Linux Security

Introduction to resolvectl

I’ve seen DNS leaks compromise network privacy time and again, so I’m always on the lookout for ways to tighten up my DNS configuration. As a Linux user, you’re likely familiar with the importance of DNS resolution for accessing websites and services. resolvectl is a powerful tool that comes with systemd, and it’s been a game-changer for managing DNS resolution on my systems.

What is resolvectl?

resolvectl is a command-line utility that allows you to control and configure DNS resolution on your system. It’s part of the systemd suite, which is widely used on modern Linux distributions. With resolvectl, you can set DNS servers, query DNS records, and troubleshoot DNS issues - all from the comfort of your terminal.

Introduction to btrfs Snapshots and systemd Timers

As someone who’s been running Linux systems for years, I’ve learned that managing disk usage and ensuring data integrity are crucial tasks. One effective way to achieve this is by utilizing btrfs snapshots and systemd timers. I’ve seen this go wrong when people don’t have a solid backup strategy in place, so it’s worth taking the time to set up. btrfs, a modern file system, offers advanced features like snapshotting, which allows you to create a read-only copy of your file system at a particular point in time. When combined with systemd timers, you can automate the creation and management of these snapshots, making it easier to troubleshoot disk usage issues and maintain a healthy system.

Introduction to Dependency Conflicts

I’ve seen this go wrong when updating packages on Debian-based systems - dependency conflicts can be a real headache. In 2025, many users faced problems with package updates due to these conflicts, and as of 2026, it’s still a crucial issue to understand how to handle them for maintaining a stable and secure system.

Understanding apt-pin

The real trick is using apt-pin to pin packages to specific versions, which can help resolve these conflicts. By pinning a package, you ensure it remains at a specific version, even when newer versions are available. This is particularly useful when a newer version introduces a dependency conflict.

Introduction to resolvectl

I’ve seen my fair share of DNS resolution issues on Linux, and one tool that’s always been a lifesaver is resolvectl. This command-line utility is part of the systemd suite, providing a comprehensive way to query and configure DNS settings on your system. When dealing with stubborn DNS problems, resolvectl is often the first tool I reach for. In this article, we’ll delve into its practical uses for debugging DNS issues, exploring its capabilities, and discussing how it can be used with other tools for a more robust troubleshooting experience.

Introduction to systemd-resolved

I’ve seen this go wrong when working with multi-homed Linux machines: DNS lookup surprises can be a real pain. A multi-homed machine, with multiple network interfaces each connected to a different network, can lead to DNS resolution problems. The system may not know which interface to use for DNS lookups, causing all sorts of issues. This is where people usually get burned - trying to troubleshoot DNS problems without a clear understanding of how their system is configured. To address this issue, I usually start with systemd-resolved, a tool that can help manage DNS resolution and provide more predictable behavior.

Introduction to Recovery

I’ve seen this go wrong when a package upgrade fails - it can be frustrating and even lead to system instability. When this happens, it’s essential to have a plan in place to recover your system. Fortunately, with the right tools and techniques, recovering from a botched package upgrade is relatively straightforward. In this article, we’ll explore how to use apt and snapshotting to recover from a failed package upgrade on a Linux system.

Introduction to DNS Leaks

I’ve seen DNS leaks become a major concern for Linux users, especially those relying on systemd-resolved. A DNS leak occurs when your system sends DNS queries to an unintended DNS server, potentially exposing your browsing history and other sensitive information. In this article, I’ll share my experience and insights on how to identify and troubleshoot DNS leaks using systemd-resolved and resolv.conf.

Understanding systemd-resolved

Systemd-resolved is a powerful tool that provides DNS resolution. It acts as a local DNS resolver, caching DNS queries and responses to improve performance. By default, systemd-resolved uses the DNS servers provided by your network configuration, but you can configure it to use specific DNS servers. To check the current DNS servers used by systemd-resolved, run:

Introduction to Systemd Journal Logs

I’ve worked with Linux systems for years, and one of the most powerful tools at my disposal is systemd journal logs. These logs provide a centralized location for logging system events, making it easier to troubleshoot and diagnose issues. By default, systemd stores these logs in a binary format, which can make them a bit tricky to parse and analyze. However, with the help of tools like jq and grep, you can extract valuable data from these logs.

Introduction to Disk Space Management

I’ve seen this go wrong when managing a busy /var/log directory - disk space usage can quickly become a concern. All those logs from various system services, applications, and security tools can accumulate, leading to storage issues if not properly maintained. In practice, this can be a real headache, especially when you’re dealing with limited disk space. To avoid this, we can use find and xargs to keep the /var/log directory in check.

Introduction to btrfs Snapshots

I’ve been using btrfs for years, and one of its most powerful features is its ability to create snapshots. These are read-only copies of a subvolume at a particular point in time, which can be used for backups, testing, and even recovering from accidental file deletions or modifications. Don’t bother with other file systems if you need this level of flexibility.

Creating Snapshots

To get started with btrfs snapshots, you’ll first need to ensure that your system is using btrfs. Run lsblk -f and look for the btrfs label. If you’re using btrfs, creating a snapshot is straightforward: