The kernel primitives, init systems, and tooling behind the world's most-deployed OS.https://danielcosenza.com/en-usFri, 17 Jul 2026 00:00:00 GMThttps://danielcosenza.com/posts/lx-capabilities/https://danielcosenza.com/posts/lx-capabilities/Understand Linux capability sets, exec transitions, file attributes, systemd and container boundaries, with a least-privilege audit workflow.Sat, 11 Jul 2026 00:00:00 GMTLinuxcapabilitiessecuritykernelhttps://danielcosenza.com/posts/lx-fix-ext4-xfs-fsck/https://danielcosenza.com/posts/lx-fix-ext4-xfs-fsck/The correct order of operations for repairing a corrupted Linux filesystem, and what to do when the repair tool reports it can't fix something automatically.Sat, 11 Jul 2026 00:00:00 GMTLinuxext4xfsfsckhttps://danielcosenza.com/posts/lx-fix-high-load-io-wait/https://danielcosenza.com/posts/lx-fix-high-load-io-wait/Load average climbs while top shows idle CPU — this usually means processes stuck waiting on I/O, not CPU; here's how to find which one.Sat, 11 Jul 2026 00:00:00 GMTLinuxfixperformanceiohttps://danielcosenza.com/posts/lx-fix-kernel-oops-dmesg/https://danielcosenza.com/posts/lx-fix-kernel-oops-dmesg/The difference between an oops and a full panic, how to read an oops call trace to identify the responsible driver, and when it's safe to ignore.Sat, 11 Jul 2026 00:00:00 GMTLinuxkerneldmesgdebugginghttps://danielcosenza.com/posts/lx-fix-kernel-panic-bad-module/https://danielcosenza.com/posts/lx-fix-kernel-panic-bad-module/Recovering a Linux system that panics or hangs during boot right after a kernel or driver update, using boot menu options that don't require external rescue media.Sat, 11 Jul 2026 00:00:00 GMTLinuxkernel-panicbootgrubhttps://danielcosenza.com/posts/lx-fix-selinux-denials/https://danielcosenza.com/posts/lx-fix-selinux-denials/A service failing only with SELinux enforcing needs the actual denial read from audit.log and fixed with a targeted policy module, not disabled protection.Sat, 11 Jul 2026 00:00:00 GMTLinuxfixselinuxsecurityhttps://danielcosenza.com/posts/lx-fix-systemd-resolved-dns-conflict/https://danielcosenza.com/posts/lx-fix-systemd-resolved-dns-conflict/Editing /etc/resolv.conf directly on a systemd-resolved system silently fails or reverts — the correct way to override DNS settings that persists.Sat, 11 Jul 2026 00:00:00 GMTLinuxsystemd-resolveddnsnetworkinghttps://danielcosenza.com/posts/lx-fix-systemd-start-limit-hit/https://danielcosenza.com/posts/lx-fix-systemd-start-limit-hit/systemctl reports start-limit-hit when systemd's crash-loop protection trips — clearing the rate limit is a distinct step after fixing the real cause.Sat, 11 Jul 2026 00:00:00 GMTLinuxfixsystemdserviceshttps://danielcosenza.com/posts/lx-fix-zombie-processes/https://danielcosenza.com/posts/lx-fix-zombie-processes/Why a zombie process is actually harmless dead weight rather than a resource leak, and how to find the parent process that's actually responsible for clearing it.Sat, 11 Jul 2026 00:00:00 GMTLinuxprocesseszombiedebugginghttps://danielcosenza.com/posts/lx-howto-apparmor-profile/https://danielcosenza.com/posts/lx-howto-apparmor-profile/Building a working AppArmor profile from scratch with complain mode and the log-based profile generator, rather than guessing at rules upfront.Sat, 11 Jul 2026 00:00:00 GMTLinuxapparmormacsecurityhttps://danielcosenza.com/posts/lx-howto-auditd-monitoring/https://danielcosenza.com/posts/lx-howto-auditd-monitoring/Configuring the Linux audit daemon to watch specific files, commands, and syscalls, then actually query the resulting logs for something useful.Sat, 11 Jul 2026 00:00:00 GMTLinuxhowtoauditdsecuritymonitoringhttps://danielcosenza.com/posts/lx-howto-bind-mounts-overlayfs/https://danielcosenza.com/posts/lx-howto-bind-mounts-overlayfs/Using bind mounts to expose