Linux Log Rotation Strategies for High Volume Application Logs
For high volume application logs, rotate by size as well as by time, compress old files, limit retention, and prefer telling the application to reopen its log...
Category
Linux/Bash
Bash Argument Parsing With getopts vs Manual Case Statements
The built-in getopts handles short options such as -v and -f file reliably and portably, but it does not support long options like --verbose. A manual while...
Linux Disk Space Monitoring and Inode Exhaustion Prevention
A Linux filesystem can run out of space in two ways: it can run out of blocks, which is what df -h shows, or it can run out of inodes, which is shown by df -i....
Linux Systemd Service Hardening Options for Network Daemons
Systemd can sandbox a network daemon with a few unit file options: run it as an unprivileged user, set NoNewPrivileges, make most of the filesystem read-only...
Bash Lockfiles vs Flock for Scheduled Job Coordination
A lockfile's mere existence does not establish ownership of a live process. Start with a clearly defined correctness invariant and workload. Identify the state...
Linux Systemd Environment Files and Secret Exposure
Environment files simplify unit configuration but can expose secrets to processes or diagnostics. Start with a clearly defined correctness invariant and...
Linux File Permissions ACLs vs Unix Groups for Shared Services
Unix group permissions are simple while ACLs can provide finer-grained access for multiple principals. Start with a clearly defined correctness invariant and...
Linux Process Priorities With Nice and Ionice for Background Jobs
The nice command lowers a process's CPU scheduling priority, and ionice lowers its disk I/O priority, so background jobs such as backups and batch processing...
Linux Swap and OOM Killer Behavior on Memory Constrained Servers
On a memory constrained Linux server, swap gives the kernel breathing room by moving rarely used pages to disk, while the OOM killer is the last resort that...