--- title: "#linux articles | Hashnode" description: "Explore 16,323 articles tagged #linux on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/linux" --- Tag # #linux 16,323 posts · 14,294 followers [Nathanael FETUE](https://hashnode.com/@nathanael-fetue) · [3h ago](https://hashnode.com/posts/pairing-a-roce-request-with-its-ack-and-why-the-queue-pair-number-is-not-enough/6af44489a4d949f08425e1af) ### [Pairing a RoCE request with its ACK, and why the queue-pair number is not enough](https://pegasus-nathanael-tech.hashnode.dev/pairing-a-roce-request-with-its-ack-and-why-the-queue-pair-number-is-not-enough?utm_source=hashnode&utm_medium=feed) An RC packet carries only its destination QP, so a write and its ACK name different QPs. The key that pairs them in XDP, and the ACKs not to trust. 4 min read · [pegasus-nathanael-tech.hashnode.dev](https://pegasus-nathanael-tech.hashnode.dev/pairing-a-roce-request-with-its-ack-and-why-the-queue-pair-number-is-not-enough?utm_source=hashnode&utm_medium=feed) [bian Chloe](https://hashnode.com/@chloebian) · [18h ago](https://hashnode.com/posts/beyond-the-firecracker-escape-why-boxlite-s-network-architecture-matters/6af36e37785dd578d13efea6) ### [Beyond the Firecracker Escape: Why BoxLite’s Network Architecture Matters](https://blog.boxlite.ai/beyond-the-firecracker-escape-why-boxlite-s-network-architecture-matters?utm_source=hashnode&utm_medium=feed) A VM’s security boundary includes its network path. BoxLite’s default user-space networking makes a consequential difference. 4 min read · [blog.boxlite.ai](https://blog.boxlite.ai/beyond-the-firecracker-escape-why-boxlite-s-network-architecture-matters?utm_source=hashnode&utm_medium=feed) [Emir Mrkaljevic](https://hashnode.com/@emirmrkaljevic) · [16h ago](https://hashnode.com/posts/before-you-reverse-engineer-a-usb-device-check-if-someone-already-did/6af3898322fff8b635e8c5d4) ### [Before you reverse engineer a USB device, check if someone already did](https://emirmrkaljevic.hashnode.dev/before-you-reverse-engineer-a-usb-device-check-if-someone-already-did?utm_source=hashnode&utm_medium=feed) I built usb-rea to take a USB capture of a vendor app, infer the protocol, and write a pyusb driver. The earlier posts in this series are about that second half: the overall pipeline, handshakes, name 8 min read · [emirmrkaljevic.hashnode.dev](https://emirmrkaljevic.hashnode.dev/before-you-reverse-engineer-a-usb-device-check-if-someone-already-did?utm_source=hashnode&utm_medium=feed) [Daanial Farrukh](https://hashnode.com/@daanial) · [20h ago](https://hashnode.com/posts/immutable-backups-ransomware-cannot-touch-what-a-hardened-repository-really-requires/6af3530a74003289715242e5) ### [Immutable Backups Ransomware Cannot Touch — What a Hardened Repository Really Requires](https://quabin.hashnode.dev/immutable-backups-ransomware-cannot-touch-what-a-hardened-repository-really-requires?utm_source=hashnode&utm_medium=feed) An immutability tick box is not ransomware protection. What a hardened Linux repository and a locked dedupe appliance need, and how to prove it. 12 min read · [quabin.hashnode.dev](https://quabin.hashnode.dev/immutable-backups-ransomware-cannot-touch-what-a-hardened-repository-really-requires?utm_source=hashnode&utm_medium=feed) [Christopher Smith](https://hashnode.com/@et-ducky) · [22h ago](https://hashnode.com/posts/a-stop-job-is-running-at-linux-shutdown-and-how-to-find-the-unit/6af33e5f75a9ec13b893b28d) ### [A Stop Job Is Running at Linux Shutdown and How to Find the Unit](https://etducky.hashnode.dev/a-stop-job-is-running-at-linux-shutdown-and-how-to-find-the-unit?utm_source=hashnode&utm_medium=feed) This post first appeared on the ET Ducky blog. I build ET Ducky, an RMM that reads ETW on Windows and eBPF on Linux. "A stop job is running for" is a status line systemd prints on the console during s 4 min read · [etducky.hashnode.dev](https://etducky.hashnode.dev/a-stop-job-is-running-at-linux-shutdown-and-how-to-find-the-unit?utm_source=hashnode&utm_medium=feed) [KarmaBox](https://hashnode.com/@karmabox) · [22h ago](https://hashnode.com/posts/sshole-went-from-patch-to-exploitation-in-four-days-an-incident-review/6af337abae905ad118f2d37e) ### [\*sshole Went From Patch to Exploitation in Four Days: An Incident Review](https://karmabox.hashnode.dev/sshole-went-from-patch-to-exploitation-in-four-days-an-incident-review?utm_source=hashnode&utm_medium=feed) Timeline, root cause, blast radius, the read-only checks to run now, and the patch routine we would put on a calendar. 