Speeding up Linux disk encryption
Data encryption at rest is a must-have for any modern Internet company. Many companies, however, don't encrypt their disks, because they fear the potential performance penalty caused by encryption overhead. Encrypting data at rest is vital for Cloudflare with more than 200 data centres across the world. In this post, we will investigate the performance of disk encryption on Linux and explain how w
Live-patching security vulnerabilities inside the Linux kernel with eBPF Linux Security Module
Live-patching security vulnerabilities inside the Linux kernel with eBPF Linux Security Module06/29/2022 This post is also available in 简体中文 and 繁體中文. Linux Security Modules (LSM) is a hook-based framework for implementing security policies and Mandatory Access Control in the Linux kernel. Until recently users looking to implement a security policy had just two options. Configure an existing LSM m
Transparent memory offloading: more memory at a fraction of the cost and power
Transparent memory offloading: more memory at a fraction of the cost and power Transparent memory offloading (TMO) is Meta’s data center solution for offering more memory at a fraction of the cost and power of existing technologies In production since 2021, TMO saves 20 percent to 32 percent of memory per server across millions of servers in our data center fleet We are witnessing massive growth i
ipftrace2で始めるLinuxネットワークスタック探訪 - Qiita
皆さんはLinuxネットワークスタックの問題にあたってしまった時、あるいは単なる興味でLinuxネットワークスタックの中を調べたいと思い立った時、どのようにして調査を進めますか？カーネルのソースコードに printk を仕込んでカーネルを再コンパイルするでしょうか？もしくは最初からソースコードを読むという強い方もいらっしゃるかもしれません。どちらの方法もなかなかの茨の道です。おそらく、ほとんどの方は最終的にftrace やbpftraceなどのDynamic Tracingツールを使って、カーネルの動作を実際に動かしながら見るという方法に至ると思います。 この記事では ipftrace2 というDynamic Tracingツールの基本的な使い方をサンプルとともに紹介します。ipftrace2はネットワークスタック、特にパケット処理の部分をトレーシングをすることに特化した作りになっており、
The Linux Kernel documentation — The Linux Kernel documentation
The Linux Kernel documentation¶ This is the top level of the kernel’s documentation tree. Kernel documentation, like the kernel itself, is very much a work in progress; that is especially true as we work to integrate our many scattered documents into a coherent whole. Please note that improvements to the documentation are welcome; join the linux-doc list at vger.kernel.org if you want to help out.
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
kCTF VRP Setup
GitHub - containers/libkrun: A dynamic library providing Virtualization-based process isolation capabilities
GitHub - sysprog21/vwifi: A virtual wireless device driver for Linux
GitHub - eecheng87/ESCA: Effective System Call Aggregation
GitHub - osandov/drgn: Programmable debugger
kernel/common-patches - Git at Google
GitHub - google/ghost-kernel
GitHub - amazonlinux/linux: Linux kernel stable tree mirror
[v5,1/1] NAX LSM: Add initial support - Patchwork
GitHub - zen-kernel/zen-kernel: Zen Patched Kernel Sources
Writing the Ultimate Locking Check
Rust in the Linux kernel
GitHub - cifsd-team/ksmbd: ksmbd kernel server(SMB/CIFS server)
[PATCH v3 1/1] fs: Allow no_new_privs tasks to call chroot(2) - Mickaël Salaün
Linux for Tegra kernel patches – random blog