Live Terminal Drill
Re-type the command exactly to clear each challenge.
target$
loading... 0 / 12 mastered
← Back to 30-Day Curriculum
WEEK 4 · ADVANCED OPS · TUI: ./control-panel --day 28
Day 28: Production Server Hardening & Zero-Trust Baseline
Apply comprehensive defense-in-depth across SSH, netfilter firewalls, sysctl kernel flags, and audit logs.
XP 0
Streak 0
Command Mastery 0%
Study Music
YouTube Study Radio
Pick a track or paste any YouTube URL.
🍳 Breakfast (Syntax) Session
Type commands, build streaks, and then review the source guide.
Command Board
Tap a command when you practiced it in your own terminal.
Command Intel
Meaning
Command explanation will appear here.
Sample Output
Output preview will appear here.
Useful Fun Fact
Fun facts about the active command will appear here.
Last Run Output
Run a command to see result feedback.
Knowledge Boost
Faster learning with topic cues, mini-missions, and external docs.
Key Topics
⚡ 60-Second Mental Model (Student Digest)🧠 Objective🌐 Docker Networking Basics📌 Common Network Types🔧 Create a custom bridge network🔪 Inspect network
Mini Missions
- Mission 1: Run
iptablesand explain the output in one sentence. - Mission 2: Run
mkdir -p /tmp/linux-dojo-day-28 && cd /tmp/linux-dojo-day-28and explain the output in one sentence. - Mission 3: Run
bashand explain the output in one sentence. - Mission 4: Run
head -n 20 /var/log/syslogand explain the output in one sentence.
📖 Digestible Study Guide & Visual Architecture
Day 28 · Breakfast — Production Server Hardening & Zero-Trust Baseline Lab
ZothOS × 1nc0gn30 Linux Dojo · Phase:
Week 4 (Advanced Ops) · Session: Breakfast (Morning Foundation & Core Command Syntax) Core Commands:
ufw, iptables, ssh-keygen, sshd_config, fail2ban, auditctl⚡ 60-Second Mental Model (Student Digest)
╔══════════════════════════════════════════════════════════════════════════════╗
║ ZOTHOS × 1NC0GN30 // PRODUCTION TELEMETRY, SYSTEMD & RECOVERY MATRIX ║
╠══════════════════════════════════════════════════════════════════════════════╣
║ ║
║ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ ║
║ │ CPU & SCHED │ │ MEMORY / VM │ │ DISK & VFS │ │ NET SOCKETS │ ║
║ │ top / mpstat │ │ free / vmstat│ │ iostat / df │ │ ss -tulpen │ ║
║ └──────┬───────┘ └──────┬───────┘ └──────┬───────┘ └──────┬───────┘ ║
║ └──────────────────┴─────────┬────────┴──────────────────┘ ║
║ ▼ ║
║ [ Automated Remediation: systemd + cron + rsync ] ║
╚══════════════════════════════════════════════════════════════════════════════╝| Learning Pillar | How to Practice This Session |
|---|---|
1. Native TUI (./control-panel) | Run ./control-panel from repo root → Select Week 4 → Day 28 → Breakfast to drill interactive C lessons & quizzes. |
2. Web Workstation (astro-ui) | Open /day/28 → Select Breakfast tab → Type each target command in the live Mission Terminal to earn XP & streak mastery. |
| 3. Safe Local Sandbox | Run mkdir -p /tmp/linux-dojo-day-28 && cd /tmp/linux-dojo-day-28 to test every flag below without touching production files. |
🐳 Day 28: Breakfast – Docker Networking and Storage
🧠 Objective
Learn how Docker manages networking and storage, and how containers communicate and persist data.
🌐 Docker Networking Basics
Docker uses bridge networks by default. Each container joins a virtual bridge allowing communication between containers and the host.
📌 Common Network Types
*
bridge: Default for standalone containers*
host: Uses the host network stack*
none: Disables networking* Custom: User-defined for fine control
🔧 Create a custom bridge network
docker network create my_networkThen run containers inside it:
docker run -d --name web --network my_network nginx
docker run -d --name db --network my_network postgres🔪 Inspect network
docker network inspect my_network📂 Volumes and Persistent Storage
By default, container data is lost after deletion. Volumes ensure your data survives restarts.
🔨 Create a volume
docker volume create db_data📦 Use in a container
docker run -d -v db_data:/var/lib/postgresql/data postgresOr inside Docker Compose:
services:
db:
image: postgres
volumes:
- db_data:/var/lib/postgresql/data
volumes:
db_data:🔗 Linking Containers (Legacy)
Before custom networks,
--link was used to link containers. It’s deprecated now. Use user-defined networks instead for DNS-based service discovery.🧠 Review Questions
1. What’s the default Docker network for containers?
2. How do you persist database data across restarts?
3. What does
docker volume ls do?4. Why is
--link deprecated?📚 Further Reading
* Docker Networking Overview
* Docker Volumes
* Docker Compose Storage Best Practices
🥪 Lunch (Workflows) Session
Type commands, build streaks, and then review the source guide.
