linux
What cgroups v2 actually is, and how Podman and Kubernetes use it - 2026-09-18
Both Podman and Kubernetes ultimately enforce container resource limits the same way: by writing numbers into files under /sys/fs/cgroup. What "cgroup v2" changes is the shape of that filesystem, who's allowed to write to which part of it, and — as of a genuinely recent…
Building a custom WSL2 kernel on GitHub Actions: `KCFLAGS`, not `CFLAGS` - 2026-09-28
A custom WSL2 kernel is one bzImage file and one line in .wslconfig. Compiling it takes a full Linux toolchain and a quarter of an hour of four cores. GitHub Actions provides both. Standard runners are free for public repositories, with 4 CPUs and 16 GB of RAM. Private…
Checking new firewall rules with nc and Python: open, refused, or dropped - 2026-09-29
The security team has opened these flows for dar-servera: