Challenge on
Hardening Docker Containers Using gVisor Runtime
by Omkar Shelke
Configure Docker to use gVisor (runsc) as the default runtime and verify kernel isolation between the host and containers.
Challenges
Focused, hands-on problems for sharpening your DevOps and server-side skills. Some teach specific concepts while others mirror real-world scenarios. Every challenge includes hints, feedback, and automated solution checks.
Challenge on
Install and Configure containerd on a Linux Host
In this challenge, you will practice installing and configuring containerd: obtaining the release binaries, placing them in the correct locations, adding the container runtime and CNI plugins to the system, and starting a container with full networking support.
Challenge on
Extract the Filesystem of a Container Image
Can you unpack the filesystem of a container image into a local directory?
Challenge on
Start and Inspect a Container With containerd CLI - ctr
Can you start a container using the default containerd CLI, ctr? Knowing how to use ctr may come in handy when you need to debug lower-level container issues.
Challenge on
Read Container Image Labels Using ctr
Learn a trick or two about container image labels and how to read them with ctr.
Challenge on
Execute a Command in a Docker Container Using ctr
Can you find a way to execute a command in a Docker container using ctr?