Proving Ground: The Fundamentals Capstone

This is the Fundamentals capstone. No new commands, just everything from the path used together on one box, the way real work arrives.

You're 'student', with no sudo. The work belongs to a second account, ops, whose home directory is closed to you. The only way in is to log in as ops over ssh on this box's own ssh server (port 2222). A key for it is waiting at ~/.ssh/ops_key, but ssh won't accept it yet. Read the error and fix what it tells you.

Once you're in as ops:

1. Stop the runaway log-shipper process. app-server must keep running.

2. ~/app/config/secrets.env is readable by everyone. Make it readable by ops only.

3. ~/app/bin/deploy.sh won't run. Make it executable.

4. Pack the whole ~/app/logs directory into a .tar.gz archive.

Then, back as student:

5. Copy the archive to ~/evidence/logs.tar.gz with scp. Its port flag is a capital -P.

6. Count the FAILED logins in the collected auth.log and save the number in ~/answers/failed.txt.

The brief in ~/brief.txt has the ssh command to start with. Every step uses something from an earlier Fundamentals module.