Skill UI

Playbook for running ML training and inference on Lambda Labs’ on-demand GPU cloud, covering when to choose it, console/SSH/API workflows, available GPUs, pricing, and persistent storage with Lambda Stack pre-installed.

Automates SSH key manager workflows within DevOps Basics, offering guided best practices, code/config generation, and validation for foundational workflows such as git, containers, CI/CD, and infrastructure.

Guides SSH service security assessments from discovery, enumeration, credential attacks and key testing to tunneling, vulnerability exploitation, and reporting deliverables.

A comprehensive guide for diagnosing and resolving common errors encountered when utilizing the Vast.ai platform. It provides quick references and fixes for HTTP status codes (e.g., 401, 429), instance lifecycle issues, CLI command failures, Docker image loading problems, SSH connectivity errors, and CUDA memory issues. Essential for maximizing GPU rental efficiency and debugging cloud instances.

This comprehensive workflow guides users through the end-to-end process of utilizing cloud-based GPU computing resources on Vast.ai. It covers searching for ideal GPU offers based on specs and price, provisioning an instance, running complex training or inference jobs via SSH, collecting model artifacts, and crucially, destroying the instance to prevent unexpected billing. Ideal for deep learning training and research.

A comprehensive guide demonstrating the full lifecycle of GPU resource utilization on Vast.ai. This includes searching for available hardware using CLI and REST APIs, provisioning a dedicated GPU instance (e.g., using PyTorch images), connecting via SSH, running deep learning workloads, and finally, securely destroying the instance to stop billing. Ideal for testing cloud integration or managing ML compute pipelines.

A collection of production-ready Python patterns for interacting with the Vast.ai cloud API. This includes typed search query builders, context-managed instance lifecycle (guaranteeing auto-cleanup), offer scoring algorithms (cost, reliability, performance), robust retry mechanisms with backoff, and secure SSH command execution. Essential for building reliable, complex cloud workflow applications.

This comprehensive guide outlines security best practices for utilizing Vast.ai's cloud environment. It covers secure API key management, hardening SSH access to GPU instances, implementing proper data cleanup before instance destruction, and adhering to robust network security protocols. Use this when setting up, auditing, or deploying sensitive AI/ML workloads on shared cloud hardware.

A comprehensive guide for digital forensics analysts to investigate compromised Linux systems. This workflow details the collection and analysis of critical system artifacts, including authentication logs, shell histories, SSH keys, and system configurations. Use this methodology during incident response to detect rootkits, unauthorized persistence mechanisms, and reconstruct full attacker activity.

This guide details the comprehensive deployment of Cisco Duo Multi-Factor Authentication across critical access points like VPN, RDP, SSH, and web applications. It covers setting up the Duo Authentication Proxy, implementing adaptive access policies based on risk and device health, and deploying phishing-resistant methods like WebAuthn/FIDO2, ensuring compliance with NIST standards. Use this when hardening identity access management or establishing robust security controls.

A comprehensive guide on deploying Cloudflare Access and Tunnel to establish a Zero Trust Network Access (ZTNA) solution. This method replaces traditional VPNs by securely exposing self-hosted internal applications (web, SSH, RDP) without opening inbound ports. It integrates identity-aware policies, device posture checks, and robust identity providers (Okta, Azure AD) for highly secure, least-privilege access.

This comprehensive guide configures Fail2ban to implement a robust, layered defense mechanism for network security. It sets up custom filters and actions to automatically detect and mitigate threats such as port scanning, SSH brute force attempts, and network reconnaissance. By dynamically banning malicious IP addresses and providing security alerts, this skill significantly enhances the host-based intrusion prevention capabilities of your system.