Challenges | iximiuz Labs

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Easy, on Kubernetes

Multi-Container Pod Security Design

by Omkar Shelke

Create a multi-container Pod with different user IDs per container while sharing a common group ID at the Pod level for collaborative file access.

#kubernetes-101 #security-context #ckad #multi-container #cka

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Easy, on Programming, Linux

Count Optimized Assembly Instructions

by Başar Subaşı

Compile a small C loop with -O2 -S, inspect the generated assembly, report how many add instructions gcc produced and see how much it has optimized the equasion.

#c #gcc #assembly #optimization

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Easy, on Programming, Linux

Inspect a Preprocessor Macro Expansion

by Başar Subaşı

Run gcc -E on a small C program and find the exact line where the preprocessor expanded a macro into a printf call.

#c #gcc #preprocessor #macros

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Easy, on Kubernetes, Security

Enforce TLSv1.3-Only Policy on a Production NGINX Deployment

by Omkar Shelke

Update a production NGINX ConfigMap to restrict TLS to v1.3 only, then verify the change enforces the security policy.

#cka #ckad #tls #configmap #deployment

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Easy, on Kubernetes

Configure a Memory-Backed emptyDir Volume with a Size Limit

by Omkar Shelke

A Deployment is using a disk-backed emptyDir volume. Convert it to a memory-backed tmpfs volume for better performance — but make sure to set a size limit to prevent the Pod from exhausting the node's RAM.

#ckad #cka #volumes #emptydir #deployment

This challenge was prepared for you by the iximiuz Labs team.

Challenge, Easy, on Linux

SSH 101: Replace Password-Based Root Access with a Key-Based Admin Login

by Ivan Velichko

A newly provisioned server is reachable as root with a shared seed password. Create a sudoer admin user, switch SSH to key-based access, disable password and root logins, and retire the seed credential.

#ssh #server-hardening

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Easy, on Kubernetes

Inject an Ephemeral Container into a Distroless Pod and Test Cross-Namespace HTTP

by Omkar Shelke

A distroless pod running in the cherry namespace has no shell or debugging tools. Use kubectl debug to attach an ephemeral container, test connectivity to the request-logger service, and verify the request was received in its logs.

#cka #ckad #service #ephemeral-containers #distroless

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Easy, on Kubernetes

Resolve ContainerCreating Issue Caused by Missing ConfigMap

by Omkar Shelke

A Deployment is stuck with Pods in ContainerCreating state because the required ConfigMap was not created. Fix the issue to make the application accessible.

#ckad #cka #troubleshooting #configmap #debugging

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Easy, on Kubernetes

Run a Short Task as a Standalone Pod Without a Job Controller

by Omkar Shelke

Create a Pod in the processing namespace that runs a short task and exits successfully, reaching a Completed status without using a Job controller.

#cka #ckad #pods #kubernetes-101 #restart-policy

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Easy, on Kubernetes

Resolve OOMKilled Errors by Reading VPA Memory Recommendations

by Omkar Shelke

Troubleshoot a Deployment where containers are repeatedly OOMKilled. Inspect Vertical Pod Autoscaler (VPA) recommendations and manually apply the recommended memory request and memory limit to stabilize the workload.

#cka #vpa #resources #oomkilled #deployment