Learn DevSecOps with Practice

Explain Linux versus Unix: Linux is open source, developed by Linus Torvalds, and used on desktops and mobiles; Unix is licensed, non-open source, server-focused.

Explore the Unix architecture across four layers: application, shell, kernel, and hardware, where the shell interprets commands to the kernel, which manages memory, tasks, and files.

Explore the Linux directory structure from the root slash, then examine key directories such as /bin, /etc, /dev, /proc, /var, /usr, /home, /boot, /lib, /opt, /mnt, /media, and /srv.

Learn basic Linux commands such as ls, cd, pwd, cat, and echo, and understand environment variables and the path variable that Linux uses to find executables.

Master basic Linux commands by listing directories with ls, finding your home directory with the tilde, and moving between folders using cd and pwd. Practice viewing files with cat, printing environment variables with echo, clearing the screen, and using man and which to locate commands and binaries in /bin.

Master Linux directory navigation, including absolute vs relative paths, current and parent directories, root and home tilde, and create or remove directories using mkdir -p and recursive/force removal options.

Explore absolute and relative paths, navigate directories with cd and pwd, and manage folders using mkdir, rm, and rm -r for practice.

Learn to list files with ls, use a long, human readable format, sort by last modified time, show hidden files, and combine options with a single dash like -lat.

Learn to create hard and soft (symbolic) links with ln, compare hard and symbolic links, and understand inodes and file attributes like metadata, times, owner, and permissions.

Explore Linux file and directory permissions, including owner, group, and others, and learn to set read, write, and execute bits with chmod, including setuid, setgid, and sticky bits.

Learn to use the find and locate commands to locate files by name, with ignore case support, -iname and -exec options, and create test files with touch.

Learn how to view and edit files with nano, and navigate file contents using commands like cat, less, more, and tail with line-range options.

Learn to view and monitor log files efficiently using cat, more, less, and head/tail with real-time tail -F, then explore nano and vim for editing text.

Edit files with vim and vi basics, understanding vi, vim, and view modes, and master essential shortcuts for editing, saving, quitting, inserting text, navigating lines, and searching.

Learn the essentials of editing with vim, including read-only viewing, insert and append modes, navigation to line starts and ends, and saving, quitting, undo, and basic copy-paste.

Practice Linux file operations hands-on by creating files with touch, copying with cp, moving and renaming with mv, and deleting with rm -rf, while learning to use wildcards safely.

Explains redirection concepts, including redirecting output to a file with >, using < for input, and appending with >>. Demonstrates sorting and suppressing errors by sending standard error to /dev/null.

Explore Linux processes and job control using commands like ps, top, and kill; learn background and foreground execution with ampersand, bg, fg, ctrl-c, ctrl-d, ctrl-z, and job management.

View and manage Linux processes using ps (and top/htop) to see pid, user, and cmd; run commands in background with ampersand, switch with bg/fg, and terminate with signals.

Manage cron jobs with crontab by listing, editing, and removing tasks for specific users, and schedule commands such as every minute using cron expressions.

View linux command history with the history command and the dot bash history file. Learn about histfile and histsize, and how to remove or disable history to protect credentials.

Explore practical sudo usage, switching to root with sudo su, and securing sudoers with careful editing of sudoers and sudoers.d while avoiding password prompts and syntax errors.

Learn Linux file system basics using df, du, and mount to check disk usage, read sizes in human format, summarize directories, and mount volumes.

Explore shell scripting basics for beginners, learning how the Unix shell runs commands, uses comments, handles variables and special variables, operators, if-else, case, loops, and functions.

explore linux operators by using shell variables, back quotation marks for command substitution, and the expr command to perform arithmetic such as addition, subtraction, multiplication, and division.

Master the syntax of while and for loops in shell scripting, and apply break and continue to control flow in practical scripts. Explore until and select loops for broader coverage.

