-
Velero Docs - Overview
(velero.io)
reference
backup, restore and migration of Kubernetes cluster resources and persistent volumes, cloud or on-prem
-
buildah.io
(buildah.io)
tool
Daemonless OCI image building without a full container engine; containers org project, release news
-
Introduction | Podman Desktop
(podman-desktop.io)
reference
GUI for containers, pods and local Kubernetes on Linux, macOS and Windows, with Docker migration notes
-
Home
(Docker Documentation)
reference
engine and CLI, image building, Desktop VMM on Mac/Windows, sandboxes and hardened image catalogue
-
Docker Compose Specification
(compose-spec.io)
reference
vendor-neutral YAML standard for declaring multi-container applications, shared beyond Docker
-
OpenStack Docs: 2026.1
(docs.openstack.org)
reference
OpenStack 2026.1 install, deployment, operations, high-availability and security guides for datacenter IaaS
-
OpenStack Installation Guide — Installation Guide documentation
(docs.openstack.org)
tutorial
node-by-node manual install of core OpenStack services on RHEL/CentOS or Ubuntu, per release
-
OpenInfra Foundation: We build communities who write software that runs in production
(openinfra.org)
organisation
steward of OpenStack and related open infrastructure projects, run on its Four Opens principles
-
OpenStack Compute (nova) — nova 33.1.0.dev341 documentation
(docs.openstack.org)
reference
OpenStack compute service for VMs and bare metal; needs Keystone, Glance, Neutron and Placement
-
Welcome to Neutron’s documentation! — Neutron 29.0.0.0b2.dev121 documentation
(docs.openstack.org)
reference
OpenStack network-connectivity-as-a-service: API, OVN driver, config and CLI reference
-
OpenStack Block Storage (Cinder) documentation — cinder 28.1.0.dev232 documentation
(docs.openstack.org)
reference
OpenStack block storage service: volumes for Nova VMs, Ironic hosts and containers via REST API, CLI, Horizon
-
Welcome to Swift’s documentation! — Swift 2.38.1.dev87 documentation
(docs.openstack.org)
reference
OpenStack's eventually consistent object/blob store: replication, REST API, S3 compatibility
-
Keystone, the OpenStack Identity Service — keystone 29.1.0.dev64 documentation
(docs.openstack.org)
reference
OpenStack identity service: API client authentication, service discovery, multi-tenant authorization
-
Welcome to Glance’s documentation! — glance 33.0.0.0b3.dev38 documentation
(docs.openstack.org)
reference
OpenStack image service: registering, discovering and retrieving VM images, metadefs catalog
-
Horizon: The OpenStack Dashboard Project — horizon 26.0.1.dev42 documentation
(docs.openstack.org)
reference
OpenStack's web dashboard fronting Nova, Swift and Keystone; usage plus writing your own panels
-
Welcome to Ironic’s documentation! — ironic 38.0.1.dev77 documentation
(docs.openstack.org)
reference
OpenStack bare-metal service driving PXE and IPMI to provision physical servers, usable standalone
-
Welcome to the Heat documentation! — openstack-heat 26.1.0.dev107 documentation
(docs.openstack.org)
reference
template-driven orchestration of OpenStack resources: stacks, autoscaling, nested stacks, plugins
-
DevStack — DevStack documentation
(docs.openstack.org)
tutorial
Scripts standing up a whole OpenStack from git master on one host; dev and test only, rewrites the box
-
Welcome to Kolla Ansible’s documentation! — kolla-ansible 22.1.0.dev193 documentation
(docs.openstack.org)
reference
deploying OpenStack from production-ready containers via Ansible; opinionated but customisable
-
Apache CloudStack | Apache CloudStack
(cloudstack.apache.org)
tool
turnkey IaaS orchestration for large VM and bare-metal estates: networking, accounts, quotas, API
-
OpenNebula: The Open Platform for Sovereign Cloud Infrastructure
(OpenNebula – Open Source Cloud & Edge Computing Platform)
tool
VMware replacement for private and edge clouds: hypervisor ops, HA, federation; paid subscription
-
Proxmox VE Documentation Index
(pve.proxmox.com)
reference
admin guide, man pages and API viewer for Proxmox VE's KVM and LXC virtualisation
-
XCP-ng documentation | XCP-ng Documentation
(docs.xcp-ng.org)
reference
Xen-based enterprise hypervisor, XenServer's open successor: host and pool admin, Packer/Terraform/Ansible
-
libvirt: The virtualization API
(libvirt.org)
tool
C/Python/Perl/Go API and daemon driving KVM, QEMU, Xen, LXC, bhyve and ESX; XML schema docs
-
QEMU documentation - QEMU
(qemu.org)
reference
docs index for the machine emulator and KVM hypervisor, mostly generated from the git tree
-
Documentation | Vagrant | HashiCorp Developer
(Documentation | Vagrant | HashiCorp Developer)
reference
Vagrantfile-driven throwaway VMs: boxes, provisioners, synced folders, networking, box registry
-
Access Cloud Services for Free
(oracle.com)
tool
Always Free OCI compute and storage with no time limit, plus a 30-day US$300 trial credit
-
Oracle VirtualBox
(virtualbox.org)
tool
x86_64 desktop-to-server type-2 hypervisor, GPL and free, Oracle-backed, also macOS/Windows on Arm
-
Free Cloud Computing Services - AWS Free Tier
(Amazon Web Services, Inc.)
reference
what AWS gives away: 30+ always-free services within monthly limits, plus $200 new-account credits
-
Free Trial and Free Tier Services and Products
(Google Cloud)
reference
What GCP gives away: $300 trial credit plus 20+ always-free monthly limits, e2-micro to 1 TB BigQuery
-
Explore Free Azure Services | Microsoft Azure
(azure.microsoft.com)
reference
which Azure services are always free versus free for 12 new-customer months, plus $100 credit
-
Free Plan Overview
(cloudflare.com)
organisation
what Cloudflare hands out at no cost: DDoS protection, CDN, DNS, TLS and basic load balancing
-
Hetzner Docs
(docs.hetzner.com)
reference
guides for Hetzner Cloud, dedicated servers, Robot, DNS and Storage Boxes; low-cost EU hosting
-
Fly.io Resource Pricing
(Fly)
reference
usage-based billing for Fly.io machines and resources, per organisation; card on file required
-
Pricing and Plans | Netlify
(Netlify)
reference
credit-metered static and serverless hosting plans: compute, bandwidth, requests; free Starter tier
-
Packer documentation | Packer | HashiCorp Developer
(Packer documentation | Packer | HashiCorp Developer)
reference
Builds identical golden machine images for many platforms from one template, plugin-driven
-
Terraform overview | Terraform | HashiCorp Developer
(Terraform overview | Terraform | HashiCorp Developer)
reference
declarative provisioning across cloud providers: HCL, CLI and state; BUSL licensed, HCP tiers above it
-
Crossplane Is the Cloud-Native Framework for Platform Engineering
(crossplane.io)
tool
Kubernetes-based control planes exposing custom APIs that provision cloud resources; CNCF project
-
MAAS documentation
(MAAS)
reference
bare-metal provisioning at scale: hardware discovery, integrated DNS/DHCP, image deployment, API-driven
-
Red Hat Customer Portal
(Red Hat Customer Portal)
reference
subscriber entry point: knowledgebase solutions, downloads, support cases, subscription management
-
Experience Red Hat Enterprise Linux | Red Hat interactive labs
(redhat.com)
tutorial
no-cost browser sandboxes for RHEL: dnf/rpm, SELinux, crypto policy, firewall via Ansible system roles
-
The official Red Hat blog
(redhat.com)
news
Red Hat's own posts on RHEL, OpenShift, automation, edge and security; carries Enable Sysadmin
-
Red Hat Lightspeed
(redhat.com)
tool
hosted risk prediction and drift detection across RHEL, OpenShift and Ansible, formerly Insights
-
Red Hat Satellite
(redhat.com)
tool
provisioning, patching, errata and subscription lifecycle for RHEL fleets; paid Red Hat product
-
Home | Linux System Roles
(linux-system-roles.github.io)
tool
Ansible roles giving a stable interface to OS subsystems; upstream of RHEL System Roles, on Galaxy
-
Cockpit Project
(Cockpit Project)
tool
web console for single Linux servers: containers, storage, network, logs, built-in terminal; LGPL
-
Foreman
(theforeman.org)
tool
provisioning and lifecycle of bare-metal and cloud hosts: Puppet/Salt ENC, host groups, RBAC, Hammer CLI, API
-
rpm.org - Home
(rpm.org)
tool
Home of RPM: building, installing, querying and verifying packages, plus release and CVE news
-
RPM Packaging Guide
(rpm-packaging-guide.github.io)
tutorial
writing spec files and building RPMs, from no packaging background through advanced cases; free
-
DNF, the next-generation replacement for YUM — DNF @DNF_VERSION@-1 documentation
(dnf.readthedocs.io)
reference
YUM successor for RPM systems: command, config and API reference, plugins, automatic updates
-
EPEL
(docs.fedoraproject.org)
reference
Extra Packages for Enterprise Linux: community RPMs for RHEL and rebuilds
-
Copr
(copr.fedorainfracloud.org)
tool
Fedora's free build service for personal and community RPM repositories
-
CentOS Stream - The CentOS Project
(centos.org)
tool
continuously delivered midstream between Fedora and RHEL, tracking just ahead of RHEL development
-
Welcome to Anaconda’s documentation! — Anaconda 45.20 documentation
(anaconda-installer.readthedocs.io)
reference
installer behind Fedora and RHEL: kickstart automation, %post scripting, user and developer guides
-
Welcome to Pykickstart’s documentation! — Pykickstart 3.77 documentation
(pykickstart.readthedocs.io)
reference
Kickstart file syntax for unattended Fedora and RHEL installs, with pre/post scripts and examples
-
About AlmaLinux Wiki | AlmaLinux Wiki
(wiki.almalinux.org)
reference
Docs hub for the forever-free RHEL-binary-compatible rebuild, run by a non-profit foundation
-
Oracle Linux - Oracle Linux
(Oracle Help Center)
reference
release documentation for Oracle Linux and the Unbreakable Enterprise Kernel
-
Oracle Linux
(oracle.com)
tool
RHEL-compatible distro free to download, use and redistribute, with paid Premier Support alongside
-
Oracle Linux Yum Server
(yum.oracle.com)
reference
no-cost public RPM repositories for Oracle Linux plus EPEL, ISO verification and install notes
-
https://docs.aws.amazon.com/linux/
(docs.aws.amazon.com)
reference
AL2023 user guide and release notes for AWS's RPM-based distribution, plus legacy AL2 and AL1
-
SUSE - Open Source Solutions for Enterprise Servers & Cloud
(documentation.suse.com)
reference
SLES 16 doc set: release notes, package lifecycles, Agama installer, SELinux, PXE deploy, SLES 15 migration
-
Evaluation Copy of SUSE Linux Enterprise Server | SUSE
(suse.com)
organisation
SLES evaluation images and update channels, gated behind a no-cost Customer Center registration
-
Ubuntu Pro | Ubuntu
(Ubuntu)
organisation
Canonical's security and compliance subscription: 10-year LTS coverage, free for personal use on 5 machines
-
The Debian Administrator's Handbook
(debian.org)
reference
Full book text for Debian Bullseye administration, dual CC BY-SA and GPL licensed, free to read
-
Home | OpenSCAP portal
(open-scap.org)
tool
NIST-certified SCAP tooling to assess and enforce security baselines, with community hardening guides
-
GitHub - ComplianceAsCode/content: Security automation content in SCAP, Bash, Ansible, and other formats
(GitHub)
repo
SCAP/XCCDF/OVAL hardening profiles with generated Ansible and bash remediation for RHEL, Ubuntu, SLES
-
CIS Benchmarks®
(CIS)
reference
consensus hardening baselines for 25+ product families; free PDFs, tailoring needs paid membership
-
DISA STIGs
(cyber.mil)
reference
US DoD Security Technical Implementation Guides, free public downloads
-
AIDE - Advanced Intrusion Detection Environment
(aide.github.io)
tool
File and directory integrity checker: rule-built database of hashes, perms, ACLs, SELinux and xattrs
-
GitHub - SELinuxProject/selinux-notebook: The SELinux Notebook
(GitHub)
repo
book-length reference on SELinux policy, kernel components and userspace tools; free, HTML/PDF/EPUB
-
Home
(firewalld)
tool
zone-based dynamic firewall daemon separating runtime from permanent config, with a D-Bus API
-
rsyslog 8 daily stable documentation
(docs.rsyslog.com)
reference
official docs for the usual Linux syslog daemon: RainerScript routing, filtering, Kafka output
-
Welcome to Ceph — Ceph Documentation
(docs.ceph.com)
reference
unified distributed storage: S3/Swift object, thin-provisioned block, POSIX CephFS; dev-branch docs
-
Rook - Rook Ceph Documentation
(rook.io)
reference
Kubernetes operator that deploys and self-manages Ceph block, object and file storage; CNCF graduated project
-
Gluster
(Gluster)
tool
Scale-out network filesystem pooling commodity hardware into large volumes; free, news ends 2021
-
MinIO AIStor Documentation
(MinIO AIStor Documentation)
reference
S3-compatible object store with Iceberg tables and SFTP; installing and operating AIStor clusters
-
GitHub - seaweedfs/seaweedfs: SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables, designed to handle billions of files with O(1) disk access and effortless horizontal scaling.
