Posts

Linux Commands: General Commands, System Configuration, Package Manager, Network & VLAN Configuration & Firewalls, SSH & Host Keys, Certificates, KVM & SQL

Linux Storage: Mount, Disks, Partitions, Filesystems, LVM, Mdadm, Swapfile, Smartmontools, NFS & Samba

Linux Filetransfer and Backups: SCP, SFTP, Rsync, Rsnapshot, dd, Borg Backup & Netcat

Linux Scripts - Local & SSH Server Setup: Copy SSH Key, Set Hostname & FQDN, Append Hosts Entries, Roate Host Keys, Change IP Address

PowerShell Commands and Scripts: Remote Management, Active Directory, Group Policy, Networking, Scheduled Tasks, Licenses

Docker & Docker Compose Commands

VMware ESXi & vCenter Setup and Configuration, ESXcli Commands, PowerCLI Commands, VIM-CMD

VMware Govc: Manage vCenter Resources with Govc

Veeam Backup & Replication - VMware vSphere VM Backups

GitLab & GitLab Registry - Docker Compose Deployment, GitLab Runner - Bare Metal and Docker Compose version

Dead Man's Snitch - CronJob Monitoring: Get Email Alerts for CronJob Failures

Foreman: Setup a Foreman Server, Export Root CA Certificate & Add Hosts with Puppet Agent

Puppet Open Source: Install Puppet Server, Add Hosts / Deploy Puppet Agent, Puppet Modules Examples, Deploy Apache Webserver, Deploy LAMP Stack

Varnish: Loadbalancer Example with Nginx TLS Termination for Apache2 Webservers; Systemd Service Unit Configuration, Manage VCL Configurations with Varnishadm

Kubernetes Kuberhealthy - Kuberhealthy with Kube-Prometheus-Stack, Example Health Checks

Kubernetes KubeVirt - Run KVM based Virtual Machines in Kubernetes: Deploy CirrOS example VM, Deploy Debian VM with Cloud-init and DataVolume / PersistentVolumeClaim

PostgreSQL: PostgreSQL HA Cluster Deployment with Kubernetes Operator, Cluster Failover Test, External Access via Master LoadBalancer, Access Postgres Operator UI with TLS encryption

PostgreSQL: PostgreSQL Kubernetes Deployment via Helm, PostgreSQL Monitoring via Kube-Prometheus-Stack

HashiCorp Vault: Kubernetes Secrets with External Secrets Operator (ESO)

HashiCorp Vault: Docker Compose Deployment with TLS Encryption and Web-UI, Initial Setup via Vault CLI, Key/Value Secret Example

DNSmasq: Simple DNS Server

OpenShift: Multi Node Cluster Deployment based on vSphere with CLI-based Local Agent, Static IPv4 Network Configuration, HAproxy Load Balancer

OpenShift: Single Node Cluster Deployment based on vSphere with CLI-based Local Agent, Static IPv4 Network Configuration; Deploy Image Registry, Example Deployment from Cluster Web Console

OpenShift: Multi Node Cluster Deployment based on vSphere with Interactive Installer, Static IPv4 Network Configuration, Example Deployment with Ingress

OpenShift: Single Node Cluster Deployment based on vSphere with Interactive Installer, DHCP Network Configuration

GitHub Actions Workflow: Build a Docker Container Image and Push the Image to DockerHub

Azure DevOps Pipeline: Deploy Container to AKS Kubernetes Cluster

Azure DevOps Pipeline: Build Container Image and push the Image to Azure Container Registry

Azure Container Registry: Create an Azure Container Registry with Azure CLI, Create a Service Principal for the Registry Authentication, Push & Pull an Example Container

Terraform Cloud: Connect GitHub via OAuth Authentication, Create Terraform Workspace, Execute Terraform Azure Configuration via Terraform Run

Terraform - VMware vSphere: Install vSphere CA Certificate on Linux; Deploy basic VM with manual Installation; Create VM Template with Packer, Deploy VMs with Custom IP and Hostname from Template and place them in vSphere Folder

Terraform - Microsoft Azure: Deploy Server with SSH Key and custom Security Group; Dynamically Scale VM Deployment (Deploy 'n' number of VMs)

Terraform - Hetzer Cloud: Deploy Servers with SSH Key, Deploy Firewall & Firewall Rules, Connect VMs to Firewall, Cloud-init Example

Terraform - AWS: Install Terraform on Linux & Windows, Deploy EC2 Instance with SSH Key and SG in default VPC, Deploy EC2 Instance with Scripted Docker installation, Create S3 Bucket