Explore bash decision making with if, else, and case statements, showing numeric and string comparisons using -eq and -lt, and how to handle patterns in scripts.

Prepare for Linux interview questions by understanding the Linux kernel, Unix basics, and open source concepts like GPL. Learn common components, shells, and boot loaders such as LILO and GRUB.

practice linux interview questions on commands and concepts like mv for renaming, inode metadata, the act command for scheduled execution, pid, distros, swap space, bash, root user, cli, and gui.

Explore practical Linux interview topics, from file permissions and vi/vim basics to gzip and gunzip usage, redirection, grep patterns, virtual desktops, and Linux virus myths, with practical Q&A practice.

Install Python on Linux, Windows, and Mac; move from Python 2.7 to 3.8, learn the interpreter, and set up Visual Studio Code for Hello World and ethical hacking tools.

Explore data types in Python, including int, float, bool, string, list, tuple, set, and dict, plus classes, modules, and the concept of none, with hands-on practice coming next.

Explore basic numbers in Python by printing values, performing arithmetic (addition, subtraction, multiplication, division), and using type() to reveal data types like int and float, including the exponent operator **.

Apply Python's math functions from the standard library, including round and absolute value. This course emphasizes ethical hacking and cybersecurity work with these tools, with reference at docs.python.org.

Explore how Python operator precedence mirrors math, with brackets as the highest priority, then exponent, then multiplication and division, and finally addition and subtraction, demonstrated with practical examples.

Explore Python strings with dynamic typing, from simple literals to multi-line strings and concatenation. The lecture also warns against hard-coded passwords and suggests environment variables or secret managers for security.

Explore escape sequences by using backslashes to escape quotes, avoid syntax errors, print strings with new lines via \n, and escape backslashes to display a backslash.

Convert between string and integer using str and int functions; check with type; concatenate only with strings; update var via assignment.

Learn to use formatted strings to print dynamic user and age variables, format values with braces, and index into variables to produce flexible, testable output.

Learn how Python lists expose built-in methods like append, clear, copy, and sort; discover how to search official docs and references such as w3schools.

Discover how the none type represents an uninitialized or arbitrary value, distinct from zero or whitespace, and how to print and compare such variables.

Learn how to use Python dictionary methods such as clear, copy, keys, get, items, pop, set default, update, and values, with practical examples and tips for finding them.

Master Python conditional logic with if, else, and elif, including indentation and boolean outcomes, and explore true/false conditions, comparisons, and nested structures.

Learn how Python for loops work, using indentation and print to display values inside the loop, and see how i ends up as five after the loop.

Explore break, continue, and pass in Python loops, including while and for loops. See how break ends a loop, continue skips an iteration, and pass acts as an empty block.

Learn to define and call Python functions, including customized and built-in functions with parameters, return values, and scope rules that distinguish local and global variables.

Learn to handle multiple function parameters in Python with *args and **kwargs for positional and keyword arguments, including printing and accessing them.

Learn to organize Python projects with packages and modules, create directories, and use import statements to access functions across files. Explore nested imports and function calls.

Master error handling in Python by using try/except to manage invalid integer inputs, converting input values safely, and providing elegant feedback.

Learn Python IO by opening files in read, write, and append modes, then print and verify content from test files; future lecture covers error handling.

Handle Python IO errors with try and specific except blocks for file not found and IO errors, creating the missing file and reading its contents.

Build your first port scanner in python, printing an ascii banner using figlet, then scan ports on a target ip with socket connections, including timeout handling and error checks.

Learn to build your first web directory discovery tool in python using the requests library, reading directories from a file, constructing full URLs, and handling errors.

Explore Amazon EC2, a secure resizable compute capacity in the cloud, and compare pricing models—on-demand, spot, saving plans, reserved, and dedicated hosts—along with burstable t2/t3 instances and storage options.

Discover the three ways to access AWS—the CLI, the AWS console, and the SDK—and learn how each method works, including console login and language bindings like Python and Java.

