Linux — Level by Level
Linux is the ground every platform stands on: every container, node and cloud VM runs on it. This track starts with the commands you use every day, moves to troubleshooting real broken servers, and ends with the kernel features (cgroups, namespaces, sysctl, eBPF) and security controls that containers and Kubernetes are built from.
What you'll be able to do
- Move around, read, search and edit on any Linux server with confidence
- Troubleshoot full disks, slow hosts, failed services and network problems methodically
- Explain how cgroups and namespaces turn processes into containers
- Tune and harden a host with sysctl, SELinux, SSH and firewall policy
Before you start
None. Access to any Linux machine or VM (a free cloud VM or WSL is fine).
How it works
Each lesson: plain-language idea → how it really works → hands-on. Each section ends with a cheat sheet & self-check.
Curriculum
Lessons marked “Read” are ready; the rest are on the way.
Level 1 — Beginner: everyday commands
- 01Your first terminal sessionShell, prompt, man pages, tab completion, historyRead →
- 02Files & directoriesls, cd, cp, mv, rm, find and the filesystem treeRead →
- 03Reading & searching textcat, less, head, tail, grep, pipes and redirectionRead →
- 04Users, groups & permissionschmod, chown, sudo, umask, rwx explainedRead →
- 05Processes, services & packagesps, top, kill, systemctl, apt/dnfRead →
- 06Checkpoint: a day on a serverFind the logs, fix a permission, restart a serviceRead →
- 📋Cheat sheet & self-checkEvery command from this section on one page, then 23 questions to check yourself.Open →
Level 2 — Intermediate: troubleshooting
- 07systemd & journald in depthUnits, dependencies, journalctl filters, failed bootsRead →
- 08Disks & filesystemsdf vs du, inodes, deleted-but-open files, LVM, mountsRead →
- 09Networking from the hostip, ss, dig, curl, tcpdump, routes and firewallsRead →
- 10Performance triageUSE method: uptime, vmstat, iostat, free, sar, pidstatRead →
- 11SSH, keys & remote workKeys, agents, config, jump hosts, tmuxRead →
- 12Checkpoint: five broken serversDiagnose each from symptoms to root causeRead →
- 📋Cheat sheet & self-checkEvery command from this section on one page, then 23 questions to check yourself.Open →
Level 3 — Advanced: kernel & security
- 13Kernel, modules & sysctlWhat the kernel does, tuning parameters safelyRead →
- 14cgroups & namespacesThe building blocks of every containerRead →
- 15NUMA, huge pages & CPU pinningPerformance for latency-sensitive workloadsRead →
- 16Tracing with perf & eBPFSee inside the kernel without rebootingRead →
- 17SELinux & AppArmorMandatory access control without tearsRead →
- 18Host hardeningSSH, firewall, auditd, CIS benchmarksRead →
- 19Capstone: harden & tune a hostBuild it, measure it, lock it downRead →
- 📋Cheat sheet & self-checkEvery command from this section on one page, then 22 questions to check yourself.Open →
Real-world scenarios
Work through each one: symptom → misleading signal → evidence → root cause → prevention.
A deleted log file still held open by a process. Find it and free the space without a reboot.
Processes stuck in I/O wait (D state). What load average really measures.
Permissions on ~/.ssh, SELinux contexts, or sshd config?
This site is a public version of my personal engineering knowledge hub. It intentionally excludes confidential company information and internal operational details.