17 min read · [karmabox.hashnode.dev](https://karmabox.hashnode.dev/sshole-went-from-patch-to-exploitation-in-four-days-an-incident-review?utm_source=hashnode&utm_medium=feed) [Darajat Mohammed](https://hashnode.com/@darajat) · [1d ago](https://hashnode.com/posts/cracking-overthewire-bandit-levels-16-21-scanning-ports-borrowing-power/6af38c7faffc8a2bfc2e7013) ### [Cracking OverTheWire Bandit (Levels 16–21): Scanning Ports, Borrowing Power and Reading Scheduled Jobs](https://darajat.hashnode.dev/cracking-overthewire-bandit-levels-16-21-scanning-ports-borrowing-power?utm_source=hashnode&utm_medium=feed) A chronological log documenting Linux command line mastery, file permissions and system security fundamentals. 16 min read · [darajat.hashnode.dev](https://darajat.hashnode.dev/cracking-overthewire-bandit-levels-16-21-scanning-ports-borrowing-power?utm_source=hashnode&utm_medium=feed) [c-wind](https://hashnode.com/@c-wind) · [1d ago](https://hashnode.com/posts/shipping-one-rust-codebase-to-windows-macos-and-linux-universal-binaries-vendored-openssl-musl-and-a-gated-signing-step/6af31416b8d623461512d33b) ### [Shipping One Rust Codebase to Windows, macOS and Linux: Universal Binaries, Vendored OpenSSL, musl and a Gated Signing Step](https://mistlab.hashnode.dev/shipping-one-rust-codebase-to-windows-macos-and-linux-universal-binaries-vendored-openssl-musl-and-a-gated-signing-step?utm_source=hashnode&utm_medium=feed) Releasing a cross-platform Rust app: macOS universal binaries with lipo, vendored OpenSSL, measuring glibc requirements, a static musl CLI, and a gated minisign signing job. 10 min read · [mistlab.hashnode.dev](https://mistlab.hashnode.dev/shipping-one-rust-codebase-to-windows-macos-and-linux-universal-binaries-vendored-openssl-musl-and-a-gated-signing-step?utm_source=hashnode&utm_medium=feed) [Kausar Raza](https://hashnode.com/@knowledgemarkg) · [1d ago](https://hashnode.com/posts/ventoy-not-booting-windows-11-fix-security-violation-secure-boot-and-driver-errors/6af305d908f0c6dd77b64b6c) ### [Ventoy Not Booting Windows 11? Fix Security Violation, Secure Boot and Driver Errors](https://knowledgemarkg.hashnode.dev/ventoy-not-booting-windows-11-fix-security-violation-secure-boot-and-driver-errors?utm_source=hashnode&utm_medium=feed) Ventoy is the easiest way to carry Windows 11, a couple of Linux ISOs and a rescue disk on one USB stick: you install it once, then just copy ISO files onto the drive. When it works, it is brilliant. 13 min read · [knowledgemarkg.hashnode.dev](https://knowledgemarkg.hashnode.dev/ventoy-not-booting-windows-11-fix-security-violation-secure-boot-and-driver-errors?utm_source=hashnode&utm_medium=feed) [c-wind](https://hashnode.com/@c-wind) · [1d ago](https://hashnode.com/posts/an-auto-updater-that-doesn-t-trust-its-download-server-minisign-verify-before-parse-and-rollback-protection/6af273d3d52a483b3ddd7416) ### [An Auto-Updater That Doesn't Trust Its Download Server: minisign, Verify-Before-Parse and Rollback Protection](https://mistlab.hashnode.dev/an-auto-updater-that-doesn-t-trust-its-download-server-minisign-verify-before-parse-and-rollback-protection?utm_source=hashnode&utm_medium=feed) Secure auto-update design: minisign Ed25519 signatures and trusted comments, verify before parsing, rollback protection, safe extraction and per-platform install with rollback. 10 min read · [mistlab.hashnode.dev](https://mistlab.hashnode.dev/an-auto-updater-that-doesn-t-trust-its-download-server-minisign-verify-before-parse-and-rollback-protection?utm_source=hashnode&utm_medium=feed) [2](https://hashnode.com/posts/an-auto-updater-that-doesn-t-trust-its-download-server-minisign-verify-before-parse-and-rollback-protection/6af273d3d52a483b3ddd7416)