00
lab-skeleton
examples/00-lab-skeleton
Files in the ZIP · 7
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdnotes/lab-checklist.txtrun.sh
CTR · Container runtime
containerd Workshop
Runtime architecture, OCI and CRI, content store, snapshotters, registry integration, Kubernetes nodes, rootless operation, hardening and incident response.
containerd
My learning progress
With the web app option enabled, your progress is stored on this device.
Learning progress in the web app
Mark chapters as read, view reading progress and check off practice modules after enabling the optional web app. Workshop progress is calculated from chapters across all document pages. Your choices stay on this device; there is no account or server sync. Installation is not required. Withdrawing your choice in Privacy settings deletes the progress.
Workshop progress0%
Practice modules completed0 / 31
Documents read0 / 94
Workshop progress0%
0 / 1300 chapters readCompleted
Orthevs Academy · Orthevs
containerd as a learning path
This learning path provides knowledge and practice. Requirements, ownership and evidence must be defined separately for production Orthevs processes.
Technical workshop
One learning framework. Distinct technical subjects.
All workshops follow the same robust topology: central documentation, progressive workshop levels, exercises, assessments, runnable examples and supporting scripts. The Academy preserves this organization instead of dissolving the material into isolated articles or decorative course cards.
Learning material
Documentation in the Orthevs Wiki
The material retains its subject-specific structure. German and English versions are cross-linked, and diagrams are generated directly from the included Mermaid sources.
Workshop overview
1Technical documentation
13
English · 80.4 KB
Architecture: containerd
Scope is treated as a reviewable containerd building block in this workshop. The relevant point is not just a command, but its position in the daemon, API, plugin, snapshotter, runtime, CRI or Kubernetes node layer.
Open document ↗Read English · 80.5 KBBest Practices: containerd
Scope is treated as a reviewable containerd building block in this workshop. The relevant point is not just a command, but its position in the daemon, API, plugin, snapshotter, runtime, CRI or Kubernetes node layer.
Open document ↗Read English · 80.4 KBCommand Reference: containerd
Scope is treated as a reviewable containerd building block in this workshop. The relevant point is not just a command, but its position in the daemon, API, plugin, snapshotter, runtime, CRI or Kubernetes node layer.
Open document ↗Read English · 80.3 KBConcepts: containerd
Scope is treated as a reviewable containerd building block in this workshop. The relevant point is not just a command, but its position in the daemon, API, plugin, snapshotter, runtime, CRI or Kubernetes node layer.
Open document ↗Read English · 80.3 KBCurriculum: containerd
Scope is treated as a reviewable containerd building block in this workshop. The relevant point is not just a command, but its position in the daemon, API, plugin, snapshotter, runtime, CRI or Kubernetes node layer.
Open document ↗Read English · 80.3 KBDiagrams: containerd
Scope is treated as a reviewable containerd building block in this workshop. The relevant point is not just a command, but its position in the daemon, API, plugin, snapshotter, runtime, CRI or Kubernetes node layer.
Open document ↗Read English · 80.6 KBCloud Environment: containerd
Scope is treated as a reviewable containerd building block in this workshop. The relevant point is not just a command, but its position in the daemon, API, plugin, snapshotter, runtime, CRI or Kubernetes node layer.
Open document ↗Read English · 81.0 KBBare Metal Environment: containerd
Scope is treated as a reviewable containerd building block in this workshop. The relevant point is not just a command, but its position in the daemon, API, plugin, snapshotter, runtime, CRI or Kubernetes node layer.
Open document ↗Read English · 80.7 KBVM Environment: containerd
Scope is treated as a reviewable containerd building block in this workshop. The relevant point is not just a command, but its position in the daemon, API, plugin, snapshotter, runtime, CRI or Kubernetes node layer.
Open document ↗Read English · 80.6 KBWSL Environment: containerd
Scope is treated as a reviewable containerd building block in this workshop. The relevant point is not just a command, but its position in the daemon, API, plugin, snapshotter, runtime, CRI or Kubernetes node layer.
Open document ↗Read English · 80.3 KBOperations: containerd
Scope is treated as a reviewable containerd building block in this workshop. The relevant point is not just a command, but its position in the daemon, API, plugin, snapshotter, runtime, CRI or Kubernetes node layer.
Open document ↗Read English · 80.3 KBSecurity: containerd
Scope is treated as a reviewable containerd building block in this workshop. The relevant point is not just a command, but its position in the daemon, API, plugin, snapshotter, runtime, CRI or Kubernetes node layer.
Open document ↗Read English · 80.6 KBTroubleshooting: containerd
Scope is treated as a reviewable containerd building block in this workshop. The relevant point is not just a command, but its position in the daemon, API, plugin, snapshotter, runtime, CRI or Kubernetes node layer.
Open document ↗ReadWorkshop levels
4
English · 86.8 KB
Fundamentals: containerd
Fundamentals of containerd, OCI, images, content store, snapshotters, containers and tasks.
Open document ↗Read English · 86.8 KBIntermediate: containerd
CRI, Kubernetes node, registry configuration, CNI, cgroups, crictl and nerdctl.
Open document ↗Read English · 86.8 KBProfessional: containerd
Operations, upgrades, garbage collection, observability, rootless and runtime strategies.