Ceph Cluster: Deploy a Ceph Cluster with Cephadm, Add Nodes and OSDs; Setup a Storage Pool, Create and Mount RBD Image, Create User for RBD Image Mount

CephFS: Deploy MDS Daemons, Create CephFS Filesystem, Create Ceph User, Mount CephFS on Clients

Jenkins CI Pipeline: Retrieve Code from Bitbucket Repository, Executes Maven Build, Deployes Artifacts to Artifactory Maven Repository

Jenkins CI Setup: Connect Jenkins to Bitbucket, Create and Run a Test-Job; Connect Jenkins to Artifactory, Build Example Project from GitHub and Push Artifacts to Artifactory Maven Repository

Jenkins: Kubernetes Deployment, Storage Setup (Storage Class, PersistentVolume with NFS), TLS Encryption with Nginx Ingress and Kubernetes Secret

Artifactory: Kubernetes Deployment, Storage Setup (External Storage Provider with NFS Subdir External Provisioner), TLS Encryption, Nginx Ingress

Bitbucket Data Center - Docker Compose Stack: Self-hosted Git-based Source Code Repository Host, Traefik Reverse Proxy, Create and Push into Example Repository

Ansible AWX: Kubernetes Deployment with AWX Operator, Storage Setup (Storage Class, PersistentVolume with NFS, PersistentVolumeClaim), TLS Encryption with Nginx Ingress and Kubernetes Secret

OpenStack Heat: Single and Multi VM Deployments with Heat Manifest and Cloud-Init, Assign Floating IP with Script, Create Network with Router

OpenStack CLI: Deploy VM, Security Group Rules, Assign Floating IP

OpenStack: DevStack - Deploy a Single-Node OpenStack Playground with Heat Plugin, OpenStack CLI Commands

Deploying with Flux: Deploy Manifests from public and private GitHub Repositories into Kubernetes Cluster, Flux Commands

Deploying with Flux: Deploy Manifests from public and private GitLab.com Repositories into Kubernetes Cluster

Deploying with Flux: Deploy Manifests from private Repositories of a self-hosted GitLab Instance into Kubernetes Cluster

Deploying with Argo CD: Installation, CLI Setup, Helm Chart Deployment from GitLab Repository in Kubernetes Cluster

Deploying with Argo CD: Push Custom Container to GitLab Registry & Deploy the Container with Argo CD into K8s Cluster

Prometheus & Grafana - Kubernetes K8s Deployment: Prometheus & Node Exporter Helm Deployment, Grafana Deployment with NodePort Service; Detailed Visualization of Kubernetes Metrics with Grafana Dashboard

Loki: Automated Promtail Container Deployment with Ansible

Loki & Grafana - Kubernetes K8s Deployment with Several Loki Instances for Seperated Data Sources; Nginx Ingress with TLS Secret; Promtail Helm and Docker Container Deployment

Loki, Grafana & Promtail Stack - Deployment with Helm Chart in a K3s Kubernetes Cluster, NodePort Service and Traefik Ingress with TLS Secret; Promtail Helm Deployment for External Loki Data Source

Loki, Grafana & Traefik - Docker Compose Stack: Deployment with GitLab CI Pipeline, Git Commands

Loki & Grafana - Docker Compose Stack: Promtail Container for Container-, /var/log- and Systemd-Journal Logs; Promtail Bare-Metal for Systemd-Journal Logs; Traefik Reverse Proxy

Kubernetes Commands: Cluster Nodes, Namespaces, LimitRange Resource Limits, Pods, Deployments, Replication Controllers, Services, HPA, Secrets, Cronjobs, Helm, Logs, K9s TUI

Kubernetes Jobs: Jobs Overview, Basic Non-parallel & Parallel Job Examples; CronJob & RBAC Example that Restarts a Deployment

Kubernetes ReplicaSets & DaemonSets: Overview, Example ReplicaSets and DaemonSets with and without NodeSelector & Node Labeling

Kubernetes Kustomize: Kustomize Configuration Management Example

Kubernetes Helm Charts: Create a Custom Helm Chart

Kubernetes Etcd Snapshot: Etcd Snapshot and Restore with Etcdctl, Verify Etcd Member Health; Etcdctl Commands

Kubernetes Container Storage Interface (CSI): Samba - Deploy SMB CSI via Helm, Create example PVC and Pod

Kubernetes Container Storage Interface (CSI): Longhorn Distributed Block Storage System - Deploy Longhorn via Helm Chart, Define Custom Storage Mountpoints; StorageClass & PVC Example

Kubernetes Container Storage Interface (CSI): Ceph CSI Driver Example, Dynamically provision RBD Images in a Ceph Storage Pool

