🪴 Zero's Garden
Search
Search
Dark mode
Light mode
Explorer
maps
AI Productivity Tool Map
AWS Map
Computer Networking Map
DevOps Roadmap
FreeBSD Map
Google Cloud Map
Linux Map
Microsoft Azure Map
Nginx Map
Presentation Skills Map
Public Cloud Map
Self-Hosting Map
SRE Map
notes
AI
ChatGPT
Forefront Chat
GPT-4 Chat Demo
LLM Models
New Bing
Poe
CLI
Bash
Best way to add path to PATH environment variable
Here Document
Line Editing
Read a block of text into a variable
git
Git Partial Clone
git-filter-repo
git-status
apt
benchstat
col
Convenient CLI Tools
curl
dig
du
ffmpeg
GNU Sed
GraphicsMagick
grep
ip
journalctl
less
lsof
namei
Neovim
nstat
procstat
ps
Replace fixed pattern in file
rsync
snmpwalk
ss
starship
systemd-analyze
Vim
Zsh
Zsh Word Splitting
Cloud
AWS
Accessing RHKB via AWS
Amazon Managed Service for Prometheus
AWS Backbone Network
AWS Documentation Excerpts
AWS Nitro System
AWS Pitfalls
AWS VPC
EC2 Performance Benchmarks
Elastic Network Interface
Hyperplane
Network Load Balancer
Azure
Acceleration Mechanisms on NVIDIA ConnectX-5 NICs
Ananta
Azure Accelerated Networking
Azure Blob Storage
Azure Linux Guest Agent
Azure Load Balancer
Azure NAT Gateway
Azure Network Idle Timeout
Azure VM size series naming
Hyper-V Guest Features
Linux Integration Services
Microsoft Azure Network Adapter
Receive Segment Coalescing
Receive Side Scaling on Azure
Traceroute on Azure
Virtual Filtering Platform
VL2
Google Cloud
Andromeda
GCP VPC
Google Cloud Free Tier
Google Kubernetes Engine
Maglev
Unexpected Costs on GCP
Oracle Cloud
OCI IPv6 Address Fix
OCI Link-Local Addresses
OCI Network Security Rules
OCI Public IP Ranges
Computer Science
AWS CLB Surge Queue and Little's Law
Database
MariaDB Grant Privileges via Unix socket
PgBouncer
PostgreSQL
psql Verify TLS Certificate
Economics
Economics in China
Emacs
doom
cc
chinese
Consult
defcustom
Dhall
Doom CLI
Eglot
Embark
Evil
Evil Collection
Font
Font Face Attribute Override
How to Bump a Package
Init
Jumper
Leader Key
lispy
Lookup
lsp-mode
Magit
Mpdel
Nativecomp
Org-roam v2
ParEdit
Projectile
Rime
rust
Straight
tree-sitter
tty
Undo
Vertico
wgrep
Window
Workspace
mu4e
mu4e Hotkeys
Prefer Plain Text in mu4e
autoload
CIDER
Emacs Features
Emacs Frame Setup
emacsclient on macOS
English Terms
Conference Talks
Data Center Terms
Health
20-20-20 Rule
HTTP
CORS Credentials
CORS Origin
HTTP Request RTTs
Preflight Request
Kubernetes
cert-manager
CRI Logging Format
Flux
Flux Helm Release Troubleshooting
Grafana Kubernetes Monitoring Helm Charts
Helm Chart Releaser
K3s etcd HA
K3s Exit Node Bypass Route
K3s External Database HA
K3s HA Cluster
K3s System HelmChart
K3s Traefik
K8s Metrics
K8s Secrets
K8s Volumes
Kubernetes DNS
Kubernetes Monitoring
Kustomize
Longhorn
Persistent SQLite on K8s
Pinning FROM with Image Digest
Traefik
Life
Dealing with Leaking Alkaline Batteries
MacPorts
base
Alternative Compiler
Anatomy
Registry
Tcl API
Fontconfig
Ideas
OpenSSH Log on macOS
Running a System LaunchDaemon with MacPorts
Media
Music Streaming Setup
Network
Cloudflare
Direct Server Return
DNS Caching
Global DNS Lookup and Ping Services
ICMP ping packet size
IP and BGP ASN Data Lookup Services
IPv6 Firewall
IPv6 in IPv4 Tunnel
NIC Offload
NIC Scaling and Steering