Open document ↗Read English · 87.1 KBAdvanced Security: containerd
Threat modeling, sandbox runtimes, image trust, seccomp, AppArmor, SBOM and incident response.
Open document ↗ReadExercises
4
English · 39.9 KB
Exercises: Fundamentals containerd
Fundamentals of containerd, OCI, images, content store, snapshotters, containers and tasks.
Open document ↗Read English · 39.9 KBExercises: Intermediate containerd
CRI, Kubernetes node, registry configuration, CNI, cgroups, crictl and nerdctl.
Open document ↗Read English · 39.9 KBExercises: Professional containerd
Operations, upgrades, garbage collection, observability, rootless and runtime strategies.
Open document ↗Read English · 40.0 KBExercises: Advanced Security containerd
Threat modeling, sandbox runtimes, image trust, seccomp, AppArmor, SBOM and incident response.
Open document ↗ReadAssessments and solutions
9
English · 37.5 KB
Assessment: Fundamentals containerd
Explain containerd components in the context of containerd. Refer to official concepts, name suitable commands or artifacts and describe a realistic failure mode.
Open document ↗Read English · 43.9 KBSolution: Fundamentals containerd
A good answer for containerd components names the concrete containerd layer, relates it to OCI, CRI or Kubernetes and provides at least one reproducible piece of evidence. It avoids production endpoints and documents whether the statemen…
Open document ↗Read English · 37.5 KBAssessment: Intermediate containerd
Explain containerd components in the context of containerd. Refer to official concepts, name suitable commands or artifacts and describe a realistic failure mode.
Open document ↗Read English · 43.9 KBSolution: Intermediate containerd
A good answer for containerd components names the concrete containerd layer, relates it to OCI, CRI or Kubernetes and provides at least one reproducible piece of evidence. It avoids production endpoints and documents whether the statemen…
Open document ↗Read English · 37.5 KBAssessment: Professional containerd
Explain containerd components in the context of containerd. Refer to official concepts, name suitable commands or artifacts and describe a realistic failure mode.
Open document ↗Read English · 43.9 KBSolution: Professional containerd
A good answer for containerd components names the concrete containerd layer, relates it to OCI, CRI or Kubernetes and provides at least one reproducible piece of evidence. It avoids production endpoints and documents whether the statemen…
Open document ↗Read English · 37.6 KBAssessment: Advanced Security containerd
Explain containerd components in the context of containerd. Refer to official concepts, name suitable commands or artifacts and describe a realistic failure mode.
Open document ↗Read English · 44.0 KBSolution: Advanced Security containerd
A good answer for containerd components names the concrete containerd layer, relates it to OCI, CRI or Kubernetes and provides at least one reproducible piece of evidence. It avoids production endpoints and documents whether the statemen…
Open document ↗Read English · 33.0 KBOfficial Certifications and Exam Context: containerd
This workshop does not award a universal official containerd certificate. containerd knowledge is relevant for Kubernetes node operations, CRI diagnosis, runtime hardening and cloud-native platform work.
Open document ↗ReadPractice modules
Workshop examples as ZIP files
All 31 practice examples in this workshop are available as individual ZIP files. Choose an example to download its package directly.
01
runtime-inspection
examples/01-runtime-inspection
Files in the ZIP · 7
README-EL.mdREADME.mdcommands/inspect-runtime.shdocs/de/README.mddocs/el/README.mddocs/en/README.mdrun.sh
02
config-baseline
examples/02-config-baseline
Files in the ZIP · 7
README-EL.mdREADME.mdconfig/containerd-config.tomldocs/de/README.mddocs/el/README.mddocs/en/README.mdrun.sh
03
namespaces-and-metadata
examples/03-namespaces-and-metadata
Files in the ZIP · 8
README-EL.mdREADME.mdcommands/namespaces.shdocs/de/README.mddocs/el/README.mddocs/en/README.mdmetadata/namespaces.jsonrun.sh
04
image-pull-content
examples/04-image-pull-content
Files in the ZIP · 8
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdoci/image-descriptor.jsonoci/index.jsonrun.sh
05
snapshotter-overlayfs-model
examples/05-snapshotter-overlayfs-model
Files in the ZIP · 7
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdrun.shsnapshotter/overlayfs.toml
06
container-task-lifecycle
examples/06-container-task-lifecycle
Files in the ZIP · 7
README-EL.mdREADME.mdcommands/lifecycle.shdocs/de/README.mddocs/el/README.mddocs/en/README.mdrun.sh
07
oci-bundle-runc
examples/07-oci-bundle-runc
Files in the ZIP · 8
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdoci/config.jsonoci/rootfs.txtrun.sh
08
cri-crictl-sandbox
