Linux Security

Introduction to systemd-resolved

I’ve seen this go wrong when working with multi-homed Linux machines: DNS lookup surprises can be a real pain. A multi-homed machine, with multiple network interfaces each connected to a different network, can lead to DNS resolution problems. The system may not know which interface to use for DNS lookups, causing all sorts of issues. This is where people usually get burned - trying to troubleshoot DNS problems without a clear understanding of how their system is configured. To address this issue, I usually start with systemd-resolved, a tool that can help manage DNS resolution and provide more predictable behavior.

Introduction to Recovery

I’ve seen this go wrong when a package upgrade fails - it can be frustrating and even lead to system instability. When this happens, it’s essential to have a plan in place to recover your system. Fortunately, with the right tools and techniques, recovering from a botched package upgrade is relatively straightforward. In this article, we’ll explore how to use apt and snapshotting to recover from a failed package upgrade on a Linux system.

Introduction to DNS Leaks

I’ve seen DNS leaks become a major concern for Linux users, especially those relying on systemd-resolved. A DNS leak occurs when your system sends DNS queries to an unintended DNS server, potentially exposing your browsing history and other sensitive information. In this article, I’ll share my experience and insights on how to identify and troubleshoot DNS leaks using systemd-resolved and resolv.conf.

Understanding systemd-resolved

Systemd-resolved is a powerful tool that provides DNS resolution. It acts as a local DNS resolver, caching DNS queries and responses to improve performance. By default, systemd-resolved uses the DNS servers provided by your network configuration, but you can configure it to use specific DNS servers. To check the current DNS servers used by systemd-resolved, run:

Introduction to Systemd Journal Logs

I’ve worked with Linux systems for years, and one of the most powerful tools at my disposal is systemd journal logs. These logs provide a centralized location for logging system events, making it easier to troubleshoot and diagnose issues. By default, systemd stores these logs in a binary format, which can make them a bit tricky to parse and analyze. However, with the help of tools like jq and grep, you can extract valuable data from these logs.

Introduction to Disk Space Management

I’ve seen this go wrong when managing a busy /var/log directory - disk space usage can quickly become a concern. All those logs from various system services, applications, and security tools can accumulate, leading to storage issues if not properly maintained. In practice, this can be a real headache, especially when you’re dealing with limited disk space. To avoid this, we can use find and xargs to keep the /var/log directory in check.

Introduction to btrfs Snapshots

I’ve been using btrfs for years, and one of its most powerful features is its ability to create snapshots. These are read-only copies of a subvolume at a particular point in time, which can be used for backups, testing, and even recovering from accidental file deletions or modifications. Don’t bother with other file systems if you need this level of flexibility.

Creating Snapshots

To get started with btrfs snapshots, you’ll first need to ensure that your system is using btrfs. Run lsblk -f and look for the btrfs label. If you’re using btrfs, creating a snapshot is straightforward:

Introduction to systemd-analyze

I’ve seen my fair share of slow service restarts on Linux systems, and troubleshooting them can be a real challenge. That’s where systemd-analyze comes in - a powerful tool that helps analyze and troubleshoot systemd services. In this article, I’ll share how to use systemd-analyze to identify and potentially fix issues related to slow systemd service restarts.

Understanding systemd-analyze

The real trick is to understand what systemd-analyze can do for you. It’s a command-line tool that comes bundled with systemd, providing detailed information about the boot process, services, and their dependencies. With systemd-analyze, you can identify performance bottlenecks, slow services, and even issues with the system’s boot process. Don’t bother with manual logging and debugging - systemd-analyze can save you a lot of time and effort.

Taming SSH Config Chaos

If you’re like me, you’re constantly juggling multiple servers and identities. Managing SSH connections can be a real headache, especially when dealing with different usernames, ports, and private keys. I’ve seen this go wrong when you have to remember a dozen different connection settings. The real trick is to organize your SSH client settings in a way that makes sense for your workflow.

Understanding SSH Config Files

The SSH client configuration is stored in the ~/.ssh/config file. This is where you define settings for your SSH connections, such as hostname, username, port, and private key. By default, the SSH client looks for this file and applies the settings. To get started, create a new ~/.ssh/config file using your favorite text editor:

Introduction to SSH Tunneling

I’ve seen this go wrong when people try to access remote networks without using a secure method - that’s where SSH tunneling comes in. This technique leverages an intermediate host, known as a jump host, to securely access remote networks. It’s particularly useful when direct access is restricted due to firewall rules or network policies. By using SSH to tunnel traffic through a jump host, you can establish a secure connection to a remote server or network, even if direct access is not possible.

Introduction to Third-Party Repositories

I’ve seen this go wrong when Linux users need a specific package that’s not available in their default repositories. That’s where third-party repositories come in – they provide additional packages that can enhance the functionality of your system. However, adding these repositories can sometimes lead to version conflicts and dependency issues, which can be a real headache.

Understanding the Risks

Before adding a third-party repository, it’s crucial to understand the potential risks. When you add a repository, you’re essentially trusting the repository maintainer to provide secure and compatible packages. If the repository contains malicious or outdated packages, it can compromise the security and stability of your system. I’ve noticed that several high-profile incidents in 2025 highlighted the importance of verifying the integrity of third-party repositories. Don’t bother with repositories that don’t have a clear track record of providing secure packages.