Sign in

Ivan Velichko

@iximiuz.bsky.social
1.3K followers 196 following 110 posts

Software Engineer. Educator. Entrepreneur. Bootstrapping labs.iximiuz.com - a learning platform to help you master Linux, Containers, and Kubernetes 🚀

PostsRepliesMedia
Reposted by Ivan Velichko
David Flanagan @rawkode.dev · 22/05/2026
I've deployed a couple of challenges, #Klustered style, to @iximiuz.bsky.social's Labs. I hope you have fun trying to fix them, though there is a guide provided if toy want to learn rather than debug. Have fun out there!
labs.iximiuz.com
Klustered: Level One | Challenge
The cluster is broken. Fix the plumbing to bring the app to life (you'll know it's working when Rawkode taps his watch at you), then ship the v2 image to unlock his victory dance.
142
Reposted by Ivan Velichko
Márk Sági-Kazár @sagikazarmark.com · 24/06/2025
Following up on my etcd playgrounds, here is a sneak peek of my latest work: a @containerd.dev‬ playground. As usual, it will be available on @iximiuz.bsky.social labs soon.
141
Reposted by Ivan Velichko
Rory McCune @mccune.org.uk · 30/05/2025
Starting some more looking into k8s things the way I usually do now, with a nice ephemeral k8s-omni playground from @iximiuz.bsky.social
screenshot of a terminal running the labctl playground start command to create a new kubernetes cluster
041
Reposted by Ivan Velichko
Márk Sági-Kazár @sagikazarmark.com · 19/05/2025
Following up on my previous post, here is another tutorial about operating @openbao-official.bsky.social and @hashicorp.com Vault on @iximiuz.bsky.social Labs. Auto Unseal OpenBao/Vault with the Transit Secrets Engine: labs.iximiuz.com/tutorials/o... bsky.app/profile/did...
bsky.app
Márk Sági-Kazár (@sagikazarmark.com)
1/4 Secret management is a critical yet often overlooked aspect of DevOps. (Raise your hand if you've ever intentionally committed secrets to a Git repository.) This is why I've begun creating a series of educational content on the subject.
041
Reposted by Ivan Velichko
Márk Sági-Kazár @sagikazarmark.com · 17/05/2025
1/4 Secret management is a critical yet often overlooked aspect of DevOps. (Raise your hand if you've ever intentionally committed secrets to a Git repository.) This is why I've begun creating a series of educational content on the subject.
111
Reposted by Ivan Velichko
Rory McCune @mccune.org.uk · 21/04/2025
TIL that adding CAP_SYS_ADMIN to a k8s pod has different behaviour depending on the backing CRI. With Containerd it does nothing (you need to call it SYS_ADMIN) but on CRI-O it will add ok. Also TIL k8s doesn't validate the capabilities you add to pods!
2232
Reposted by Ivan Velichko
Rory McCune @mccune.org.uk · 08/04/2025
Experimenting with using @iximiuz.bsky.social labs for interactive blog content, so I re-worked one of my container security fundamentals blogs labs.iximiuz.com/tutorials/co... . Interested in any feedback on what people reckon to the format :)
labs.iximiuz.com
Containers are processes | iximiuz Labs
In this brief tutorial we'll explore the idea that Docker containers are just processes, from the perspective of the operating system. Based on this Securitylabs blog post https://securitylabs.datadog...
261
Ivan Velichko @iximiuz.bsky.social · 02/04/2025
This is the way! 🚀
030
Reposted by Ivan Velichko
Laurent Cheylus @lcheylus.bsky.social · 28/03/2025
A Visual Guide to SSH Tunnels: Local and Remote Port Forwarding - Article by Ivan Velichko @iximiuz.bsky.social #Network #SysAdmin
iximiuz.com
A Visual Guide to SSH Tunnels: Local and Remote Port Forwarding
SSH port forwarding explained in a clean and visual way. How to use local and remote port forwarding. What sshd settings may need to be adjusted. How to memorize the right flags.
1105
Reposted by Ivan Velichko
cloudnativeboy.bsky.social @cloudnativeboy.bsky.social · 23/03/2025
labs.iximiuz.com a browser-based env's where anyone, from beginners to experienced engineers, can get hands-on experience with containers, K8S, DevOps tools, CI/CD pipelines, observability & loads more. Listen to @iximiuz.bsky.social how it's all started, current adaption: youtu.be/kHjAW7f0EPo
041
Reposted by Ivan Velichko
Jseguillon@CuistOps @jseguillon.bsky.social · 03/03/2025
Please join me and thank @iximiuz.bsky.social for giving us a bunch of free premium accounts we can give away to our viewers on our twitch channel ! First two will be offered today !! @iximiuz.bsky.social really rocks ! Please take a look at his amazing labs !
