Admin Forces Training
OpenBSD Jumpstart | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
OpenBSD Intro | BSD | Introduction to OpenBSD | |
Configure doas | BSD | Execute commands as root | |
Patch your system | BSD | Patch your system | |
Update firmware | BSD | Update firmware | |
Installing Packages | BSD | Install new software | |
Good Questions | Civics | How to Ask Good Questions | |
IRCNow Mailing Lists | Civics | Sign up to IRCNow Mailing lists | Extend VPS for 1 week |
Web Server | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Freedom to Fork | Civics | Freedom to Fork | |
Intro to Chroot | BSD | Learn about Chroots | |
Simple OpenHTTPd | Web | Host your own web server | Extend VPS 1 week |
Telnet HTTP | Network | Troubleshoot webserver with telnet | |
netcat HTTP | Network | Troubleshoot webserver with netcat | |
TLS overview | Network | TLS introduction | |
Subject Alternative Names | Network | TLS and Subject Alternative Names | |
acme-client | Security | Request an SSL cert | |
OpenHTTPd TLS | Web | Provide TLS for webpages | |
OpenSSL HTTP | Network | Test TLS for webpages with OpenSSL | |
OpenHTTPd Website | Web | Set up your website | |
OpenHTTPd Perl | Web | Install Perl inside OpenHTTPd chroot | Extend VPS 1 week |
Domain Name Lookup | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
DNS Overview | DNS | Learn the Domain Name System | |
unwind | Network | Validating DNS resolver | |
unbound | DNS | Configure a local caching nameserver | |
DNSSec for Unbound? | DNS | Add DNSSec for unbound | |
dig | DNS | Troubleshoot DNS records with dig | |
host | DNS | Troubleshoot DNS records with host | |
hostname | DNS | Set hostname | |
Configure /etc/hosts | BSD | Host and network name database | Extend VPS 1 week |
Lesson | Topic | Description | Reward |
---|---|---|---|
Self-Admin | Civics | Admin your network | |
netcat IRC | Network | Troubleshoot IRC with netcat | |
netcat | Network | Troubleshoot applications with netcat | |
netcat | Network | Troubleshoot clients with netcat | |
rcctl | BSD | Start services automatically | Extend VPS 1 week |
System Administration | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
ed | BSD | ed text editor | |
tar? | BSD | Tape archives | |
Change editor | BSD | Change default editor | |
ksh history | BSD | Add history for shell commands | |
Editing crontab | BSD | Editing crontab | |
adduser | BSD | Addusers | |
group? | BSD | Manage groups | |
localtime | BSD | Set time zone | |
Write image to usb | BSD | Write image to USB | |
symbolic links | BSD | Create symbolic links | |
fstab | BSD | Edit filesystem table | |
dmesg | BSD | Display system message buffer | |
hier | BSD | OpenBSD filesystem hierarchy | |
top | BSD | Info about CPU processes | |
ps | BSD | Monitor Processes | |
renice? | BSD | Renice processes | |
fstat? | Network | Show file status | |
fuser? | Network | Show process using a file | |
kill | BSD | Send signals to processes | |
kernel panics | BSD | Dealing with kernel panics | |
Login classes | BSD | Configure login classes | |
sysctl | BSD | Getting and setting kernel state | |
swapctl | BSD | Manage system swap space | |
OOM error | BSD | Out of memory error | |
atactl | BSD | Get disk information | |
BSD | rc.d | ||
BSD | rc.conf | ||
accton? | BSD | accton | |
vipw | BSD | Edit the password file | Extend VPS 1 week |
Lesson | Topic | Description | Reward |
---|---|---|---|
Free Press | Civics | Freedom of Speech and of the Press | |
Dogfooding | Civics | Eat your own dogfood |
IRC Bouncer | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Software Freedom | Civics | Software Freedom | |
TLS Acceleration | Security | Provide TLS for multiple services | |
TLS Acceleration (multiple) | Security | Encrypt traffic with TLS for multiple services | |
Multi-user OpenHTTPd | Web | Configure webserver for multiple domains | |
Open Proxies | Web | Avoid blacklists by closing open proxies |
TCP/IP Networking | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Religious Liberty | Civics | Freedom of Religion | |
TCP/IP Networking | Network | Learn Basics of TCP/IP | |
IPv4 Networking | Network | Learn IPv4 Networking | |
IPv6 Networking | Network | Learn IPv6 Networking | |
TCP/IP sockets? | Network | Learn Basics of TCP/IP sockets | |
IP netmasks? | Network | Learn Basics of IP netmasks | |
TCP/UDP ports? | Network | Learn Basics of TCP/UDP ports | |
