Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
The next circle of security hell
Gentoo developer Michał Górny revisits his 2021 'modern packager's security nightmare' and argues things have got worse: vulnerabilities arrive at unprecedented rates, rushed fixes and API breaks pile up on downstream packagers, and the community risks a breaking point where everyone bundles and fends for themselves.
3 min · 705 words
Fixing KIO copy to USB stick and network filesystems
KDE developer Méven Car tells the story of fixing a 15-year-old high-priority KIO bug where copies to USB sticks and network shares reported progress against the page cache rather than the device, using sync_file_range() so Dolphin's copy now finishes when the data is really on the stick and network progress tracks the server.
14 min · 3,190 words
A build log for the slurptop, a home-built cyberpunk luggable computer using a Ryzen 7 mini PC, a custom 82-key mechanical keyboard, an integrated trackball and a UPS that runs on swappable 24V Kobalt power tool batteries, covering design, power delivery, bill of materials, filaments and battery life.
10 min · 2,252 words
Ben Hardill describes his Lenovo X1 Carbon developing crashing tabs and BTRFS checksum errors, confirming faulty soldered RAM with memtest86+, and working around the bad addresses with the Linux memmap kernel parameter instead of replacing a module, arguing soldered RAM is especially painful amid today's shortage-driven memory prices.
5 min · 1,068 words
Full Disk Encryption on Fedora w/ TPM2
A hands-on walkthrough from apalrd's adventures on how LUKS full disk encryption works on Fedora and how to enroll a key into the TPM2 with systemd-cryptenroll, including PCR choices, PIN options, crypttab edits and rebuilding the initramfs, as a first step toward a business-wide Linux rollout.
4 min · 923 words
Introducing Amutable Foundations
Amutable opens a private preview of Amutable Foundations, a Linux-based system engineered to be provable at every level, with hardware attestation of every machine, software image, and configuration for machine identity and compliance auditing.
7 min · 1,542 words
Tell your network to explain itself and then some
A unixdigest.com tutorial that goes beyond using arp-scan to list devices on a home network, showing how to track and identify every machine and run your own DNS so you can block ads and telemetry without relying on an ISP, Google or Cloudflare.
5 min · 1,044 words
Putting Linux on my RTX Spark laptop because I don't have a Microsoft account
Josephine Pfeiffer gets Arch Linux ARM running on the Windows-only ASUS ProArt P16 with NVIDIA's N1X chip, publishing a bootable installer and patches, comparing CPU performance against Windows in 7-Zip, explaining the 116 GiB unified memory split, and benchmarking local Qwen inference.
6 min · 1,453 words
Finding a home amidst the wreckage
Eskild Hustvedt describes growing apathetic as free software projects and Linux distros embrace LLMs, and how he found a new home in Chimera Linux, which takes a stand against LLM-generated contributions, along with other distros, BSDs and non-LLM forks that do the same.
3 min · 677 words
ARP! Tell your network to explain itself
Ben Calderon gives a friendly walkthrough of the Address Resolution Protocol: why local networks need both IP and MAC addresses, how arp-scan lists every device with its manufacturer, what an ARP exchange looks like in Wireshark before a ping, and how to inspect the Linux neighbour table.
2 min · 475 words
Does Moving a GPU Server's Request Loop into the Kernel Save CPU?
Eunomia tested bpf-gpu-server, which lets eBPF and io_uring own a GPU server's TCP path so no user thread touches a request. Against an efficient epoll baseline its CPU use and latency matched; the post explains where per-request cost really goes and what actually moved the numbers.
9 min · 2,015 words
Adrian Vovk announces GNOME OS Preview, a new edition built from the latest stable GNOME release, so GNOME OS is no longer only a nightly OS for developers and testers. He recaps recent improvements such as zswap support, the Test Center app and Toolpak, and explains who should try Preview now.
4 min · 923 words
Epic's EAC2 v2 seems fairly easily bypassable
Matthew Garrett looks at Epic’s Easy Anti-Cheat Linux v2 announcement and argues the design still looks bypassable in practice—walking through why userland anti-cheat on Linux is a hard security problem.
3 min · 683 words
Using Artificial Intelligence to reverse engineer hardware
Christian F.K. Schaller describes using Claude Code with a Windows VM capturing USB traffic to write a working Linux SANE driver for his Plustek 8200i film scanner within hours, then reusing the setup to patch the kernel and libcamera for his laptop's MIPI camera, and releasing hw-harness, a generic toolkit to help AI agents reverse engineer undocumented hardware.
8 min · 1,760 words
PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)
pwn.ai's write-up of how Vercel's $1M Sandbox challenge led to a Linux networking bug where guest-controlled checksum metadata could rewrite an IPv4 header after validation, escalating from a 32-byte host-memory disclosure to a full guest-to-host KVM escape, with the upstream fix and patch timeline.
18 min · 4,202 words
A critical essay arguing the Linux kernel is going all-in on AI: dropping Assisted-by tags for LLM-generated patches, what that means for tracing defects and copyright, and the attitude that AI never fails, only the humans using it.
6 min · 1,461 words
My self-hosted infrastructure with Incus OS
My self-hosted infrastructure with Incus OS](2026-10-15-selfhosting-infrastructure-incus-os.html) Written by Solène, on 15 October 2026. Tags: selfhosting security linux containers
14 min · 3,147 words
On the 30th anniversary of KDE's original announcement, long-time contributor Cornelius Schumacher reflects on joining the project in 1999, the values of digital freedom it embodies, how its community keeps renewing itself, and the goals it set for enterprise, documentation and styling.
2 min · 462 words
Awesome Gaming on Linux Without Cheating
Epic explains why Easy Anti-Cheat's Linux support lagged Windows and introduces EAC Linux v2, which uses existing platform features instead of a kernel driver: signed kernels and modules, TPM 2.0, Secure Boot, measured boot, IOMMU, kernel lockdown, disabled kexec and BPF LSM, with an FAQ on keys, distros and Steam Deck.
8 min · 1,930 words
yet another place where a linux man page is inaccurate
A short systems note on initstate(3) and related RNG APIs: where the Linux man page wording diverges from observed behavior, with a segfault surprise along the way.
2 min · 493 words