#Linux

• > OS-Level Sandboxing in C

  I found the slides and notes that I had prepared for a workshop I gave last year and decided to write a post about that topic. Here we will explore how we can sandbox a process to protect it from memory-corruption vulnerabilities and malicious code injection. To be honest, I’m not really …
  Read more...

• > Cloudflare Tunnels Basics

  Cloudflare provides a solution that will help you make your server, which is hosted at your home under NAT, visible from the internet—did you know? It also gives you all the features of Cloudflare, such as DDoS protection for your website. It’s completely free and easy to configure. As an …
  Read more...

• > Linux CPU Core Isolation for a Process

  Today we will isolate a CPU core, deny the Linux scheduler from using it, and assign it to a specific process. It can be used to ensure CPU core availability for critical processes and can be useful in many cases (especially on CPUs with asymmetric cores, like E and P cores in Intel desktop CPUs). …
  Read more...

• > Raspberry Pi SD Card Wear Optimization

  Raspberry Pi is a perfect choice for a tiny home server for low load levels, especially the RPi 5, which is powerful enough, cheap, and small in size. The only problem is that it works with SD cards, which die very fast if you use them on a server. Let’s see what we can do to reduce SD card …
  Read more...