~/cheatsheets
Cheatsheets
137 cheatsheets. The 80/20 of tools I use daily — fact-checked, no fluff.
#all
#ai
#cicd
#cloud
#containers
#databases
#infrastructure
#languages
#messaging
#monitoring
#networking
#python
#security
#shell
#web
ai/
cicd/
- Argo Rollouts Progressive delivery controller for Kubernetes providing advanced deployment strategies like canary and blue/green.
- Argo Workflows Kubernetes-native workflow engine for orchestrating parallel jobs, DAGs, and complex pipelines with container-based task execution.
- ArgoCD GitOps continuous delivery tool for Kubernetes that declaratively manages applications from Git repositories.
- FluxCD GitOps toolkit for Kubernetes that enables continuous delivery through declarative configuration stored in Git repositories.
- Git Distributed version control system for tracking changes in source code during software development.
- GitHub Actions A powerful CI/CD platform integrated directly into GitHub repositories for automating build, test, and deployment workflows.
- GitLab CI/CD Comprehensive guide to GitLab's integrated continuous integration and deployment platform.
- Jenkins Automation server for building, testing, and deploying software through continuous integration and continuous delivery pipelines.
cloud/
- AWS Essential AWS CLI commands and service configurations for cloud infrastructure management.
- Azure Comprehensive reference for Microsoft Azure cloud services, CLI operations, and resource management.
- Google Cloud Platform (GCP) Essential gcloud CLI commands and GCP service patterns for compute, storage, networking, and serverless workloads.
containers/
- Cloud Native Buildpacks Building images without a Dockerfile: the CNB lifecycle, pack, builders and buildpacks, rebasing, kpack, and writing your own.
- Container Image Building Choosing and driving an image builder: BuildKit/buildx, Buildah, Kaniko, Stacker, apko/melange, and ko, with rootless, multi-arch, and reproducibility trade-offs.
- Container Image Optimisation Essential techniques and patterns for building efficient, secure, and maintainable container images.
- Container Registries Essential guide for managing container images across registries with docker, skopeo, and registry-specific CLI tools.
- Container Runtimes containerd and CRI-O: lightweight, production-grade container runtimes designed for Kubernetes and edge environments.
- Container Storage Interface (CSI) Basics Comprehensive guide to CSI drivers, volume management, and persistent storage in Kubernetes.
- Docker Essential commands and patterns for containerising applications with Docker.
- Docker Networking Deep Dive Comprehensive guide to Docker networking drivers, DNS, IPAM, and troubleshooting techniques.
- K3s A lightweight, certified Kubernetes distribution designed for resource-constrained environments, edge computing, and IoT deployments.
- Kubernetes Essential commands and patterns for managing containerised workloads with Kubernetes.
- Kubernetes Advanced Topics Advanced Kubernetes patterns, resources, and architectures for production-grade cluster management.
- Kubernetes Operators A comprehensive guide to building and managing Kubernetes Operators using the operator pattern to automate application lifecycle management.
- Kubernetes RBAC and Multi-Tenancy Comprehensive guide to Role-Based Access Control (RBAC), service accounts, namespace isolation, and multi-tenancy patterns in Kubernetes.
- Kubernetes Troubleshooting Playbook Systematic approaches for diagnosing and resolving common Kubernetes cluster issues.
- Minikube Local Kubernetes cluster running on a single machine for development, testing, and learning.
- Podman A daemonless, rootless container engine compatible with OCI standards and Docker CLI syntax.
- Podman Quadlets and systemd Declarative systemd integration for Podman: Quadlet unit types, multi-container pods, networks, timers, sdnotify, and healthchecks.
- Velero Kubernetes backup and restore tool for cluster resources and persistent volumes.
- zot Registry Running zot, the OCI-native registry: storage layouts, sync and mirroring, authentication, extensions, and air-gapped distribution.
databases/
infrastructure/
- Ansible Configuration management and automation tool for provisioning, configuration, and application deployment.
- Helm Kubernetes package manager for deploying and managing applications as charts.
- Kustomize Kubernetes-native configuration management tool for customising application deployments without templating.
