https://www.sre.wang/en/categories/linux-system-administration/Recent content in Linux System Administration on SRE Engineering PracticeHugo -- gohugo.ioenFri, 17 Jul 2026 09:20:09 +0800https://www.sre.wang/en/posts/linux-kernel-crash-kdump/Fri, 17 Jul 2026 09:20:09 +0800https://www.sre.wang/en/posts/linux-kernel-crash-kdump/From kdump internals to crash tool analysis — a hands-on guide to configuring a production-grade kernel crash capture systemhttps://www.sre.wang/en/posts/linux-auditd-security-auditing/Wed, 15 Jul 2026 02:09:45 +0800https://www.sre.wang/en/posts/linux-auditd-security-auditing/From installation and deployment to rule writing, log analysis, and performance tuning—covering the complete production practice of auditdhttps://www.sre.wang/en/posts/linux-network-packet-capture-analysis/Tue, 14 Jul 2026 00:39:00 +0800https://www.sre.wang/en/posts/linux-network-packet-capture-analysis/Troubleshoot production network issues with the tcpdump and Wireshark combo, covering BPF filter syntax, capture strategies, protocol dissection, and real-world case studieshttps://www.sre.wang/en/posts/linux-cpu-isolation-numa-tuning/Mon, 13 Jul 2026 03:22:07 +0800https://www.sre.wang/en/posts/linux-cpu-isolation-numa-tuning/From isolcpus to cpuset, NUMA affinity to IRQ pinning — a complete production-grade CPU isolation and tuning workflowhttps://www.sre.wang/en/posts/linux-ebpf-programming-guide/Tue, 01 Apr 2025 00:00:00 +0000https://www.sre.wang/en/posts/linux-ebpf-programming-guide/A systematic guide to eBPF programming, BCC vs libbpf+CO-RE comparison, BTF mechanism, program types, and end-to-end development workflowhttps://www.sre.wang/en/posts/linux-iptables-nftables/Fri, 10 Jan 2025 00:00:00 +0000https://www.sre.wang/en/posts/linux-iptables-nftables/An in-depth guide to the Netfilter framework, iptables five chains and four tables, nftables advantages, rule writing, NAT/port forwarding, connection tracking, and performance optimizationhttps://www.sre.wang/en/posts/linux-bpf-bcc-tools/Wed, 13 Nov 2024 00:00:00 +0000https://www.sre.wang/en/posts/linux-bpf-bcc-tools/From eBPF technology principles to bcc toolset practice, covering biolatency, execsnoop, tcplife, opensnoop and other core tools, with custom BPF trace script exampleshttps://www.sre.wang/en/posts/linux-cgroup-v2-complete-guide/Tue, 23 Jul 2024 00:00:00 +0000https://www.sre.wang/en/posts/linux-cgroup-v2-complete-guide/An in-depth guide to cgroup v2 unified hierarchy architecture, core controllers, systemd integration, Docker/Kubernetes scenarios, and v1 migration strategieshttps://www.sre.wang/en/posts/linux-process-scheduling/Wed, 29 May 2024 00:00:00 +0000https://www.sre.wang/en/posts/linux-process-scheduling/An in-depth analysis of the Linux CFS scheduler, nice values and cgroup CPU control, real-time scheduling, CPU affinity, and scheduling latency troubleshootinghttps://www.sre.wang/en/posts/linux-memory-management-tuning/Thu, 09 May 2024 00:00:00 +0000https://www.sre.wang/en/posts/linux-memory-management-tuning/An in-depth guide to Linux virtual memory, Page Cache, Swap, OOM Killer, cgroup v2 memory limits, and memory leak troubleshooting with real-world caseshttps://www.sre.wang/en/posts/linux-network-stack-tuning/Tue, 07 May 2024 00:00:00 +0000https://www.sre.wang/en/posts/linux-network-stack-tuning/A systematic guide to Linux TCP/IP stack tuning, covering kernel parameters, conntrack table, NIC interrupt binding, RPS/RFS/XPS, and TCP BBR congestion controlhttps://www.sre.wang/en/posts/linux-boot-process-grub/Fri, 03 May 2024 00:00:00 +0000https://www.sre.wang/en/posts/linux-boot-process-grub/From BIOS/UEFI to GRUB2, initramfs, and systemd boot process — covering target/runlevel, service dependency management, boot performance optimization, and kernel crash recoveryhttps://www.sre.wang/en/posts/linux-package-management/Fri, 26 Apr 2024 00:00:00 +0000https://www.sre.wang/en/posts/linux-package-management/Comprehensive guide to apt/dpkg and yum/dnf/rpm ecosystems, covering repository management, dependency resolution, deb/rpm package building, version pinning, offline installation, and mirror optimizationhttps://www.sre.wang/en/posts/linux-disk-io-diagnosis/Wed, 27 Mar 2024 00:00:00 +0000https://www.sre.wang/en/posts/linux-disk-io-diagnosis/A systematic guide to Linux disk I/O performance metrics, diagnostic tools, I/O scheduler selection, SSD/HDD optimization differences, with a real-world high I/O wait troubleshooting casehttps://www.sre.wang/en/posts/linux-log-management-journalctl/Wed, 14 Feb 2024 00:00:00 +0000https://www.sre.wang/en/posts/linux-log-management-journalctl/journald internals and configuration, journalctl query techniques, logrotate log rotation, structured logging, remote log collection, and practical log analysishttps://www.sre.wang/en/posts/linux-systemd-deep-guide/Tue, 13 Feb 2024 00:00:00 +0000https://www.sre.wang/en/posts/linux-systemd-deep-guide/From systemd architecture to in-depth unit file analysis, covering dependency management, cgroup resource control, journalctl log management, and production-grade service file writinghttps://www.sre.wang/en/posts/linux-performance-profiling-tools/Fri, 19 Jan 2024 00:00:00 +0000https://www.sre.wang/en/posts/linux-performance-profiling-tools/From top/htop/atop to perf/flamegraph, covering CPU, memory, IO, and network performance profiling tools with use-case quick reference and real-world exampleshttps://www.sre.wang/en/posts/linux-fs-filesystem-optimization/Mon, 01 Jan 2024 00:00:00 +0000https://www.sre.wang/en/posts/linux-fs-filesystem-optimization/In-depth comparison of ext4/xfs/btrfs/zfs, mount parameter optimization, I/O scheduler selection, journal modes, fsync performance, and SSD/TRIM tuninghttps://www.sre.wang/en/posts/linux-kernel-parameters-tuning/Thu, 21 Dec 2023 00:00:00 +0000https://www.sre.wang/en/posts/linux-kernel-parameters-tuning/A comprehensive guide to the sysctl system, covering network parameters, file descriptors, memory parameters, security parameters, production tuning templates, and parameter validation methodshttps://www.sre.wang/en/posts/linux-security-hardening-checklist/Mon, 18 Dec 2023 00:00:00 +0000https://www.sre.wang/en/posts/linux-security-hardening-checklist/A systematic guide to Linux security hardening: minimal installation, SSH hardening, SELinux/AppArmor, auditd auditing, firewall management, with a runnable security baseline check scripthttps://www.sre.wang/en/posts/linux-ssh-security-best-practices/Tue, 12 Dec 2023 00:00:00 +0000https://www.sre.wang/en/posts/linux-ssh-security-best-practices/SSH key and certificate authentication, sshd_config hardening, bastion host, port forwarding and reverse tunnels, SSH Agent, audit logging, and Fail2ban — a complete practical guide