Skip to content
Clairos Learn

Capstone labs · Lesson 17 of 18 · 8 minutes

Capstone multi-signal outage

Correlate service, config, journal, listener, and capacity evidence for an outage.

Mastery 0/3Run itExplain itApply it
learner@clairosSimulated Linux lab
learner@clairos:~ $
↑ history · Tab complete · Ctrl+C cancel · Esc, Tab to leaveExit 0

Understand the pattern

Running an end-to-end outage investigation helps operators explain what they know before they change anything.

systemctl
Inspect or change a simulated systemd service. Status, active state, and unit configuration reveal different evidence.

A service can be active while an application endpoint is unhealthy; verify both layers.

nginx
Check the simulated configuration using nginx -t before changing service state.

This lab checks a limited configuration subset, not the complete Nginx parser.

journalctl
Read the training journal by unit or a bounded line window.

A relevant unit and time range are more useful than an unfiltered wall of logs.

ss
Inspect simulated listening sockets and connection information.

A listening socket is not proof of correct application responses or external reachability.

df
Inspect the virtual filesystem capacity report. Real systems can run out of space or inodes independently.

Available space is a snapshot, not a guarantee that a later write will succeed.

Worked example and expected result
$ systemctl status nginx
nginx.service - simulated nginx
   Loaded: loaded
   Active: active
   Notes: serving the simulated static learn site

Exit status: 0. The command completed successfully in the training fixture.

$ nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful

Exit status: 0. The command completed successfully in the training fixture.

$ journalctl -u nginx -n 2
May 26 08:10:01 clairos-learn nginx[42]: started static training site
May 26 08:20:05 clairos-learn nginx[42]: access denied for /api/test by static rule

Exit status: 0. The command completed successfully in the training fixture.

$ ss -tulpn
Netid State  Local Address:Port  Process
udp   UNCONN 0.0.0.0:68          lab-dhcp
tcp   LISTEN 0.0.0.0:22          sshd
tcp   LISTEN 0.0.0.0:80          nginx
tcp   LISTEN 0.0.0.0:443         nginx

Exit status: 0. The command completed successfully in the training fixture.

$ df -h
Filesystem      Size  Used Avail Use% Mounted on
lab-root         20G  6.4G   14G  32% /
lab-logs        2.0G  180M  1.9G   9% /var/log

Exit status: 0. The command completed successfully in the training fixture.

Try a variation

Repeat this workflow in the sandbox with a different scratch filename. Keep the system fixtures unchanged and compare the observed output with your expectation before moving on.

Explain it

In “Capstone multi-signal outage”, which interpretation is safe?

Apply it elsewhere

Before adapting the nginx workflow from “Capstone multi-signal outage” to another server, what should you do?

Keep the momentum.

Complete the lab, then explain and apply the pattern.

Next: Capstone verified restoreTry an incident drill

Anonymous lesson and mastery progress lasts for this session. Sign in to keep synced lesson XP between sessions; mastery stays device-local. No speed bonus, lost lives, or hint penalties.

Keep learning

  1. 01Capstone backup restore reviewReview backup manifest, archive, restored file, and checksum evidence.Practice
  2. 02Capstone verified restoreStage, compare, archive, and hash a restored web artifact.Practice