DevOps, SRE и платформенная инженерия — контент-трек

Трек ведёт от Linux и сетей через доставку, контейнеры и облака к SRE, безопасности, аварийному восстановлению и созданию внутренних платформ.

Статусы

• [ ] — тема запланирована;
• ~ — черновик статьи;
• * — статья на ревью;
• [x] — опубликована и прошла критерии готовности.

Сводка

Раздел	Готово	Всего	%
01. Основы DevOps	0	22	0%
02. Эксплуатация Linux	0	28	0%
03. Сети и DNS	0	26	0%
04. Git и артефакты	0	20	0%
05. Непрерывная интеграция (CI)	0	24	0%
06. Непрерывная доставка (CD)	0	24	0%
07. Контейнеры	0	28	0%
08. Kubernetes	0	34	0%
09. Инфраструктура как код	0	28	0%
10. Конфигурация и секреты	0	20	0%
11. Основы облаков	0	28	0%
12. Наблюдаемость	0	30	0%
13. SRE и надёжность	0	28	0%
14. Безопасность и цепочка поставки	0	28	0%
15. Защита данных и аварийное восстановление	0	20	0%
16. Производительность и ресурсы	0	20	0%
17. Платформенная инженерия	0	24	0%
18. Эксплуатация и инциденты	0	22	0%
Итого	0	454	0%

---

01. Основы DevOps

• [ ] DevOps как operating model
• [ ] Systems Thinking
• [ ] Software Delivery Lifecycle
• [ ] Value Stream Mapping
• [ ] Feedback Loops
• [ ] Shared Ownership
• [ ] Automation Principles
• [ ] Reproducibility
• [ ] В эксплуатации: Idempotency
• [ ] Declarative и Imperative Management
• [ ] Immutable Infrastructure
• [ ] Pets и Cattle
• [ ] Control Plane и Data Plane
• [ ] Desired и Actual State
• [ ] Failure Domains
• [ ] Blast Radius
• [ ] Toil
• [ ] Operational Readiness
• [ ] Environments и Promotion
• [ ] Change Management
• [ ] DevOps Metrics
• [ ] DevOps Anti-patterns

02. Эксплуатация Linux

• [ ] Linux Architecture
• [ ] Kernel и User Space
• [ ] Processes и Threads
• [ ] Process Lifecycle
• [ ] В эксплуатации: Signals
• [ ] В эксплуатации: File Descriptors
• [ ] Filesystems
• [ ] Permissions и Ownership
• [ ] Users и Groups
• [ ] В эксплуатации: Namespaces
• [ ] В эксплуатации: Control Groups — раздел «Эксплуатация Linux»
• [ ] В эксплуатации: CPU Scheduling
• [ ] В эксплуатации: Virtual Memory
• [ ] В эксплуатации: Page Cache
• [ ] Disk I/O
• [ ] Mounts и Volumes
• [ ] В эксплуатации: systemd
• [ ] Journald
• [ ] В эксплуатации: Package Management
• [ ] Shell Fundamentals
• [ ] Bash Scripting
• [ ] В эксплуатации: Environment Variables
• [ ] В эксплуатации: Cron и Timers
• [ ] В эксплуатации: SSH
• [ ] Linux Security Boundaries
• [ ] В эксплуатации: Resource Limits — раздел «Эксплуатация Linux»
• [ ] Linux Troubleshooting
• [ ] Linux Performance Tools

03. Сети и DNS

• [ ] OSI и TCP/IP Models
• [ ] Ethernet и ARP
• [ ] IP Addressing
• [ ] В эксплуатации: Subnetting
• [ ] В эксплуатации: Routing
• [ ] Network Address Translation
• [ ] В эксплуатации: TCP
• [ ] В эксплуатации: UDP
• [ ] QUIC
• [ ] Ports и Sockets
• [ ] DNS Resolution
• [ ] DNS Record Types
• [ ] DNS Delegation
• [ ] DNS Caching
• [ ] В эксплуатации: HTTP Semantics
• [ ] В эксплуатации: HTTP/1.1, HTTP/2 и HTTP/3
• [ ] В эксплуатации: TLS
• [ ] Certificates и PKI
• [ ] Load Balancing
• [ ] В эксплуатации: Reverse Proxy
• [ ] Forward Proxy
• [ ] Firewalls
• [ ] Virtual Private Networks
• [ ] В эксплуатации: Service Discovery
• [ ] Network Debugging
• [ ] Network Failure Modes

