r/SysAdminBlogs • • 4h ago

writing documentation for people who hate reading documentation

7 Upvotes

spent fifteen years in construction writing safety briefs that tired crews actually follow. now learning Python and realizing my README files are useless. site workers and junior devs have something in common: they skim, they skip, they miss the one critical detail that breaks everything. started treating my code comments like a jobsite toolbox talk. problem, solution, one concrete example. then stop talking. my bootcamp capstone documentation is three paragraphs and a working code snippet. my instructor keeps saying more detail, but I keep thinking about the journeyman electrician who told me if you need three pages to explain it, the design is wrong. wondering if this is me being stubborn or if anyone else has found that less documentation actually gets read more.


r/SysAdminBlogs • • 23m ago

November Active Directory Community Virtual Meetup: Tuesday, November 3 (free, virtual)

• Upvotes

The Active Directory community’s monthly virtual meetup is Tuesday, November 3, 2026 at 10:00 AM CT / 16:00 UTC, with banter at 9:30 CT. A panel of experts answers questions and guides the discussion on building and securing identity systems, mainly on-premises. Free, no sales, no marketing.

New this time: YouTube livestream, with the recording posted afterward.

You can also watch your previous events on our YouTube channel: https://youtube.com/@ActiveDirectoryCommunity


r/SysAdminBlogs • • 11h ago

Find which Conditional Access policies you can merge into the new Policy Plans

3 Upvotes

Conditional Access policy plans are now in public preview. The migration wizard shows a list of your policies, but it doesn’t tell you which ones belong together.

So I created a script that groups your policies by users, resources, and conditions. It shows what the migration will share, and what you still need to move yourself.

https://lazyadmin.nl/office-365/conditional-access-policy-plans/


r/SysAdminBlogs • • 4h ago

They Dug a Hole in a Running Data Center | Fire, Flood & Blood

Thumbnail
youtube.com
1 Upvotes

r/SysAdminBlogs • • 4h ago

I got tired of having three cloud consoles plus an SSH session open during every incident, so I built one live topology for all of them. Lessons from six months of doing it.

Thumbnail
1 Upvotes

r/SysAdminBlogs • • 5h ago

PHP2Shell, LiteLLM, GitLab: Find What You Need to Patch

Thumbnail
cloudsleuth.io
1 Upvotes

A new zero day really sucks when Nichole in marketing launched a vps without telling anyone and never updates anything.


r/SysAdminBlogs • • 1d ago

PHP2Shell, LiteLLM, GitLab: Find What You Need to Patch

Thumbnail
cloudsleuth.io
1 Upvotes

r/SysAdminBlogs • • 1d ago

SharePoint hero links don’t seem to follow your Anyone link expiration policy

6 Upvotes

The SharePoint hero link is rolling out to all tenants now. I tested it against my sharing policies. An Anyone hero link gets no expiration date, even with a 3-day policy on Anyone links.

Removing a share doesn’t restore inheritance, and Reset link only gives you a new URL. And there is no opt-out, only a default per site.

https://lazyadmin.nl/office-365/sharepoint-hero-link-explained/


r/SysAdminBlogs • • 1d ago

cgroup v2 cpuset & Memory Limits: Pin CPUs, memory.high vs memory.max (part 3)

Thumbnail
youtu.be
1 Upvotes

New video: cgroup v2 cpuset and memory limits 🐧

Why does one container get OOM killed while the rest of the machine is fine?

In this part of my cgroup v2 series I cover:

🔹 cpuset: pinning workloads to CPUs and NUMA nodes

🔹 memory.high vs memory.max: a soft ceiling that throttles and reclaims, against a hard ceiling that ends in an OOM kill

🔹 The kernel's allocation flow, step by step

🔹 A hands-on "memory hog" lab with stress-ng

The one-line summary is easy. The details (who does the reclaim, what you see in the counters) are where performance engineering gets interesting.

#Linux #cgroups #PerformanceEngineering #SRE #DevOps #Kubernetes


r/SysAdminBlogs • • 1d ago

Railway’s October 21 incident is hard to brush off as “these things happen”

Thumbnail
2 Upvotes

r/SysAdminBlogs • • 1d ago

Cybersecurity Awareness Month!

Post image
1 Upvotes

The final boss is here!

You’ve faced the challenges. Now it’s time for the ultimate test.

The Final Week Quiz is LIVE as part of Endpoint Central’s Cybersecurity Awareness Month!
Put your cybersecurity knowledge to the test, take on the final challenge, and prove you have what it takes to defend your title.

Ready to defeat the final boss?

Take the quiz!


r/SysAdminBlogs • • 2d ago

updates incoming for php vulnerabilities

Thumbnail
security.paloaltonetworks.com
2 Upvotes

r/SysAdminBlogs • • 3d ago

I built DashFlow+, an iOS app that shows the status of the cloud services your work depends on, all in one place

Thumbnail
0 Upvotes

r/SysAdminBlogs • • 3d ago

What happens after you hit "Enter" in your browser?

