82 Foundations 137 Platform 18 Delivery 35 Security 162 Others

Skills

All skills

The full list, sorted by domain then by block. Search, filter by job, course, certification or status, and open a skill: it tells what you need to know first, who asks for it, and the path you have left.

Browse the listBack to the skills home

• 434 skills follows the list filters
• 24 domains from the base to security
• 7 jobs offered as a list filter
• 53 courses that teach them
• 7 certifications they help prepare

How to read this catalog A skill, its status for you, its prerequisites: what each line tells you.

Skill, status, prerequisites

The catalog lists know-how, not courses, sorted by domain then by block. Each line gives the workload and the ways to validate it; the skill page gives the rest.

A skill

Not a course

A skill describes what you will be able to do, and several courses can lead to it. Its page says which ones and, when a tool can be chosen, your preferences decide the path followed in your journey.

A status

Computed for you

Acquired when its quizzes are passed or its proof lab is passed, in progress once you have started, ready when its prerequisites are in place, locked while a foundation is missing. The computation happens in your browser, from what you have read and passed (quizzes, labs).

Prerequisites

And a path

Each skill knows what you need to know first. Its page draws the path, from the most upstream foundation to the skill, with the time you have left. Adding it to your goals brings it into your journey, prerequisites included, without removing anything you already aim for.

Search for a skill

434 skills

Assessable by quiz With a proof lab

Catalog

All skills

One line per skill: its workload, its ways of validation and, once you have started, your status. Collapse a domain, or filter: sections without results disappear.

Linux

40

Use a terminal 1

1. Run commands and read their output in a shell 6 lessons · ~4 h 40 · then its quiz

Work on a Linux system 6

1. Find your way around the tree and handle files and text from the command line 13 lessons · ~9 h 05 · then its quiz
2. Install a Linux system and identify its distribution 7 lessons · ~4 h 00 · then its quiz
3. Install and maintain software 5 lessons · ~2 h 10 · then its quiz
4. Manage users, permissions and processes 7 lessons · ~4 h 00 · then its quiz
5. Troubleshoot the network and read the logs 5 lessons · ~2 h 20 · then its quiz
6. Use Bash efficiently: variables, expansions and a first script 6 lessons · ~3 h 40 · then its quiz

Run a Linux server 2

1. Access a machine over SSH 5 lessons · ~2 h 50 · then its quiz
2. Administer a systemd service 6 lessons · ~4 h 10 · then its quiz · a proof lab

Administer a Linux server 8

1. Automate in the shell and schedule tasks 10 lessons · ~6 h 00 · then its quiz
2. Configure and troubleshoot a server's network 11 lessons · ~8 h 00 · then its quiz · a proof lab
3. Maintain a server's software and monitor its resources 14 lessons · ~7 h 35 · then its quiz · a proof lab
4. Manage logical volumes, software RAID and disk encryption 6 lessons · ~4 h 50 · then its quiz · a proof lab
5. Monitor processes and performance 9 lessons · ~5 h 15 · then its quiz
6. Mount network storage: NFS, SMB and iSCSI 3 lessons · ~2 h 30 · then its quiz
7. Prepare local storage: disks, partitions, file systems and mounting 15 lessons · ~10 h 15 · then its quiz
8. Troubleshoot a Linux server 7 lessons · ~5 h 20 · then its quiz · a proof lab

Secure a Linux system 3

1. Filter a server's traffic with a host firewall, NAT included 6 lessons · ~4 h 15 · then its quiz
2. Manage a server's accounts and delegation: users, groups, LDAP directory, sudo and ACLs 5 lessons · ~5 h 00 · then its quiz · a proof lab
3. Run a server under SELinux or AppArmor: modes, contexts and troubleshooting 3 lessons · ~3 h 20 · then its quiz · a proof lab

Process text and files on the command line 5

1. Back up and restore a directory tree with tar 1 lesson · ~30 min · then its quiz
2. Build a pipeline that extracts, sorts, counts, compares and follows a text stream 5 lessons · ~3 h 00 · then its quiz
3. Download a file and check its integrity and authenticity 2 lessons · ~1 h 00 · then its quiz
4. Edit a configuration file in Vim: modes, motions, substitution 1 lesson · ~30 min · then its quiz
5. Transform files and streams with sed, awk and regular expressions 4 lessons · ~2 h 00 · then its quiz

Customize your working environment 2

1. Configure your terminal editor and its plugins (advanced Vim, Neovim, Micro) 3 lessons · ~1 h 20 · then its quiz
2. Customize your shell or adopt another one (Bash, Zsh, Fish) 3 lessons · ~1 h 30 · then its quiz

Manage packages and reproducible environments with Nix 2

1. Describe a reproducible environment in Nix: shell.nix, flakes and NixOS configuration 6 lessons · ~3 h 00 · then its quiz
2. Install Nix and manage packages with profiles and generations 5 lessons · ~2 h 30 · then its quiz

Isolate and limit processes with the kernel 1

1. Limit and isolate a process with cgroups, namespaces and capabilities 5 lessons · ~2 h 50 · then its quiz

Trace and harden the kernel with eBPF 2

1. Restrict and audit eBPF on a server: block unprivileged loading, delegate CAP_BPF, harden the JIT and inventory loaded programs 3 lessons · ~1 h 55 · then its quiz
2. Trace the Linux kernel live with bpftrace: choose a probe, write a one-liner and aggregate into counters and histograms 2 lessons · ~1 h 15 · then its quiz

Harden a Linux server against a baseline 8

1. Confine a service: mandatory access control (SELinux or AppArmor), then systemd sandboxing 2 lessons · ~2 h 30 · then its quiz · a proof lab SELinux or AppArmor
2. Harden a NixOS server declaratively: versioned measures, test before switching, runtime checks and rollback to a healthy generation 2 lessons · ~1 h 15 · then its quiz
3. Harden a server's access and privileges: SSH, PAM, sudo, permissions and scheduling 5 lessons · ~2 h 05 · then its quiz
4. Harden boot, mounts and the local session: GRUB, nodev, nosuid, noexec, banners, dconf 4 lessons · ~1 h 30 · then its quiz
5. Harden the running kernel: persistent sysctl parameters and blocked modules 2 lessons · ~1 h 00 · then its quiz
6. Measure a server's gap to a hardening baseline and prioritize the measures (ANSSI-BP-028, CIS) 2 lessons · ~1 h 05 · then its quiz
7. Rebuild a KSPP-hardened kernel and prove its options at boot 1 lesson · ~25 min · then its quiz
8. Trace who did what on a Linux server with auditd: persistent rules, ausearch and aureport 1 lesson · ~55 min · then its quiz

Networking

16

Understand and observe an IP network 5

1. Address in IPv4 and read a routing table 2 lessons · ~55 min · then its quiz
2. Operate IPv6: link-local, SLAAC, NDP and dual-stack 1 lesson · ~35 min · then its quiz
3. Reason in layers and observe a network 3 lessons · ~1 h 30 · then its quiz
4. Tell TCP from UDP and interpret refusals, timeouts and resets 1 lesson · ~25 min · then its quiz
5. Understand the local network: Ethernet, MAC and ARP 2 lessons · ~50 min · then its quiz

