HTTPS for a Domestic-Only Home Server — Let’s Encrypt DNS-01 + DuckDNS Wildcard
When inbound from abroad is blocked (country restriction / CGNAT) and port-80 HTTP-01 fails, use certbot DNS-01 with a DuckDNS TXT hook to obtain a wildcard ...
Welcome. This is the English section of the blog. Browse recent posts below, or use the sidebar to jump to a category.
When inbound from abroad is blocked (country restriction / CGNAT) and port-80 HTTP-01 fails, use certbot DNS-01 with a DuckDNS TXT hook to obtain a wildcard ...
The cause of the ‘cannot copy to startup-config when ZeroTouch is enabled’ error and the repeating ZTP retry logs on a factory-default Arista switch, how to ...
The terms that show up when you make a switch pair redundant — VLAN/SVI (L2·L3), LACP/Port-Channel/MLAG·VLT (link & chassis redundancy), VRRP/VIP·FHRP (g...
When a 25G link won’t come up, how do you test the switch’s GBIC modules and reach a conclusion? Cross-analyze Tx/Rx optical power and Bias Current, the errd...
Confirm the interface name → disable cloud-init networking → write the netplan yaml → apply safely with netplan try. Includes three options for whether to de...
From install to exit shortcuts, pros and cons, and clean removal — comparing screen, minicom, picocom, and tio for USB-serial console access
From first console login to Management1 IP assignment, VRF check, admin account creation, confirming SSH is enabled, saving config, and testing SSH access fr...
How to verify, step by step, link negotiation, transceiver detection, FEC mode match, error counters, and throughput/latency in a Server A 25G NIC ↔ Arista 2...
Comparing the three services by abstraction level and responsibility boundary, where each sits between IaaS and PaaS, and the 7-step procedure for how a Pod ...
Netlify is limited and Vercel isn’t? — Let’s fix the terminology first, then map the real boundaries of the free tiers (build minutes, bandwidth, commercial ...
Bring up Harbor on a temporary port first, move the images, then take over the original port in a short cutover — switching registry:2 to Harbor with no node...
What the STATUS column really means, the field-selector pitfall, and how to tell whether Completed is normal — a practical reference for quickly isolating br...
The standard workflow for rewriting Git history: investigate → back up → interactive rebase (drop/reword) → resolve conflicts → filter-branch (author/date) →...
Create an Ubuntu VM with a single multipass launch. From installation to resource options, cloud-init, and a libvirt/KVM comparison for dev and test environm...
Use zip -r for multiple files and tar -czvf to bundle directories. Learn the difference between gzip and bzip2 with hands-on examples
Claude Code forgets everything when a session ends. agentmemory auto-records your work via hooks and re-injects it next session, eliminating re-explaining
Separate author with includeIf, separate auth with SSH host aliases — and accounts switch automatically with cd. Four methods compared step by step
From a simple bot workflow (stale.yml) to a multi-job build/deploy workflow (deploy.yml) — learn the GitHub Actions execution model by line-by-line analysis ...
One gh auth switch line changes who your git push goes as. Credential helper internals, PAT issuance, account switching, and real-world pitfalls in one guide
The disk visible to the OS may be a Virtual Disk — use smartctl with the megaraid option to inspect Physical Disks behind the RAID Controller
K8s updates must be understood as two layers — API-level strategy (A) and deployment pattern (B). From Rolling/Blue-Green/Canary comparison to host-kernel-co...
Treating AI models like Docker — push/pull models from existing registries like Docker Hub and Harbor via OCI Artifacts, the new standard
SEO series Part 4. Diagnose remaining Search Console issues by four categories, then apply noindex meta automation in seo.html and trailing slash fixes in na...
Inventory registration, SSH/sudo setup, scale.yml –limit execution, and solving the fact cache 404 error — a real-world walkthrough
docker compose down alone leaves volumes and images behind — situational delete options and full reset methods
Use wsl –install -d Ubuntu-22.04 to install the version you want, set the default distribution, with a Microsoft Store alternative
Use wsl –unregister to delete a distribution, wsl –uninstall to remove WSL entirely, or disable WSL from Windows Features
Log in as root with wsl -u root, then reset the password using passwd
Regular formatting leaves SSD data recoverable — compare Secure Erase, Rufus+ISO, and DiskPart clean all
Harbor is an Enterprise-grade Private OCI Registry — a standard repository for pushing/pulling container images in Kubernetes and OpenStack