Skip to content

2026

  • 2 min read

It's a year already, huh?

Getting back into writing was not easy. The first few paragraphs I typed, erased, and typed again, several times over. The most words I have written lately were step-by-step instructions for rebuilding my homelab.

But this post is not about that. I started my Linux journey with Knoppix, a live CD added to a computer magazine. It was thick, a real physical thing I remember to this day. I booted the CD, played around and concluded that I do not like KDE (fool!). The years went by and I had dual-booted Ubuntu, and later Arch, a few times, but I could never let Windows go, not completely. Gaming on Linux was just not feasible at that time and the fact that I needed CATIA and AutoCAD for school did not help either.

Fast forward to today and I find myself daily driving Linux and not only do I not miss Windows, I find my whole computing experience a more pleasant one. This speaks volumes about the state of the Linux desktop. There are a few bugs here and there, but it is not really any better on the Windows side. Have you tried mounting NFS shares on Windows?

I have spent most of my time on Bazzite and it worked pretty well, until I needed more than a browser... Don't get me wrong, it is a perfectly fine operating system, for daily driving a browser window and playing games. But colouring outside the lines is... painful. Immutable destkop? Yes, but unfortunately not for me. Adding drives, layering packages, trying to get containers going, all just felt wrong. I was battling the OS on every step.

Eventually I broke and retried to install CachyOS. This time it worked, maybe a new ISO version or the fact that I no longer had the RTX2060 in the system helped, who knows. I immediately felt the speed. Bazzite was sluggish in comparison. Was it real responsivness or animation tuning? I do not know, but I whole-heartedly agree with the opinion that "perceived performance is performance". My enjoyment of using a Linux desktop increased again.

I feel joy sitting down to my personal Linux computer after a workday in Windows. I feel joy opening a project folder in Kate and resuming building whatever contraption I come up with for my homelab. I feel joy writing about my experiences on and with Linux. Linux powers now all computers in my household. It has won. HTPC? Linux. Steamdeck? Linux. Tower? Laptop? NAS? All Linux.

Once I made the switch I knew I would stay. Not beacuase Linux has improved, which it did, but because I changed. Windows-only software no longer has had a hold on me.

  • 2 min read

New Year, new.. services?

While the Holiday season was a time filled with family joy, it was a busy time. Between packing presents and driving home for Christmas there was little time to work on projects. Such as this blog.

I took a longer than expected break from computers. And you know what? It was great! Taking care of my family and giving them the time they deserve was very fulfilling. I do like my role as husband and father.

Now that we all got back to work and Kindergarten, I started once again thinking about hobby-stuff. I do provide four services that require login to family. This number won't shrink. What is a better time to implement Single Sign-On than now? Well, yesterday of course! That's why I stood up a Keycloak instance and secured my first app with it. Setting up a docker-compose.yml wasn't as straightforward as I expected. This was the part that took me the longest. The examples are out of date and the official documentation does not provide the necessary bits in one place.

Eventually I pieced it all together, cherry picking parameters and variables from various places. After that, configuration was maybe not a walk in the park, but a much more pleasant experience. I followed the official guide and set up a child realm and client, the client being the webapp.

Basically its:

  1. Put Keycloak realm URL, client ID and secret into webapp

  2. Put link to webapp into Keycloak

Congratulations! You now can log-in to the app using SSO. If only it were this easy.. Now the accounts got merged? Squashed? Yes, based on the Username field in Keycloak, my admin account to the webapp got demoted and I no longer can log in using the old password. Word of caution here to anyone trying this at home. Do. Make. Backups!

I started the migration to SSO with the most recent app added to the homelab as it didn't hold any valuable data yet. I did it haphazardly, one might say I yolo'ed it, but in doing so I quickly discovered what the next steps will be:

  1. Revise the backup strategy (oh God why haven't I done it already?)

  2. Test disaster recovery

  3. Configure accounts carefully, with all required roles set in advance

  4. Migrate the less important apps to SSO

  5. After that, and ONLY after, enable SSO for immich and paperless-ngx

Progress was made. But why the heck does mkdocs render lists differently than Kate or Obsidian?!