https://www.msbiro.net/tags/linux/ Recent content in Linux on Cloud Native & Open Source: A Team Lead’s Working Journal https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- 0.164.0 en-us Sun, 09 Aug 2026 09:00:00 +0000 https://www.msbiro.net/posts/sctphantom-cve-2026-64564-threat-modeling/ Sun, 09 Aug 2026 09:00:00 +0000 https://www.msbiro.net/posts/sctphantom-cve-2026-64564-threat-modeling/ CVE-2026-64564 (SCTPhantom) is a critical Linux kernel use-after-free in SCTP ASCONF with a high CVSS score and a demonstrated container escape. A DevSecOps threat-modeling walkthrough of when to care, who is actually at risk, and how to prioritize patching without panic, accounting for attacker-creatable SCTP associations. https://www.msbiro.net/posts/back-to-basics-tls-pki/ Mon, 29 Jun 2026 07:49:50 +0100 https://www.msbiro.net/posts/back-to-basics-tls-pki/ TLS and PKI explained from the ground up: what an X.509 certificate actually contains, how the chain of trust works, what happens during a TLS handshake step by step, and how Kubernetes builds a full PKI with kubeadm that most engineers never read. Practical openssl commands throughout. https://www.msbiro.net/posts/apple-container-1-container-machine-hands-on/ Fri, 12 Jun 2026 09:45:00 +0100 https://www.msbiro.net/posts/apple-container-1-container-machine-hands-on/ Hands-on Apple container 1.0 test of container machine on macOS, covering home-mount security, networking, systemd, and Docker or Podman alternatives. https://www.msbiro.net/posts/cve-2026-31431-copy-fail-linux-kernel-privilege-escalation/ Fri, 01 May 2026 09:00:00 +0100 https://www.msbiro.net/posts/cve-2026-31431-copy-fail-linux-kernel-privilege-escalation/ CVE-2026-31431 Copy Fail is a local privilege escalation in the Linux kernel exploitable with a 732-byte Python script. This post covers what it is, how to fix it, what to do when patching isn't immediate, and why runtime detection is the control that actually matters. https://www.msbiro.net/posts/ubuntu-2604-lts-security-container-workloads/ Thu, 30 Apr 2026 07:00:00 +0100 https://www.msbiro.net/posts/ubuntu-2604-lts-security-container-workloads/ Ubuntu 26.04 LTS 'Resolute Raccoon' just shipped. For teams running RHEL or Ubuntu on servers, this post breaks down what actually changed in security and container/Kubernetes workloads compared to 24.04 LTS, and whether it justifies starting the golden master rebuild now. https://www.msbiro.net/posts/linux-70-what-platform-security-leaders-should-know/ Thu, 16 Apr 2026 10:11:00 +0000 https://www.msbiro.net/posts/linux-70-what-platform-security-leaders-should-know/ Linux 7.0 is not a single-headline release, but it closes several real security gaps that cloud-native platforms have been working around for years. Here is what platform and security leaders should understand, plan for, and ask their teams. https://www.msbiro.net/posts/back-to-basics-containers-linux-processes/ Fri, 20 Feb 2026 06:31:29 +0000 https://www.msbiro.net/posts/back-to-basics-containers-linux-processes/ Containers are Linux processes with namespaces and cgroups, nothing more. This article breaks down what Kubernetes securityContext, resource limits, and container escapes actually do at the kernel level, and shows you how to debug containers using standard Unix tools like nsenter and /proc. https://www.msbiro.net/posts/back-to-basics-sshd-hardening/ Wed, 03 Dec 2025 16:03:07 +0000 https://www.msbiro.net/posts/back-to-basics-sshd-hardening/ Back-to-basics sshd_config hardening for 2025: opinionated settings to disable root login, enforce key auth, modern ciphers, and timeouts. Secure your Linux servers from the ground up—no Kubernetes required https://www.msbiro.net/posts/cryptsetup-protect-entire-disk-or-usb-key-notes-technical-notebook/ Mon, 15 Jul 2024 18:30:03 +0000 https://www.msbiro.net/posts/cryptsetup-protect-entire-disk-or-usb-key-notes-technical-notebook/ A hands-on guide using cryptsetup to encrypt entire disks and USB keys on Linux, based on real tests and examples from the technical_notebook repository. Learn essential commands, concepts, and practical tips to secure your portable drives with open-source tools and biometric access.