Linux Server Admin with Fexingo: Sysadmin, Bash, and Server Engineering

Episode 54 of Linux Server Admin with Fexingo dives into Logical Volume Manager (LVM) for flexible server storage. Lucas and Luna walk through a real-world scenario: a web server running out of disk space on its root partition. They explain how LVM's physical volumes, volume groups, and logical volumes let you resize, snapshot, and migrate storage without downtime. Specific commands include pvcrea...

In this episode of Linux Server Admin, Lucas and Luna dive into Linux namespaces for user isolation — a key technique for securing multi-tenant servers and containers. They explain how user namespaces map unprivileged UIDs to root inside a container, preventing container breakouts. Lucas walks through a practical example: creating a user namespace with unshare, mapping UIDs, and running a shell as...

In this episode, Lucas and Luna dive into the practical steps for hardening SSH on Linux servers using FIDO2/U2F security keys. They explain why password and even key-based authentication often fall short, then walk through the setup: generating a key backed by a hardware token, configuring sshd to accept only ed25519-sk keys, and disabling password login. The conversation covers real-world fricti...

Episode 51 of Linux Server Admin with Fexingo dives into BPF (Berkeley Packet Filter) as a practical tool for real-time performance tracing on Linux servers. Hosts Lucas and Luna walk through a concrete scenario: diagnosing a mysterious latency spike in a web application without restarting or installing new packages. Lucas explains how bpftrace lets you attach one-liners to kernel probes to measur...

In episode 50 of Linux Server Admin with Fexingo, Lucas and Luna dive into Linux namespaces for process isolation, focusing on the PID and network namespaces. They walk through real commands — unshare, nsenter, ip netns — to show how to create isolated environments without Docker. Lucas shares a story about using namespaces to run a legacy application in isolation on a production server, avoiding...

In this episode, Lucas and Luna dive into the most common attack vector on Linux servers: SSH brute force. They explain how Fail2ban works under the hood—using iptables to dynamically block IPs after repeated failed attempts—and then walk through the more fundamental shift to key-only authentication. Lucas breaks down the exact configuration changes in /etc/ssh/sshd_config, including disabling pas...

In this episode of Linux Server Admin with Fexingo, Lucas and Luna walk through the practical steps for encrypting a Linux server's disks using LUKS (Linux Unified Key Setup). They explain when encryption matters—for portable drives, cloud instances, and compliance—and when it may not. Lucas demonstrates the exact cryptsetup commands for creating a LUKS container, adding a key slot, opening and mo...

Episode 47 of Linux Server Admin with Fexingo dives into cgroups v2, the modern control group implementation that replaces the fragmented v1 system. Lucas and Luna walk through real server scenarios: limiting CPU shares for noisy neighbors on a shared web host, pinning memory for a critical database container, and configuring IO throttling for backup jobs. They explain how systemd integrates cgrou...

In this episode of Linux Server Admin, Lucas and Luna tackle the often overlooked tuning of NFS (Network File System) on Linux servers. Using a real-world case of a media rendering farm struggling with NFS latency, they walk through the key sysctl settings, mount options, and server-side daemon parameters that can dramatically improve throughput. You'll learn about the `rsize` and `wsize` mount op...

Episode 45 of Linux Server Admin with Fexingo dives into Stratis, a Linux storage management tool that combines ZFS-like features with native kernel integration. Lucas and Luna explain how Stratis uses a pool-based model, thin provisioning, snapshots, and tiering without the complexity of traditional volume managers. They walk through installing Stratis on RHEL 9, creating a pool from two NVMe dri...

In this episode of Linux Server Admin with Fexingo, Lucas and Luna dive into the practical art of iptables on Linux. They start with a real-world scenario: a misconfigured firewall that locked out a developer's SSH session. From there, they explore three specific iptables use cases that go beyond basic port blocking—rate-limiting inbound connections to prevent brute-force attacks, using connection...

In this episode, Lucas and Luna dive into logrotate, the unsung hero of Linux server administration. They explore how a single misconfigured logrotate rule can silently fill a disk partition, causing outages. Using a concrete example of a web server that crashed because Apache logs grew unchecked, they explain logrotate's core directives: daily rotation, compression, delay compress, maxage, and po...

