Advanced Overview

20 labs · Ubuntu 22.04 · Docker-verified (--privileged)

Tune, harden, and manage complex Linux systems. Prerequisites: Linux Practitioner.

---

Labs

#	Lab	Topics
01	sysctl — Kernel Parameters	/proc/sys/, net/vm/fs/kernel params
02	Performance Profiling with perf	perf stat/record/report, flamegraphs
03	strace — System Call Tracing	strace -e/-c/-f/-tt, syscall analysis
04	lsof — Open Files & Sockets	lsof -i/-p/-u, deleted files, ports
05	CPU & Memory Profiling	/proc/meminfo, OOM killer, taskset
06	Linux Security Hardening	CIS controls, SSH hardening, chattr
07	SELinux — Policies & Labels	modes, contexts, chcon, audit2allow
08	AppArmor — Profiles	aa-enforce, profiles, deny rules
09	auditd — System Auditing	auditctl, ausearch, aureport, rules
10	fail2ban — Intrusion Prevention	jails, filters, fail2ban-client
11	LVM — Logical Volume Management	pvcreate, vgcreate, lvcreate, extend
12	Software RAID with mdadm	RAID 0/1/5, /proc/mdstat, recovery
13	Filesystem Tuning — ext4, xfs, btrfs	tune2fs, xfs_info, btrfs snapshots
14	Disk Encryption with LUKS	cryptsetup, luksFormat, /etc/crypttab
15	Advanced Storage — NFS & Quotas	exportfs, NFS mount, quota tools
16	Linux Namespaces	unshare, nsenter, lsns, PID/NET/UTS
17	cgroups — Resource Control	memory.max, cpu.max, pids.max
18	Docker Internals	overlay2, veth pairs, runc, containerd
19	systemd Deep Dive	unit files, timers, socket activation
20	Capstone — Hardened Container-Ready Server	full hardening + container security

---

Start here → Lab 01: sysctl — Kernel Parameters