Seeing that @FrostyX as a Fedora Developer reacting on YouTube to my blog-post about Fedora Hummingbird makes me kinda nervous 😅 https://www.youtube.com/watch?v=wx01V198EWs

I self-host the DNS for my domains for more than 20 years now. 2026 now finally was the year, where I decomissioned the last BIND server and replaced it with a PowerDNS, containerized in Podman :podman: and with a SQLite backend. I already migrated the […] [Original post on burningboard.net]

🤢 #depol #fckafd #niewiederistjetzt #afdverbotjetzt #nazisraus #gegennazis #antifaschismus

#pastpuzzle 485 🟩🟩🟥🟩 (-10) 🟩🟩🟥🟩 (-20) 🟩🟩🟩🟩 (0) ▪️▪️▪️▪️ 3/4 🥉 https://www.pastpuzzle.de

Sechs Jahre nach Beginn der letzten Pandemie habe ich das ungute Gefühl: Bei der nächsten wären wir gesellschaftlich schlechter vorbereitet als 2020. Nicht, weil wir weniger wissen. Sondern weil ein Teil der Gesellschaft inzwischen jeden Schutzreflex vorsorglich bekämpft. Viren? Werden […]

Achievement unlocked: SSO for the hypervisor! 🎉 My Proxmox VE is now officially using Keycloak OIDC for authentication, and the setup is fantastic: - Centralized Users: Managed alongside my other apps (Keycloak using my LDAP as the backend). - Hardware […] [Original post on burningboard.net]

I know "AI" is a polarizing topic around here, but I wanted to share a small side-project I've been tinkering with to scratch a personal itch: MastoSum. It’s a lightweight web app that listens to public streams, filters for the hashtags I actually care about, and uses an LLM to generate a daily […]

New blog post: Tag-Driven Deployments: How MastoSum Ships Itself with Forgejo Actions and Rootless Podman The pipeline is tag-driven and fully automated. A git push v0.2.9 triggers a Forgejo Actions workflow that builds a UBI10-based image, cosign-signs it, and writes a trigger file. A systemd […]

You are absolutely right, and I owe you a massive apology. I stand corrected: I now realize that executing sudo rm -rf / on the global production cluster was not the optimal solution for parsing that nested JSON file. I should have recognized that permanently incinerating your entire AWS […]

Gerade mit meiner Frau in Frankreich gewesen zum gemütlichen Samstags Einkaufsbummel. Auf der französischen Seite wurde gar nichts kontrolliert, da stand nicht mal wer. Bei der Rückfahrt nach Deutschland dann das volle Programm an der Grenze bei […] [Original post on burningboard.net]

EVERYONE GETS AN LPE Windows: #bluehammer (#CVE_2026_33825) #redsun (#CVE_2026_41091) #undefend (#CVE_2026_45498) #windowsinstaller (#CVE_2026_27910): Linux: #copyfail (#CVE_2026_31431) #sshkeysignpwn (#CVE_2026_46333) FreeBSD: #fatgid (#CVE_2026_45250) #execvebug (#CVE_2026_7270)

Updated the burningboard.net Mastodon server to FreeBSD 15.0-RELEASE-p9. There were quite some vulnerabilities among the latest patches ... ptrace, file, fusefs, bsdinstall, cap_net, secretd... #itsecurity #freebsd #mastoadmin

1.000.000.000 € So viel hat Vonovia gerade als Dividende an seine Aktionär:innen ausgeschüttet. Leistungsloses Einkommen, direkt aus den Taschen der Mieter:innen gepresst. Um diese absurde Summe mal ins Verhältnis zu setzen: Das entspricht... ~ 1,25 Millionen durchschnittlichen Warmmieten […]

Soviel zu "Bauen lohnt sich heutzutage gar nicht mehr". Der Wohnraum ist teuer, nicht wegen seiner Eigenkosten, sondern weil sie das 👇 aus den Mieten finanzieren.