Operate and troubleshoot network services 5

1. Capture and read network traffic 1 lesson · ~40 min · then its quiz
2. Translate addresses: SNAT, DNAT and port forwarding 2 lessons · ~1 h 35 · then its quiz
3. Troubleshoot a DNS failure 1 lesson · ~40 min · then its quiz
4. Troubleshoot an unreachable service end to end 4 lessons · ~2 h 05 · then its quiz
5. Understand and troubleshoot DHCP address assignment 1 lesson · ~35 min · then its quiz

Troubleshoot application protocols 2

1. Read an HTTP(S) exchange and troubleshoot an application error 1 lesson · ~40 min · then its quiz
2. Troubleshoot email deliverability 1 lesson · ~40 min · then its quiz

Segment, filter and encrypt 4

1. Filter traffic with a stateful firewall 2 lessons · ~1 h 10 · then its quiz
2. Inventory the exposed services of a host or a network 1 lesson · ~55 min · then its quiz
3. Segment a network with VLANs 1 lesson · ~30 min · then its quiz
4. Troubleshoot a TLS error and produce a certificate 2 lessons · ~1 h 10 · then its quiz

Architecture

6

Read and analyze a services architecture 6

1. Analyze an architecture's entry point: proxies, load balancing and edge 4 lessons · ~2 h 25 · then its quiz
2. Assess how an architecture is operated: recovery, admin access, detection and impact 5 lessons · ~3 h 10 · then its quiz
3. Classify an architecture's data and decide what to back up or replicate 6 lessons · ~3 h 55 · then its quiz
4. Follow an architecture's asynchronous exchanges and predict their failures 4 lessons · ~2 h 40 · then its quiz
5. Identify an architecture's cross-cutting dependencies and trust boundaries 7 lessons · ~4 h 45 · then its quiz
6. Read an architecture diagram: role, flows, state and dependencies of each component 5 lessons · ~3 h 20 · then its quiz

Operations

7

Keep a fleet in operational condition 6

1. Document operations: runbooks, checklists, decisions 6 lessons · ~2 h 55 · then its quiz
2. Ensure continuity: high availability, recovery, backups 1 lesson · ~35 min · then its quiz
3. Maintain a fleet: updates, drift, debt 5 lessons · ~2 h 50 · then its quiz
4. Plan a fleet's capacity 1 lesson · ~35 min · then its quiz
5. Respond to an incident and write a postmortem 2 lessons · ~1 h 05 · then its quiz
6. Run a sustainable on-call rotation 1 lesson · ~30 min · then its quiz

Understand the job 1

1. Understand the administrator's role and responsibilities 1 lesson · ~30 min · then its quiz

Observability

7

Observe a service and its platform 7

1. Build a dashboard that answers an operations question 1 lesson · ~1 h 10 · then its quiz
2. Centralize a service's logs and query them 2 lessons · ~1 h 50 · then its quiz
3. Collect a service's metrics and check their quality 3 lessons · ~3 h 05 · then its quiz
4. Define an actionable alert and route it without noise 1 lesson · ~1 h 05 · then its quiz
5. Instrument a service so it emits useful telemetry 1 lesson · ~50 min · then its quiz
6. Query a service's metrics to answer an operations question 2 lessons · ~2 h 25 · then its quiz
7. Route telemetry through a collection pipeline 2 lessons · ~1 h 15 · then its quiz

Git

9

Collaborate with Git 4

1. Collaborate on a remote repository and resolve a conflict 9 lessons · ~4 h 20 · then its quiz
2. Standardize a team's commit messages and have them checked automatically 1 lesson · ~35 min · then its quiz
3. Understand and use Git history 15 lessons · ~8 h 10 · then its quiz
4. Work with branches and merge 8 lessons · ~3 h 45 · then its quiz

Repair and investigate the history 2

1. Investigate the history 9 lessons · ~4 h 05 · then its quiz
2. Repair and rewrite history 12 lessons · ~5 h 10 · then its quiz

Host and assemble Git repositories 3

1. Choose the access protocol to a remote repository and store its credentials safely 2 lessons · ~1 h 10 · then its quiz
2. Host a Git repository on your own server and transfer it offline 2 lessons · ~1 h 05 · then its quiz
3. Include an external repository in a project with submodule or subtree 2 lessons · ~1 h 10 · then its quiz

Scripting

17

Automate with code 2

1. Read and transform data (JSON, YAML, APIs) 9 lessons · ~10 h 15 · then its quiz Python or Go
2. Write a tested command-line tool 8 lessons · ~8 h 25 · then its quiz Python or Go

Industrialize a Python or Go project 4

1. Audit the quality and security of a project's code and dependencies 1 lesson · ~1 h 10 · then its quiz Python or Go
2. Manage Python versions, dependencies and installed tools (pyenv, pipx, Poetry) 3 lessons · ~2 h 10 · then its quiz
3. Organize code into modules and publish a package on PyPI 2 lessons · ~1 h 30 · then its quiz
4. Test in isolation and across Python versions (unittest, mock, tox) 3 lessons · ~3 h 05 · then its quiz

Master the Python language 5

1. Design Python classes: encapsulation, inheritance, abc and mixins 2 lessons · ~1 h 50 · then its quiz
2. Manipulate lists, tuples, sets and slices in Python 4 lessons · ~3 h 40 · then its quiz
3. Model and type data in Python with dataclasses, Enum and annotations 4 lessons · ~2 h 05 · then its quiz
4. Process and generate text in Python: strings, regex, dates and Jinja templates 5 lessons · ~4 h 30 · then its quiz
5. Write idiomatic Python: decorators, generators, context managers and itertools 4 lessons · ~3 h 00 · then its quiz

Build applications and automate with Python 4

1. Automate a fleet's administration from Python: SSH, deployment and network scanning 3 lessons · ~3 h 15 · then its quiz
2. Build a terminal interface in Python with Rich and Textual 2 lessons · ~1 h 35 · then its quiz
3. Expose a REST API in Python and protect it with JWT 3 lessons · ~2 h 30 · then its quiz
4. Persist data in Python with SQLAlchemy and version the schema with Alembic 2 lessons · ~1 h 35 · then its quiz

Write the basics of a Go program 2

1. Model data in Go: structs, slices, maps and pointers 3 lessons · ~55 min
2. Structure a Go program: functions, methods, interfaces, errors, packages and modules 5 lessons · ~2 h 20

Containers

11

Build and run containers 5

1. Build an OCI image 4 lessons · ~3 h 15 · then its quiz Docker or Podman
2. Operate and troubleshoot Docker containers: lifecycle, logs, inspection and daemon 2 lessons · ~1 h 35 · then its quiz
3. Publish an image to a registry: access token, tag, digest and publishing from CI 1 lesson · ~40 min · then its quiz Docker or Podman
4. Run containers, persist data and connect them 5 lessons · ~3 h 45 · then its quiz Docker or Podman
5. Secure the installation and the containers 3 lessons · ~2 h 35 · then its quiz Docker or Podman

