
TUNNEL
Begin your sysadmin journey
Learn server administration and computer networking fundamentals by building up a server all of your own in a fully-supported live training environment. Deploy, secure and tune a powerful virtual private network for which hundreds of configs are generated to give to family, colleagues and friends to protect them on the Internet.
Learn server administration while building privacy-protecting network infrastructure
In this 4x4hr live intensive training participants are guided and supported in the deployment of a server in Iceland, atop which a powerful and fast Virtual Private Network (VPN) is setup, secured and tuned. In doing so, participants learn crucial server security and server architecture skills and concepts applicable to any deployment.
During the training, a script is written to automatically generate dozens of VPN client configs as easy-to-use QR codes, to secure friends, colleagues and family in their day-to-day use of the Internet.
Time is given for 1:1 support, as needed, for a full two days after the live training has completed, and participants are added to an enduring community chat channel where they can share tips and get support.
Tunnel is the ideal ‘strong start’ for any interested in the world of self-hosted server infrastructure and network engineering.
Part of the Tunnel and Fortress series, graduates qualify for Fortress, where they significantly advance their skills in the fields of virtualisation, networking, service deployment and advanced server security.

The training was really, really great. I’m so glad I took it… the knowledge shared, the pace, and the topics: 10 out of 10.
I’ve learned a lot by doing, what for me, is the best way of learning. I also liked a lot the inherently political and critical approach to tech. It really gives me hope seeing people working (and teaching) with this mindset in the field.
– FabiánThese two trainings are worth every second or cent. I’m doing a lot of the covered topics for years now but this moved some of the parts to a complete new level and opened up some new perspectives on things. A clear recommendation. My work and the projects at Collective Zero will benefit from this.
– Thomas Hutmacher (Collective Zero)
I recently went through the Tunnel and Fortress training and it’s been a game changer for my sysadmin skills.
I had a bit of experience setting up servers and messing around long enough until they “worked”. Once there though I feared touching anything for fear of breaking it, and did break many things. The Fortress architecture is not only best in class for security it is also modular so I now have room to experiment and even fail in ways that I understand or at least contain.
I am now considering offering digital services to other people which was out of the question before. Would really recommend this training if you want to do sysadmin right. Julian is a great teacher, super generous with his time and knowledge ⭐⭐⭐⭐⭐
– David Benque (Project Leader, Cryptpad)
Q&A
When is the next course?
| Course start | January 20 |
| Live training session 1 | Jan 20, 4pm-8pm UTC |
| Live training session 2 | Jan 21, 4pm-8pm UTC |
| Live training session 3 | Jan 22, 4pm-8pm UTC |
| Live training session 4 | Jan 23, 4pm-8pm UTC |
| Tuition | Jan 24, as arranged |
| Tuition | Jan 25, as arranged |
| Course end | Jan 25 |
What skills will I learn?
Skills learned and topics covered include:
- Jurisdictional and geographic considerations of a server deployment
- Securely connecting to a server
- Server partitioning
- Disk encryption
- Server directory structure
- The UNIX command line
- Basics of permissions and privilege separation
- Network topologies and packet routing
- Server package management
- Network traffic monitoring
- Firewalling basics
- Virtual Private Network deployment and tuning
- Common mistakes and oversights
- Basics of UNIX shell scripting
Will the server I deploy be mine?
Yes, the server you deploy will wholly be yours, under your control
Will there be a monthly cost for the server?
Yes, approximately EUR11/month
What prior skills do I need to take this course?
No prior skills are needed, as everything is taught in class. However, basic UNIX command line skills and/or a history of technical work in any field is helpful.
Will the computer I have be OK for this course?
Any laptop or workstation is suitable for the course. GNU/Linux and OS X users have nothing to prepare. Windows users are encouraged to setup WSL on their Windows machines before taking the course. If that is not possible, the Putty client software is fine.
How much does this course cost?
A one-time fee of EUR500.
What payment methods do you accept?
Credit card, bank transfer and AfterPay
Why does my new server have to be in Iceland?
Iceland has the best balance of data privacy laws and price, at the current time, for a virtual private network deployment.
I’m not sure I want to do Fortress after Tunnel. Is that OK?
Yes that’s totally OK. You can just do Tunnel if you like.
Your instructor

Julian Oliver is a Critical Engineer, educator, infrastructure activist and electronic artist with over 2 decades of experience in server administration. Thousands of activists rising in defense of people and planet worldwide use secure server infrastructure Julian has deployed, some of which are active in very hostile operating conditions. He has given numerous workshops and master classes in data forensics, creative hacking, system administration, computer networking, counter-surveillance, software art, object-oriented programming, radio, disaster-resilient communications, UNIX/Linux and more.
Julian is co-director of Nīkau, a global platform, information and operations security consultancy in service to NGOs, impact-driven organisations and grassroots movements. His work and ideas have been presented at numerous universities, events and festivals worldwide, including Ars Electronica, the Vienna Biennale, the Frankfurter Kunstverein, the Japan Media Arts Festival, The Chaos Communication Congress, Tate Modern, Princeton University, and the ZKM in Karlsruhe.
Julian has also received several awards, most notably the distinguished Golden Nica at Prix Ars Electronica 2011. He is the co-author of the Critical Engineering Manifesto and member of the Critical Engineering Working Group.