EXPLORE — THE WHOLE YGG SYSTEM

Explore

A chronological stream of everything — guides, troubleshooting, notes, analyses, projects and curated external sources.

explainer

How a given system, technology or principle works.

explainer How DNS delegation works and why it matters DNS is a delegated tree: every zone can hand responsibility one level down. Understand that and you understand why changes propagate slowly and where to look for faults. dns · networking 01/2026 explainer SELinux from the kernel to the policy: labels, modules and finding bugs How SELinux hangs off the LSM hooks, what the context on every file means, how a module is built from .te and .if, and how a policy bug is actually found. selinux · lsm · policy 11/2024 explainer DISA STIG: what it is and how severity is read What DISA STIGs are, how the CAT I/II/III severity categories are read, and why rules are not applied blindly across the board. stig · compliance · security · hardening 02/2023 explainer AppArmor: an introduction to MAC for Linux applications What AppArmor is, how mandatory access control through profiles works, and how profiles are created and controlled. apparmor · security · linux-kernel · profiles 06/2019 explainer AIX for a Linux admin: where Linux habits stop working The differences a Linux administrator meets when moving to AIX on IBM Power – tooling, LVM, LPARs, enterprise storage and backups, compared with SLES and RHEL. aix · ibm-power · lvm · lpar · sles · rhel 10/2018 explainer Clickable and participatory budgets in practice A short explanation of clickable and participatory budgets and how they work in practice, including acquisition costs (as of 2018). clickable-budget · participatory-budget · transparency · local-government 10/2018 explainer Open data – why is it worth having? What open data is, what it can look like in a town and why it makes sense – with examples of good practice from 2018. open-data · transparency · local-government 06/2018 explainer Why and how enterprise distribution maintenance packages get tested Why a fix package for an enterprise Linux distribution goes through testing before release – regression testing, multiple architectures and virtualization. qa · regression-testing · packages · virtualization 01/2018 explainer Kernel isolation: PV, HVM and OS-level virtualization in Linux The difference between paravirtualization, full hardware virtualization and OS-level virtualization (containers) in Linux. virtualization · containers · xen · kvm · namespaces 10/2017 explainer High availability and shared storage for a small XEN cluster How high availability and shared storage work for a small cluster of virtual machines on XEN. xen · high-availability · nas · san · virtualization 03/2015