2025

Why is this running?

Tuesday, December 30, 2025 Read

Expose your local web server to the internet with a public URL.

Saturday, December 27, 2025 Read

Rainman Engineering Culture: Eight Interview Questions to Spot Excellence

Rainman Engineering Culture: Eight Interview Questions to Spot Excellence CI/CD tools: collaborative GitLab/GitHub, or gate-heavy Gerrit/Jenkins? Approval flow: how many boss sign-offs does a merge request (MR) need? Environment isolation: separate Dev/Test/Prod environments, and can you switch/deploy with one click? Deployment chain: from code to user-visible, how many steps? Automated or manual? Monitoring: do alerts point to root cause, or are engineers digging through logs at night? Config management: centralized with canary/gradual release, or scattered across code with manual edits? Test coverage: a reliable automated “immune system,” or treat bugs as features and let users test in production? Rollback: when production blows up, can you roll back within 5 minutes, or stay up all night with the team?

Monday, December 22, 2025 Read

A fast and powerful log viewer and processor that converts JSON logs or logfmt logs into a clear human-readable format.

Sunday, December 14, 2025 Read

Convert your codebase into a single LLM prompt.

Thursday, December 11, 2025 Read

How to Install Fedora Linux on Surface Go 2 to Boost Entry-Level Tablet Performance

How to Install Fedora Linux on Surface Go 2 to Boost Entry-Level Tablet Performance Surface Go 2 (Intel Pentium 4425Y, 4G/64G) WiFi edition For Surface Go 2 hardware support, see this GitHub table: Supported Devices and Features Create a Linux boot drive Download the ISO from the Fedora KDE official site. Use Ventoy to create a boot drive. Surface Go 2 only has Type-C ports, so you may need a hub. It cannot boot from an SD card. Install Linux Shut down the Surface Go 2. Hold the power button and volume up to enter UEFI. The interface is touch-capable, but you may still need a physical keyboard for installation. Fedora supports Secure Boot, but it is recommended to disable it to avoid manual signing when installing drivers. Set the boot order to the USB drive. Boot and follow the installer. Choose to wipe the disk and install Fedora. For Chinese input, install Fcitx5: sudo dnf install fcitx5 fcitx5-chewing fcitx5-gtk3 fcitx5-gtk4 fcitx5-qt fcitx5-qt6 fcitx5-configtool Tip: Fedora enables zRAM by default. If the Surface Go has limited RAM, edit /etc/systemd/zram-generator.conf to increase SWAP size (MB). [zram0] zram-size = 8192 Install the linux-surface kernel Follow the GitHub instructions. On Fedora, add the linux-surface repo to the system: sudo dnf config-manager addrepo --from-repofile=https://pkg.surfacelinux.com/fedora/linux-surface.repo Install the linux-surface kernel and reboot: sudo dnf install --allowerasing kernel-surface iptsd libwacom-surface Use uname -a to verify the kernel is switched; it should show linux-surface. Fedora updates kernels frequently, so new kernels may override the linux-surface kernel. After installing the linux-surface packages, the linux-surface-default-watchdog.path service is enabled automatically to ensure linux-surface is used on boot. Using the virtual keyboard on KDE Enable it in System Settings → Keyboard → Virtual Keyboard. Note that this keyboard cannot be used with Fcitx5.

Thursday, December 11, 2025 Read

VSCode Integration with DevSpace for Debugging!

VSCode Integration with DevSpace for Debugging! DevSpace Install required tools 📦 # Check Go version go version # Install the Delve debugger go install github.com/go-delve/delve/cmd/dlv@latest # Check DevSpace version devspace version # Install VSCode Go extensions code --install-extension golang.go code --install-extension devspace.devspace Project structure design 📁 . ├── cmd │ └── main.go ├── devspace.yaml ├── Dockerfile.dev ├── Dockerfile.prod ├── go.mod ├── go.sum ├── internal │ ├── handler.go │ ├── model.go │ └── service.go ├── k8s │ └── dev │ ├── deployment.yaml │ └── service.yaml ├── main └── start-dev.sh Prepare the Go application 🚀 First, build a simple but practical Go application with a few API endpoints so you can test breakpoints.