My IP Address | Network | What's my IP Address? | |
tcpbench | Network | Benchmark TCP/IP throughput | |
ping | Network | Troubleshoot networking with ping | |
traceroute? | Network | Trace packet route | |
dig | Network | Troubleshoot DNS servers and records | Extend VPS 1 week |
ifconfig? | Network | ifconfig guide | |
Changing addresses | Network | Changing network addresses | |
Static Networking | Network | ||
Autoconf Networking | Network | ||
Configure ifstated? | Network | Configure ifstated | |
arp? | Network | Address resolution protocol | |
ndp? | Network | Neighbor discovery protocol | |
arp spoofing? | Network | Detect ARP spoofing | |
ip spoofing? | Network | Detect IP spoofing | |
resolv.conf | Network | Configuring resolv.conf | |
resolvd | Network | Using resolvd | |
Route | Network | Configure route paths | |
hostname.if route | Network | Add routes to hostname.if at bootup | |
netstat? | Network | Show network status | |
Route source address | Network | Configure routing source address | Extend VPS 1 week |
Wireless | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
hostap | Network | Set up Host Access Point | |
hostapd? | Network | Synchronize Host Access Points |
Packet Filter | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Open For Everyone | Civics | ||
pf.conf? | Network | Configure Packet Filter | |
Packet Filter | Network | Setup firewall with Packet Filter | |
NAT with packet filter? | Network | NAT with Packet Filter | |
Whitelisting? | Network | Whitelisting | |
Debugging PF rulesets? | Network | Debugging PF rulesets | |
rdr-to? | Network | rdr-to | |
Traffic shaping? | Network | Traffic shaping | |
pflog? | Network | pflog | |
authpf? | Network | authpf | |
testing rulesets? | Network | Testing PF rulesets | |
NAT64 with packet filter? | Network | NAT6 with packetfilter | |
ftp-proxy? | Network | ftp-proxy | |
DMZ? | Network | DMZ | |
DDoS Defense | Network | Defend against DDoS Attacks | |
tcpdump | Network | Read network packets | |
SSDP attack | Network | ||
TCP ack flood | Network | ||
TCP reset flood | Network | ||
UDP Flood | Network | ||
amplification attack | Network | ||
PF Stable | Network | Sample PF Firewall for Stable | |
PF Testing | Network | Sample PF Firewall for Testing | |
Packet Filter | Network | PF Guide | Extend VPS 1 week |
pfctl? | Network | PF Guide | Control packet filter |
Networking | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
WiFi | Network | Configure WiFi | |
WiFi to Ethernet | Network | WiFi to Ethernet | |
bridge? | Network | Bridge interface | |
vlan | Network | vlan interface | |
veb | Network | veb interface | |
vether | Network | Virtual Ethernet interface | |
carp? | Network | CARP interface | |
gre? | Network | GRE interface | |
mgre? | Network | MGRE interface | |
egre? | Network | EGRE interface | |
eoip? | Network | eoip interface | |
etherip? | Network | etherip interface | |
vxlan? | Network | vxlan interface | |
mpe? | Network | mpe interface | |
mpip? | Network | mpip interface | |
mpw? | Network | mpw interface | |
bpe? | Network | bpe interface | |
pppoe? | Network | pppoe interface | |
sppp? | Network | sppp interface | |
tpmr? | Network | tpmr interface | |
trunk? | Network | trunk interface | |
aggr? | Network | aggr interface | |
urndis? | Network | urndis interface | |
pflow? | Network | pflow interface | |
pfsync? | Network | pfsync interface | |
6-in-4 gre (vmm) | Network | Tunnel IPv6 inside IPv4 with GRE (vmm) | |
6-in-4 gre | Network | Tunnel IPv6 inside IPv4 with GRE | |
4-in-6 gre? | Network | Tunnel IPv4 inside IPv6 with GRE | |
wg | Network | WireGuard interface | |
tap? | Network | Ethernet tunnel pseudo-device interface | |
tun? | Network | Network tunnel pseudo-device interface |
Name Server | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Become a Netizen | Civics | ||
Netizen Rights | Civics | ||
DNS Records | DNS | Understand DNS record types | |
Name Registrars | DNS | Choose a name registrar | |
FQDN | DNS | Understand FQDN and $ORIGIN | |
Configure NSD | DNS | Configure name server for custom domains | |
Zone File | DNS | ||
NSD Zone | DNS | Extend VPS 1 week | |
nsd master slave | DNS | ||
Troubleshooting NSD | DNS | ||
rDNS | DNS | Configure reverse DNS for vhosts and email | |
IPv4 rDNS | DNS | Configure IPv4 reverse DNS | |
IPv6 rDNS | DNS | Configure IPv6 reverse DNS | Extend VPS 1 week |
Lesson | Topic | Description | Reward |
