Learn / Build / Use

Cloud and Containers

Cloud architecture, managed services, containers, deployment paths, hybrid operations, and service validation.

6 learn6 build4 use1 capability mapsBrowse all topic paths

Capability Maps

How this path becomes useful work

Azure Resource Graph Reporting

Turn Azure inventory, patch, governance, and compliance data into reports that an operator can actually review.

Free boundary: Starter workbook ideas, Resource Graph queries, exported evidence, and manual interpretation guidance.
Paid value later: Polished workbook packs, query libraries, branded reports, scheduled evidence, and client-ready governance bundles.

01UnderstandValidate cloud state before control-plane changesTeach evidence-first Azure validation before changing policy, patch scope, networking, or onboarding state.02BuildBuild a reproducible Azure admin environmentPractice with a devcontainer that standardizes PowerShell, Terraform, and Azure CLI work.03UseStart with Azure Update Manager workbook evidenceUse Resource Graph and workbook structure to show patch compliance, pending updates, and unmanaged scope.04ExtendAdd Arc onboarding and patch-wave planningCombine Arc preflight evidence, update waves, scope selection, and owner review into a clearer report set.

05Automate / plannedExport repeatable governance snapshotsRun scheduled queries, retain JSON or CSV snapshots, and compare changes over time.

06IntegratePublish Azure reports for review cyclesPackage workbooks, static exports, or HTML summaries for patch, governance, and hybrid-cloud reviews.07Upgrade / plannedSell Azure report and governance packsPaid packs can include polished Resource Graph queries, workbooks, compliance summaries, and customer-ready report bundles.

Learn

Understand Cloud and Containers

Academy guides that explain the concepts, architecture, decisions, and durable operator patterns.

Cloud Evidence-First Validation Before Control-Plane ChangesUse this supporting Insight to capture cloud evidence before changing DNS, bindings, access policy, probes, or service configuration.Academycloud Comparing Cloud Validation Paths for DNS, Identity, Gateway, and Storage FailuresUse this supporting Insight to decide whether a cloud failure should be validated from DNS, identity, gateway, or storage first.Academycloud Comparing Container Validation Paths for Runtime, Registry, Network, and IngressUse this supporting Insight to decide whether a container failure should be validated from runtime, registry, network, or ingress first.Academycontainers Container Evidence-First Comparison Between Good and Broken Service PathsUse this supporting Insight to compare a working container path against the failing one before changing image, network, or ingress configuration.Academycontainers Planning Cloud App Publishing, Access, and Managed-Service Validation SafelyUse this parent Insight to plan cloud app publishing and access troubleshooting around path validation, service boundaries, safe changes, and rollback.Academycloud Planning Container Runtime, Registry, and Service-Networking Failures SystematicallyUse this parent Insight to isolate container failures by separating image, runtime, service-networking, and ingress branches before changing the stack.Academycontainers

Build

Practice Cloud and Containers

DIY projects that turn the concepts into working systems, labs, and repeatable environments.

Build a Homelab CI Pipeline for Docker Services with Rollback SupportA practical setup for a Continuous Integration (CI) pipeline in your homelab that automatically deploys Docker services from GitHub repositories and includes rollback capabilities.Docker StacksIntermediate2-4 hours Build a Raspberry Pi Container Host with Docker ComposeA Raspberry Pi Docker Compose host with health checks, safer update habits, and a small-service layout that is easy to maintain.Docker StacksIntermediate2 hours Build a Raspberry Pi Environmental Monitor for Rack Temperature, Power State, and Service AlertsBy following this guide, you will create a Raspberry Pi-based environmental monitor that tracks rack temperature, power state, and provides service alerts.Raspberry Pi HostingIntermediate2-3 hours Create a Docker-based Reverse Proxy Stack with Nginx Proxy Manager and Automatic TLS CertificatesSet up a Docker-based Nginx Proxy Manager stack for internal services that need repeatable TLS and routing.Docker StacksIntermediate1 hour Proxmox Starter Cluster Guide with Templates, Backups, and Service Placement RulesBuild a small Proxmox starter cluster with templates, backups, and placement rules you can reuse for later services.Virtualization PlatformsIntermediate3-5 hours Raspberry Pi Home Assistant Utility Node with MQTT and Zigbee2MQTTTurn a Raspberry Pi into a Home Assistant utility node for MQTT and Zigbee2MQTT with an update path you can repeat.Raspberry Pi HostingIntermediate2-3 hours

Use

Operate Cloud and Containers

Free Toolchest assets for checks, scripts, evidence, reporting, and practical operator work.

Azure Arc bulk onboarding CSV and logging starterReusable starter for Azure Arc onboarding waves using a host CSV, dry-run expectations, per-host logging, and repeatable result tracking suitable for tickets, change records, and post-wave reporting.TemplateHybrid Cloud OperationsRead-only Azure Arc onboarding preflight checklistPreflight checklist for onboarding Windows servers to Azure Arc. Confirms supported OS state, outbound connectivity, proxy/TLS behavior, local admin rights, target Azure placement, tagging, pilot scope, and rollback notes before any agent install.ChecklistHybrid Cloud OperationsRead-only Azure Update Manager patch wave planning templateOperator-ready planning template for Azure Update Manager patch waves covering scope, maintenance windows, reboot tolerance, exclusions, soak periods, rollback contacts, and stop-go criteria before scheduled patching.TemplateHybrid Cloud OperationsRead-only Internal IIS site rollout checklistOperator checklist for launching an internal IIS-hosted site with evidence capture for IIS role presence, site folder layout, bindings, app pool identity, DNS readiness, browser validation, and rollback notes.ChecklistApplication HostingRead-only