A Practical Guide to SSH Tunnels: Local and Remote Port Forwarding
SSH port forwarding explained in a clean and visual way. How to use local and remote port forwarding. What sshd settings may need to be adjusted. How to memorize the right flags.
Materials by Ivan Velichko
Ivan Velichko has published 19 tutorials, 198 challenges, 4 courses, 13 skill paths, and 5 shell gyms, and prepared 8 playgrounds.
Featured
Tutorial
How Container Filesystem Works: Building a Docker-like Container From Scratch
Learn how Linux containers are built from the ground up. Starting with the mount namespace and a root filesystem, see why PID, cgroup, UTS, and network namespaces naturally follow - and how this foundation makes concepts like bind mounts, volumes, and persistence in Docker or Kubernetes much easier to grasp.
Containers#container-runtime#docker
Tutorial
How Container Networking Works: Building a Bridge Network From Scratch
Begin with the basics to understand Docker and Kubernetes networking: learn how to create and interconnect Linux network namespaces using only command-line tools.
Containers#container-networking#netns
Tutorial
How Container Images Actually Work: Layers, Configs, Manifests, Indexes, and More
A practical deep dive into container image internals that will help you build a clear mental model of how images are composed, identified, stored, and distributed across registries.
Containers#container-image#oci-image
Course
Computer Networking Fundamentals For Developers, DevOps, and Platform Engineers
A heavily illustrated introduction to the first two layers of Computer Networking: Ethernet and IP. A must for any developer or DevOps engineer who wants to build solid understanding of computer networking before they move to the higher-level protocols like TCP, UDP, and even HTTP.
Networking#ethernet#ip
Shell Gym
Linux 101: Meet the Linux Shell
Your first hands-on session in a Linux terminal. Practice running commands, reading their output, using arguments and options, checking whether commands succeed or fail, and chaining commands together. No prior Linux experience is required.
Linux#shell#bash
Challenge
Deploy a Resource-Greedy Pod Without Breaking the Kubernetes Cluster
Prove your SRE skills - deploy a resource-greedy application to a Kubernetes cluster and make it run for a while without disrupting the service.
Kubernetes#kubernetes-101#pod-resources
All materials
How Servers Work: A Hands-On Introduction to TCP Sockets
Learn how servers actually work by building a tiny TCP server and client from scratch. A hands-on introduction to sockets, TCP, and the network programming model every backend, DevOps, and platform engineer should go through at least once.
Tutorial on Containers
How Container Registries Work: Pushing and Pulling Images By Hand
Container registries look simple until you need to debug what was actually pushed, why a pull picked the wrong image, or why deleting a tag didn't remove anything. Learn how registries work by pushing, pulling, inspecting, and deleting image data directly through the Registry API.
Tutorial on Containers
What Is a Standard Container: Diving Into the OCI Runtime Spec
Are all containers just Linux processes? How does the OCI runtime specification define a container? What platforms do OCI containers support? What is a Docker container? Linux containers vs. Virtual Machine containers.
Tutorial on Containers
How Container Images Actually Work: Layers, Configs, Manifests, Indexes, and More
A practical deep dive into container image internals that will help you build a clear mental model of how images are composed, identified, stored, and distributed across registries.
How Kubernetes Reinvented Virtual Machines - In a Good Sense
How Virtual Machines were used to deploy services. What old problems containers solve and what new problems create. How Kubernetes used containers to recreate Virtual Machines in a better way?
Challenge on Linux
Prevent a Service from Starting Without Its Data Disk
When a data volume fails to mount at boot, the service that keeps its data there may start anyway and write to the root filesystem. Practice making a systemd service depend on its data disk, so a failed mount won't bring down the whole server.
Challenge on Linux
Recover an Ingestion Service After a VM Upgrade
Practice tracking down a tricky storage issue that broke a service after a VM upgrade.
Fix a Firewall Blocking a Docker Container from Reaching the Host
A Docker container cannot reach a service running on the host because the firewall is blocking the connection. Learn how to troubleshoot container-to-host connectivity and allow the traffic without exposing the service to the network.
Install a Private Go Module in a Dockerfile Without Leaking Credentials
A Go app needs credentials to download a private module during its Docker build. Learn how to supply them without exposing them in image layers or the build cache.
Preserve Firewall Rules Across Server Reboots (nftables edition)
Firewall rules added with the nft command disappear when the server reboots, and the ports they protect can become exposed again. Learn how to make nftables rules persistent so that they are restored every time the server boots.
Preserve Firewall Rules Across Server Reboots (iptables edition)
Firewall rules added with the iptables command disappear when the server reboots, and the ports they protect can become exposed again. Learn how to make iptables rules persistent so that they are restored every time the server boots.