04. Git и артефакты

• [ ] Git Object Model
• [ ] Commits, Trees и Blobs
• [ ] Branching Strategies
• [ ] В эксплуатации: Trunk-based Development
• [ ] Merge и Rebase
• [ ] Tags и Releases
• [ ] В эксплуатации: Git Hooks
• [ ] Signed Commits
• [ ] Repository Protection
• [ ] Monorepo и Polyrepo
• [ ] Artifact Management
• [ ] Package Registries
• [ ] Container Registries
• [ ] Artifact Versioning
• [ ] В эксплуатации: Semantic Versioning
• [ ] Dependency Locking
• [ ] Checksums и Signatures
• [ ] Artifact Retention
• [ ] Build Provenance
• [ ] Repository и Artifact Recovery

05. Непрерывная интеграция (CI)

• [ ] CI Goals
• [ ] Pipeline as Code
• [ ] Pipeline Stages
• [ ] Build Reproducibility
• [ ] Dependency Caching
• [ ] Parallel Jobs
• [ ] Test Selection
• [ ] Static Analysis
• [ ] В эксплуатации: Type Checking
• [ ] Unit и Integration Tests
• [ ] Contract Tests
• [ ] Security Scanning
• [ ] Secret Scanning
• [ ] Build Artifacts
• [ ] Ephemeral Runners
• [ ] Self-hosted Runners
• [ ] Runner Isolation
• [ ] Matrix Builds
• [ ] Flaky Pipeline Management
• [ ] Pipeline Observability
• [ ] CI Performance
• [ ] CI Failure Diagnosis
• [ ] Merge Gates
• [ ] CI Anti-patterns

06. Непрерывная доставка (CD)

• [ ] Continuous Delivery и Deployment
• [ ] Release Pipeline
• [ ] В эксплуатации: Environment Promotion
• [ ] Deployment Artifact Immutability
• [ ] Deployment Configuration
• [ ] Database Migration Delivery
• [ ] Rolling Deployment
• [ ] Blue-Green Deployment
• [ ] Canary Deployment
• [ ] В эксплуатации: Feature Flags
• [ ] Progressive Delivery
• [ ] Traffic Shifting
• [ ] Deployment Health Checks
• [ ] Automated Rollback
• [ ] Roll-forward Strategy
• [ ] Release Orchestration
• [ ] Change Approval Automation
• [ ] Release Notes
• [ ] Release Audit Trail
• [ ] В эксплуатации: Preview Environments — раздел «Непрерывная доставка (CD)»
• [ ] GitOps Delivery
• [ ] Multi-region Delivery
• [ ] Deployment Safety Review
• [ ] Delivery Metrics

07. Контейнеры

• [ ] Container Mental Model
• [ ] Linux Namespaces
• [ ] В эксплуатации: Control Groups — раздел «Контейнеры»
• [ ] Union Filesystems
• [ ] OCI Images
• [ ] OCI Runtime
• [ ] Image Layers
• [ ] Dockerfile
• [ ] Build Context
• [ ] Multi-stage Builds
• [ ] BuildKit
• [ ] Image Size Optimization
• [ ] Image Caching
• [ ] Container Networking
• [ ] Container Storage
• [ ] Volumes
• [ ] Container Lifecycle
• [ ] Entrypoint и Command
• [ ] Signals и Graceful Shutdown
• [ ] В эксплуатации: Health Checks — раздел «Контейнеры»
• [ ] В эксплуатации: Resource Limits — раздел «Контейнеры»
• [ ] Rootless Containers
• [ ] В эксплуатации: Container Security
• [ ] Image Scanning
• [ ] Container Logging
• [ ] Container Debugging
• [ ] В эксплуатации: Docker Compose
• [ ] Container Anti-patterns

08. Kubernetes

• [ ] Kubernetes Architecture
• [ ] API Server
• [ ] etcd
• [ ] Scheduler
• [ ] Controller Manager
• [ ] Kubelet
• [ ] Kubernetes API Model
• [ ] Reconciliation Loop
• [ ] В эксплуатации: Pods
• [ ] В эксплуатации: Deployments
• [ ] ReplicaSets
• [ ] StatefulSets
• [ ] DaemonSets
• [ ] Jobs и CronJobs
• [ ] В эксплуатации: Services
• [ ] Ingress и Gateway API
• [ ] ConfigMaps
• [ ] Secrets
• [ ] Persistent Volumes
• [ ] Storage Classes
• [ ] Requests и Limits
• [ ] Probes
• [ ] Scheduling
• [ ] Affinity и Anti-affinity
• [ ] Taints и Tolerations
• [ ] Pod Disruption Budgets
• [ ] Autoscaling
• [ ] Namespaces и Multi-tenancy
• [ ] В эксплуатации: RBAC
• [ ] Network Policies
• [ ] Admission Control
• [ ] Operators и CRD
• [ ] Kubernetes Upgrades
• [ ] Kubernetes Troubleshooting

