Sunday, 26. October 2025 Week 43
Monday, 13. October 2025 Week 42

Solving the mystery of systemd-resolved listening on port 5355

Found some unexpected TCP socket listening on port 5355.
The corresponding process was systemd-resolved.
Turns out this is the LLMNR implementation for name resolution on the local network, which is enabled by default.

As this is not useful on a server (and rather another attack vector to keep an eye on), I decided to turn it off.
This can be done by adding LLMNR=no to /etc/systemd/resolved.conf and then doing a service systemd-resolved restart.

(via)

List TCP sockets when netstat is not available

Today I found myself on a Linux machine and needed to check which processes are listening for network packets.
Usually I use netstat for such tasks, but on this machine it was not available.
Luckily there was ss available, and the following command gave me the processes listening for TCP packets:

ss -n -A tcp -a -p state listening
Sunday, 12. October 2025 Week 41

s/rubygems.org/gem.coop/

There was some drama around RubyGems.org (seems like a classic commercial overstep on a community resource).
And as a result there is now a new Gem server available: gem.coop

If you want to use the new server (which currently is a mirror of rubygems.org), simply replace source "https://rubygems.org" with source "https://gem.coop" in your Gemfile:

-source "https://rubygems.org"
+source "https://gem.coop"

I switched the Gemfile for this blog over to it, and so far it seems to work fine. 💎

Thursday, 25. September 2025 Week 39
Wednesday, 17. September 2025 Week 38
Thursday, 11. September 2025 Week 37

h-j-k-l

Can very much relate to this ⌨️

Dropping :wq and j's and k's in all my word, google, txt docs.

(via)

Sunday, 31. August 2025 Week 35

How to fix crypttab/cryptsetup boot problems after Debian Trixie upgrade

After upgrading one of my physical hosts to Debian Trixie, it failed to boot.
It complained about the service for mounting my encrypted disk not starting.

Turns out this is a known problem (even mentioned in the Trixie release notes).
For cryptsetup to work in Debian 13, the systemd-cryptsetup package must be installed:

# apt-get install systemd-cryptsetup

After doing this (via the rescue shell) and rebooting the host, the system started seamlessly.
And the encrypted disks were mounted as expected.

Monday, 25. August 2025 Week 35
Friday, 22. August 2025 Week 34

Copy and paste from the commandline in WSL

On a work computer I'm currently using WSL quite often and thus wanted to see if there is a pbcopy/pbpaste equivalent.
Turns out WSL integrates with the X11 and Wayland clipboard APIs, thus we can simply install wl-clipboard.

With this in place, running wl-paste inside WSL dumps the content of the Windows clipboard.
And echo "foobar" | wl-copy puts "foobar" into the Windows clipboard.