Build a local image from a Containerfile
Build from a reviewed Containerfile and empty context, run the one-shot result, and remove the local test image.
Open guideHow-to guides
24guides
Capture reviewable workload evidence
Pair a minimal redacted screenshot with timestamped command output for the same named local container.
Open guideCreate a model selection record
Record a documented model identifier, constraints, and two fixture runs for one narrow task.
Open guideDefine a small AI evaluation
Create fixed ordinary, absent-answer, and hostile-content cases with observable pass criteria and named revisions.
Open guideDeploy a temporary local Kubernetes workload
Verify the local context, apply one reviewed Deployment manifest, confirm rollout, and delete it with the same file.
Open guideGenerate Kubernetes YAML from a pod
Create a local-only pod, generate Kubernetes-style YAML for review, and remove the exact test pod.
Open guideIdentify the local Podman connection
Check Podman Desktop resources and podman version before managing any local workload.
Open guideInspect a Podman machine
Use Desktop and read-only machine commands to identify an existing local machine before creating another.
Open guideInspect a test container
Confirm the container identity before collecting logs, inspecting metadata, or opening a terminal.
Open guideInspect an image before cleanup
Pull a fully qualified image, inspect its digest, confirm no container uses it, and remove only that image.
Open guideInstall Podman Desktop safely
Use the official installer and supported onboarding flow, pausing for required device-owner approval.
Open guideMap a private model service boundary
List allowed connections, distinct service identities, authorization rules, and a denied-access test before using real documents.
Open guideOpenCode Setup: From Your Laptop to Your First App
Seminar-day checklist: what to bring, the internet check, the recovery card and instructor rehearsal. Setting up OpenCode itself is taught in the L1 book Start With OpenCode.
Open guidePrepare a local Kubernetes target
Create or identify an approved local Kind cluster, select its context, and verify it with read-only kubectl checks.
Open guideRun a disposable local container
Pull a named NGINX image, bind it only to loopback, verify it locally, then stop and delete the test container.
Open guideRun the Compose guestbook demo
Review the Compose file, run the localhost-only guestbook stack, then remove its services and course volume.
Open guideSpecify a read-only MCP tool
Define an allowlisted input schema, authenticated caller, authorization rule, minimal output, and explicit error outcomes.
Open guideTest a cited RAG answer
Use a small approved or synthetic collection, inspect retrieved passages, and retain an unsupported question as a regression test.
Open guideTest an inference route
Record the route, scoped identity, permitted data class, synthetic response, denied identity, and rollback reference.
Open guideTest an LLM gateway route
Separate client and provider credentials, enforce route limits, verify an allowed test request, and verify a denied route request.
Open guideTest persistent container data
Write a marker to a named volume and read it from a new container to verify the data outlives the first container.
Open guideTest private container networking
Create a temporary user-defined network and verify internal name resolution without publishing a host port.
Open guideTroubleshoot Podman without resetting
Record the first error, selected connection, engine state, container state, and Kubernetes context before attempting recovery.
Open guideWrite an agent sandbox contract
Define a disposable workspace, disabled network, scoped identity, resource limits, termination events, and cleanup.
Open guide