Welcome to My Blog

A few months ago, I decided to turn my GitHub profile into an ASCII animation. I initially thought it would be simple, but after searching for quite a while without finding a suitable script or website, I ended up hand-rolling a not-particularly-general-purpose script myself. After a lot of tweaking, I finally got a result I was happy with. Recently, I thought: why not turn this into a web page? With a visual interface, it would be much more convenient than the slow, manual adjustments from before....

A slide deck I made recently, covering some internal implementation details of io_uring. Click the slides above to navigate, or open directly here.

Last time, we covered how to set up a development environment with the latest kernel using QEMU. But after trying it for a while, I found it wasn’t very convenient. More often than not, I just need to run a single program (like a unit test), and the full environment built in the previous article makes this process more complicated. This article introduces a simpler approach. A simple script is all it takes to build a complete runtime environment....

Recently, I’ve been spending my spare time on a systems programming project. Before long I ran into a problem: using the latest kernel features isn’t exactly easy. Most distributions lag behind the latest kernel releases, and I’m not bold enough to risk upgrading the kernel on my only Linux machine (using the installkernel command). So I needed a way to set up a development environment with a newer kernel while keeping my system safe....

Container technology is built on three Linux kernel features: Namespaces, Cgroups, and Unionfs. They provide logical resource isolation, physical resource limits, and container filesystems, respectively. Among these, Namespaces are the most critical. They implement isolation — the most essential aspect of virtualization. Even without Cgroups and with an alternative to Unionfs, you can still achieve much of what a container does, as long as you have Namespaces. So in this article, we’ll try to build a simple container using Namespaces....

The era of multi-user operating systems is long over. People today generally don’t share computing resources by having multiple users log into the same OS — we have better virtualization technology for that. But users still serve a purpose, the most important being permission isolation. There’s a lot to say on this topic, but we’ll focus on just the most critical points. Containers introduce additional quirks around users, which we’ll also discuss....