Linux

01

15 min read

Kernel panic on a Debian NAS: recovering a truncated libc without rebooting into the void

One February morning, my Terramaster F6-424 NAS running Debian 13 won't boot. Immediate kernel panic on the very first userspace exec. No recovery mode, single kernel installed, aggressive hardening: the system has no way to catch itself. Full story of the diagnosis (libc.so.6 turned into "ISO-8859 text" instead of ELF), the recovery from a live USB (with the apt↔libc chicken-and-egg trap), and the 2026 best practices I applied so it never happens again. Bonus: a second incident in May that revealed the real root cause.

02

7 min read

Secure remote access to your NAS with Tailscale

Setting up Tailscale as a WireGuard mesh VPN to access your NAS and entire local network from anywhere, without opening ports.

03

6 min read

Migrating Synology data to a Debian NAS without losing anything

Recovering an existing Synology RAID on Debian: Btrfs patch, eCryptFS decryption and automatic mounting with mdadm + LVM detection.

04

7 min read

Hardening your NAS Linux kernel to CIS Level 2 standards

Over 40 sysctl parameters, module blacklisting, GRUB settings and filesystem hardening to achieve CIS Level 2 security on Debian.

05

7 min read

Firewall and Fail2ban: locking down NAS network access

Setting up UFW with deny-by-default and Fail2ban with progressive bans to effectively protect a Debian NAS against network intrusions.

06

5 min read

Securing SSH with post-quantum algorithms

Configuring OpenSSH with post-quantum key exchanges (ML-KEM768, sntrup761), Ed25519 keys, and hardened authentication for your NAS.