Containerize without a daemon or root with Podman 3

1. Group containers into pods and replay a Kubernetes manifest locally 2 lessons · ~1 h 20
2. Run Podman containers as systemd services with Quadlet 1 lesson · ~1 h 20
3. Set up rootless Podman and explain its daemonless model 2 lessons · ~1 h 10

Understand what isolates a container 3

1. Explain and inspect a Linux container's isolation: namespaces, cgroups, capabilities, seccomp 3 lessons · ~1 h 55 · then its quiz
2. Place and drive a container's execution layers: OCI runtime, engine and orchestrator 3 lessons · ~1 h 30 · then its quiz
3. Read an OCI image and check its integrity: index, manifest, config, layers and digests 3 lessons · ~2 h 05 · then its quiz

Kubernetes

50

Deliver an application on Kubernetes 8

1. Adapt manifests per environment with Kustomize 1 lesson · ~55 min · then its quiz
2. Change Kubernetes resources declaratively without drifting from Git 3 lessons · ~2 h 20 · then its quiz
3. Configure an application with ConfigMaps and Secrets 2 lessons · ~2 h 25 · then its quiz
4. Configure kubectl access to your clusters: kubeconfig, contexts and default namespace 1 lesson · ~30 min · then its quiz
5. Deploy and observe an application on Kubernetes 15 lessons · ~9 h 20 · then its quiz
6. Expose an application with a Service, Ingress or Gateway 4 lessons · ~4 h 05 · then its quiz
7. Isolate traffic between Pods with NetworkPolicies 1 lesson · ~2 h 05 · then its quiz · a proof lab
8. Update an application and roll back 2 lessons · ~2 h 40 · then its quiz

Design Kubernetes workloads 8

1. Compose a multi-container Pod: init, sidecar, shared volumes 2 lessons · ~3 h 10 · then its quiz
2. Deploy a stateful application (StatefulSet) 1 lesson · ~1 h 10 · then its quiz
3. Keep an application available during disruptions 2 lessons · ~1 h 05 · then its quiz
4. Make a workload reliable: health probes and resources 2 lessons · ~2 h 15 · then its quiz
5. Provide persistent storage to an application 2 lessons · ~2 h 55 · then its quiz
6. Run an agent on every node (DaemonSet) 1 lesson · ~1 h 15 · then its quiz
7. Run one-off and scheduled tasks (Job, CronJob) 1 lesson · ~1 h 25 · then its quiz
8. Scale an application automatically 3 lessons · ~2 h 05 · then its quiz

Observe and troubleshoot a cluster 5

1. Observe a cluster's health and resource usage 3 lessons · ~1 h 50 · then its quiz
2. Run a cluster's operating routine 1 lesson · ~35 min · then its quiz
3. Troubleshoot a failing application on Kubernetes 7 lessons · ~5 h 55 · then its quiz
4. Troubleshoot cluster connectivity and DNS 2 lessons · ~1 h 15 · then its quiz
5. Troubleshoot the control plane and nodes 1 lesson · ~1 h 10 · then its quiz

Understand, install and maintain a cluster 10

1. Back up and restore a cluster's state 2 lessons · ~2 h 05 · then its quiz
2. Cap a namespace's resources 1 lesson · ~1 h 10 · then its quiz
3. Control where Pods are placed 2 lessons · ~2 h 20 · then its quiz
4. Detect and migrate deprecated APIs before an upgrade 1 lesson · ~45 min · then its quiz
5. Explain the architecture of a Kubernetes cluster 4 lessons · ~3 h 10 · then its quiz
6. Install a Kubernetes cluster 3 lessons · ~2 h 20 · then its quiz kubeadm or Kubespray or Talos or RKE2 or k0s
7. Maintain and manage nodes without service interruption 3 lessons · ~1 h 45 · then its quiz
8. Make the control plane of a kubeadm cluster highly available 1 lesson · ~45 min · then its quiz
9. Upgrade a kubeadm cluster by one minor version 1 lesson · ~1 h 25 · then its quiz
10. Use custom resources and operators 2 lessons · ~1 h 00 · then its quiz

Secure a Kubernetes cluster 9

1. Authorize access to the Kubernetes API with RBAC 1 lesson · ~1 h 25 · then its quiz
2. Confine a container against the host kernel (seccomp, AppArmor) 2 lessons · ~2 h 10 · then its quiz
3. Encrypt and authenticate traffic between Pods 1 lesson · ~1 h 15 · then its quiz
4. Give a workload a minimal identity (ServiceAccount) 1 lesson · ~50 min · then its quiz
5. Harden a cluster's components with the CIS Benchmark 1 lesson · ~1 h 30 · then its quiz
6. Harden a Pod's execution context (securityContext) 1 lesson · ~1 h 30 · then its quiz · a proof lab
7. Isolate a Pod in a sandboxed runtime (RuntimeClass) 1 lesson · ~1 h 20 · then its quiz
8. Make the cluster reject what breaks a security rule 3 lessons · ~2 h 20 · then its quiz ValidatingAdmissionPolicy or Kyverno or Gatekeeper
9. Trace who acted on the API with the Kubernetes audit log 1 lesson · ~1 h 35 · then its quiz

Deploy applications with Helm 2

1. Find a Helm chart, install a release and drive the helm command 4 lessons · ~4 h 00 · then its quiz
2. Keep a Helm release alive: values per environment, upgrade, rollback, troubleshooting and CRDs 4 lessons · ~4 h 10 · then its quiz

Design and distribute Helm charts 3

1. Compose and harden charts: dependencies, values API, schema, tests and documentation 3 lessons · ~3 h 25 · then its quiz
2. Publish trusted charts: RBAC rights, signing, OCI registry and CI/CD pipeline 4 lessons · ~3 h 40 · then its quiz
3. Write a Helm chart: structure, templates, helpers and production patterns 2 lessons · ~2 h 20 · then its quiz

Make an application cloud native on Kubernetes 5

1. Assess a CNCF project before adopting it: maturity, governance and project health 2 lessons · ~1 h 05 · then its quiz
2. Audit an application factor by factor (12-factor) on Kubernetes and fix its gaps 2 lessons · ~1 h 25 · then its quiz
3. Enforce timeouts, retries and identity-based authorization between services with a mesh 2 lessons · ~1 h 20 · then its quiz
4. Match a cluster's node count to pending Pods and shrink it without disrupting the service 2 lessons · ~1 h 15 · then its quiz
5. Serve an application with scale-to-zero on Knative and measure its cold start 2 lessons · ~1 h 20 · then its quiz

CI/CD

15

Understand and build a delivery chain, whatever the tool 4

1. Build an artifact once and promote it across environments 2 lessons · ~2 h 00 · then its quiz
2. Read a pipeline and tell what it does on each event 4 lessons · ~2 h 15 · then its quiz
3. Spot the risks of a delivery chain 2 lessons · ~55 min · then its quiz
4. Write the integration stages in the repository and make them fail usefully 3 lessons · ~2 h 00 · then its quiz

