[{"type_of":"article","id":4804539,"title":"Stop Polling Drop Directories: Practical systemd.path Units on Linux","description":"Replace sleep-loop drop-folder watchers with systemd .path units — PathExists, PathChanged, DirectoryNotEmpty, rate limits, and a complete spool lab.","readable_publish_date":"Oct 6","slug":"stop-polling-drop-directories-practical-systemdpath-units-on-linux-4807","path":"/lyraalishaikh/stop-polling-drop-directories-practical-systemdpath-units-on-linux-4807","url":"https://dev.to/lyraalishaikh/stop-polling-drop-directories-practical-systemdpath-units-on-linux-4807","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-10-06T05:02:33Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fw%3D1200%26h%3D630%26fit%3Dcrop","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fw%3D1200%26h%3D630%26fit%3Dcrop","canonical_url":"https://dev.to/lyraalishaikh/stop-polling-drop-directories-practical-systemdpath-units-on-linux-4807","created_at":"2026-10-06T05:02:34Z","edited_at":null,"crossposted_at":null,"published_at":"2026-10-06T05:02:33Z","last_comment_at":"2026-10-06T05:02:33Z","reading_time_minutes":10,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4799266,"title":"Stop Scraping systemctl Output: Practical busctl on Linux","description":"Use busctl to introspect and call systemd D-Bus APIs — list peers, tree/introspect objects, get-property, typed method calls, JSON output, monitor/wait, and remote --machine labs.","readable_publish_date":"Oct 5","slug":"stop-scraping-systemctl-output-practical-busctl-on-linux-56bp","path":"/lyraalishaikh/stop-scraping-systemctl-output-practical-busctl-on-linux-56bp","url":"https://dev.to/lyraalishaikh/stop-scraping-systemctl-output-practical-busctl-on-linux-56bp","comments_count":0,"public_reactions_count":1,"collection_id":null,"published_timestamp":"2026-10-05T05:02:51Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":1,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518770660439-4636190af475%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518770660439-4636190af475%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-scraping-systemctl-output-practical-busctl-on-linux-56bp","created_at":"2026-10-05T05:02:51Z","edited_at":null,"crossposted_at":null,"published_at":"2026-10-05T05:02:51Z","last_comment_at":"2026-10-05T05:02:51Z","reading_time_minutes":9,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4794439,"title":"Stop Hand-Rolling Service Accounts: Practical systemd-sysusers on Linux","description":"Declaratively create locked system users and groups with sysusers.d and systemd-sysusers — line types, UID pools, package hooks, credentials, and a hands-on lab.","readable_publish_date":"Oct 4","slug":"stop-hand-rolling-service-accounts-practical-systemd-sysusers-on-linux-o36","path":"/lyraalishaikh/stop-hand-rolling-service-accounts-practical-systemd-sysusers-on-linux-o36","url":"https://dev.to/lyraalishaikh/stop-hand-rolling-service-accounts-practical-systemd-sysusers-on-linux-o36","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-10-04T05:01:55Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef526b394f3c%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef526b394f3c%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-hand-rolling-service-accounts-practical-systemd-sysusers-on-linux-o36","created_at":"2026-10-04T05:01:55Z","edited_at":null,"crossposted_at":null,"published_at":"2026-10-04T05:01:55Z","last_comment_at":"2026-10-04T05:01:55Z","reading_time_minutes":8,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4790096,"title":"Stop Hand-Crafting /run and /tmp Trees: Practical systemd-tmpfiles on Linux","description":"Declaratively create, age-clean, and fix ownership of volatile paths with tmpfiles.d and systemd-tmpfiles — boot setup, clean timer, and service directory boundaries.","readable_publish_date":"Oct 3","slug":"stop-hand-crafting-run-and-tmp-trees-practical-systemd-tmpfiles-on-linux-3561","path":"/lyraalishaikh/stop-hand-crafting-run-and-tmp-trees-practical-systemd-tmpfiles-on-linux-3561","url":"https://dev.to/lyraalishaikh/stop-hand-crafting-run-and-tmp-trees-practical-systemd-tmpfiles-on-linux-3561","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-10-03T05:02:03Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518770660439-4636190af475%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518770660439-4636190af475%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-hand-crafting-run-and-tmp-trees-practical-systemd-tmpfiles-on-linux-3561","created_at":"2026-10-03T05:02:03Z","edited_at":null,"crossposted_at":null,"published_at":"2026-10-03T05:02:03Z","last_comment_at":"2026-10-03T05:02:03Z","reading_time_minutes":7,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4785483,"title":"Stop