LUKS – Kevin Wells

HOME
Skills & Experience
Current Threats & Trends
Articles
- Identity & Access Management (IAM)Secure access with SSH keys, sudo, PAM, and cloud IAM roles.
- Automation & MonitoringStreamline operations with Ansible workflows, logging pipelines, and proactive monitoring.
- Backups & DRProtect data and maintain continuity with resilient backup and recovery strategies.
- Cloud SecurityDefend AWS and hybrid environments with strong identity, policy, and monitoring controls.
- AI SecurityPractical security engineering for LLMs and autonomous agents – risks, controls, architectures, and incident playbooks.
- System HardeningSecure Linux systems through patching, CIS benchmarks, and OS lockdown.
- Tools & CheatsheetsPractical quick-reference guides for Linux and cloud security administrators.
Lab Projects
Resources
About
Contact

Lab Project: Dual backup strategy on Linux with LUKS + rsync snapshots

September 24, 2025September 24, 2025 by Admin

This Lab Project documents a two-track backup system for a workstation or homelab server. It delivers encrypted, space-efficient snapshots of a LUKS-protected data volume alongside independent snapshots of the home directory. Tooling is intentionally boring – LUKS, ext4, rsync, cron – because boring is reliable. Contents Objectives High-level architecture Naming and paths Exclusion policy Backup … Read more

NFS over VPN with Encrypted LUKS Volumes: Design, Build, and Operations

September 23, 2025September 23, 2025 by Admin

Audience: Linux systems engineers and SREs Tested on: Ubuntu 22.04/24.04, NFSv4.2 Scope: Single NFS server exporting multiple encrypted volumes to VPN-attached clients Why this design I wanted a storage tier that is private by default, simple to operate day-to-day, and fast enough for workstation workflows. The result is an NFSv4.2 stack that sits entirely … Read more