Topical Takes

Short, opinionated posts on eBPF, Linux internals, and the tools we all run in production.

AlleBPF37linux36yeet33AI agents15observability13security7claude-code6networking4uprobes4exectop3kubernetes3sandboxing3supply chain3tcpdump3tracing3audit2auditd2bcc2BSON2capabilities2ci2containers2execsnoop2HTTP2incident-response2MongoDB2omarchy2permissions2process-attribution2processes2production2ssh2802.111agent-security1ai-sre1bar-widget1benchmarks1biolatency1bpf-verifier1bpftrace1bubblewrap1build-performance1cgroups1Cilium1CO-RE1codex1confidential-computing1context-switches1cpu-accounting1cryptojacking1debugging1devops1egress1exfiltration1hardening1hyprland1integration-testing1kprobes1kworker1landlock1local-llm1make1MCP1memory1n-plus-one1nodejs1npm1off-cpu1ollama1oom1opentelemetry1packet-capture1postinstall1prepared statements1privilege1proc-filesystem1process-masquerading1proctop1profiling1query-shapes1quickshell1Redis1RESP1rf1root-cause-analysis1runqlat1schedstat1seccomp1slowlog1SQLite1stratum1sudo1systemd1tcp-retransmits1terminal-bench1threat-modeling1tunnels1websocket1wifi1wireguard1wireless1wss1yeetkit1+103 more

All eBPF37 linux36 yeet33 AI agents15 observability13 security7 claude-code6 networking4 uprobes4 exectop3 kubernetes3 sandboxing3 supply chain3 tcpdump3 tracing3 audit2 auditd2 bcc2 BSON2 capabilities2 ci2 containers2 execsnoop2 HTTP2 incident-response2 MongoDB2 omarchy2 permissions2 process-attribution2 processes2 production2 ssh2 802.111 agent-security1 ai-sre1 bar-widget1 benchmarks1 biolatency1 bpf-verifier1 bpftrace1 bubblewrap1 build-performance1 cgroups1 Cilium1 CO-RE1 codex1 confidential-computing1 context-switches1 cpu-accounting1 cryptojacking1 debugging1 devops1 egress1 exfiltration1 hardening1 hyprland1 integration-testing1 kprobes1 kworker1 landlock1 local-llm1 make1 MCP1 memory1 n-plus-one1 nodejs1 npm1 off-cpu1 ollama1 oom1 opentelemetry1 packet-capture1 postinstall1 prepared statements1 privilege1 proc-filesystem1 process-masquerading1 proctop1 profiling1 query-shapes1 quickshell1 Redis1 RESP1 rf1 root-cause-analysis1 runqlat1 schedstat1 seccomp1 slowlog1 SQLite1 stratum1 sudo1 systemd1 tcp-retransmits1 terminal-bench1 threat-modeling1 tunnels1 websocket1 wifi1 wireguard1 wireless1 wss1 yeetkit1

September 22, 2026

Claude Code on Omarchy in 2026: Setup, Permissions, and Linux Agent Workflows

Omarchy ships Claude Code as a pre-wired mise stub, so there is nothing to install and the real work is permissions. What the default launchers actually do, why the manual warns that agents run in don't-stop-to-ask modes, which permission mode to set for unattended work, and how to see what an agent did on a Hyprland box when its own transcript stops at the shell.

omarchyclaude-codeai-agentshyprlandpermissionseBPFlinuxyeet