-
Continue reading →: SCG vs. LOLESXi – Configuration Baselines vs. Post-Compromise RealityPart 3 In Part 1, we looked at post-compromise reality on ESXi.In Part 2, we stepped back to understand defensive baselines defined by VMware’s Security Configuration & Hardening Guide. This final post connects both perspectives – and explains why neither works on its own. Two Projects, One Platform, Different Questions…
-
Continue reading →: Understanding the VMware vSphere Security Configuration & Hardening Guide (SCG v9.0)Part 2 In Part 1, the focus was deliberately uncomfortable:what happens after access to ESXi already exists. The LOLESXi Project documents post-compromise reality using only native tooling – no exploits, no malware, just intent. The obvious next question is: How do we realistically reduce the chances of ever getting there?…
-
Continue reading →: Securing the HypervisorBaselines and Reality at the ESXi Layer Virtualization security is often split into two uncomfortable extremes: This blog series exists to close that gap. Using the VMware vSphere Security Configuration & Hardening Guide (SCG) and the LOLESXi Project, this series looks at ESXi security the way it actually works in…
-
Continue reading →: HomeLab Christmas Update 2026How the my Home-Lab evolved I published My HomeLab 2025 back in March 2025. At that time, the lab was very much a classic, single-location setup – x86-based ESXi hosts, shared storage, and an environment designed for day-to-day testing, learning, and validation. Since then, the lab has not grown dramatically…
-
Continue reading →: When Distance Beats DefaultsFixing ESXi Not Responding States in a WAN-Connected Raspberry Pi 5 Homelab During the Christmas holidays, I turned a family visit into a distributed homelab setup. I deployed two ESXi on ARM hosts, each running on a Raspberry Pi 5, placed in two different houses of my family. Both sites…
-
Continue reading →: UPS-Aware Shutdown for ESXiMy home lab is no longer a playground for experiments. It has evolved into a stable, reproducible, and deliberately designed infrastructure, closely aligned with real-world operational requirements. One topic that is often underestimated – even in professional environments – is power stability and failure handling. While a UPS protects hardware…
-
Continue reading →: New VCF 9 Licensing Option Now Available Through VMUG AdvantageGreat news for all VMware home lab enthusiasts, especially those running VMware Cloud Foundation (VCF):There is now an official and supported way to obtain VCF 9 licenses through VMUG Advantage. This change finally closes a major gap and provides the clarity many VMUG members have been waiting for since the…
-
Continue reading →: When Your Home Lab Goes Dark: The VMware License Chaos After the Broadcom TakeoverRunning a VMware home lab used to be simple. You joined VMUG Advantage, activated your NFR keys, and had full freedom to explore new versions and updates. But since Broadcom’s acquisition of VMware, things have become far more complicated – especially for anyone who upgraded their lab to VCF 9.…
-
Continue reading →: Demystifying the VCF Brownfield ToolWhen managing VMware Cloud Foundation (VCF) environments, administrators often face challenges in bringing existing infrastructure (brownfield) into the fold of a structured and automated VCF deployment. The VCF Brownfield Tool is designed to simplify this process, making it easier to onboard existing workloads, networks, and clusters into a VCF-managed state.…
-
Continue reading →: Automating DNS Records with Ansible – Dynamic A and PTR Records from JSONManaging DNS entries manually can quickly become error-prone, especially in labs, test environments, or dynamic infrastructures where hosts and IP addresses change frequently. Automation with Ansible helps keep DNS zones consistent, saves time, and reduces mistakes. In this post, I’ll show how to create A and PTR records automatically from…