Build and run CI 5

1. Deliver to environments, artifacts included 7 lessons · ~3 h 40 · then its quiz GitHub Actions or GitLab CI
2. Design dynamic pipelines (variables, conditions, reuse) 10 lessons · ~7 h 10 · then its quiz GitHub Actions or GitLab CI
3. Govern and tool an organization's CI 12 lessons · ~7 h 20 · then its quiz GitHub Actions or GitLab CI
4. Speed up and debug a pipeline 9 lessons · ~4 h 45 · then its quiz GitHub Actions or GitLab CI
5. Write a first pipeline and read its failures 5 lessons · ~3 h 25 · then its quiz · a proof lab GitHub Actions or GitLab CI

Secure the delivery chain 5

1. Audit a CI workflow and model its threats 4 lessons · ~2 h 45 · then its quiz GitHub Actions or GitLab CI
2. Harden and isolate CI runners 8 lessons · ~4 h 50 · then its quiz GitHub Actions or GitLab CI
3. Produce an artifact's SBOM and qualify its vulnerabilities with a VEX 2 lessons · ~1 h 50 · then its quiz · a proof lab
4. Secure a pipeline definition: permissions, secrets, pinning and triggers 15 lessons · ~9 h 15 · then its quiz · a proof lab GitHub Actions or GitLab CI
5. Sign an artifact, attest its provenance and verify it before deployment 5 lessons · ~2 h 50 · then its quiz · a proof lab GitHub Actions or GitLab CI

Make a GitLab CI pipeline reliable 1

1. Make a GitLab CI pipeline resilient to transient errors: retry, timeout, interruptible, resource_group 2 lessons · ~1 h 35 · then its quiz

GitOps

3

Deliver with GitOps 3

1. Deploy an application with GitOps 7 lessons · ~4 h 55 · then its quiz Argo CD or Flux
2. Operate and secure GitOps delivery 6 lessons · ~3 h 10 · then its quiz Argo CD or Flux
3. Synchronize and promote across environments 2 lessons · ~1 h 10 · then its quiz Argo CD or Flux

Provisioning

28

Provision as code with Terraform 12

1. Consume and version Terraform modules reproducibly 3 lessons · ~4 h 05 · then its quiz
2. Control the ordering, replacement and guardrails of Terraform resources 3 lessons · ~3 h 40 · then its quiz
3. Declare Terraform resources and data sources with pinned providers 6 lessons · ~6 h 50 · then its quiz
4. Design, structure and test a reusable Terraform module 6 lessons · ~7 h 55 · then its quiz
5. Generate Terraform resources in a controlled way with expressions, functions, count and for_each 7 lessons · ~8 h 55 · then its quiz
6. Handle sensitive data in Terraform without exposing it in outputs or state 4 lessons · ~3 h 30 · then its quiz
7. Initialise, run and troubleshoot a Terraform project, from init to destroy 9 lessons · ~8 h 10 · then its quiz
8. Inspect and repair a Terraform state, move or remove resources without recreating them 6 lessons · ~6 h 15 · then its quiz
9. Organize several environments and a Terraform repository without dangerous coupling 6 lessons · ~8 h 05 · then its quiz
10. Parameterize a Terraform project and expose its results without duplicating values 4 lessons · ~4 h 00 · then its quiz
11. Run Terraform non-interactively in a pipeline, with guardrails 1 lesson · ~1 h 35 · then its quiz
12. Share a remote, locked and recoverable Terraform state 4 lessons · ~4 h 00 · then its quiz

Build machine images with Packer 3

1. Configure the image, transform the artifact and industrialize the Packer build chain 3 lessons · ~2 h 00
2. Install Packer and complete a first image build 2 lessons · ~1 h 05
3. Write a parameterized Packer HCL2 template 2 lessons · ~1 h 00

Provision and govern in the cloud with Terraform 3

1. Maintain an AWS infrastructure under Terraform: locked S3 state, import, moved and drift 2 lessons · ~2 h 30
2. Provision an AWS infrastructure with Terraform: EC2, networking, IAM, autoscaling 4 lessons · ~4 h 15
3. Run and govern Terraform remotely with HCP Terraform 8 lessons · ~6 h 35 · then its quiz

Reason about and maintain infrastructure as code, whatever the tool 7

1. Choose an IaC approach and record the decision: provision or configure, change or replace, push or pull 4 lessons · ~1 h 40 · then its quiz
2. Choose the IaC tool family that fits the problem: resources, configuration, images, language 5 lessons · ~1 h 55 · then its quiz
3. Deliver infrastructure as code under control: approved plan, policies, engine identity and cost 4 lessons · ~1 h 40 · then its quiz
4. Evolve an existing infrastructure in code: import, drift, replacement and destruction 3 lessons · ~1 h 15 · then its quiz
5. Keep an IaC repository healthy: layered structure, plan review, testing pyramid and secrets out of the code 4 lessons · ~1 h 35 · then its quiz
6. Predict what an IaC tool will create, change or destroy: declarative model, idempotence, state and plan 4 lessons · ~1 h 35 · then its quiz
7. Structure infrastructure as code at scale: stacks, versioned modules, environments and debt 4 lessons · ~1 h 40 · then its quiz

Provision and industrialise with Pulumi 2

1. Industrialise a Pulumi project: components, tests with mocks, preview in CI and a secured stack 3 lessons · ~40 min
2. Provision infrastructure with Pulumi in Python: project, stack, state, configuration and secrets 4 lessons · ~45 min

Test cloud code on an emulator 1

1. Test infrastructure code without a cloud account: apply, empty plan and destroy, locally and in CI 5 lessons · ~2 h 40 · then its quiz · a proof lab

Configuration management

48

Configure a fleet with Ansible 9

1. Control playbook execution: parallelism, async, delegation and inclusion 4 lessons · ~5 h 25 · then its quiz
2. Describe a fleet in a static Ansible inventory: groups, variables and patterns 7 lessons · ~5 h 25 · then its quiz
3. Install Ansible and configure its control node 10 lessons · ~7 h 00 · then its quiz
4. Parameterise an Ansible playbook: variables, facts, precedence and Jinja2 filters 9 lessons · ~10 h 40 · then its quiz
5. Prepare managed nodes and run ad hoc commands 7 lessons · ~5 h 25 · then its quiz
6. Protect the secrets of an Ansible project: Ansible Vault and external vaults 9 lessons · ~9 h 25 · then its quiz
7. Structure Ansible into roles and collections 14 lessons · ~13 h 40 · then its quiz
8. Troubleshoot and run Ansible in production: verbosity, debugger, idempotence and ansible-pull 10 lessons · ~8 h 30 · then its quiz
9. Write a readable, idempotent Ansible playbook 15 lessons · ~11 h 35 · then its quiz

Write robust playbooks 5

1. Check preconditions and synchronize a playbook's execution 6 lessons · ~5 h 15 · then its quiz
2. Generate a configuration file through Ansible from a Jinja2 template 5 lessons · ~6 h 35 · then its quiz
3. Handle a failed Ansible task: recover, ignore or stop the play 3 lessons · ~4 h 00 · then its quiz
4. Make Ansible tasks conditional and repeat them with when and loop 3 lessons · ~4 h 00 · then its quiz
5. Run a raw command through Ansible idempotently and report it correctly 2 lessons · ~1 h 40 · then its quiz