(GitHub)
repo
Distributed store for billions of small files: S3 endpoint, filer, Iceberg tables; Apache-2.0
-
The Garage team - An S3 object store so reliable you can run it outside datacenters
(Garage)
tool
single dependency-free binary S3 store, data replicated across 3 zones, made to run between sites; AGPL
-
Lustre
(lustre.org)
tool
parallel scale-out filesystem for HPC clusters; releases roadmap, LNET, benchmarking and admin wiki
-
ext4 Data Structures and Algorithms — The Linux Kernel documentation
(docs.kernel.org)
reference
on-disk layout of ext4: superblock, block groups, inodes, extents, journalling and checksums
-
The SGI XFS Filesystem — The Linux Kernel documentation
(docs.kernel.org)
reference
XFS mount options and on-disk behaviour: allocsize, discard, journaling and large-filesystem tuning
-
Welcome to BTRFS documentation! — BTRFS documentation
(btrfs.readthedocs.io)
reference
copy-on-write filesystem docs: features, fault tolerance, repair and btrfs-progs man pages
-
bcachefs
(bcachefs.org)
tool
copy-on-write Linux filesystem with checksumming, replication, erasure coding, tiering, snapshots
-
LVM2 Resource Page
(sourceware.org)
tool
userspace logical volume manager over device-mapper: source tarballs, mirrors, mailing lists
-
Stratis Storage
(stratis-storage.github.io)
tool
local storage pool manager layered on device-mapper, XFS, LUKS and Clevis; online re-encryption
-
cryptsetup / LUKS
(GitLab)
repo
Linux disk encryption tooling and the LUKS on-disk format
-
Linux Raid Wiki
(archive.kernel.org)
reference
archived linux-raid list reference for md/mdadm software RAID, kernel 4 era; superseded, no longer updated
-
NFS — The Linux Kernel documentation
(docs.kernel.org)
reference
Kernel-side NFS client and server administration: nfsroot, NFS/RDMA, admin interfaces, I/O stats
-
Samba
(GitLab)
repo
SMB/CIFS file and print sharing for Unix, and an AD domain controller
-
Open-iSCSI by open-iscsi
(open-iscsi.com)
tool
Linux iSCSI initiator per RFC 3720: iscsid daemon and iscsiadm over kernel data-path modules, GPL-2.0
-
NVM Express
(NVM Express - scalable, efficient, and industry standard)
organisation
Non-profit consortium publishing NVMe and NVMe-over-Fabrics specs across PCIe, RDMA and TCP
-
ClusterLabs
(ClusterLabs)
tool
upstream of Pacemaker and Corosync: cluster-wide service recovery, fencing and multi-site failover
-
Pacemaker documentation
(ClusterLabs)
reference
cluster resource manager docs: Clusters from Scratch walkthrough plus exhaustive Pacemaker Explained
-
Corosync by corosync
(corosync.github.io)
tool
cluster messaging and quorum engine under Pacemaker: virtual synchrony, membership, process restart
-
Keepalived
(keepalived.org)
tool
VRRP failover plus IPVS layer-4 load balancing, with health checkers and BFD-driven fast takeover
-
User Guides and Product Documentation
(LINBIT)
reference
guides for DRBD replicated block devices, LINSTOR and clustering; certified binaries are paid
-
MariaDB Galera Cluster | Galera Cluster | MariaDB Documentation
(mariadb.com)
reference
synchronous multi-master replication for MariaDB: implementation, config and production operation
-
https://access.redhat.com/products/red-hat-high-availability-add-on
(access.redhat.com)
reference
RHEL clustering add-on for failover services; needs a paid subscription
-
Bareos Main Reference and Documentation — Bareos Documentation documentation
(docs.bareos.org)
reference
reference for Bareos network backup: director, console and webui config, Python API
-
Restic Documentation — restic 0.19.1 documentation
(restic.readthedocs.io)
reference
restic manual: repositories on SFTP, S3, B2, Azure, rclone; snapshots, encryption, pruning, scripted backups
-
What is Kopia?
(kopia.io)
reference
Encrypted, deduplicated, compressed snapshots to cloud, NAS or local repos; CLI and GUI, open source
-
Relax-and-Recover - Linux Disaster Recovery
(relax-and-recover.org)
tool
bare-metal disaster recovery: bootable rescue images plus dozens of backup back-ends, GPL
-
Free Backup for Linux workloads - Veeam Agent for Linux
(Veeam Software)
tool
No-cost single-machine Linux backup agent, file and volume level, changed-block tracking
-
Red Hat Enterprise Linux
(redhat.com)
tool
vendor overview of RHEL 10 variants, use cases and support posture; paid subscription product
-
Red Hat Universal Base Image - Red Hat Ecosystem Catalog
(catalog.redhat.com)
reference
freely redistributable RHEL-derived OCI base images: platform, minimal, micro, plus runtime images
-
Home - Red Hat Ecosystem Catalog
(catalog.redhat.com)
reference
searchable index of certified Red Hat and partner products and container images across RHEL and OpenShift
-
Understanding Linux
(redhat.com)
article
Vendor explainer on what Linux is: distro choice, Fedora versus RHEL, cloud and high-availability uses
-
Containers explained: What they are and why you should care
(redhat.com)
article
vendor explainer on container isolation and portability across dev, cloud and on-premise
-
Learning Ansible basics
(redhat.com)
article
how modules, inventories and playbooks work, and what the paid Automation Platform adds on top
-
Red Hat OpenShift
(redhat.com)
tool
editions from managed ROSA and ARO to self-managed Container Platform; commercial, free dev tiers
-
Red Hat Ansible Automation Platform
(redhat.com)
tool
Red Hat's subscription platform atop Ansible for Linux, Windows, network and VM automation at scale
-
Training and Certification
(redhat.com)
reference
Red Hat course and exam catalogue from RH124 up, plus the paid Red Hat Learning Subscription
-
SUSE Linux Enterprise Server Distribution | Linux Server | SUSE
(suse.com)
organisation
Vendor overview of SLES 16: long lifecycle, Common Criteria EAL4+, reproducible builds, subscription
-
Community
(Rancher Labs)
organisation
Rancher and SUSE cloud native community hub: Rancher Academy training, GitHub, Slack, events
-
Documentation: Apache HTTP Server - The Apache HTTP Server Project
(httpd.apache.org)
reference
Version-indexed httpd manuals (2.4, trunk, legacy), offline zips, plus user recipe wiki
-
nginx documentation
(nginx.org)
reference
request processing, server names, HTTPS setup, HTTP load balancing and full module reference
-
NGINX Unit: Universal web app server
(unit.nginx.org)
tool
polyglot app server with runtime JSON config, TLS and routing; maintainers ship no new features
-
Home - lighty news
(lighttpd.net)
tool
small-footprint web server with FastCGI, CGI, rewriting and TLS 1.3 defaults, revised BSD license
-
OpenLiteSpeed
(openlitespeed.org)
tool
Free open-source LiteSpeed edition: event-driven, mod_rewrite-compatible, WebAdmin GUI, page cache
-
H2O - the optimized HTTP server
(h2o.examp1e.net)
tool
HTTP/2 and HTTP/3 server with ACME certificates, prioritisation and mruby scripting; open source
-
Apache Tomcat® - Welcome!
(tomcat.apache.org)
tool
Jakarta Servlet, Pages and WebSocket implementation hosting Java web apps, Apache-2 licensed
-
The Eclipse Jetty Project :: Eclipse Jetty
(jetty.org)
tool
embeddable Java servlet container and HTTP/1-3 plus WebSocket server; EPL2 and Apache-2.0
-
WildFly
(WildFly)
tool
modular Jakarta EE application server from Red Hat, managed via CLI, REST, JMX and web console
-
IIS documentation
(learn.microsoft.com)
reference
Microsoft IIS docs hub: configuration, architecture, administration, IIS Express and the Administration API
-
HTTP | Node.js v26.7.0 Documentation
(nodejs.org)
reference
node:http client and server API: low-level stream and header handling, no body parsing
-
Get started with Deno
(Deno)
reference
TypeScript-first JavaScript runtime, sandboxed by default, with built-in formatter, linter and tests
-
http.server — HTTP servers
(Python documentation)
reference
Python stdlib HTTPServer and request-handler classes; explicitly not for production use
-
Gunicorn - Python WSGI HTTP Server for UNIX
(gunicorn.org)
tool
pre-fork WSGI/ASGI server fronting Django, Flask or FastAPI; one command, minimal dependencies
-
Index - Uvicorn
(uvicorn.dev)
reference
ASGI server for Python async frameworks, HTTP/1.1 and WebSockets, run from CLI or programmatically
-
A Fast, Concurrent Web Server for Ruby & Rack - Puma
(puma.io)
tool
concurrent HTTP/1.1 server for Ruby Rack apps, Ragel-based parser, far lower memory than Unicorn
-
PHP: FastCGI Process Manager (FPM) - Manual
(php.net)
reference
PHP FastCGI process manager: per-pool uid/chroot workers, dynamic spawning, slowlog, status output
-
FrankenPHP: the modern PHP app server
(frankenphp.dev)
tool
PHP app server on Caddy: worker mode keeps apps in memory, one binary, Symfony and Laravel support
-
HAProxy - The Reliable, High Perf. TCP/HTTP Load Balancer
(haproxy.org)
tool
free TCP and HTTP reverse proxy for load balancing very high traffic, several branches maintained
-
Envoy proxy - documentation
(envoyproxy.io)
reference
per-version documentation index for the CNCF L7 proxy, stable through archived releases
-
squid : Optimising Web Delivery
(squid-cache.org)
tool
GPL caching forward proxy for HTTP/HTTPS/FTP with access controls and cache hierarchies
-
Cloudflare Tunnel
(Cloudflare Docs)
reference
cloudflared outbound-only tunnels exposing HTTP, SSH and RDP origins with no public IP; free tier available
-
Documentation
(letsencrypt.org)
reference
Free automated ACME certificate authority: client choices, rate limits, chains of trust, staging
-
Certbot
(certbot.eff.org)
tool
EFF's ACME client automating free Let's Encrypt certificates, with per-server install instructions
-
GitHub - acmesh-official/acme.sh: A pure Unix shell script ACME client for SSL / TLS certificate automation
(GitHub)
repo
POSIX shell ACME client issuing and renewing free TLS certs, wildcard and ECDSA, no root needed
-
Lego :: ACME client and library written in Go.