Wednesday, December 10, 2025 Read

Harden a Server with Fail2Ban + nftables

Monday, December 8, 2025 Read

parqeye

parqeye install methods cargo install parqeye brew install kaushiksrini/parqeye/parqeye

Tuesday, November 18, 2025 Read

Mosdns-X

Mosdns-X Make DNS faster and cleaner on Linux: Deploy Mosdns-X install bash <(curl -sL https://raw.githubusercontent.com/lidebyte/bashshell/refs/heads/main/mosdns-x-manager.sh) config sudo tee /etc/mosdns-x/config.yaml > /dev/null <<'EOF' # mosdns-x concurrent query (no split routing) config log: level: info file: /var/log/mosdns-x/mosdns-x.log plugins: # Cache plugin - tag: cache type: cache args: size: 1024 lazy_cache_ttl: 1800 # Concurrent upstreams: take the first usable answer - tag: forward_all type: fast_forward args: upstream: # AliDNS - addr: "udp://223.5.5.5" - addr: "tls://dns.alidns.com" # DNSPod / doh.pub - addr: "udp://119.29.29.29" - addr: "tls://dot.pub" # Cloudflare - addr: "udp://1.1.1.1" - addr: "tls://cloudflare-dns.com" # Google - addr: "udp://8.8.8.8" - addr: "tls://dns.google" # Main pipeline: small cache -> concurrent selection - tag: main type: sequence args: exec: - cache - forward_all # Listen on dual-stack UDP/TCP 53 servers: - exec: main listeners: - addr: :53 protocol: udp - addr: :53 protocol: tcp EOF systemd sudo tee /etc/systemd/system/mosdns.service > /dev/null <<'EOF' [Unit] Description=Mosdns-X DNS Accelerator After=network.target [Service] Type=simple User=root Group=root ExecStart=/usr/local/bin/mosdns-x start --as-service -d /usr/local/bin -c /etc/mosdns-x/config.yaml Restart=always RestartSec=5 StandardOutput=journal StandardError=journal SyslogIdentifier=mosdns [Install] WantedBy=multi-user.target EOF sudo systemctl daemon-reload sudo systemctl enable --now mosdns # Backup system DNS sudo cp -n /etc/resolv.conf /etc/resolv.conf.mosdns-backup # Switch to local Mosdns-X echo -e "nameserver 127.0.0.1\noptions edns0" | sudo tee /etc/resolv.conf # If port 53 is occupied by systemd-resolved, disable it sudo systemctl disable --now systemd-resolved 2>/dev/null || true # If you also want to lock it (prevent DHCP changes), run chattr too: echo -e "nameserver 127.0.0.1\n" > /etc/resolv.conf && chattr +i /etc/resolv.conf # Check process status sudo systemctl status mosdns --no-pager # Test resolution speed (second run should hit cache) dig +stats www.google.com dig +stats www.baidu.com # View logs in real time tail -f /var/log/mosdns-x/mosdns-x.log

Sunday, November 9, 2025 Read

go-synctest

go-synctest func TestAfterFunc(t *testing.T) { synctest.Test(t, func(*testing.T) { ctx, cancel := context.WithCancel(context.Background()) called := false context.AfterFunc(ctx, func() { called = true }) synctest.Wait() // Wait until all goroutines are blocked if called { t.Fatal("AfterFunc was called before cancel") } cancel() synctest.Wait() // Wait again if !called { t.Fatal("AfterFunc was not called after cancel") } }) }

Friday, November 7, 2025 Read

onion-mirror

onion-mirror Install Tor sudo apt update sudo apt install tor Configure Tor # Disable SOCKS proxy since we aren't making outbound connections # through Tor SocksPort 0 # Make sure Tor runs as a daemon (i.e. in the background) RunAsDaemon 1 # Setup the hidden service on port 80, this is where we tell Tor to # create a .onion service for our web server HiddenServiceDir /var/lib/tor/hidden_service/ HiddenServicePort 80 # Disable inbound connections, since we aren't running a relay or # exit node ORPort 0 # Disable directory services, since we won't be mirroring directory # information to other Tor nodes DirPort 0 sudo systemctl restart tor Get Your .onion Address sudo cat /var/lib/tor/hidden_service/hostname Configure Caddy http://jytkco7clxwj4hhzaydhk4kr3hwzsdzyvtsc6zn2ivog5uma5pxowzad.onion:80 { # Set up a reverse proxy, or serve static files, etc. } Advertise Your .onion Address header { Onion-Location http://jytkco7clxwj4hhzaydhk4kr3hwzsdzyvtsc6zn2ivog5uma5pxowzad.onion{uri} }

Thursday, October 30, 2025 Read