one directory at multiple paths, and OverlayFS to layer a writable surface on read-only content — the base of containers.Sat, 11 Jul 2026 00:00:00 GMTLinuxmountoverlayfsfilesystemhttps://danielcosenza.com/posts/lx-howto-bpftrace-tracing/https://danielcosenza.com/posts/lx-howto-bpftrace-tracing/Using bpftrace's scripting language to observe live kernel behavior — syscalls, function calls, scheduler events — with lower overhead than older tools.Sat, 11 Jul 2026 00:00:00 GMTLinuxebpfbpftracetracinghttps://danielcosenza.com/posts/lx-howto-cgroups-resource-limits/https://danielcosenza.com/posts/lx-howto-cgroups-resource-limits/Using systemd's resource-control unit directives to cap CPU, memory, and IO for a service, and confirming the kernel actually enforces them.Sat, 11 Jul 2026 00:00:00 GMTLinuxcgroupssystemdresource-limitshttps://danielcosenza.com/posts/lx-howto-dkms-kernel-module/https://danielcosenza.com/posts/lx-howto-dkms-kernel-module/Packaging a kernel module with DKMS so it automatically rebuilds against every new kernel version, instead of breaking silently on the next kernel update.Sat, 11 Jul 2026 00:00:00 GMTLinuxdkmskernel-modulesdrivershttps://danielcosenza.com/posts/lx-howto-network-namespaces/https://danielcosenza.com/posts/lx-howto-network-namespaces/Creating a separate network stack on the same machine to test firewall rules or networked software without touching the host's real network.Sat, 11 Jul 2026 00:00:00 GMTLinuxnamespacesnetworkingiproute2https://danielcosenza.com/posts/lx-howto-sysctl-tuning/https://danielcosenza.com/posts/lx-howto-sysctl-tuning/A complete walkthrough reading, changing, and persisting kernel runtime parameters — with a few of the most commonly tuned examples explained, not just listed.Sat, 11 Jul 2026 00:00:00 GMTLinuxhowtosysctlkerneltuninghttps://danielcosenza.com/posts/lx-howto-systemd-nspawn/https://danielcosenza.com/posts/lx-howto-systemd-nspawn/Creating and running a lightweight systemd-nspawn container — useful for isolated testing environments without a full container runtime's overhead.Sat, 11 Jul 2026 00:00:00 GMTLinuxhowtosystemd-nspawncontainershttps://danielcosenza.com/posts/lx-io-uring/https://danielcosenza.com/posts/lx-io-uring/Understand io_uring queues, submissions, completions, workers, polling, resource registration, cancellation and security before benchmarking.Sat, 11 Jul 2026 00:00:00 GMTLinuxio_uringkernelperformancehttps://danielcosenza.com/posts/lx-news-260-release/https://danielcosenza.com/posts/lx-news-260-release/Linux 2.6.0 arrived on December 17, 2003 with preemption, O(1) scheduling, NPTL support, SELinux, ALSA and a modern device model.Sat, 11 Jul 2026 00:00:00 GMTLinuxnewskernelreleasehttps://danielcosenza.com/posts/lx-news-b4-patch-tooling/https://danielcosenza.com/posts/lx-news-b4-patch-tooling/b4 turned lore.kernel.org message IDs into reproducible patch-series workflows while preserving email review, trailers and maintainer control.Sat, 11 Jul 2026 00:00:00 GMTLinuxkernelgitworkflowhttps://danielcosenza.com/posts/lx-news-centos-stream-shift/https://danielcosenza.com/posts/lx-news-centos-stream-shift/The December 2020 CentOS Linux timeline change moved focus to Stream, ended CentOS 8 updates in 2021, and prompted Rocky and AlmaLinux.Sat, 11 Jul 2026 00:00:00 GMTLinuxcentosred-hatrocky-linuxhttps://danielcosenza.com/posts/lx-news-ibm-redhat/https://danielcosenza.com/posts/lx-news-ibm-redhat/IBM announced its Red Hat agreement on October 28, 2018 and closed it July 9, 2019 for $190 cash per share and roughly $34 billion equity value.Sat, 11 Jul 2026 00:00:00 GMTLinuxnewsred-hatibmbusinesshttps://danielcosenza.com/posts/lx-news-kernel-code-of-conduct/https://danielcosenza.com/posts/lx-news-kernel-code-of-conduct/How the kernel community's often-combative culture led to a