A note on fixing newuidmap: Could not set caps when building images with rootless Podman on WSL2 Arch Linux.

Windows executables like powershell.exe fail to run inside Arch Linux WSL2 — fix it with a single config file.

Configure Fail2Ban on an Arch Linux host with a rootless Podman mail server, then use UFW to manage bans for SSH, Postfix, and SASL brute-force sources.

Use a VBS script to launch WSL2 with a hidden window, so auto-start at login doesn’t pop up a console window.

Enabling mihomo TUN mode causes a total network outage because system ip_forward is disabled and UFW’s forward policy is set to DROP, so the kernel refuses to forward TUN traffic.

A quick note on a MinerU install gotcha: uv tool install "mineru[all]" only handles the Python side. To run hybrid-engine on Arch, you still need the system packages cuda and ninja.

Honcho’s first startup Alembic migration pins the pgvector embedding column to vector(1536), which conflicts with EMBEDDING_VECTOR_DIMENSIONS=1024 in .env and causes startup to fail. This post documents fixing it with the official configure_embeddings.py script.

Create a virtual display on KDE Wayland using krfb-virtualmonitor, paired with Sunshine’s kwin capture and Moonlight’s built-in display switching. No kernel parameters required.

Fix Docker socket mount failures in a rootless Podman Gitea Actions Runner with docker_host and a Quadlet configuration.

A walkthrough of configuring an Agent with Playwright MCP and CloakBrowser, covering shared installation, Linux setup, and launching the Windows host browser from WSL.