Create an IAM user with programmatic and console access, download the one-time CSV credentials, and assign the user to a group with an appropriate policy such as EC2 full access.

Learn how to enforce a strong AWS IAM password policy by setting a min length of eight, requiring mixed case and numbers, enabling 90-day expiration, and preventing password reuse.

Explore how to read and create IAM policies, use the visual editor and json to define EC2 actions, resources, and arn-based permissions, and attach policies to users, groups, or roles.

Enable multi-factor authentication for IAM users by setting up a virtual MFA, scanning a QR code with an authenticator app, and enforcing MFA for both root and non-root accounts.

Install and configure the AWS CLI on Linux, Windows, or macOS, then use the command line to describe instances and manage IAM users with access keys.

Explore AWS cloud shell, a pre-installed, ready-to-use environment with storage, and run AWS CLI commands (e.g., describe security groups) from EC2 without local installation.

Learn how to create an iam role, define trust entities, and attach policies to grant an ec2 instance access to s3 with short‑lived credentials.

Amazon EC2 basics, pricing options such as on-demand, spot, saving plans, and dedicated hosts, and how to choose instance types like T3 for general purpose workloads, with per second billing.

Launch an Ubuntu 20 LTS EC2 instance (t2 micro) within the AWS free tier, set up a security group and key pair, then connect via SSH.

Attach an IAM role to an EC2 instance to grant S3 full access via an instance profile, ensuring access is restricted to that EC2 rather than public.

Create a placement group in the EC2 console, selecting cluster, spread, or partition, then launch an instance and add it to the group; cluster groups aren’t supported by t2 micro.

Learn to request spot instances, review pricing history, and configure a spot fleet with capacity optimized settings to achieve savings on on-demand prices.

Explore EBS for EC2, detailing gp2 and gp3 SSD, io1 and io2, block express, st1 and sc1 HDD volumes, pricing, snapshots, and use cases from boot volumes to databases.

Create and manage Elastic Block Store volumes in the EC2 console, select volume types, attach, resize, snapshot, and automate backups with lifecycle policies for snapshots and AMIs.

Understand Amazon machine images as templates for root volumes that enable launching and duplicating instances, including EBS snapshots, block device mappings, launch permissions, and AWS marketplace options.

Launch an ubuntu 20 ec2 instance, install net-tools to enable ifconfig, create an amazon machine image (ami) from it, then launch ami instances and verify network config via instance connect.

Discover elastic file system basics, a serverless storage that offers 5 gb for 12 months, and learn to mount and use it with efs, ec2, ecs, eks, fargate, and lambda.

practice hands-on with AWS Elastic File System (EFS): create a file system in the default VPC, attach it via DNS or NFS, and set fstab for startup mounting.

Explore autoscaling groups and learn how they logically group Amazon EC2 instances to apply scaling policies that add or terminate instances based on health, using a launch configuration.

Create a launch configuration for an auto scaling group by selecting an ami, instance type, and optional settings such as spot instances, iam role, monitoring, and security groups.

Learn to set up a classic load balancer in AWS, choosing internal or external, configuring listeners (http, https, tcp), VPC subnets, security groups, health checks, cross-zone balancing, and connection draining.

Learn how target groups route requests to registered targets such as EC2 instances, IP addresses, or lambda functions. Configure protocols, ports, and health checks for application and network load balancers.

Configure a network load balancer for ultra high performance, TLS offloading, UDP support, and static IPs in a VPC, with listeners, target groups, and health checks.

Configure an application load balancer for http and https traffic, with listeners, target groups, and certificates, across multiple availability zones for secure, scalable routing of microservices and containers.

Explore creating public and private subnets in a VPC, configuring IPv4 CIDR and auto assign IP. Launch EC2 instances in each subnet and understand the role of the internet gateway.

Learn how elastic IP addresses provide a static public IPv4 for dynamic cloud computing, enabling you to allocate and associate a fixed IP to EC2 instances in a VPC.