---|---|---|---|
Unix Work Ethic | Civics | ||
vhost | DNS | Create custom vhost | |
identd | Security | Provide ident to stop abuse |
Mail Server | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Federation | Civics | ||
OpenSMTPd (with Maildir) | Configure your mail server (using Maildir) | ||
DNS for Mail | Create DNS records for email | ||
SPF | Configure SPF records to avoid the spam folder | ||
DKIM | Configure DKIM records to avoid the SPAM folder | ||
DMARC | Configure DMARC records to block phishing and spam | ||
netcat SMTP | Network | Troubleshoot SMTP with netcat | |
SMTP Testing | Send a test letter | ||
Getting inboxed | Getting inboxed | ||
Open Mail Relay | Block open mail relay to avoid sending spam | ||
smtp? | SMTP client | ||
spamd? | Configure spam filter | ||
aliases? | Configure aliases for mail |
Simple Network Management Protocol | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
snmpd? | SNMP | Configure SNMPd | |
snmp? | SNMP | Configure SNMP |
sensorsd? | BSD | sensorsd |
LDAP | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
ldapd? | LDAP | Configure ldapd |
Lesson | Topic | Description | Reward |
---|---|---|---|
Servers' Rights | Civics | Servers' Rights | |
Minutemin's Code | Civics | Recite the Code of Honor |
Version Control | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Call of Duty | Civics | The Call of Duty | |
Restore from CVSweb | Code | Learn how to restore files with CVSweb | |
got | Code | Set up got version control (clone of git) | |
got repo | Code | Set up got repo | |
got server | Code | Set up got server | |
got mirror | Code | Set up got mirror | |
gotweb | Code | Set up got web access | Extend VPS 1 week |
Disk Setup and Backups | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Minutemin's Server | Civics | The Minutemin's Server | |
dump | BSD | Backup a partition | |
openrsync | BSD | Backup and sync files | |
fdisk | BSD | Partition Hard Disk | |
disklabel | BSD | Edit Partitions | |
disklabel partitioning | BSD | Partition New Hard Disk | |
newfs | BSD | Construct a new filesystem | |
mount | BSD | Mount partitions | |
newdisk | BSD | Add a New Hard Disk | |
mfs? | BSD | Construct a memory-based filesystem | |
FFS | BSD | Learn about the Fast Filesystem | |
fsck? | BSD | Filesystem check consistency check | |
quota | BSD | Edit disk quotas | |
growfs | BSD | Grow a Disk Partition | Get shell account on server |
scan_ffs | BSD | Recover a deleted disklabel | Extend 1 week VPS |
RAID | |||
---|---|---|---|
softraid | BSD | Configuring software RAID | |
Rebuild softraid | BSD | Rebuilding software RAID |
File servers | |||
---|---|---|---|
nfsd? | BSD | Configure NFS | |
nfsd? | BSD | Serve files over NFS | |
mount_nfs | BSD | Mount NFS filesystems | |
nfsd? | BSD | Automatically mount NFS filesystems | |
ftpd? | BSD | Serve files over FTP | |
tftpd? | BSD | Serve files over TFTP |
Text Processing | |||
---|---|---|---|
sed | BSD | sed scripting | |
awk | BSD | awk scripting | |
roff? | BSD | roff |
Shell Scripting | |||
---|---|---|---|
ksh intro? | BSD | shell scripting | |
perl intro | BSD | perl scripting |
Virtual Machine | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
VMM Intro | BSD | Intro to the VMM Hypervisor | |
Vmctl User Guide | BSD | Control your VPS | |
cu? | BSD | Serial terminal emulator | |
Add disk to VM? | BSD | Add new storage disk to VPS | |
Reinstall VM | BSD | Reinstall OpenBSD inside VMM | |
Install OpenBSD inside VMM | BSD | Install OpenBSD inside VMM | |
Install OpenBSD | BSD | Install OpenBSD | |
Upgrade OpenBSD | BSD | Upgrade OpenBSD | |
OpenBSD Sysupgrade | BSD | Sysupgrade OpenBSD | |
Vmm Sysupgrade | BSD | Sysupgrade OpenBSD VMM Host | |
sysmerge? | BSD | Merge conf files after upgrade | |
bsd.rd | BSD | Install/Upgrade/Repair with Ramdisk | |
Single User Mode | BSD | Boot OpenBSD into single user mode | |
Reset root password | BSD | Reset root password | |
autoinstall? | BSD | Unattended autoinstall |
VMM Hosting | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Configure VMM | Network | Offer Hosting with VMM | |
Hosting Providers | Network | Choose a Hosting Provider | |
Configure DHCP server | Network | Configure DHCP server | |
Configure rad server | Network | Set up Router Advertisements for IPv6 | |
Configure slaacd daemon? | Network | Configure slaacd daemon | |
