Resolving MSYS2 SSL-inspection issues with Zscaler (trust the root CA)

Zscaler does TLS interception, re-signing HTTPS with its own root CA that MSYS2 doesn't trust — so pacman, curl, wget, git and friends all fail with certificate verification errors. Export the Zscaler root from the Windows cert store and add it to MSYS2's CA trust to fix them all at once.

Debian: in-place major version upgrades with `sed`

Quick `sed` recipes to bump Debian to the next major release — 10 → 11, 11 → 12, 12 → 13 — by rewriting apt sources and running a full-upgrade.

Deploying Watchtower: docker run, Compose, and a few extras

Copy-pasteable Watchtower deploys — the one-line docker run, an equivalent docker-compose.yml, and the handful of flags I actually use (interval, cleanup, label scoping, notifications).

Welcome to the PKB

What this Public Knowledge Base is for, and a quick smoke-test of code-block syntax highlighting.