Tagged: #infra

• The kauditd Hold Queue Incident budding

  Three rounds of diagnosis, two plausible root causes that were both wrong, and the one counter shape that settled it.

  #infra#security#self-hosting
• The Linux Audit Subsystem budding

  What has to be true for an audit record to actually arrive — kauditd, its two delivery paths, and the queue nobody shows you.

  #infra#security