Kubernetes Container Storage Interface (CSI): NFS CSI Driver Example, Dynamically create PersistentVolumes using a CSI StorageClass and PVC

Kubernetes Kubeconfig: Create example Kubeconfig with new (RBAC) Service Account and ClusterRole / ClusterRole Binding

Kubernetes Role Based Access Control (RBAC): RBAC Overview, Create Service Account, Example Role and RoleBinding

Kubernetes Network Policies: Ingress and Egress Policy Examples

Kubernetes Liveness & Readiness Probes: TCP Readiness Probes (Single Pod and Multi Pod Dependency), TCP Liveness Probe

Kubernetes DNS: CoreDNS custom Hosts entry (K3s & K8s Version), Deployment with custom Hosts entry; Backup and Restore the CoreDNS ConfigMap; DNS Troubleshooting

Kubernetes Horizontal Pod Autoscaling: Install Kubernetes Metrics Server, Example Deployment with Horizontal Pod Autoscaler (HPA)

Kubernetes Secrets: Opaque Secret Configuration, Pod Examples with Environment Variable Secrets and Volume Secrets; SSH Authentication Secret with Pod Example

Kubernetes Volumes: Nginx Pod and Deployment Examples with NFS Volume, Pod and Deployment Examples with EmptyDir Volume, Deployment Example with PersistentVolume, External Storage Provider with NFS

Kubernetes Security: Pod Security Admission (PSA) - Overview, Enforce Pod Security Standard at a Namespace; Example Nginx Pod SecurityContext for Restricted PSS

Kubernetes Security: Immutable Deployment - Deploy Container with ReadOnly-Filesystem and Writable-Volume

Kubernetes Resource Management: Define Resource Requests and Limits; Deploy Kubernetes Metrics Server, Verify Resource Usage with kubectl top

Kubernetes Deployment Components: Pods - Multi Container Pod Example, Container Networking Within a Pod; Replication Controller; Services - ClusterIP, NodePort & LoadBalancer Services, Services for Pods, Replication Controllers, External Resources & Deployments

Velero Open-Source Kubernetes Backups: Velero Helm Deployment, Backup and Restore a Kubernetes Namespace from an AWS S3 Bucket

Rancher Kubernetes Management Platform: Cert Manager Helm Deployment, Rancher Helm Deployment with Rancher CA certificate, Export Root CA Certificate, Ingress Resource, Access Rancher with TLS Encryption

Cluster API vSphere (CAPV): Deploy a Kubeadm based Kubernetes Cluster on vSphere, with Cluster API from a KIND Management Cluster

K8s Kubeadm - Upgrade Kubernetes Version with Kubeadm

K8s Kubeadm - High Availability Kubernetes Cluster Deployment with HAproxy and Keepalived, External etcd Cluster

K8s Kubeadm - High Availability Kubernetes Cluster Deployment with HAproxy and Keepalived, Pod based stacked etcd Cluster; Cilium Network Add-On, MetalLB & Nginx Ingress Controller, Test-Deployment with TLS Encryption

K8s Kubeadm - Basic Kubernetes Cluster Deployment with one Controller and two Worker Nodes, Containerd and Kubeadmin Cgroup Driver Configuration, Cilium Network Add-On, MetalLB & Nginx Ingress Controller, Test-Deployment with TLS Encryption

K0s: Deploy a K0s Cluster with K0sctl, Deploy and Configure MetalLB, Deploy Nginx Ingress Controller; Example Deployment with TLS Encryption

RKE2 - Rancher Kubernetes Engine 2: Deploy a Bare-Metal Kubernetes Cluster based on Ubuntu 24.04 Servers, Add Controller & Worker Nodes, Deploy & Configure MetalLB LoadBalancer, Example Deployment with LoadBalancer Service

K8s Kubespray: Kubernetes Cluster Deployment, MetalLB Configuration, Add & Remove Nodes from the Cluster, Example Deployment with LoadBalancer and NodePort Services

Google Kubernetes Engine GKE (Managed Kubernetes Services): Install gcloud, Enable APIs, Deploy Regional & Zonal Cluster via gcloud CLI; Exaple Deployment with TLS Encryption via GKE Ingress and Google-managed Certificate

Azure Kubernetes Service AKS (Managed Kubernetes Services): Deploy AKS Cluster via AZ CLI; Deploy & Configure Nginx Ingress, Cert Manager, ClusterIssuer; Example Deployment with TLS Encryption