- Packer HashiCorp's tool for automating the creation of machine images across multiple platforms from a single source configuration.
- Pulumi Modern Infrastructure as Code platform supporting multiple programming languages (Python, TypeScript, Go, C#, Java) for cloud resource provisioning.
- Terraform Infrastructure as Code tool for provisioning and managing cloud resources declaratively using HashiCorp Configuration Language (HCL).
languages/
- Bash A powerful Unix shell and command language for scripting, automation, and system administration.
- Go A statically typed, compiled language designed for simplicity, concurrency, and efficient systems programming.
- JavaScript A versatile, high-level programming language that enables dynamic, interactive web content and full-stack application development.
- Jinja2 Templating A comprehensive guide to Jinja2 template syntax, control structures, and patterns for configuration management.
messaging/
- gRPC A high-performance, open-source universal RPC framework that uses Protocol Buffers for serialisation and HTTP/2 for transport.
- MQTT A lightweight publish-subscribe messaging protocol designed for constrained devices and low-bandwidth, high-latency networks.
- NATS A high-performance, cloud-native messaging system designed for modern distributed systems with support for pub/sub, request/reply, and streaming.
- RabbitMQ Administration Advanced message broker administration covering exchange patterns, clustering, policies, and security hardening.
- WebSockets A full-duplex communication protocol enabling persistent, bidirectional connections between clients and servers over a single TCP connection.
monitoring/
- Datadog Cloud-based monitoring and analytics platform for infrastructure, applications, logs, and traces with unified observability.
- Fluentd/Fluent Bit A unified logging layer for collecting, processing, and routing logs from diverse sources to multiple destinations.
- Grafana Open-source analytics and interactive visualisation platform for monitoring metrics, logs, and traces from multiple data sources.
- Jaeger An open-source distributed tracing system for monitoring and troubleshooting microservices-based architectures.
- Load Testing (k6/Locust/JMeter) Performance testing tools for simulating user load, measuring system behaviour, and identifying bottlenecks under stress.
- Loki Log aggregation system designed for efficiency and cost-effectiveness, using labels for indexing rather than full-text indexing.
- OpenTelemetry A vendor-neutral observability framework for generating, collecting, and exporting telemetry data (traces, metrics, and logs) from cloud-native applications.
- Prometheus Time-series database and monitoring system for collecting, storing, and querying metrics with powerful alerting capabilities.
- SLOs, SLIs, and Error Budgets Service Level Objectives, Indicators, and Error Budget management for reliable systems.
networking/
- BSD Network Tools Inspecting and configuring networking on FreeBSD, OpenBSD, and NetBSD with ifconfig, route, netstat, and pf.
- Consul Service mesh and service discovery platform providing service registration, health checking, and distributed key/value storage.
- DNS Troubleshooting Diagnosing name resolution with dig, drill, host, and resolvectl: record types, CNAME chains, TTLs, authoritative vs recursive, DNSSEC, split-horizon, and common failure modes.
- Envoy Proxy Comprehensive guide to Envoy, a high-performance L7 proxy and communication bus for microservices.
- HAProxy High-performance TCP/HTTP load balancer and reverse proxy for distributing traffic across multiple servers.
- iptables/nftables Linux kernel firewall frameworks for packet filtering, NAT, and network traffic control.
- Istio Service Mesh Comprehensive guide to Istio service mesh for traffic management, security, and observability.
- Linux Network Tools Inspecting and configuring Linux host networking with iproute2 (ip, ss), tc, and friends.
- macOS Network Tools Inspecting and configuring networking on macOS with networksetup, scutil, ifconfig, pfctl, and the unified diagnostics tools.
- Nginx High-performance HTTP server and reverse proxy with load balancing, caching, and SSL termination capabilities.
- SSH & SSH Config Client-side SSH for daily SRE work: ~/.ssh/config, keys and agents, ProxyJump and bastions, local/remote/dynamic port forwarding, agent-forwarding risks, and SSH certificates.
