Systems Administration
Systems administration is the work of keeping an organization’s computers and services available, secure, consistent, and recoverable. It connects business needs to the day-to-day care of servers, endpoints, accounts, software, networks, data, and operational records across their full lifecycle.
itInfrastructure and operations | OpenSkills.info
Course pathWalk it in order
Look it upDip in anytime
Go furtherLeaves this page
Don't Panic
Don't Panic — Systems Administration
Systems administration is the work of keeping computers useful after the exciting moment when they first boot and everyone assumes the job is over. It is not merely typing commands at a server. It connects a service requirement to the machines, access, configuration, evidence, backups, and recovery paths that keep the service available later, which is when the machines begin to develop opinions.
The durable shape is a control loop. First, know what exists: the inventory records assets, owners, and dependencies. Then state what should exist: a baseline is the approved configuration for a class of systems. Compare that desired state with actual state, change carefully, observe the result, correct configuration drift, test recovery, and update the record. A command belongs inside that loop; it is not the loop wearing a hat.
This is why a host that is patched, monitored, and apparently calm can still be unmanaged. If nobody owns it, if its backup has never been restored, or if its service depends on a management path that has failed, the reassuring green status is doing its best but does not know the whole story. Automation helps compare and reconcile state across many systems. It also repeats a poor decision with exceptional punctuality, so staged changes need a success signal and a stop condition.
When something breaks, begin with evidence. Telemetry is the measurements and event data collected during operation; logs tell you what happened, metrics show change over time, inventory supplies ownership, and configuration shows the intended state. None is the complete answer. Follow the consumer path from name resolution through network policy, the listener, service process, dependencies, and data. A healthy host can still provide an unreachable service, which is the sort of detail that keeps incident timelines pleasantly full.
Recovery is not the same as repair. Repair changes a failed component; recovery restores the required service or data, perhaps by another path. A completed backup job proves a copy exists. A restore test checks credentials, keys, dependency order, data integrity, and the consumer path. The recovery point objective sets the tolerated age of lost data, while the recovery time objective sets the target time to restore service. Both are targets, not tiny legal guarantees from the universe.
Read the Intro for the full operating model and where its responsibilities meet other teams. Use the Slides when you need the relationships at a glance. Keep the Cheatsheet nearby during a change, a service-path investigation, or a restore test. The Field Notes concentrates on the awkward operational judgment that turns a safe-looking fleet action into a safe one.
Where this skill leads
Relevant careers
See how this topic contributes to broader role-level skill maps.
Sources
- https://learn.microsoft.com/en-us/windows-server/administration/overview
Supports
- Windows Server management approaches from local tools through System Center and Azure Arc
- Management approach comparison by scale, interface, connectivity, and operating purpose
- Windows Server overview link rationale and quiz coverage
- https://learn.microsoft.com/en-us/windows-server/administration/manage-windows-server
Supports
- Server inventory, local and remote administration, automation, monitoring, updates, backup, and recovery documentation paths
- Cross-platform course scope and service-path quiz rationale
- https://documentation.ubuntu.com/server/
Supports
- Linux server administration scope and route into current host-level tasks
- Platform lifecycle, access, storage, networking, security, and backup documentation
- Ubuntu Server link rationale and beginner quiz coverage
- https://ubuntu.com/server/docs/how-to/security/user-management/
Supports
- Administrative privilege through sudo and attributable user identities
- Named administrative identity quiz answer
- https://csrc.nist.gov/pubs/sp/800/128/upd1/final
Supports
- Configuration policy, baselines, control, monitoring, and security-focused configuration management
- Desired state, actual state, drift, change records, and configuration-management loop
- Intro, slides, cheatsheet, link rationale, and quiz answers about baselines and drift
- https://csrc.nist.gov/pubs/sp/800/40/r4/final
Supports
- Enterprise patch management as identifying, prioritizing, acquiring, installing, and verifying updates
- Preventive-maintenance framing, planning factors, and staged change controls
- Patch link rationale and staged-rollout quiz answer
- https://csrc.nist.gov/pubs/sp/800/92/final
Supports
- Enterprise log-management infrastructure and operational process
- Log generation, transport, storage, access, analysis, and retention concerns
- Log-management link rationale and actionable-alert context
- https://csrc.nist.gov/pubs/sp/800/34/r1/upd1/final
Supports
- Information-system contingency planning, recovery priorities, strategies, exercises, and plan maintenance
- Alternate processing, alternate equipment, and alternate location as recovery approaches
- Recovery, restore testing, alternate control paths, link rationale, and quiz answers
- https://sre.google/sre-book/practical-alerting/
Supports
- Monitoring as evidence for service behavior, change impact, and incident diagnosis
- Time-series alerting concepts and the distinction between collected data and actionable conditions
- Monitoring link rationale and alert quiz answer
- https://sre.google/sre-book/managing-incidents/
Supports
- Coordinated incident roles and management under service disruption
- Incident flow, ownership, communications, and link rationale
- https://sre.google/sre-book/emergency-response/
Supports
- Tested rollback, alternative access methods, out-of-band communication, and proactive failure exercises
- Evidence preservation, narrow recovery actions, alternate paths, and related quiz answers
- https://sre.google/sre-book/postmortem-culture/