September 2018 policy change, and Torvalds' own public acknowledgment his conduct needed to change.Sat, 11 Jul 2026 00:00:00 GMTLinuxkernelcommunitygovernancehttps://danielcosenza.com/posts/lx-news-preempt-rt-merged/https://danielcosenza.com/posts/lx-news-preempt-rt-merged/Announced by Torvalds in September 2024 and landing in kernel 6.12, PREEMPT_RT ended two decades as an out-of-tree patchset needing a custom kernel build.Sat, 11 Jul 2026 00:00:00 GMTLinuxnewskernelreal-timepreempt-rthttps://danielcosenza.com/posts/lx-news-ubuntu-decade-support/https://danielcosenza.com/posts/lx-news-ubuntu-decade-support/Canonical's September 2021 decision to extend Ubuntu 14.04 and 16.04 LTS support to a full decade, and what it signaled about its long-term LTS commitment.Sat, 11 Jul 2026 00:00:00 GMTLinuxubuntucanonicalltshttps://danielcosenza.com/posts/lx-oom-killer/https://danielcosenza.com/posts/lx-oom-killer/Distinguish global, cgroup, cpuset and policy-driven OOM events; interpret victim scoring and build memory controls from forensic evidence.Sat, 11 Jul 2026 00:00:00 GMTLinuxoom-killermemorykernelhttps://danielcosenza.com/posts/lx-page-cache-writeback/https://danielcosenza.com/posts/lx-page-cache-writeback/Understand Linux page-cache reads, buffered writes, dirty throttling and durability boundaries without confusing write completion with stable storage.Sat, 11 Jul 2026 00:00:00 GMTLinuxpage-cachememorykernelhttps://danielcosenza.com/posts/lx-udev-device-model/https://danielcosenza.com/posts/lx-udev-device-model/Trace Linux hardware from kernel device registration through sysfs, uevents, devtmpfs and udev rules to stable, collision-tested user-facing links.Sat, 11 Jul 2026 00:00:00 GMTLinuxudevdeviceskernelhttps://danielcosenza.com/posts/lx-fix-grub2-broken-config/https://danielcosenza.com/posts/lx-fix-grub2-broken-config/A kernel update leaves the system unable to boot into any menu entry — how to regenerate a working GRUB2 configuration from a rescue environment.Fri, 10 Jul 2026 00:00:00 GMTLinuxfixgrubboothttps://danielcosenza.com/posts/lx-howto-automatic-security-updates/https://danielcosenza.com/posts/lx-howto-automatic-security-updates/Configuring unattended-upgrades (Debian/Ubuntu) and dnf-automatic (RHEL/Fedora) to apply security patches automatically, with sane limits on scope.Fri, 10 Jul 2026 00:00:00 GMTLinuxhowtosecurityupdatesautomationhttps://danielcosenza.com/posts/lx-howto-network-bonding/https://danielcosenza.com/posts/lx-howto-network-bonding/Combining two or more network interfaces into a single bonded interface with NetworkManager — for redundancy, throughput, or both, by mode.Fri, 10 Jul 2026 00:00:00 GMTLinuxhowtonetworkingbondinghttps://danielcosenza.com/posts/lx-boot/https://danielcosenza.com/posts/lx-boot/Trace a modern Linux boot across firmware, boot manager, kernel, initramfs, real root, and PID 1 with safe diagnostics for each handoff.Thu, 09 Jul 2026 00:00:00 GMTLinuxbootgrubkernellinuxhttps://danielcosenza.com/posts/lx-cgroups/https://danielcosenza.com/posts/lx-cgroups/Understand cgroup v2 hierarchy, controller delegation, CPU, memory, I/O and PID controls, using safe systemd workflows and kernel evidence.Thu, 09 Jul 2026 00:00:00 GMTLinuxcgroupscontainerskernellinuxhttps://danielcosenza.com/posts/lx-ebpf/https://danielcosenza.com/posts/lx-ebpf/Understand eBPF programs, verifier, maps, hooks, BTF and CO-RE, privileges and operational risks without treating kernel execution as a sandbox.Thu, 09 Jul 2026 00:00:00 GMTLinuxebpfobservabilitykernellinuxhttps://danielcosenza.com/posts/lx-fix-disk-full/https://danielcosenza.com/posts/lx-fix-disk-full/df shows free space but writes fail with ENOSPC — three distinct root causes look identical from outside; here's how to tell them apart.Thu, 09 Jul 2026 00:00:00 