- tcpdump/Wireshark Command-line and GUI tools for network packet capture and protocol analysis.
python/
- Python APScheduler A lightweight, in-process task scheduler for Python with cron-like capabilities, persistent job storage, and multiple execution backends.
- Python asyncio Asynchronous I/O framework for writing concurrent code using async/await syntax.
- Python Beautiful Soup A powerful HTML and XML parsing library for extracting data from web pages and structured documents.
- Python Bleach A library for sanitising and cleaning HTML text, commonly used to prevent XSS attacks in user-generated content.
- Python CLI Applications Modern Python command-line interface development using Click and Rich for building beautiful, functional terminal applications.
- Python Copier A library for rendering project templates with Jinja2, supporting prompts, hooks, and template updates.
- Python DateTime Comprehensive guide to date and time manipulation in Python using the datetime module.
- Python Debugging Tools Comprehensive guide to debugging, profiling, and troubleshooting Python applications.
- Python FastAPI A modern, high-performance web framework for building APIs with Python, featuring automatic validation, serialisation, and interactive documentation.
- Python Flask A lightweight WSGI web application framework for Python that provides tools, libraries, and technologies to build web applications.
- Python Logging The standard logging module done right: loggers, handlers, formatters, levels, structured/JSON logs, exception logging, correlation IDs, and async/multiprocessing pitfalls.
- Python-Magic File type identification library using libmagic for accurate MIME type detection and metadata extraction.
- Python Markdown A comprehensive guide to converting Markdown to HTML using the Python-Markdown library.
- Python MkDocs Static site generator that creates fast, simple documentation from Markdown files.
- Python os Module A standard library module providing portable operating system interfaces for file system operations, environment variables, and process management.
- Python Packaging and Dependency Management Modern Python packaging with pyproject.toml, build backends, version pinning, and reproducible builds for reliable dependency management.
- Python Paramiko A powerful SSH2 protocol library for Python that enables secure remote command execution and file transfers.
- Python Patterns Essential design patterns and architectural patterns for writing maintainable, scalable Python code.
- Python Pendulum Drop-in replacement for datetime with timezone support, human-friendly parsing, and intuitive API.
- Python pgvector A PostgreSQL extension and Python library for storing, indexing, and querying vector embeddings for similarity search applications.
- Python pika (RabbitMQ) Essential patterns and commands for building message-driven applications with RabbitMQ using the pika library.
- Python PIL/Pillow A comprehensive image processing library for Python enabling creation, manipulation, and analysis of images.
- Python Pydantic Data validation and settings management using Python type annotations.
- PyMuPDF (fitz) A high-performance Python library for PDF manipulation, text extraction, and document processing.
- Python pytesseract A Python wrapper for Google's Tesseract-OCR engine, enabling text extraction from images.
- Python pytest Powerful Python testing framework with fixtures, parametrisation, and plugin ecosystem.
- Python Redis High-performance in-memory data store client with support for streams, pub/sub, and complex data structures.
- Python Requests A powerful and elegant HTTP library for Python that simplifies making web requests and handling responses.
- Python - Sentry SDK Real-time error tracking and performance monitoring for Python applications.
- Python Sphinx Documentation generation tool that converts reStructuredText files into HTML, PDF, and other formats.
- Python SQLAlchemy A powerful Python SQL toolkit and Object-Relational Mapper (ORM) for database access and manipulation.
- Python SQLite with Vectors Working with SQLite databases and vector extensions for embeddings and semantic search in Python.
- Python - Type Hints and Static Analysis Type annotations for runtime validation and static analysis with mypy and pyright.
- Python uv Fast, all-in-one Python project and package manager: init, add, sync, run, tools, inline scripts, lockfiles, and migration from pip/poetry.
- Python Watchdog File system monitoring library for tracking changes to files and directories in real-time.
- Python PyYAML YAML parsing and serialisation library for Python with full YAML 1.1 support.
- Python Zeroconf (mDNS) Zero-configuration networking for service discovery and advertisement on local networks using multicast DNS.
security/
- Cert-Manager A Kubernetes add-on for automating the management and issuance of TLS certificates from various sources.