(ACME client and library written in Go.)
reference
ACME certificate issuance and renewal via HTTP-01, TLS-ALPN-01 or DNS-01 across 200+ DNS providers
-
Mozilla SSL Configuration Generator
(ssl-config.mozilla.org)
tool
generator of TLS cipher and protocol config for common web servers; now redirects to TLSRef Configurator
-
SSL Server Test (Powered by Qualys SSL Labs)
(ssllabs.com)
tool
free online deep analysis of any public HTTPS server's TLS configuration, protocols and ciphers
-
/bin/bash based TLS/SSL tester: testssl.sh
(testssl.sh)
tool
Bash script probing a server's TLS/SSL protocols, ciphers and weaknesses; GPLv2, donation-funded
-
OWASP Modsecurity Project
(Modsecurity Project)
tool
cross-platform WAF module with a rules language, paired with OWASP CRS; open source
-
OpenSSL Documentation
(docs.openssl.org)
reference
openssl command line, libssl/libcrypto functions, TLS and QUIC client/server guides, FIPS notes
-
FastCGI Specification
(fastcgi-archives.github.io)
reference
1996 Open Market protocol between web servers and long-lived FastCGI application processes
-
RFC 9113: HTTP/2
(IETF Datatracker)
reference
standards-track HTTP/2 spec: framing, field compression, multiplexing; obsoletes RFC 7540
-
RFC 9114: HTTP/3
(IETF Datatracker)
reference
standards-track mapping of HTTP semantics onto QUIC streams, and how HTTP/2 extensions port over
-
HTTP: Hypertext Transfer Protocol | MDN
(MDN Web Docs)
reference
HTTP protocol guides and per-header/method/status reference for the client-server web model
-
Clonezilla - About
(clonezilla.org)
reference
Partition and disk imaging tool for bare-metal backup, recovery, and mass deployment of systems
-
Tutorials
(digitalocean.com)
reference
DigitalOcean community tutorials, a large free library of Linux server guides
-
Initial Server Setup with Ubuntu
(digitalocean.com)
tutorial
First steps on a fresh Ubuntu server: non-root user, sudo, SSH access, firewall
-
How to Set Up SSH Keys on Ubuntu: A Comprehensive Guide
(digitalocean.com)
tutorial
Generating an SSH keypair and installing the public key for passwordless login
-
How To Install LAMP Stack (Apache, MySQL, PHP) on Ubuntu
(digitalocean.com)
tutorial
Installing Apache, MySQL and PHP on Ubuntu as a working LAMP stack
-
DigitalOcean
(digitalocean.com)
tutorial
nginx server blocks: hosting several sites on one machine with virtual hosts
-
UFW Essentials: Common Firewall Rules and Commands for Linux Security
(digitalocean.com)
tutorial
UFW rule syntax and command reference: allow, deny, ports, services, logging
-
How To Protect SSH with Fail2Ban on Ubuntu 22.04
(digitalocean.com)
tutorial
Fail2ban jails that watch auth logs and ban repeated SSH login failures
-
How To Secure Nginx with Let's Encrypt on Ubuntu
(digitalocean.com)
tutorial
Issuing and auto-renewing Let's Encrypt certificates for nginx with Certbot
-
How To Install PostgreSQL on Ubuntu
(digitalocean.com)
tutorial
Installing PostgreSQL on Ubuntu and creating roles and databases
-
How to Install Docker on Ubuntu – Step-by-Step Guide
(digitalocean.com)
tutorial
Installing Docker Engine on Ubuntu and running your first containers
-
Understanding Systemd Units and Unit Files
(digitalocean.com)
tutorial
What systemd units are and how unit file sections and directives fit together
-
About this project
(The Debian Administrator's Handbook)
reference
Debian sysadmin book by two Debian developers; free online, DFSG-compatible license, paperback sold
-
Debian Reference
(debian.org)
reference
post-installation overview of the Debian system, covering admin tasks through shell-command examples
-
Ubuntu Server documentation
(Ubuntu Server)
reference
Canonical's own server guide: installation, netplan, DNS/DHCP, firewalls, DNSSEC, Ubuntu Pro
-
Home - Documentation
(docs.rockylinux.org)
reference
docs hub for the RHEL-compatible rebuild: install, build and day-to-day admin guides, no cost
-
openSUSE Documentation
(openSUSE Documentation)
reference
Leap release notes with startup, reference, security, tuning, virtualization and AutoYaST manuals
-
Category:System administration - ArchWiki
(wiki.archlinux.org)
reference
index of ArchWiki sysadmin pages: 23 subcategories spanning maintenance and troubleshooting
-
Handbook:Main Page - Gentoo wiki
(wiki.gentoo.org)
reference
install and base-administration manual for a source-based distro: Portage, OpenRC, many CPU arches
-
Alpine User Handbook - Alpine Linux Documentation
(docs.alpinelinux.org)
reference
musl and BusyBox distro: install-to-disk steps and system components for desktop and server
-
FreeBSD Handbook
(FreeBSD Documentation Portal)
reference
official manual for installing and administering FreeBSD base systems
-
OpenBSD Frequently Asked Questions
(openbsd.org)
reference
supplemental admin guide to the man pages: console and serial setup, pf example rulesets, current release
-
The NetBSD Guide
(netbsd.org)
reference
Official NetBSD handbook: installation and day-to-day administration of the BSD base system
-
LinuxCommand.org: Learn The Linux Command Line. Write Shell Scripts.
(linuxcommand.org)
tutorial
William Shotts' free shell tutorials plus the full text of The Linux Command Line book
-
The GNU Bourne-Again Shell
(tiswww.case.edu)
tool
GNU Bash upstream home: POSIX shell implementation, releases, patches and manual, GPLv3
-
BashPitfalls - Greg's Wiki
(mywiki.wooledge.org)
reference
catalogue of common bash mistakes - word splitting, globbing, quoting - each shown with the correct form
-
tldr pages
(tldr.sh)
tool
community-written simplified man pages: practical examples per command, clients for every platform, free
-
Shell Command Language
(pubs.opengroup.org)
reference
POSIX.1-2024 normative definition of sh: token recognition, word expansion, redirection, compound commands
-
Unix & Linux Stack Exchange
(Unix & Linux Stack Exchange)
forum
Voted question-and-answer board where Unix and Linux users work through admin and shell problems
-
Julia Evans
(Julia Evans)
personal-site
posts and zines on the terminal, man pages, tcpdump and dig, git internals and SQLite
-
Google SRE - Site reliability engineering book Google index
(sre.google)
reference
Google's reliability practice as chapters: SLOs, toil, on-call, incident response; free to read online
-
Linux Essentials Exam 010 Objectives
(Linux Professional Institute (LPI))
reference
objectives and weightings for LPI Linux Essentials exam 010-160, version 1.6 syllabus
-
LPIC-1 Exam 101 and 102 Objectives
(Linux Professional Institute (LPI))
reference
LPIC-1 101-500/102-500 objectives v5.0 with per-topic weightings, junior Linux admin level
-
LPIC-2 Exam 201 and 202 Objectives
(Linux Professional Institute (LPI))
reference
LPIC-2 201-450/202-450 objectives with weights: mixed MS/Linux LAN, gateway and internet servers
-
LPIC-3 Exam 300 Objectives
(Linux Professional Institute (LPI))
reference
objectives for LPIC-3 exam 300-300: Samba daemons, SMB/CIFS, Active Directory and LDAP, weighted
-
LPIC-3 Exam 303 Objectives
(Linux Professional Institute (LPI))
reference
LPIC-3 303-300 Security exam objectives with weights: X.509 and PKI, crypto, hardening, access control
-
LPIC-3 Exam 305 Objectives
(Linux Professional Institute (LPI))
reference
objectives and topic weights for exam 305-300: full virtualization, container tech, cloud orchestration
-
LPIC-3 Exam 306 Objectives
(Linux Professional Institute (LPI))
reference
LPIC-3 306 exam objectives, weighted: HA cluster management, cluster storage, distributed block devices
-
Security Essentials Exam 020 Objectives
(Linux Professional Institute (LPI))
reference
objectives and weightings for LPI exam 020-100, an entry-level digital self-defence security certificate
-
Web Development Essentials Exam 030 Objectives
(Linux Professional Institute (LPI))
reference
LPI 030-100 objectives: markup, styling, browser scripting, server-side code and SQL persistence
-
Summary of LPI Certifications
(Linux Professional Institute (LPI))
reference
vendor-neutral LPI exam ladder from Essentials to LPIC-3: prerequisites, languages, validity; paid
-
Linux Professional Institute – Learning
(learning.lpi.org)
reference
hub for LPI's freely published, open-licensed courseware for teachers preparing candidates for its exams
-
Explore Red Hat certifications to complete your learning journey.
(redhat.com)
organisation
Red Hat exam pathways by level, from entry technologist to architect; paid, performance-based
-
Red Hat Certified System Administrator exam | EX200
(redhat.com)
reference
EX200 objectives for the performance-based RHCSA, based on RHEL 10; paid proctored exam
-
Red Hat Certified Advanced System Administrator in Ansible Exam | EX294
(redhat.com)
reference
EX294 objectives: writing Ansible playbooks to administer RHEL; counts toward RHCE, paid performance exam
-
Red Hat Certified System Administrator in OpenShift exam | EX280
(redhat.com)
reference
EX280 objectives for Red Hat Certified System Administrator in OpenShift 4.18, paid exam
-
Explore Red Hat certifications to complete your learning journey.