09. Инфраструктура как код

• [ ] Infrastructure as Code Principles
• [ ] Declarative Resource Model
• [ ] Terraform Architecture
• [ ] Providers и Resources
• [ ] Variables и Outputs
• [ ] Expressions и Functions
• [ ] В эксплуатации: Modules
• [ ] State
• [ ] Remote State
• [ ] State Locking
• [ ] Plan и Apply
• [ ] Resource Graph
• [ ] Lifecycle Rules
• [ ] Import
• [ ] Drift Detection
• [ ] Refactoring State
• [ ] Workspaces
• [ ] В эксплуатации: Environment Strategy
• [ ] Module Versioning
• [ ] Testing Infrastructure Code
• [ ] Policy as Code
• [ ] IaC Security Scanning
• [ ] Secrets in IaC
• [ ] OpenTofu
• [ ] В эксплуатации: Configuration Management
• [ ] Image Baking
• [ ] IaC Delivery Pipeline
• [ ] IaC Failure и Recovery

10. Конфигурация и секреты

• [ ] Configuration Principles
• [ ] Configuration Sources
• [ ] Environment-specific Configuration
• [ ] Configuration Validation
• [ ] Dynamic Configuration
• [ ] Feature Configuration
• [ ] Configuration Drift
• [ ] Secret Lifecycle
• [ ] Secret Storage
• [ ] Secret Distribution
• [ ] Secret Rotation
• [ ] Short-lived Credentials
• [ ] Workload Identity
• [ ] Key Management Systems
• [ ] Envelope Encryption
• [ ] Certificate Management
• [ ] Public Key Infrastructure
• [ ] Secret Zero Problem
• [ ] Secret Leakage Response
• [ ] Configuration и Secret Audit

11. Основы облаков

• [ ] Cloud Service Models
• [ ] Shared Responsibility Model
• [ ] Regions и Availability Zones
• [ ] Accounts и Organizations
• [ ] Identity and Access Management
• [ ] Virtual Networks
• [ ] Subnets и Route Tables
• [ ] Security Groups
• [ ] Cloud Load Balancers
• [ ] Compute Services
• [ ] Autoscaling Groups
• [ ] В эксплуатации: Object Storage
• [ ] Block и File Storage
• [ ] Managed Databases
• [ ] Managed Queues и Streams
• [ ] Serverless
• [ ] Cloud DNS
• [ ] Content Delivery Networks
• [ ] Cloud Logging и Monitoring
• [ ] Cloud Key Management
• [ ] Private Connectivity
• [ ] Multi-account Architecture
• [ ] Resource Tagging
• [ ] Quotas и Limits
• [ ] Cost Allocation
• [ ] FinOps Fundamentals
• [ ] В эксплуатации: Multi-region Architecture
• [ ] Cloud Exit и Portability

12. Наблюдаемость

• [ ] Observability Mental Model
• [ ] Signals: Metrics, Logs и Traces
• [ ] Telemetry Context
• [ ] В эксплуатации: Structured Logging
• [ ] Log Levels
• [ ] Log Aggregation
• [ ] Metrics Types
• [ ] Labels и Cardinality
• [ ] RED Method
• [ ] USE Method
• [ ] В эксплуатации: Distributed Tracing
• [ ] В эксплуатации: Trace Sampling
• [ ] Context Propagation
• [ ] В эксплуатации: OpenTelemetry
• [ ] Instrumentation
• [ ] Dashboards
• [ ] В эксплуатации: Alerting
• [ ] Symptom-based Alerts
• [ ] Alert Routing
• [ ] Alert Fatigue
• [ ] Recording Rules
• [ ] Service Maps
• [ ] Synthetic Monitoring
• [ ] В эксплуатации: Real User Monitoring
• [ ] Black-box Monitoring
• [ ] Observability Pipelines
• [ ] Telemetry Storage и Retention
• [ ] Observability Cost
• [ ] Debugging with Telemetry
• [ ] Observability Anti-patterns

13. SRE и надёжность

• [ ] Site Reliability Engineering
• [ ] Reliability as a Feature
• [ ] Service Level Indicators
• [ ] Service Level Objectives
• [ ] Service Level Agreements
• [ ] В эксплуатации: Error Budgets
• [ ] Availability Math
• [ ] Latency SLO
• [ ] Multi-window Burn-rate Alerts
• [ ] Reliability Risk Model
• [ ] В эксплуатации: Failure Modes
• [ ] В эксплуатации: Fault Isolation
• [ ] В эксплуатации: Redundancy
• [ ] В эксплуатации: Graceful Degradation
• [ ] Timeouts
• [ ] Retries и Backoff
• [ ] Circuit Breakers
• [ ] Bulkheads
• [ ] В эксплуатации: Rate Limiting
• [ ] В эксплуатации: Load Shedding
• [ ] В эксплуатации: Health Checks — раздел «SRE и надёжность»
• [ ] В эксплуатации: High Availability
• [ ] В эксплуатации: Chaos Engineering
• [ ] Reliability Testing
• [ ] Toil Management
• [ ] В эксплуатации: Production Readiness Review
• [ ] Reliability Reviews
• [ ] SRE Anti-patterns

