All blogs / DevOps / SRE / infrastructure
iximiuz Labs
Practice on real servers, solve challenges, and follow guided Linux, Docker, Kubernetes, and Networking learning paths — all from your browser or via SSH.
- Posts
- 88 from 17 Jun 2023 to 4 Nov 2026
- Posting
- weekly (72 in the last year)
- Kind
- company blog
- Feed
- https://labs.iximiuz.com/feed.atom
2026 72
- Challenge: Bypass a Broken VPN with a Routing Trick to Restore SSH Access to a Dual-Homed Server
- Challenge: Block Unexpected Access to a Service on a Dual-Homed Linux Server
- Skill Path: Troubleshoot Kubernetes Pods with kubectl debug
- Challenge: Edit a File in a Running Kubernetes Pod: a Non-Root Container Case
- Challenge: Edit a File in a Running Kubernetes Pod: a Distroless Container Case
- Challenge: Use a Kubernetes Job to Test NATS Pub/Sub
- Challenge: Reach a Linux Service Through an Interface It Doesn't Listen On
- Shell Gym: Kubernetes Gym: Managing Container Images
- Shell Gym: Kubernetes Gym: Building Container Images
- Challenge: Pull a Deployment's Image from a Private Registry
- Blog Post: How I added dynamic social preview images to my site for almost nothing
- Challenge: Connect a Container to a Service Bound to Localhost on the Docker Host
- Challenge: Connect a Container to a Service Running on the Docker Host
- Challenge: Harden a Django GraphQL API: Five Classic Flaws
- Challenge: Intercept and Analyze Encrypted Traffic of a Suspicious Container
- Challenge: Redirect a Container's Requests Without Modifying the App
- Shell Gym: Kubernetes Gym: ConfigMaps, Secrets and Downward API
- Shell Gym: Kubernetes Gym: Storage
- Challenge: Safe Node Drain With a Disruption Budget
- Challenge: Lock Down Container Syscalls With Seccomp Profiles
- Challenge: Roll Out Pod Security Standards Across Three Namespaces
- Challenge: Troubleshoot an Ingress That Returns 503 Service Unavailable
- Challenge: Troubleshoot an Ingress That Returns 404 Not Found
- Challenge: Reach a Distroless Container's Debug Endpoint From a Sidecar Container
- Challenge: Run the Application's Test Suite in a Container Without Network Access
- Challenge: Turn Off a Feature Flag in a Production Redis Server Using a Local Containerized redis-cli
- Challenge: Docker 101: List Docker Networks and Inspect the Default Bridge
- Challenge: Docker 101: Publish All Exposed Ports on Random Host Ports to Avoid Port Conflicts
- Challenge: Docker 101: Publish a Redis Container Port on the Private Network Only
- Shell Gym: Kubernetes Gym: Jobs and CronJobs
- Tutorial: How Kubernetes Operators Work: Building a Controller From Scratch
- Tutorial: How Kubernetes CRDs Work: Designing a Validated API From Scratch
- Challenge: Docker 101: Reach a Container Without Publishing a Port
- Challenge: Node Is Ready, but Pods Won't Schedule
- Challenge: Docker 101: Publish a PostgreSQL Container Port on Localhost Only
- Challenge: Split a Deployment Evenly Across Two Zones
- Challenge: Migrate a Traefik Ingress to the Gateway API and Cut Traffic Over
- Challenge: Docker 101: Publish a Container Port to Access the App from the Host
- Challenge: Verify Downloaded Files with SHA-256 Checksums
- Challenge: Call an HTTP API with curl: Authenticating with Basic Auth and Bearer Tokens
- Challenge: Call an HTTP API with curl: Processing JSON Responses with jq
- Challenge: Call an HTTP API with curl: Creating, Updating, and Deleting Resources
- Challenge: Call an HTTP API with curl: Reading Resources
- Challenge: Identify the Source of Unexpected Requests in a Kubernetes Cluster
- Challenge: Identify the Source of Unexpected Requests in an On-Prem Network
- Challenge: DNS 101: Resolve Public, Internal, and Local Hostnames
- Playground: SilverStack WordPress Server
- Shell Gym: Kubernetes Gym: ReplicaSets and Deployments
- Skill Path: Learn Linux by Fixing Broken Servers
- Shell Gym: Linux 101: List Files and Use Patterns
- Shell Gym: Linux 101: Create Files and Directories
- Shell Gym: Linux 101: Navigate the Filesystem
- Challenge: Inspect Network Interfaces, IP Addresses, and Routes on a Linux Host
- Shell Gym: Kubernetes Gym: Pods
- Shell Gym: Linux 101: Get Unstuck in the Shell
- Challenge: Debug a Go Container Image That Fails to Start After a Recent Change
- Tutorial: Secure Machine-to-Machine Access with mTLS and Pomerium
- Challenge: Debug a Pod Stuck at 0/1 Ready Due to a Readiness Probe
- Challenge: Pick and Deploy the Least Permissive NetworkPolicy
- Shell Gym: Linux 101: Meet the Linux Shell
- Playground: Doom Perf Lab
- Challenge: Access a Private Kubernetes API Server Through an SSH SOCKS Proxy
- Challenge: CKA Practice: Recover a NotReady Node After a Kubelet Configuration Error
- Challenge: Kubernetes - Multi-Container Pod Design Patterns
- Challenge: CKA Practice: Renew Expiring Control Plane Certificates
- Challenge: CKA Practice: Recover a Broken Static Control-Plane Pod
- Challenge: Issue Per-Pod mTLS Certificates with PodCertificateRequest
- Thoughts on OpenAI's accidental attack against Hugging Face
- Are user namespaces good for your health?
- Docker 101: Pull Container Images from Different Registries
- All The Ways To Loop and Iterate in eBPF
- A grounded take on agentic coding for production environments
2025 3
2024 2
2023 5
- Exploring Tetragon - A Security Observability Tool for Kubernetes, Docker, and Linux
- [not a] Kubernetes 101 - Pods, Deployments, and Services As an Attempt To Automate Age-Old Infra Patterns
- JavaScript or TypeScript? How To Benefit From the Dichotomy
- On Software Design... and Good Writing
- Building a Firecracker-Powered Course Platform To Learn Docker and Kubernetes