Skip to main content

Posts

Showing posts from June, 2026

Always DNS: Why "The Wi-Fi Is Down" Is a Verdict, Not a Diagnosis

Someone walks in already carrying the urgency. "The Wi-Fi is down," they say, and almost in the same breath comes the culprit: someone changed something, the previous admin left it broken, somebody is responsible and it certainly wasn't me. The verdict arrives before the evidence. The sentence is signed before anyone has looked at a single screen. Around here, we do not operate on "it seems broken." We operate on technical certainty, and technical certainty has an inconvenient requirement: you have to go and find it. What follows is not a DNS troubleshooting guide—I am not interested in commands here—but an anatomy of why that first statement, the one naming a culprit, is almost always wrong, and where the ghost actually comes from. 1. "The Wi-Fi Is Down" Is Not a Diagnosis It helps to separate two things that urgency tends to collapse into one. An observation describes a state of the system: a service responds, another does not, at a particular layer,...

Active Directory with Open Source, Part 2: Real Member Server ACLs, GPOs Without the Hype, and the Second DC

In Part 1 , we set up our Domain Controller correctly: an operational realm that bypasses the .local trap, signed time protocols, and a robust versioned backup routine. However, we explicitly left three core promises for later because they represent the exact threshold where superficial tutorials abandon the reader: the file server operating completely decoupled from the DC, role-based folder privileges that actually work, and high availability via a secondary DC. Here, we deliver on those promises. And, keeping with our house style, we do it without the marketing fluff—every milestone comes with its honest infrastructure caveat. The Honest Architecture, in One Sentence Separation of concerns: The Domain Controller authenticates and does nothing else; files live on a Member Server; the clock is a cryptographic requirement, not an ornament; backups have versions and a copy outside the network; and nothing hits production without being verified. Everything else is just a detail of th...

Active Directory with Open Source for SMBs: The Version That Survives Production (Debian 13)

The biggest myth in commercial IT is that a secure and professional network requires thousands of dollars in servers and unaffordable corporate licensing. It is a lie: with Samba 4 on Debian 13, you can build an Active Directory free of CALs or seat licenses, a centralized file server, automated backups, and a VPN for branch offices and remote work—all running on modest hardware. However, there is a second myth, which is far more dangerous because it comes disguised as a solution: the tutorials circulating online—often automated translations or copied scripts that nobody bridges to audit—build an architecture that survives the demo but falls apart completely in production. This article is both things at once: a deployment guide to build it right, and a brutal audit of the five critical flaws that cause those "NASA-grade" setups to collapse on their own three weeks later. We measure against official documentation, the Samba Wiki, and the actual behavior of underlying proto...

The Developer's Bunker in KDE Plasma 6: Taming Baloo and KWallet via Plain Text

In systems administration, we do not operate on "it seems to work," but on technical certainty. This article stems from a recent KDE Plasma 6 update that forced me to chase background processes, run diagnostic commands, and—most importantly—clone the KDE source code to confirm what the machine was actually doing, rather than echoing forum folklore. The result is not a manifesto against KDE. Quite the opposite: once the code is read, the environment proves to be far more reasonable than mythology suggests. What follows is the recipe to tame Baloo (the indexer) and KWallet (the keyring) under your own rules, without breaking anything, and understanding exactly why each directive does what it does. 1. Two Philosophies That Coexist Better Than It Seems The design of Plasma 6 is tailored for the general user: automatic indexing to find files instantly, and a graphical keyring that centralizes credentials. A developer's workflow is entirely different: manual directory co...