Live Terminal Drill
Re-type the command exactly to clear each challenge.
target$
loading... 0 / 12 mastered
Command Board
Tap a command when you practiced it in your own terminal.
Command Intel
Meaning
Command explanation will appear here.
Sample Output
Output preview will appear here.
Useful Fun Fact
Fun facts about the active command will appear here.
Last Run Output
Run a command to see result feedback.
Knowledge Boost
Faster learning with topic cues, mini-missions, and external docs.
Key Topics
⚡ 60-Second Mental Model (Student Digest)🍽️ Day 28 Lunch: Docker Compose🎯 Objective📦 What is Docker Compose?🛠️ Why Use Docker Compose?🧱 Creating a `docker-compose.yml` File
Mini Missions
- Mission 1: Run
iptablesand explain the output in one sentence. - Mission 2: Run
mkdir -p /tmp/linux-dojo-day-28 && cd /tmp/linux-dojo-day-28and explain the output in one sentence. - Mission 3: Run
bashand explain the output in one sentence. - Mission 4: Run
tar -xzvf backup.tar.gzand explain the output in one sentence.
Useful Resources
📖 Digestible Study Guide & Visual Architecture
Day 28 · Lunch — Production Server Hardening & Zero-Trust Baseline Lab
ZothOS × 1nc0gn30 Linux Dojo · Phase:
Week 4 (Advanced Ops) · Session: Lunch (Midday Operational Workflows & Flag Mastery) Core Commands:
ufw, iptables, ssh-keygen, sshd_config, fail2ban, auditctl⚡ 60-Second Mental Model (Student Digest)
╔══════════════════════════════════════════════════════════════════════════════╗
║ ZOTHOS × 1NC0GN30 // PRODUCTION TELEMETRY, SYSTEMD & RECOVERY MATRIX ║
╠══════════════════════════════════════════════════════════════════════════════╣
║ ║
║ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ ║
║ │ CPU & SCHED │ │ MEMORY / VM │ │ DISK & VFS │ │ NET SOCKETS │ ║
║ │ top / mpstat │ │ free / vmstat│ │ iostat / df │ │ ss -tulpen │ ║
║ └──────┬───────┘ └──────┬───────┘ └──────┬───────┘ └──────┬───────┘ ║
║ └──────────────────┴─────────┬────────┴──────────────────┘ ║
║ ▼ ║
║ [ Automated Remediation: systemd + cron + rsync ] ║
╚══════════════════════════════════════════════════════════════════════════════╝| Learning Pillar | How to Practice This Session |
|---|---|
1. Native TUI (./control-panel) | Run ./control-panel from repo root → Select Week 4 → Day 28 → Lunch to drill interactive C lessons & quizzes. |
2. Web Workstation (astro-ui) | Open /day/28 → Select Lunch tab → Type each target command in the live Mission Terminal to earn XP & streak mastery. |
| 3. Safe Local Sandbox | Run mkdir -p /tmp/linux-dojo-day-28 && cd /tmp/linux-dojo-day-28 to test every flag below without touching production files. |
🍽️ Day 28 Lunch: Docker Compose
🎯 Objective
Understand how Docker Compose simplifies running multi-container applications and learn to use the
docker-compose.yml file effectively.📦 What is Docker Compose?
Docker Compose is a tool for defining and running multi-container Docker applications. With Compose, you use a YAML file to configure your application’s services, networks, and volumes.
🛠️ Why Use Docker Compose?
* 🔁 Manage multiple containers as a single service.
* 📜 Centralized configuration using YAML.
* 🚀 Faster and repeatable deployments.
* 🐳 Ideal for development and testing environments.
🧱 Creating a docker-compose.yml File
db:
image: postgres
environment:
POSTGRES_USER: admin
POSTGRES_PASSWORD: secret
web:
build: .
ports:
- "5000:5000"
depends_on:
- db🔄 Running Multi-Container Applications
Run everything with:
docker-compose upTear it all down:
docker-compose downRebuild after changes:
docker-compose up --build🧩 Common Compose Commands
| Command | Description |
|---|---|
docker-compose ps | List containers |
docker-compose logs | Show logs |
docker-compose stop | Stop services |
docker-compose restart | Restart services |
🧠 Review Questions
1. What does
depends_on do in a Compose file?2. How do you define environment variables for a container?
3. What’s the difference between
up and up --build?4. How do you expose a port in Compose?
📚 Recommended Reading
* Docker Compose Docs
* Compose File Reference
* DockerHub
✅ Practice Task
Create a
docker-compose.yml file that runs a Node.js app and a MongoDB container.version: '3.8'
services:
app:
image: node:alpine
working_dir: /app
volumes:
- .:/app
ports:
- "3000:3000"
command: "npm start"
mongo:
image: mongo
ports:
- "27017:27017"Run it with:
docker-compose up🍽️ Dinner (Hardening) Session
Type commands, build streaks, and then review the source guide.