(redhat.com)
organisation
Red Hat's certification ladder from Technologist to Architect; paid, product-specific exam paths
-
Red Hat Learning Subscription
(redhat.com)
organisation
Paid annual Red Hat training subscription: course curriculum, labs and certification exam access
-
Linux Foundation Certified System Administrator (LFCS) | Linux Foundation Education
(Linux Foundation - Education)
reference
exam domains and weightings: ops deployment, networking, storage; paid vendor-neutral performance exam
-
LFCE Cert Inactive
(Linux Foundation - Education)
organisation
Linux Foundation LFCE engineer certification; the page lists the exam as inactive
-
Certified Kubernetes Administrator (CKA) | Linux Foundation Education
(Linux Foundation - Education)
reference
CKA scope and pricing: cluster ops, workloads, storage, troubleshooting; $445 exam-only, bundles above
-
Certified Kubernetes Application Developer (CKAD) | Linux Foundation Education
(Linux Foundation - Education)
reference
CKAD exam domains for Kubernetes app developers; $445 exam alone, $625-$645 bundled with training
-
認定Kubernetesセキュリティスペシャリスト (CKS-JP)
(Linux Foundation - Education)
reference
CKS exam objectives and domain weights: cluster hardening, supply chain, runtime; paid hands-on
-
Kubernetes and Cloud Native Associate (KCNA) | Linux Foundation Education
(Linux Foundation - Education)
reference
KCNA vendor-neutral cloud native exam: domains, prep handbook, two attempts; $250 exam-only
-
Homepage
(Linux Foundation - Education)
organisation
Linux Foundation vendor-neutral courses and exams: Linux, Kubernetes, security; some free, most paid
-
Introduction to Linux (LFS101) | Linux Foundation Education
(Linux Foundation - Education)
tutorial
no-cost self-paced beginner course: CLI basics, graphical config, major distro families
-
GitHub - cncf/curriculum: 📚Open Source Curriculum for CNCF Certification Courses
(GitHub)
repo
CNCF exam curricula for CKA, CKAD, CKS, KCNA and more, versioned to Kubernetes releases; CC-BY 4.0, free
-
Linux+ Certification V8 | CompTIA
(comptia.org)
reference
CompTIA Linux+ V8 objectives and exam details: hardening, automation, containers, paid exam
-
Server+ (Plus) Certification | CompTIA
(comptia.org)
reference
CompTIA Server+ V5 objectives: server hardware, administration, security, disaster recovery; paid exam
-
SUSE Certification Exams | SUSE
(suse.com)
organisation
SUSE and SLES certification exam catalogue, remotely proctored via Questionmark, paid per exam
-
AWS Certification Home
(Amazon Web Services, Inc.)
reference
index of AWS credential tiers by job role, foundational through specialty, with per-role exam guides; paid
-
Professional and Technical Credentials and Certifications
(learn.microsoft.com)
reference
index of Microsoft role-based certifications and Applied Skills lab assessments, free Learn training paths
-
Certifications | Google Cloud
(Google Cloud)
reference
index of Google Cloud exams from foundational to professional, each with its own exam guide; paid
-
Linux Unhatched
(netacad.com)
tutorial
Cisco NetAcad's free 8-hour introduction to Linux, no prerequisites
-
DevOps Roadmap: Learn to become a DevOps Engineer or SRE
(roadmap.sh)
reference
Interactive skill tree for the DevOps/SRE career path: practices, delivery culture, free to use
-
Linux Roadmap
(roadmap.sh)
reference
community-built learning path ordering Linux skills as a step-by-step skill tree, free to use
-
OverTheWire: Bandit
(overthewire.org)
tutorial
beginner shell levels played over SSH, each password hidden on the box; free to play
-
Killercoda
(killercoda.com)
tool
Browser-based Linux and Kubernetes lab scenarios, free tier plus paid
-
PostgreSQL: Documentation
(postgresql.org)
reference
version-indexed PostgreSQL manuals, current and unsupported releases, browsable or PDF
-
GitHub - mysql/mysql-server: MySQL Server, the world's most popular open source database, and MySQL Cluster, a real-time, open source transactional database.
(GitHub)
repo
Oracle's MySQL server and NDB Cluster sources, GPLv2 community edition
-
MariaDB Foundation - MariaDB.org
(MariaDB.org)
organisation
MariaDB Foundation news on server internals: pluggable aggregates, JSON_TABLE, sponsorship; MariaDB is GPLv2
-
SQLite Home Page
(sqlite.org)
tool
Self-contained C library SQL engine with no server process, public-domain source
-
Firebird: The true open source database for Windows, Linux, Mac OS X and more
(Home)
tool
InterBase-lineage SQL engine for Linux, Windows and macOS; open source, commercial support ecosystem
-
MySQL Software
(Percona)
tool
Percona's MySQL stack: drop-in server, XtraDB Cluster, XtraBackup, operator; no licensing fees
-
MonetDB
(MonetDB)
tool
column-store SQL engine for analytics and hybrid HTAP, full ACID, window functions, UDF hooks; open source
-
Apache Derby
(db.apache.org)
tool
embedded Java relational database with JDBC drivers, ~3.5 MB footprint; retired read-only since Oct 2025
-
H2 Database Engine (redirect)
(h2database.com)
tool
Embedded Java SQL engine, open source, runs in-process or as a standalone server
-
CUBRID | Enterprise Open Source DBMS
(cubrid.org)
tool
OLTP-tuned open source DBMS with heartbeat-based HA failover, broker middleware and GUI admin
-
SQL Server Downloads | Microsoft
(microsoft.com)
tool
installer downloads per SQL Server edition; Express and Developer free, trials for the rest
-
What is SQL Server on Linux? - SQL Server
(learn.microsoft.com)
reference
running Microsoft's proprietary engine on RHEL, Ubuntu, SLES, in containers or WSL2
-
Oracle AI Database Free | Oracle
(oracle.com)
tool
no-cost Oracle 26ai edition capped at 2 CPUs, 2 GB RAM and 12 GB data; formerly Express Edition
-
Db2 | IBM
(ibm.com)
tool
IBM enterprise database for mixed transactional and analytic workloads; free Community Edition
-
CockroachDB Docs - CockroachDB
(CockroachDB)
reference
distributed SQL built to survive region failures; docs plus free Cockroach University, core source-available
-
YB Documentation
(YugabyteDB Docs)
reference
Distributed PostgreSQL-compatible SQL: geo-distribution, sharding, Kubernetes deploys, Apache-2.0
-
TiDB Self-Managed
(docs.pingcap.com)
reference
MySQL-compatible HTAP cluster: TiUP and Kubernetes deployment, TiFlash, migration, tuning; Apache-2.0
-
Vitess
(vitess.io)
tool
Sharding, connection pooling and automatic failover layer fronting MySQL; live resharding
-
Citus Data | Distributed Postgres. At any scale.
(Citus Data)
tool
Postgres extension adding row- and schema-based sharding for scale-out; open source, free to self-manage
-
Home - ClickHouse Documentation
(ClickHouse Documentation)
reference
column-store OLAP engine for analytics and warehousing, Apache-2.0; docs index and integration catalogue
-
An in-process SQL OLAP database management system
(DuckDB)
tool
in-process OLAP engine querying CSV and Parquet in place and pandas frames directly, MIT licensed
-
Tiger Data Documentation
(Tiger Data Docs)
reference
TimescaleDB, the PostgreSQL time-series extension: hypertables, continuous aggregates, self-run or cloud
-
Low-latency time-series database on open formats | QuestDB
(QuestDB)
tool
SQL-queried time-series store aimed at high-rate ingest; Apache-2.0 core, commercial editions
-
Apache Doris: Open Source, Real-Time Analytics and Search Database for the AI Era - Apache Doris
(doris.apache.org)
tool
MPP column store for sub-second SQL over logs, metrics, JSON and vectors; Apache-licensed
-
Docs
(Docs)
reference
cache, JSON, streams and vector-search guides; source-available core, paid Software and Cloud tiers
-
Valkey
(valkey.io)
tool
BSD-licensed Redis fork under the Linux Foundation: caching, queues or primary key/value store
-
memcached - a distributed memory object caching system
(memcached.org)
tool
in-memory key-value cache for database, API and render results to offload web backends; free and open source
-
What is MongoDB? - Database Manual - MongoDB Docs
(mongodb.com)
reference
JSON-style document store: flexible schema, sharding, replica-set failover; server under SSPL
-
Apache CouchDB
(couchdb.apache.org)
tool
JSON document store with an HTTP API and a replication protocol reaching mobile and browsers
-
Apache Cassandra | Apache Cassandra Documentation
(Apache Cassandra)
tool
Masterless wide-column NoSQL store: linear scaling, multi-datacenter replication, Apache-2.0
-
ScyllaDB For Real-Time AI
(ScyllaDB)
tool
Cassandra- and DynamoDB-compatible wide-column store in C++ for low-latency, high-throughput workloads
-
Neo4j documentation - Neo4j Documentation
(Neo4j Graph Data Platform)
reference
graph database docs: deployment on Docker/Kubernetes, visual tooling, client libraries; free Community Edition
-
Arango Contextual Data Platform
(Arango)
tool
graph-native multi-model store (document, key-value, search) pitched as an AI context layer, commercial
-
InfluxData Documentation
(docs.influxdata.com)
reference
InfluxDB 3 Core/Enterprise/Cloud and the Telegraf collector: open source engine, paid managed tiers
-
etcd
(etcd)
tool
Raft-replicated strongly consistent key-value store with watches and key TTLs; backs Kubernetes
-
pgAdmin - PostgreSQL Tools
(pgadmin.org)
tool
PostgreSQL object browser and query tool with graphical EXPLAIN; desktop or web, open source
-
DBeaver Community | Free Open-Source Database Management Tool
(dbeaver.io)
tool
cross-engine desktop SQL client; Community Edition no-cost under Apache-2.0, paid PRO alongside
-
phpMyAdmin
(phpMyAdmin)
tool
web front end for MySQL/MariaDB: tables, users, privileges, SQL, import/export, 97 languages
-
PgBouncer - lightweight connection pooler for PostgreSQL
(pgbouncer.org)
tool
PostgreSQL connection pooler; release notes cover CVE-2025-12819 auth-time SQL injection via search_path
-
Patroni: A Template for PostgreSQL HA with ZooKeeper, etcd or Consul — Patroni 4.1.5 documentation
(patroni.readthedocs.io)
reference
PostgreSQL automatic failover and leader election via etcd, ZooKeeper or Consul, open source
-
SQL Indexing and Tuning e-Book for developers: Use The Index, Luke covers Oracle, MySQL, PostgreSQL, SQL Server, ...