The Condemnation of Linux, and Its Beauty

 Linux has a problem: it will never be entirely normal. Not because it is naturally difficult, nor because its users belong to some technical sect, although they sometimes work hard to prove the point. Linux’s problem is deeper. It was not designed to behave like a single, closed, obedient product. It has no single face, no single voice, and no single company deciding what the correct experience should be. That is the condemnation of Linux . And also its beauty. Windows and macOS offer a clear promise: you do not have to know too much. The system is there to absorb decisions, hide complexity, and turn the computer into a docile service. In exchange, the user gives something up: control, visibility, the ability to intervene. The machine works, but it belongs to us less and less. Linux proposes a different relationship. Not always a more comfortable one. Not always a more elegant one. But a more honest one. Even in its friendliest versions, Linux lets us see that a computer is ma...

The Edge of Control: The Epistemic Foundation of Arch Linux vs. the Illusion of CachyOS

When analyzing the infrastructure on which we run quantitative research, econometric analysis, or simulation models, the temptation of raw speed often clouds methodological judgment. This is the landscape where niche alternatives like CachyOS gain ground, promising to squeeze hardware performance through modified kernels (such as linux-cachyos ) and repositories fully recompiled under the aggressive -O3 optimization flag of GCC/Clang with x86-64-v3/v4 support. However, in the domain of computational science, localized efficiency and speed without structural traceability introduce a critical risk vector: epistemic debt . That is, the progressive accumulation of opacity over the computing substrate, compromising the fidelity and reproducibility of observed data. The Illusion of "Exit Status 0" The fundamental danger of hyper-optimized software lies in the fact that failures derived from aggressive optimizations are, by definition, silent failures . The system will not thr...

How to Tame the Brother 161xNW Over the Network Without Losing Your Mind

  The Definitive Arch Linux/CachyOS Guide Some hardware feels like it was designed to test the patience of Linux users. The Brother DCP-1610NW —and its close relatives in the 161x family— fits perfectly into that category. It is a monochrome laser multifunction printer: cheap to run, physically tough, reliable, and clearly built more like a small office tank than a delicate modern gadget. The problem is not the printer. The problem is making it work cleanly on Arch Linux or CachyOS over the network, especially when we want both sides of the device to behave properly: the printer and the scanner. The traditional instinct is to go straight to Brother’s official Linux drivers, hunt for old .deb or .rpm packages, look for AUR wrappers, and start installing model-specific packages until something works. That path exists. But on my system, it was not the right first move. The cleaner solution was this: CUPS + brlaser for printing. SANE + sane-airscan + Skanlite for scanning. No driver ...

Why Use Debian for 10 Years?

 Debian does not try to impress you. It does not want to be the newest distro, the flashiest one, or the fastest to adopt everything. Its proposal is different: to be a reliable, maintainable, and predictable base for a long time. If Arch is “I give you freedom, you deal with it,” and Fedora is “I give you modernity with guardrails,” Debian Stable is: “I give you peace.” 1. Because Debian Stable Changes Very Little This is the big reason. In Debian Stable, the system is not changing all the time. Program versions are mostly frozen and mainly receive security fixes and important bug fixes. That means fewer surprises. It is not the distro where you will always have the latest GNOME, the latest KDE, the latest kernel, or the latest version of every application. But precisely because of that, many things keep working the same way for years. For a work machine, a server, a daily-use laptop, or a PC you do not want to “babysit” every week, that is worth a lot. 2. Because You Do Not Live ...

Automation vs. Full Control

  Demystifying Backups in KDE Plasma: Kup vs. rsync Yesterday, we talked about a simple but fundamental idea: a backup should not be a complex ceremony, but a reproducible habit. In  “ Backups with rclone: Synchronizing Without Making Life Complicated ” , the focus was on synchronizing a work environment to the cloud using rclone , excluding what is disposable and preserving what actually matters. Today, the scenario changes. We are no longer talking about the cloud. We are talking about external drives. About laptops. About KDE Plasma. About automation. About control. And, above all, about predictability. Because when a backup depends on a USB drive, a critical question appears: Who is really in control of the process: the graphical environment or us? The appeal of automation KDE Plasma offers a modern, comfortable, and deeply integrated desktop experience. Within that ecosystem, Kup appears as an attractive tool for managing backups through a graphical interface. The promise...