ShieldedBytes

Introduction to systemd Service Restart Policies

I’ve seen systemd save the day in many situations, thanks to its ability to manage services, sockets, and other system resources. One of its key features is the ability to define restart policies for services, which can help prevent cascading failures in the event of a service crash or termination. In this article, we’ll dive into how to configure systemd service restart policies to improve the reliability and resilience of your Linux systems.

Introduction to Linux Rescue and Recovery

I’ve seen this go wrong when a Linux system becomes unbootable - it can be a real nightmare. Whether it’s a failed update, a misconfigured kernel, or a corrupted filesystem, having a reliable method for recovery is crucial. One of the most effective ways to rescue a borked Linux boot is by using a USB rescue drive in combination with the chroot command. This approach allows you to access and repair your system from a safe environment.

Introduction to Systemd Logs

I’ve seen this go wrong when you’re dealing with a huge volume of log data - it can be overwhelming, making it tough to identify critical issues. That’s why I’m going to show you how to use journalctl filters and log rotate tweaks to tame those noisy systemd logs.

Understanding Journalctl

The real trick is to get familiar with journalctl, a command-line utility that lets you query and manipulate systemd logs. It’s got a powerful filtering mechanism that lets you narrow down log entries based on timestamp, priority, and unit name. Let’s start with the basics:

Introduction to Background Jobs

I’ve seen this go wrong when running commands in the background using the ampersand (&) symbol at the end of a command. The command keeps running even after the terminal is closed, which can be useful, but sometimes these background jobs consume excessive system resources or cause other issues. In practice, identifying and managing these rogue processes becomes essential to prevent system instability or crashes.

Identifying Rogue Processes with pgrep

The real trick is using the pgrep command to identify processes based on their name, user, or other attributes. For example, to find all processes running with the name “httpd”, you can use:

Introduction to Log Management

I’ve seen log management become a major pain point for many Linux admins. The sheer volume of log data can be overwhelming, making it tough to identify important events. That’s where journalctl and logrotate come in - two powerful tools that can help you tame the noise in your Linux logs.

Understanding journalctl

journalctl is a command-line utility that’s part of the systemd suite. It provides a flexible way to view, filter, and analyze log data. To get started with journalctl, you can use the following command to view all system logs:

Introduction to Package Pinning

I’ve found package pinning to be a lifesaver on Debian-based systems, allowing you to specify the exact version of a package to install or keep. This is particularly useful when managing dependencies and avoiding potential conflicts or compatibility issues. I’ve seen this go wrong when a package update breaks a critical application, so it’s essential to have control over package versions.

Understanding Package Pinning

To pin a package, you’ll need to create a file in the /etc/apt/preferences.d/ directory with a .pref extension. This file should contain the package name and the desired version. For example, to pin the nginx package to version 1.23.4, you would create a file called nginx.pref with the following contents:

Introduction to Debugging Linux Network Connectivity

When dealing with network connectivity issues in Linux, I’ve found the ss command to be one of the most useful tools in my toolkit. ss stands for “socket statistics” and is used to dump socket statistics. It can display stats for PACKET sockets, TCP sockets, UDP sockets, DCCP sockets, RAW sockets, Unix domain sockets, and more. In practice, this command has helped me identify and resolve a wide range of network connectivity issues.

Introduction to Local Port Conflicts

I’ve seen this go wrong when running a multi-service Linux host - local port conflicts can be a real headache. These conflicts arise when two or more services attempt to bind to the same port, causing one or more of them to fail. To troubleshoot local port conflicts, I usually start with the ss command and nftables on a Linux system.

Understanding Port Conflicts

A port conflict occurs when a service tries to bind to a port that is already in use by another service. This can happen when multiple services are configured to use the same port, or when a service is not properly configured to use a unique port. Don’t bother with the traditional netstat command - the ss command is a more modern replacement.

Introduction to Reverse Proxies

I’ve seen this go wrong when people expose their homelab services directly to the internet - it’s a security risk waiting to happen. Exposing multiple services can make them vulnerable to attacks and unauthorized access. One way to mitigate this risk is to use a reverse proxy, which acts as an intermediary between your services and the internet. In practice, this means you can expose a single IP address and port to the internet, while keeping your services hidden behind the reverse proxy.

Introduction to systemd-resolved

I’ve seen systemd-resolved cause its fair share of issues with split DNS and local hostnames, but it’s actually a powerful tool for managing DNS resolution on Linux systems. As part of the systemd ecosystem, it aims to improve the DNS resolution process and provide better integration with other systemd services.

Understanding Split DNS

Split DNS, or split-horizon DNS, is a technique used to provide different DNS responses based on the client’s location. This is commonly used in environments where internal and external DNS zones need to be separated - think of a company with an internal DNS zone for its internal network and a separate external DNS zone for its public-facing services. Don’t bother with split DNS if you don’t need it, but if you do, systemd-resolved can be configured to handle it.