Linux

01

13 min read

Kernel panic on a Debian NAS: recovering a truncated libc without rebooting into the void

A Debian 13 NAS that won't boot: immediate kernel panic on the first userspace exec, with libc.so.6 turned into "ISO-8859 text" instead of ELF. Diagnosis through debugfs, recovery from a live USB with the apt↔libc chicken-and-egg trap, and the APT guardrails to put in place so it never happens again.

02

5 min read

Secure remote access to your NAS with Tailscale

Setting up Tailscale as a WireGuard mesh VPN to access your NAS and entire local network from anywhere, without opening ports.

03

6 min read

Migrating Synology data to a Debian NAS without losing anything

Recovering an existing Synology RAID on Debian: Btrfs patch, eCryptFS decryption and automatic mounting with mdadm + LVM detection.

04

6 min read

Hardening your NAS Linux kernel to CIS Level 2 standards

Over 40 sysctl parameters, module blacklisting, GRUB settings and filesystem hardening to achieve CIS Level 2 security on Debian.

05

6 min read

Firewall and Fail2ban: locking down NAS network access

Setting up UFW with deny-by-default and Fail2ban with progressive bans to effectively protect a Debian NAS against network intrusions.

06

4 min read

Securing SSH with post-quantum algorithms

Configuring OpenSSH with post-quantum key exchanges (ML-KEM768, sntrup761), Ed25519 keys, and hardened authentication for your NAS.