Windows executables like powershell.exe fail to run inside Arch Linux WSL2 — fix it with a single config file.

When a self-hosted mail server gets bombarded by SASL brute-force attacks and spam, fail2ban is the first automated line of defense. This post documents the full process of configuring fail2ban on Arch Linux with a Podman rootless container to read container logs and auto-ban attacking IPs.

Use a VBS script to launch WSL2 with a hidden window, so auto-start at login doesn’t pop up a console window.

Enabling mihomo TUN mode causes a total network outage because system ip_forward is disabled and UFW’s forward policy is set to DROP, so the kernel refuses to forward TUN traffic.

A quick note on a MinerU install gotcha: uv tool install "mineru[all]" only handles the Python side. To run hybrid-engine on Arch, you still need the system packages cuda and ninja.

Honcho’s first startup Alembic migration pins the pgvector embedding column to vector(1536), which conflicts with EMBEDDING_VECTOR_DIMENSIONS=1024 in .env and causes startup to fail. This post documents fixing it with the official configure_embeddings.py script.

Create a virtual display on KDE Wayland using krfb-virtualmonitor, paired with Sunshine’s kwin capture and Moonlight’s built-in display switching. No kernel parameters required.

This article is part of the “quadlet config snippets” series. For the Quadlet basics, see Podman Tutorial. For the full Gitea setup, see Quadlet Config Share: Gitea.

I ran into this while using rootless Podman to run a Gitea Actions Runner. Leaving the note here.

Job container fails with making volume mountpoint

The Runner starts normally, but the workflow fails with this error:

A walkthrough of configuring an Agent with Playwright MCP and switching it to CloakBrowser for anti-detection browsing, including the gotchas and a cookie persistence setup.

An overview of the extra syntax and use cases Quarto .qmd files add on top of regular .md files.