Episode 42 of Linux Server Admin with Fexingo dives into diagnosing and fixing packet loss on Linux servers. Lucas and Luna explore practical tools like ping, mtr, tcpdump, and ethtool to pinpoint whether the issue is in the network interface, cable, switch, or kernel buffers. They walk through a real-world scenario where a jammed network cable on a Ubuntu server caused 2.3% packet loss, and show...

Memory leaks on Linux servers can silently degrade performance until a process is killed or the system crashes. In this episode, Lucas and Luna walk through a real-world scenario: a Node.js web server that slowly consumes memory over days. They explain how to use tools like 'top', 'ps', '/proc/meminfo', 'smem', and 'valgrind' to identify the offending process, measure memory growth, and trace the...

In this episode of Linux Server Admin, Lucas and Luna dive into systemd timers as a modern replacement for cron. They walk through the anatomy of a timer unit file, compare it to traditional cron syntax, and show you how to create your first timer for a daily log rotation script. Lucas explains why systemd timers offer better logging, dependency handling, and debugging capabilities. They also disc...

Episode 39 of Linux Server Admin dives into Linux network namespaces for isolating server processes without full container runtimes. Lucas and Luna break down a real scenario: running a legacy monitoring agent that can't be containerized but must be network-separated from production traffic. They walk through creating a namespace, assigning a virtual Ethernet pair, and routing traffic through a de...

Lucas and Luna dive into Linux auditd, the powerful auditing subsystem that tracks security-relevant events on your servers. They walk through a real-world scenario: detecting unauthorized file access attempts using auditctl rules, interpreting ausearch output, and generating daily reports with aureport. The episode covers how to configure auditd without overwhelming your logs, common pitfalls lik...

Episode 37 of Linux Server Admin with Fexingo dives into control groups (cgroups) — the kernel feature that lets you limit CPU, memory, and I/O per process. Lucas and Luna walk through a real scenario: a runaway PHP-FPM pool consuming all server RAM on a shared hosting box. They explain how to set memory and CPU limits with cgroups v2, how to monitor usage with systemd-cgtop, and why this beats tr...

Episode 36 of Linux Server Admin with Fexingo dives into disk I/O benchmarking with FIO. Lucas and Luna walk through a real-world scenario: a database server showing intermittent slow queries, traced to unexpected I/O latency. They explain how to install FIO, construct a basic random-read/write test, interpret the output (IOPS, latency percentiles, bandwidth), and compare against expected performa...

Episode 35 tackles the hidden risk of inconsistent patching on Linux servers. Lucas and Luna walk through a real-world case: a mid-sized e-commerce company that suffered a 12-hour outage after applying kernel patches manually on a Friday afternoon. They break down why most sysadmins still rely on ad-hoc updates, how unattended-upgrades can backfire, and what a structured patch window looks like —...

Episode 34 of Linux Server Admin with Fexingo. Lucas and Luna walk through a real-world DNS failure that took down a staging environment for six hours. They explain how to use `dig`, `nslookup`, `systemd-resolved`, and `/etc/nsswitch.conf` to pinpoint the cause, and share a concrete fix using conditional forwarding in `systemd-resolved`. You'll also learn how to monitor DNS health with a simple cu...

Lucas and Luna dive into Linux namespaces, the kernel feature that underpins container isolation but is often misunderstood. They explain the seven namespace types, show how a misconfigured namespace can leak host resources, and walk through a practical example using 'unshare' to create a minimal container. The hosts also discuss auditing namespace configurations with 'lsns' and 'nsenter', and why...

When your Linux server kernel panics, the typical sysadmin response is a hard reset — but that can destroy forensic evidence and risk data corruption. In this episode, Lucas and Luna walk through a step-by-step recovery procedure using the kernel's built-in SysRq key mechanism, the kdump crash-capture service, and crash utility analysis. They explain how to configure kdump to save a vmcore file on...

Episode 31 of Linux Server Admin with Fexingo dives into the nightmare scenario: your Linux server's root filesystem is corrupted and won't boot. Lucas and Luna walk through a real rescue using the initramfs shell, manual fsck on a read-only root, chroot into the damaged system, and rebuilding the initramfs from inside the rescue environment. They cover when to use a live USB, how to mount proc/sy...

Episode 30 of Linux Server Admin with Fexingo tackles one of the most insidious server problems: a disk that's technically online but corrupting data silently. Lucas and Luna walk through a real case from a mid-size e-commerce company where a failing SATA drive went unnoticed for weeks, causing intermittent database corruption and mysterious application crashes. They explain how to detect the earl...