RE: https://mastodon.social/@MastodonEngineering/116607235686524178 Upgrade to v4.5.10 on burningboard.net successfully done. #mastoadmin #burningboard @tux @Mathias @AlienJay

There is a special kind of pride in building with the exact same enterprise-grade tech you stand behind every day. Just deployed my new app, on a 100% Red Hat trusted supply chain! OS: RHEL 10.1 :redhat: Runtime: Rootless Podman 5.6 + Quadlets :podman […] [Original post on burningboard.net]

I’ve been replacing sudo/doas on most of my FreeBSD boxes with something much smaller: mdo(1) + mac_do(4) from base. No port. No sudoers parser. No setuid helper. Just a kernel MAC policy, a sysctl rule, and an explicit “SSH is the gate” security model. Wrote up the full walkthrough for […]

Eliminated the IPv4 NAT for my blog today and gave the Caddy jail it's own dedicated IPv4 address from my /28 space. Makes the firewall configuration a lot simpler and I can drop all that rdr/nat stuff.. Modern IPv6 of course, always was a routed end-to-end […] [Original post on burningboard.net]

My web-server is broken and does not boot anymore. Great :(

Fedora Hummingbird is one of the more interesting things to come out of the container world this year. I rebuilt my mastogreet bot on top of registry.access.redhat.com/hi/python, the new distroless Python image catalog from Project Hummingbird: no shell no package manager signed SBOMs chunked […]

While logging bogons received from route servers at various IXPs, I noticed two different router IDs announcing fc00:: space. And yes, someone also attempted to announce a /127. 🙂 At least the filters are doing their job (e.g. deny ::/0 ge 49). #bgp #ipv6 #bogon #monitoring

Interesting insights from @apalrd with his CDN implementation 🙂 #bgp #dns #networking #cdn

Trying out, how many of my playbooks/roles need modifications when using an Execution Environment with Ansible 2.20, which is currently available as a tech-preview […] [Original post on burningboard.net]

Updated my Red Hat Satellite to Version 6.19 and patched all my home-lab RHEL VMs to the latest state via Ansible. Fixed also the Copy.Fail and Dirty Frag CVE's, so I can safely remove the mitigations again. #linux #redhat #copyfail #dirtyfrag #devops #homelab #ansible

One of the most useful Red Hat products I use daily is also one of the least-known: the Red Hat Offline Knowledge Portal (RHOKP). It is basically a self-hosted, locally searchable mirror of docs.redhat.com + the Red Hat Knowledgebase in a single container image. Perfect for: - air-gapped […]

Several years of Deutsche Bahn business travel taught me something unexpected: eventually you stop fighting the system and start learning its moods, failure domains, and hidden virtues. I wrote down the practical folklore that actually helps: apps, routing habits, delay survival, seat choices […]

Little bit of fun with dry ice (solid co2) in warm water 😅 #chemistry #experiment #dryice #co2

New post: FreeBSD resource monitoring and accounting. A practical tour of the base-system toolkit for figuring out *what is actually using my server*: top, vmstat, systat, gstat, netstat/sockstat, procstat, pfctl, and per-jail attribution with kern.racct and rctl. No ports, no agents. Just […]

Remember when em-dashes were just punctuation? Now they’re slop-watermarks. You can’t read anything online anymore without seeing them lined up like little forensic clues: “Here’s the thing—” “Let me explain—” “The future is—” The em-dash used to mean: “Ah, a stylish writer.” Now it means […]

Finally shipped the re-design of my blog today. 🥳 Taste is subjective, but I like the updated theme a bit more than the old solarized-dark variant, that was a little boring. https://blog.hofstede.it #blog #webdesign #css #opensource #blogging

New post: Distrobox: Different Distributions in a Box, Powered by #podman :podman: The case for running Arch, Ubuntu, and a real RHEL userspace as long-lived containers on a Fedora laptop. Home directory mounted in, GUI apps integrated, VSCode treats the box as a remote target. Bonus: on a […]

Mastodon Incident Report / Root cause analysis: Earlier today, users experienced timeouts with Search, Hashtags, and Autocomplete. Root Cause: Our setup separates the Mastodon frontend VPS (Hetzner) from backend services (for example Elasticsearch) via an OPNSense firewall. Suricata (our IPS) […]

Mitigating Dirty Frag (RHSB-2026-003) on RHEL with Ansible: https://codeberg.org/Larvitz/gists/src/branch/main/2026/20260508-RHSB-2026-003_DirtyFrag_RHEL_Mitigation.md #cve #dirtyfrag #rhel #redhat #vulnerability #security

CVE-2026-43284 / "Dirty Frag" .. Antoher one of those nasty local-privilege-escallations. Quickfix for Centos/Fedora based systems: printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.conf && rmmod esp4 esp6 rxrpc 2>/dev/null; true […]