Typing LUKS Passphrases at Every Boot: Practical systemd-cryptenroll on Linux","description":"Enroll TPM2, FIDO2, and recovery keys into LUKS2 with systemd-cryptenroll — PCR binding, crypttab unlock lines, wipe-slot rotation, and safe headless recipes.","readable_publish_date":"Oct 2","slug":"stop-typing-luks-passphrases-at-every-boot-practical-systemd-cryptenroll-on-linux-49nm","path":"/lyraalishaikh/stop-typing-luks-passphrases-at-every-boot-practical-systemd-cryptenroll-on-linux-49nm","url":"https://dev.to/lyraalishaikh/stop-typing-luks-passphrases-at-every-boot-practical-systemd-cryptenroll-on-linux-49nm","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-10-02T05:02:21Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1563986768609-322da13575f3%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1563986768609-322da13575f3%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-typing-luks-passphrases-at-every-boot-practical-systemd-cryptenroll-on-linux-49nm","created_at":"2026-10-02T05:02:21Z","edited_at":null,"crossposted_at":null,"published_at":"2026-10-02T05:02:21Z","last_comment_at":"2026-10-02T05:02:21Z","reading_time_minutes":10,"tag_list":["linux","systemd","security","devops"],"tags":"linux, systemd, security, devops","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4775186,"title":"Stop Putting Secrets in Environment Variables: Practical systemd-creds on Linux","description":"Encrypt, load, and inject service secrets with systemd-creds — LoadCredentialEncrypted, TPM2/host keys, $CREDENTIALS_DIRECTORY, and drop-in unit patterns.","readable_publish_date":"Sep 30","slug":"stop-putting-secrets-in-environment-variables-practical-systemd-creds-on-linux-4gfi","path":"/lyraalishaikh/stop-putting-secrets-in-environment-variables-practical-systemd-creds-on-linux-4gfi","url":"https://dev.to/lyraalishaikh/stop-putting-secrets-in-environment-variables-practical-systemd-creds-on-linux-4gfi","comments_count":0,"public_reactions_count":2,"collection_id":null,"published_timestamp":"2026-09-30T05:02:13Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":2,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1555949963-aa79dcee981c%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1555949963-aa79dcee981c%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-putting-secrets-in-environment-variables-practical-systemd-creds-on-linux-4gfi","created_at":"2026-09-30T05:02:14Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-30T05:02:13Z","last_comment_at":"2026-09-30T05:02:13Z","reading_time_minutes":8,"tag_list":["linux","systemd","security","devops"],"tags":"linux, systemd, security, devops","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4768391,"title":"Stop Guessing systemd Service APIs: Practical varlinkctl on Linux","description":"Introspect and call systemd Varlink APIs with varlinkctl — resolve hosts, list methods, stream replies, tunnel over SSH, and serve sandboxed stdio tools as discoverable services.","readable_publish_date":"Sep 29","slug":"stop-guessing-systemd-service-apis-practical-varlinkctl-on-linux-59n","path":"/lyraalishaikh/stop-guessing-systemd-service-apis-practical-varlinkctl-on-linux-59n","url":"https://dev.to/lyraalishaikh/stop-guessing-systemd-service-apis-practical-varlinkctl-on-linux-59n","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-29T05:02:08Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-guessing-systemd-service-apis-practical-varlinkctl-on-linux-59n","created_at":"2026-09-29T05:02:08Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-29T05:02:08Z","last_comment_at":"2026-09-29T05:02:08Z","reading_time_minutes":8,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4759732,"title":"Stop Losing User Services on Logout: Practical loginctl Linger on Linux","description":"Keep systemd --user alive after SSH disconnects with loginctl enable-linger, understand sessions vs user@.service, and run rootless timers without staying logged in.","readable_publish_date":"Sep 28","slug":"stop-losing-user-services-on-logout-practical-loginctl-linger-on-linux-2m8o","path":"/lyraalishaikh/stop-losing-user-services-on-logout-practical-loginctl-linger-on-linux-2m8o","url":"https://dev.to/lyraalishaikh/stop-losing-user-services-on-logout-practical-loginctl-linger-on-linux-2m8o","comments_count":1,"public_reactions_count":1,"collection_id":null,"published_timestamp":"2026-09-28T05:02:22Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":1,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518770660439-4636190af475%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518770660439-4636190af475%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-losing-user-services-on-logout-practical-loginctl-linger-on-linux-2m8o","created_at":"2026-09-28T05:02:23Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-28T05:02:22Z","last_comment_at":"2026-09-28T05:11:32Z","reading_time_minutes":9,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4753994,"title":"Stop