Curing Image Bloat With Scratch and Distroless Base Images
Shrink container images with multi-stage builds, the empty scratch base, and distroless runtimes — smaller pulls, fewer CVEs, faster starts.
Containers & Orchestration7 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
A Practical First Automation Project, End to End
Build a complete first automation project: inventory, an idempotent playbook, a dry-run, a real apply, and a scheduled re-converge.
API & Automation8 min read
SQLite Multi-Process Writes: Queue, One Writer, or Postgres
Serialize SQLite writes with a queue or a single writer process, and graduate to Postgres when several processes must commit at once on a VPS.
Databases8 min read
Diagnose Certificate Errors: Chain, Clock, Name Mismatch
Diagnose HTTPS errors by chain, clock skew, and name mismatch using openssl and browser clues before you reissue a certificate that already works.
DNS & TLS8 min read
System Cron for wp-cron and Laravel Scheduler
Disable WP-Cron and Laravel web pings, then run wp-cron.php and artisan schedule:run from system cron so jobs fire on time without depending on visitor traffic.
App Deployment8 min read
Break-Glass SSH: Second Key, Port, and Console
Keep a second key, a second sshd port, and a Web VNC console mindset so a bad sshd reload is an inconvenience, not a lockout on a Lucknow VPS.
Linux Administration8 min read
Detecting Brute-Force and Suspicious SSH Logins
Read auth logs like a security analyst, spot brute-force bursts and compromised accounts, and act on suspicious SSH login signals before they become a breach.
Linux Security7 min read
RHEL UBI and Cloud Images: Distroless-Adjacent Server Layers
RHEL's free Universal Base Images give containers a signed, glibc-compatible runtime down to a few megabytes, with UBI micro at the distroless edge.
Linux6 min read
Application-Aware Backups for Dockerized Databases
Trigger consistent backups of databases running in Docker by executing pg_dump and mysqldump inside containers, with timed dumps and status checks.
Backups & Data8 min read
Git Submodules vs Subtrees: GitHub and the Workflow
Submodules pin an external commit; subtrees vendor the code wholesale. Here is how both behave on GitHub, their sharp edges, and when to use each one.
GitHub7 min read
Input Validation and Payload Size Limits
Apply layered input validation and payload limits to stop malformed data, injection, and oversized request attacks against your API endpoints.
API & Automation7 min read
Picking 3B vs 7B vs 8B for an 8 GB CPU VPS
Choose a 3B, 7B, or 8B Q4 GGUF for an 8 GB Intel Xeon Platinum VPS using RAM, context, and tokens per second — not the Hugging Face model card.
AI Infrastructure8 min read