examples/08-cri-crictl-sandbox
Files in the ZIP · 8
README-EL.mdREADME.mdcri/crictl.yamlcri/pod-sandbox.jsondocs/de/README.mddocs/el/README.mddocs/en/README.mdrun.sh
09
registry-hosts-toml
examples/09-registry-hosts-toml
Files in the ZIP · 7
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdregistry/docker.io/hosts.tomlrun.sh
10
private-registry-tls-model
examples/10-private-registry-tls-model
Files in the ZIP · 8
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdregistry/registry.example.test/ca.crt.exampleregistry/registry.example.test/hosts.tomlrun.sh
11
cni-bridge-model
examples/11-cni-bridge-model
Files in the ZIP · 7
README-EL.mdREADME.mdcni/10-containerd-bridge.conflistdocs/de/README.mddocs/el/README.mddocs/en/README.mdrun.sh
12
kubernetes-node-runtime-config
examples/12-kubernetes-node-runtime-config
Files in the ZIP · 7
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdkubernetes/kubelet-runtime.yamlrun.sh
13
systemd-cgroup-config
examples/13-systemd-cgroup-config
Files in the ZIP · 8
README-EL.mdREADME.mdconfig/systemd-cgroup.tomldocs/de/README.mddocs/el/README.mddocs/en/README.mdrun.shsystemd/10-containerd-cgroups.conf
14
runtime-v2-shim
examples/14-runtime-v2-shim
Files in the ZIP · 8
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdrun.shruntime/runc-v2.tomlruntime/shim-flow.json
15
runtimeclass-sandboxed
examples/15-runtimeclass-sandboxed
Files in the ZIP · 8
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdkubernetes/pod-sandboxed.yamlkubernetes/runtimeclass-sandboxed.yamlrun.sh
16
rootless-containerd-model
examples/16-rootless-containerd-model
Files in the ZIP · 8
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdrootless/rootless-config.tomlrootless/rootless-containerd.servicerun.sh
17
nerdctl-workflow
examples/17-nerdctl-workflow
Files in the ZIP · 8
README-EL.mdREADME.mdcommands/nerdctl-workflow.shcompose/compose.yamldocs/de/README.mddocs/el/README.mddocs/en/README.mdrun.sh
18
garbage-collection-leases
examples/18-garbage-collection-leases
Files in the ZIP · 8
README-EL.mdREADME.mdcommands/gc-review.shdocs/de/README.mddocs/el/README.mddocs/en/README.mdgc/lease-model.jsonrun.sh
19
content-store-digests
examples/19-content-store-digests
Files in the ZIP · 8
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdoci/image-descriptor.jsonoci/index.jsonrun.sh
20
image-signature-verification-model
examples/20-image-signature-verification-model
Files in the ZIP · 8
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdpolicy/image-verification.jsonpolicy/verifier.tomlrun.sh
21
sbom-vulnerability-scan-model
examples/21-sbom-vulnerability-scan-model
Files in the ZIP · 8
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdrun.shsecurity/sbom.spdx.jsonsecurity/trivy-policy.yaml
22
lazy-pulling-stargz-model
examples/22-lazy-pulling-stargz-model
Files in the ZIP · 7
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdrun.shsnapshotter/stargz-config.toml
23
nydus-snapshotter-model
examples/23-nydus-snapshotter-model
Files in the ZIP · 7
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdrun.shsnapshotter/nydus-config.toml
24
kata-gvisor-runtime-model
examples/24-kata-gvisor-runtime-model
Files in the ZIP · 8
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdkubernetes/runtimeclasses.yamlrun.shruntime/sandbox-runtimes.toml
25
seccomp-apparmor-model
examples/25-seccomp-apparmor-model
Files in the ZIP · 9
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdkubernetes/pod-security-context.yamlrun.shsecurity/apparmor-profile.txtsecurity/seccomp-profile.json
26
resource-limits-cgroups
examples/26-resource-limits-cgroups
Files in the ZIP · 8
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdkubernetes/pod-resources.yamlresources/cgroup-settings.jsonrun.sh
27
logging-events-debugging
examples/27-logging-events-debugging
Files in the ZIP · 8
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdobservability/event-filters.shobservability/log-review.txtrun.sh
28
upgrade-backup-restore
examples/28-upgrade-backup-restore
Files in the ZIP · 8
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdoperations/config-backup.tomloperations/upgrade-plan.txtrun.sh
29
incident-response-registry
examples/29-incident-response-registry
Files in the ZIP · 8
README-EL.mdREADME.mddocs/de/README.mddocs/el/README.mddocs/en/README.mdincident/registry-incident-runbook.txtregistry/broken-mirror.tomlrun.sh
30
troubleshooting-runtime
examples/30-troubleshooting-runtime
Files in the ZIP · 8
README-EL.mdREADME.mdcommands/troubleshooting.shdocs/de/README.mddocs/el/README.mddocs/en/README.mdrun.shtroubleshooting/decision-tree.yaml
Material structure
The workshop's real directory structure.
Each area can be opened separately. Directories and material files appear in their actual hierarchy with their unchanged paths; the media directory is excluded in full.