Unavailable
Hands-On Firecracker: microVMs From First Principles to Production
A hands-on introduction to Firecracker that takes you from booting your first microVM to building secure, production-ready sandbox infrastructure. Learn how to launch and control microVMs, wire up networking, share data efficiently, and harden execution - the essential skills for running autonomous agents and untrusted workloads safely at scale.
Computer Networking Fundamentals For Developers, DevOps, and Platform Engineers
A heavily illustrated introduction to the first two layers of Computer Networking: Ethernet and IP. A must for any developer or DevOps engineer who wants to build solid understanding of computer networking before they move to the higher-level protocols like TCP, UDP, and even HTTP.
On Pause
An Alternative Introduction to Dagger: Understanding the Core Concepts
Build a mental model of how Dagger works by migrating an example software project from traditional script-based automation to a Dagger-powered development workflow, peeking under the hood of the new technology on the way.
Course on Containers
Work-in-Progress
How (and Why) to Use containerd from the Command Line
Explore containerd with ctr, its default command-line client, try nerdctl as a potential Docker alternative, and learn how to debug Kubernetes Pods with crictl.
Shell Gym , on Linux
Linux 101: Create Files and Directories
Create files and directory structures from the Linux terminal. Practice using touch and mkdir, building nested directory trees, working with tricky names, and creating groups of files in one go.
Shell Gym , on Linux
Linux 101: List Files and Use Patterns
Inspect directory contents from the Linux terminal, read what a listing tells you, sort it to find the entry you need faster, and use shell patterns to name groups of files.
Shell Gym , on Linux
Linux 101: Navigate the Filesystem
Your third hands-on session in a Linux terminal. Learn how the Linux directory tree is organized and practice navigating it with absolute paths, relative paths, and common shell shortcuts.
Shell Gym , on Linux
Linux 101: Get Unstuck in the Shell
Your second hands-on session in a Linux terminal. Find out what a command name really runs, learn how to get help with --help and man pages, and stop or suspend commands that do not give the prompt back.
Shell Gym , on Linux
Linux 101: Meet the Linux Shell
Your first hands-on session in a Linux terminal. Practice running commands, reading their output, using arguments and options, checking whether commands succeed or fail, and chaining commands together. No prior Linux experience is required.
Troubleshoot Kubernetes Pods with kubectl debug
Practice using 'kubectl debug' to troubleshoot Kubernetes Pods when 'kubectl exec' isn't enough. Learn how to inspect processes, access files, and work around security restrictions using ephemeral containers.
Learn Linux by Fixing Broken Servers
Practice Linux troubleshooting on deliberately broken servers. Investigate vague failures, find the root cause, and make the system work again.
Master SSH Tunnels: Local and Remote Port Forwarding
Learn how to reach an internal port on a remote machine from the local system, jump through a bastion into a private VPC, expose a development server to the Internet through a reverse tunnel, publish a home network device, and spin up a full-fledged SOCKS proxy with nothing but a regular SSH connection.
Linux Storage 101: Drives, Partitions, and Mounts
Practice the most common Linux storage operations in a series of hands-on challenges: discover and mount drives, create partition tables, format partitions with different filesystems, map directories with bind mounts, and make mount points survive a reboot.
Docker 101: Pull and Push Container Images
Learn how to move container images between your machine and container registries. Practice pulling images by tag, digest, and platform; tagging and pushing them to public and private registries; mirroring images across repositories; shipping images into air-gapped environments; and publishing multi-platform images.
Docker 101: Build Container Images
Learn how to write Dockerfiles from scratch and build production-ready container images. Start with the basics of image building and progress through handling dependencies, compiling applications, inspecting image internals, and optimizing builds with multi-stage Dockerfiles. Then go deeper with advanced Dockerfile instructions, analyzing image internals, and producing multi-platform builds.
This playground was created by an iximiuz Labs user and is provided with no warranty.
HotROD + Jaeger on K3s
Jaeger's HotROD demo app pre-deployed on a 3-node K3s cluster, wired to a Jaeger v2 all-in-one over OTLP. Click a customer, then read the trace.
This playground was created by an iximiuz Labs user and is provided with no warranty.
OpenClaw on K3s with agent-sandbox + gVisor
A 3-node K3s cluster with gVisor (runsc), the kubernetes-sigs/agent-sandbox controllers, and the OpenClaw + gVisor example pre-deployed. OpenClaw's Control UI is available as a dedicated tab.
This playground was created by an iximiuz Labs user and is provided with no warranty.
OpenTelemetry Demo on k3s
A snapshot-backed three-node k3s cluster with the complete OpenTelemetry Demo, including Jaeger and Grafana.
This playground was created by an iximiuz Labs user and is provided with no warranty.
Dual-Network Router Lab
Five Ubuntu VMs across public and private subnets, joined by a dual-homed router. The private subnet has no direct Internet access.
This playground was created by an iximiuz Labs user and is provided with no warranty.
This playground was created by an iximiuz Labs user and is provided with no warranty.