Live Terminal Drill
Re-type the command exactly to clear each challenge.
target$
loading... 0 / 12 mastered
Command Board
Tap a command when you practiced it in your own terminal.
Command Intel
Meaning
Command explanation will appear here.
Sample Output
Output preview will appear here.
Useful Fun Fact
Fun facts about the active command will appear here.
Last Run Output
Run a command to see result feedback.
Knowledge Boost
Faster learning with topic cues, mini-missions, and external docs.
Key Topics
⚡ 60-Second Mental Model (Student Digest)🍽️ Day 28 Dinner: Lab Session - Docker Compose🎯 Objective🧪 Lab Task 1: Set Up a Multi-Container Application🧪 Lab Task 2: Manage Docker Networks🧪 Lab Task 3: Persistent Data with Volumes
Mini Missions
- Mission 1: Run
iptablesand explain the output in one sentence. - Mission 2: Run
mkdir -p /tmp/linux-dojo-day-28 && cd /tmp/linux-dojo-day-28and explain the output in one sentence. - Mission 3: Run
bashand explain the output in one sentence. - Mission 4: Run
sudo ss -tulpenand explain the output in one sentence.
Useful Resources
📖 Digestible Study Guide & Visual Architecture
Day 28 · Dinner — Production Server Hardening & Zero-Trust Baseline Lab
ZothOS × 1nc0gn30 Linux Dojo · Phase:
Week 4 (Advanced Ops) · Session: Dinner (Evening Hardening, Pipelines & Verification Lab) Core Commands:
ufw, iptables, ssh-keygen, sshd_config, fail2ban, auditctl⚡ 60-Second Mental Model (Student Digest)
╔══════════════════════════════════════════════════════════════════════════════╗
║ ZOTHOS × 1NC0GN30 // PRODUCTION TELEMETRY, SYSTEMD & RECOVERY MATRIX ║
╠══════════════════════════════════════════════════════════════════════════════╣
║ ║
║ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ ║
║ │ CPU & SCHED │ │ MEMORY / VM │ │ DISK & VFS │ │ NET SOCKETS │ ║
║ │ top / mpstat │ │ free / vmstat│ │ iostat / df │ │ ss -tulpen │ ║
║ └──────┬───────┘ └──────┬───────┘ └──────┬───────┘ └──────┬───────┘ ║
║ └──────────────────┴─────────┬────────┴──────────────────┘ ║
║ ▼ ║
║ [ Automated Remediation: systemd + cron + rsync ] ║
╚══════════════════════════════════════════════════════════════════════════════╝| Learning Pillar | How to Practice This Session |
|---|---|
1. Native TUI (./control-panel) | Run ./control-panel from repo root → Select Week 4 → Day 28 → Dinner to drill interactive C lessons & quizzes. |
2. Web Workstation (astro-ui) | Open /day/28 → Select Dinner tab → Type each target command in the live Mission Terminal to earn XP & streak mastery. |
| 3. Safe Local Sandbox | Run mkdir -p /tmp/linux-dojo-day-28 && cd /tmp/linux-dojo-day-28 to test every flag below without touching production files. |
🍽️ Day 28 Dinner: Lab Session - Docker Compose
🎯 Objective
Apply your Docker Compose knowledge in practical scenarios by setting up and managing multi-container environments.
🧪 Lab Task 1: Set Up a Multi-Container Application
Use Docker Compose to run a web application with a database.
#### 📝 Sample
docker-compose.ymlversion: '3.8'
services:
web:
image: nginx
ports:
- "8080:80"
db:
image: postgres
environment:
POSTGRES_USER: admin
POSTGRES_PASSWORD: secretStart with:
docker-compose upTear it down with:
docker-compose down🧪 Lab Task 2: Manage Docker Networks
Create a custom Docker network and attach services to it.
#### 🔧 Command
docker network create my_custom_network
docker network ls
docker network inspect my_custom_networkUpdate
docker-compose.yml:networks:
default:
external:
name: my_custom_network🧪 Lab Task 3: Persistent Data with Volumes
Create volumes to persist data between container restarts.
#### 📁 Sample Addition to Compose
services:
db:
image: postgres
volumes:
- db_data:/var/lib/postgresql/data
volumes:
db_data:Check volumes:
docker volume ls
docker volume inspect db_data🧠 Review Questions
1. What is the benefit of using Docker volumes?
2. How do you inspect a Docker network?
3. Why would you define external networks in Compose?
4. What happens when you run
docker-compose down -v?📚 Recommended Resources
* Volumes in Docker
* Docker Networks Guide
* Compose Networking Docs
* Docker Compose CLI
✅ Challenge
Create a Docker Compose setup with:
* An Nginx reverse proxy
* A Node.js app
* A PostgreSQL database
Use networks and volumes for full isolation and persistence.