Learn / Labs / Tools

Linux, Cloud & Containers

Linux operations, cloud and hybrid infrastructure, containers, platform runtimes, virtualization, and operational self-hosting.

9 guides12 labs4 tools1 capability mapsBrowse all topic paths

Capability Maps

How this path becomes useful work

Azure Resource Graph Reporting

Turn Azure inventory, patch, governance, and compliance data into reports that an operator can actually review.

Free boundary: Starter workbook ideas, Resource Graph queries, exported evidence, and manual interpretation guidance.
Paid value later: Polished workbook packs, query libraries, branded reports, scheduled evidence, and client-ready governance bundles.

01UnderstandValidate cloud state before control-plane changesTeach evidence-first Azure validation before changing policy, patch scope, networking, or onboarding state.02BuildBuild a reproducible Azure admin environmentPractice with a devcontainer that standardizes PowerShell, Terraform, and Azure CLI work.03UseStart with Azure Update Manager workbook evidenceUse Resource Graph and workbook structure to show patch compliance, pending updates, and unmanaged scope.04ExtendAdd Arc onboarding and patch-wave planningCombine Arc preflight evidence, update waves, scope selection, and owner review into a clearer report set.

05Automate / plannedExport repeatable governance snapshotsRun scheduled queries, retain JSON or CSV snapshots, and compare changes over time.

06IntegratePublish Azure reports for review cyclesPackage workbooks, static exports, or HTML summaries for patch, governance, and hybrid-cloud reviews.07Upgrade / plannedSell Azure report and governance packsPaid packs can include polished Resource Graph queries, workbooks, compliance summaries, and customer-ready report bundles.

Learn

Understand Linux, Cloud & Containers

Technical guides that explain the concepts, architecture, decisions, and durable operator patterns.

Cloud Pre-Change Validation for DNS, Gateways, Identity, and StorageCapture resource-specific cloud state and request-path evidence before changing DNS, gateways, identity, endpoints, or storage access.Learncloud Comparing Cloud Validation Paths for DNS, Identity, Gateway, and Storage FailuresDecide whether a cloud failure should be validated from DNS, identity, gateway, or storage first.Learncloud Comparing Container Validation Paths for Runtime, Registry, Network, and IngressDecide whether a container failure should be validated from runtime, registry, network, or ingress first.Learncontainers Comparing Healthy and Failing Container Service PathsCompare image, runtime, service, DNS, policy, and ingress state between a healthy and failing container path before redeploying or changing shared platform configuration.Learncontainers Comparing Healthy and Failing Linux Hosts Before Broad ChangesCompare concrete host, service, package, resolver, route, and authentication state between a healthy and failing Linux system before restarting or rewriting configuration broadly.Learnlinux Comparing Linux Validation Paths for SSH, Services, Packages, and Network ReachabilityChoose between SSH, service, package, and network validation branches before changing a Linux host.Learnlinux Planning Cloud App Publishing, Access, and Managed-Service Validation SafelyPlan cloud app publishing and access troubleshooting around path validation, service boundaries, safe changes, and rollback.Learncloud Planning Container Runtime, Registry, and Service-Networking Failures SystematicallyIsolate container failures by separating image, runtime, service-networking, and ingress branches before changing the stack.Learncontainers Planning Linux Service and Access Validation Without Taking Risky ShortcutsSeparate Linux host access, service state, package-source, and network-path failures before making broad system changes.Learnlinux

Labs

Practice Linux, Cloud & Containers

Hands-on labs that turn the concepts into working systems and repeatable environments.

