#linux

Wiki 19

  • ABI Stability Binary-level compatibility contracts: kernel vs glibc philosophies, Wine as the stable option
  • BubbleWrap your dev env and agents Ciężarkiewicz's Bubblewrap-based isolation for LLM agents, with Nix and tmux integration
  • Bypassing DPI with eBPF sock_ops Bora Tanrıkulu builds gecit — eBPF sock_ops on Linux for in-kernel SNI desync, gVisor + TUN as the "tiny VPN" fallback on macOS/Windows
  • eBPF sock_ops Linux's per-cgroup BPF hook into the kernel TCP socket lifecycle — fires at SYN-sent, established, retransmit, and other transitions
  • Huge pages 2 MB / 1 GB Linux memory pages instead of the 4 KB default — fewer page faults, far less TLB pressure, at the cost of upfront reservation
  • internals-for-interns Jesús Espino's weekly blog on software internals — Go runtime, filesystems, Linux kernel — written as "useful maps" not exhaustive references
  • Kernel self-patching Three Linux runtime-rewriting mechanisms — jump_label, static_call, alternative_instructions — that let one vmlinux boot optimally on dozens of CPU generations
  • Linux 7.0 cuts PostgreSQL throughput in half Removing PREEMPT_NONE in Linux 7.0 lets the scheduler preempt processes mid-page-fault while holding a PostgreSQL spinlock, melting CPU on contended workloads
  • Linux boot phases The six-phase x86_64 Linux boot model — assembly trampoline, early C, setup_arch, start_kernel, rest_init, kernel_init — each phase unlocking the capabilities the next one needs
  • Linux Kernel Startup Espino's six-phase x86_64 boot map — assembly trampoline, early C, setup_arch, start_kernel, rest_init splitting into PID 0/1/2, kernel_init exec'ing /sbin/init
  • Linux preemption models PREEMPT_NONE, PREEMPT_FULL, and PREEMPT_LAZY — when the kernel is allowed to take the CPU away from a running thread
  • Multicall binary One executable that dispatches to many built-in subprograms by inspecting argv[0]; the design pattern behind BusyBox, Toybox, sbase, and many minimal Unix userlands
  • Profiling eBPF Code Srinivasan's method for measuring what an eBPF file-open hook costs — C harness, perf, JIT symbols
  • ps5-linux Loadr (TheFlow's PS5 Linux release) Andy Nguyen / TheFlow's April 2026 public release of ps5-linux — hypervisor exploit + Ubuntu 24.04 + control tools — turning PS5 Phat 3.xx-4.xx consoles into x86 Linux desktops
  • Rewriting Every Syscall in a Linux Binary at Load Time Binary rewriting technique that replaces syscall instructions with INT3 traps for complete process isolation
  • specular.fi Personal engineering blog at specular.fi — short, code-driven notes on Linux internals, Alpine, Docker, and unfamiliar Unix tools
  • Starling Desktop A complete Linux desktop claimed to be AI-written in six months, weighed as evidence
  • What is BusyBox? Walk-through of BusyBox's multicall dispatch — one binary, 130+ symlinks in Alpine, argv[0]-based applet lookup, ~304 applets compiled in
  • Win32 Is The Only Stable ABI on Linux Glibc 2.36 broke Linux games by dropping DT_HASH; Win32 via Wine is the only stable ABI on Linux

Toolbox 10

  • bluetui Terminal Bluetooth manager for Linux that doubles as a Bluetooth HID remote for Smart TVs
  • Darling Wine for macOS software — runs Mach-O binaries on Linux via a userspace Darwin kernel server and reimplemented Apple frameworks; CLI works, GUI experimental
  • gobee Go-to-BPF-C transpiler that reuses clang's BPF backend and generates typed cilium/ebpf bindings
  • lightroom-cc-on-linux Wine recipe running Adobe Lightroom CC on Linux, debugged and patched autonomously by Claude
  • Little Snitch for Linux Linux port of the per-app network monitor — eBPF connection tracking with a web UI for blocking
  • manylinux PEP-defined platform tags and old-glibc Docker images for portable Python binary wheels
  • moonshine Headless Moonlight streaming host for Linux that runs each game in its own Wayland compositor
  • ps5-linux-loader TheFlow's complete toolchain for booting Ubuntu Linux on PlayStation 5 Phat 3.xx-4.xx via a hypervisor exploit
  • vps-audit One Bash script that audits a Debian/Ubuntu server's SSH, firewall, fail2ban, ports and SUID files against tunable PASS/WARN/FAIL thresholds
  • wirez Routes any Linux program's TCP/UDP through a SOCKS5 proxy using rootless namespaces, not LD_PRELOAD

Books 1

  • Systems Performance Gregg's Linux performance methodology — USE method, flame graphs, eBPF tracing tools