₦airaland Forum

Hello everyone,

I’m currently on a learning journey into cloud computing and cloud security, with a strong interest in understanding how modern cloud infrastructures are secured in platforms like Google Cloud, AWS, and Azure.

So far, I’ve been building my foundation in:

Cloud fundamentals

Linux and Cloud Shell usage

Identity and Access Management (IAM)

Cloud security concepts such as asset inventory, misconfigurations, and incident response

I’m still learning, but I’m committed to growing consistently and eventually building a solid career in cloud security.

I’d really love to connect with other developers, cloud engineers, security analysts, or beginners like me—to share resources, experiences, study together, and grow as a community.

If you’re into:

Cloud computing
Cybersecurity / Cloud security
DevOps or Infrastructure
Tech learning and growth
Please feel free to reply or reach out. Let’s learn and grow together.

I will posting more about my journey here

Thank you.

Welcome, Davisizu

Good to see you being intentional about cloud security and building your foundation step by step.

Cloud can feel overwhelming because there are many tools and many ways to approach the same problem.
Here are few things that can help as you continue:

Focus on the basics first (Linux, networking, how systems work): These existed before cloud and will save you a lot of frustration later.

Pick one cloud platform (AWS, Azure, or GCP) and learn it well.: You can’t secure what you don’t understand.

Practice actively: Don't just watch videos or read articles. Try small exercises/challanges/projects and document as you go

Keep sharing your progress and remember consistency matters more than speed !

Thank you, I really appreciate the guidance. I’m focusing on the fundamentals and taking things step by step, especially Linux, networking, and The platform I'm using to learn is GCP Google Cloud Platform. I’ll keep sharing my progress here

codemarshal08:
Welcome, Davisizu

Good to see you being intentional about cloud security and building your foundation step by step.

Cloud can feel overwhelming because there are many tools and many ways to approach the same problem.
Here are few things that can help as you continue:

Focus on the basics first (Linux, networking, how systems work): These existed before cloud and will save you a lot of frustration later.

Pick one cloud platform (AWS, Azure, or GCP) and learn it well.: You can’t secure what you don’t understand.

Practice actively: Don't just watch videos or read articles. Try small exercises/challanges/projects and document as you go

Keep sharing your progress and remember consistency matters more than speed !

Thank you, I really appreciate the guidance. I’m focusing on the fundamentals and taking things step by step, especially Linux, networking, and The platform I'm using to learn is GCP Google Cloud Platform. I’ll keep sharing my progress here

Davisizu:
Thank you, I really appreciate the guidance. I’m focusing on the fundamentals and taking things step by step, especially Linux, networking, and The platform I'm using to learn is GCP Google Cloud Platform. I’ll keep sharing my progress here

cool.

GCP is a solid choice. Looking forward to seeing your updates!

While reviewing Google Cloud’s security architecture, I noticed that many people misunderstand the Shared Responsibility Model, especially when comparing cloud security to on-prem systems.

From Google’s security design:

Google is responsible for securing the underlying infrastructure (data centers, hardware, and global networking).

Customers are responsible for identity management, application security, and access control within their environments.

Another point I found interesting is Google’s approach to access control, where operational access is tightly restricted, logged, and designed so that no single individual has unrestricted control.

For those with hands-on experience on GCP, how does this model practically affect IAM design decisions in real production environments?

Hi Davisizu, Glad you are pushing forward!

For most cloud providers, including GCP, these are the things you usually keep in mind when designing IAM in production:

Least privilege by default: ->applications and CI/CD pipelines run under service accounts with narrowly scoped roles. Full admin access is avoided outside of bootstrap or break-glass scenarios.

IAM is continuously refined –> Access isn't static. Users change roles, teams evolve, services gain new responsibilities, and people leave. Access needs regular review and cleanup.

Audit logs are part of the design –>GCP provides deep visibility via Cloud Audit Logs, but it’s up to the you the customer to monitor and alert on IAM changes.

Short-lived credentials over static keys –> even for service accounts, long-lived keys are discouraged. Workload Identity and ephemeral tokens are preferred.

Thank you, codemarshal08
I’m still learning, so my understanding is based on documented best practices rather than direct production ownership.