Root files
README-EN.mdDocumentation39
docs/architecture-containerd-DE.md
docs/architecture-containerd-EN.md
docs/architecture-containerd-EL.md
docs/best-practices-containerd-DE.md
docs/best-practices-containerd-EN.md
docs/best-practices-containerd-EL.md
docs/commands-containerd-DE.md
docs/commands-containerd-EN.md
docs/commands-containerd-EL.md
docs/concepts-containerd-DE.md
docs/concepts-containerd-EN.md
docs/concepts-containerd-EL.md
docs/curriculum-containerd-DE.md
docs/curriculum-containerd-EN.md
docs/curriculum-containerd-EL.md
docs/diagrams-containerd-DE.md
docs/diagrams-containerd-EN.md
docs/diagrams-containerd-EL.md
docs/environment-cloud-containerd-DE.md
docs/environment-cloud-containerd-EN.md
docs/environment-cloud-containerd-EL.md
docs/environment-native-baremetal-containerd-DE.md
docs/environment-native-baremetal-containerd-EN.md
docs/environment-native-baremetal-containerd-EL.md
docs/environment-native-vm-containerd-DE.md
docs/environment-native-vm-containerd-EN.md
docs/environment-native-vm-containerd-EL.md
docs/environment-wsl-containerd-DE.md
docs/environment-wsl-containerd-EN.md
docs/environment-wsl-containerd-EL.md
docs/operations-containerd-DE.md
docs/operations-containerd-EN.md
docs/operations-containerd-EL.md
docs/security-containerd-DE.md
docs/security-containerd-EN.md
docs/security-containerd-EL.md
docs/troubleshooting-containerd-DE.md
docs/troubleshooting-containerd-EN.md
docs/troubleshooting-containerd-EL.md
Workshop levels12
workshops/01-fundamentals-containerd-DE.md
workshops/01-fundamentals-containerd-EN.md
workshops/01-fundamentals-containerd-EL.md
workshops/02-intermediate-containerd-DE.md
workshops/02-intermediate-containerd-EN.md
workshops/02-intermediate-containerd-EL.md
workshops/03-professional-containerd-DE.md
workshops/03-professional-containerd-EN.md
workshops/03-professional-containerd-EL.md
workshops/04-advanced-security-containerd-DE.md
workshops/04-advanced-security-containerd-EN.md
workshops/04-advanced-security-containerd-EL.md
Exercises12
exercises/01-fundamentals-exercises-containerd-DE.md
exercises/01-fundamentals-exercises-containerd-EN.md
exercises/01-fundamentals-exercises-containerd-EL.md
exercises/02-intermediate-exercises-containerd-DE.md
exercises/02-intermediate-exercises-containerd-EN.md
exercises/02-intermediate-exercises-containerd-EL.md
exercises/03-professional-exercises-containerd-DE.md
exercises/03-professional-exercises-containerd-EN.md
exercises/03-professional-exercises-containerd-EL.md
exercises/04-advanced-security-exercises-containerd-DE.md
exercises/04-advanced-security-exercises-containerd-EN.md
exercises/04-advanced-security-exercises-containerd-EL.md
Assessments & solutions27
assessments/01-fundamentals-containerd-assessment-DE.md
assessments/01-fundamentals-containerd-assessment-EN.md
assessments/01-fundamentals-containerd-assessment-EL.md
assessments/01-fundamentals-containerd-solution-DE.md
assessments/01-fundamentals-containerd-solution-EN.md
assessments/01-fundamentals-containerd-solution-EL.md
assessments/02-intermediate-containerd-assessment-DE.md
assessments/02-intermediate-containerd-assessment-EN.md
assessments/02-intermediate-containerd-assessment-EL.md
assessments/02-intermediate-containerd-solution-DE.md
assessments/02-intermediate-containerd-solution-EN.md
assessments/02-intermediate-containerd-solution-EL.md
assessments/03-professional-containerd-assessment-DE.md
assessments/03-professional-containerd-assessment-EN.md
assessments/03-professional-containerd-assessment-EL.md
assessments/03-professional-containerd-solution-DE.md
assessments/03-professional-containerd-solution-EN.md
assessments/03-professional-containerd-solution-EL.md
assessments/04-advanced-security-containerd-assessment-DE.md
assessments/04-advanced-security-containerd-assessment-EN.md
assessments/04-advanced-security-containerd-assessment-EL.md
assessments/04-advanced-security-containerd-solution-DE.md
assessments/04-advanced-security-containerd-solution-EN.md
assessments/04-advanced-security-containerd-solution-EL.md
assessments/05-official-certificates-containerd-DE.md
assessments/05-official-certificates-containerd-EN.md
assessments/05-official-certificates-containerd-EL.md
Practice modules407
examples/00-lab-skeleton
examples/00-lab-skeleton/docs
examples/00-lab-skeleton/docs/de
examples/00-lab-skeleton/docs/en
examples/00-lab-skeleton/notes
examples/01-runtime-inspection
examples/01-runtime-inspection/commands
examples/01-runtime-inspection/docs
examples/01-runtime-inspection/docs/de
examples/01-runtime-inspection/docs/en
examples/02-config-baseline
examples/02-config-baseline/config
examples/02-config-baseline/docs
examples/02-config-baseline/docs/de
examples/02-config-baseline/docs/en
examples/03-namespaces-and-metadata
