Return to Chapter 1
Linux field lab 01 · companion to the original chapter

Operation Unknown Host

You have an unprivileged shell on an unfamiliar Linux machine. Fingerprint it, establish your access, find three security-relevant anomalies, and document what you observed.

30–45 minutes Disposable Docker host 6 verified missions No host mounts or services
Rules of engagement

Work only inside the disposable container. Do not mount host folders. Investigation is read-only: identify and explain findings without changing permissions or deleting evidence.

Success criteria
  • Verify all six mission answers
  • Explain why each anomaly matters
  • Complete an after-action report

Launch the real lab

docker build -t praneeth-linux-lab-01 labs/linux-fundamentals
docker run --rm -it --network none --hostname unknown-host praneeth-linux-lab-01

Run these from the portfolio repository root. The Debian 12 container starts unprivileged, has no network, ports, or host mounts, and disappears when you exit.

Mission 01 / 06Foundation

Fingerprint the host

Start with situational awareness. Identify the distribution without trusting the hostname or terminal prompt.

Suggested commandcat /etc/os-release

Hint 1: Look for a machine-readable key rather than the marketing name.

After-action report

Write what you observed in professional language. This is saved only in your browser and is never sent to the site.