Christian Lehnert — Linux, Hacking & Faith

// archive

125 posts across 11 years

── 2026 ── 69 posts

09-03 NetBird - A Self-Hosted Mesh Where Your Machines Just Find Each Other
09-01 kube-bench - Score Your Cluster Against the CIS Benchmark in One Job
08-29 run0 vs sudo - Escalating Privilege Without a setuid Binary
08-27 Minimus - Near-Zero-CVE Base Images You Can Just Use
08-25 Phishing-Resistant Auth - Why Your MFA Does Not Stop Phishing, and What Does
08-20 How Software Development Changes From Here - Reading the Bitkom 2036 Study as a Practitioner
08-18 Claude's Invisible Watermark - What It Actually Proves
08-15 systemd Service Hardening - The Sandbox You Already Have and Do Not Use
08-13 Init Containers - Run Something First, Then Get Out of the Way
08-11 The Sidecar Pattern - Bolting Capabilities Onto a Pod Without Touching the App
08-08 Close the Loop - Let the AI Review Its Own Code Before You Do
08-06 Kubernetes Authentication - There Are No Users
08-04 SSH Certificates - The authorized_keys Habit You Should Have Dropped Years Ago
08-01 Kubernetes Secrets Are Not Secret
07-30 auditd - The Log That Tells You Who Deleted the File
07-28 kubectl debug
07-25 Stop Writing Kubernetes YAML by Hand
07-23 JWT for Sessions
07-21 Storing Passwords - Why the Fast Hash Is the Bug
07-18 Security by Design - The Phrase Is Worthless, the Practice Is Not
07-16 Stop Shipping Lucky Training Runs - Best-of-N Selection With a Non-Negotiable Gate
07-14 Appreciate Your Package Manager
07-11 Linux From Scratch Again
07-09 Ubuntu Touch Convergence - The Fairphone as a Desktop
07-08 perf Beyond top - Profiling CPU, Memory, and I/O Properly
07-07 bcachefs - The Best Filesystem Design That the Kernel Threw Out
07-04 Ubuntu Touch on a Fairphone 4
07-03 ip -br - The Clean Way to Read Interface State
07-02 Non-Human Identity - The Larger Half of the Identity Problem Nobody Manages
06-30 Neko - The Self-Hosted Browser-in-a-Container That Earns Its Place
06-27 tank-os-with-llms - The Hardened Container I Run Claude Code and Gemini CLI In
06-25 halt vs shutdown - The Case for the Simpler Command
06-23 Reboot Last - The Windows Habit That Hurts Linux and FreeBSD Operators
06-20 FreeBSD's rc System
06-18 adduser vs useradd - The Debian Trap
06-16 Backup at 64 KB/s - When CIFS Stops Being a Backup Protocol
06-13 systemd boot instead of grub
06-11 Why I Use the Debian Expert Install - The Defaults You Did Not Know You Accepted
06-09 Modern init Scripts - Writing Systemd Unit Files Like a Pro
06-06 docker run --init - The Flag You Should Use on Every Container
06-04 A Proxmox Hypervisor Down - Recovery, Postmortem, and the Hardening That Followed
06-02 tank-os - The Right Way to Run AI Agents on Linux
05-30 Zombies with ps - You Cannot Kill What Is Already Dead
05-28 Separate Your Changes - The Kernel's Patch Rules Applied to LLM-Assisted Coding
05-26 The Blast Radius of Standing Access - What the Spring 2026 Supply Chain Attacks Revealed About Developer Endpoints
05-23 Tokenmaxxing - The Lines-of-Code Mistake in 2026 Clothing
05-21 Recovering Deleted Binaries from /proc
05-19 The Trust Boundary You Did Not Know You Had - Configuration Files, Pull Requests, and the Gemini CLI Hook CVE
05-16 Four Root Exploits in Three Weeks. Stop Blaming Linus
05-14 Bash !$ for Safer File Deletion
05-14 Ansible at Homelab Scale - How Two Critical Debian CVEs Became a Non-Event
05-12 Beginning with eBPF - Hello World and What Actually Happens When You Trace a Syscall
05-09 Day One with the FortiGate 100F - Adding a Real NGFW to a MikroTik-Native Homelab
05-06 The Shabbat-Aware Homelab
05-03 The Art of Reading Support Files - Systematic Linux Diagnostics Before You Reach for strace
04-30 Why Your Router Cannot Just Switch ISPs
04-28 Reverse Engineering ISP Hardware - Inside the Sagemcom F@st 5370
04-25 MikroTik 5G without MikroTik Connectivity - provisioning a carrier eSIM by hand
04-23 Brave Origin on Linux - What a Nyxt User Actually Sees
04-22 Forward-Auth for Your Homelab With Tinyauth
04-20 Resurrecting a flash card with f3 and dd
04-12 Self-Hosting SearXNG
03-20 Building a Public MCP Server - pdf.c0xl.ch from FastMCP to Production
03-10 Trapping SSH Attackers with endlessh-go on a VPS
02-02 Enterprise Wireless on a Budget - Cisco WLC 2504 and Aironet 3600 in a Homelab
01-22 WireGuard Through CG-NAT
01-14 Installing Proxmox on a Dell PowerEdge VRTX
01-12 Practical OSINT in the Real World
01-01 What Is OSINT? A Beginner’s Guide to Open Source Intelligence