Administer a system with Ansible 9

1. Connect Ansible to a Windows fleet 1 lesson · ~25 min · then its quiz
2. Copy, fetch and archive files with Ansible idempotently 4 lessons · ~3 h 55 · then its quiz
3. Download a verified artifact and talk to an HTTP API from a playbook 2 lessons · ~2 h 25 · then its quiz
4. Drive a host's services, scheduled tasks, hostname and reboots with Ansible 5 lessons · ~3 h 20 · then its quiz
5. Edit an existing configuration file with Ansible without rewriting it 3 lessons · ~3 h 15 · then its quiz
6. Harden a host with Ansible: firewall, SELinux and kernel parameters 3 lessons · ~3 h 35 · then its quiz
7. Install packages and declare repositories with Ansible across distributions 4 lessons · ~3 h 50 · then its quiz
8. Manage accounts, groups, SSH keys and sudo rights with Ansible 4 lessons · ~4 h 25 · then its quiz
9. Partition, format and mount storage with Ansible, LVM included 4 lessons · ~5 h 00 · then its quiz

Industrialize Ansible roles 4

1. Assemble Ansible roles in a playbook 3 lessons · ~3 h 10 · then its quiz
2. Choose, install and verify Galaxy roles and collections 4 lessons · ~3 h 30 · then its quiz
3. Test an Ansible role in CI and publish it with a version on Galaxy 2 lessons · ~2 h 45 · then its quiz GitHub Actions or GitLab CI
4. Test an Ansible role with Molecule and pass the ansible-lint production profile 7 lessons · ~10 h 10 · then its quiz

Tool and extend Ansible 4

1. Build, publish and troubleshoot an Ansible Execution Environment with ansible-builder 3 lessons · ~4 h 25 · then its quiz
2. Develop an Ansible module or plugin in Python 3 lessons · ~2 h 35 · then its quiz
3. Run a playbook in an Ansible Execution Environment with ansible-navigator 4 lessons · ~3 h 45 · then its quiz
4. Set up an Ansible development workstation: editor and static analysis 2 lessons · ~1 h 35 · then its quiz

Configure a fleet with Chef 8

1. Lock cookbooks with Policyfiles and deliver them without a server 4 lessons · ~2 h 15 · then its quiz
2. Make a cookbook configurable and portable: attributes, templates, Ohai 3 lessons · ~1 h 45 · then its quiz
3. Measure and fix a server's compliance with InSpec and Chef 1 lesson · ~45 min · then its quiz
4. Protect a Chef fleet's secrets: encrypted data bags and chef-vault 2 lessons · ~1 h 35 · then its quiz
5. Run a fleet with a CINC server: enrollment, search, policy groups, pull mode 4 lessons · ~2 h 45 · then its quiz
6. Structure a maintainable cookbook: recipes, custom resources, notifications, lint 4 lessons · ~2 h 05 · then its quiz
7. Test a cookbook before and after convergence: ChefSpec, InSpec, Test Kitchen, CI 5 lessons · ~3 h 05 · then its quiz
8. Write a Chef cookbook and converge it idempotently, in a container then on a VM 6 lessons · ~3 h 30 · then its quiz

Drive a fleet's compliance with Rudder 2

1. Audit a fleet's compliance with Rudder: Audit mode, Rudder Score and OpenSCAP 2 lessons · ~55 min
2. Set up Rudder and apply a first rule to a group of nodes 3 lessons · ~1 h 40

Configure a fleet with Salt 5

1. Coordinate a Salt fleet: multi-node orchestration, Salt SSH and Reactor 3 lessons · ~1 h 25 · then its quiz
2. Describe a server's desired state in idempotent Salt states 2 lessons · ~2 h 05 · then its quiz
3. Drive a fleet remotely with Salt: master, minions, keys and targeting 2 lessons · ~1 h 25 · then its quiz
4. Industrialize Salt: GPG secrets, states from Git, a hardened master, automatic enrollment 4 lessons · ~3 h 15 · then its quiz
5. Make states generic with grains, pillars, Jinja and managed files 4 lessons · ~2 h 30 · then its quiz

Build an Ansible fleet's inventory 2

1. Build an Ansible inventory during the play or with a custom script 2 lessons · ~2 h 00 · then its quiz
2. Discover a fleet's hosts automatically with an Ansible inventory plugin 5 lessons · ~4 h 00 · then its quiz

Security

24

Write, verify and deliver Rego policies 4

1. Enforce Rego policies on configuration files in a CI pipeline 1 lesson · ~45 min · then its quiz
2. Package, sign and distribute Rego policies to OPA instances 1 lesson · ~40 min · then its quiz
3. Verify a Rego policy: tests, coverage, lint and CI checks 3 lessons · ~1 h 50 · then its quiz
4. Write a correct Rego policy in OPA 1.x syntax, and predict what it returns 4 lessons · ~2 h 35 · then its quiz

Secure the delivery chain 2

1. Assess your software supply chain's exposure and respond to a compromised component 7 lessons · ~3 h 00 · then its quiz
2. Replace the shared secret with a verifiable machine identity (OIDC) 4 lessons · ~2 h 10 · then its quiz · a proof lab

Hold a system's secrets, from inventory to leak 6

1. Detect an exposed secret, measure the reach of the leak and deal with it 4 lessons · ~2 h 10 · then its quiz
2. Issue a secret with a bounded lifetime, renew it and revoke it in an emergency 4 lessons · ~2 h 25 · then its quiz
3. List a system's secrets, rank them by criticality and keep their register 3 lessons · ~1 h 25 · then its quiz
4. Run a vault in production: initialise, seal, back up and monitor it 3 lessons · ~2 h 10 · then its quiz
5. Scope access to a vault to the strict minimum and explain a denial 2 lessons · ~1 h 25 · then its quiz
6. Store a secret in a vault and read it without ever writing it in clear 3 lessons · ~1 h 35 · then its quiz

Think about security at every step 6

1. Analyze code and dependencies 7 lessons · ~2 h 55 · then its quiz · a proof lab
2. Detect and contain at runtime 1 lesson · ~25 min · then its quiz · a proof lab
3. Harden the build, the images and the IaC 6 lessons · ~4 h 00 · then its quiz · a proof lab
4. Think DevSecOps: risks, responsibilities, defense in depth 3 lessons · ~1 h 25 · then its quiz
5. Threat-model an application 6 lessons · ~2 h 30 · then its quiz · a proof lab
6. Triage vulnerabilities and date the exceptions 2 lessons · ~55 min · then its quiz · a proof lab

Go deeper into end-to-end security 3

1. Analyse an application with specialised scanners: secrets, SAST, dependencies, Scorecard and DAST 7 lessons · ~3 h 25 · then its quiz
2. Analyse an attack on a pipeline: secrets, hijacked tools and provenance 8 lessons · ~4 h 05 · then its quiz
3. Control what reaches production and detect deviations at runtime 9 lessons · ~7 h 15 · then its quiz · a proof lab

Understand threats and reason about defense 3

1. Choose and justify a security measure from the principles, and classify it by type 10 lessons · ~3 h 55 · then its quiz
2. Recognize a common threat from its indicators and choose the measure that stops it 7 lessons · ~2 h 50 · then its quiz
3. Reconstruct an intrusion phase by phase and place one control per phase 11 lessons · ~4 h 10 · then its quiz