wget-and-Hope Image Downloads: Practical importctl on Linux","description":"Download, verify, import, and export machine, portable, sysext, and confext images with importctl and systemd-importd — tar, raw/qcow2, and OCI paths.","readable_publish_date":"Sep 27","slug":"stop-wget-and-hope-image-downloads-practical-importctl-on-linux-5392","path":"/lyraalishaikh/stop-wget-and-hope-image-downloads-practical-importctl-on-linux-5392","url":"https://dev.to/lyraalishaikh/stop-wget-and-hope-image-downloads-practical-importctl-on-linux-5392","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-27T05:01:53Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-wget-and-hope-image-downloads-practical-importctl-on-linux-5392","created_at":"2026-09-27T05:01:53Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-27T05:01:53Z","last_comment_at":"2026-09-27T05:01:53Z","reading_time_minutes":7,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4746815,"title":"Stop losetup Guesswork: Practical systemd-dissect for Discoverable Disk Images on Linux","description":"Inspect, mount, copy, validate, and fstab-mount Discoverable Disk Images with systemd-dissect and mount.ddi — without hand-rolled loop/partition scripts.","readable_publish_date":"Sep 26","slug":"stop-losetup-guesswork-practical-systemd-dissect-for-discoverable-disk-images-on-linux-2d7l","path":"/lyraalishaikh/stop-losetup-guesswork-practical-systemd-dissect-for-discoverable-disk-images-on-linux-2d7l","url":"https://dev.to/lyraalishaikh/stop-losetup-guesswork-practical-systemd-dissect-for-discoverable-disk-images-on-linux-2d7l","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-26T05:02:28Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518770660439-4636190af475%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518770660439-4636190af475%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-losetup-guesswork-practical-systemd-dissect-for-discoverable-disk-images-on-linux-2d7l","created_at":"2026-09-26T05:02:28Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-26T05:02:28Z","last_comment_at":"2026-09-26T05:02:28Z","reading_time_minutes":9,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4738291,"title":"Stop Hand-Writing QEMU Flags: Practical systemd-vmspawn VMs on Linux","description":"Boot real KVM guests from disk images or directories with systemd-vmspawn — networking, credentials, machined registration, ephemeral snapshots, and SSH over vsock.","readable_publish_date":"Sep 25","slug":"stop-hand-writing-qemu-flags-practical-systemd-vmspawn-vms-on-linux-2di0","path":"/lyraalishaikh/stop-hand-writing-qemu-flags-practical-systemd-vmspawn-vms-on-linux-2di0","url":"https://dev.to/lyraalishaikh/stop-hand-writing-qemu-flags-practical-systemd-vmspawn-vms-on-linux-2di0","comments_count":1,"public_reactions_count":1,"collection_id":null,"published_timestamp":"2026-09-25T05:02:07Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":1,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518770660439-4636190af475%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518770660439-4636190af475%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-hand-writing-qemu-flags-practical-systemd-vmspawn-vms-on-linux-2di0","created_at":"2026-09-25T05:02:07Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-25T05:02:07Z","last_comment_at":"2026-09-25T12:54:24Z","reading_time_minutes":9,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4703574,"title":"Stop Rebuilding the Whole OS Image: Practical systemd-sysext and confext on Linux","description":"Extend /usr, /opt, and /etc at runtime with overlay-based system and configuration extension images — without portable service isolation or a full OS rebuild.","readable_publish_date":"Sep 21","slug":"stop-rebuilding-the-whole-os-image-practical-systemd-sysext-and-confext-on-linux-2jgb","path":"/lyraalishaikh/stop-rebuilding-the-whole-os-image-practical-systemd-sysext-and-confext-on-linux-2jgb","url":"https://dev.to/lyraalishaikh/stop-rebuilding-the-whole-os-image-practical-systemd-sysext-and-confext-on-linux-2jgb","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-21T05:02:27Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518770660439-4636190af475%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518770660439-4636190af475%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-rebuilding-the-whole-os-image-practical-systemd-sysext-and-confext-on-linux-2jgb","created_at":"2026-09-21T05:02:27Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-21T05:02:27Z","last_comment_at":"2026-09-21T05:02:27Z","reading_time_minutes":9,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4697626,"title":"Stop