Bryan Smith via lpi-examdev wrote:

> So if we're going to drop BWT (bzip2), then let's nuke it all ... at least
> for the kernel objective.  Otherwise, we should expand beyond just LZ77
> (gzip) and BWT (bzip2), and put in the whole lot ...
>  - LZMA (xz)
> and LZ77 alternatives to gzip, like ...
>  - LZO (lzop)
>  - LZ4 (p7z**)

I don't think many people really care about the specific algorithms behind the 
compression tools (perhaps NIST does, but we here in Europe don't care that 
much about NIST).

Having said that, one observation we can make is that the compression tools 
pretty much all look and feel the same as far as their CLIs are concerned.  If 
you have seen one, you have basically seen them all. I don't believe there is 
a lot to be gained by arguing in detail about whether compression tool X, Y or 
Z should be “on the exam”; I would probably cover gzip in detail by way of 
example and then tell people that there is a bunch of others with different 
performance characteristics that are all operated along the same general 
principles. Since there seems to be a new one every other month we would 
otherwise be playing eternal catch-up.

> > In 206.2: adding awareness of attic or borgbackup?
> 
> Updated market survey due perhaps, if an option/time allows?  I can think
> of a dozen.

Yes.

> In 208.1: is mod_perl still relevant?
> 
> Definitely up for discussion ... market survey?

I'd kick it out sight unseen. Too specialised. In any case it seems that Perl 
has had its day in the sun; everything is Python now. (Which is not to say 
that the LPIC-2 exam should cover mod_wsgi instead.)
 
> > In 208.1: add http2 configuration
> 
> How much do we want to get into IETF RFC7540, or even RFC9000/9001 (HTTP/3)
> for that matter?

Again, too specialised (IMHO). We have to draw a line somewhere.

> > In 212.3: what about SSH CA ? what about SFTP chrooted configuration ?
> 
> Oh, beyond just CA ... a lot of companies are now using 2-way certificates
> for authentication, or possibly as part of MFA.

A nice article about the topic is “If you're not using SSH certificates you're 
doing SSH wrong” (https://smallstep.com/blog/use-ssh-certificates/). We here 
have been using SSH certificates for years and years (as Bryan mentioned, they 
have been around for a decade or so), and they featured prominently in the 
LPIC-2-level training materials I wrote for Linup Front GmbH way back, even 
though they weren't on the actual exam, simply because they're such an 
indispensable idea. (The tools mentioned in the smallstep.com article are 
great and everybody should be using them; I'm not advocating that they should 
be on the LPIC-2 exam (yet) but they certainly do make *my* life a whole lot 
easier and presumably more secure.)

> And about VPN, not mentioned in the exam, I think at least awareness of
> 
> > wireguard should be added.
> 
> Another to note for a market survey?

Again, this is a kitchen-sink type of topic. There's a temptation to include 
WireGuard simply because it is such a good idea and it should be promoted, but 
whether it is actually used much in an enterprise setting yet is anyone's 
guess. Harald mentioned StrongSWAN but personally I wouldn't want to touch 
that with a long pole; it may be the most accessible of the *SWANs, but it is 
still a bottomless pit of pain to get just right, and doing it justice even 
for simple configurations may well unduly explode the topic.

As far as configuration automation goes, it's certainly what people *should* 
be doing (even if they don't do it yet). Having it on the exam would therefore 
be a good idea in principle, but giving it the weight it deserves would cause 
a major reshuffle of the rest of the exam simply to free up enough weight 
points elsewhere. Food for thought. Technology-wise I'd probably go with 
Ansible because it seems to be the 700lb gorilla in that space these days.

I would probably be reluctant to add containerisation to the LPIC-2 exam – I 
agree with Fabian's comments about scope creep. It is probably best left in 
the DevOps area for now.

Anselm
-- 
Anselm Lingnau · [email protected] · https://www.tuxcademy.org
Freie Schulungsmaterialien für Linux und Open-Source-Software
Free Training Materials for Linux and Open-Source Software


_______________________________________________
lpi-examdev mailing list
[email protected]
https://list.lpi.org/mailman/listinfo/lpi-examdev

Reply via email to