(use-the-index-luke.com)
tutorial
vendor-agnostic SQL indexing and query tuning; free web edition of SQL Performance Explained
-
Part I. Tutorial
(PostgreSQL Documentation)
tutorial
Introductory walkthrough of relational concepts and SQL against PostgreSQL, official Part I
-
SQLite In 5 Minutes Or Less
(sqlite.org)
tutorial
first steps with the sqlite3 command-line shell and the TCL binding; prebuilt binaries or build yourself
-
Modern SQL: A lot has changed since SQL-92
(modern-sql.com)
reference
what the SQL standard added after SQL-92 -- CTEs, arrays, temporal -- with per-engine support tables
-
RabbitMQ: One broker to queue them all | RabbitMQ
(rabbitmq.com)
tool
AMQP 1.0 and MQTT 5.0 broker for queues and streams; MPL-2.0 at no cost, paid Broadcom Tanzu support
-
Documentation Redirect
(kafka.apache.org)
reference
Kafka docs tree: key concepts, APIs, configuration, design, operations, security, Connect and Streams
-
Apache Pulsar
(pulsar.apache.org)
tool
multi-tenant pub-sub plus streaming with geo-replication and tiered storage, top-level ASF project
-
NATS.io
(NATS.io)
tool
single-binary pub/sub, request-reply and JetStream persistence from cloud to edge, open source
-
ZeroMQ
(zeromq.org)
tool
brokerless sockets carrying atomic messages over TCP, IPC and multicast; pub-sub, push-pull, LGPL
-
Eclipse Mosquitto
(Eclipse Mosquitto)
tool
lightweight EPL/EDL MQTT 5.0 broker for IoT, plus C client library and pub/sub CLI clients
-
MQTT - The Standard for IoT Messaging
(mqtt.org)
reference
pub/sub IoT messaging protocol: three QoS levels, persistent sessions, small headers, TLS and OAuth auth
-
Varnish Cache
(Varnish Cache)
tool
In-memory HTTP accelerator with VCL policy language and in-process TLS, open source
-
Jenkins
(Jenkins)
tool
Java automation server for CI/CD pipelines, plugin-extensible, distributing builds across agents
-
Get started with GitLab CI/CD | GitLab Docs
(GitLab Docs)
reference
.gitlab-ci.yml pipelines, stages and jobs; usable on the Free tier as well as Premium/Ultimate
-
GitHub Actions documentation - GitHub Docs
(GitHub Docs)
reference
workflow authoring, GitHub-hosted and self-hosted runners, custom actions, metrics and scaling limits
-
Woodpecker CI
(woodpecker-ci.org)
tool
container-based CI engine with dependent multi-workflow pipelines and plugins, free under Apache-2.0
-
Argo Workflows - The workflow engine for Kubernetes
(argo-workflows.readthedocs.io)
reference
container-native workflow and DAG engine built as Kubernetes CRDs, CNCF graduated, open source
-
Salt User Guide — Salt user guide
(docs.saltproject.io)
reference
Salt core concepts for remote execution and declarative state, community-written companion to the docs
-
Introduction
(syslog-ng documentation)
reference
admin and developer guides for the open-source edition: install, configure and tune log collection
-
journalctl(1) - Linux manual page
(man7.org)
reference
querying and filtering the systemd journal: field matches, boot ranges, output formats
-
Fluentd | Open Source Data Collector
(fluentd.org)
tool
CNCF unified logging layer decoupling log sources from backend stores; Apache-2.0
-
Vector
(vector.dev)
tool
Rust pipeline collecting, transforming and routing logs and metrics via sources/transforms/sinks
-
Grafana Loki OSS | Log aggregation system
(Grafana Labs)
tool
label-indexed log aggregation inspired by Prometheus, cheap to store; AGPLv3 with hosted Grafana Cloud option
-
Alertmanager | Prometheus
(prometheus.io)
reference
Deduplicates, groups, silences and routes Prometheus alerts to email, PagerDuty and OpsGenie
-
VictoriaMetrics: Simple, Reliable & Efficient Observability
(VictoriaMetrics)
tool
Prometheus-compatible metrics store and monitoring stack; open source core, paid enterprise tier
-
OpenTelemetry
(OpenTelemetry)
tool
Vendor-neutral APIs, SDKs and collector for traces, metrics and logs; swap backends freely
-
Jaeger: open source, distributed tracing platform
(Jaeger)
tool
CNCF platform mapping request flow across microservices to find bottlenecks; ClickHouse storage backend
-
GitHub - akopytov/sysbench: Scriptable database and system performance benchmark
(GitHub)
repo
scriptable LuaJIT benchmark: OLTP database workloads plus CPU, memory, fileio and thread tests
-
Welcome to FIO’s documentation! — fio 3.42-115-gcd29 documentation
(fio.readthedocs.io)
reference
job-file reference for the flexible I/O tester: engines, block sizes, latency, terse and JSON output
-
GitHub - wg/wrk: Modern HTTP benchmarking tool
(GitHub)
repo
Multithreaded HTTP load generator on epoll/kqueue, with optional LuaJIT request and report scripting
-
Grafana k6 | Grafana k6 documentation
(Grafana Labs)
reference
scripting load, spike, stress and soak tests in JavaScript; open source, paid Grafana Cloud backend
-
iPerf - The TCP, UDP and SCTP network bandwidth measurement tool
(iperf.fr)
tool
TCP, UDP and SCTP throughput, loss and jitter measurement between two hosts, BSD-licensed
-
GitHub - ColinIanKing/stress-ng: This is the stress-ng upstream project git repository. stress-ng will stress test a computer system in various selectable ways. It was designed to exercise various physical subsystems of a computer as well as the various operating system kernel interfaces.
(GitHub)
repo
380+ stress tests loading CPU, memory, filesystem and cache to trip thermal and kernel faults
-
Kea DHCP
(isc.org)
tool
ISC's multi-threaded DHCPv4/v6 server with REST API and Stork dashboard, MPL-2.0
-
Kea Administrator Reference Manual — Kea 3.2.0 documentation
(kea.readthedocs.io)
reference
ISC's DHCPv4/DHCPv6 server administration reference for 3.2.0: configuration and hook libraries, open source
-
ISC DHCP
(isc.org)
tool
End-of-life DHCP server, relay and client; no releases since 2022, paid support for subscribers only
-
Dnsmasq - network services for small networks.
(thekelleys.org.uk)
reference
lightweight DNS forwarder plus DHCP, router advertisement and network boot for routers and firewalls
-
systemd.network(5) - Linux manual page
(man7.org)
reference
systemd-networkd .network unit settings: interface matching, addressing, DHCP client and server
-
BIND 9 Administrator Reference Manual — BIND 9 9.20.26 documentation
(bind9.readthedocs.io)
reference
authoritative and resolver setup, zone files, DNSSEC signing and validation, plus dig and named manpages
-
Unbound - About
(NLnet Labs)
tool
validating recursive caching resolver with DNS-over-TLS/HTTPS and QNAME minimisation, BSD licence
-
NSD - About
(NLnet Labs)
tool
authoritative-only name server built for TLD and root-scale query rates, BSD licensed, paid SLA option
-
Knot DNS
(knot-dns.cz)
tool
Authoritative-only DNS server with IXFR, DDNS, rate limiting and automatic DNSSEC signing, GPL 3+
-
Knot Resolver
(knot-resolver.cz)
tool
caching validating resolver from CZ.NIC with modular features and DoH; GPL, free to download
-
PowerDNS Authoritative Nameserver - PowerDNS Authoritative Server documentation
(doc.powerdns.com)
reference
authoritative nameserver serving zones from MySQL/PostgreSQL, BIND files or JSON APIs via backends
-
dnsdist Overview - dnsdist documentation
(dnsdist.org)
reference
DoS- and abuse-aware DNS load balancer, runtime console, Lua or YAML config, Prometheus metrics
-
CoreDNS: DNS and Service Discovery
(coredns.io)
tool
Go DNS server chaining plugins for zone files, Kubernetes and cloud service discovery, Apache-2.0
-
Root Server Technical Operations Association
(root-servers.org)
organisation
live inventory of the 366 root name server sites: operator, global vs local, IPv6 and instance counts
-
https://www.rfc-editor.org/rfc/rfc1035.html
(rfc-editor.org)
reference
1987 DNS specification: message format, resource records, resolver and name-server behaviour
-
https://www.rfc-editor.org/rfc/rfc8484.html
(rfc-editor.org)
reference
IETF Standards Track spec mapping each DNS query-response pair onto an HTTPS exchange
-
DNSViz | A DNS visualization tool
(dnsviz.net)
tool
Web visualiser for a zone's DNSSEC authentication chain and resolution path, flagging errors
-
OpenLDAP, Documentation
(openldap.org)
reference
catalogue of OpenLDAP admin and developer manuals, papers and conference proceedings; OpenLDAP license
-
FreeIPA - Identity, Policy, Audit — FreeIPA documentation
(freeipa.org)
tool
integrated identity management stack: 389 DS LDAP, MIT Kerberos, DNS, Dogtag CA, Active Directory trusts
-
Samba - ArchWiki
(wiki.archlinux.org)
reference
smb.conf setup for SMB/CIFS file and print sharing, server and client sides, plus domain membership
-
Active Directory integration - ArchWiki
(wiki.archlinux.org)
tutorial
Joining an Arch host to a Windows domain via Samba: NetBIOS name, Kerberos realm and domain join rights
-
SSSD - System Security Services Daemon - sssd.io
(sssd.io)
tool
client daemon enrolling Linux hosts into Active Directory, FreeIPA or LDAP domains for remote identity
-
Kerberos: The Network Authentication Protocol
(web.mit.edu)
tool
MIT's free implementation of Kerberos 5 secret-key network authentication, with krb5 source releases
-
Documentation
(Keycloak)
reference
server install, administration, app securing and fine-grained authorization for OIDC and SAML logins
-
FreeRADIUS
(freeradius.org)
tool
GPL RADIUS server behind ISP and eduroam AAA; 24/7 commercial support from InkBridge
-
Postfix - ArchWiki
(wiki.archlinux.org)
tutorial
setting up Postfix on Arch: main.cf and master.cf, aliases, local vs virtual user delivery
-
Home | Dovecot CE
(doc.dovecot.org)
reference
IMAP, POP3, LMTP and ManageSieve server docs for the open-source Community Edition; Pro is commercial
-
OpenSMTPD
(opensmtpd.org)
tool
OpenBSD's server-side SMTP implementation of RFC 5321, small and auditable, ISC licensed
-
Rspamd — Email Security System
(rspamd.com)
tool
Async C spam and phishing filter: regex rules, RBLs, greylisting, SPF/DKIM/DMARC/ARC, ML scoring
-
OpenDKIM
(opendkim.org)
tool
C library plus milter giving sendmail-compatible MTAs DKIM signing and verification, also VBR and ATPS
-
dmarc.org – Domain Message Authentication Reporting & Conformance
(dmarc.org)
reference
DMARC email authentication and reporting over SPF/DKIM; policy, alignment, RFC 9989-9991 standards track
-
chrony – Introduction
(chrony-project.org)
tool
NTPv4 client, server and peer for hosts with intermittent links or uptime; chronyd plus chronyc
-
Welcome to NTPsec
(ntpsec.org)
tool
Security-hardened fork of NTP Classic, audited and stripped down for high-assurance deployments
-
pool.ntp.org: the internet cluster of ntp servers
(ntppool.org)
organisation
volunteer cluster of ~6,100 public time servers, the default NTP source for most distros; free
-
Welcome to The Linux PTP Project
(Linux PTP Project)
tool
IEEE 1588 PTP daemons for Linux built on modern kernel APIs; backed by Network Time Foundation
-
step-ca Certificate Authority Overview | Smallstep
(smallstep.com)
reference
self-run X.509 and SSH certificate authority with ACME and OIDC provisioners; hosted option exists
-
EJBCA - The Open-Source Certificate Authority (CA)
(EJBCA)
tool
open-source certificate authority for internal PKI, IoT and eIDs, with SignServer signing engine
-
openssl-ca - OpenSSL Documentation
(docs.openssl.org)
reference
openssl ca man page: signing requests, self-signing, CRL generation and revocation, serial and policy options
-
Home - Easy RSA
(easy-rsa.readthedocs.io)
reference
POSIX-shell X.509 PKI manager over openssl: multiple CAs, certs for OpenVPN and TLS peers
-
strongSwan - IPsec VPN for Linux, Android, FreeBSD, macOS, Windows
(strongswan.org)
tool
IPsec IKEv2 daemon with MOBIKE, NAT traversal and a plugin system; GPL, Linux through Windows
-
Community Documentation
(openvpn.net)
reference
Community Edition docs: setup, routing, ethernet bridging, hardening, key management, platform notes
-
Docs · Tailscale Docs
(Tailscale)
reference
WireGuard mesh overlay: access control, subnet routers, exit nodes, logging; no-cost personal tier
-
Headscale
(headscale.net)
reference
self-hosted control server for a single Tailscale tailnet, aimed at hobbyists and small orgs; open source
-
Kubernetes at Scale on any Infrastructure | OKD Kubernetes Platform
(okd.io)
tool
opinionated Kubernetes distribution preloading 100+ operators, community upstream of OpenShift
-
Welcome | Overview | OKD 4
(OpenShift)
reference
Entry point to OKD 4 docs: cluster features, layered offerings and operator life cycles
-
GitHub - crc-org/crc: CRC is a tool to help you run containers. It manages local VMs to run a OpenShift 4.x cluster, Microshift or Podman optimized for testing and development purposes
(GitHub)
repo
upstream of OpenShift Local: local VM running single-node OpenShift, MicroShift or Podman
-
MicroShift
(MicroShift)
tool
OpenShift trimmed for the device edge: frugal resources, poor networking, safe rollbacks on RHEL for Edge
-
Welcome to Operator framework
(operatorframework.io)
tool
Operator SDK, OLM lifecycle manager and OperatorHub for encoding day-1 and day-2 ops into clusters
-
OperatorHub.io | The registry for Kubernetes Operators
(Operator Hub)
reference
Community registry of Kubernetes Operators, browsable by capability level
-
Kubernetes Documentation
(Kubernetes)
reference
entry point to Kubernetes concepts, tasks, tutorials and API reference; current plus four prior versions
-
Kubernetes API
(Kubernetes)
reference
Generated reference for every Kubernetes API group, resource type and field the control plane serves
-
Command line tool (kubectl)
(Kubernetes)
reference
kubectl syntax, command operations and kubeconfig handling, with cheat sheet and per-command links
-
Kubeadm
(Kubernetes)
reference
init/join fast paths for standing up a conformant cluster, plus upgrades; addons out of scope
-
GitHub - kelseyhightower/kubernetes-the-hard-way: Bootstrap Kubernetes the hard way. No scripts.