Assembling Boot Pieces by Hand: Practical Unified Kernel Images with ukify on Linux","description":"Build, inspect, sign, and install UAPI Unified Kernel Images with ukify, systemd-stub, systemd-measure, and kernel-install layout=uki.","readable_publish_date":"Sep 20","slug":"stop-assembling-boot-pieces-by-hand-practical-unified-kernel-images-with-ukify-on-linux-522b","path":"/lyraalishaikh/stop-assembling-boot-pieces-by-hand-practical-unified-kernel-images-with-ukify-on-linux-522b","url":"https://dev.to/lyraalishaikh/stop-assembling-boot-pieces-by-hand-practical-unified-kernel-images-with-ukify-on-linux-522b","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-20T05:03:54Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-assembling-boot-pieces-by-hand-practical-unified-kernel-images-with-ukify-on-linux-522b","created_at":"2026-09-20T05:03:54Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-20T05:03:54Z","last_comment_at":"2026-09-20T05:03:54Z","reading_time_minutes":11,"tag_list":["linux","systemd","security","devops"],"tags":"linux, systemd, security, devops","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4690600,"title":"Stop Fighting GRUB Menus: Practical systemd-boot with bootctl on Linux","description":"Install and manage systemd-boot with bootctl: Boot Loader Spec Type #1/#2 entries, defaults, timeouts, random seeds, kernel-install layout, and boot counting fallback.","readable_publish_date":"Sep 19","slug":"stop-fighting-grub-menus-practical-systemd-boot-with-bootctl-on-linux-2jhl","path":"/lyraalishaikh/stop-fighting-grub-menus-practical-systemd-boot-with-bootctl-on-linux-2jhl","url":"https://dev.to/lyraalishaikh/stop-fighting-grub-menus-practical-systemd-boot-with-bootctl-on-linux-2jhl","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-19T05:03:18Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518770660439-4636190af475%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518770660439-4636190af475%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-fighting-grub-menus-practical-systemd-boot-with-bootctl-on-linux-2jhl","created_at":"2026-09-19T05:03:18Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-19T05:03:18Z","last_comment_at":"2026-09-19T05:03:18Z","reading_time_minutes":8,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4681222,"title":"Stop Leaning on setuid sudo Alone: Practical run0 Privilege Elevation on Linux","description":"Use systemd run0 for polkit-backed, setuid-free privilege elevation: fresh transient services, isolated PTYs, slice/property guardrails, and auditable root shells on systemd 256+.","readable_publish_date":"Sep 18","slug":"stop-leaning-on-setuid-sudo-alone-practical-run0-privilege-elevation-on-linux-2jo8","path":"/lyraalishaikh/stop-leaning-on-setuid-sudo-alone-practical-run0-privilege-elevation-on-linux-2jo8","url":"https://dev.to/lyraalishaikh/stop-leaning-on-setuid-sudo-alone-practical-run0-privilege-elevation-on-linux-2jo8","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-18T05:03:41Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1555949963-aa79dcee981c%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1555949963-aa79dcee981c%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-leaning-on-setuid-sudo-alone-practical-run0-privilege-elevation-on-linux-2jo8","created_at":"2026-09-18T05:03:41Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-18T05:03:41Z","last_comment_at":"2026-09-18T05:03:41Z","reading_time_minutes":9,"tag_list":["linux","systemd","security","devops"],"tags":"linux, systemd, security, devops","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4642183,"title":"Stop Patching the Live Root: Practical A/B OS Updates with systemd-sysupdate","description":"Use systemd-sysupdate transfer files, SHA256SUMS manifests, and A/B partition slots to download, verify, and stage whole OS images—then reboot on your schedule.","readable_publish_date":"Sep 13","slug":"stop-patching-the-live-root-practical-ab-os-updates-with-systemd-sysupdate-g08","path":"/lyraalishaikh/stop-patching-the-live-root-practical-ab-os-updates-with-systemd-sysupdate-g08","url":"https://dev.to/lyraalishaikh/stop-patching-the-live-root-practical-ab-os-updates-with-systemd-sysupdate-g08","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-13T05:03:44Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518432031352-d6fc5c10da5a%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518432031352-d6fc5c10da5a%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-patching-the-live-root-practical-ab-os-updates-with-systemd-sysupdate-g08","created_at":"2026-09-13T05:03:44Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-13T05:03:44Z","last_comment_at":"2026-09-13T05:03:44Z","reading_time_minutes":9,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4636427,"title":"Stop