examples/03-namespaces-and-metadata/commands
examples/03-namespaces-and-metadata/docs
examples/03-namespaces-and-metadata/docs/de
examples/03-namespaces-and-metadata/docs/en
examples/03-namespaces-and-metadata/metadata
examples/04-image-pull-content
examples/04-image-pull-content/docs
examples/04-image-pull-content/docs/de
examples/04-image-pull-content/docs/en
examples/04-image-pull-content/oci
examples/05-snapshotter-overlayfs-model
examples/05-snapshotter-overlayfs-model/docs
examples/05-snapshotter-overlayfs-model/docs/de
examples/05-snapshotter-overlayfs-model/docs/en
examples/05-snapshotter-overlayfs-model/snapshotter
examples/06-container-task-lifecycle
examples/06-container-task-lifecycle/commands
examples/06-container-task-lifecycle/docs
examples/06-container-task-lifecycle/docs/de
examples/06-container-task-lifecycle/docs/en
examples/07-oci-bundle-runc
examples/07-oci-bundle-runc/docs
examples/07-oci-bundle-runc/docs/de
examples/07-oci-bundle-runc/docs/en
examples/07-oci-bundle-runc/oci
examples/08-cri-crictl-sandbox
examples/08-cri-crictl-sandbox/cri
examples/08-cri-crictl-sandbox/docs
examples/08-cri-crictl-sandbox/docs/de
examples/08-cri-crictl-sandbox/docs/en
examples/09-registry-hosts-toml
examples/09-registry-hosts-toml/docs
examples/09-registry-hosts-toml/docs/de
examples/09-registry-hosts-toml/docs/en
examples/09-registry-hosts-toml/registry
examples/09-registry-hosts-toml/registry/docker.io
examples/10-private-registry-tls-model
examples/10-private-registry-tls-model/docs
examples/10-private-registry-tls-model/docs/de
examples/10-private-registry-tls-model/docs/en
examples/10-private-registry-tls-model/registry
examples/10-private-registry-tls-model/registry/registry.example.test
examples/11-cni-bridge-model
examples/11-cni-bridge-model/cni
examples/11-cni-bridge-model/docs
examples/11-cni-bridge-model/docs/de
examples/11-cni-bridge-model/docs/en
examples/12-kubernetes-node-runtime-config
examples/12-kubernetes-node-runtime-config/docs
examples/12-kubernetes-node-runtime-config/docs/de
examples/12-kubernetes-node-runtime-config/docs/en
examples/12-kubernetes-node-runtime-config/kubernetes
examples/13-systemd-cgroup-config
examples/13-systemd-cgroup-config/config
examples/13-systemd-cgroup-config/docs
examples/13-systemd-cgroup-config/docs/de
examples/13-systemd-cgroup-config/docs/en
examples/13-systemd-cgroup-config/systemd
examples/14-runtime-v2-shim
examples/14-runtime-v2-shim/docs
examples/14-runtime-v2-shim/docs/de
examples/14-runtime-v2-shim/docs/en
examples/14-runtime-v2-shim/runtime
examples/15-runtimeclass-sandboxed
examples/15-runtimeclass-sandboxed/docs
examples/15-runtimeclass-sandboxed/docs/de
examples/15-runtimeclass-sandboxed/docs/en
examples/15-runtimeclass-sandboxed/kubernetes
examples/16-rootless-containerd-model
examples/16-rootless-containerd-model/docs
examples/16-rootless-containerd-model/docs/de
examples/16-rootless-containerd-model/docs/en
examples/16-rootless-containerd-model/rootless
examples/17-nerdctl-workflow
examples/17-nerdctl-workflow/commands
examples/17-nerdctl-workflow/compose
examples/17-nerdctl-workflow/docs
examples/17-nerdctl-workflow/docs/de
examples/17-nerdctl-workflow/docs/en
examples/18-garbage-collection-leases
examples/18-garbage-collection-leases/commands
examples/18-garbage-collection-leases/docs
examples/18-garbage-collection-leases/docs/de
examples/18-garbage-collection-leases/docs/en
examples/18-garbage-collection-leases/gc
examples/19-content-store-digests
examples/19-content-store-digests/docs
examples/19-content-store-digests/docs/de
examples/19-content-store-digests/docs/en
examples/19-content-store-digests/oci
examples/20-image-signature-verification-model
examples/20-image-signature-verification-model/docs
examples/20-image-signature-verification-model/docs/de
examples/20-image-signature-verification-model/docs/en
examples/20-image-signature-verification-model/policy
examples/21-sbom-vulnerability-scan-model
examples/21-sbom-vulnerability-scan-model/docs
examples/21-sbom-vulnerability-scan-model/docs/de
examples/21-sbom-vulnerability-scan-model/docs/en
examples/21-sbom-vulnerability-scan-model/security
examples/22-lazy-pulling-stargz-model
examples/22-lazy-pulling-stargz-model/docs
examples/22-lazy-pulling-stargz-model/docs/de
examples/22-lazy-pulling-stargz-model/docs/en
examples/22-lazy-pulling-stargz-model/snapshotter
examples/23-nydus-snapshotter-model
examples/23-nydus-snapshotter-model/docs
examples/23-nydus-snapshotter-model/docs/de
examples/23-nydus-snapshotter-model/docs/en
examples/23-nydus-snapshotter-model/snapshotter
examples/24-kata-gvisor-runtime-model
examples/24-kata-gvisor-runtime-model/docs
examples/24-kata-gvisor-runtime-model/docs/de
examples/24-kata-gvisor-runtime-model/docs/en
