~/blog

Linux & Terminal Insights

Tutorials, tips, and lessons learned from the command line

Systems Engineering June 2026

The Immutable Workstation: Building Debian 13 with LUKS2, BTRFS, and Timeshift Snapshots

Complete, production-ready methodology for manually installing Debian with enterprise-grade encryption, snapshot rollback capability, and modern filesystem design. From gdisk partitioning to LUKS2 with Argon2id, BTRFS subvolume architecture with @/@home/@snapshots separation, building grub-btrfs from source, Timeshift integration, and Wayland-only GNOME setup. Battle-tested enterprise workstation architecture for Debian.

Security February 2026

AppArmor in Practice: Mandatory Access Control for Linux Admins

Deep dive into Mandatory Access Control with AppArmor profiles. Understand why MAC beats DAC for service isolation, explore path-based profiling vs SELinux labels, and implement production-hardened profiles for nginx and Python applications. Complete profile creation and management workflow.

Development February 2026

Distributing Tools the Unix Way: Building a Homebrew Tap

Why package managers matter for tool distribution. Deep dive into Homebrew taps as GitHub-backed formula registries, formula anatomy with SHA256 verification, and the complete workflow from local script to distributed CLI. Stop using curl | bash and distribute properly.

Desktop Customization September 2025

Transforming Kali: Building a Custom GNOME Security Workstation

Customizing a penetration testing environment requires balancing aesthetics with security integrity. Why ergonomics matter during long security engagements, choosing GNOME on Wayland for security isolation, and which tools survived the theming process. Practical focus on workflow efficiency.