Learning Paths by Role

Want to help build a system like this? Here's what each role learns — and to what depth.

Pick the role you want to grow into, then read down its skills. The badge on each skill says how deep you need to go: just understand it, be able to use it, build it from scratch, or master it.

Depth:Awaregrasp the concept & trade-offsUseuse existing tools to get it doneBuildbuild, debug & integrate it yourselfMasterdesign, optimize & teach it

System Architect

Design the whole secure, scalable system and its trade-offs.

  • System design & trade-offsMaster
  • Isolation model (namespace / seccomp / cgroup)Builddeep enough to choose the right mix
  • Distributed systems & scaling (control vs data plane)Build
  • Threat modelingUse
  • Container vs microVM trade-offs (gVisor / Firecracker)Use
  • Observability by designUse

Backend / Platform Engineer

Build the Job Manager and the Sandbox Executor.

  • Linux systems programming (processes, syscalls)Build
  • Namespace / cgroup APIs (clone, unshare, cgroupfs)Build
  • Writing seccomp-BPF filtersBuild
  • Job queue & schedulingBuild
  • Container runtimes (runc / containerd)Use
  • Go / Rust / C (at least one)Build

Security Engineer

Harden isolation, model threats and stop sandbox escapes.

  • Linux security model (capabilities, LSM, seccomp)Master
  • Sandbox escapes & attack surfaceBuild
  • Policy: seccomp / AppArmor / SELinuxBuild
  • Threat modeling & red-teamingBuild
  • microVM isolation (Firecracker / KVM)Use
  • Vulnerability research & CVE trackingUse

DevOps / SRE

Deploy, scale, monitor and stay on-call for the platform.

  • Container orchestration (Kubernetes)Build
  • CI/CD & Infrastructure as Code (Terraform)Build
  • Observability (metrics / logs / alerts)Build
  • cgroup resource quota tuningUse
  • Autoscaling execution nodesBuild
  • Incident response & on-callUse

Frontend Engineer

Build the UI for upload, launch and result display.

  • HTML / CSS / JavaScript fundamentalsMaster
  • A frontend framework (React / Vue)Build
  • Live updates (WebSocket / SSE for job status)Build
  • REST API integrationBuild
  • Frontend security (XSS, output escaping)Use
  • UX & accessibilityUse

中文版