Deep dives into Linux systems, ZFS encryption, Proxmox virtualization, and security tooling.https://ashu.io/en-ushttps://ashu.io/blog/arch-zfs-enc/https://ashu.io/blog/arch-zfs-enc/Full walkthrough for installing Arch Linux with ZFS as the root filesystem, native encryption via a passphrase, and GRUB bootloader configuration.Wed, 28 Jul 2021 00:00:00 GMTLinuxArch LinuxZFSEncryptionGRUBInstallationhttps://ashu.io/blog/ssh-u2f/https://ashu.io/blog/ssh-u2f/How to use ed25519-sk keys for 2FA SSH authentication. No more GPG hacks. Works with any FIDO2/U2F compatible security key.Tue, 27 Jul 2021 00:00:00 GMTSecuritySSHFIDO2U2FYubiKey2FAhttps://ashu.io/blog/media-server-lxc/https://ashu.io/blog/media-server-lxc/GPU passthrough to a privileged LXC container for hardware transcoding. Intel, AMD, and Nvidia driver setup on the Proxmox host.Sun, 25 Jul 2021 00:00:00 GMTProxmoxProxmoxLXCPlexJellyfinGPUTranscodinghttps://ashu.io/blog/yubikey-pam/https://ashu.io/blog/yubikey-pam/Configure pam-u2f for system login, sudo, and su. Individual vs central configuration files, plus passwordless sudo with a Yubikey touch.Sat, 24 Jul 2021 17:59:00 GMTSecurityYubiKeyU2FPAMLinuxAuthenticationhttps://ashu.io/blog/pihole-rpi-install/https://ashu.io/blog/pihole-rpi-install/Network-wide ad blocking with a DNS sinkhole on Raspberry Pi. Setup, DHCP configuration, and secondary DNS failover.Sat, 24 Jul 2021 16:04:00 GMTLinuxRaspberry PiPi-holeDNSNetworkingAd Blockinghttps://ashu.io/blog/docker-proxmox/https://ashu.io/blog/docker-proxmox/Running Docker inside an unprivileged LXC container with nesting, keyctl, and fuse features enabled. No bare-metal Docker on Proxmox.Sat, 24 Jul 2021 00:02:00 GMTProxmoxDockerProxmoxLXCContainers