063
Reposted by Ivan Velichko
cloudnativeboy.bsky.social @cloudnativeboy.bsky.social · 24/02/2025
Most of the issues with container images are not b/c of the app being containerized but a poorly written/structured docker file @iximiuz.bsky.social Kyle Quest will offer optimizations for improvements in size, security, & build speed, check out: gooddockerfiles.com
022
Reposted by Ivan Velichko
cloudnativeboy.bsky.social @cloudnativeboy.bsky.social · 19/02/2025
@iximiuz.bsky.social's journey of transitioning from traditional textual and visual explanations in his blog posts to creating interactive, reproducible tutorials -> labs.iximiuz.com has attracted 18,000 registered users, with around 2,000 active users per month. Full Ep -> youtu.be/kHjAW7f0EPo
011
Ivan Velichko @iximiuz.bsky.social · 18/02/2025
Kubernetes "native" sidecars are slated for GA in 1.33, so it's a good time to brush up on how (and why) to use them. Solve this practical challenge by reworking a flawed pod, making it use a native sidecar: > Kubernetes Pod With a Faulty Init Sequence labs.iximiuz.com/challenges/k...
061
Reposted by Ivan Velichko
Martin Perez @martin.arume.cloud · 13/02/2025
If you are into #docker and #containers you must check @iximiuz.bsky.social feed. His content is amazing.
161
Ivan Velichko @iximiuz.bsky.social · 09/02/2025
Unpopular opinion: The main value of CKA, CKAD, and CKS is not in the certificate itself but in the preparation phase. Having said that, allow me to present a new iximiuz Labs challenge by Adam Leskis 👏 CKA Practice: Upgrade Multi-Node Kubernetes Cluster labs.iximiuz.com/challenges/c...
labs.iximiuz.com
CKA Practice: Upgrade Multi-Node Kubernetes Cluster | Challenge
This exercise tests your ability to safely upgrade a multi-node Kubernetes cluster from version 1.30 to 1.31 following the standard upgrade procedure.
194
Ivan Velichko @iximiuz.bsky.social · 05/02/2025
It's very easy to start a Docker container: docker run nginx ☑️ But can you explain what actually happens when you run this command? I prepared a Docker 101 challenge that helps you explore the internals of Linux containers - check it out: labs.iximiuz.com/challenges/s...
020
Ivan Velichko @iximiuz.bsky.social · 03/02/2025
How to Limit CPU and Memory Usage of a Linux Process 🔽 Of course, using cgroups! But there is a number of ways to do it: - Manually editing the cgroupfs filesystem - Using libcgroup's cgcreate and cgexec - Using the mighty systemd-run Practice here 👉 labs.iximiuz.com/challenges/l...
labs.iximiuz.com
Limit CPU and Memory Usage of a Linux Process | Challenge
Start a Linux process and limit its CPU and memory usage with cgroups.
041
Reposted by Ivan Velichko
MadeWithVueJS @madewithvuejs.com · 02/02/2025
k'exp by @iximiuz.bsky.social is a visual Kubernetes explorer #madewithvuejs that lets you explore Kubernetes capabilities & helps you with application development ✨ - madewithvuejs.com/kexp
021
Ivan Velichko @iximiuz.bsky.social · 01/02/2025
How do you containerize a Python app the right way? 🤔 Building small and secure images for Python projects is surprisingly hard: - Which base image to choose? - How to manage dependencies? - How to structure the Dockerfile? Learn more (with solutions): labs.iximiuz.com/challenges/d...
