CATALOGUE — ALL YGG CONTENT
Catalogue
Everything that is here, in one place: browsable by type, topic and state. The stream shows the newest, the catalogue the complete list.
01 / SELECTION
Infrastructure stabilization Stabilizing an organization’s technical backbone: administration rules, documentation, a platform for testing and hosting, and a link to the infrastructure one level up. Multi-tenant platform A web application for multiple organizations on a shared core: separate data and settings for each client, a modular architecture and security from day one. Czech Digital and Information Agency: activity reports What actually moved in the digitalization of the Czech state – read through the data rather than the press releases.
02 / THE WHOLE CATALOGUE
link The Grug Brained Developer On humility towards complexity – why simplicity is an engineering discipline, not a lack of ambition. note OpenSSH 9.0: scp over SFTP and hybrid key exchange An April 2022 release in which scp stopped using the legacy protocol and the default key exchange gained a post-quantum component. note Podman: containers without a daemon and without root A container tool with no permanently running daemon that can run as an ordinary user and generate systemd units. project SELinux development in an enterprise distribution Working on SELinux in an enterprise Linux distribution: policies, their bugs and passing the knowledge on to colleagues. link openSUSE MicroOS: a system that does not update while running An immutable system with transactional updates on btrfs snapshots, where applications live in containers rather than in the root filesystem. note The end of CentOS 8 and the distributions that replaced it After the December 2020 announcement that CentOS 8 would end, two independent RHEL rebuilds appeared during 2021 – AlmaLinux and Rocky Linux. project Security certification against DISA STIG Preparing a minimal enterprise distribution for DISA STIG certification: architecture, test adaptation, mitigations and judging which rules apply to the system at all. link The European Commission open source software strategy A strategy adopted in October 2020 in which the European Commission committed to publishing its own software, contributing back and setting up an open source programme office. note WireGuard in the mainline Linux kernel The WireGuard VPN protocol landed directly in the mainline Linux kernel in March 2020, without needing a separately maintained module. project Infrastructure as Code with Ansible Idempotent infrastructure deployment with Ansible – system and applications, roles driven by host groups, and contributions to an OpenStack deployment. explainer AppArmor: an introduction to MAC for Linux applications What AppArmor is, how mandatory access control through profiles works, and how profiles are created and controlled. project Cloud platform test automation A framework for automated testing of OpenStack cloud platform updates, storage integration and CI/CD – including a period leading the test team. project A model railway controlled from Kubernetes A model railway fully controlled and monitored from a small Intel NUC computer via Arduino, with the applications running in a Kubernetes cluster. explainer AIX for a Linux admin: where Linux habits stop working The differences a Linux administrator meets when moving to AIX on IBM Power – tooling, LVM, LPARs, enterprise storage and backups, compared with SLES and RHEL. explainer Clickable and participatory budgets in practice A short explanation of clickable and participatory budgets and how they work in practice, including acquisition costs (as of 2018). explainer Open data – why is it worth having? What open data is, what it can look like in a town and why it makes sense – with examples of good practice from 2018. explainer Why and how enterprise distribution maintenance packages get tested Why a fix package for an enterprise Linux distribution goes through testing before release – regression testing, multiple architectures and virtualization. explainer Kernel isolation: PV, HVM and OS-level virtualization in Linux The difference between paravirtualization, full hardware virtualization and OS-level virtualization (containers) in Linux. note Debian 9 (Stretch): MariaDB instead of MySQL, X without root A June 2017 release in which MariaDB became the default database and the X server stopped requiring root privileges. guide Cacti for a small virtualized infrastructure How to deploy Cacti on a dedicated host and use SNMP to watch load on both the hosts and the virtual machines – paravirtualized and fully virtualized alike. guide ProxyJump: through a bastion without holding tunnels in your head Getting scp, rsync and git through a jump host by writing it into ssh_config once. link Let's Encrypt: out of beta, free certificates for everyone A certificate authority that left beta in April 2016 and made automated, free, domain-validated TLS certificates available through the ACME protocol. note Removing a package while breaking dependencies Force-removing a single package on a Debian-based system without letting apt pull the rest of a dependency chain with it. guide A read-only root on Raspbian that survives a cold power-off How to turn Raspbian on an SD card into a read-only root so the device survives being unplugged, and how to turn it into an image for mass deployment.
03 / CONTENT TYPES — INDEX
13 guide / how-to A practical procedure for solving a specific problem or task. 2 troubleshooting Problem → symptoms → diagnosis → cause → fix. 4 reference Configuration, commands, parameters and cheat sheets to look up. 10 explainer How a given system, technology or principle works. 13 note A short finding that does not need a full article. 10 link
04 / CONTENT STATES
draft unfinished text; still changing
outdated superseded — points to a newer solution
active the project is running and evolving
experimental works, but with no guarantees — under testing
archived unmaintained, read-only
unreachable the link target did not respond during the last check
Old content is never deleted — if it still has value it stays, clearly labelled with its state and the date it was last verified.