Social 📸 Photography

Farooq | فاروقHmm am I the only one who think this doesn't make much sense?On one side, I have to make changes to network configuration using the <code>ip</code> utility. But then to make them persistent, I have to play with <code>systemd-networkd</code> stuff. The problem's that I have to learn two things. Why not have a system with which you could configure your network through the same CLI tool using the same syntax?Not that I want to join the anti systemd train. I haven't tweaked my PC at this level before. But recently I'm doing so and I wished I didn't have to spend few hours to get the thing working. Maybe it could be good if there was a system with which you could configure networking stuff on boot using the same <code>ip</code> utility?Or maybe I'm doing it the wrong way and there is a way to make changes done with <code>ip</code> persistent?Any enlightening comment is welcome!<a href="https://cr8r.gg/tags/systemd" class="mention hashtag" rel="nofollow noopener" target="_blank">#systemd</a> <a href="https://cr8r.gg/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://cr8r.gg/tags/FOSS" class="mention hashtag" rel="nofollow noopener" target="_blank">#FOSS</a> <a href="https://cr8r.gg/tags/LinuxNetworking" class="mention hashtag" rel="nofollow noopener" target="_blank">#LinuxNetworking</a> <a href="https://cr8r.gg/tags/Networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#Networking</a> <a href="https://cr8r.gg/tags/CLI" class="mention hashtag" rel="nofollow noopener" target="_blank">#CLI</a> <a href="https://cr8r.gg/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://cr8r.gg/tags/systemadministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#systemadministration</a>

apfeltalk :verified:MacOS Sonoma 14.7.7, MacOS Ventura 13.7.7 und Safari 18.6: Sicherheitsupdates im Überblick Apple hat neue Updates für MacOS Sonoma, Ma <a href="https://www.apfeltalk.de/magazin/news/macos-sonoma-14-7-7-macos-ventura-13-7-7-und-safari-18-6-sicherheitsupdates-im-ueberblick/" rel="nofollow noopener" target="_blank">https://www.apfeltalk.de/magazin/news/macos-sonoma-14-7-7-macos-ventura-13-7-7-und-safari-18-6-sicherheitsupdates-im-ueberblick/</a> <a href="https://creators.social/tags/Mac" class="mention hashtag" rel="nofollow noopener" target="_blank">#Mac</a> <a href="https://creators.social/tags/News" class="mention hashtag" rel="nofollow noopener" target="_blank">#News</a> <a href="https://creators.social/tags/ApplePatch" class="mention hashtag" rel="nofollow noopener" target="_blank">#ApplePatch</a> <a href="https://creators.social/tags/AppleUpdate" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppleUpdate</a> <a href="https://creators.social/tags/BetriebssystemUpdate" class="mention hashtag" rel="nofollow noopener" target="_blank">#BetriebssystemUpdate</a> <a href="https://creators.social/tags/ITSicherheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITSicherheit</a> <a href="https://creators.social/tags/MacNutzerinnen" class="mention hashtag" rel="nofollow noopener" target="_blank">#MacNutzerinnen</a> <a href="https://creators.social/tags/MacSicherheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#MacSicherheit</a> <a href="https://creators.social/tags/MacOSSonoma1477" class="mention hashtag" rel="nofollow noopener" target="_blank">#MacOSSonoma1477</a> <a href="https://creators.social/tags/MacOSVentura1377" class="mention hashtag" rel="nofollow noopener" target="_blank">#MacOSVentura1377</a> <a href="https://creators.social/tags/macOSUpdates" class="mention hashtag" rel="nofollow noopener" target="_blank">#macOSUpdates</a> <a href="https://creators.social/tags/Safari186" class="mention hashtag" rel="nofollow noopener" target="_blank">#Safari186</a> <a href="https://creators.social/tags/Sicherheitsupdate" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sicherheitsupdate</a> <a href="https://creators.social/tags/Softwareaktualisierung" class="mention hashtag" rel="nofollow noopener" target="_blank">#Softwareaktualisierung</a> <a href="https://creators.social/tags/Systemadministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#Systemadministration</a>