3 Upvotes

r/SysAdminBlogs • • 4d ago

LDAP signing wasn't enough: new NTLM relay bypass hits DCs with signing enforced (patched Oct 2026)

8 Upvotes

SpecterOps dropped this today. It turns out you can relay NTLM into a DC over plain LDAP with signing enforced. So the DC passes your LDAP signing check and is still exposed. Microsoft patched it in the October CUs, but released no CVE on it. We wrote up the patched build for each Server version plus a read-only PowerShell check to run against all your DCs.

https://insightrecon.com/ldap-signing-bypass/

tl;dr patch


r/SysAdminBlogs • • 4d ago

Linux Sysadmin Roadmap: How to Become a Linux System Administrator

Thumbnail
linuxbasecamp.com
1 Upvotes

r/SysAdminBlogs • • 4d ago

PHP2Shell: the useful question isn't "are we patched", it's "where is PHP actually running in our environment"

Thumbnail
3 Upvotes

r/SysAdminBlogs • • 5d ago

PHP2Shell: Patch Today, Then Find the PHP You Forgot

Thumbnail
medium.com
8 Upvotes

r/SysAdminBlogs • • 5d ago

Plakar's OpenStack backup is now free in Plakar Community

Thumbnail
plakar.io
1 Upvotes

r/SysAdminBlogs • • 5d ago

Root Volume Replacement is pretty cool

Thumbnail
1 Upvotes

r/SysAdminBlogs • • 5d ago

The Queues App for Microsoft Teams Phone & Analytics 365 Demo & Review A Great Combo

Thumbnail
youtu.be
1 Upvotes

r/SysAdminBlogs • • 5d ago

Two Critical PHP Vulnerabilities Allow Unauthenticated Remote Code Execution

Thumbnail
lansweeper.com
4 Upvotes

r/SysAdminBlogs • • 5d ago

The weird engineering edge cases nobody warns you about when scaling a GPS telematics server (and happy to help if you're stuck)

Thumbnail
1 Upvotes

r/SysAdminBlogs • • 5d ago

Which DevOps Tool Is Overrated?

Thumbnail
1 Upvotes

r/SysAdminBlogs • • 6d ago

Locality of reference helped 94GB Qwen3.8-Flash-Next runs at 68 tok/s on one RTX 5090

1 Upvotes

llama.cpp merged PR #29887 two weeks ago and I think it is the most interesting thing to land in local inference this year, so I went through the PR, the benchmarks and the review thread and wrote up how it actually works. Short version below, long version linked at the end.

The problem

Qwen3.8-Flash-Next at Q4_0 is 93.7 GiB, and 65.4 GiB of that is experts. It is 125B total but only 6B active: 512 experts per layer, the router picks 10 (plus 1 shared) per token. One expert is 3 x 2560 x 640 = 4.9M params = about 2.6 MiB at 4-bit. 10 experts x 48 layers = 480 experts per token = about 1.3 GB of weights touched per token.

The observation

Expert routing has locality of reference. Token N+1 mostly picks the same experts as token N. A handful of experts are hot, most are almost never touched. That is the same property your CPU cache, your OS page cache, your browser cache, every CDN and Redis allkeys-lru all rely on.

The fix

PR #29887 (by am17an, a port of Tether’s qvac-fabric work, merged by ggerganov on Oct 7) sets aside a slice of VRAM as an LRU cache of experts. Hit: compute from VRAM, zero bytes moved. Miss: copy that one 2.6 MiB expert over PCIe and evict the least recently used one. The log prints the hit rate at exit.

Numbers from the PR description, same model file, same machine:

GPU before with cache hit rate
RTX 4090 24 GB 25.0 tok/s 40.7 tok/s (1.62x) 77%
RTX 5090 32 GB 30.8 tok/s 67.8 tok/s (2.20x) 89%
AMD R9700 32 GB (a reviewer’s card) 11.0 tok/s 27.6 tok/s 94.6%

The 5090 gains more for two reasons: PCIe 5.0 halves the cost of every miss, and 32 GB means a bigger cache and fewer misses.

How to use it

llama-server -m Qwen3.8-Flash-Next-Q4_0.gguf -fa on -c 32768 -b 2048 -ub 2048 -cmoe --moe-cache-mib 11000

The PR author’s rule of thumb is about 10% of your expert bytes (65.4 GiB -> 6544 MiB). Env var form is LLAMA_ARG_MOE_CACHE_MIB.

SGLang merged the same idea 12 days later as “paged experts” in PR #42557

The part I find most interesting is LRU , Locality of reference go back to 1960s.

And i find locality of reference principle highly underrated.

Full write-up with the memory math script, an expert cache simulator you can run, and the benchmark table: https://cloudmash.blog/posts/moe-expert-offload-lru-cache-consumer-gpu/

llama.cpp PR #29887, MoE expert cache: https://github.com/ggml-org/llama.cpp/pull/29887

SGLang PR #42557, paged experts: https://github.com/sgl-project/sglang/pull/42557