examples/24-kata-gvisor-runtime-model/kubernetes
examples/24-kata-gvisor-runtime-model/runtime
examples/25-seccomp-apparmor-model
examples/25-seccomp-apparmor-model/docs
examples/25-seccomp-apparmor-model/docs/de
examples/25-seccomp-apparmor-model/docs/en
examples/25-seccomp-apparmor-model/kubernetes
examples/25-seccomp-apparmor-model/security
examples/26-resource-limits-cgroups
examples/26-resource-limits-cgroups/docs
examples/26-resource-limits-cgroups/docs/de
examples/26-resource-limits-cgroups/docs/en
examples/26-resource-limits-cgroups/kubernetes
examples/26-resource-limits-cgroups/resources
examples/27-logging-events-debugging
examples/27-logging-events-debugging/docs
examples/27-logging-events-debugging/docs/de
examples/27-logging-events-debugging/docs/en
examples/27-logging-events-debugging/observability
examples/28-upgrade-backup-restore
examples/28-upgrade-backup-restore/docs
examples/28-upgrade-backup-restore/docs/de
examples/28-upgrade-backup-restore/docs/en
examples/28-upgrade-backup-restore/operations
examples/29-incident-response-registry
examples/29-incident-response-registry/docs
examples/29-incident-response-registry/docs/de
examples/29-incident-response-registry/docs/en
examples/29-incident-response-registry/incident
examples/29-incident-response-registry/registry
examples/30-troubleshooting-runtime
examples/30-troubleshooting-runtime/commands
examples/30-troubleshooting-runtime/docs
examples/30-troubleshooting-runtime/docs/de
examples/30-troubleshooting-runtime/docs/en
examples/30-troubleshooting-runtime/troubleshooting
examples/.gitignore
examples/00-lab-skeleton/README.md
examples/00-lab-skeleton/README-EL.md
examples/00-lab-skeleton/docs/de/README.md
examples/00-lab-skeleton/docs/en/README.md
examples/00-lab-skeleton/docs/el/README.md
examples/00-lab-skeleton/notes/lab-checklist.txt
examples/00-lab-skeleton/run.sh
examples/01-runtime-inspection/README.md
examples/01-runtime-inspection/README-EL.md
examples/01-runtime-inspection/commands/inspect-runtime.sh
examples/01-runtime-inspection/docs/de/README.md
examples/01-runtime-inspection/docs/en/README.md
examples/01-runtime-inspection/docs/el/README.md
examples/01-runtime-inspection/run.sh
examples/02-config-baseline/README.md
examples/02-config-baseline/README-EL.md
examples/02-config-baseline/config/containerd-config.toml
examples/02-config-baseline/docs/de/README.md
examples/02-config-baseline/docs/en/README.md
examples/02-config-baseline/docs/el/README.md
examples/02-config-baseline/run.sh
examples/03-namespaces-and-metadata/README.md
examples/03-namespaces-and-metadata/README-EL.md
examples/03-namespaces-and-metadata/commands/namespaces.sh
examples/03-namespaces-and-metadata/docs/de/README.md
examples/03-namespaces-and-metadata/docs/en/README.md
examples/03-namespaces-and-metadata/docs/el/README.md
examples/03-namespaces-and-metadata/metadata/namespaces.json
examples/03-namespaces-and-metadata/run.sh
examples/04-image-pull-content/README.md
examples/04-image-pull-content/README-EL.md
examples/04-image-pull-content/docs/de/README.md
examples/04-image-pull-content/docs/en/README.md
examples/04-image-pull-content/docs/el/README.md
examples/04-image-pull-content/oci/image-descriptor.json
examples/04-image-pull-content/oci/index.json
examples/04-image-pull-content/run.sh
examples/05-snapshotter-overlayfs-model/README.md
examples/05-snapshotter-overlayfs-model/README-EL.md
examples/05-snapshotter-overlayfs-model/docs/de/README.md
examples/05-snapshotter-overlayfs-model/docs/en/README.md
examples/05-snapshotter-overlayfs-model/docs/el/README.md
examples/05-snapshotter-overlayfs-model/run.sh
examples/05-snapshotter-overlayfs-model/snapshotter/overlayfs.toml
examples/06-container-task-lifecycle/README.md
examples/06-container-task-lifecycle/README-EL.md
examples/06-container-task-lifecycle/commands/lifecycle.sh
examples/06-container-task-lifecycle/docs/de/README.md
examples/06-container-task-lifecycle/docs/en/README.md
examples/06-container-task-lifecycle/docs/el/README.md
examples/06-container-task-lifecycle/run.sh
examples/07-oci-bundle-runc/README.md
examples/07-oci-bundle-runc/README-EL.md
examples/07-oci-bundle-runc/docs/de/README.md
examples/07-oci-bundle-runc/docs/en/README.md
examples/07-oci-bundle-runc/docs/el/README.md
examples/07-oci-bundle-runc/oci/config.json
examples/07-oci-bundle-runc/oci/rootfs.txt
examples/07-oci-bundle-runc/run.sh
examples/08-cri-crictl-sandbox/README.md
examples/08-cri-crictl-sandbox/README-EL.md
examples/08-cri-crictl-sandbox/cri/crictl.yaml
examples/08-cri-crictl-sandbox/cri/pod-sandbox.json
examples/08-cri-crictl-sandbox/docs/de/README.md
examples/08-cri-crictl-sandbox/docs/en/README.md
examples/08-cri-crictl-sandbox/docs/el/README.md
examples/08-cri-crictl-sandbox/run.sh