Franziska Köppe | madiko<a href="https://mastodon.green/tags/AusDerWerkstatt" class="mention hashtag" rel="nofollow noopener" target="_blank">#AusDerWerkstatt</a> 2025-28Passend zum <a href="https://mastodon.green/tags/SysAdminApprecationDay" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdminApprecationDay</a> veröffentlichte ich heute meinen Blog-Beitrag zur Rund-Erneuerung meiner <a href="https://mastodon.green/tags/InformationsTechnologie" class="mention hashtag" rel="nofollow noopener" target="_blank">#InformationsTechnologie</a>: neues Smartphone, Umstellen von Kupfer- auf Glas-Faser-Netz, neues Betriebs-System WIN11. Und ein paar grundlegende Gedanken zum Thema IT für Freiberufler:innen.Bleib neugierig: <a href="https://madiko.com/gelebte-praxis/aus-der-werkstatt/2025/rund-erneuerung-informations-technologie-smartphone-glasfaser-win11/" rel="nofollow noopener" translate="no" target="_blank">https://madiko.com/gelebte-praxis/aus-der-werkstatt/2025/rund-erneuerung-informations-technologie-smartphone-glasfaser-win11/</a><a href="https://mastodon.green/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a> <a href="https://mastodon.green/tags/SystemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemAdministration</a>

CyberagenturSystemadministratoren sorgen im Verborgenen für Stabilität, Schutz und Reaktionsfähigkeit. Am heutigen <a href="https://social.bund.de/tags/SysAdminDay" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdminDay</a> erinnern wir daran. Unsere Forschungsprogramme können sie unterstützen. Die <a href="https://social.bund.de/@Cyberagentur" class="u-url mention" rel="nofollow noopener" target="_blank">@Cyberagentur</a> finanziert Werkzeuge, die Admins helfen, Systeme vorausschauend abzusichern. Forschung für eine sichere digitale Infrastruktur. Mehr zum Aktionstag: <a href="https://t1p.de/3zdp0" rel="nofollow noopener" translate="no" target="_blank">https://t1p.de/3zdp0</a> <a href="https://social.bund.de/tags/Systemadministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#Systemadministration</a> <a href="https://social.bund.de/tags/ITSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITSecurity</a> <a href="https://social.bund.de/tags/Cyberagentur" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cyberagentur</a> <a href="https://social.bund.de/tags/Cyberresilienz" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cyberresilienz</a> <a href="https://social.bund.de/tags/DigitaleSouveraenitaet" class="mention hashtag" rel="nofollow noopener" target="_blank">#DigitaleSouveraenitaet</a> <a href="https://social.bund.de/tags/ForschungF%C3%BCrDieSicherheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#ForschungFürDieSicherheit</a>

Monospace MentorI've been busy preparing my community course "Basic Linux System Administration" for a few weeks now. The next instructor-led cohort starts in September.Here's the public chapter on text editing with vim. You can use it outside the course context, simply as a concise <a href="https://floss.social/tags/vim" class="mention hashtag" rel="nofollow noopener" target="_blank">#vim</a> tutorial.<a href="https://courses.monospacementor.com/courses/linsys-1/mod01-fundamentals/0105-editing.html" rel="nofollow noopener" translate="no" target="_blank">https://courses.monospacementor.com/courses/linsys-1/mod01-fundamentals/0105-editing.html</a><a href="https://floss.social/tags/SystemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemAdministration</a> <a href="https://floss.social/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a> <a href="https://floss.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a>

Monospace MentorShell tip: `${var%suffix}` removes the shortest matching suffix. `${var%%suffix}` removes the longest. `${var#prefix}` and `${var#<a href="https://floss.social/tags/prefix" class="mention hashtag" rel="nofollow noopener" target="_blank">#prefix</a>}` work the same for prefixes. Mnemonic: # comes before % on the keyboard. <a href="https://floss.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://floss.social/tags/SystemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemAdministration</a> <a href="https://floss.social/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a>

