NixOS: Declarative Linux for Reproducible Sovereign Infrastructure Training Course

Gitea is a lightweight, open-source, self-hosted Git service offering repository management, code review, issue tracking, and CI/CD integration. It is an increasingly preferred alternative to GitHub and GitLab.com for teams requiring full sovereignty over source code, free from third-party service terms or data export restrictions.

GitLab Self-Managed is the on-premises deployment of the complete GitLab DevSecOps platform, encompassing source code management, CI/CD, container registry, security scanning, and monitoring. It represents a premier option for government and public sector organizations seeking comprehensive tooling capabilities without reliance on SaaS vendors or the risk of data exiting controlled networks.

This instructor-led, live training session in US (available online or onsite) is intended for intermediate to advanced DevOps engineers and system administrators responsible for deploying and managing self-hosted Kubernetes clusters for government use without reliance on commercial cloud dependencies.

Upon completion, participants will be capable of: deploying production-ready Kubernetes clusters using kubeadm on bare-metal or virtual machines; configuring high-availability control planes and etcd clusters; implementing container networking and storage for self-managed environments; and establishing monitoring and observability using self-hosted solutions.

This live, instructor-led training, available online or onsite, is designed for cloud professionals responsible for designing and implementing multi-cloud architectures that mitigate vendor lock-in and ensure data sovereignty.

Upon completion, participants will be equipped to identify vendor lock-in risks, design portable architectures, implement data sovereignty controls, and leverage cloud-agnostic tools.

This instructor-led, live training in US (available online or onsite) is tailored for network engineers and infrastructure specialists seeking to utilize SONiC and ONL for the deployment and management of open network infrastructure on white-box switches.

Upon completion, participants will demonstrate proficiency in understanding SONiC and ONL architectures, deploying open-source network operating systems on white-box hardware, configuring advanced networking features, and implementing monitoring and automation solutions for government environments.

This instructor-led, live training session, delivered either online or onsite, targets system administrators and infrastructure engineers engaged in the design, deployment, and management of private OpenStack cloud infrastructure for enterprise operations.

By the conclusion of this training, participants will demonstrate proficiency in understanding OpenStack architecture, deploying private cloud infrastructure, managing compute and storage resources, implementing security controls via Keystone, and applying enterprise-grade best practices.

This instructor-led live training in US (available online or onsite) is targeted at intermediate-level network engineers and infrastructure administrators who are responsible for implementing software-defined networks using open-source tools and technologies for government and other public sector operations.

By the conclusion of this training, participants will be proficient in designing SDN architectures, implementing Open vSwitch, configuring FRRouting, deploying SDN controllers, and automating network management processes.

This instructor-led, live training in US (available online or onsite) is designed for intermediate-level network and infrastructure professionals who aim to leverage open-source routing, switching, Wi-Fi, and management tools to design, deploy, and operate a self-managed enterprise network for government use.

By the conclusion of this training, participants will be equipped to design an open-source enterprise network architecture, configure routing, switching, and wireless services, enhance security and observability, and formulate an operational plan for sustained support.

Terraform is an open-source infrastructure-as-code platform that enables teams to define and provision data center infrastructure through a declarative configuration language. When utilized with self-hosted backends and on-premise providers, Terraform serves as a critical tool for sovereign infrastructure management, effectively mitigating risks associated with cloud vendor lock-in for government operations.

This instructor-led, live training program (available online or on-site) is tailored for intermediate infrastructure engineers aiming to utilize Terraform for managing self-hosted environments, including Proxmox, VMware, libvirt, and bare-metal provisioning.

Upon completion of this training, participants will possess the ability to:

• Construct robust Terraform configurations for on-premise and hybrid resources.
• Manage state securely using self-hosted backends such as PostgreSQL, S3-compatible storage, and Gitea.
• Leverage provisioners and custom providers to oversee the entire bare-metal lifecycle.
• Implement efficient workspaces, modular architectures, and variable hierarchies.
• Integrate Terraform into CI/CD pipelines for automated infrastructure delivery.

Format of the Course

• Interactive lectures and guided discussions.
• Extensive exercises and practical labs.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training track tailored to specific government requirements, please contact us to arrange specific details.

Uptime Kuma is a user-friendly, self-hosted monitoring tool designed to track the operational availability of web properties, services, and underlying infrastructure. It serves as a sovereign alternative to Pingdom, Datadog Synthetics, and UptimeRobot for organizations requiring direct control over monitoring data. This instructor-led, live training (available online or onsite) is tailored for beginner-to-intermediate Site Reliability Engineers (SREs) and DevOps professionals seeking to transition from cloud-based uptime monitoring to a self-hosted, sovereign status tracking platform for government and enterprise environments.

This instructor-led, live training in US (available online or on-site) is directed at security engineers and system administrators responsible for deploying and managing enterprise-grade self-hosted VPN solutions utilizing WireGuard and OpenVPN.

By the conclusion of this training, participants will be capable of deploying WireGuard and OpenVPN environments, designing scalable network architectures, integrating with enterprise identity systems, and maintaining the security and monitoring of VPN infrastructure.

OpenVPN and WireGuard represent the prevailing open-source protocols for virtual private networks. Establishing independent infrastructure ensures that no external entity can record traffic metadata, introduce advertisements, or respond to foreign data mandates. This training addresses both protocols to accommodate varying threat models and performance standards for government operations.

Wazuh is an open-source security platform that delivers unified XDR and SIEM capabilities for threat detection, integrity monitoring, incident response, and compliance. It consolidates endpoint telemetry into a self-managed analysis engine, serving as a reliable alternative to commercial platforms such as Splunk Enterprise Security, Microsoft Sentinel, and other cloud-native SIEMs, especially in contexts requiring data sovereignty for government use.

Woodpecker CI operates as a concise yet capable continuous integration system developed expressly for self-hosted Git forges including Gitea and Forgejo. It offers a low-footprint, Docker-native CI/CD experience that eliminates the administrative burden and licensing expenses inherent in enterprise-grade commercial platforms.

This instructor-led, live training in US (available online or onsite) is designed for intermediate to advanced security professionals seeking to implement Zero Trust Architecture using open-source tools and sovereign infrastructure for government operations.

Upon completion of this training, participants will be able to design Zero Trust architectures, deploy identity-aware proxies, implement dynamic authentication, secure microservices with service mesh, and monitor Zero Trust policies.