f3d0e536b6
kubestronaut-sim runs each exam task on a host of its own - a kind (kubeadm) cluster in rootless podman, or a QEMU/KVM Ubuntu VM for the CKS tasks that need their own kernel (Falco, AppArmor) - and puts a browser desktop in front of them, the way killer.sh and sailor.sh do. - ksim, sim/: the engine (sessions, drills, study mode, grading, coverage, audit), host and VM lifecycle, the desktop - images/: exam host images (common, CKS variant with its tools, VM guest) - cka/ (131 tasks), ckad/ (105), cks/ (110): task banks, curricula with study notes, reference solutions and scripted solutions Every domain of every track has at least 17 pool tasks. `./ksim audit` proves a task three ways: it seeds cleanly on its own host, scores nothing before anyone has worked on it, and reaches full marks when its scripted solution is run on the host as `candidate`. All 346 tasks pass (CKA audited 2026-10-13, CKAD and CKS 2026-10-12). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01JZPd3GGWyxTgAkL6a4gAJz
16 lines
628 B
YAML
16 lines
628 B
YAML
# trivy on an exam host (TRIVY_CONFIG points here).
|
|
#
|
|
# Images are fetched through the simulator's Docker Hub cache, like the kubelet's and podman's
|
|
# pulls, so a task that scans a handful of images does not eat into Docker Hub's anonymous pull
|
|
# limit. The cache speaks plain HTTP on the simulator's own network, hence `insecure`.
|
|
#
|
|
# One cache directory for every user of the host: the vulnerability database is 1.6 GB, and a
|
|
# task's grader (root) must read the same copy as the candidate, with or without sudo.
|
|
registry:
|
|
mirrors:
|
|
index.docker.io:
|
|
- ksim-registry:5000
|
|
insecure: true
|
|
cache:
|
|
dir: /var/lib/trivy
|