A process holding thousands of idle connections is not what a request-per-process model is for, and a small binary beside it is a smaller change than a rewrite.…
22.04 in April ships OpenSSL 3, and a PHP extension compiled against 1.1 does not load against it. The extension case is a rebuild and is straightforward once…
A host that has been running for four years is listening on things nobody remembers configuring, and the audit is two commands. Binding to 0.0.0.0 and relying on…
if inside a location is evaluated per request and interacts badly with most other directives; map is a hash lookup evaluated once. The map form is also composable…
A deploy script that fixes ownership runs once per deploy and does nothing about a directory created afterwards by something else. The age field turning it into a…
A container reads the host’s memory and CPU counts from /proc, because those files are not namespaced, and anything sizing itself from them sizes for the wrong machine.…
Automatic security updates are correct on a server and the restart they trigger is not something anybody scheduled. needrestart being enabled by default in 22.04 is the change…