diskless? | BSD | Run OpenBSD on diskless systems | Acquire admin access |
System Bootup | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
rc.conf? | BSD | System daemon configuration |
System Logging | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
syslogd | BSD | Configure system logging | |
Remote syslogd | BSD | Configure remote system logging | |
newsyslog? | BSD | Log rotation |
System Logging | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
send? | BSD | sendbug | |
OpenBSD mailing list? | BSD | OpenBSD mailing list |
Civics | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Independence | Civics | Declaration of Network Independence | |
Constitution | Civics | Read the Constitution and Bill of Rights | |
United We Serve | Civics | ||
Privacy | Civics | Right to Privacy | |
Homestead VPS | Civics | ||
Made on IRC | Civics | ||
The Startup Dream | Civics | ||
Due Process | Civics | ||
Checks and Balances | Civics | ||
Rule by Law | Civics | Extend VPS 1 week |
Miscellaneous | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
ports | BSD | Install software from ports tree | |
pkg_add updates? | BSD | Keep software updated | |
ntpd | Network | Update date and time from network automatically | Extend VPS 1 week |
Stopping Abuse | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Abuse Guide? | Security | Investigation techniques to report criminals | |
Team Security | Security | Prevent security leaks | Extend VPS 1 week |
Security | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Manage Passwords | Shell | Create secure passwords | |
Encrypt Files | Shell | Encrypt files with OpenSSL | |
signify | Security | Verify OpenBSD software | |
limits | Security | Setting resource limits | |
File Permissions | Security | Fix insecure file permissions | Extend VPS 1 week |
pledge | Security | Restrict system operations | |
unveil | Security | Unveil parts of restricted filesystems | |
setuid | Security | Audit setuid root binaries | |
security? | Security | Security checks | |
security | Security | Team security |
Routing | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Configure vlan | Network | Configure vlan | |
pair? | Network | Configure pair interface | |
Configure veb? | Network | Configure veb | |
Configure bridge? | Network | Configure bridge | |
Configure nat | Network | Configure NAT | |
Static routing | Network | Configure static routing | |
RIPd | Network | Configure RIPd | |
route6d? | Network | Configure route6d | |
OSPFd | Network | Configure OSPFd | |
BGPd | Network | Configure BGPd | |
Configure DHCP server | Network | ||
DVMRPd? | Network | Configure DVMRPd | |
mrouted? | Network | Configure Multicast Routing | |
Configure npppd server? | Network | Configure npppd server | |
Configure DHCP client? | Network |
VPNs and Proxies | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Site-to-site IPsec | Security | Provide site-to-site IPsec VPN | |
Site-to-site IPsec (vmm) | Security | Emulate site-to-site IPsec VPN with VMM | |
Road warrior IPsec | Network | Provide Roadwarrior IPsec VPNs | |
Road warrior IPsec (vmm) | Network | Emulate Roadwarrior IPsec VPNs | |
VPN clients | Security | Configure IPsec VPN client | |
Test VPN | Security | Test IP address behind VPN | |
Binat IPsec | Network | Host home from with IPsec |
Secure Shell | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
sshd | Security | Configure and start sshd | |
ssh fingerprints | Security | Verify SSH fingerprints | |
ssh agent? | Security | Configure ssh agent | |
OpenSSH | Security | Configure ssh and connect securely | |
Generate SSH Keys | Security | Generate SSH keys | Extend VPS 1 week |
SSH keys | Security | Verify ssh keys | |
SSH backdoor | Security | Configure ssh side channel to avoid DDoS | |
Chroot SFTP | Security | Configure sftp inside a chroot | |
Chroot sshd | Network | Configure ssh users inside a chroot | |
Chroot openrsync | Network | Configure openrsync inside a chroot | Extend VPS 1 week |
Further Reading | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
OpenBSD Books | BSD | OpenBSD recommended reading | |
Unix Books | BSD | Unix recommended reading |
Minutemin | |||
---|---|---|---|
Lesson | Topic | Description | Reward |
Welcome to the Team | Civics | Learn Team Responsibilities | |
Testing Servers | Civics | Learn Team Procedure for Testing | |
Announcements | Civics | Announce downtime and updates for users | Extend VPS 1 week |