14. Безопасность и цепочка поставки

• [ ] DevSecOps Operating Model
• [ ] В эксплуатации: Threat Modeling
• [ ] В эксплуатации: Trust Boundaries
• [ ] В эксплуатации: Least Privilege
• [ ] Zero Trust
• [ ] Identity Federation
• [ ] Privileged Access Management
• [ ] Network Segmentation
• [ ] Host Hardening
• [ ] Container Hardening
• [ ] Kubernetes Security
• [ ] Cloud Security Posture
• [ ] Vulnerability Management
• [ ] Patch Management
• [ ] Dependency Scanning
• [ ] Static Application Security Testing
• [ ] Dynamic Application Security Testing
• [ ] Infrastructure Security Scanning
• [ ] Software Bill of Materials
• [ ] Artifact Signing
• [ ] Provenance и SLSA
• [ ] Admission Policies
• [ ] Runtime Security
• [ ] Security Logging
• [ ] Security Incident Response
• [ ] Compliance as Code
• [ ] Security Exceptions
• [ ] Supply-chain Threats

15. Защита данных и аварийное восстановление

• [ ] Data Classification
• [ ] Backup Strategy
• [ ] Full и Incremental Backups
• [ ] Snapshots
• [ ] Backup Consistency
• [ ] Backup Encryption
• [ ] Backup Retention
• [ ] Restore Testing
• [ ] Recovery Point Objective
• [ ] Recovery Time Objective
• [ ] Disaster Recovery Strategy
• [ ] Active-Passive Recovery
• [ ] Active-Active Recovery
• [ ] Cross-region Replication
• [ ] Database Point-in-time Recovery
• [ ] Immutable Backups
• [ ] Ransomware Recovery
• [ ] DR Runbooks
• [ ] Disaster Recovery Exercises
• [ ] Data Deletion и Compliance

16. Производительность и ресурсы

• [ ] Performance Model
• [ ] Workload Characterization
• [ ] В эксплуатации: Capacity Planning
• [ ] CPU Saturation
• [ ] Memory Pressure
• [ ] Disk Performance
• [ ] Network Performance
• [ ] Queueing Fundamentals
• [ ] Latency Percentiles
• [ ] Throughput
• [ ] Concurrency
• [ ] Bottleneck Analysis
• [ ] В эксплуатации: Load Testing
• [ ] Stress Testing
• [ ] Soak Testing
• [ ] В эксплуатации: Performance Profiling
• [ ] Resource Right-sizing
• [ ] Autoscaling Strategy
• [ ] Capacity Forecasting
• [ ] В эксплуатации: Performance Budgets

17. Платформенная инженерия

• [ ] Platform Engineering Principles
• [ ] Platform as a Product
• [ ] Internal Developer Platform
• [ ] В эксплуатации: Developer Experience
• [ ] User Research for Platforms
• [ ] Golden Paths
• [ ] Paved Roads
• [ ] Self-service Infrastructure
• [ ] Service Catalog
• [ ] Software Templates
• [ ] Developer Portal
• [ ] Platform APIs
• [ ] Platform Contracts
• [ ] В эксплуатации: Multi-tenancy
• [ ] Policy Guardrails
• [ ] Environment Provisioning
• [ ] В эксплуатации: Preview Environments — раздел «Платформенная инженерия»
• [ ] Observability as a Service
• [ ] Secrets as a Service
• [ ] Platform Reliability
• [ ] Platform Security
• [ ] Platform Adoption
• [ ] Platform Metrics
• [ ] В эксплуатации: Build vs Buy

18. Эксплуатация и инциденты

• [ ] Operations Model
• [ ] В эксплуатации: On-call
• [ ] On-call Readiness
• [ ] В эксплуатации: Runbooks
• [ ] Playbooks
• [ ] Incident Classification
• [ ] Incident Command
• [ ] Triage
• [ ] Mitigation и Resolution
• [ ] Communication During Incidents
• [ ] Status Pages
• [ ] Escalation
• [ ] Evidence Preservation
• [ ] Post-incident Review
• [ ] Blameless Postmortems
• [ ] Corrective Actions
• [ ] Recurring Incident Analysis
• [ ] Game Days
• [ ] Operational Reviews
• [ ] Maintenance Windows
• [ ] Capacity и Security Events
• [ ] Continuous Operational Improvement

---

Правила ведения

1. Каждая статья объясняет control loop, state и failure modes, а не только команды инструмента.
2. Production-пример содержит безопасный rollback, проверку результата и диагностический путь.
3. Практика помечает команды, способные менять или удалять инфраструктуру и данные.
4. Интерактивный тест включает incident scenario, troubleshooting или design decision.
5. Tracker проверяется командой pnpm content:validate.