai and Mozi, highlighting their rapid growth, attack techniques, and recommended defensive measures for operators.
This guide explains how to use core Linux tools such as top, vmstat, pidstat, iostat, sar, netstat, and tcpdump to monitor CPU, memory, disk I/O, and network performance, interpret their metrics, and troubleshoot common bottlenecks on servers.
This article explains the principles of disk I/O, covering read/write workflows, DMA acceleration, page cache, memory‑mapped files, buffering techniques, Linux kernel parameters and practical Java code examples to illustrate how to reduce CPU involvement and improve overall system performance.
The article explains the fundamentals of disk I/O, covering read/write processes, IO interrupts, DMA, page cache, mmap, buffered versus unbuffered file operations, ByteBuffer usage, Linux dirty‑page parameters, and how these mechanisms affect application performance and reliability.
Learn how to use essential Linux networking tools—including ip, ifconfig, netstat, ping, traceroute, host, dig, and dhclient—to view interface details, monitor connections, test reachability, query DNS, and manage DHCP leases, with command options and practical tips for effective system troubleshooting.
Traditional Linux I/O using read() and write() involves multiple CPU and DMA copies and context switches, while modern techniques like zero‑copy, multiplexing, and page‑cache optimization reduce overhead; this article explains the classic I/O flow, read/write operations, network and disk I/O, and high‑performance strategies such as zero‑copy and Direct I/O.
This guide explains how to monitor Linux server performance using built‑in tools such as top, vmstat, pidstat, iostat, netstat, sar and tcpdump, interpreting their output to diagnose CPU, memory, disk I/O and network issues quickly and effectively.
This article compiles common file download commands and tools used in penetration testing for both Linux and Windows environments, covering utilities such as wget, curl, axel, aria2, PowerShell, certutil, bitsadmin, and others, with example syntax for direct, background, and resumable transfers.
This article explains how to inspect and clear Linux memory buffers, details the information shown by the free command, and provides a comprehensive overview of SQL join types, their performance impact, and optimization techniques such as indexing, join buffer tuning, and algorithm choices.
This tutorial walks you through Linux disk partitioning using fdisk and parted, covering MBR vs GPT limits, command syntax, interactive operations, example workflows for creating, listing, modifying, and deleting partitions, and essential safety warnings.
Linux’s PID 1, the init process, is the first user‑space program that spawns all other processes, and in Docker containers it becomes the container’s root process, handling signals uniquely; understanding its behavior and using tools like Tini are essential for reliable container orchestration.
This guide provides step‑by‑step shell commands to upgrade Ubuntu 16’s OpenSSH to version 8.8, including installing required packages, compiling OpenSSL, zlib, and OpenSSH from source, and updating configuration files to enhance system security on the server.
Learn how to prevent Linux processes from terminating when your SSH session ends by using background execution with &, the nohup command, job control shortcuts like ctrl+z, jobs, fg, bg, and the screen utility, including installation, session management, and practical examples.
This guide explains why careful file deletion matters, introduces Linux tools like lsof and extundelete for recovering mistakenly removed files, and provides step‑by‑step commands, installation instructions, and precautions to maximize recovery success while avoiding data loss.
This article introduces firewall fundamentals, traces their evolution, compares network, application, and database firewalls, explores Linux firewall implementations with iptables and Netfilter, and discusses performance metrics, limitations, and practical use cases for securing enterprise networks.
This article reviews the most noteworthy Linux distributions slated for 2022, highlighting each distro's new features, planned updates, and suitability for different user needs, from resource‑constrained hardware to cutting‑edge desktop experiences.
This article explains why Linux routing is essential for container networking, details how routing works during packet transmission and reception, explores routing tables and lookup mechanisms in the kernel, and provides practical commands for enabling forwarding, inspecting, modifying, and testing routing rules.
This article documents a system crash triggered by a memory‑leak in a network‑chip SDK, explains how low free memory and the kswapd process lead to deadlock, and shows how adjusting the kernel parameter min_free_kbytes can prevent the freeze while highlighting the importance of resource monitoring and tuning.
After lowering an NFS server's RAM from 8 GB to 4 GB, the server's max_block_size dropped, causing a mismatch with the client’s rsize/wsize settings, which led to RPC fragment‑too‑large errors; the article explains the root cause and shows how to resolve it by adjusting the server’s max_block_size.
The article details a MySQL memory‑usage incident at Qunar where abnormal slab memory, especially dentry allocation, caused a rapid increase in used memory after a mis‑configured yum makecache cron job, and explains the investigation steps, Linux memory concepts, diagnostic commands, and the corrective actions taken.
This article explains the fundamentals of Linux routing, why routing is required for containers and overlay networks, how the kernel selects routes when sending and receiving packets, and provides practical commands and code examples for configuring and testing routing tables in cloud‑native environments.
This guide explains the differences between su and sudo, demonstrates how to create test users, switch between accounts using login and non‑login shells, configure sudo privileges via /etc/sudoers, and provides practical command examples for secure user management on Linux.
This article explains why Linux utilities like du and ls can report dramatically different file sizes, introduces the concept of sparse files, and shows practical commands to identify and correctly handle them on Unix-like systems.
This article explores the inner workings of Linux's glibc malloc, detailing how heap memory is requested from the kernel, how multithreaded support is implemented with per‑thread arenas, and the structures such as arenas, bins, and chunks that together determine allocation efficiency.
Even when the `df` command shows a full disk, hidden deleted files held open by processes can consume space, and understanding this requires diving into Linux’s virtual file system architecture, including superblocks, inodes, file and dentry objects, as well as link types and file‑process interactions.