Create an egress-only internet gateway for IPv6, attach to your VPC, and configure a separate IPv6-only route table to direct outbound traffic, avoiding mixed any-to-any routes.

Explore how a network ACL adds an optional firewall layer to your VPC, controlling inbound and outbound traffic through prioritized rules and subnet associations, including default and custom ACLs.

Learn how an internet gateway connects a VPC to the internet, supports IPv4 and IPv6, and how to attach it and configure routes for public subnets.

Learn how AWS Route 53 provides dns and domain registration, latency-based routing, health checks, dns failover, and hosted zones with scalable pricing and a dashboard.

Register a domain in route 53 by selecting the domain and tld, checking availability, adding to cart, and enabling privacy protection; expect ten-day verification and a default public hosted zone.

Create and manage Route 53 hosted zones, both public and private, and attach private zones to a VPC. Use alias records to AWS services to route internal resources.

Create Route 53 health checks to monitor endpoints from a network of health checkers. Verify endpoints by IP address or domain name using HTTP, HTTPS, or TCP, with optional failover.

Learn how continuous integration automates code merging, automated builds, and early error detection, and how continuous delivery and deployment automate releases with differing approval steps.

Configure Jenkins builds with discard strategies, log rotation, artifacts retention, and parameterized, throttled workflows with upstream-downstream controls for efficient DevSecOps.

Clean the workspace before builds, manage secrets and credentials, enable timestamps in logs, and prepare a Gradle build in Jenkins with a suitable JDK.

Learn to configure boss build actions to aggregate downstream test results, archive artifacts, publish test results, and notify via email, GitHub status, and Slack in DevSecOps workflows.

Create and customize views to sort and display selected jobs using list views, filters, and columns. Name views like first and second to organize jobs accessible to the current user.

Configure the global tool settings by adding JDK, Git executable, Gradle, and Maven versions with automatic installation. Save to apply these defaults across all projects and jobs.

Explore system and Jenkins logs, view all records, environment variables, and log levels; create a new log recorder and use Manage Jenkins and system log for troubleshooting.

Configure the Jenkins system, including executors, labels, quiet period, and naming patterns, to optimize build queues. Review global settings, SMTP, CSP, and tool integrations to secure and streamline pipelines.

Configure and manage Jenkins users by creating, editing, and deleting accounts, setting descriptions, api tokens, credentials, emails, and time zones, while noting future focus on permissions.

Configure global security in Jenkins to manage authentication options (Jenkins own user database, LDAP, servlet), set authorization (legacy, matrix, project-based) and protect the master node from agent access.

Learn to manage Jenkins credentials with global scope and domain separation, add entries for username, private key, secret text, or certificate, and configure credentials for secure node access.

learn to configure and manage jenkins master and slave nodes, set executors and labels, connect nodes via ssh, manage credentials, and run targeted builds on specific nodes.

Learn how Docker uses OS-level virtualization to package software into containers and images, ensuring code runs the same on every machine and simplifying microservices and machine learning deployment.

Explore how Docker uses a client-server architecture, with a Docker daemon on the host to pull images and run containers from a registry such as Docker Hub.

Install Docker on Linux by selecting a Linux distribution, adding the official GPG key, and installing Docker Engine, Docker CLI, and Docker container, then verify with docker --version.

Install Docker on Mac by downloading Docker Desktop from Docker Hub, running the DMG installer, granting privileges, and verifying with docker version.

Gain a concise overview of Docker basics, including the Docker engine, daemon, client, and server, then explore networks, containers, images, and data volumes before practical use.

Explore the docker engine architecture, its daemon, client, and rest api, and learn to manage images, containers, networks, and volumes via the cli.

Explore what Docker containers are—the runnable instances of images—and how to manage them with common commands, while distinguishing containers from images and linking to networks and storage.

Explore Docker storage options such as the writeable container layer, volumes, bind mounts, and tmpfs. Learn when to persist or share data, or keep it non-persistent for security or performance.