Build a Homelab CI Pipeline for Docker Services with Rollback SupportBuild one complete GitHub Actions pipeline for a disposable Docker service: test, build, publish a versioned image, deploy it, deliberately fail the new version, and roll back to the previous digest/tag.Docker StacksIntermediate2-4 hours Build a Jellyfin Media Server with Verified Configuration BackupsInstall Jellyfin on a supported Debian or Ubuntu host using the current signed repository workflow, validate playback and metadata, and prove that the server configuration and...Service Portals and MediaIntermediate90-150 minutes Build a Lightweight Internal Git and Script Catalog with GiteaRun a small Gitea instance from the current rootless container image, keep the web service behind an internal HTTPS boundary, and prove the catalog by creating, cloning, and...Service Portals and MediaIntermediate60-120 minutes Build a Raspberry Pi Container Host with Docker ComposeBuild a maintainable Raspberry Pi container host with Docker Engine, the current Compose plugin, service health checks, and a controlled update workflow.Docker StacksIntermediate90 minutes Build a Self-Hosted Homepage Dashboard for Homelab ServicesDeploy the current Homepage project with Compose v2, configure real service links and built-in URL health checks, and keep Docker-socket access out of the first Lab so the...Docs and File WorkflowsIntermediate60-90 minutes Build a Vaultwarden Lab with HTTPS, Backups, and Recovery ValidationDeploy Vaultwarden behind an HTTPS reverse proxy, keep the application bound to localhost, disable open signup after bootstrap, and create a consistent backup of the vault data...Docs and File WorkflowsIntermediate2-3 hours Create a Docker Reverse Proxy Lab with Nginx Proxy Manager and TLSDeploy Nginx Proxy Manager with persistent data, route one disposable backend through a real hostname, and validate HTTP-to-HTTPS behavior plus certificate issuance without exposing the admin interface unnecessarily.Docker StacksIntermediate60-120 minutes Create a Lightweight k3s Lab for Self-Hosted ServicesBuild a small k3s lab using the bundled Traefik ingress controller and local-path storage, then validate a complete service path before adding real self-hosted workloads.Docs and File WorkflowsIntermediate60-90 minutes Create a Paperless-ngx Document Workflow with OCR and Restore ValidationDeploy a small Paperless-ngx Lab from the project's maintained Docker Compose files, ingest and OCR a test document, then use the supported document exporter/importer workflow to...Docs and File WorkflowsIntermediate2-4 hours Proxmox Starter Cluster Lab with Quorum, Templates, Backups, and Placement DecisionsBuild a disposable three-node Proxmox cluster, verify quorum and network requirements, create one reusable guest template, back it up, restore it, and document placement decisions...Virtualization PlatformsIntermediate3-5 hours Raspberry Pi MQTT and Zigbee2MQTT Utility Node for Home AssistantUse a Raspberry Pi as a dedicated Mosquitto and Zigbee2MQTT utility node, with Home Assistant as a separate consumer, explicit authentication, stable Zigbee device mapping, and end-to-end message validation.Raspberry Pi HostingIntermediate2-3 hours Raspberry Pi Rack Temperature and Service Alert MonitorBuild a Raspberry Pi monitor with a supported digital temperature sensor, explicit wiring/calibration checks, durable readings, and a controlled service-alert test.Raspberry Pi HostingIntermediate2-3 hours

Tools

Operate Linux, Cloud & Containers

Free operator tools for checks, scripts, evidence, reporting, and practical infrastructure work.

Azure Arc bulk onboarding CSV and logging starterReusable starter for Azure Arc onboarding waves using a host CSV, dry-run expectations, per-host logging, and repeatable result tracking suitable for tickets, change records, and post-wave reporting.TemplateHybrid Cloud OperationsRead-only Azure Arc onboarding preflight checklistPreflight checklist for onboarding Windows servers to Azure Arc. Confirms supported OS state, outbound connectivity, proxy/TLS behavior, local admin rights, target Azure placement, tagging, pilot scope, and rollback notes before any agent install.ChecklistHybrid Cloud OperationsRead-only Azure Update Manager patch wave planning templateOperator-ready planning template for Azure Update Manager patch waves covering scope, maintenance windows, reboot tolerance, exclusions, soak periods, rollback contacts, and stop-go criteria before scheduled patching.TemplateHybrid Cloud OperationsRead-only Internal IIS site rollout checklistOperator checklist for launching an internal IIS-hosted site with evidence capture for IIS role presence, site folder layout, bindings, app pool identity, DNS readiness, browser validation, and rollback notes.ChecklistApplication HostingRead-only