examples/09-registry-hosts-toml/README.md
examples/09-registry-hosts-toml/README-EL.md
examples/09-registry-hosts-toml/docs/de/README.md
examples/09-registry-hosts-toml/docs/en/README.md
examples/09-registry-hosts-toml/docs/el/README.md
examples/09-registry-hosts-toml/registry/docker.io/hosts.toml
examples/09-registry-hosts-toml/run.sh
examples/10-private-registry-tls-model/README.md
examples/10-private-registry-tls-model/README-EL.md
examples/10-private-registry-tls-model/docs/de/README.md
examples/10-private-registry-tls-model/docs/en/README.md
examples/10-private-registry-tls-model/docs/el/README.md
examples/10-private-registry-tls-model/registry/registry.example.test/ca.crt.example
examples/10-private-registry-tls-model/registry/registry.example.test/hosts.toml
examples/10-private-registry-tls-model/run.sh
examples/11-cni-bridge-model/README.md
examples/11-cni-bridge-model/README-EL.md
examples/11-cni-bridge-model/cni/10-containerd-bridge.conflist
examples/11-cni-bridge-model/docs/de/README.md
examples/11-cni-bridge-model/docs/en/README.md
examples/11-cni-bridge-model/docs/el/README.md
examples/11-cni-bridge-model/run.sh
examples/12-kubernetes-node-runtime-config/README.md
examples/12-kubernetes-node-runtime-config/README-EL.md
examples/12-kubernetes-node-runtime-config/docs/de/README.md
examples/12-kubernetes-node-runtime-config/docs/en/README.md
examples/12-kubernetes-node-runtime-config/docs/el/README.md
examples/12-kubernetes-node-runtime-config/kubernetes/kubelet-runtime.yaml
examples/12-kubernetes-node-runtime-config/run.sh
examples/13-systemd-cgroup-config/README.md
examples/13-systemd-cgroup-config/README-EL.md
examples/13-systemd-cgroup-config/config/systemd-cgroup.toml
examples/13-systemd-cgroup-config/docs/de/README.md
examples/13-systemd-cgroup-config/docs/en/README.md
examples/13-systemd-cgroup-config/docs/el/README.md
examples/13-systemd-cgroup-config/run.sh
examples/13-systemd-cgroup-config/systemd/10-containerd-cgroups.conf
examples/14-runtime-v2-shim/README.md
examples/14-runtime-v2-shim/README-EL.md
examples/14-runtime-v2-shim/docs/de/README.md
examples/14-runtime-v2-shim/docs/en/README.md
examples/14-runtime-v2-shim/docs/el/README.md
examples/14-runtime-v2-shim/run.sh
examples/14-runtime-v2-shim/runtime/runc-v2.toml
examples/14-runtime-v2-shim/runtime/shim-flow.json
examples/15-runtimeclass-sandboxed/README.md
examples/15-runtimeclass-sandboxed/README-EL.md
examples/15-runtimeclass-sandboxed/docs/de/README.md
examples/15-runtimeclass-sandboxed/docs/en/README.md
examples/15-runtimeclass-sandboxed/docs/el/README.md
examples/15-runtimeclass-sandboxed/kubernetes/pod-sandboxed.yaml
examples/15-runtimeclass-sandboxed/kubernetes/runtimeclass-sandboxed.yaml
examples/15-runtimeclass-sandboxed/run.sh
examples/16-rootless-containerd-model/README.md
examples/16-rootless-containerd-model/README-EL.md
examples/16-rootless-containerd-model/docs/de/README.md
examples/16-rootless-containerd-model/docs/en/README.md
examples/16-rootless-containerd-model/docs/el/README.md
examples/16-rootless-containerd-model/rootless/rootless-config.toml
examples/16-rootless-containerd-model/rootless/rootless-containerd.service
examples/16-rootless-containerd-model/run.sh
examples/17-nerdctl-workflow/README.md
examples/17-nerdctl-workflow/README-EL.md
examples/17-nerdctl-workflow/commands/nerdctl-workflow.sh
examples/17-nerdctl-workflow/compose/compose.yaml
examples/17-nerdctl-workflow/docs/de/README.md
examples/17-nerdctl-workflow/docs/en/README.md
examples/17-nerdctl-workflow/docs/el/README.md
examples/17-nerdctl-workflow/run.sh
examples/18-garbage-collection-leases/README.md
examples/18-garbage-collection-leases/README-EL.md
examples/18-garbage-collection-leases/commands/gc-review.sh
examples/18-garbage-collection-leases/docs/de/README.md
examples/18-garbage-collection-leases/docs/en/README.md
examples/18-garbage-collection-leases/docs/el/README.md
examples/18-garbage-collection-leases/gc/lease-model.json
examples/18-garbage-collection-leases/run.sh
examples/19-content-store-digests/README.md
examples/19-content-store-digests/README-EL.md
examples/19-content-store-digests/docs/de/README.md
examples/19-content-store-digests/docs/en/README.md
examples/19-content-store-digests/docs/el/README.md
examples/19-content-store-digests/oci/image-descriptor.json
examples/19-content-store-digests/oci/index.json
examples/19-content-store-digests/run.sh
examples/20-image-signature-verification-model/README.md
examples/20-image-signature-verification-model/README-EL.md
examples/20-image-signature-verification-model/docs/de/README.md
examples/20-image-signature-verification-model/docs/en/README.md
examples/20-image-signature-verification-model/docs/el/README.md
examples/20-image-signature-verification-model/policy/image-verification.json