DevSecOps

4

Keep DevSecOps alive over time 4

1. Choose a branching model and a delivery strategy 11 lessons · ~5 h 05 · then its quiz
2. Explain DevOps principles and spot an organisational anti-pattern 8 lessons · ~4 h 20 · then its quiz
3. Measure and scale DevSecOps across the organization 11 lessons · ~17 h 40 · then its quiz
4. Observe, respond to incidents, hold an SLO 8 lessons · ~4 h 30 · then its quiz · a proof lab

Identity and access

8

Centralize identity and access 8

1. Connect an application to an identity provider with OpenID Connect, validate its tokens and troubleshoot an OIDC or SAML integration 3 lessons · ~1 h 55 · then its quiz
2. Connect the Kubernetes API server and Vault to an OIDC identity provider, turn token groups into limited rights and diagnose a denial 1 lesson · ~45 min · then its quiz
3. Federate an LDAP or Active Directory directory and a partner identity provider into Keycloak 2 lessons · ~1 h 20 · then its quiz
4. Manage the account lifecycle in Keycloak with SCIM and Workflows, handle a departure and run an access review 1 lesson · ~45 min · then its quiz
5. Protect an API with OAuth 2 tokens: audience, scopes, machine access and choosing the flow of a client without a browser 1 lesson · ~55 min · then its quiz
6. Require a second factor per group in Keycloak, with forced enrolment and recovery, and set a password policy compliant with NIST SP 800-63B-4 1 lesson · ~40 min · then its quiz
7. Run Keycloak in production: TLS proxy, restored backup, version upgrade, emergency access and a realm described in Terraform 2 lessons · ~1 h 25 · then its quiz
8. Set up Keycloak on PostgreSQL and administer a realm: users, groups, roles and event logs 2 lessons · ~1 h 05 · then its quiz

Virtualization

20

Understand virtualization and choose a type of hypervisor 1

1. Choose a type of virtualization and explain what a VM shares with its host 4 lessons · ~1 h 35 · then its quiz

Set up a hypervisor and its instances (KVM, Proxmox VE or Incus) 4

1. Connect instances to the network and expose their services: NAT, bridge, VLAN and troubleshooting 5 lessons · ~3 h 35 · then its quiz KVM or Proxmox or Incus
2. Create ready-to-use instances: storage, creation, configured first boot and guest agent 3 lessons · ~2 h 50 · then its quiz KVM or Proxmox or Incus
3. Describe and deploy instances in Terraform with the hypervisor's provider 1 lesson · ~1 h 10 · then its quiz KVM or Proxmox or Incus
4. Set up a hypervisor and check that it works 2 lessons · ~1 h 35 · then its quiz KVM or Proxmox or Incus

Virtualize with KVM and libvirt 4

1. Back up, clone and live-migrate a KVM VM with libvirt 2 lessons · ~1 h 40 · then its quiz
2. Confine a KVM VM with libvirt: sVirt, Secure Boot, vTPM and nwfilter filtering 1 lesson · ~45 min · then its quiz
3. Fit a KVM VM to the host hardware: CPU, virtio, disk cache and VFIO passthrough 2 lessons · ~1 h 25 · then its quiz
4. Operate KVM VMs day to day with virsh, the guest agent and remote access 3 lessons · ~2 h 25 · then its quiz

Operate an Incus host 5

1. Automate Incus with Ansible: connection plugin, provisioning and custom images 2 lessons · ~50 min
2. Migrate to Incus: VMware VMs, an LXD installation, a physical or virtual machine 3 lessons · ~45 min
3. Operate Incus instances: OCI images, storage, profiles, projects and GPUs 4 lessons · ~45 min
4. Secure an Incus server and its remote administration 2 lessons · ~25 min
5. Troubleshoot an Incus VM stuck at boot 1 lesson · ~35 min

Operate a Proxmox VE platform 3

1. Back up and restore VMs with Proxmox Backup Server 1 lesson · ~20 min
2. Design Proxmox access rights: roles, paths, groups and tokens 1 lesson · ~30 min
3. Drive Proxmox with Ansible: dynamic inventory and community.proxmox modules 2 lessons · ~40 min

Build a private cloud with Incus 3

1. Administer Incus OS nodes through the API: seed installation, A/B updates, Tailscale, backup, monitoring and fleet 5 lessons · ~2 h 05
2. Build and run an Incus cluster: joining, quorum and roles, workers, shared CephFS storage 4 lessons · ~1 h 30
3. Isolate tenants on Incus: OVN VPCs, load balancer, ACLs, quotas, scoped credentials and a 3-tier deployment in Terraform 4 lessons · ~1 h 00

Cloud

45

Build a cloud infrastructure, Scaleway or Outscale 4

1. Access your cloud account and drive it from the command line 4 lessons · ~2 h 45 · then its quiz Outscale or Scaleway
2. Build a multi-zone private cloud network and filter its traffic 4 lessons · ~3 h 20 · then its quiz Outscale or Scaleway
3. Choose and operate cloud storage, block and object, up to a restored backup 5 lessons · ~4 h 45 · then its quiz Outscale or Scaleway
4. Size, create and destroy cloud instances, GPUs included 3 lessons · ~2 h 40 · then its quiz Outscale or Scaleway

Industrialize the cloud as code: Terraform, Packer, Ansible 3

1. Build a hardened machine image with Packer and clean up its build leftovers 1 lesson · ~1 h 00 · then its quiz Outscale or Scaleway
2. Configure a cloud fleet with Ansible through a dynamic inventory, idempotently 1 lesson · ~35 min · then its quiz Outscale or Scaleway
3. Provision a cloud infrastructure in Terraform, with state on the provider's object storage 4 lessons · ~3 h 10 · then its quiz Outscale or Scaleway

Run a managed Kubernetes in the cloud 1

1. Create a managed Kubernetes cluster, size its node pools and access it with kubectl 5 lessons · ~4 h 50 · then its quiz Outscale or Scaleway

Govern and secure a Scaleway account 3

1. Entrust secrets and encryption keys to Scaleway, rotate and revoke them 4 lessons · ~3 h 15 · then its quiz
2. Give a Scaleway identity the least privilege and prove it 3 lessons · ~2 h 30 · then its quiz
3. Partition by project and keep Scaleway costs under control 2 lessons · ~1 h 10 · then its quiz

Operate Scaleway managed services 4

1. Deliver an application on Kapsule: private registry, Ingress or Load Balancer, persistent volumes 4 lessons · ~3 h 40 · then its quiz
2. Expose a Scaleway service: Public Gateway, bastion and Load Balancer 4 lessons · ~3 h 35 · then its quiz
3. Observe your Scaleway resources with Cockpit and find a past incident 2 lessons · ~1 h 45 · then its quiz
4. Operate a managed Scaleway PostgreSQL database on a private network, back it up and restore it 2 lessons · ~2 h 10 · then its quiz

Make Outscale reliable, audit and extend it: high availability, Well-Architected, Talos 5