Monospace MentorLinux tip: `ionice -c 3 command` runs a command with idle I/O priority. It only gets disk access when no other processes need it. Perfect for backups or maintenance tasks. <a href="https://floss.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://floss.social/tags/SystemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemAdministration</a> <a href="https://floss.social/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a> <a href="https://floss.social/tags/Performance" class="mention hashtag" rel="nofollow noopener" target="_blank">#Performance</a>

Monospace Mentor🚨LIVE NOW!🚨 DevOps/SRE Instructor Live StreamOn this lovely Tuesday, let's chat about <a href="https://floss.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://floss.social/tags/SystemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemAdministration</a>, <a href="https://floss.social/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosting</a>, or any other topic in the <a href="https://floss.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a> and <a href="https://floss.social/tags/SRE" class="mention hashtag" rel="nofollow noopener" target="_blank">#SRE</a> space you're interested in!<a href="https://monospacementor.com/live-stream/" rel="nofollow noopener" translate="no" target="_blank">https://monospacementor.com/live-stream/</a>

Monospace MentorLinux tip: `systemd-analyze blame` shows which services slow down boot time. Use `systemd-analyze critical-chain` to see the dependency chain causing delays. Optimize the real bottlenecks. <a href="https://floss.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://floss.social/tags/SystemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemAdministration</a> <a href="https://floss.social/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a>

Monospace MentorLinux tip: `iostat -x 1` monitors disk I/O performance every second. Watch the `%util` column - consistently high values indicate I/O bottlenecks. Press Ctrl+C to stop monitoring. <a href="https://floss.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://floss.social/tags/Performance" class="mention hashtag" rel="nofollow noopener" target="_blank">#Performance</a> <a href="https://floss.social/tags/SystemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemAdministration</a> <a href="https://floss.social/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a>

Monospace MentorLinux tip: `ss -s` provides socket statistics summary. Shows TCP/UDP connection counts and states. Much faster than parsing full socket lists when you just need connection metrics. <a href="https://floss.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://floss.social/tags/SystemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemAdministration</a> <a href="https://floss.social/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a>

Monospace MentorLinux tip: `rsync -avz --progress source/ user@host:/destination/` syncs files via SSH with progress display. The `-a` preserves permissions, `-v` is verbose, `-z` compresses during transfer. <a href="https://floss.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://floss.social/tags/SystemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemAdministration</a> <a href="https://floss.social/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a>

Monospace MentorLinux tip: `lsof -i :8080` shows which process is using port 8080. Essential when you get "port already in use" errors during development or when troubleshooting service conflicts. <a href="https://floss.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://floss.social/tags/SystemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemAdministration</a>

