A Server-Admin Agent That Runs Shell Safely
Build a server-admin agent that never gets a raw shell: allowlisted binaries, a cwd jail, timeouts, and no pipes, on a Linux VPS in Lucknow.
AI Agents9 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
499 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Health Checks and Draining a Local Model Process
Probe llama-server with /health, stop nginx from sending new work, and SIGTERM the GGUF process only after in-flight CPU generates finish safely.
AI Infrastructure8 min read
Parallel Jobs and Matrix Builds for Faster CI
Run checks concurrently and use build matrices to test many configurations without exploding your pipeline.
CI/CD7 min read
Back Up Vector Databases and Model Configs
Snapshot vector indexes, prompt packs, and router YAML on a Lucknow VPS, skip re-downloadable weights, and rehearse a restore before the disk fills.
AI Infrastructure8 min read
Void Linux and Artix: Systemd-Free Alternatives on the Server
Void with runit and Artix with OpenRC or runit give enthusiasts systemd-free control of a hobby server. Compare init systems, package managers, and cadence.
Linux7 min read
Dependency Vulnerability Scanning Integrated Into CI
Scan dependencies for known vulnerabilities in every build and gate on blocking findings to keep supply-chain risk out of production.
CI/CD6 min read
SQLite vs Postgres: A Decision You Can Defend
Defend SQLite or Postgres with host count, writer count, and ops load, not fashion, so a VPS app does not outgrow the wrong engine by surprise.
Databases8 min read
Kernel sysctl Hardening Checklist for a Public Server
Harden a Linux kernel against network abuse and privilege escalation by tuning the sysctl knobs that matter most for a public-facing internet VPS.
Linux Security7 min read
systemd Socket Activation: Faster Starts and Zero Downtime Binding
Have systemd hold your ports open: start listeners instantly, spawn services on first connection, and drop privileges without touching the socket.
Linux Administration6 min read
Test Your Restores: Unverified Backups Are Not Backups
A restore drill you run to a clean directory, against a real copy, catches corruption and missing dependencies before production depends on them.
Backups & Data7 min read
ss and ethtool: Inspect Sockets and NIC Stats
Use ss to inspect sockets and connections and ethtool to read NIC statistics for diagnosing Linux server networking problems.
Linux Networking7 min read
Rate-Limit Your Own Inference API on a VPS
Put token buckets and nginx limit_req in front of a local CPU inference API so one client cannot OOM the box or stall every other RAG query.
AI Infrastructure8 min read