GMTLinuxfixfilesystemlinuxhttps://danielcosenza.com/posts/lx-fix-dns-resolution/https://danielcosenza.com/posts/lx-fix-dns-resolution/Ping by IP works but hostnames don't resolve — a systematic path through resolv.conf, systemd-resolved, and nsswitch.conf finds where it breaks.Thu, 09 Jul 2026 00:00:00 GMTLinuxfixdnsnetworkinghttps://danielcosenza.com/posts/lx-fix-grub-rescue/https://danielcosenza.com/posts/lx-fix-grub-rescue/Your machine boots straight into a minimal grub rescue prompt instead of Linux. Here's how to get back to a working bootloader without reinstalling the OS.Thu, 09 Jul 2026 00:00:00 GMTLinuxfixbootgrublinuxhttps://danielcosenza.com/posts/lx-fix-service-permission-denied/https://danielcosenza.com/posts/lx-fix-service-permission-denied/A service won't start, logs are unhelpful, and file ownership looks correct — SELinux or AppArmor's invisible permission layer is usually why.Thu, 09 Jul 2026 00:00:00 GMTLinuxfixselinuxapparmorsecuritylinuxhttps://danielcosenza.com/posts/lx-fix-too-many-open-files/https://danielcosenza.com/posts/lx-fix-too-many-open-files/An application errors with EMFILE or ENFILE even though the system isn't obviously out of resources — find and raise the actual limit.Thu, 09 Jul 2026 00:00:00 GMTLinuxfixulimitfile-descriptorshttps://danielcosenza.com/posts/lx-history/https://danielcosenza.com/posts/lx-history/Trace Linux from Torvalds' 1991 announcement and early licensing through distributions, maintainership, Git and today's release process.Thu, 09 Jul 2026 00:00:00 GMTLinuxhistorylinuxhttps://danielcosenza.com/posts/lx-howto-luks-encryption/https://danielcosenza.com/posts/lx-howto-luks-encryption/A complete walkthrough encrypting a disk or partition with LUKS, from initial setup through mounting it automatically (with a key file) at boot.Thu, 09 Jul 2026 00:00:00 GMTLinuxhowtoluksencryptionsecurityhttps://danielcosenza.com/posts/lx-howto-lvm/https://danielcosenza.com/posts/lx-howto-lvm/A complete walkthrough from raw disks to a mounted, resizable logical volume — physical volumes, volume groups, and logical volumes explained as you build them.Thu, 09 Jul 2026 00:00:00 GMTLinuxhowtolvmstoragehttps://danielcosenza.com/posts/lx-howto-monitor-resources/https://danielcosenza.com/posts/lx-howto-monitor-resources/A practical toolkit for watching CPU, memory, disk, and network usage live — going beyond top to actually find what's causing a resource problem.Thu, 09 Jul 2026 00:00:00 GMTLinuxhowtomonitoringperformancelinuxhttps://danielcosenza.com/posts/lx-howto-nftables-firewall/https://danielcosenza.com/posts/lx-howto-nftables-firewall/A complete, working nftables ruleset for a typical server — default-deny inbound, stateful connection tracking, and a handful of explicit allowed services.Thu, 09 Jul 2026 00:00:00 GMTLinuxhowtonftablesfirewalllinuxhttps://danielcosenza.com/posts/lx-howto-ssh-keys/https://danielcosenza.com/posts/lx-howto-ssh-keys/A complete walkthrough generating an SSH key pair, deploying it correctly, and disabling password authentication safely — without locking yourself out.Thu, 09 Jul 2026 00:00:00 GMTLinuxhowtosshsecuritylinuxhttps://danielcosenza.com/posts/lx-howto-strace-debugging/https://danielcosenza.com/posts/lx-howto-strace-debugging/Using strace to see exactly which system calls a misbehaving program makes — often the fastest way to diagnose a problem with no useful logs.Thu, 09 Jul 2026 00:00:00 GMTLinuxhowtostracedebugginghttps://danielcosenza.com/posts/lx-howto-systemd-timer/https://danielcosenza.com/posts/lx-howto-systemd-timer/A complete, working example converting a nightly backup cron job into a properly supervised systemd timer, with logging and failure visibility cron never gave you.Thu, 09 Jul 2026 00:00:00 GMTLinuxhowtosystemdautomationlinuxhttps://danielcosenza.com/posts/lx-kernel-modules/https://danielcosenza.com/posts/lx-kernel-modules/Build, inspect, sign, load