Focuses on an overview of Docker commands, highlighting core commands such as docker ps, run, attach, logs, stop, restart, remove, images, build, copy, history, volumes, version, and help.

Learn what a Dockerfile is and how it enables automated image builds from instructions in a text file named Dockerfile.

Explore docker compose to define and run multi-container applications using yaml, configure services, and start all containers with a single docker compose up, paving the way for hands-on labs.

Run your first Docker container with Docker run hello world, pulling the image from Docker Hub, then use docker ps -a and docker images to inspect containers and images.

Learn to run an ubuntu container with docker run, use -it for interactive sessions, detach with ctrl-p ctrl-q, and reattach via docker attach while managing images and containers.

Learn to manage docker containers by starting, stopping, attaching, killing, and removing them; use docker ps -a and docker ps -q for batch cleanup with embedded commands.

Manage docker images by listing and removing with docker rmi using image IDs or names. Pull and verify images with docker pull, then log in to registries to push.

Launch an nginx container from the nginx image, run it in the background with -d, map ports with -p, and verify via docker ps and a browser.

Copy test one and test two from the host into a docker container with the add instruction, set a work directory, build and run the image, and verify files.

Learn how Docker Compose defines and runs multi-container apps using a readable YAML file to configure services, enabling automated development, testing, CI workflows, and staging.

Learn yaml syntax and its readable structure, including lists, key-value pairs, and indentation, illustrated with docker compose files featuring services and volumes.

Build a simple Python Flask app with app.py and a requirements.txt, featuring a hello world route and a page hit counter, then prepare for Docker and Docker Compose deployment.

Build a dockerfile for a python 3.7 alpine image, set a workdir, define flask environment variables, install from requirements.txt, copy files, expose port 5000, and run flask on 0.0.0.0.

Learn to use docker compose up and down, run containers in the background with -d, check status with docker ps, and run commands inside web service to inspect environment variables.

Learn how Docker containers bundle apps and dependencies, share the kernel, and run as isolated units; explore Docker images, Dockerfile, Docker Compose, namespaces, registries, and essential commands.

Master docker interview topics like docker save and docker load for image export/import, restart policies, virtualization vs containerization, copy versus add, and volumes with docker run -v.

Master Docker interview topics by exploring Docker info, compose up and run usage, container lifecycle commands, logging, registry login, and dockerfile fundamentals like from, label, run, cmd, and entrypoint.

Explore how Kubernetes orchestrates containerized workloads with declarative configuration, automation, and self-healing, enabling scalable deployments, service discovery, load balancing, storage orchestration, and canary rollouts across environments.

Set up a minimal Kubernetes cluster using minikube on Linux with Ubuntu 22, install dependencies like kubectl and VirtualBox, and verify cluster status, nodes, and pods.

Create and verify a Kubernetes deployment using kubectl, deploying a hello world BusyBox image from Google samples, then inspect pods and access the app via a proxy and curl.

Scale a deployment in Kubernetes using kubectl to adjust replicas from one to three, then back to one, highlighting the imperative approach and the later shift to declarative practice.

Learn the core concepts of kubectl and Kubernetes through hands-on commands for namespaces, pods, services, jsonpath, yaml creation, image management, and practical debugging with nginx and busybox.

Learn to design and manage pods with kubectl, label and select pods, create deployments, scale, handle rollouts, and explore jobs and cron jobs in a DevSecOps workflow.

Explore state persistence with persistent volumes and claims, using hostpath storage, a manual storage class, and pods mounting data for nginx hosting, including creating, verifying, and deleting volumes and claims.

Learn to manage Kubernetes configurations by creating config maps, loading data from files, injecting env vars, using secrets, and configuring service accounts and security contexts.

Learn to implement and verify readiness and liveness probes, health checks, and pod observability through http health endpoints, logs, and events in a DevSecOps practice.