Author: Voxfor Lifetime.

Linux

Which sysctl.d File Wins? Check Before You Apply It

A sysctl.d override is not decided by directory priority alone. The loader first chooses one file when the same filename exists in…

Aug 17, 202615 min read

Security

nft --check Is Not the Whole Firewall Reload Test

nft --check accepted the candidate ruleset reproduced for this article and left the active stateless ruleset hash unchanged. That was only the…

Aug 16, 202619 min read

Linux

See the VM Definition Before virt-install Creates Anything

A virt-install command can become a reviewable XML artifact before it becomes a virtual machine. In the original demonstration, domain-plan.xml was written…

Aug 16, 202617 min read

Windows

A WIM Can Pass Verification and Still Be the Wrong Image

Two WIM files can be internally healthy and still represent different deployment decisions. In the reproduced lab for this article, wimlib-imagex verify…

Aug 16, 202613 min read

Web Hosting

Preflight a cPanel DNS Zone Without Touching Production

A copied DNS zone is not ready for a cPanel change window merely because named-checkzone exits with status 0. In the reproduced…

Aug 16, 202616 min read

AI & Machine Learning

How Long Should Ollama Keep a Model Loaded?

Ollama can retain a model after a request, let it expire, or unload it immediately. Those choices trade warm-request latency for memory…

Aug 16, 202618 min read

Database

Follow Late Writes Through a Meilisearch Index Swap

Meilisearch can exchange two index identities atomically. It cannot decide what your application should do with writes that arrive after the replacement…

Aug 15, 202616 min read

Website performance

NGINX Dry Run Shows Which Requests It Would Delay or Reject

NGINX can calculate a request-rate decision without applying it. With limit_req_dry_run on, the client still receives the normal application response, while $limit_req_status…

Aug 15, 202613 min read

Advanced Wordpress Development

Debug a WordPress 404 by Matching the Rewrite Rule First

A custom WordPress URL can return 404 even when wp rewrite list --match prints rows. The rows are only candidate regular expressions.…

Aug 15, 202613 min read

Linux

zstd Frame Integrity Does Not Verify Your Restored Files

A successful zstd integrity test answers one narrow question: can the compressed frame be decoded without an error? It does not prove…

Aug 15, 202614 min read

DevOps

Docker Compose Interpolation: Prove Which Value Wins

Docker Compose interpolation is the substitution that turns expressions such as ${IMAGE_TAG} and ${HOST_PORT:-8080} into a resolved application model. It happens before…

Aug 15, 202614 min read

Database

pg_dump Is Already Consistent—When Is --snapshot Needed?

A normal pg_dump already produces an internally consistent view of one PostgreSQL database. Passing --snapshot does not make that single dump “more…

Aug 15, 202614 min read

Linux

Audit a systemd Journal File with journalctl --verify

A successful journalctl --verify run can establish that one systemd journal file is internally consistent at the bytes you tested. It cannot…

Aug 14, 202613 min read

Security

Verify an SSH Alias with ssh -G Before It Connects

Which server will ssh app-prod actually contact? The answer is not necessarily the last Host block you remember editing. OpenSSH may combine…

Aug 14, 202612 min read

DevOps

Recover a Deleted Git Branch Before Its Commit Is Pruned

At 12:02 UTC, incident/checkout-fix pointed to a two-commit change in a Git 2.47.3 fixture. Seconds later, the lab deleted the branch, leaving…

Aug 14, 202618 min read

DevOps

Composer’s Simulated Platform Can Hide a Host Mismatch

In a reproduced Composer 2.10.2 lab, the project validated, wrote a lock file, and passed a dry install against PHP 8.1.99 plus…

Aug 14, 202617 min read

Website performance

Measure Brotli and Gzip on the Assets You Actually Serve

On one 730,410-byte HTML, CSS, and JavaScript corpus, Brotli level 6 produced an 8,502-byte file in a median 3.936 ms. Gzip level…

Aug 14, 202617 min read

Linux

Postfix Sender Relay Maps Need a Warning-Safe Preflight

A malformed sender-relay row produced an uncomfortable result in the lab: postmap exited with status zero, created a database, and still warned…

Aug 14, 202613 min read

Database

PostgreSQL Serializable Stops the Write Skew Repeatable Read Commits

Two concurrent PostgreSQL transactions each saw two doctors on call, changed different rows, and committed under REPEATABLE READ. The final count was…

Aug 14, 202613 min read

VPS Hosting

A Global IPv6 Address Does Not Prove VPS Egress

A Linux VPS can show a scope-global IPv6 address and still have no usable IPv6 path. The address belongs to one interface;…

Aug 14, 202618 min read

Linux

Check fstab Before Rebooting, Including Warnings

Before a remote Linux server reboots, an fstab change window needs four durable facts: the known-good table, the exact proposed row, a…

Aug 14, 202615 min read