|
## Workshop Details ##
|
* [Detailed Workshop Agenda](agenda.html) (includes links to presentations and schedule)
* [Participants](participants.html)
* [Instructors](instructors.html)
* [Reference Materials](references.html)
* [Sponsors](sponsors.html)
* [Workshop Survey](https://nsrc.org/limesurvey/index.php)
* Photos: [workshop](https://photos.nsrc.org/index.php)
* [NSRC training videos](https://learn.nsrc.org)
|
## Workshop Description (Synopsis) ##
The System Administration and Infrastructure Operations Workshop is a five-day technical workshop consisting of short lectures, tutorials, and hands-on tasks. The course objective is to give students hands-on experience in tools and techniques to manage hundreds or thousands of Unix/Linux systems, in a repeatable and team-structured way.
## Target Audience ##
Unix/Linux system administrators who have used the command line and are used to dealing with daily system administration tasks but are working on understanding how to properly manage and maintain larger numbers of systems and services.
## Prerequisites ##
This workshop assumes operational familiarity with editing files, installing software, and other day-to-day systems administration tasks on Unix and/or Linux operating systems.
__It is required that the workshop participants:__
* Medium to advanced knowledge of the UNIX/Linux command line environment
* Basic knowledge of TCP/IP networking
* Participants are required to bring a laptop
* Participant laptops need to allow participants to update core settings
## Workshop Topics ##
__Participants in this workshop will learn about:__
* SSH key authentication
* Source-of-truth and Git
* Centralized authorization
* System containers with Incus
* ZFS (Zettabyte File System)
* Cloud-init
* Ansible Automation
* Inventory across infrastructure
* Terraform Infrastructure as Cloud (IaC)
* OCI (Open Container Initiative)
* Kubernetes (via demo)
* CI/CD (Cont)inuous Integration/Continuous Delivery or Deployment) using GitOps
* Certificates
* Provisioning and managing hardware
* Monitoring and reporting
* Data management
## Objectives ##
__At the end of the workshop, students will be able to (Core Goals):__
* Manage a large number of devices and items across their infrastructure securely and reliably
* Learn how to make actions testable and repeatable, working with a "source of truth" that a team can use for reference and to recreate work done
* Automate the work process to keep things up to date and to deploy changes in both a test environment, then move approved changes to production
* Ensure the continuity of infrastructure and be able to recover from failures (such as using backups)
* Monitor, report, identify, and resolve issues
__At the end of the workshop, students will be able to (Supporting Goals):__
* Work with Git to form a "source of truth" for your infrastructure
* Lean how to implement a properly working centralized authorization model
* Work with SSH, keys, configuration, and port forwarding effectively
* Define ZFS filesystems to maintain and move containers across hosts
* Work with Ansible to automate the creation of systems across infrastructure
* Work with Ansible control tools, such as AWX, to automate Ansible system updates from a source of truth (Git)
* Consider methods for creating infrastructure inventory sources
* Use tools like Terraform to help create Virtual Machines within a cluster (via dmeo)
* Learn how to use Open Container Initiative (OCI) images with tools like Docker (or Podman, or Incus)
* Work with the CI/CD (Continuous Integration/Continuous Delivery) concepts to build a simple CI/CD based pipeline
* Understand the core concepts behind how SSL certificates work and are used in web environments
* Understand the core concepts of provisioning hardware effectively and in a protected manner (control plane access only via Out of Band)
* Understand what and why we monitor and how to do this
* Protect data, and explain why data is the most important item to protect, as well as methods for doing this
**Please note: participants are required to bring laptops**
* Participants should have proper administrative access to their laptop to be able to;
* Install and configure software as needed;
* Configure and update software once installed;
* Update the network configuration of their device (specially DNS if necessary);
* and, if using Windows, have Administrator access to enable ssh properly (ssh-agent) in PowerShell.
