This repository provides a comprehensive environment for the Certified Kubernetes Security Specialist (CKS) course. It contains shell scripts for setting up Kubernetes clusters (master and worker nodes) on Ubuntu 24.04, along with numerous Kubernetes manifests demonstrating security concepts including network policies, OPA/Gatekeeper admission control, runtime auditing, supply chain security, and system hardening. The repository serves as both instructional material and practical setup tools for learning Kubernetes security practices. The architecture consists of three main components: cluster setup scripts (bash), Kubernetes YAML manifests for various security demonstrations, and documentation files. Key entry points are the install_master.sh and install_worker.sh scripts which automate cluster provisioning. The course-content directory organizes security topics into separate directories with corresponding YAML examples that can be applied via kubectl. While primarily educational, the repository contains several highly reusable components that demonstrate advanced engineering practices, particularly in the area of container security profiles.
LinuxGun is a collection of Bash shell scripts for Linux security incident response and system hardening. The core scripts (`linuxGun.sh`, `linuxGunPro.sh`, `linuxcheck.sh`) perform comprehensive checks across system information, user accounts, network connections, processes, files, logs, backdoors, tunnels, webshells, malware, memory, hacker tools, kernel modules, Kubernetes, and baseline security configurations. The toolset is designed for emergency triage by system administrators and security analysts, with color-coded output and modular function organization. It includes auxiliary tools for IP blocking (`blockIP.sh`), network interface monitoring (`monitorInter.sh`), process-to-IP connection mapping (`monitorPs2Ip.sh`), and a file upload server (`uploadServer.py`) for transmitting results. The repository also contains AI skill definitions (in `AI-skills/old/`) that describe an automated incident response workflow via SSH, though these appear to be experimental or deprecated. The codebase is functional but shows signs of rapid iteration, hardcoded assumptions (CentOS 7, specific command availability), incomplete modules, and mixed-language comments (Chinese/English). It is not a polished library but a practical, field-tested toolkit for Linux forensics.