Let's Encrypt just stopped the issuance of certificates after an "incident": https://letsencrypt.status.io/pages/incident/55957a99e800baa4470002da/69fe2d6698ca07050eb4b1b3 If anyone encounters issues today with failed certificate renewals: It's probably not your setup. #letsencrypt #itsec […]

Therapeut: „Du kannst nicht alles kontrollieren." Ich, DB-Vielfahrer: „Doch. Mit Planung." Gelernt nach zu vielen Stunden auf Bahnsteigen: - ICEs aus Zürich nach Norden kommen entspannter in Mannheim an als die aus München via Stuttgart. - Frankfurt Hbf ist ein Verspätungs-Schwarzes-Loch […]

“Works on my laptop” is a configuration problem, not bad luck. Execution Environments make your Ansible control node a versioned, reproducible container image. Same artifact locally, in CI, and in AAP/AWX. I wrote a practical walkthrough of ansible-builder + ansible-navigator, with real-world […]

nvim-ansible: My Neovim config for Ansible and Python just got a substantial refresh: - modernized for Neovim 0.11 (vim.lsp.config, LspAttach, vim.filetype.add) - ansible-lint now routed through Mason, sidestepping distro-related issues and ensuring a consistent version - tighter lazy-loading […]

TIL that people use AI (Gemini App) to ask for the WEATHER on her phone!! We're literally cooking the planet for the power, required by those data centers and people use it to ask it to LOOK UP THE WEATHER!! We're so screwed *le sigh* #ai #climatecrisis #climate #aislop

Meine Frau meinte, sie will eine Vitrine im Wohnzimmer. Ich habe gefragt, ob stattdessen auch einen Nanotrine oder eine Emacstrine gehen würde. Sie hat mich daraufhin sehr verwirrt angeschaut 😅 🤷‍♂️

Deleting my BlueSky Social profile https://bsky.app/profile/hofstede.io today and decomissioning the Personal Data Server associated with it. Bsky did never got traction for me and my real online-home is the Fediverse! #fediverse #bluesky

"nix" on Fedora Linux 44. What a time to be alive 😀 #linux #fedora #fedora44 #nix

„Alle Räder stehen still, wenn dein starker Arm es will.“ Romantisch, aber bald Geschichte. Wenn KI und Robotik massiv übernehmen, läuft das Rad auch ohne uns weiter. Die echte Gefahr ist nicht, dass uns die Arbeit ausgeht. Die Gefahr ist, dass die gigantische Automatisierungs-Rendite exklusiv […]

https://bgp.tools/as/201379#connectivity 6 Upstreams, 105 direct peers 🙂 My AS201379 / 2a06:9801:1c::/48 has some really solid European connectivity now. Entirely powered by FreeBSD and FRRouting, no proprietary routers and no legacy-IP (formerly known as […] [Original post on burningboard.net]

Updated our Mastodon server burningboard.net to latest FreeBSD 15.0-RELEASE-p7 . Everything runnong smoothly again 🙂 :freebsd: #mastoadmin #mastodon #freebsd #bastillebsd #sysadmin

Fresh gist: mitigating CVE-2026-31431 ("Copy Fail") on RHEL 8/9/10 with a tiny Ansible playbook. It blacklists algif_aead via a kernel boot arg (initcall_blacklist=algif_aead_init), reboots only when needed, and asserts the mitigation actually stuck after reboot. Idempotent & safe to re-run […]

Aufwachen um 4:00 mit Zahnschmerzen 😖 Lovely. Immerhin hat der einzige Zahnarzt hier im Dorf spontan heute um 10:45 zeit, um mal zu schauen.

Fedora Linux 44 :fedora: was released today! I’ve been running the prerelease/beta since mid-February, and it’s been rock solid 🙂 Highlights: - GNOME 50 on Workstation - KDE Plasma 6.6 + Plasma Login Manager - PackageKit now backed by DNF5 - NTSYNC […] [Original post on burningboard.net]

Microsoft Reportedly Looking At Rebasing Azure Linux On Fedora :fedora: https://www.phoronix.com/news/MS-Azure-Linux-Fedora-Based #fedora #linux #opensource #microsoft

New blog post: Ansible-Native Quadlets: Deploying a Mastodon Greeter Bot with containers.podman Hand-written Quadlet files are great for one host. For a small fleet, I want them in Ansible: templated config, registry login, Podman secrets, systemd handlers, SELinux labels, and repeatable […]