Supports
- Post-incident records covering impact, mitigation, causes, and tracked follow-up actions
- https://www.puppet.com/docs/puppet/5.5/architecture.html
Supports
- Catalogs as desired state and the agent-controller configuration flow
- Agent-based configuration-management model and drift-reconciliation quiz answer
- https://github.com/sindresorhus/awesome
Supports
- Required discovery starting point for the Awesome Sysadmin list
- https://github.com/awesome-foss/awesome-sysadmin
Supports
- Ecosystem discovery for Cockpit, NetBox, restic, Healthchecks.io, Zabbix, and Salt
- Classification of selected projects within system-administration practice
- https://cockpit-project.org/documentation.html
Supports
- Cockpit installation, deployment, usage, and server-interface documentation
- Cockpit Awesome Link rationale
- https://netbox.readthedocs.io/en/stable/introduction/
Supports
- NetBox as an infrastructure source of truth for intended network state
- Inventory and source-of-truth distinctions
- NetBox Awesome Link rationale and inventory quiz answer
- https://restic.readthedocs.io/en/stable/
Supports
- Backup repositories, snapshots, integrity checks, restoration, retention, scripting, and troubleshooting
- Restore-test workflow and restic Awesome Link rationale
- https://healthchecks.io/docs/
Supports
- Heartbeat monitoring for scheduled jobs and alerting on missing signals
- Backup, certificate, and synchronization job examples
- Healthchecks.io Awesome Link rationale
- https://www.zabbix.com/documentation/current/en/manual
Supports
- Host and service data collection, triggers, alerts, discovery, and distributed monitoring
- Zabbix Awesome Link rationale
- https://docs.saltproject.io/en/latest/contents.html
Supports
- Remote execution, desired-state configuration, orchestration, events, and operating-system modules
- Salt Awesome Link rationale and product placement
- https://www.microsoft.com/en-us/system-center
Supports
- Datacenter deployment, configuration, management, monitoring, virtualization, service management, and data protection
- System Center Landscape placement
- https://learn.microsoft.com/en-us/azure/azure-arc/servers/
Supports
- Cloud-based management of servers outside Azure
- Azure Arc Landscape placement
- https://aws.amazon.com/systems-manager/
Supports
- Central node inventory and remote management across AWS, hybrid, and multicloud environments
- AWS Systems Manager Landscape placement
- https://www.redhat.com/en/technologies/management/ansible
Supports
- Enterprise automation orchestration across an IT estate
- Ansible Automation Platform Landscape placement
- https://www.puppet.com/products/puppet-enterprise
Supports
- Enterprise desired-state enforcement, infrastructure control, compliance, and hybrid operations
- Puppet Enterprise Landscape placement
- https://www.chef.io/products/chef-infrastructure-management
Supports
- Policy-based infrastructure configuration, testing, desired-state adherence, and compliance evidence
- Progress Chef Landscape placement
- https://www.redhat.com/en/technologies/management/satellite
Supports
- RHEL provisioning, content, patch, configuration, compliance, and lifecycle management
- Red Hat Satellite Landscape placement
- https://ubuntu.com/landscape
Supports
- Ubuntu fleet enrollment, inventory, patching, auditing, access, compliance, repositories, and API management
- Canonical Landscape product placement
- https://www.suse.com/products/multi-linux-manager/
Supports
- Mixed-Linux patching, content lifecycle, configuration, monitoring, and compliance
- SUSE Multi-Linux Manager product placement
- https://help.hcl-software.com/bigfix/11.0/platform/Platform/Getting_Started/c_bigfix_introduct.html
Supports
- Single-agent endpoint visibility, management, compliance, patching, distribution, and operating-system deployment
- HCL BigFix Landscape placement
- https://www.manageengine.com/products/desktop-central/desktop-administration-overview.html
Supports
- Cross-platform server, desktop, and mobile lifecycle management from one endpoint console
- Patch, software, inventory, configuration, deployment, and remote support scope
- Endpoint Central Landscape placement
- https://www.ninjaone.com/endpoint-management/
Supports
- Cross-platform endpoint visibility, patching, configuration, deployment, automation, and remote diagnosis
- NinjaOne Landscape placement
- https://www.unix.org/unix_history.html
Supports
- UNIX development beginning in 1969
- POSIX.1 publication in 1988
- Timeline events and their operating-system context
- https://kernel.googlesource.com/pub/scm/linux/kernel/git/nico/archive/+/v0.01
Supports
- Linux 0.01 release date and initial source-release scope
- Linux timeline event
- https://docs.cfengine.com/docs/archive.bak/cf2-enterprise.html
Supports
- CFEngine project beginning in 1993 for automated installation and maintenance of networked computers
- CFEngine timeline event
- https://www.ssh.com/academy/ssh
Supports
- SSH creation and public release in 1995 as a secure remote-administration protocol and implementation
- SSH timeline event
- https://www.openssh.org/history.html
Supports
- OpenSSH project origins and OpenSSH 1.2.2 shipping with OpenBSD 2.6 on 1999-12-01
- OpenSSH portability work and timeline event
- https://www.puppet.com/about
Supports
- Puppet founding in 2005 to address manual configuration
- Puppet timeline event
- https://devblogs.microsoft.com/powershell/its-a-wrap-windows-powershell-1-0-released/
Supports
- Windows PowerShell 1.0 release on 2006-11-14
- PowerShell as a shell and scripting environment for system administration
- PowerShell timeline event
- https://0pointer.net/blog/projects/systemd.html
Supports
- systemd public introduction on 2010-04-30
- Dependency-aware service management, supervision, socket activation, and parallel startup proposal
- systemd timeline event
- https://documentation.ubuntu.com/server/explanation/software/changing-package-files/index.html
Supports
- Systemd unit placement, daemon reload, service restart, status inspection, and safe override handling
- Disposable Ubuntu service-recovery exercise and practice-reference commands
- https://sre.google/workbook/postmortem-culture/
Supports
- Decommission retry incident caused by an empty filter being interpreted as no filter
- Idempotence, target constraints, rate limiting, verifiable action items, and scope-change alerts in Field Notes
