#linux
Wiki 19
- ABI Stability Binary-level compatibility contracts: kernel vs glibc philosophies, Wine as the stable option
- BubbleWrap your dev env and agents Ciężarkiewicz's Bubblewrap-based isolation for LLM agents, with Nix and tmux integration
- Bypassing DPI with eBPF sock_ops Bora Tanrıkulu builds gecit — eBPF sock_ops on Linux for in-kernel SNI desync, gVisor + TUN as the "tiny VPN" fallback on macOS/Windows
- eBPF sock_ops Linux's per-cgroup BPF hook into the kernel TCP socket lifecycle — fires at SYN-sent, established, retransmit, and other transitions
- Huge pages 2 MB / 1 GB Linux memory pages instead of the 4 KB default — fewer page faults, far less TLB pressure, at the cost of upfront reservation
- internals-for-interns Jesús Espino's weekly blog on software internals — Go runtime, filesystems, Linux kernel — written as "useful maps" not exhaustive references
- Kernel self-patching Three Linux runtime-rewriting mechanisms — jump_label, static_call, alternative_instructions — that let one vmlinux boot optimally on dozens of CPU generations
- Linux 7.0 cuts PostgreSQL throughput in half Removing PREEMPT_NONE in Linux 7.0 lets the scheduler preempt processes mid-page-fault while holding a PostgreSQL spinlock, melting CPU on contended workloads
- Linux boot phases The six-phase x86_64 Linux boot model — assembly trampoline, early C, setup_arch, start_kernel, rest_init, kernel_init — each phase unlocking the capabilities the next one needs
- Linux Kernel Startup Espino's six-phase x86_64 boot map — assembly trampoline, early C, setup_arch, start_kernel, rest_init splitting into PID 0/1/2, kernel_init exec'ing /sbin/init
- Linux preemption models PREEMPT_NONE, PREEMPT_FULL, and PREEMPT_LAZY — when the kernel is allowed to take the CPU away from a running thread
- Multicall binary One executable that dispatches to many built-in subprograms by inspecting argv[0]; the design pattern behind BusyBox, Toybox, sbase, and many minimal Unix userlands
- Profiling eBPF Code Srinivasan's method for measuring what an eBPF file-open hook costs — C harness, perf, JIT symbols
- ps5-linux Loadr (TheFlow's PS5 Linux release) Andy Nguyen / TheFlow's April 2026 public release of ps5-linux — hypervisor exploit + Ubuntu 24.04 + control tools — turning PS5 Phat 3.xx-4.xx consoles into x86 Linux desktops
- Rewriting Every Syscall in a Linux Binary at Load Time Binary rewriting technique that replaces syscall instructions with INT3 traps for complete process isolation
- specular.fi Personal engineering blog at specular.fi — short, code-driven notes on Linux internals, Alpine, Docker, and unfamiliar Unix tools
- Starling Desktop A complete Linux desktop claimed to be AI-written in six months, weighed as evidence
- What is BusyBox? Walk-through of BusyBox's multicall dispatch — one binary, 130+ symlinks in Alpine, argv[0]-based applet lookup, ~304 applets compiled in
- Win32 Is The Only Stable ABI on Linux Glibc 2.36 broke Linux games by dropping DT_HASH; Win32 via Wine is the only stable ABI on Linux
Toolbox 10
- bluetui Terminal Bluetooth manager for Linux that doubles as a Bluetooth HID remote for Smart TVs
- Darling Wine for macOS software — runs Mach-O binaries on Linux via a userspace Darwin kernel server and reimplemented Apple frameworks; CLI works, GUI experimental
- gobee Go-to-BPF-C transpiler that reuses clang's BPF backend and generates typed cilium/ebpf bindings
- lightroom-cc-on-linux Wine recipe running Adobe Lightroom CC on Linux, debugged and patched autonomously by Claude
- Little Snitch for Linux Linux port of the per-app network monitor — eBPF connection tracking with a web UI for blocking
- manylinux PEP-defined platform tags and old-glibc Docker images for portable Python binary wheels
- moonshine Headless Moonlight streaming host for Linux that runs each game in its own Wayland compositor
- ps5-linux-loader TheFlow's complete toolchain for booting Ubuntu Linux on PlayStation 5 Phat 3.xx-4.xx via a hypervisor exploit
- vps-audit One Bash script that audits a Debian/Ubuntu server's SSH, firewall, fail2ban, ports and SUID files against tunable PASS/WARN/FAIL thresholds
- wirez Routes any Linux program's TCP/UDP through a SOCKS5 proxy using rootless namespaces, not LD_PRELOAD
Books 1
- Systems Performance Gregg's Linux performance methodology — USE method, flame graphs, eBPF tracing tools