061
Ivan Velichko @iximiuz.bsky.social · 27/01/2025
Container images to avoid in production - part II: python:3 Yes, it's a Docker Official Image, and it's a good image to build your app, but: - It has TWO pythons inside 🐍 x 2 = 🤯 - It brings 800MB+ of dev/build packages. What to use instead in production 👉 python:3-slim
020
Ivan Velichko @iximiuz.bsky.social · 24/01/2025
SSH Tunnels: An age-old trick that's still widely used - Expose a local service to the Internet - Map a remote service to a local port - Query an AWS RDS database with a local GUI client - Access a server in your private VPC from a dev machine ...and a lot more. Visual memo 👇
161
Ivan Velichko @iximiuz.bsky.social · 23/01/2025
What's Inside Distroless Container Images: Taking a Closer Look 🧐 Distroless images come in many flavors, and it might not be obvious which one (if any!) is the best fit for your application. Here is my attempt to explain the difference and use cases on a single diagram:
150
Ivan Velichko @iximiuz.bsky.social · 19/01/2025
Pulling and Pushing Container Images 🔽 Did you know that the below commands: docker pull nginx docker pull nginx:latest docker pull library/nginx:latest docker pull docker[.]io/library/nginx:latest ...pull exactly the same Docker Hub image? Learn more 👉 labs.iximiuz.com/skill-paths/...
170
Ivan Velichko @iximiuz.bsky.social · 14/01/2025
Building container images FROM scratch? Then you need to be aware of these pitfalls 👇 By default, scratch containers lack: - Rootfs layout - CA certificates - Time zone info - Shared libraries - /etc/{passwd,group} Learn more in my new blog post: labs.iximiuz.com/tutorials/pi...
labs.iximiuz.com
Building Container Images FROM Scratch: 6 Pitfalls That Are Often Overlooked | iximiuz Labs
While "FROM scratch" containers may seem functional, they often lack essential components that programs expect to find in their execution environment. Discover the most common pitfalls of building con...
050
Ivan Velichko @iximiuz.bsky.social · 10/01/2025
How To Build a Production-Ready Container Image For a Go App 🔽 Is "FROM scratch" good enough for you? Check out these hands-on challenges to learn about the most typical Go container pitfalls: - static linking labs.iximiuz.com/challenges/d... - dynamic linking labs.iximiuz.com/challenges/d...
272
Ivan Velichko @iximiuz.bsky.social · 10/01/2025
How Container Networking Works 🧵 1/6: Network namespaces (netns) A separate network namespace gives a Linux container its own virtualized (and fully isolated from the host) network "context" - a loopback device, a route table, netfilter/iptables rules, etc.
1180
Reposted by Ivan Velichko
Kyle Quest (the DockerSlim guy) @kcqon.bsky.social · 08/01/2025
Have big and slow containers? Not keeping up with CVEs in your images? We (me and @iximiuz.bsky.social ) can try to help! Send over your Dockerfile, and we’ll provide a refined version in return. A limited time offer 🙂
421
Ivan Velichko @iximiuz.bsky.social · 08/01/2025
Computer Networking 101: Forward Ports Like a Pro 🧙‍♂️ The only way to mastery is through practice. Can you map one port to another using: - socat labs.iximiuz.com/challenges/p... - netcat labs.iximiuz.com/challenges/p... - iptables labs.iximiuz.com/challenges/p... Happy hacking!
040
Ivan Velichko @iximiuz.bsky.social · 06/01/2025
62 practical exercises if you're preparing for a DevOps, SRE, or Platform Engineer interview 🔽 All challenges: - Have automated solution checking - Packed with hints and theory references - Based on real-life problems I've encountered Check them out: labs.iximiuz.com/challenges
labs.iximiuz.com
Challenges 🏆 | iximiuz Labs
Practical DevOps problems for all skill levels and interests
051
Ivan Velichko @iximiuz.bsky.social · 05/01/2025
If you want to start building better container images for your Node.js applications, I've got some hands-on resources for you 👇 Check out my latest DevOps challenge, packed with practical tips: > Build a Production-Ready Next.js Application Image labs.iximiuz.com/challenges/d...
labs.iximiuz.com
Build a Production-Ready Node.js Application Image: Next.js | Challenge
Learn how to build a secure, lightweight, and production-ready Node.js application image in this hands-on challenge.
030
Ivan Velichko @iximiuz.bsky.social · 03/01/2025
Are your Docker images huge and full of CVEs? 🐳 Multi-stage builds and careful base image selection can fix that. Read my multi-stage builds intro to understand the How's and the Why's and get practical examples for Node.js, Go, Java, Rust, and PHP: labs.iximiuz.com/tutorials/do...
labs.iximiuz.com
How to Build Smaller Container Images: Docker Multi-Stage Builds | iximiuz Labs
Learn how to build smaller, more secure Docker container images using Multi-Stage Builds. This guide explains common sources of image bloat, best practices for slimming down production images, and pra...