(GitHub)
repo
manual bootstrap of a control plane and two workers across four machines, no scripts, built for learning
-
CNCF Landscape
(CNCF Landscape)
reference
Interactive map of cloud-native projects and vendors by category
-
Documentation versions
(etcd)
reference
distributed key-value store holding Kubernetes cluster state; versioned documentation index
-
cri-o
(cri-o.io)
tool
OCI runtime implementing the Kubernetes CRI, with per-Kubernetes-version rpm and deb repositories
-
containerd
(containerd.io)
tool
CNCF-graduated OCI container runtime: image push/pull, CAS storage, namespaces and lifecycle
-
GitHub - opencontainers/runc: CLI tool for spawning and running containers according to the OCI specification
(GitHub)
repo
reference OCI runtime that spawns Linux containers; seccomp and libpathrs build options
-
K3s - Lightweight Kubernetes | K3s
(docs.k3s.io)
reference
certified Kubernetes in a sub-100MB binary with sqlite3 datastore, for edge, IoT and air-gapped use
-
Introduction | RKE2
(docs.rke2.io)
reference
Rancher Kubernetes built for CIS benchmark and FIPS 140-2 pass; containerd, static-pod control plane
-
Overview :: SUSE® Rancher Manager
(ranchermanager.docs.rancher.com)
reference
multi-cluster Kubernetes management: RKE or EKS/GKE/AKS clusters, central auth, policy, monitoring
-
Sidero Labs | Makers of Talos Linux and Omni
(Sidero Labs)
tool
immutable Kubernetes OS with no sshd, shell or package manager: read-only root, gRPC/mTLS API, ~50 binaries
-
kind
(kind.sigs.k8s.io)
tool
Throwaway Kubernetes clusters as Docker, podman or nerdctl container nodes, for local dev and CI
-
Welcome!
(minikube)
reference
local single-node Kubernetes on Linux, macOS or Windows for learning; VM, container or bare-metal
-
Docs Home | Helm
(helm.sh)
reference
Kubernetes charts and templating: how-tos, chart template guide, plugins, Helm 4 changes
-
Kustomize - Kubernetes native configuration management
(kustomize.io)
tool
template-free overlay editing of Kubernetes manifests, standalone binary or built into kubectl
-
Argo CD - Declarative GitOps CD for Kubernetes
(argo-cd.readthedocs.io)
reference
GitOps continuous delivery for Kubernetes, syncing kustomize, Helm or plain manifests from git
-
Flux Documentation
(fluxcd.io)
reference
Kubernetes custom resources that sync cluster state from git sources, multi-tenant and RBAC-aware
-
Welcome to Tekton
(Tekton)
reference
Kubernetes-native CI/CD building blocks: pipelines, triggers, CLI, catalog, signing, results store
-
Overview - Knative
(knative.dev)
reference
scale-to-zero serving and event routing layered over Kubernetes, with the concepts behind it
-
Documentation
(Istio)
reference
sidecar and ambient mesh setup, traffic-management tasks, mTLS concepts and CLI/API reference
-
Welcome to Cilium’s documentation! — Cilium 1.20.1 documentation
(docs.cilium.io)
reference
eBPF and XDP networking, network policy and Hubble observability for Kubernetes workloads
-
cert-manager
(cert-manager)
reference
issuing and auto-renewing Kubernetes/OpenShift TLS certs from Let's Encrypt, Vault or private CA
-
Longhorn | The Longhorn Documentation
(Longhorn)
reference
distributed block storage for Kubernetes: per-volume controllers, synchronous replicas across nodes; CNCF/LF
-
Introduction
(Kyverno)
reference
Kubernetes-native policy engine governing declarative configuration and runtime behaviour
-
PuTTY: a free SSH and Telnet client
(chiark.greenend.org.uk)
tool
Simon Tatham's MIT-licensed SSH, Telnet and serial client with xterm emulator, Windows and Unix
-
Front Page — Free Software Foundation — working together for free software
(fsf.org)
organisation
Nonprofit behind the GPL, running Defective by Design, End Software Patents and email self-defense
-
Software Freedom Conservancy
(sfconservancy.org)
organisation
Nonprofit fiscal host for FOSS projects; copyleft enforcement, right-to-repair and policy advocacy
-
Linux Foundation - Decentralized innovation, built with trust
(linuxfoundation.org)
organisation
Neutral host for the kernel and 1300+ other projects, plus open hardware and standards work
-
Software Freedom Law Center
(softwarefreedom.org)
news
legal counsel for FOSS projects and foundations: licensing, nonprofit structure and code-of-conduct practice
-
Electronic Frontier Foundation
(Electronic Frontier Foundation)
organisation
US nonprofit litigating and campaigning on privacy, free expression and technology law
-
Welcome to The Apache Software Foundation | Apache Software Foundation
(apache.org)
organisation
501(c)(3) giving projects a neutral home: legal umbrella, infrastructure and community-over-code rules
-
About Us | Global Open Source Leadership
(Eclipse Foundation)
organisation
Vendor-neutral steward hosting 450+ projects including Jakarta EE and Adoptium, funded by 300+ members
-
The Mozilla Manifesto
(Mozilla)
article
Ten principles on internet openness and privacy, plus the 2017 Pledge for a Healthy Internet
-
KDE e.V. Homepage
(KDE e.V.)
organisation
Registered non-profit handling KDE's legal and financial affairs, membership and patron sponsorship
-
GNOME Foundation
(GNOME Foundation)
organisation
Nonprofit holding GNOME's funds, trademarks and infrastructure; elected board and annual reports
-
NLnet; Welcome to NLnet Foundation
(nlnet.nl)
organisation
Dutch foundation issuing grants to open internet, open standards and privacy projects since 1997
-
FSFE - Free Software Foundation Europe
(FSFE - Free Software Foundation Europe)
news
European charity founded 2001, pressing for user control of technology in EU and national politics
-
Open Source Security Foundation – Linux Foundation Projects
(openssf.org)
organisation
Linux Foundation body coordinating OSS security best practices, free secure-coding courses and tooling
-
Choose an open source license
(Choose a License)
reference
Side-by-side of MIT, GPLv3 and others by what each permits, with well-known projects using them
-
SPDX License List | Software Package Data Exchange (SPDX)
(spdx.org)
reference
Canonical short identifiers, full texts and permanent URLs for licences found in code, data and hardware
-
copyleft-next
(next.copyleft.org)
reference
Open drafting project for a rewritten, shorter copyleft licence; editors Fontana and Kuhn, hosted by SFC
-
REUSE - Make licensing easy for everyone
(reuse.software)
reference
FSFE three-step recipe for per-file copyright and SPDX headers, machine-checkable in CI
-
The Open Source Definition
(Open Source Initiative)
reference
Ten distribution criteria a license must meet to qualify: redistribution, source, derived works
-
Debian Social Contract
(debian.org)
reference
The DFSG and Debian's five promises; the text the Open Source Definition was derived from
-
Contributor Covenant | A Code of Conduct for Digital Communities
(contributor-covenant.org)
reference
the most widely adopted community conduct text, with an interactive builder for tailoring it
-
Developer Certificate of Origin
(developercertificate.org)
reference
Verbatim v1.1 text of what a contributor certifies by adding a Signed-off-by line to a patch
-
BadgeApp
(bestpractices.dev)
tool
Free self-certification app where FLOSS projects answer OpenSSF criteria to earn a passing badge
-
The Cathedral and the Bazaar
(catb.org)
article
Raymond's evolving essays on bazaar-style development, hacker history and open-source economics
-
How To Become A Hacker
(catb.org)
article
ESR's long-running FAQ on the hacker mindset, skills worth learning and status in the gift culture
-
Raise, manage and disburse money with full transparency.
(opencollective.com)
tool
Fiscal hosting with public ledgers for unincorporated projects; nonprofit hosts in the US, EU, UK, NZ
-
Home | Sovereign Tech Agency
(Sovereign Tech Agency)
organisation
German public fund investing in maintenance of the open libraries and tools other software rests on
-
Home
(OpenSSF Scorecard)
tool
Automated repo checks (branch protection, pinned deps, signing) run as GitHub Action or CLI
-
OSV - Open Source Vulnerabilities
(osv.dev)
dataset
advisories keyed precisely to affected package versions and commits, aggregated from GHSA, PyPA, RustSec
-
Free software is a matter of liberty, not price — Free Software Foundation — Working together for free software
(fsf.org)
organisation
Mission and campaigns of the GNU steward: liberty over price, against DRM and software patents
-
KiTTY
(9bis.net)
PuTTY fork adding session management and scripting, Windows
-
Ghostty
(Ghostty)
Native GPU-accelerated terminal emulator, MIT-licensed
-
tmux Wiki
(GitHub)
tmux terminal multiplexer, ISC-licensed, session persistence
-
OpenSSH
(openssh.org)
tool
BSD-licensed suite from the OpenBSD project: sshd, scp, sftp, agent, key tools and tunnelling
-
MobaXterm free Xserver and tabbed SSH client for Windows
(mobaxterm.mobatek.net)
tool
one portable Windows exe bundling SSH, RDP, VNC, an X server and bash/rsync/awk; free Home Edition
-
GitHub - kingToolbox/WindTerm: A professional cross-platform SSH/Sftp/Shell/Telnet/Tmux/Serial terminal.
(GitHub)
repo
Free for commercial use, partly Apache-licensed; saved sessions and binaries for Windows, Linux, macOS
-
Termius - Modern SSH Client
(termius.com)
tool
Syncs saved hosts, keys, snippets and SFTP across desktop and mobile; commercial, free personal tier
-
GitHub - Eugeny/tabby: A terminal for a more modern age
(GitHub)
repo
Electron client bundling SSH, Telnet and serial sessions, saved-host manager and encrypted secret store
-
XPipe - Your entire server infrastructure at your fingertips
(xpipe.io)
tool
Desktop hub for SSH, Docker, K8s and VM shells with local encrypted vault; free tier plus paid licence
-
Ásbrú Connection Manager
(asbru-cm.net)
tool
GPL organiser for saved SSH and telnet sessions with task automation; .deb, .rpm and AUR builds
-
Bitvise SSH Client | Bitvise
(bitvise.com)
tool
Windows GUI SFTP, terminal and tunnelling client; Kerberos SSO, RDP forwarding, proprietary but free to use
-
mRemoteNG
(mremoteng.org)
tool
Tabbed Windows client holding RDP, VNC, SSH and HTTP/S sessions in one saved-hosts tree
-
GitHub - kovidgoyal/kitty: If you live in the terminal, kitty is made for you! Cross-platform, fast, feature-rich, GPU based.
