systemd service template with security hardening — copy-paste ready - tchncs

The systemd service file I copy for every new service, with security hardening directives included by default. Includes: restart-on-failure, journal logging, environment file support, and the security options most tutorials skip (NoNewPrivileges, ProtectSystem=strict, ProtectHome, PrivateTmp). Also covers systemd timers as a cron replacement, and debugging commands.

Turn any script into a proper systemd service — template with security hardening - tchncs

Wrote up the systemd service template I copy-paste for every new service. Includes: - Basic service file with restart-on-failure - Security hardening directives (NoNewPrivileges, ProtectSystem, ProtectHome, PrivateTmp) - Timer unit as a cron replacement - Environment file support - Debugging commands The security hardening options are the part most tutorials skip. They are basically free — add 5 lines and your service can no longer escalate privileges, write to the filesystem outside its working directory, or access /home.

Linux networking commands cheat sheet — 40 commands you actually use - tchncs

Put together the networking commands I actually reach for regularly. Organized by what you are trying to do rather than alphabetically: - Diagnostics (ping, dig, ss, mtr) - Interface management (ip addr/route/link) - Traffic analysis (tcpdump, nethogs, iftop) - Curl tricks (timing, resolve, retry) - SSH tunnels (local, remote, SOCKS, background) - Firewall (iptables + nftables equivalents) Nothing obscure — just the stuff that comes up when something breaks at 3 AM.

Contributing To The Linux Kernel

HEADS UP! This blog is written WITHOUT ANY ASSISTANCE from/by AI. A human typed all the words;mistakes are all mine. Well,to start with, I am very proud and NOT complacent about the progress I have…

Contributing To The Linux Kernel

HEADS UP! This blog is written WITHOUT ANY ASSISTANCE from/by AI. A human typed all the words;mistakes are all mine. Well,to start with, I am very proud and NOT complacent about the progress I have…

Debian -- News -- Updated Debian 13: 13.4 released