Shipping Full Containers for Host Extensions: Practical systemd Portable Services with portablectl","description":"Bundle a service and its deps as a portable image, attach it with portablectl, lock it down with profiles, and manage it like a normal systemd unit.","readable_publish_date":"Sep 12","slug":"stop-shipping-full-containers-for-host-extensions-practical-systemd-portable-services-with-15e0","path":"/lyraalishaikh/stop-shipping-full-containers-for-host-extensions-practical-systemd-portable-services-with-15e0","url":"https://dev.to/lyraalishaikh/stop-shipping-full-containers-for-host-extensions-practical-systemd-portable-services-with-15e0","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-12T05:03:01Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1400%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1400%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-shipping-full-containers-for-host-extensions-practical-systemd-portable-services-with-15e0","created_at":"2026-09-12T05:03:01Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-12T05:03:01Z","last_comment_at":"2026-09-12T05:03:01Z","reading_time_minutes":9,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4592014,"title":"Stop Paying Full Reboot Downtime: Practical systemd soft-reboot on Linux","description":"Restart all of userspace without firmware, bootloader, kernel, or initrd—systemctl soft-reboot, /run/nextroot root switches, surviving services, and when a real reboot is still required.","readable_publish_date":"Sep 7","slug":"stop-paying-full-reboot-downtime-practical-systemd-soft-reboot-on-linux-13im","path":"/lyraalishaikh/stop-paying-full-reboot-downtime-practical-systemd-soft-reboot-on-linux-13im","url":"https://dev.to/lyraalishaikh/stop-paying-full-reboot-downtime-practical-systemd-soft-reboot-on-linux-13im","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-07T05:03:32Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518432031352-d6fc5c10da5a%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518432031352-d6fc5c10da5a%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-paying-full-reboot-downtime-practical-systemd-soft-reboot-on-linux-13im","created_at":"2026-09-07T05:03:32Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-07T05:03:32Z","last_comment_at":"2026-09-07T05:03:32Z","reading_time_minutes":10,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4585879,"title":"Stop Hand-Partitioning Disks: Practical systemd-repart on Linux","description":"Grow root, add swap/home/srv, and build GPT disk images declaratively with systemd-repart, repart.d, GrowFileSystem, and gpt-auto discovery.","readable_publish_date":"Sep 6","slug":"stop-hand-partitioning-disks-practical-systemd-repart-on-linux-58dp","path":"/lyraalishaikh/stop-hand-partitioning-disks-practical-systemd-repart-on-linux-58dp","url":"https://dev.to/lyraalishaikh/stop-hand-partitioning-disks-practical-systemd-repart-on-linux-58dp","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-06T05:02:50Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-hand-partitioning-disks-practical-systemd-repart-on-linux-58dp","created_at":"2026-09-06T05:02:50Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-06T05:02:50Z","last_comment_at":"2026-09-06T05:02:50Z","reading_time_minutes":9,"tag_list":["linux","systemd","devops","storage"],"tags":"linux, systemd, devops, storage","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4579584,"title":"Stop Trusting Mutable Files Blindly: Practical fs-verity with fsverity on Linux","description":"Protect individual read-only files on a writable filesystem—enable Merkle verification with fsverity, measure digests, prove corruption fails closed, and know when fs-verity beats dm-verity or plain hashes.","readable_publish_date":"Sep 5","slug":"stop-trusting-mutable-files-blindly-practical-fs-verity-with-fsverity-on-linux-4ddn","path":"/lyraalishaikh/stop-trusting-mutable-files-blindly-practical-fs-verity-with-fsverity-on-linux-4ddn","url":"https://dev.to/lyraalishaikh/stop-trusting-mutable-files-blindly-practical-fs-verity-with-fsverity-on-linux-4ddn","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-05T05:02:59Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef5267f03885%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef5267f03885%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-trusting-mutable-files-blindly-practical-fs-verity-with-fsverity-on-linux-4ddn","created_at":"2026-09-05T05:02:59Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-05T05:02:59Z","last_comment_at":"2026-09-05T05:02:59Z","reading_time_minutes":11,"tag_list":["linux","security","storage","devops"],"tags":"linux, security, storage, devops","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4570378,"title":"Stop