dropbearepoll on pidfdThe Linux kernel has an interesting file descriptor called pidfd. As the name imples, it is a file descriptor to a pid or a specific process. The nice thing about it is that is guaranteed to be for the specific process you expected when you got that pidfd. A process ID, or PID, has no reuse guarantees, which means what you think process 1234 is and what the kernel knows what process 1234 is could be different because your process exited and the process IDs have looped around.pidfds are *odd*, they’re half a “normal” file descriptor and half… something else. That means some file descriptor things work and some fail in odd ways. <code>stat()</code> works, but using them in the first parameter of <code>openat()</code> will fail.One thing you can do with them is use <code>epoll()</code> on them to get process status, in fact the <code>pidfd_open()</code> manual page says:<blockquote>A PID file descriptor returned by pidfd_open() (or by clone(2) with the CLONE_PID flag) can be used for the following purposes:…A PID file descriptor can be monitored using poll(2), select(2), and epoll(7). When the process that it refers to terminates, these interfaces indicate the file descriptor as readable.</blockquote>So if you want to wait until something terminates, then you can just find the pidfd of the process and sit an <code>epoll_wait()</code> onto it. Simple, right? Except its not quite true.procps issue <a href="https://gitlab.com/procps-ng/procps/-/issues/386" rel="nofollow noopener" target="_blank">#386</a> stated that if you had a list of processes, then pidwait only finds half of them. I’d like to thank Steve the issue reporter for the initial work on this. The odd thing is that for every exited process, you get two epoll events. You get an EPOLLIN first, then a EPOLLIN | EPOLLHUP after that. Steve suggested the first was when the process exits, the second when the process has been collected by the parent.I have a collection of oddball processes, including ones that make zombies. A zombie is a child that has exited but has not been <code>wait()</code> ed by its parent. In other words, if a parent doesn’t collect its dead child, then the child becomes a zombie. The test program spawns a child, which exits after some seconds. The parent waits longer, calls <code>wait()</code> waits some more then exits. Running pidwait we can see the following epoll events:<ul><li>When the child exits, EPOLLIN on the child is triggered. At this stage the child is a zombie.</li><li>When the parent calls <code>wait()</code>, then EPOLLIN | EPOLLHUP on the child is triggered.</li><li>When the parent exits, EPOLLIN then EPOLLIN | EPOLLHUP on the parent is triggered. That is, two events for the one thing.</li></ul>If you want to use <code>epoll()</code> to know when a process terminates, then you need to decide on what you mean by that:<ul><li>If you mean it has exited, but not collected yet (e.g. a zombie possibly) then you need to select on EPOLLIN only.</li><li>If you mean the process is fully gone, then EPOLLHUP is a better choice. You can even change the <code>epoll_ctl()</code> call to use this instead.</li></ul>A “zombie trigger” (EPOLLIN with no subsequent EPOLLHUP) is a bit tricky to work out. There is no guarantee the two events have to be in the same epoll, especially if the parent is a bit tardy on their <code>wait()</code> call.<a rel="nofollow noopener" class="hashtag u-tag u-category" href="https://dropbear.xyz/tag/linux/" target="_blank">#Linux</a> <a rel="nofollow noopener" class="hashtag u-tag u-category" href="https://dropbear.xyz/tag/system-administration/" target="_blank">#systemAdministration</a>

AnubhavMan! <a href="https://hachyderm.io/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeBSD</a> pkg-upgrade(8) does not find a pending update if given the currently installed package name with version, which is the output of: pkg audit --quiet.pkg-audit(8) lacks the option to list only the package name sans version. It also lacks the option to find possibly available updates itself. Of course it does.🤬🖕As of <a href="https://hachyderm.io/tags/pkg" class="mention hashtag" rel="nofollow noopener" target="_blank">#pkg</a> v2.1.4, in order to check for pending updates of vulnerable packages, need to strip the version string from the output of pkg-audit(8)😫:# shrc=0 if ! pkg audit --fetch --recursive then rc=1 printf "\n# Checking if updates for vulnerable packages are available ...\n" # "pkg-query(8)" command is used to extract the package name sans version as # "pkg-upgrade(8)" can only cope with either that or name-version of the # updated package yet to be installed. pkg audit --quiet | xargs pkg query '%n' | xargs pkg upgrade --dry-run fiexit $rc<a href="https://hachyderm.io/tags/sysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysAdmin</a> <a href="https://hachyderm.io/tags/systemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#systemAdministration</a>

Monospace MentorInteresting read: "Everything You Should Know About Being a Linux Sysadmin, But Probably Don’t"<a href="https://linuxexpert.org/everything-you-should-know-about-being-a-linux-sysadmin-but-probably-dont/" rel="nofollow noopener" translate="no" target="_blank">https://linuxexpert.org/everything-you-should-know-about-being-a-linux-sysadmin-but-probably-dont/</a><a href="https://floss.social/tags/fun" class="mention hashtag" rel="nofollow noopener" target="_blank">#fun</a> <a href="https://floss.social/tags/systemadministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#systemadministration</a>

