System Programming for Linux Containers Training

Course code: M7D-SPLC02

• Course overview
• Course details
• Onsite courses
• Public courses: upcoming dates and pricing
• About the trainer
• Contact

Download System Programming for Linux Containers course description (PDF)

Course overview

This course provides a deep understanding of the Linux technologies (namely, set-UID/set-GID programs, capabilities, namespaces, cgroups, and seccomp) used to implement container, virtualization, and sandboxing systems. (These are the technologies used to build systems such as Docker, LXC, Firejail, and Flatpak.) The course also provides an understanding of the core APIs used to build system-level applications that run on such systems. Detailed explanations and carefully designed practical exercises provide participants with the knowledge needed both to troubleshoot container and sandboxing systems and to write complex applications that run on those systems. (The course does not cover administering container systems such as Docker and LXC, but by completion of the course participants will have a good understanding of various aspects of the underlying implementation and operation of such systems.)

• Courses are normally five days long, and are either delivered at a public training location or on-site at customer premises. The content may vary a little, according to specific requests and time constraints, but in broad terms will include the following topics:
  
  
  • Low-level file I/O
  • Processes; process credentials
  • Files, directories, and links
  • Signals
  • Creating processes and executing programs
  • System call tracing with strace
  • Cgroups
  • Seccomp
  • Privileged programs (set-UID, set-GID) and secure programming
  • Capabilities
  • Namespaces (UTS, mount, network, IPC, PID, cgroup, and user namespaces)
  • User namespaces in detail
  
  A more detailed list of topics can be found here.
  
  
• The course includes extensive practical sessions, some involving exeperiments from the shell while others involve writing programs (typically in C).
  
  
• This course is also available (in slightly extended form) as two separate pieces:
  
  
• Linux/UNIX System Programming Fundamentals (2 days)
• Linux Security and Isolation APIs (4 days)

Course details

For a detailed course outline, please look here.

The course employs a lecture+lab format.

Audience and prerequisites

The audience for this course includes designers and developers who are building, troubleshooting, and administering system-level applications for Linux-based container systems.

In order to get the most out of the course, participants should have:

• A good reading knowledge of the C programming language.

  The content of the course is applicable in a range of compiled programming languages, such as C, C++, Rust, and D and scripting languages such as Python, and participants are welcome to use their preferred language in the lab sessions.

• A knowledge of basic UNIX/Linux shell commands.

• A basic knowledge of make(1) is helpful, but not essential.

Note: previous system programming experience is not required.

Lab sessions

A significant part of the course is spent on practical exercises. The lab sessions also provide participants with the opportunity to obtain one-to-one assistance from the trainer on the course material and exercises.

Course materials

Course participants will receive two course books consisting of around 500 pages that include all of the slides used in the course. Some notable features of the course books are the following:

• The course books have been developed by the trainer, and they are constantly updated based on ongoing changes in the Linux kernel, the GNU C library, and the POSIX standards as well as practical teaching experience in courses. The course books are printed on demand: typically, a new version is printed for each course.
• The course books are closely integrated with The Linux Programming Interface (TLPI), via numerous references to precise locations in TLPI with more detail on various topics covered in the course.
• The course books include many example programs and exercises not found in TLPI.

In addition to the course book, participants will receive a copy of The Linux Programming Interface, in either ebook or printed form (or, when possible, both).

The following samples gives some idea of the course content and style of the course materials:

• Part of the File I/O course module.
• Part of the User Namespaces and Capabilities course module.
• Part of the Control Groups v1 course module.
• Part of the Seccomp course module.

Onsite courses

For onsite courses at your location, please email training@man7.org regarding availability and pricing.

Public courses: upcoming dates and pricing

For public 5-day online courses, the per-attendee price is €2900 + 19% German VAT (€3451) reduced to €2800 + 19% German VAT (total: €3332) when booked (and paid) at least 4 weeks before the start of the course.

For public 5-day courses in Munich, GERMANY, the per-attendee price is €3200 + 19% German VAT (MWSt).

For public courses in San Francisco, the per-attendee price is US$3700 plus applicable local taxes.

The course price includes the cost of training materials as well as lunch and refreshments. Discounts are available for multiple attendees from the same company or organization; please inquire at training@man7.org for details.

About the trainer

Michael Kerrisk has a unique set of qualifications and experience that ensure that course participants receive training of a very high standard:

• He has been programming on UNIX systems since 1987 and began teaching UNIX system programming courses in 1989.
• He is the author of The Linux Programming Interface, a 1550-page book widely acclaimed as the definitive work on Linux system programming.
• He is actively involved in Linux development—working with kernel developers on testing, review, and design of new Linux kernel-user-space APIs.
• Since 2004, he has been the maintainer of the Linux man-pages project, which provides the manual pages documenting the Linux kernel-user-space and GNU C library APIs.

For more information about the trainer, as well as many reasons why you might want to consider choosing man7.org training courses, please look here.

Contact

For further inquiries about the course, please contact us via one of the following methods:

• Email: training@man7.org
• Phone: +49 (89) 2155 2990 (German landline)

Mailing list

If you would like to be added to a mailing list to receive notifications of public training courses that are scheduled in the future, send a mail (noting your location) to training@man7.org. Likely future locations are Europe and USA West Coast, but other locations may also be possible, especially if they can be scheduled to coincide with an interesting conference.