OpenWRT DFS Channel Experiment
OpenWRT LuCI Protocol
Path MTU Discovery
Prefer IPv4 over IPv6
Reverse-Path Forwarding
RHEL 9 Networking
SNMPv2 TCP Statistics
Speed Test Website and Tools
Strong and Weak Host Model
Valiant Load Balancing
VXLAN
Wi-Fi 6E
Nginx
proxy
Headers
Health Check
Upstream Keepalive
Byte-Range Request
location
Nginx Code - Client Closed Request
Nginx Code - Upstream Connect Timeout
Nginx HTTP Variables to Log
Nginx Thundering Herd Problem
Optimizing single-box Nginx performance
Note Making
Ideaverse Kit Plugins
Open Source Diagram Editors
Observability
Checking Grafana Server Version
Grafana Alerts
Grafana Dashboard Annotations
Grafana Dashboards
Grafana Variables
Grafana Visualizations
Prometheus Node Exporter
Operating System
FreeBSD
DTrace
FreeBSD NIC Settings
PF Firewall
Upgrading FreeBSD
Linux
Asahi Linux
BBR
BPF
BPF development with Aya on aarch64
Building an RPM package from source
Building the Linux kernel on Copr Build Service
De-Prioritize Process
Desktop Linux Performance Optimization
epoll
firejail
Firewalld
Firewalld Specify Zone by IP Address
Handling configuration updates on rpm-based distros
IBus on Wayland
kdump
Killing inactive SSH Sessions on Server
Linux Distributions Adoption Statistics
Linux kernel mailing lists
List Out-of-Tree Modules in Linux
NetworkManager
nftables
Partition Table and Mounting File Systems
SO_REUSEPORT
syslogd
SysRq key
Systemd Override
Systemd Service Hardening
TCP Client SYN Retries
TCP Kernel Parameters
Verify rpmfusion-signed RPMs
View RPM packge info
When to send RST packets on close()
yay
macOS
Download macOS installer
Homebrew
macOS KeyChain in CLI Tools
Paravirtualized Graphics
Touch ID for sudo on macOS
OpenWRT
WiFi
Privacy
Apple Private Relay
Self Hosting
Litestream
NAS Solutions
Navidrome
Self-Hosted AFFiNE
Tailscale Exit Node
Tailscale TLS Certificates
Software
a-Shell
Alternative Storage for Prometheus
AltStore Verification Code
Beancount and Fava
Blink-based SSH Workstation
CachyOS in UTM
Compress Picture PDF Files
Contributing packages on conda-forge
Create .ipa files without a developer account
Flowed Text in Mutt
Fuzzing yash
HP Smart Scanning Tips
Irssi Config
iTerm2 Copy Mode
Layer 7 Load Balancing Solutions
Netdata
Nix Channel Status
nix-env Dependency Tree
Remote Linux Desktop on macOS
Sideloading Blink with AltStore
Switch Input Source on macOS
Terminal Protocols
UTM
WeeChat Config
Wireshark
Xcode Sanitizer Support
Zellij
ZNC
SRE
Alerting
Blameless Culture
Capacity Planning
Change Management
Eliminating Toil
Emergency Response
Error Budget
Latency Numbers
Managing Incidents
Managing Service Risk
Mandatory Review
Measuring Service Risk
Monitoring
On-Call
Postmortem
Prodtest
Public Post-Mortems
Scream Test
Service Level Indicator
SLO
Toil
Troubleshooting
Startup
Earthly CI Postmortem
How To Be a Manager
One-Man Full Stack Roadmap
Payment Gateways for Individuals
SaaS Product Strategy at Tanda
Storage
USB Hub Power Supply
ZFS
ZFS Compression Test
zstd Compression
Apple Music
Krita
Obsidian
Programming
Taking Notes
Twitter
Home
❯
notes
❯
Operating System
❯
Linux
❯
firejail
firejail
Sep 03, 2024
1 min read
mkdir
~/jail
firejail
--private=
~
/jail
bash
Graph View
Backlinks
No backlinks found