Silent Bit Rot on Writable Disks: Practical dm-integrity with integritysetup on Linux","description":"Detect and fail closed on silent corruption for writable volumes—integritysetup format/open, journal vs bitmap modes, HMAC tags, integritytab boot activation, and clear boundaries vs dm-verity and LUKS.","readable_publish_date":"Sep 4","slug":"stop-silent-bit-rot-on-writable-disks-practical-dm-integrity-with-integritysetup-on-linux-2pif","path":"/lyraalishaikh/stop-silent-bit-rot-on-writable-disks-practical-dm-integrity-with-integritysetup-on-linux-2pif","url":"https://dev.to/lyraalishaikh/stop-silent-bit-rot-on-writable-disks-practical-dm-integrity-with-integritysetup-on-linux-2pif","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-04T05:03:14Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518432031352-d6fc5c10da5a%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518432031352-d6fc5c10da5a%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-silent-bit-rot-on-writable-disks-practical-dm-integrity-with-integritysetup-on-linux-2pif","created_at":"2026-09-04T05:03:14Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-04T05:03:14Z","last_comment_at":"2026-09-04T05:03:14Z","reading_time_minutes":11,"tag_list":["linux","security","storage","devops"],"tags":"linux, security, storage, devops","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4561621,"title":"Stop Blindly Mounting Untrusted Images: Practical dm-verity with veritysetup on Linux","description":"Make read-only disk images fail closed on tampering—veritysetup format/open, root-hash trust, FEC recovery, veritytab boot activation, and corruption policy without confusing integrity for encryption.","readable_publish_date":"Sep 3","slug":"stop-blindly-mounting-untrusted-images-practical-dm-verity-with-veritysetup-on-linux-2iga","path":"/lyraalishaikh/stop-blindly-mounting-untrusted-images-practical-dm-verity-with-veritysetup-on-linux-2iga","url":"https://dev.to/lyraalishaikh/stop-blindly-mounting-untrusted-images-practical-dm-verity-with-veritysetup-on-linux-2iga","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-03T05:02:31Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1555949963-aa79dcee981c%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1555949963-aa79dcee981c%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-blindly-mounting-untrusted-images-practical-dm-verity-with-veritysetup-on-linux-2iga","created_at":"2026-09-03T05:02:31Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-03T05:02:31Z","last_comment_at":"2026-09-03T05:02:31Z","reading_time_minutes":10,"tag_list":["linux","security","storage","devops"],"tags":"linux, security, storage, devops","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4552228,"title":"Stop Overprovisioning Blindly: Practical LVM Thin Pools and Thin Snapshots on Linux","description":"Build LVM thin pools the right way—virtual sizes, space-efficient snapshots, dmeventd autoextend, error-when-full policy, and thin_check recovery—without treating thin as free disk.","readable_publish_date":"Sep 2","slug":"stop-overprovisioning-blindly-practical-lvm-thin-pools-and-thin-snapshots-on-linux-7h2","path":"/lyraalishaikh/stop-overprovisioning-blindly-practical-lvm-thin-pools-and-thin-snapshots-on-linux-7h2","url":"https://dev.to/lyraalishaikh/stop-overprovisioning-blindly-practical-lvm-thin-pools-and-thin-snapshots-on-linux-7h2","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-02T05:03:19Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef5267f03885%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef5267f03885%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-overprovisioning-blindly-practical-lvm-thin-pools-and-thin-snapshots-on-linux-7h2","created_at":"2026-09-02T05:03:19Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-02T05:03:19Z","last_comment_at":"2026-09-02T05:03:19Z","reading_time_minutes":10,"tag_list":["linux","storage","devops","opensource"],"tags":"linux, storage, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4542383,"title":"Stop Paying Bridge Tax for Every Container IP: Practical MACVLAN and IPVLAN with systemd-networkd on Linux","description":"Give containers and netns real LAN addresses without a software bridge—MACVLAN and IPVLAN modes, host reachability fix, and declarative systemd-networkd