Linux

Editorial illustration of an administrator laptop and a small homelab server linked through a cloud to remote computers.

MeshCentral with Cloudflare Tunnel — Deploy, Enroll, and Verify

A practical Linux deployment with a loopback-only origin, private administrator bootstrap, persistent data, and separate checks for the browser, agents, and remote sessions.

Editorial illustration of a mini PC server and a laptop showing a text-based remote console.

Intel AMT Serial over LAN on Proxmox: Setup, Login, and Disconnect

A practical Intel AMT SOL login setup for a Proxmox host, with device discovery, a systemd serial getty, troubleshooting, rollback, and a clear explanation of disconnecting.

Illustration of a classic black ThinkPad T420 with a red TrackPoint displaying a tiled Linux desktop on a homelab desk.

ThinkPad T420 with Arch Linux and i3 — A Practical Admin Laptop

My T420 became a useful administration laptop after an SSD and 8 GB RAM upgrade. Here is a reproducible starting point for a small Arch/i3 desktop, plus the hardware issues worth checking.

Homelab 10GbE Networking — Hardware, MikroTik Switch Setup, and Performance Tuning

Planning a 10GbE upgrade for your homelab? From MikroTik CRS switches and SFP+ cabling to Proxmox NIC tuning, this guide covers the hardware decisions, configs, and performance optimizations you need.

Linux TCP BBR Congestion Control — Enable on Proxmox, Docker, and LXC

Enable TCP BBR congestion control on your Proxmox host, Docker containers, and LXC guests. Step-by-step sysctl config, kernel module loading, and iperf3 benchmarks showing real-world throughput gains for homelab and remote streaming.

Linux Cgroups v2 Guide — Docker Container Resource Management

Learn Linux cgroups v2 for Docker resource control: memory.max and memory.hard limits, CPU quotas, I/O throttling, PSI monitoring, and compose deploy.resources configs. Includes real container debugging and OOM prevention.

Cilium CNI for K3s — eBPF Networking in the Homelab

Replace K3s default Flannel with Cilium CNI for accelerated eBPF networking, remove kube-proxy, gain Hubble observability, and enforce identity-based network policies in a lightweight homelab cluster.

Proxmox Firewall Security Hardening — IPSets, Rules, Cluster Firewall

Harden Proxmox VE with datacenter firewalls, dynamic IPSets for trusted management networks, cluster-wide security, fail2ban for web UI brute-force protection, and firewall log auditing.

Container Runtimes: runc vs crun for Docker Performance in Homelab

Compare runc and crun container runtimes for Docker on Linux. Benchmark startup times, memory profiles, and io_uring performance. Switch runtimes in ~60 seconds with a daemon.json change.

Docker Overlay2 Storage Driver — Layers, Disk Usage, Troubleshooting

Everything about Docker’s overlay2 storage driver — how overlay layers work, tracking disk usage by layer, recovering space from dangling layers, and performance tuning on ZFS-backed Proxmox hosts. Real commands, real output.