From what I’ve read so far, these patterns are commonly recommended for reducing risk in cloud IAM, but I’m open to corrections or practical caveats from those with hands-on experience.

Alright, Davisizu

I hope your learning resource includes hands-on exercises or challenges. That's what really makes concepts stick

Yes. Some challenges throughout the learning and quiz

Meaning to ask you some questions i don't know if its ok to ask

Davisizu:
Yes. Some challenges throughout the learning and quiz

Meaning to ask you some questions i don't know if its ok to ask

Please go ahead

Hey codemarshal08
I hope you’re well. I’m still sort of new to nairaland and I’m not sure how to navigate my way around to find existing threads focusing on fields/niches similar to cloud engineering. Since you’re an OG, I thought you might know a few threads, whether active or dead, that I can check out to gain more knowledge and familiarise myself with monikers in my field that I can connect with. Thanks in anticipation

Hey Davisizu,

To be honest, there aren't many active cloud/DevOps threads here. Most older ones are abandoned questions or course/bootcamp ads. So you haven't really missed much.

If you want to explore what's there, you can try Google searches like:

Cloud site:nairaland.com

DevOps site:nairaland.com

Cybersecurity site:nairaland.com

This will bring up most threads related to cloud topics on Nairaland.

For active communities, you may want to look outside Nairaland: LinkedIn, Discord, WhatsApp, Telegram, and similar platforms.

Below are some channels you can explore
:
Discord -> Nextwork, Learn2Cloud.

LinkedIn -> Search for DevOps groups

WhatsApp / Telegram -> I know a few tech circles; if you are interested, you can use the "Send Email" option on my profile for details.

One person dey talk with hinsef

Self-hosting a Linux server

choose a distro, set up hardware/VM, secure it, configure storage (RAID, LVM, ZFS, NAS), pick apps (Syncthing, Immich, Plex, Tailscale), use Docker/Docker Compose, Proxmox/ESXi/XCP-ng/hyperV for virtualization. Configure networking (Mikrotik/Unifi), regularly update, monitor logs, troubleshoot. Popular options: Docker, Portainer, Syncthing, Immich, Plex. Affordable networking: Mikrotik, Unifi

VLSI engineer earns more than software engineering guys. Very Large-Scale Integration (VLSI) is the process of creating integrated circuits (ICs) by combining thousands, millions, billions , or even trillions of MOS transistors onto a single silicon chip. It enables the development of complex, high-performance, and compact electronic devices like microprocessors, memory chips, and smartphones.


Marvell’s Silicon Photonics and Advanced Packaging Innovation

Marvell has invested heavily in silicon photonics platform development, accumulating over 8 years of mass production experience and more than ten billion operational hours in real-world deployments. This ongoing evolution enables tighter integration between photonic components and traditional electronic chips. One major outcome is the development of an optical system-on-chip (optical SoC) architecture, enabling chip-scale long-reach optical interconnects.



Now Chips can be stacked vertically and horizontally connect using photonic technologies .

Windows or Mac self-hosting



Repurpose PCs or build servers, use Docker for containerization. Popular apps: Jellyfin/Plex, Home Assistant, SynaMan or NextCloud. Manage licensing, security (firewalls, updates, backups). Use Docker Desktop, NSSM for services, Proxmox for GUI VM management

OCI Bare Metal (Oracle Cloud Infrastructure) instances give you direct access to physical servers, offering high performance and control. Great for workloads requiring low latency, high throughput, or custom configurations.


OCI (Oracle Cloud Infrastructure) is used for:
- Cloud computing
- Infrastructure as a Service (IaaS)
- Platform as a Service (PaaS)
- Data storage and management
- Networking and security
- Running applications and workloads
- Disaster recovery and backup
- Machine learning and AI
- Data Science
- Devops
It's a robust platform for enterprises and businesses.