AWS Elastic Kubernetes Service EKS (Managed Kubernetes Services): Deploy EKS Cluster via eksctl; Example Deployment with TLS Encryption with AWS Certificate Manager & Load Balancer Service

K3s: Single and Multi Node Kubernetes Cluster based on Debian 12 Servers, Traefik & Nginx Ingress Controller, Helm Package Manager, Node Labels, Taint Master Node, Deployment Scaling, TLS Encryption with Certbot

Local Kubernetes Cluster with Kubernetes in Docker (KIND), Deployment with NodePort Service, Install Kubernetes Dashboard

Local Kubernetes Cluster with Minikube and Virtualbox: Example Pod with Port Forwarding, Example Deployment with NodePort Service

Kubernetes: Core Components of the Kubernetes Architecture

Keycloak Authentication - Setup on Debian 12, Production Mode, TLS Encryption, CLI Administration, Keycloak Quickstart Node.js Example Application

WildFly (JBoss Community Version) - Setup on Debian 12, Deployment of a Java WebApp, Nginx Reverse Proxy

MinIO - Docker Compose, TLS Encryption for API and Console Connection, MinIO Client

SeaweedFS - Docker Compose Stack, S3 API Commands

EJBCA Community Edition - Docker Compose Stack, build Certification Authority, issue Server TLS Certificate, test the secure TLS encryption

CoreDNS - Docker Compose, Open Source DNS server. Troubleshooting .local domain resoluation on Ubuntu server 22.04

Mailcow - Docker Compose Stack, Setup a Mailcow Mailserver with SOGo Mailclient on a Hetzner Cloud Server

Sonarqube - Docker Compose Stack, Code Inspection with GitLab Integration

Vagrant with VirtualBox on Debian 12

Raspberry Pi - Setup Raspberry Pi OS, Network Configuration, Install Docker & Docker Compose

Prometheus - Bare Metal and Docker Compose, Prometheus Exporter, Grafana Dashboard

MikroTik - RouterOS Setup with WinBox, VLAN Setup

Zyxel GS1200-8 Switch - Initial Setup & VLAN Setup

OPNsense - Installation, Certificate Authority Setup

APC Uninterruptible Power Supply (UPS) - Apcupsd Master / Slave Configuration

Intelligent Platform Management Interface (IPMI) Commands

AWS CLI for EC2 - Manage EC2 Instances and Security Groups, Automate EC2 Configuration with Cloud-init

AWS Lambda Function - S3 Bucket Automation

Traefik - Docker Compose, Reverse Proxy with automated Let's Encrypt Certificate for Docker Containers

Traefik - Docker Compose, Reverse Proxy with Wildcard Certificate for Docker Containers

Traefik - Bare Metal, Reverse Proxy for Apache2

Distributed Replicated Block Device (DRBD) - High-availability storage cluster

High-availability Cluster with Pacemaker and Corosync, PCS and CRMSH version

Proxmox Hypervisor - High-availability Cluster, Firewall, Proxmox Commands

Linux Dual Boot with Ubuntu and Debian. Ubuntu custom storage layout with LVM, Debian custom storage layout with LVM

Windows 10 - Reset lost password: Boot from Windows ISO, replace utilman.exe with cmd.exe, set new PW

Linux - Change forgotten root password with init=/bin/bash (change GRUB boot configuration), set GRUB password

Enable Bitlocker Encryption, store Recovery Key in Active Directory

Linux - Create bootable USB Stick, create encrypted USB Stick, VeraCrypt Encryption, Cryptsetup Encryption

Change Linux Kernel, load Kernel Modules

MegaRAID - MegaCLI on Linux

Certbot Wildcard Certificate with AWS Route 53

Proxmox Hypervisor - GPU and Disk Passthrough

Icinga2 Dockerized - Basic Setup for Icinga2 Monitoring

Nagios Core - Monitoring Setup

Zabbix & Zabbix Agent 2 - Monitoring Setup, PostgreSQL & MySQL Setup

ElasticStack: Kubernetes Deployment, Elasticsearch, Kibana, Filebeat, Metricbeat

ELK Stack: Bare-Metal Deployment

Git Commands

Apt-dater - Remote package update management

Caddy Docker Compose - Webserver & Reverse Proxy for Apache Container

AWS Family Transfer - SFTP Server with S3 Storage

Data archiving with AWS S3 Glacier storage class

Linux Rescue: Fix broken initial RAM disk files & Bootloader recovery

GitLab CI Pipeline - Push data into AWS S3 Bucket, PowerShell Git Commands

GitLab CI Pipeline - Deploy website with Nginx Docker Container

AWS CloudFormation - Deploy AWS Resource Stacks with AWS CloudFormation and AWS CLI