1. Assess an Outscale architecture pillar by pillar with the Well-Architected grid 8 lessons · ~5 h 35
2. Choose your Outscale region, API and qualification level 5 lessons · ~1 h 45
3. Integrate a self-managed Talos Kubernetes cluster with Outscale: OMI, CCM, CSI and fGPU 2 lessons · ~2 h 00
4. Make a service highly available across Outscale subregions: LBU and DNS, or HAProxy and a floating EIP 3 lessons · ~3 h 00
5. Structure Outscale identities, permissions and accounts with EIM 2 lessons · ~1 h 00

Design a cloud environment without depending on the provider 7

1. Choose a data service, managed or self-managed, and connect it privately, replication and failover included 4 lessons · ~1 h 40 · then its quiz
2. Choose a workload's compute model and size it from measurements 5 lessons · ~1 h 50 · then its quiz
3. Choose a workload's service and deployment model and split responsibilities 5 lessons · ~2 h 10 · then its quiz
4. Choose a workload's storage family and class from access, measured performance, durability and cost 4 lessons · ~1 h 45 · then its quiz
5. Choose the interconnection and network pattern of a hybrid environment: VPN, dedicated link, BGP, DMZ and hub-spoke 2 lessons · ~40 min · then its quiz
6. Design a cloud environment's private network: addressing, a regional network attached in several zones, routing and default-deny filtering 4 lessons · ~3 h 25 · then its quiz
7. Estimate a cloud architecture's monthly cost from dated price lists 4 lessons · ~1 h 55 · then its quiz · a proof lab

Grant minimal cloud access, to humans and workloads alike 2

1. Grant a human identity minimal, temporary and audited cloud permissions 5 lessons · ~2 h 25 · then its quiz
2. Let a workload reach a cloud service with no long-lived credential on disk 2 lessons · ~55 min · then its quiz

Expose a cloud workload and make it withstand failures 3

1. Expose a private application through load balancer, health check, DNS, TLS and edge 5 lessons · ~2 h 15 · then its quiz
2. Make a workload elastic: no local state, scalable by adding instances, tolerant to losing one 2 lessons · ~55 min · then its quiz
3. Place a workload across zones and regions to meet availability, RTO and RPO targets, and prove it 4 lessons · ~2 h 00 · then its quiz

Rebuild and run a cloud environment 2

1. Rebuild a cloud environment from code, instances bootstrapped unattended, then destroy it with nothing left 6 lessons · ~3 h 00 · then its quiz
2. Run a cloud environment: telemetry, alerts, quotas, imposed events and incidents 3 lessons · ~1 h 10 · then its quiz

Govern cloud usage: guardrails, costs and sovereignty 4

1. Assess a cloud provider on jurisdiction, dependencies, key custody and reversibility, and cost its exit 2 lessons · ~50 min · then its quiz
2. Cut a cloud architecture's bill without degrading the required resilience 1 lesson · ~20 min · then its quiz
3. Design a multi-team cloud environment's organisation: account boundaries, hierarchy and landing zone 2 lessons · ~35 min · then its quiz
4. Organize a multi-team cloud environment: separate accounts, guardrails as code and tagging 3 lessons · ~1 h 00 · then its quiz

Plan the migration of an application estate to the cloud 1

1. Classify an application estate with the 7Rs and sequence its migration 2 lessons · ~55 min · then its quiz

Defend a cloud architecture in review 1

1. Defend a cloud architecture in review, with written decisions and measurements 2 lessons · ~55 min · then its quiz

Decide on a target cloud architecture 1

1. Decide on a target cloud architecture: compare at least two complete options on six axes and write the decision as an ADR 1 lesson · ~50 min · then its quiz

Recommend the evolution of a cloud architecture 1

1. Recommend an architecture's evolution: verifiable actions, prioritised by severity, likelihood and effort, and a plan the team can carry 1 lesson · ~50 min · then its quiz

Design a cloud environment's identity and access model 1

1. Design a cloud environment's identity and access model with no imposed provider: federation, separation of duties, access lifecycle and traceability requirements 2 lessons · ~1 h 05 · then its quiz

Test cloud code on an emulator 2

1. Check that a cloud client survives API failures: 503 and 429 errors, timeouts and truncated responses 1 lesson · ~30 min · then its quiz
2. Install, declare and troubleshoot a local cloud emulator, and point the official clients at it 8 lessons · ~3 h 15 · then its quiz

Development

8

Go deeper into a language: concurrency, performance, metaprogramming 4

1. Act on classes and attributes in Python: metaclasses, descriptors and Pythonic patterns 3 lessons · ~1 h 50 · then its quiz
2. Harden a Python test suite: Hypothesis, pytest fixtures, coverage and mutation 1 lesson · ~50 min · then its quiz
3. Profile and optimize a Python program, up to a native extension 4 lessons · ~2 h 55 · then its quiz
4. Run concurrent work and choose the right model 6 lessons · ~3 h 55 · then its quiz Python or Go

Get started with the developer's craft in Python: read, test, review, ship 4

1. Make a Python tool installable and versioned 1 lesson · ~2 h 00 · then its quiz · a proof lab
2. Read, install and modify a small Python tool 3 lessons · ~2 h 35 · then its quiz · a proof lab
3. Review someone else's Python code and get your own checked 1 lesson · ~55 min · then its quiz
4. Run pytest tests, read a failure and fix a simple defect 2 lessons · ~1 h 45 · then its quiz · a proof lab

Data formats

17

Write, check and query configuration and data formats 11

1. Consume a REST API reliably from a shell script 1 lesson · ~40 min · then its quiz
2. Format, validate and lint HCL files, in CI and locally 2 lessons · ~1 h 10 · then its quiz
3. Produce correctly typed and escaped JSON from a script 1 lesson · ~35 min · then its quiz
4. Query and modify a YAML document reproducibly 2 lessons · ~1 h 10 · then its quiz
5. Query and modify HCL files from a script, verifiably 2 lessons · ~1 h 05 · then its quiz
6. Query structured output with JMESPath (AWS CLI, Azure CLI, Ansible) 1 lesson · ~35 min · then its quiz
7. Query structured output with JSONPath, notably in kubectl 1 lesson · ~35 min · then its quiz
8. Read and write correct HCL, separating the language from what Terraform and Packer add 7 lessons · ~3 h 50 · then its quiz
9. Validate a YAML document with linting, schemas and automated checks 4 lessons · ~2 h 20 · then its quiz
10. Validate JSON strictly and against a JSON Schema 3 lessons · ~1 h 50 · then its quiz
11. Write and review a correct, unambiguous YAML document 4 lessons · ~2 h 15 · then its quiz

Query, modify and evolve a relational database with SQL 5

1. Automate SQL operations reliably and safely 2 lessons · ~1 h 20 · then its quiz
2. Diagnose a slow SQL query with indexes and EXPLAIN 1 lesson · ~45 min · then its quiz
3. Evolve a relational schema without putting the service at risk 1 lesson · ~40 min · then its quiz
4. Modify data safely, in transactions and under concurrency 2 lessons · ~1 h 25 · then its quiz
5. Read a schema and query relational data with SQL 6 lessons · ~4 h 05 · then its quiz