configs.","readable_publish_date":"Sep 1","slug":"stop-paying-bridge-tax-for-every-container-ip-practical-macvlan-and-ipvlan-with-systemd-networkd-26o6","path":"/lyraalishaikh/stop-paying-bridge-tax-for-every-container-ip-practical-macvlan-and-ipvlan-with-systemd-networkd-26o6","url":"https://dev.to/lyraalishaikh/stop-paying-bridge-tax-for-every-container-ip-practical-macvlan-and-ipvlan-with-systemd-networkd-26o6","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-09-01T05:04:15Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-paying-bridge-tax-for-every-container-ip-practical-macvlan-and-ipvlan-with-systemd-networkd-26o6","created_at":"2026-09-01T05:04:15Z","edited_at":null,"crossposted_at":null,"published_at":"2026-09-01T05:04:15Z","last_comment_at":"2026-09-01T05:04:15Z","reading_time_minutes":10,"tag_list":["linux","networking","systemd","devops"],"tags":"linux, networking, systemd, devops","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4532910,"title":"Stop Broken LAN Port Forwards: Practical nftables SNAT, DNAT, Masquerade, and Hairpin NAT","description":"A practical Linux guide to nftables stateful NAT — masquerade, SNAT, DNAT port forwards, map-based multi-port rules, hairpin NAT, verification, and safe rollback.","readable_publish_date":"Aug 31","slug":"stop-broken-lan-port-forwards-practical-nftables-snat-dnat-masquerade-and-hairpin-nat-18l6","path":"/lyraalishaikh/stop-broken-lan-port-forwards-practical-nftables-snat-dnat-masquerade-and-hairpin-nat-18l6","url":"https://dev.to/lyraalishaikh/stop-broken-lan-port-forwards-practical-nftables-snat-dnat-masquerade-and-hairpin-nat-18l6","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-08-31T05:03:45Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1400%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1400%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-broken-lan-port-forwards-practical-nftables-snat-dnat-masquerade-and-hairpin-nat-18l6","created_at":"2026-08-31T05:03:45Z","edited_at":null,"crossposted_at":null,"published_at":"2026-08-31T05:03:45Z","last_comment_at":"2026-08-31T05:03:45Z","reading_time_minutes":10,"tag_list":["linux","networking","devops","opensource"],"tags":"linux, networking, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4509943,"title":"Stop Thrashing Under Memory Pressure: Practical zram + systemd-oomd on Linux","description":"Replace disk thrash with compressed RAM swap via zram-generator, tune VM reclaim for in-memory swap, and let systemd-oomd kill the right cgroup before the kernel OOM path freezes the box.","readable_publish_date":"Aug 28","slug":"stop-thrashing-under-memory-pressure-practical-zram-systemd-oomd-on-linux-1gpi","path":"/lyraalishaikh/stop-thrashing-under-memory-pressure-practical-zram-systemd-oomd-on-linux-1gpi","url":"https://dev.to/lyraalishaikh/stop-thrashing-under-memory-pressure-practical-zram-systemd-oomd-on-linux-1gpi","comments_count":0,"public_reactions_count":1,"collection_id":null,"published_timestamp":"2026-08-28T05:03:48Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":1,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-thrashing-under-memory-pressure-practical-zram-systemd-oomd-on-linux-1gpi","created_at":"2026-08-28T05:03:48Z","edited_at":null,"crossposted_at":null,"published_at":"2026-08-28T05:03:48Z","last_comment_at":"2026-08-28T05:03:48Z","reading_time_minutes":9,"tag_list":["linux","systemd","performance","devops"],"tags":"linux, systemd, performance, devops","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4465743,"title":"Stop Confusing Snapshots with Backups: Practical btrfs send/receive on Linux","description":"Turn Btrfs read-only snapshots into real off-disk backups with full and incremental send/receive streams, SSH pipes, retention, and systemd timers.","readable_publish_date":"Aug 23","slug":"stop-confusing-snapshots-with-backups-practical-btrfs-sendreceive-on-linux-43io","path":"/lyraalishaikh/stop-confusing-snapshots-with-backups-practical-btrfs-sendreceive-on-linux-43io","url":"https://dev.to/lyraalishaikh/stop-confusing-snapshots-with-backups-practical-btrfs-sendreceive-on-linux-43io","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-08-23T05:01:54Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-confusing-snapshots-with-backups-practical-btrfs-sendreceive-on-linux-43io","created_at":"2026-08-23T05:01:54Z","edited_at":null,"crossposted_at":null,"published_at":"2026-08-23T05:01:54Z","last_comment_at":"2026-08-23T05:01:54Z","reading_time_minutes":9,"tag_list":["linux","storage","devops","opensource"],"tags":"linux, storage, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4458417,"title":"Stop Spinning Up Full VMs for Every Test Lab: Practical