Botmonster Tech
Harden a Linux server in 30 minutes: SSH Ed25519 keys, nftables firewall, security updates, auditd logging, faillock. Jump Lynis scores from 55 to 84.
Self-Hosting
How to run your own servers, Docker stacks, and self-hosted services without losing weekends to config files.
Custom Linux ISOs with Live Build or Cubic: scripted or GUI
Build personalized Linux live USB images with your own packages, using scripted live-build for CI or Cubic's GUI for quick Ubuntu and Debian tweaks.
Is systemd-nspawn a better alternative to Docker for Linux containers?
Systemd-nspawn creates fully isolated Linux containers natively in systemd. No daemon, no image registry - lightweight isolation with machinectl.
Sandbox untrusted Linux apps and CLI tools with Bubblewrap
Bubblewrap sandboxes untrusted Linux apps and CLI tools with unprivileged namespaces, no root and no SUID binary. Plus how it compares to Firejail.
Windows 11 + Linux: Shared exFAT, systemd-boot Bootloader
Dual-boot Linux and Windows with systemd-boot, a shared exFAT partition, and an EFI System Partition. Setup, bootloader config, and update safety.
Caddy reverse proxy for self-hosted services: zero-config HTTPS
Caddy provisions TLS certificates with zero config. Install the binary, write a three-line Caddyfile per service, and get automatic HTTPS.