Running the box: Docker, Linux, the JVM
Cleaning up your systemd service
Retiring a service is more than killing the process. Here's the four-beat teardown I ran to remove a honeypot from my box — and why 'disable' isn't 'stop'.
Tag
#linux
- #agents
- #aggregation
- #ai
- #ai-agents
- #ai-architecture
- #ai-tooling
- #anthropic-skills
- #applicative
- #appsec
- #architecture
- #artifacts
- #attention
- #automation
- #banking
- #batch
- #bean-validation
- #bert
- #binding
- #blackboard
- #branching
- #branding
- #broadcasting
- #cake-pattern
- #calibration
- #case-classes
- #cats-core
- #causal-attention
- #cgroups
- #chatgpt
- #chatgpt-sites
- #ci-cd
- #classpath
- #claude
- #claude-code
- #cli
- #codex
- #collections
- #concurrency
- #configuration
- #cosine-similarity
- #cross-entropy
- #csp
- #data-modeling
- #dataviz
- #daybreak
- #ddd
- #deep-learning
- #deepseek
- #dependency-injection
- #design-system
- #design-systems
- #developer-experience
- #developer-tooling
- #developer-tools
- #devex
- #devops
- #dns
- #docker
- #dropout
- #either
- #embabel
- #embeddings
- #enterprise-integration-patterns
- #error-handling
- #events
- #fable
- #fail2ban
- #fairness
- #fastapi
- #fastmail
- #fine-tuning
- #flyway
- #foldmap
- #for-comprehensions
- #from-java-to-python
- #frontend
- #functional-programming
- #functor
- #fundamentals
- #gdpr
- #gelu
- #git
- #github-actions
- #goap
- #gpt
- #gradient-descent
- #gradients
- #grafana
- #guardrails
- #hibernate-validator
- #honeypot
- #hooks
- #http
- #human-in-the-loop
- #ideas
- #identity-brokering
- #image-generation
- #implicit-classes
- #implicits
- #intellij
- #java
- #java-to-python
- #jev
- #jinja2
- #junit
- #jvm
- #kafka
- #keycloak
- #knowledge-base
- #layer-normalization
- #learning
- #linux
- #llm
- #llm-costs
- #llms
- #llms-from-scratch
- #llms-txt
- #loki
- #loops
- #lora
- #machine-learning
- #maths-for-llms
- #maven
- #mcp
- #migration
- #mockito
- #mongodb
- #monoid
- #multi-agent
- #multi-head-attention
- #networking
- #nlp
- #oauth
- #oauth2
- #observability
- #oidc
- #okf
- #ollama
- #openkb
- #opentelemetry
- #ops
- #option
- #otel
- #outbox
- #parking
- #pattern-matching
- #patterns
- #patterns-for-engineers
- #pgvector
- #play-framework
- #positional-encoding
- #postgres
- #pretraining
- #print-css
- #privacy
- #probability
- #prompt-audit
- #prompt-caching
- #prompting
- #prompt-injection
- #pydantic
- #python
- #pytorch
- #rag
- #react
- #refactoring
- #relu
- #resilience
- #rocm
- #sbt
- #scala
- #scala-play
- #scalatest
- #search-console
- #secrets
- #security
- #self-attention
- #semigroup
- #seo
- #shipping
- #skills
- #softmax
- #spring
- #spring-ai
- #spring-batch
- #spring-boot
- #spring-data
- #spring-data-jdbc
- #sse
- #ssh
- #state
- #ste100
- #subagents
- #svg
- #systemd
- #technical-writing
- #templating
- #tempo
- #tensors
- #testing
- #tokenization
- #tooling
- #tools
- #traceql
- #tracing
- #traefik
- #training-data
- #traits
- #transactions
- #transformers
- #tts
- #typescript
- #unsloth
- #uv
- #validation
- #vectors
- #visualizations
- #vite
- #waitfor
- #web-design
- #web-speech-api
- #workflow
- #workflows
- #worktree
Running the box: Docker, Linux, the JVM
The localhost in your SSH tunnel isn't yours
My production Postgres publishes no port at all, and I still open it in DBeaver from my laptop. The one-line ssh -L everyone reaches for connects happily and then refuses every query — for a reason that's easy to miss, and eight bytes that prove when you've actually fixed it.
Running the box: Docker, Linux, the JVM
Systemctl isn't the thing that runs your services
systemctl doesn't start your services — it's a client that phones PID 1. A mental model of systemd built from the D-Bus call down to the kernel cgroups that make it all reliable.