s0sta
EN NL عربي
Filters
How to search
  • Plain words find names, texts and examples.
  • "two words" finds the exact phrase.
  • --name or -x finds an option.
  • #word looks only inside commands.
  • @grep finds lessons and labs that use grep.
  • Filters: cat:network · in:labs · in:notes · level:rhcsa · ch:8 · root:yes. Put ! before a word to leave it out. OR between words means one of them.
  • ↑ ↓ to move · Enter to open · Esc to close · / to search

Most service usage: 65 DevSecOps services

The 65 services and tools you meet most in DevSecOps jobs, by area: web and TLS, containers and Kubernetes, CI/CD and GitOps, IaC and cloud, secrets and identity, observability, supply-chain scanning, host and cluster security, data services and network services. For each one: what it is, what it is used for, the key commands, a security checklist and a link to its full command page.

Guide by
Hosam Hani
Version
2026
Lessons
77

My own study plan, written in my own words. I update it while I go. The links point to the official pages; prices change, so check them before you buy.

Parts and chapters

Part 1

The map

  1. 1See all 65 services on one mapThe map5 lessons
    Lessons
    1. 1.1 Read the flow from code to production
    2. 1.2 Know the 10 areas
    3. 1.3 Learn them in the right order
    4. 1.4 Remember the default ports
    5. 1.5 Use the same security checklist everywhere

Part 2

Build and run

  1. 2Serve web traffic safely (web, proxy and TLS)Web, proxy and TLS4 lessons
    Lessons
    1. 2.1 nginx — the web server and reverse proxy
    2. 2.2 HAProxy — the fast load balancer
    3. 2.3 Traefik — the cloud-native proxy
    4. 2.4 Certbot — free TLS certificates
  2. 3Build and run containers and KubernetesContainers and Kubernetes7 lessons
    Lessons
    1. 3.1 Docker — build and run containers
    2. 3.2 kubectl — talk to Kubernetes
    3. 3.3 Helm — packages for Kubernetes
    4. 3.4 k3s — a small real cluster
    5. 3.5 crictl — look at containers on a node
    6. 3.6 Kustomize — one base, many environments
    7. 3.7 kind — throwaway clusters for tests
  3. 4Ship changes with Git, CI/CD and GitOpsGit, CI/CD and GitOps6 lessons
    Lessons
    1. 4.1 Git — the source of truth
    2. 4.2 GitHub CLI — pull requests and Actions from the terminal
    3. 4.3 GitLab Runner — run GitLab CI jobs
    4. 4.4 Jenkins — the classic automation server
    5. 4.5 Argo CD — GitOps with a UI
    6. 4.6 Flux — GitOps as controllers
  4. 5Build infrastructure from code (IaC and cloud CLIs)IaC and cloud6 lessons
    Lessons
    1. 5.1 Terraform — cloud resources as code
    2. 5.2 Ansible — configure servers over SSH
    3. 5.3 Packer — golden images
    4. 5.4 cloud-init — the first boot
    5. 5.5 Azure CLI — manage Azure
    6. 5.6 AWS CLI — manage AWS

Part 3

Protect and watch

  1. 6Keep secrets safe (secrets, crypto and identity)Secrets, crypto and identity6 lessons
    Lessons
    1. 6.1 Vault — the secret store
    2. 6.2 OpenSSL — certificates and TLS checks
    3. 6.3 SOPS — encrypted secrets in Git
    4. 6.4 age — simple file encryption
    5. 6.5 GPG — signatures for downloads and packages
    6. 6.6 Keycloak — single sign-on
  2. 7See what happens (metrics, logs, traces and alerts)Observability7 lessons
    Lessons
    1. 7.1 Prometheus — metrics and alert rules
    2. 7.2 Alertmanager — route and silence alerts
    3. 7.3 node_exporter — Linux host metrics
    4. 7.4 Grafana — dashboards
    5. 7.5 Loki — logs by labels
    6. 7.6 Fluent Bit — ship the logs
    7. 7.7 OpenTelemetry Collector — one pipeline for all signals
  3. 8Scan code, images and the supply chainCode and supply-chain scanning9 lessons
    Lessons
    1. 8.1 Trivy — the all-in-one scanner
    2. 8.2 Syft — the SBOM maker
    3. 8.3 Grype — CVEs from images and SBOMs
    4. 8.4 Cosign — sign and verify images
    5. 8.5 Gitleaks — find secrets in Git
    6. 8.6 Semgrep — static code analysis (SAST)
    7. 8.7 SonarQube — code quality and the quality gate
    8. 8.8 ZAP — test the running app (DAST)
    9. 8.9 Put them in one pipeline
  4. 9Harden and watch hosts and clustersHost and cluster security9 lessons
    Lessons
    1. 9.1 Falco — runtime threat detection
    2. 9.2 kube-bench — CIS benchmark for Kubernetes
    3. 9.3 Nmap — what is open?
    4. 9.4 Fail2ban — block brute force
    5. 9.5 Lynis — quick hardening audit
    6. 9.6 OpenSCAP — compliance profiles
    7. 9.7 AIDE — file integrity monitoring
    8. 9.8 auditd — who did what
    9. 9.9 Combine them in layers

Part 4

Data and network

  1. 10Run databases, caches and queuesDatabases, caches and queues9 lessons
    Lessons
    1. 10.1 PostgreSQL — the default open-source database
    2. 10.2 MySQL / MariaDB — the web app database
    3. 10.3 Redis / Valkey — cache and sessions
    4. 10.4 MongoDB — document database
    5. 10.5 etcd — the brain of Kubernetes
    6. 10.6 RabbitMQ — message broker
    7. 10.7 Kafka — event streaming
    8. 10.8 MinIO — S3 object storage
    9. 10.9 Follow the 3-2-1 backup rule
  2. 11Run the network services (DNS, VPN, mail, failover)Network services5 lessons
    Lessons
    1. 11.1 BIND — DNS server
    2. 11.2 WireGuard — fast modern VPN
    3. 11.3 OpenVPN — classic TLS VPN
    4. 11.4 Postfix — mail relay
    5. 11.5 keepalived — failover IP
  3. 12Put the services together in one platformPut it together4 lessons
    Lessons
    1. 12.1 Build the reference platform
    2. 12.2 Follow one change through the platform
    3. 12.3 Start small in the home lab
    4. 12.4 Map the services to the exams

What you learn

The main skills of the course and the chapter where you learn each one.

Service areas