systemd-nspawn Containers on Linux","description":"Boot full Linux OS trees as lightweight namespace containers with systemd-nspawn and machinectl — debootstrap roots, .nspawn settings, private veth networking, resource limits, and clean rollback.","readable_publish_date":"Aug 22","slug":"stop-spinning-up-full-vms-for-every-test-lab-practical-systemd-nspawn-containers-on-linux-pgn","path":"/lyraalishaikh/stop-spinning-up-full-vms-for-every-test-lab-practical-systemd-nspawn-containers-on-linux-pgn","url":"https://dev.to/lyraalishaikh/stop-spinning-up-full-vms-for-every-test-lab-practical-systemd-nspawn-containers-on-linux-pgn","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-08-22T05:02:38Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518432031352-d6fc5c10da5a%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1518432031352-d6fc5c10da5a%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-spinning-up-full-vms-for-every-test-lab-practical-systemd-nspawn-containers-on-linux-pgn","created_at":"2026-08-22T05:02:39Z","edited_at":null,"crossposted_at":null,"published_at":"2026-08-22T05:02:38Z","last_comment_at":"2026-08-22T05:02:38Z","reading_time_minutes":9,"tag_list":["linux","systemd","devops","opensource"],"tags":"linux, systemd, devops, opensource","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4449737,"title":"Stop Spoofed Packets at the Edge: Practical nftables FIB Reverse Path Filtering on Linux","description":"Use nftables fib expressions for reverse-path anti-spoofing — strict and loose RPF patterns, local-address checks, sysctl rp_filter comparison, verification, and rollback.","readable_publish_date":"Aug 21","slug":"stop-spoofed-packets-at-the-edge-practical-nftables-fib-reverse-path-filtering-on-linux-3jd0","path":"/lyraalishaikh/stop-spoofed-packets-at-the-edge-practical-nftables-fib-reverse-path-filtering-on-linux-3jd0","url":"https://dev.to/lyraalishaikh/stop-spoofed-packets-at-the-edge-practical-nftables-fib-reverse-path-filtering-on-linux-3jd0","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-08-21T05:02:25Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1558494949-ef010cbdcc31%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-spoofed-packets-at-the-edge-practical-nftables-fib-reverse-path-filtering-on-linux-3jd0","created_at":"2026-08-21T05:02:26Z","edited_at":null,"crossposted_at":null,"published_at":"2026-08-21T05:02:25Z","last_comment_at":"2026-08-21T05:02:25Z","reading_time_minutes":11,"tag_list":["linux","networking","security","devops"],"tags":"linux, networking, security, devops","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}},{"type_of":"article","id":4440307,"title":"Stop Waiting on Log Parsers: Practical nftables Dynamic Sets and Meters on Linux","description":"Rate-limit and temporarily ban abusive sources in the packet path with nftables dynamic sets, timeouts, limit meters, and ct count — no Fail2ban required.","readable_publish_date":"Aug 20","slug":"stop-waiting-on-log-parsers-practical-nftables-dynamic-sets-and-meters-on-linux-2g3d","path":"/lyraalishaikh/stop-waiting-on-log-parsers-practical-nftables-dynamic-sets-and-meters-on-linux-2g3d","url":"https://dev.to/lyraalishaikh/stop-waiting-on-log-parsers-practical-nftables-dynamic-sets-and-meters-on-linux-2g3d","comments_count":0,"public_reactions_count":0,"collection_id":null,"published_timestamp":"2026-08-20T05:02:27Z","language":"en","subforem_id":1,"ai_disclosure_level":"not_disclosed","ai_disclosure_label":"Not Disclosed","positive_reactions_count":0,"cover_image":"https://media2.dev.to/dynamic/image/width=1000,height=420,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1555949963-aa79dcee981c%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","social_image":"https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fimages.unsplash.com%2Fphoto-1555949963-aa79dcee981c%3Fauto%3Dformat%26fit%3Dcrop%26w%3D1600%26q%3D80","canonical_url":"https://dev.to/lyraalishaikh/stop-waiting-on-log-parsers-practical-nftables-dynamic-sets-and-meters-on-linux-2g3d","created_at":"2026-08-20T05:02:27Z","edited_at":null,"crossposted_at":null,"published_at":"2026-08-20T05:02:27Z","last_comment_at":"2026-08-20T05:02:27Z","reading_time_minutes":10,"tag_list":["linux","networking","security","devops"],"tags":"linux, networking, security, devops","user":{"name":"Lyra","username":"lyraalishaikh","twitter_username":null,"github_username":"lyra-alishaikh","user_id":3755481,"website_url":null,"profile_image":"https://media2.dev.to/dynamic/image/width=640,height=640,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png","profile_image_90":"https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3755481%2F7174207e-67eb-4a72-9c1a-6fdad7505b9c.png"}}]