Alphabyte3:
Self-hosting a Linux server

choose a distro, set up hardware/VM, secure it, configure storage (RAID, LVM, ZFS, NAS), pick apps (Syncthing, Immich, Plex, Tailscale), use Docker/Docker Compose, Proxmox/ESXi/XCP-ng/hyperV for virtualization. Configure networking (Mikrotik/Unifi), regularly update, monitor logs, troubleshoot. Popular options: Docker, Portainer, Syncthing, Immich, Plex. Affordable networking: Mikrotik, Unifi

The ultimate datacenter management solution for Proxmox VE and XCP-NG. Unified multi-cluster control, intelligent load balancing, and seamless cross-cluster VM migrations — all in one beautiful interface.


https://github.com/PegaProx/project-pegaprox/releases/tag/v0.9.1

Coming from a web dev background and this thread got me thinking — do cloud security certs like the GCP Associate or CompTIA Security+ actually open doors for remote roles in Nigeria, or is it more about portfolio projects showing what you've built/secured?

I've been debating whether to invest time in the certification route or just build more hands-on stuff. Curious what's been the experience of people here.

as69:
Coming from a web dev background and this thread got me thinking — do cloud security certs like the GCP Associate or CompTIA Security+ actually open doors for remote roles in Nigeria, or is it more about portfolio projects showing what you've built/secured?

I've been debating whether to invest time in the certification route or just build more hands-on stuff. Curious what's been the experience of people here.

The main job market for cloud engineering is telecom or financial system in Nigeria except you are leaving Nigeria to earn big in the US.

You need to renew some of your certifications every 3 years . You must show that you are exceptional. Cloud is the brain behind AI Nvidia is hiring thousands of engineers yearly to meet up demands while others tech corp oust their employees.

I am planning to build a dcim from opensource logic a better UI and animations like the one in China and US. I am going to use typescript and Go or rust for backend. The goal is to scan all these outdated codes and redesign it to fit modern silhouette.



1. NetBox


2. RackTables



3. OpenDCIM


4. Ralph


5. Foreman


6. LibreNMS

7. RackMonkey


8. OpenNMS


9 Tinkerbell

Alphabyte3:
I am planning to build a dcim from opensource logic a better UI and animations like the one in China and US. I am going to use typescript and Go or rust for backend. The goal is to scan all these outdated codes and redesign it to fit modern silhouette.



1. NetBox


2. RackTables



3. OpenDCIM


4. Ralph


5. Foreman


6. LibreNMS

7. RackMonkey


8. OpenNMS


9 Tinkerbell

Maybe I might even have to add AI troubleshooting with internal and external command for maximum security. Let me add a little SciFi features .

Alphabyte3:
I am planning to build a dcim from opensource logic a better UI and animations like the one in China and US. I am going to use typescript and Go or rust for backend. The goal is to scan all these outdated codes and redesign it to fit modern silhouette.



1. NetBox


2. RackTables



3. OpenDCIM


4. Ralph


5. Foreman


6. LibreNMS

7. RackMonkey


8. OpenNMS


9 Tinkerbell

I have build mine and added some features inspired by Ralph's

Adding GPU virtualization DCIM uses NVIDIA vGPU, AMD MxGPU/SR-IOV, or Intel SR-IOV/GVT-g. Enable it via BIOS, install host drivers, create virtual functions, assign to VMs, and install guest drivers. Note licensing for NVIDIA, identical hardware for live migration, and use DCGM for monitoring.


I would need a Datacenter to test the GPU management software on. I am trying to use rust for wrappers

Alphabyte3:
Adding GPU virtualization DCIM uses NVIDIA vGPU, AMD MxGPU/SR-IOV, or Intel SR-IOV/GVT-g. Enable it via BIOS, install host drivers, create virtual functions, assign to VMs, and install guest drivers. Note licensing for NVIDIA, identical hardware for live migration, and use DCGM for monitoring.


I would need a Datacenter to test the GPU management software . I am trying to use rust for wrappers

it requires Linux Ubuntu 26.04+ to run with GPU virtualization. I just read the Nvidia documentation on GitHub.

Welcome friend! This is a good stuff you are pulling up keep it up bro. I'm a developer too but just data Science aspect. I know no such thing right, but everything is possible

SatoshiVentures:
Welcome friend! This is a good stuff you are pulling up keep it up bro. I'm a developer too but just data Science aspect. I know no such thing right, but everything is possible

Thanks, I am not a data scientist nice to hear from you. I was thinking no one would respond.

HPC benchmark to build all type of operational quantum computing dcim using QPU virtualization like Origin Wukong from China fusion .