# Container Workshop # Themenspeicher - VIM - Softwareverwaltung - Pakete - Repositories / git - Patching - Service-Architekturen mit Docker Compose abbilden - Docker in Docker und DNS - ElasticSearch offizielles Image - AppArmour, SELinux - Security - Rootless - Podman ## Day 1 - Docker Foundations - Angenehmes Arbeiten mit der Shell - History - Automatische Vervollständigung - Navigation, Hilfe und Suche - Vordergund- und Hintergrundprozesse - Filesystem Hierarchy Standard - SSH - User und Gruppen - Filesystemrechte ## Day 2 - Contol Groups (cgroup) - Namespaces - Linux Capabilities - OverlayFS - Erstellen eigener Docker-Images - „Dockern“ einer Software Applikation - Volume-Management und Docker - Log-Management und Docker - Netzwerke und Docker - Multi-Host Networking mit Docker # Tasks ## Task 1: Prepare Your Sandbox 1. Connect to the lab host, see email instructions 2. Create a new user for yourself (belonging to group ec2-user) 3. Add user to docker group 4. Give user the sudo privilege 5. Change to your new user 6. Check executing a few Docker commands 7. Check that sudo is working 8. Create a private/public key pair 9. Add the public key to the user 10. Use your private key on your local machine to login to your new user on the lab host. ## Links https://medium.com/@mccode/understanding-how-uid-and-gid-work-in-docker-containers-c37a01d01cf https://kinvolk.io/blog/2020/12/improving-kubernetes-and-container-security-with-user-namespaces/ https://www.schutzwerk.com/en/43/posts/linux_container_capabilities/ https://github.com/justincormack/nsenter1 https://medium.com/bb-tutorials-and-thoughts/250-practice-questions-for-the-dca-exam-84f3b9e8f5ce https://linux-audit.com/linux-capabilities-101/ https://itnext.io/linux-container-from-scratch-339c3ba0411d https://github.com/p8952/bocker https://stackoverflow.com/questions/53669151/java-11-application-as-lightweight-docker-image/53669152#53669152 https://sysdig.com/blog/dockerfile-best-practices/#1-3 https://medium.com/@betz.mark/understanding-resource-limits-in-kubernetes-memory-6b41e9a955f9 http://www.brendangregg.com ## Ideas - Labs & Tasks - https://devconnected.com/30-linux-processes-exercises-for-sysadmins/ - https://devconnected.com/30-linux-permissions-exercises-for-sysadmins/ - https://devconnected.com/category/linux-administration/ ## Cheat Sheets vim https://www.slideshare.net/KopiMaheswaran/vi-cheat-sheet-141052706 http://www.viemu.com/vi-vim-cheat-sheet.gif https://external-preview.redd.it/iigrixvxp5aYN9ox7Gr1dfI_rhLRotWlLsCafjJqjEQ.png?auto=webp&s=1594ddc17408cb9186a73c2a6d1a1bf1e00769dd bash https://devhints.io/bash https://github.com/ohmyzsh/ohmyzsh sudo https://phoenixnap.com/kb/how-to-create-add-sudo-user-centos https://linuxize.com/post/how-to-add-user-to-sudoers-in-ubuntu/