Cloud Platform & Site Reliability Engineering (SRE)
Design, automate, and operate high-availability cloud platforms. Learn how Linux namespaces isolate processes, how Kubernetes schedules pods, how Terraform declares infrastructure, and how eBPF observability catches production latency spikes.
Linux Kernel Internals & Container Virtualization
cgroups v2, network namespaces, overlay filesystems, systemd, and building containers from scratch in bash.
What you're experiencing: "Linux Namespaces & Process Isolation"
You used Docker for years without knowing what it does. Now, digging into `/proc`, `unshare`, and `iptables` rules feels dizzyingly low-level.
You are gaining root-level confidence in the operating system. You no longer fear Linux configuration files, memory limits, or kernel panics.
- Running containers as root user in production without dropped Linux capabilities.
- Ignoring memory limits and watching the Linux OOM-killer silently terminate critical backend processes.
Linux Internals: Namespaces, cgroups v2 & System Calls
Process isolation (PID, Mount, NET, IPC), resource quotas, memory cgroups, and strace debugging.
Kubernetes Architecture: Control Plane & Reconciliation Loops
API server, etcd consensus, kube-scheduler, kubelet, and declarative state reconciliation.
Capstone: Production Multi-Node Kubernetes Cluster with GitOps (ArgoCD)
Provision a highly available 3-node Kubernetes cluster from virtual machines. Configure TLS certificates with cfssl, set up Cilium CNI with eBPF data path, deploy ingress-nginx, and establish a declarative GitOps pipeline with ArgoCD.