Christian Lehnert — Linux, Hacking & Faith

// archive

68 posts across 9 years

── 2026 ── 41 posts

10-17 NetBird Part 4 - Reaching the Things That Cannot Run the Agent
10-14 Secrets in Git, Done Right
10-10 Terraform or OpenTofu
10-06 NetBird Part 3 - Access Policies, or RBAC for Your Network
10-03 Azure Managed Identities
09-29 Where Should Agent Code Run
09-28 PostgreSQL PITR - Point-in-Time Recovery With WAL Archiving
09-26 Patching - The Boring Control That Stops Most Breaches, and Why It Still Does Not Happen
09-24 If a Human Can Delete Prod, That Is the System's Fault, Not the Human's
09-22 WORM - When You Actually Need Write-Once Storage, and When a Hash Chain Is Enough
09-19 It Is Always DNS - Why, and How to Actually Prove It
09-15 NetBird Part 2 - Standing Up Your Own Control Plane
09-12 Your Agent Has Your Keys
09-08 Renovate for Ansible - Stop Hand-Bumping Your requirements.yml
09-01 kube-bench - Score Your Cluster Against the CIS Benchmark in One Job
08-18 Claude's Invisible Watermark - What It Actually Proves
08-13 Init Containers - Run Something First, Then Get Out of the Way
08-08 Close the Loop - Let the AI Review Its Own Code Before You Do
08-06 Kubernetes Authentication - There Are No Users
08-04 SSH Certificates - The authorized_keys Habit You Should Have Dropped Years Ago
07-30 auditd - The Log That Tells You Who Deleted the File
07-28 kubectl debug
07-23 JWT for Sessions
07-16 Stop Shipping Lucky Training Runs - Best-of-N Selection With a Non-Negotiable Gate
07-14 Appreciate Your Package Manager
07-09 Ubuntu Touch Convergence - The Fairphone as a Desktop
07-07 bcachefs - The Best Filesystem Design That the Kernel Threw Out
07-03 ip -br - The Clean Way to Read Interface State
06-25 halt vs shutdown - The Case for the Simpler Command
06-20 FreeBSD's rc System
06-18 adduser vs useradd - The Debian Trap
06-11 Why I Use the Debian Expert Install - The Defaults You Did Not Know You Accepted
06-06 docker run --init - The Flag You Should Use on Every Container
05-19 The Trust Boundary You Did Not Know You Had - Configuration Files, Pull Requests, and the Gemini CLI Hook CVE
05-14 Bash !$ for Safer File Deletion
05-14 Ansible at Homelab Scale - How Two Critical Debian CVEs Became a Non-Event
05-12 Beginning with eBPF - Hello World and What Actually Happens When You Trace a Syscall
05-09 Day One with the FortiGate 100F - Adding a Real NGFW to a MikroTik-Native Homelab
04-23 Brave Origin on Linux - What a Nyxt User Actually Sees
03-10 Trapping SSH Attackers with endlessh-go on a VPS
02-02 Enterprise Wireless on a Budget - Cisco WLC 2504 and Aironet 3600 in a Homelab

── 2025 ── 7 posts

10-03 Understanding Pro-Palestine Demonstrations Through the Lens of Crowd Psychology
09-22 Address Space Translation
09-21 Base and Bound Protection
09-20 Why Believing in God Matters
08-30 Reflection on Gilad Sharvit’s Dynamic Repetition
08-18 Finding God in the Everyday
02-04 Finding Strength in Hashem’s Protection

── 2024 ── 5 posts

11-19 How Believing in God Shields Us From Life’s Storms
09-25 Don’t Use Kali Linux as Your Daily Driver
08-30 The Height of the Good in Rosenzweig and Levinas
04-12 A Personal Reflection on Joel Paris`s Borderline Guide
02-02 Reflections on Rachel Reilands Powerful Memoir

── 2023 ── 2 posts

07-15 The Moment I Turned to God Before Asking My Wife to Marry Me
03-03 Halakha for Engineers - When Your Code Runs on Shabbat

── 2022 ── 2 posts

12-05 What Chosen People Actually Means
06-29 The Hardened Heart of Pharaoh

── 2020 ── 2 posts

10-18 HTTP/3 and QUIC - What's About to Replace TCP
06-15 Caddy v2

── 2019 ── 2 posts

12-21 Exploring Nietzsche’s The Antichrist
08-04 Debian 10 - What Two Years Brought

── 2017 ── 4 posts

10-18 KRACK - WPA2 Broke, and Your Linux Clients Broke Worst
07-02 Debian 9 - What Actually Changed
06-21 Debian 9 Stretch - Reproducible Builds, MariaDB, and the eth0 That Won't Come Back
05-16 Timeless Wisdom from André Kostolany’s Notebook

── 2016 ── 3 posts

11-08 BorgBackup - Encrypted, Deduplicated Backups Done Right
10-21 Dirty COW - The Nine-Year-Old Root Bug Hiding in Copy-on-Write
03-02 Your Homelab Should Be a Git Repo - Bootstrapping Config Management With Ansible