020
Ivan Velichko @iximiuz.bsky.social · 02/01/2025
I haven't been keeping a close eye on it, but it turns out cdebug has been steadily growing on GitHub! It's feature-complete, so if you're tackling a tricky container debugging issue, I've got a tool for you 😎 github.com/iximiuz/cdebug
github.com
GitHub - iximiuz/cdebug: cdebug - a swiss army knife of container debugging
cdebug - a swiss army knife of container debugging - iximiuz/cdebug
061
Ivan Velichko @iximiuz.bsky.social · 01/01/2025
Confused by Docker image options for Node.js? Dealing with huge containers and noisy vulnerability scans? Been there, too! 🙈 Check out my tutorial on choosing the optimal Node.js base image for your app: labs.iximiuz.com/tutorials/ho...
labs.iximiuz.com
A Deeper Look into Node.js Docker Images: Help, My Node Image Has Python! | iximiuz Labs
Choosing the right base image for your Node.js application can drastically affect its security, size, and performance. This post breaks down popular options - from slim and distroless to full-sized im...
030
Ivan Velichko @iximiuz.bsky.social · 01/01/2025
New year, new goals! 🚀 If you’re learning Linux, containers, networking, or Kubernetes, I’ve got you covered: - 30 free online playgrounds - 60 interactive DevOps challenges - Tutorials, courses, and skill paths Level up your server-side game! labs.iximiuz.com
labs.iximiuz.com
iximiuz Labs - Indie Learning Platform to Master Server Side Craft
Skill up in Linux, Networking, Containers, and Kubernetes by taking courses, following interactive tutorials, and solving fun DevOps challenges.
1121
Ivan Velichko @iximiuz.bsky.social · 31/12/2024
The last Server Side roundup of the year is out 🚀 - Tasks Dev Tools - 6 new DevOps challenges - iximiuz Labs 2024 in review - A bunch of great reads ...and more! Give it a read if you're into Linux, containers, or Kubernetes 👇 newsletter.iximiuz.com/posts/ivan-o...
newsletter.iximiuz.com
Ivan on the Server Side
Tasks Dev Tools, new DevOps challenges, iximiuz Labs 2024 in review, and a bunch of great reads 🚀
020
Ivan Velichko @iximiuz.bsky.social · 30/12/2024
If you want to practice some Linux & Networking, I've got two "classic" sysadmin problems for you: - Which Port Is a Service Listening On? labs.iximiuz.com/challenges/l... - Which Process Is Listening on a Port? labs.iximiuz.com/challenges/l... How fast can you solve them?
001
Ivan Velichko @iximiuz.bsky.social · 30/12/2024
Docker Containers vs. Kubernetes Pods 🔽 - How are Pods implemented under the hood? - What is the actual difference between a Pod and a Container? - What would it take to create a Pod using regular Docker commands? Find the answers in this post: labs.iximiuz.com/tutorials/co...
labs.iximiuz.com
Docker Containers vs. Kubernetes Pods - Taking a Deeper Look | iximiuz Labs
Can a Kubernetes Pod be created with plain Docker commands? Learn the difference between Containers and Pods by exploring how they are implemented under the hood.
0208
Ivan Velichko @iximiuz.bsky.social · 29/12/2024
Containers Pro Tip: You can inspect the rootfs on any container image, including viewing textual files, by simply opening a URL like: ima.ge.cx/docker.io/library/nginx
0163
Ivan Velichko @iximiuz.bsky.social · 28/12/2024
A huge quality of life improvement for folks creating playgrounds or authoring content on iximiuz Labs: Tasks Dev Tools 🚀 Inspect the status, duration, stdout, stderr, and other attributes of the init and regular tasks in a slick new UI. Start here 👉 labs.iximiuz.com/playgrounds/...
000
Ivan Velichko @iximiuz.bsky.social · 27/12/2024
The best Christmas/New Year gift for a software engineer? Fun education! 😎 Treat yourself with a bunch of endorphin injections by cracking interactive Linux, networking, Docker, and Kubernetes puzzles and dive into quality long reads on the same topics: labs.iximiuz.com/premium
063
Ivan Velichko @iximiuz.bsky.social · 26/12/2024
Continuing the topic of Docker gotchas 👻 A poplar Node.js Dockerfile mistake - using npm in the CMD or ENTRYPOINT. Example: CMD ["npm", "start"] Scripts from the package.json are executed by npm in sub-shells, and this breaks the signal propagation. Practice 👇 labs.iximiuz.com/challenges/g...
labs.iximiuz.com
Ensure a Graceful Termination for a Containerized Node.js Application | Challenge
Can you resolve issues with a Node.js container's termination process to ensure graceful shutdown on 'docker stop'?