and remove a minimal out-of-tree Linux module inside a disposable VM with matching kbuild artifacts and safe rollback.Thu, 09 Jul 2026 00:00:00 GMTLinuxkernel-moduleskerneldevelopmentlinuxhttps://danielcosenza.com/posts/lx-mac-security/https://danielcosenza.com/posts/lx-mac-security/Compare SELinux label policy and AppArmor profiles through enforcement, logging, safe policy changes, containers and a denial-first audit workflow.Thu, 09 Jul 2026 00:00:00 GMTLinuxselinuxapparmorsecuritylinuxhttps://danielcosenza.com/posts/lx-namespaces/https://danielcosenza.com/posts/lx-namespaces/Understand Linux namespace types, ownership, lifetime and composition, then inspect containers without mistaking an isolated view for security.Thu, 09 Jul 2026 00:00:00 GMTLinuxnamespacescontainerskernellinuxhttps://danielcosenza.com/posts/lx-news-30th-anniversary/https://danielcosenza.com/posts/lx-news-30th-anniversary/On August 25, 2021 Linux's community marked 30 years since Torvalds' announcement while distinguishing the post from later source releases.Thu, 09 Jul 2026 00:00:00 GMTLinuxnewsanniversarylinuxhttps://danielcosenza.com/posts/lx-news-50-release/https://danielcosenza.com/posts/lx-news-50-release/Linux 5.0 shipped on March 3, 2019: a normal development release whose major-number change deliberately did not signal a rewrite or ABI break.Thu, 09 Jul 2026 00:00:00 GMTLinuxnewsreleaselinuxhttps://danielcosenza.com/posts/lx-news-foundation-formed/https://danielcosenza.com/posts/lx-news-foundation-formed/On January 22, 2007 OSDL and the Free Standards Group merged as the Linux Foundation, combining development support with standards work.Thu, 09 Jul 2026 00:00:00 GMTLinuxnewslinux-foundationgovernancehttps://danielcosenza.com/posts/lx-news-git-created/https://danielcosenza.com/posts/lx-news-git-created/After the kernel lost free BitKeeper access in 2005, Torvalds built Git into a usable distributed source manager in roughly ten days.Thu, 09 Jul 2026 00:00:00 GMTLinuxnewsgittoolinghttps://danielcosenza.com/posts/lx-news-kernel-10/https://danielcosenza.com/posts/lx-news-kernel-10/Linux 1.0 arrived on March 14, 1994 as the first stable-number kernel, targeting 386/486 PCs with TCP/IP and a growing driver/filesystem base.Thu, 09 Jul 2026 00:00:00 GMTLinuxnewskernelreleasehttps://danielcosenza.com/posts/lx-news-rust-support/https://danielcosenza.com/posts/lx-news-rust-support/Released December 11, 2022, Linux 6.1 became the first kernel version to officially accept Rust as a second language for kernel development, alongside C.Thu, 09 Jul 2026 00:00:00 GMTLinuxnewsrustkernellinuxhttps://danielcosenza.com/posts/lx-pkg-managers/https://danielcosenza.com/posts/lx-pkg-managers/Compare APT/dpkg, DNF4/DNF5/RPM and Pacman workflows, trust, transactions, upgrades and recovery without mixing incompatible repositories.Thu, 09 Jul 2026 00:00:00 GMTLinuxpackage-managementaptdnflinuxhttps://danielcosenza.com/posts/lx-proc-sys/https://danielcosenza.com/posts/lx-proc-sys/Read procfs and sysfs safely across PID, user, mount and network namespaces; inspect volatile kernel state without leaking secrets or changing hardware.Thu, 09 Jul 2026 00:00:00 GMTLinuxprocsysfskernellinuxhttps://danielcosenza.com/posts/lx-systemd/https://danielcosenza.com/posts/lx-systemd/Understand systemd unit loading, dependency and ordering graphs, service readiness, activation, credentials, sandboxing and forensic debugging.Thu, 09 Jul 2026 00:00:00 GMTLinuxsystemdinitlinuxhttps://danielcosenza.com/posts/lx-vfs/https://danielcosenza.com/posts/lx-vfs/Understand Linux VFS path lookup, dentries, inodes, open-file descriptions, mounts, page cache, permissions and safe resolution across filesystems.Thu, 09 Jul 2026 00:00:00 GMTLinuxvfsfilesystemkernellinux