Netbird vs Tailscale vs Headscale in 2026: Self-Hosted WireGuard Mesh for Linux Compared
Netbird vs Tailscale vs Headscale for a self-hosted WireGuard mesh on Linux in 2026: ACLs, SSO, posture checks, hardening, and a no-downtime migration path.
Articles by Yuki Tanaka
fapolicyd on Linux in 2026: Application Allowlisting on RHEL and Fedora Without Locking Yourself Out
A practical 2026 guide to fapolicyd on RHEL and Fedora: how it uses fanotify to gate execve, how to write rules that don't lock you out, the safe permissive-to-enforce rollout, and how it maps to CIS, STIG, and PCI DSS compliance.
YARA and YARA-X on Linux: Writing Detection Rules and Hunting Malware at Scale in 2026
Learn YARA and YARA-X on Linux for malware detection and threat hunting. Covers rule writing, ELF/hash modules, Wazuh integration, Volatility 3 memory scans, and fleet-wide scanning.
Keylime Remote Attestation on Linux: TPM 2.0 Trust for Server Fleets in 2026
Deploy Keylime continuous remote attestation on Linux with TPM 2.0: registrar, verifier, Rust agent, IMA runtime policies, and revocation webhooks in 2026.
BPF LSM (KRSI) in 2026: Writing Custom Kernel Security Policies with eBPF
Use BPF LSM (KRSI) to write dynamic kernel security policies in eBPF. Enable it on Linux 6.x, ship your first enforcement program, and stage audit-to-enforce rollouts safely.
Linux IMA and EVM: Kernel-Level File Integrity with TPM Attestation in 2026
Deploy Linux IMA and EVM for kernel-enforced file integrity. Learn appraisal policy, EVM key sealing to TPM 2.0, IMA digest lists, and Keylime remote attestation with working configs.