examples/20-image-signature-verification-model/policy/verifier.toml
examples/20-image-signature-verification-model/run.sh
examples/21-sbom-vulnerability-scan-model/README.md
examples/21-sbom-vulnerability-scan-model/README-EL.md
examples/21-sbom-vulnerability-scan-model/docs/de/README.md
examples/21-sbom-vulnerability-scan-model/docs/en/README.md
examples/21-sbom-vulnerability-scan-model/docs/el/README.md
examples/21-sbom-vulnerability-scan-model/run.sh
examples/21-sbom-vulnerability-scan-model/security/sbom.spdx.json
examples/21-sbom-vulnerability-scan-model/security/trivy-policy.yaml
examples/22-lazy-pulling-stargz-model/README.md
examples/22-lazy-pulling-stargz-model/README-EL.md
examples/22-lazy-pulling-stargz-model/docs/de/README.md
examples/22-lazy-pulling-stargz-model/docs/en/README.md
examples/22-lazy-pulling-stargz-model/docs/el/README.md
examples/22-lazy-pulling-stargz-model/run.sh
examples/22-lazy-pulling-stargz-model/snapshotter/stargz-config.toml
examples/23-nydus-snapshotter-model/README.md
examples/23-nydus-snapshotter-model/README-EL.md
examples/23-nydus-snapshotter-model/docs/de/README.md
examples/23-nydus-snapshotter-model/docs/en/README.md
examples/23-nydus-snapshotter-model/docs/el/README.md
examples/23-nydus-snapshotter-model/run.sh
examples/23-nydus-snapshotter-model/snapshotter/nydus-config.toml
examples/24-kata-gvisor-runtime-model/README.md
examples/24-kata-gvisor-runtime-model/README-EL.md
examples/24-kata-gvisor-runtime-model/docs/de/README.md
examples/24-kata-gvisor-runtime-model/docs/en/README.md
examples/24-kata-gvisor-runtime-model/docs/el/README.md
examples/24-kata-gvisor-runtime-model/kubernetes/runtimeclasses.yaml
examples/24-kata-gvisor-runtime-model/run.sh
examples/24-kata-gvisor-runtime-model/runtime/sandbox-runtimes.toml
examples/25-seccomp-apparmor-model/README.md
examples/25-seccomp-apparmor-model/README-EL.md
examples/25-seccomp-apparmor-model/docs/de/README.md
examples/25-seccomp-apparmor-model/docs/en/README.md
examples/25-seccomp-apparmor-model/docs/el/README.md
examples/25-seccomp-apparmor-model/kubernetes/pod-security-context.yaml
examples/25-seccomp-apparmor-model/run.sh
examples/25-seccomp-apparmor-model/security/apparmor-profile.txt
examples/25-seccomp-apparmor-model/security/seccomp-profile.json
examples/26-resource-limits-cgroups/README.md
examples/26-resource-limits-cgroups/README-EL.md
examples/26-resource-limits-cgroups/docs/de/README.md
examples/26-resource-limits-cgroups/docs/en/README.md
examples/26-resource-limits-cgroups/docs/el/README.md
examples/26-resource-limits-cgroups/kubernetes/pod-resources.yaml
examples/26-resource-limits-cgroups/resources/cgroup-settings.json
examples/26-resource-limits-cgroups/run.sh
examples/27-logging-events-debugging/README.md
examples/27-logging-events-debugging/README-EL.md
examples/27-logging-events-debugging/docs/de/README.md
examples/27-logging-events-debugging/docs/en/README.md
examples/27-logging-events-debugging/docs/el/README.md
examples/27-logging-events-debugging/observability/event-filters.sh
examples/27-logging-events-debugging/observability/log-review.txt
examples/27-logging-events-debugging/run.sh
examples/28-upgrade-backup-restore/README.md
examples/28-upgrade-backup-restore/README-EL.md
examples/28-upgrade-backup-restore/docs/de/README.md
examples/28-upgrade-backup-restore/docs/en/README.md
examples/28-upgrade-backup-restore/docs/el/README.md
examples/28-upgrade-backup-restore/operations/config-backup.toml
examples/28-upgrade-backup-restore/operations/upgrade-plan.txt
examples/28-upgrade-backup-restore/run.sh
examples/29-incident-response-registry/README.md
examples/29-incident-response-registry/README-EL.md
examples/29-incident-response-registry/docs/de/README.md
examples/29-incident-response-registry/docs/en/README.md
examples/29-incident-response-registry/docs/el/README.md
examples/29-incident-response-registry/incident/registry-incident-runbook.txt
examples/29-incident-response-registry/registry/broken-mirror.toml
examples/29-incident-response-registry/run.sh
examples/30-troubleshooting-runtime/README.md
examples/30-troubleshooting-runtime/README-EL.md
examples/30-troubleshooting-runtime/commands/troubleshooting.sh
examples/30-troubleshooting-runtime/docs/de/README.md
examples/30-troubleshooting-runtime/docs/en/README.md
examples/30-troubleshooting-runtime/docs/el/README.md
examples/30-troubleshooting-runtime/run.sh
examples/30-troubleshooting-runtime/troubleshooting/decision-tree.yaml
examples/README.md
Setup & helper scripts1
scripts/provision_containerd.sh
CTR · Orthevs Academy
Frame the workshop application together.
For internal training, learning paths or technical deep dives, scope, sequence and audience can be aligned with the intended context.