Tommi 🤯 @ WHY 📞9848Server monitoring 101I have been running a <a href="https://toot.aquilenet.fr/@yunohost" class="u-url mention" rel="nofollow noopener" target="_blank">@yunohost</a> server for ~5 years now, but there is one question I have never been able to answer: how loaded is my server? 👀I know, I am a terrible sysad (actually, I am not a sysad, at all), because I have no idea how to determine:<ul><li>if my server is running smoothly</li><li>if the server is under stress, and why</li><li>what applications are the heaviest</li><li>if there is the possibility of installing more apps</li><li>when peaks of stress are happening and what is causing them</li></ul>In general, I would like to understand the fundamentals of server monitoring: what are the most critical metrics and what do they mean? What parameters do I have to keep an eye on?I installed Prometheus and Grafana, but then I realized I have absolutely no idea what to do next… Do you have any suggestions?I thought about watching some video tutorials, but I would not really know how they would relate to YunoHost installations.Please, if possible reply <a href="https://forum.yunohost.org/t/yunohost-monitoring-101/37183" rel="nofollow noopener" target="_blank">in this thread of the YunoHost forum</a>, so that we can keep track of this useful information also for others in the future. 🌻Once I will have learned the basics, I would be very happy to write some pointers about this in the documentation, or an essential YunoHost Monitoring tutorial.<a href="https://pan.rent/tags/sysAd" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysAd</a> <a href="https://pan.rent/tags/YunoHost" class="mention hashtag" rel="nofollow noopener" target="_blank">#YunoHost</a> <a href="https://pan.rent/tags/askFedi" class="mention hashtag" rel="nofollow noopener" target="_blank">#askFedi</a> <a href="https://pan.rent/tags/help" class="mention hashtag" rel="nofollow noopener" target="_blank">#help</a> <a href="https://pan.rent/tags/systemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#systemAdministration</a> <a href="https://pan.rent/tags/serverMonitoring" class="mention hashtag" rel="nofollow noopener" target="_blank">#serverMonitoring</a> <a href="https://pan.rent/tags/server" class="mention hashtag" rel="nofollow noopener" target="_blank">#server</a> <a href="https://pan.rent/tags/selfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#selfHosting</a> <a href="https://pan.rent/tags/selfHost" class="mention hashtag" rel="nofollow noopener" target="_blank">#selfHost</a> <a href="https://pan.rent/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a>

Monospace Mentor🚨LIVE NOW!🚨 DevOps/SRE Instructor Live StreamOn this lovely Thursday, let's chat about <a href="https://floss.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://floss.social/tags/SystemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemAdministration</a>, <a href="https://floss.social/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosting</a>, or any other topic in the <a href="https://floss.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a> and <a href="https://floss.social/tags/SRE" class="mention hashtag" rel="nofollow noopener" target="_blank">#SRE</a> space you're interested in!<a href="https://monospacementor.com/live-stream/" rel="nofollow noopener" translate="no" target="_blank">https://monospacementor.com/live-stream/</a>

Monospace Mentor🚨LIVE NOW!🚨 Questions about <a href="https://floss.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a>, <a href="https://floss.social/tags/SoftwareEngineering" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareEngineering</a>, <a href="https://floss.social/tags/SystemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemAdministration</a>, or something like that? My weekly Office Hour is where you can ask me them. Join me for a chat!<a href="https://monospacementor.com/live-stream/" rel="nofollow noopener" translate="no" target="_blank">https://monospacementor.com/live-stream/</a>

JdeBP<a href="https://mastodonapp.uk/@robpumphrey" class="u-url mention" rel="nofollow noopener" target="_blank">@robpumphrey</a> <a href="https://mastodon.scot/@pauldoo" class="u-url mention" rel="nofollow noopener" target="_blank">@pauldoo</a> Control groups, SSH, and magic attention keys are the go-to items here.But add to them: TUI log-on on a third kernel virtual terminal (or terminal log-on on a serial or parallel port for maximum street cred), OOM score adjustments, and something that simply logs process statistics at regular intervals so that you can do some post-restart analysis.<a href="https://mastodonapp.uk/tags/SystemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemAdministration</a>

Recent searches

Search options

Administered by:

Server stats:

#systemadministration