090
Ivan Velichko @iximiuz.bsky.social · 25/12/2024
How using an entrypoint script can break the container's graceful termination 🔽 A new Linux & Docker challenge: Can you fix the graceful termination for this containerized Go application? labs.iximiuz.com/challenges/g...
labs.iximiuz.com
Ensure a Graceful Termination for a Container With an Entrypoint Script | Challenge
Can you make a container exit gracefully after the 'docker stop' command while preserving its extensible entrypoint mechanism?
050
Ivan Velichko @iximiuz.bsky.social · 22/12/2024
Why Set GOMEMLIMIT for Go Apps in Containers/Kubernetes Pods? 🔽 - Linux containers isolate network and fs but share host CPU cores/RAM. - cgroup memory limits aren’t considered by the Go runtime. - The Go GC assumes the host’s total memory. - Ignoring cgroup limits risks terminations by OOM Killer.
171
Ivan Velichko @iximiuz.bsky.social · 20/12/2024
What’s new on iximiuz Labs: - More disk, CPU, and RAM for the most popular playgrounds - New Python playground - Two extra flavors of the K8s Omni playground (calico and static routing) - New “Asia” region to improve local experience …and more! 👇 newsletter.iximiuz.com/posts/iximiu...
newsletter.iximiuz.com
iximiuz Labs Update: More and Better Playgrounds and New DevOps Challenges
050
Ivan Velichko @iximiuz.bsky.social · 19/12/2024
Did you know that a typical Docker container has a full-blown Linux distro inside? There are exceptions like `FROM scratch` and distroless images, but their usage is still far from common adoption. To understand what's inside of your containers 👇 labs.iximiuz.com/challenges/s...
labs.iximiuz.com
Create and Start a Container Manually With runc | Challenge
Bring your understanding of Docker to the next level - start an Nginx container performing every main step of the process manually.
031
Ivan Velichko @iximiuz.bsky.social · 17/12/2024
The very first CKA-focused challenge on iximiuz Labs 🥳 - Practice configuring Network Policies to restrict traffic between Kubernetes pods. labs.iximiuz.com/challenges/c...
labs.iximiuz.com
CKA Practice: Configure Network Policies To Restrict Traffic Between Pods | Challenge
This exercise tests your ability to configure kubernetes network nolicies to make sure only pods with specific labels can communicate with each other.
061
Ivan Velichko @iximiuz.bsky.social · 17/12/2024
Play with the new Kubernetes 1.32 release in my Kubernetes "Omni" Playground: - { containerd, cri-o } runtimes - { flannel, cilium, calico, static, none } networking A grand total of 10 Kubernetes "flavors" for all sorts of free-form experimentation! 🚀 labs.iximiuz.com/playgrounds/...
labs.iximiuz.com
Kubernetes Cluster playground | iximiuz Labs
A multi-node Kubernetes cluster provisioned with kubeadm, allowing you to choose your preferred container runtime and networking plugin. Perfect for CKA, CKAD, and CKS preparation. Starts instantly. N...
151
Ivan Velichko @iximiuz.bsky.social · 13/12/2024
Allow me to introduce the 30th iximiuz Labs Playground: Python! 🎉 • Always up-to-date with the latest Python 3.x • Easily switch between versions using pyenv • Manage packages at lightning speed with uv • VS Code, Docker, and more Spins up in ~5s 🚀 labs.iximiuz.com/playgrounds/...
labs.iximiuz.com
Python playground | iximiuz Labs
The latest Python 3.x, pyenv, uv, Docker, VS Code, and a bunch of extensions. Starts instantly. No paywall.
040
Ivan Velichko @iximiuz.bsky.social · 11/12/2024
Did you know you can explore your Kubernetes clusters visually on iximiuz Labs? 🧐 Every Kubernetes playground comes equipped with k'exp - an exploration-tailored Kubernetes UI that I wrote some time ago. Here is me poking around in the K3s playground labs.iximiuz.com/playgrounds/... 👇
070