Ansible: Create Ansible Collection with Roles and Playbooks for User Management and SSH Daemon Configuration

Ansible: Example Playbooks and ad hoc commands

AWS - Static Website Hosting with S3 and Cloudfront, Geo Restriction, Cloudfront Functions, CloudFront Cache Invalidation

AWS EC2 Geo Restriction with Application Load Balancer (ALB) and Web Application Firewall (WAF) / Access Control Lists (ACL), custom response body, https encryption

Nginx Tutorial: HTTP, HTTPS, Reverse Proxy for Apache2

Nginx - Docker Compose, HTTP, HTTPS, Reverse Proxy for Apache2 Container

Apache2 Tutorial - HTTP, HTTPS, PHP, Apache2 Commands. Ubuntu Version

Apache2 Tutorial - HTTP, HTTPS, PHP, Apache2 Commands. RHEL Version

Nextcloud - Kubernetes Deployment

Nextcloud - Docker Compose Stack, HTTPS, S3 Storage, LDAPS Active Directory Authentication, Maintenence & other Settings

Nextcloud - LAMP Stack on Ubuntu 22.04

Samba Share Active Directory integration with Kerberos

WireGuard VPN Server, Linux and Windows peers

OpenVPN Dockerized

Docker Swarm Tutorial

AWS S3 - User access for specific Bucket via the web console

AWS S3 - Upload Notification

AWS CLI for S3 - Copy and Sync data, Static Website Hosting, mount S3 Bucket as file system with s3fs

AWS EC2 - Increase volume and file system size

KeePass SSH Key management with PuTTY Pageant and MobaXterm

Access KVM Virt-Manager from Windows with PuTTY and Xming

MC - Midnight Commander: Two panel file manager for Linux

Diskpart Tutorials

Active Directory Playground, Active Directory Certificate Services (ADCS), LDAPS

Visual Studio Code Shortcuts

Office Deployment Tool - Office Rollout

Ubiquiti EdgeRouter 6p - Install Let's Encrypt Wildcard Certificate via Command Line

Ubiquiti EdgeRouter 6p - VLAN Setup with Ubiquiti EdgeSwitch 10x, block inter-VLAN routing

Router - Connect to Console Port with Serial Cable

Portforwarding from Magenta Fiberbox through another Router (Ubiquiti EdgeRouter 6p)

Jupyter Notebook

InfluxDB with Telegraf Agent - Docker Compose Stack with Nginx Reverse Proxy

Confluence - Docker Compose Stack with Nginx Reverse Proxy

Jira - Docker Compose Stack with Nginx Reverse Proxy

Bookstack - Docker Compose Stack with Nginx Reverse Proxy

Mattermost - Docker Compose Stack with Nginx Reverse Proxy

Rocket.Chat - Docker Compose Stack with Nginx Reverse Proxy

Jenkins - Docker Compose Stack with Nginx Reverse Proxy

Sonatype Nexus3 - Docker Compose Stack with Nginx Reverse Proxy

Passbolt - Open Source Password Manager - Docker Compose Stack with Nginx Reverse Proxy

phpMyAdmin - Docker Compose, Nginx Reverse Proxy. Management Interface for MySQL & MariaDB

Mongo-Express - Docker Compose, Nginx Reverse Proxy. Management Interface for MongoDB

Kimai - Docker Compose Stack, Traefik Reverse Proxy

Wordpress - Docker Compose Stack with Nginx Reverse Proxy

Wordpress - LAMP Stack on Ubuntu 22.04

Lighttpd - Lightweight Webserver, HTTP, HTTPS, PHP, Command Overview

Veeam Agent Setup - Standalone on Linux Server

VM image conversion from KVM to VMware

Fail2ban - Protect Linux server against brute-force attacks, Pentesting with Hydra

HAproxy - High Availability Proxy on Ubuntu 22.04

Arch Linux - Manual Installation with LVM, KDE Plasma 6 Desktop

Pi-hole - Docker Compose, Setup a DNS Sinkhole with VMware Workstation

Debian 12 Bookworm - Server & Desktop Configuration, Common Packages, KVM Virtualization with Virt-Manager

Windows Nested Virtualization: Use Nested Virtualization with VMware Workstation Pro on Windows 11

Windows Tools & Configuration, WinGet Package Manager, Change Windows 11 Context-Menu

Docker Desktop on Windows 10 with WSL

Network Printer with Generic Driver - Windows and Ubuntu Desktop, print from Bash Shell

IT Theory: Symmetric and Asymmetric Encryption, Encoding & Hashing