- Clair Running Clair v4 as a service: indexer, matcher, and notifier, the config file, clairctl, updaters, and the Quay integration.
- Container Security Runtime hardening for containerised workloads: Pod Security Admission, security contexts, Falco runtime detection, network isolation, and secret encryption at rest.
- Grype and Syft SBOM generation with Syft and vulnerability matching with Grype: catalogers, source schemes, match quality, and CI gating.
- Policy as Code (OPA/Conftest) Declarative policy enforcement using Open Policy Agent (OPA) and Conftest for infrastructure, Kubernetes, and CI/CD validation.
- Security Best Practices A comprehensive guide to implementing robust security patterns and practices across software development and infrastructure operations.
- SOPS A secrets management tool that encrypts files while keeping keys and structure visible for version control and GitOps workflows.
- TLS, OpenSSL & Certificates The everyday OpenSSL toolkit, modernised: keys and CSRs with SANs, self-signed and CA-signed certs, inspection and verification, s_client debugging, format conversion, expiry checks, and ACME troubleshooting.
- Trivy Scanning images, filesystems, repositories, Kubernetes, and IaC with Trivy: scanners, severity gating, SBOM, VEX, and CI integration.
- HashiCorp Vault A secrets management tool for securely storing, accessing, and managing sensitive data like tokens, passwords, certificates, and encryption keys.
shell/
- launchctl Managing services, daemons, and scheduled jobs on macOS with launchd and launchctl.
- Linux CLI Essential command-line tools for file operations, text processing, process management, and system administration.
- Linux Performance Analysis Comprehensive guide to analysing system performance, identifying bottlenecks, and optimising resource utilisation across CPU, memory, I/O, and network subsystems.
- Linux Storage & Filesystems Block devices, partitions, filesystems (ext4/XFS/Btrfs), mounting and fstab, LVM, disk health (SMART), and resolving disk-pressure incidents.
- Makefiles Build automation tool that uses dependency tracking to execute commands and manage project workflows.
- rclone rclone for object and cloud storage: remotes and wrapper backends, copy/sync/move and when each deletes, change detection, filters, S3 and OAuth backend traps, crypt, mount and the VFS cache, serve and rc, bisync, and unattended runs.
- rsync rsync for daily SRE work: trailing-slash semantics, what -a leaves out, the quick check and delta transfer, reading itemised dry runs, the --delete family, filter rules, ssh/rrsync/daemon transports, resumable transfers, --link-dest snapshots, and the openrsync-on-macOS version gap.
- systemd Init system and service manager for Linux: units, timers, sockets, drop-in overrides, resource control, and journald.
- systemd Service Hardening Sandboxing a systemd service: capabilities, namespaces, seccomp, credentials, and scoring the result with systemd-analyze security.
- Tmux Terminal multiplexer for managing multiple terminal sessions within a single window.
- Vim A highly configurable modal text editor designed for efficient text editing and manipulation.
- Zsh A powerful shell with advanced completion, theming, and plugin support for enhanced command-line productivity.
web/
- Bootstrap 5 A mobile-first CSS framework for building responsive, modern web interfaces with pre-built components and utility classes.
- CSS Flexbox A one-dimensional layout system for arranging items in rows or columns with powerful alignment and distribution capabilities.
- CSS Grid A two-dimensional layout system for creating complex, responsive grid-based designs with precise control over rows, columns, and item placement.
- HTML5 A comprehensive guide to HTML5 semantic elements, forms, media, accessibility, and modern document structure patterns.
- SCSS A comprehensive guide to SCSS (Sassy CSS), a CSS preprocessor that adds powerful features like variables, nesting, mixins, and functions to standard CSS.
- Tailwind CSS A utility-first CSS framework for rapidly building custom user interfaces without writing custom CSS.
- Tailwind CSS v4 Tailwind CSS v4 — the CSS-first, zero-config rewrite: @import "tailwindcss", @theme/@utility/@variant, the Oxide engine, automatic content detection, container queries, and migrating from v3.
- Web Performance Optimisation Comprehensive guide to optimising web application performance across loading, rendering, and runtime.