── 2025 ── 14 posts

12-31 Kiddushin and the Mystery of Becoming One
10-03 Understanding Pro-Palestine Demonstrations Through the Lens of Crowd Psychology
09-28 Shaping Reality with Schopenhauer and Kabbalah
09-22 Address Space Translation
09-21 Base and Bound Protection
09-20 Why Believing in God Matters
09-16 Your Friendly Guide to Archiving Files in Unix with tar
08-30 Reflection on Gilad Sharvit’s Dynamic Repetition
08-18 Finding God in the Everyday
07-07 Why Lenovo ThinkPads Are the Linux Power User’s Dream Machine
06-12 Living with Autism and Anxiety Through the Torah’s Light
05-30 Why Ubuntu Has Become the “Windows” of the Linux World
03-15 Reflections on The Sirens Dance by Anthony Walker
02-04 Finding Strength in Hashem’s Protection

── 2024 ── 7 posts

11-19 How Believing in God Shields Us From Life’s Storms
10-23 Why I Think Snap is Terrible
09-25 Don’t Use Kali Linux as Your Daily Driver
08-30 The Height of the Good in Rosenzweig and Levinas
04-12 A Personal Reflection on Joel Paris`s Borderline Guide
02-02 Reflections on Rachel Reilands Powerful Memoir
01-18 Why Debian Will Always Be My Linux Distribution of Choice

── 2023 ── 4 posts

11-21 An Introduction to .NET MAUI in .NET 8
07-15 The Moment I Turned to God Before Asking My Wife to Marry Me
05-20 Why Remnants of a Life on Paper Still Echo in My Mind
03-03 Halakha for Engineers - When Your Code Runs on Shabbat

── 2022 ── 4 posts

12-05 What Chosen People Actually Means
09-20 Learning to Love Through the Lens of Borderline Personality Disorder
06-29 The Hardened Heart of Pharaoh
06-14 Unlocking the Mystery of systemd

── 2021 ── 2 posts

12-15 Log4Shell
06-19 Vaultwarden - Self-Hosting the Bitwarden Server

── 2020 ── 4 posts

10-18 HTTP/3 and QUIC - What's About to Replace TCP
08-22 Tzedakah - Why Charity Loses What Hebrew Names
06-15 Caddy v2
03-30 Why Pi-hole Might Just Be Your New Best Friend Online

── 2019 ── 3 posts

12-23 Gustave Le Bon’s Timeless Dive into Mass Psychology
12-21 Exploring Nietzsche’s The Antichrist
08-04 Debian 10 - What Two Years Brought

── 2018 ── 4 posts

12-02 Why The Psychology of Money Feels More Relevant Than Ever in Today’s Wild Financial Ride
11-08 WireGuard - The VPN That's About to Change Everything
04-22 Reflection on Heschel's The Sabbath
01-15 Spectre and Meltdown - What Hardware Trust Looks Like After January 3

── 2017 ── 7 posts

10-18 KRACK - WPA2 Broke, and Your Linux Clients Broke Worst
09-19 The Two Torahs
08-09 ZFS on the Homelab - Checksums, Snapshots, and the End of Silent Bit Rot
07-02 Debian 9 - What Actually Changed
06-21 Debian 9 Stretch - Reproducible Builds, MariaDB, and the eth0 That Won't Come Back
05-16 Timeless Wisdom from André Kostolany’s Notebook
02-18 Self-Hosting Email

── 2016 ── 7 posts

11-08 BorgBackup - Encrypted, Deduplicated Backups Done Right
10-21 Dirty COW - The Nine-Year-Old Root Bug Hiding in Copy-on-Write
07-15 What Tefillah Actually Is
05-10 Diving Into the High-Stakes World of Hedge Funds with Sebastian Mallaby's More Money Than God
04-22 Let's Encrypt - What Free Universal HTTPS Actually Changes
03-14 The Essays of Warren Buffett - Timeless Wisdom for Investors and Leaders
03-02 Your Homelab Should Be a Git Repo - Bootstrapping Config Management With Ansible