tidy up older posts

_posts/2018-06-24-alien-itches.md

 ---
 layout: post
-title: Arch on Alienware - scratching itches
+title: 'Arch on Alienware: Part II'
+subtitle: Scratching itches
 tags: [tech, linux]
 ---
 
@@ -8,17 +9,17 @@ So, it's been [half a year since][alien] I got the Alienware Aurora R7, and I
 have had my fair share of bugs and annoyances. Today, I'll talk about a few of
 those.
 
+<!-- section -->
+
 <aside markdown="1">
 
 > Every good work of software starts by scratching a developer's personal itch.
 
-[*The Cathedral and the Bazaar*][esr], Eric S. Raymond.
+&mdash; [*The Cathedral and the Bazaar*][esr],  
+Eric S. Raymond.
 
 </aside>
 
-
-<!-- section -->
-
 # Shutting down
 
 The Alienware series apparently has a fairly common  issue of panicking on

_posts/2019-06-30-poking-pi.md

 ---
 layout: post
 title: 'Poking around a Pi: Part I'
+subtitle: Initial setup
 tags: [tech, linux]
 description: Experiences with a Raspberry Pi 3B
 ---

_posts/2020-12-03-poking-pi-ii.md

 ---
 layout: post
-title: 'Poking around a Pi, Part II: VPNs and Network Namespaces'
+title: 'Poking around a Pi: Part II'
+subtitle: 'VPNs and Network Namespaces'
 tags: [tech, linux]
 description: Using a VPN only for a select group of applications
 
@@ -71,7 +72,7 @@ What do these commands do? Let's examine them block by block.
 
 1. Set up the namespace and enter it:
 
-    ```
+    ```sh
     NS_NAME=vpn
     ip netns add "$NS_NAME"
     ip netns exec "$SHELL"
@@ -112,7 +113,7 @@ What do these commands do? Let's examine them block by block.
 6. Enable IPv4 forwarding using `sysctl`
 
     ```
-    sudo sysctl -w net.ipv4.ip_forward=1
+    sysctl -w net.ipv4.ip_forward=1
     ```
 
 Then run OpenVPN in this network namespace (for example, by running the `openvpn` command itself here, or by using
@@ -175,10 +176,11 @@ OpenVPN client.
 
 A similar drop-in override can be used for other services (e.g., Kodi or a desktop session).
 
-**Note:** this doesn't protect against the VPN dying and leaving your services directly connected via your network. I
+This doesn't protect against the VPN dying and leaving your services directly connected via your network. I
 think that can be bluntly handled by having an `ExecStopPost` for the OpenVPN client which removes the default route
 altogether (and correspondingly have an `ExecStartPre` set up the default route instead of setting it in the one-shot
 service).
+{: .danger}
 
 
 [tb-linux]: https://www.tunnelbear.com/blog/linux_support/