(GitHub)
repo
cross-platform terminal that renders through the GPU, with multiplexing built in
-
Alacritty - A cross-platform, OpenGL terminal emulator
(alacritty.org)
tool
GPU-rendered and deliberately minimal: vi mode, regex hints, scrollback search; BSD, macOS, Windows too
-
WezTerm - Wez's Terminal Emulator
(wezterm.org)
tool
Rust GPU-accelerated terminal that also multiplexes panes and tabs over SSH; Linux, macOS, Win, BSD
-
An overview on Windows Terminal
(learn.microsoft.com)
reference
Tabbed GPU-rendered host for CMD, PowerShell and WSL shells; MIT-licensed, Microsoft-maintained
-
iTerm2 - macOS Terminal Replacement
(iterm2.com)
tool
GPLv2 successor to iTerm for macOS 12.4+, free with source on GitHub
-
Termux
(Termux)
tool
Rootless Android app with an APT package set: bash, OpenSSH, python, rsync and man pages on a phone
-
Blink Shell is a professional, desktop grade terminal for iOS. With Mosh & SSH clients for iOS, local UNIX tools, lightning fast and fully customizable. The best terminal for iOS and iPadOS.
(blink.sh)
tool
Mosh-based iOS and iPadOS terminal whose sessions survive network changes and sleep; local UNIX tools
-
Mosh: the mobile shell
(Mosh)
tool
UDP-based SSH replacement surviving roaming and sleep, with local echo; GNU/Linux through iOS
-
Eternal Terminal
(Eternal Terminal)
tool
shell set up over SSH that survives outages and IP roaming, keeping tmux control mode and scrollback
-
sshuttle 1.3.2 documentation
(sshuttle.readthedocs.io)
reference
Routes TCP and DNS through an ordinary SSH login, needing only Python on the remote host
-
Remmina remote desktop client
(Remmina)
tool
Copyleft GTK client for RDP, VNC and SSH with remote file sharing; 67 languages, 50+ distributions
-
RustDesk: Open-Source Remote Desktop with Self-Hosted Server Solutions
(RustDesk)
tool
TeamViewer alternative with an optional self-hosted Docker relay and a paid Pro tier; Wayland support
-
GitHub - jtesta/ssh-audit: SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
(GitHub)
repo
Python scanner grading key exchange, host key, cipher and MAC algorithms against hardening policies
-
lore.kernel.org
(lore.kernel.org)
Public archive of the Linux kernel development mailing lists
-
Debian Wiki
(wiki.debian.org)
Community-maintained documentation for Debian systems
-
Debian -- About Debian
(debian.org)
article
Volunteer association behind a 70000-package OS running Linux, FreeBSD or Hurd kernels with GNU userland
-
Arch Linux - About
(archlinux.org)
tool
Independent rolling-release x86-64 distro: minimal base, shell-file config, pacman and the AUR
-
Fedora Linux
(fedoraproject.org)
tool
Red Hat's upstream community distro: GNOME Workstation plus alternative spins, forums and contributor docs
-
openSUSE - Free Linux operating systems for desktops, servers and containers
(openSUSE - Free Linux operating systems for desktops, servers and containers)
tool
Leap and Tumbleweed flavours: rolling or immutable, Btrfs snapshots, full-disk encryption, opt-in codecs
-
About the Ubuntu project | Ubuntu
(Ubuntu)
article
Origin of the project, Mark Shuttleworth's founding role and how Canonical stewards the distribution
-
About Linux Mint - Linux Mint
(linuxmint.com)
article
Ubuntu-based desktop distribution pitched at Windows and macOS switchers; project history from 2006 onward
-
About Gentoo – Gentoo Linux
(gentoo.org)
reference
Source-based metadistribution compiled and tuned per machine via Portage; elected council governance
-
The Revised Slackware Book Project
(slackbook.org)
reference
Community rewrite of Slackware Linux Essentials; CC BY-SA, DocBook sources in git, beta readable
-
about | Alpine Linux
(alpinelinux.org)
article
musl and BusyBox base sized for containers: apk packaging, OpenRC init, PIE-hardened userland
-
Nix & NixOS | Declarative builds and deployments
(nixos.org)
tool
Isolated reproducible builds, safe rollbacks and declarative machine config; 140,000+ Nixpkgs packages
-
Qubes OS: A reasonably secure operating system
(Qubes OS)
tool
Compartmentalises work into Xen VMs, with Whonix for anonymity and room for a Windows guest
-
Tails - How Tails works
(tails.net)
tool
Amnesic live USB system that leaves nothing on disk and pushes all traffic through Tor
-
What is Kali Linux? | Kali Linux Documentation
(Kali Linux)
reference
Debian-based distribution preloading hundreds of offensive-security, forensics and reversing tools
-
DistroWatch.com: Put the fun back into computing. Use Linux, BSD.
(distrowatch.com)
reference
index of hundreds of Linux and BSD distributions, browsable one by one from a single selector
-
The Linux Kernel Archives
(kernel.org)
reference
Official mainline, stable and longterm source tarballs with PGP signatures, git trees and mirrors
-
ArchWiki
(wiki.archlinux.org)
reference
Install guide, application indexes and deep configuration articles used well beyond Arch itself
-
Gentoo Wiki
(wiki.gentoo.org)
reference
Community-editable docs hub: handbooks, portage and project pages for installing and running Gentoo
-
Linux man pages online
(man7.org)
reference
HTML renderings of the man-pages project plus curated pages from other free software projects
-
The Linux Documentation Project
(tldp.org)
reference
Ageing archive of HOWTOs, book-length guides, FAQs, man pages and Linux Gazette, with translations
-
Welcome to LWN.net [LWN.net]
(lwn.net)
news
Subscriber-funded reporting on kernel development, distributions and free-software community affairs
-
Welcome to Linux From Scratch!
(linuxfromscratch.org)
reference
book set for building a system from source: base LFS plus beyond, automated, multilib and gaming variants
-
The Missing Semester of Your CS Education
(Missing Semester)
tutorial
MIT lecture series on shell, editors, git, debugging and profiling that degree courses skip
-
BashGuide - Greg's Wiki
(mywiki.wooledge.org)
tutorial
Beginner bash walkthrough stressing good practice and quoting pitfalls; assumes no prior Unix skill
-
ShellCheck – shell script analysis tool
(shellcheck.net)
tool
Catches quoting, portability and logic bugs in bash/sh; paste a script into the browser or run it locally
-
The Austin Common Standards Revision Group
(opengroup.org)
reference
Joint IEEE/ISO/Open Group body drafting POSIX and Base Specifications revisions; draft status news
-
FHS Referenced Specifications
(refspecs.linuxfoundation.org)
reference
Downloadable FHS 3.0 and 2.3 texts fixing where files belong in the directory tree; 3.0 dates to 2015
-
Linux_Kernel_Newbies - Linux Kernel Newbies
(kernelnewbies.org)
reference
Wiki, list and IRC for aspiring kernel hackers: first-patch tutorial, subsystem map, plain changelogs
-
musl libc
(musl.libc.org)
tool
Small standards-conformant C library over the Linux syscall API; static-friendly, with CVE advisories
-
smartmontools
(smartmontools.org)
Monitors disk health through SMART attributes and self-tests
-
Netdata: Monitoring and troubleshooting transformed
(netdata.cloud)
tool
Per-second metrics, dashboards and alerts from an open agent; paid managed and on-prem cloud tiers
-
Zabbix: The enterprise-class open source observability solution
(zabbix.com)
tool
Agent-based monitoring and alerting for hosts, networks and apps; GPL core, paid support and SaaS
-
Prometheus - Monitoring system & time series database
(prometheus.io)
tool
dimensional metrics model queried with PromQL, alerting via Alertmanager; standalone Go binary, local storage
-
Grafana OSS | Leading observability tool for visualizations & dashboards
(Grafana Labs)
tool
Dashboards and alerting across 150+ data sources, deployable as code; OSS build beside paid Cloud
-
GitHub - louislam/uptime-kuma: A fancy self-hosted monitoring tool
(GitHub)
repo
HTTP, TCP, DNS, ping and Docker checks at 20s intervals, status pages and 90+ notification services
-
restic · Backups done right!
(restic.net)
tool
Single-binary deduplicating backup to local, SFTP or cloud storage, encrypted and restore-verifiable
-
BorgBackup – Deduplicating archiver with compression and authenticated encryption
(borgbackup.org)
tool
Content-defined chunking, FUSE-mountable archives, untrusted remote repos; BSD-licensed, Linux/macOS/BSD
-
Rclone
(Rclone)
tool
rsync-style copy, sync and mount across 70+ cloud storage backends, with checksums and --dry-run
-
Syncthing
(syncthing.net)
tool
Peer-to-peer continuous sync with no central server; TLS-secured, devices authorised by certificate
-
GitHub - aristocratos/btop: A monitor of resources
(GitHub)
repo
C++ rewrite of bashtop/bpytop with mouse support, themes and GPU stats; Linux, macOS and BSD
-
The Logfile Navigator
(The Logfile Navigator)
tool
auto-detects log formats, unpacks compressed files and queries them through SQLite; no server or setup
-
GitHub - junegunn/fzf: :cherry_blossom: A command-line fuzzy finder
(GitHub)
repo
Single binary with Bash, Zsh, Fish and Vim bindings; also a toolkit for interactive terminal UIs
-
jq
(jqlang.org)
tool
sed for JSON: slice, filter and reshape structured data; portable C, dependency-free single binary
-
bpftrace: dynamic tracing for Linux | bpftrace
(bpftrace.org)
tool
Awk-like language for writing eBPF probes without touching the raw eBPF toolchain, plus a tool collection
-
Brendan Gregg's Homepage
(brendangregg.com)
personal-site
Flame graphs, eBPF tracing methods, talks and slides from a datacenter performance engineer
-
Nmap: the Network Mapper - Free Security Scanner
(nmap.org)
tool
Port scanning and host discovery for network inventory and auditing; ships Npcap for Windows capture
-
Wireshark • Go Deep
(Wireshark)
tool
Captures live traffic and dissects hundreds of protocols interactively; GPL, cross-platform
-
Home | TCPDUMP & LIBPCAP
(tcpdump.org)
tool
Upstream releases, man pages and filter syntax for the pcap capture library and its analyzer
-
GitHub - traviscross/mtr: Official repository for mtr, a network diagnostic tool
(GitHub)
repo
traceroute and ping in one: probes each hop and prints running loss and latency statistics; GPLv2 C source
-
iperf3 — iperf3 3.21 documentation
(software.es.net)
reference
Active TCP/UDP throughput measurement with tunable buffers and JSON output; not compatible with iperf2
-
Partition Recovery and File Undelete
(CGSecurity)
tool
GPLv2 rescue of lost partitions and boot sectors, plus PhotoRec undelete across FAT, NTFS and ext
-
OpenZFS Documentation — OpenZFS documentation
(openzfs.github.io)
reference
Per-platform install and admin material for ZFS pools, datasets, snapshots and contributor internals
-
Ansible Community | Ansible documentation
(docs.ansible.com)
reference
Official docs for the agentless YAML automation engine: core language, collections, ecosystem tools
-
OpenTofu
(opentofu.org)
tool
Linux Foundation-stewarded Terraform fork, drop-in compatible, with 3,900+ community providers
-
cloud-init 26.2 documentation
(docs.cloud-init.io)
reference
First-boot provisioning across clouds and bare metal: networking, storage, SSH keys, packages
-
System and Service Manager
(systemd.io)
tool
Upstream home of PID 1: service manager plus journald, networkd, resolved and the unit ecosystem
-
rsyslog – the rocket-fast system for log processing pipelines
(rsyslog)
tool
collects, transforms and routes event data at high volume; 100+ input/output modules, plus a Windows agent
-
explainshell.com - match command-line arguments to their help text
(explainshell.com)
tool
Paste a command line and get every flag mapped back to the matching part of its man page
-
cheat.sh/:firstpage
(cheat.sh)
tool
Cheat sheets fetched by curl or the cht.sh client, covering unix commands and 60+ languages
-
Headscale
(headscale.net)
Self-hosted implementation of the Tailscale coordination server
-
Proxmox Virtual Environment
(Proxmox)
tool
KVM hypervisor plus LXC containers under one web UI, with clustering, HA and software-defined storage
-
TrueNAS 27 (Early)
(truenas.com)
reference
Docs for the ZFS-based NAS operating system; this branch tracks unreleased nightly builds
-
XCP-ng - XenServer Based, Community Powered
(xcp-ng.org)
tool
Xen-based hypervisor with live VM migration, web Xen Orchestra management and a VMware migration path
-
openmediavault - DATA SOVEREIGNTY MADE EASY
(openmediavault.org)
tool
Debian-based NAS OS with plugin-extensible web admin for SMB, SFTP, rsync and RAID repair
-
Linux Containers - Incus - Introduction
(linuxcontainers.org)
reference
Community-run LXD fork managing system containers and VMs side by side through one REST API and CLI
-
What is Docker?
