← All paths

Road to DevOps

From running one service properly to CI, containers, Kubernetes, and Terraform.

10 challenges · ~4 h · every step earns its own verified proof

0/10 solved
Start: Write a proper systemd service →
  1. Write a proper systemd serviceeasy~20 min

    Ops starts with running software properly. A correct unit file beats a screen session.

  2. Schedule a nightly backup with croneasy~15 min

    Anything done twice gets scheduled. Cron syntax is forever.

  3. The sync job runs all nightmedium~20 min

    Tighten a job to business hours on weekdays, the schedule most real jobs actually want.

  4. The app starts before its database is readyeasy~25 min

    Containers next. Make the app wait for its database instead of crashing first.

  5. Harden a Dockerfilemedium~25 min

    The image itself is part of the attack surface. Build it non-root and pinned.

  6. Segment a compose stackmedium~25 min

    Services get networks with intent, not the default bridge for everything.

  7. Gate config changes with CImedium~30 min

    Stop bad changes in CI before they reach anything real.

  8. Harden the CI workflow's supply chainmedium~30 min

    Your pipeline is production too. Pin the supply chain.

  9. Secure a Kubernetes Deploymentmedium~35 min

    The same discipline, applied to a Kubernetes Deployment.

  10. Stop a public S3 bucket in Terraformmedium~25 min

    Infrastructure as code closes the loop. Fix a public bucket in Terraform.