Process text and files on the command line 1

1. Query and transform JSON on the command line with jq 3 lessons · ~1 h 30 · then its quiz

Applied AI

25

Work with a coding agent 3

1. Install Claude Code and drive a session on a project 5 lessons · ~3 h 25 · then its quiz
2. Scope a task given to Claude Code and check its result with a plan, a diff and tests 4 lessons · ~2 h 45 · then its quiz
3. Take back control of a drifting Claude Code session and troubleshoot its configuration 2 lessons · ~1 h 15 · then its quiz

Frame and secure a coding agent 2

1. Confine Claude Code's execution: permissions, secrets and sandbox 3 lessons · ~2 h 15 · then its quiz
2. Frame Claude Code with CLAUDE.md, targeted rules and settings.json 4 lessons · ~2 h 35 · then its quiz

Extend and industrialize a coding agent 4

1. Automate and extend Claude Code with hooks, skills and plugins 6 lessons · ~4 h 30 · then its quiz
2. Connect an MCP server to Claude Code and delegate to isolated subagents 2 lessons · ~1 h 20 · then its quiz
3. Deliver a complete project driven by Claude Code, one vertical slice at a time 1 lesson · ~1 h 00 · then its quiz
4. Run Claude Code without an interactive session, in CI, with the right model and cost 2 lessons · ~1 h 25 · then its quiz

Understand, serve and integrate language models 5

1. Call an LLM from Python: completion, streaming, conversation, structured output and images 5 lessons · ~4 h 35 · then its quiz
2. Explain how an LLM works, its inference and its quantization 4 lessons · ~2 h 20 · then its quiz
3. Operate an LLM gateway: routing, fallback, cache, keys and budgets 2 lessons · ~2 h 20 · then its quiz
4. Run and serve an open source LLM, from the workstation to the GPU 7 lessons · ~5 h 45 · then its quiz
5. Write reliable prompts: roles, few-shot, Chain-of-Thought and ReAct 2 lessons · ~2 h 10 · then its quiz

Build a RAG 3

1. Build an end-to-end RAG, make its retrieval reliable and take it to production 6 lessons · ~4 h 25 · then its quiz
2. Embed a corpus and index it in a vector database 6 lessons · ~4 h 30 · then its quiz
3. Prepare a corpus for RAG: extract, clean, chunk 4 lessons · ~2 h 40 · then its quiz

Build and industrialize MCP servers 2

1. Build an MCP server and client in Python 6 lessons · ~3 h 45 · then its quiz
2. Secure, test, authenticate and deploy MCP servers 5 lessons · ~4 h 20 · then its quiz

Build AI agents 3

1. Build a tool-using AI agent: ReAct loop, function calling and typed output 4 lessons · ~3 h 05 · then its quiz
2. Have an agent run code in a hardened sandbox 2 lessons · ~1 h 35 · then its quiz
3. Orchestrate agents with a state graph: LangGraph, multi-agent, memory, patterns and MCP 5 lessons · ~4 h 10 · then its quiz

Assemble, observe and secure a sovereign AI stack 3

1. Analyze an LLM application's risks with the OWASP Top 10 for LLM 2025 and choose defense-in-depth controls 1 lesson · ~45 min · then its quiz
2. Assemble a sovereign AI stack and expose it behind a secured web interface 5 lessons · ~4 h 05 · then its quiz
3. Trace LLM calls with OpenTelemetry GenAI up to Grafana Tempo 2 lessons · ~1 h 15 · then its quiz

Documentation

10

Document a service or a project 10

1. Build a technical presentation in Markdown or HTML, versioned and exported 2 lessons · ~1 h 00 · then its quiz
2. Build and publish documentation checked in CI 3 lessons · ~1 h 25 · then its quiz Astro Starlight or MkDocs or Docusaurus or Hugo or Antora
3. Choose the document type and its reader before writing 2 lessons · ~45 min · then its quiz
4. Document code: comments that say why, docstrings, generated reference 1 lesson · ~35 min · then its quiz
5. Give a repository its README, CHANGELOG and ADRs 2 lessons · ~1 h 00 · then its quiz
6. Keep documentation alive: owner, review, freshness 4 lessons · ~1 h 45 · then its quiz
7. Model an architecture beyond context: components, dynamic and deployment views, a single model in code 4 lessons · ~2 h 00 · then its quiz
8. Represent a system with diagrams as code that read without the image 6 lessons · ~2 h 40 · then its quiz
9. Write a clear, accessible and verifiable technical page 3 lessons · ~1 h 25 · then its quiz
10. Write a technical document in AsciiDoc: structure, attributes, blocks and conversion 1 lesson · ~30 min · then its quiz

Machine learning

10

Frame, equip, train and reproduce machine learning models 10

1. Frame a machine learning problem: choose the learning family and place the work in the project lifecycle 2 lessons · ~40 min · then its quiz
2. Group unlabelled data with k-means and choose the number of clusters (elbow, silhouette) 1 lesson · ~30 min · then its quiz
3. Make a training run reproducible and describe it as a parameterised pipeline replayed identically (uv, DVC) 2 lessons · ~2 h 00 · then its quiz · a proof lab
4. Register and version a model and refer to it by alias with its lineage (MLflow) 1 lesson · ~1 h 00 · then its quiz · a proof lab
5. Set up a reproducible data science workstation: a pinned conda environment and a Jupyter notebook that runs end to end 3 lessons · ~1 h 10 · then its quiz
6. Test data and model before promotion: schema, ranges, threshold and non-regression against the champion (pytest) 1 lesson · ~1 h 05 · then its quiz · a proof lab
7. Track every training run on a tracking server and find the run that produced a model (MLflow) 1 lesson · ~1 h 10 · then its quiz · a proof lab
8. Train a linear regression and evaluate it on a test set (scikit-learn, R², RMSE) 1 lesson · ~30 min · then its quiz
9. Train a small neural network on CPU with PyTorch and read its decision boundary 2 lessons · ~50 min · then its quiz
10. Version a dataset outside Git and get back an exact version of it (DVC) 1 lesson · ~1 h 05 · then its quiz · a proof lab

forge

6

Administer a self-hosted Git forge 6

1. Back up Forgejo, copy the encrypted backup off the machine, restore it on a blank stack and write the recovery runbook 1 lesson · ~1 h 10 · then its quiz
2. Govern access to Forgejo: organisations, teams and permissions, sign-in through an OIDC provider with an enforced second factor, and account support from the command line 3 lessons · ~2 h 20 · then its quiz
3. Maintain Forgejo and upgrade it: scheduled tasks, doctor and quotas, an upgrade rehearsed on a copy with validation criteria and rollback from the backup 2 lessons · ~1 h 50 · then its quiz
4. Monitor Forgejo through its logs and Prometheus metrics, fire an alert and diagnose a database outage 1 lesson · ~50 min · then its quiz
5. Secure a Forgejo instance: webhooks kept off the internal network, brute force banned with fail2ban, a break-glass administrator account, scoped tokens and signed commits 1 lesson · ~1 h 00 · then its quiz
6. Set up Forgejo on PostgreSQL behind a TLS proxy, reachable over HTTPS and SSH, then configure mail, LFS and sign-ups 2 lessons · ~1 h 40 · then its quiz

×

See in the glossary →