(Docker Documentation)
reference
Vendor explainer of containers as isolation and packaging units, plus the client/daemon platform around them
-
Podman
(podman.io)
tool
Daemonless, rootless OCI container engine with pods and Kubernetes-compatible local workflows
-
Welcome | Portainer Documentation
(docs.portainer.io)
reference
container management UI docs spanning Docker, Swarm, Podman and Kubernetes; free CE, licensed BE
-
K3s
(k3s.io)
tool
Sub-70MB single-binary certified Kubernetes aimed at ARM boards, edge sites and constrained nodes
-
Caddy - The Ultimate Server with Automatic HTTPS
(Caddy Web Server)
reference
Go server configured by Caddyfile or JSON API, no runtime deps; getting-started and quick starts
-
Traefik Proxy Documentation - Traefik
(doc.traefik.io)
reference
Container-aware routing: discovers Docker and Kubernetes backends automatically, no restarts, TLS included
-
Nginx Proxy Manager
(nginxproxymanager.com)
tool
Web UI over nginx for proxy hosts, access lists and self-renewing Let's Encrypt certificates
-
WireGuard: fast, modern, secure VPN tunnel
(wireguard.com)
tool
In-kernel tunnel with modern crypto, leaner than IPsec and OpenVPN; also on Windows, macOS, BSD, mobile
-
OPNsense® is an open source, feature rich firewall and routing platform, offering cutting-edge network protection. - OPNsense
(OPNsense)
tool
FreeBSD-based firewall/router platform: multi-WAN, IPsec/OpenVPN/WireGuard, CARP failover, NetFlow reporting
-
Pi-hole – Network-wide Ad Blocking
(pi-hole.net)
tool
DNS sinkhole you run yourself; point router DHCP at it to filter every device, VPN included
-
AdGuard Home | Network-wide software for any OS: Windows, macOS, Linux
(adguard.com)
tool
network-wide DNS filtering of ads and trackers for every device, router-installable, with parental controls
-
Welcome | authentik
(goauthentik.io)
tool
Self-hosted SSO speaking SAML, OAuth2 and LDAP, with customisable auth flows and policy as code
-
Authelia
(Authelia)
tool
OpenID Certified SSO and multi-factor portal that reverse proxies delegate login to; ~20MB Go binary
-
GitHub - dani-garcia/vaultwarden: Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
(GitHub)
repo
Lightweight Rust reimplementation of the Bitwarden API for self-hosting; works with the stock clients
-
Nextcloud - Open source content collaboration platform
(Nextcloud)
tool
Self-hosted hub of file sync, Talk conferencing, groupware and LibreOffice-based online editing
-
Quick start | Immich
(docs.immich.app)
reference
Docker Compose path to a self-hosted photo and video backup server; needs 6GB RAM and two cores
-
The Free Software Media System | Jellyfin
(jellyfin.org)
tool
GPL server for streaming your own video, music and books; no tracking, no paid tier, donation funded
-
Home Assistant
(Home Assistant)
tool
Locally-run device automation hub, governed by the non-profit Open Home Foundation
-
GitHub - paperless-ngx/paperless-ngx: A community-supported supercharged document management system: scan, index and archive all your documents
(GitHub)
repo
OCR pipeline turning scanned paper into a searchable archive; docker compose deploy, live demo
-
Forgejo – Beyond coding. We forge.
(forgejo.org)
tool
Lightweight Git forge run by nonprofit Codeberg e.V.; Gitea fork focused on federation and privacy
-
linkding
(linkding)
tool
Single Docker container on SQLite; metadata fetching, page snapshots, REST API, multi-user sharing
-
awesome-selfhosted
(awesome-selfhosted.net)
reference
Tag-browsable catalogue of network services and web apps runnable on your own server, with licence and stars
-
Home | LinuxServer.io
(linuxserver.io)
tool
Group maintaining s6-overlay Docker images on a shared base, auto-rebuilt when upstreams change
-
selfh.st - Self-hosted content and software
(selfh.st)
news
Weekly newsletter, release notes and app index tracking what people run on their own servers
-
GNOME
(gnome.org)
tool
Desktop stack shipped by default on RHEL, Ubuntu, Debian and Fedora; app platform and design system
-
Plasma
(kde.org)
tool
KDE's Qt-based desktop shell; customisable panels, widgets and the KWin compositor
-
Xfce Desktop Environment
(xfce.org)
tool
lightweight GTK desktop for UNIX-like systems, tuned for low resource use; roughly two-year release cadence
-
Hyprland: Dynamic tiling window compositor with the looks
(hypr.land)
tool
Wayland compositor with live config reload, plugins, animations and multiple tunable tiling layouts
-
Sway
(swaywm.org)
tool
Drop-in i3 replacement on Wayland: existing i3 configs work, keyboard-driven tiling, wlroots-based
-
Wayland
(wayland.freedesktop.org)
tool
Display protocol and libwayland IPC; no single server, each desktop ships its own compositor
-
PipeWire
(pipewire.org)
tool
Low-latency graph engine replacing PulseAudio and JACK, sandbox-safe for Flatpak apps
-
Flatpak
(Flatpak)
tool
Sandboxed app bundles on shared runtimes, distributed via Flathub; one build for every distro
-
Flathub - Apps for Linux
(flathub.org)
tool
Cross-distribution Flatpak store: browse trending and new desktop apps, plus per-distro setup steps
-
AppImage
(appimage.org)
tool
Single-file bundle format: download, chmod +x, run, with no install and no per-distro packaging
-
Snapcraft - Snaps are universal Linux packages
(Snapcraft)
tool
Canonical's app store and packaging format: dependencies bundled, auto-updating, same across distributions
-
Preface - Home Manager Manual
(nix-community.github.io)
reference
Managing a user's dotfiles, packages and services declaratively with Nix, on NixOS or any distro
-
Homebrew
(Homebrew)
tool
Formulae and casks for macOS, Linux and WSL; taps let anyone publish outside the reviewed core repo
-
LibreOffice
(libreoffice.org)
tool
Cross-platform office suite built by a volunteer community under The Document Foundation
-
GIMP
(GIMP)
tool
Cross-platform raster retouching and compositing, scriptable in Python and Scheme via plugins
-
Digital Painting. Creative Freedom.
(Krita)
tool
GPL painting program with brush engines, layers, assistants and animation; Linux, Windows, macOS
-
Blender - The Free and Open Source 3D Creation Software — blender.org
(Blender)
tool
GPL 3D suite: modelling, sculpting, UV, Cycles path-tracing, VFX and Python-scriptable tooling
-
darktable
(darktable)
tool
Raw developer and photo workflow manager; non-destructive edits over a database of negatives
-
Kdenlive - Free and Open Source Video Editor
(Kdenlive)
tool
KDE's non-linear editor, also running on Windows, macOS and BSD; KDE-versioned quarterly releases
-
Open Broadcaster Software | OBS
(obsproject.com)
tool
Scene-based capture and mixing for recording or streaming; per-source audio filters, VST, plugins
-
mpv.io
(mpv.io)
tool
Minimal player driven by Lua scripts, with GPU decoding, OpenGL/Vulkan output and embeddable C API
-
calibre - E-book management
(calibre-ebook.com)
tool
E-book library organiser, format converter and reader; donation-funded, led by a single developer
-
Thunderbird — Free Your Inbox.
(Thunderbird)
tool
Donation-funded desktop client unifying mail, calendar, contacts and chat; no ads or data collection
-
Neovim
(Neovim)
tool
Vim fork with built-in Lua, an embedding API and external UIs; Vimscript and Vim 8 plugins still work
-
KeePassXC Password Manager
(keepassxc.org)
tool
Offline encrypted KDBX vault for Windows, macOS and Linux; no cloud or subscription, ANSSI-certified
-
VeraCrypt - Free Open source disk encryption with strong security for the Paranoid
(veracrypt.io)
tool
TrueCrypt 7.1a successor with 200k-iteration KDF, hidden volumes and full system-partition setup
-
The GNU Privacy Guard
(gnupg.org)
tool
command-line OpenPGP implementation with key management, S/MIME and ssh support; Gpg4win for Windows
-
Signal Messenger: Speak Freely
(Signal Messenger)
tool
Encrypted chat, voice and video over mobile data using the Signal Protocol; no ads or tracking
-
The Tor Project | Privacy & Freedom Online
(torproject.org)
tool
US nonprofit behind the three-hop volunteer relay network and the fingerprint-resistant Tor Browser
-
ClamAVNet
(clamav.net)
tool
Signature-based malware scanner with daemon, CLI tools and auto-updating definitions; mail-gateway staple
-
LibreWolf Browser
(librewolf.net)
tool
Firefox rebuild with telemetry and DRM stripped, uBlock Origin bundled and hardened defaults
-
uBlock Origin - Free, open-source ad blocker extension
(uBlock Origin)
tool
Wide-spectrum filtering extension; Chrome's Manifest V3 killed the full version, Firefox keeps it
-
About RTL-SDR
(rtl-sdr.com)
article
~$30 RTL2832U DVB-T dongle repurposed as a receive-only 500 kHz-1.75 GHz software radio
-
The Linux Kernel documentation — The Linux Kernel documentation
(kernel.org)
reference
Top level of the in-tree docs: development process, internal APIs, userspace ABI, per-architecture notes
-
systemd - ArchWiki
(wiki.archlinux.org)
reference
Unit files, targets, journalctl and service control as practised on Arch