Digital Sovereignty Training in Beijing

This instructor-led, live training in (online or onsite) is aimed at technical professionals who wish to deploy and manage open source collaboration platforms that maintain data sovereignty while providing modern team communication capabilities.

By the end of this training, participants will be able to evaluate platforms, deploy self-hosted solutions, configure security and integrations, migrate from existing platforms, and establish operational procedures.

This instructor-led, live training in (online or onsite) is aimed at enterprise leaders who wish to understand data sovereignty principles and develop compliant data management strategies.

By the end of this training, participants will be able to define data sovereignty, identify relevant laws, assess compliance risks, and implement governance frameworks for cross-border data management.

This instructor-led, live training in Beijing (online or onsite) is aimed at database administrators and developers who wish to migrate from proprietary databases to open source PostgreSQL.

By the end of this training, participants will be able to assess database migration readiness, plan and execute schema migration strategies, migrate data using appropriate tools, and handle application code conversion.

This instructor-led, live training in Beijing (online or onsite) is aimed at intermediate-level to advanced-level IT leaders, compliance officers, and digital transformation managers who wish to use a structured roadmap approach to implement digital sovereignty initiatives.

By the end of this training, participants will be able to: assess their organization's digital sovereignty maturity, develop a comprehensive strategy, create an actionable implementation roadmap, establish governance frameworks.

This instructor-led, live training in Beijing (online or onsite) is aimed at system administrators and DevOps engineers who wish to deploy, configure, and manage EXO clusters for private LLM inference across multiple Apple Silicon or Linux nodes.

This instructor-led, live training in Beijing (online or onsite) is aimed at DevOps engineers and infrastructure architects who wish to automate the provisioning, monitoring, and lifecycle management of private AI clusters built on EXO.

This instructor-led, live training in Beijing (online or onsite) is aimed at security engineers and compliance officers who wish to harden EXO deployments, control model access, and govern AI workloads running entirely on-premise.

Gitea is a lightweight, open-source, self-hosted Git service providing repository management, code review, issue tracking, and CI/CD integration. It is an increasingly popular alternative to GitHub and GitLab.com for teams that need full control over their source code without third-party terms of service or export restrictions.

GitLab Self-Managed is the on-premises deployment of GitLab's complete DevSecOps platform, including source code management, CI/CD, container registry, security scanning, and monitoring. It is the gold standard for organizations that want the full GitLab feature set without SaaS dependency or data leaving their network.

Jitsi Meet is a fully encrypted, 100% open-source video conferencing solution that you can self-host on your own servers. It supports HD video, screen sharing, collaborative editing, and live streaming without requiring accounts or exposing meeting data to third-party platforms.

This instructor-led, live training (online or onsite) is aimed at intermediate DevOps and system administrators who wish to deploy Jitsi Meet as a replacement for Zoom, Microsoft Teams, and Google Meet.

By the end of this training, participants will be able to:

• Install and configure Jitsi Meet using Docker or Debian packages.
• Configure Prosody, Jicofo, and Jitsi Videobridge for optimal performance.
• Set up TURN servers for NAT traversal and firewall compatibility.
• Secure meetings with passwords, lobby rooms, and end-to-end encryption.
• Integrate Jitsi with LDAP, SSO, and calendar systems.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Beijing (online or onsite) is aimed at intermediate to advanced DevOps engineers and system administrators who wish to deploy and manage self-hosted Kubernetes clusters without cloud dependencies.

By the end of this training, participants will be able to: deploy production-ready Kubernetes clusters using kubeadm on bare-metal or virtual machines; configure high-availability control planes and etcd clusters; implement container networking and storage for self-managed environments; set up monitoring and observability using self-hosted solutions.

This instructor-led, live training in Beijing (online or onsite) is aimed at developers and technical teams who wish to use Ollama and open models to build and run private agentic AI solutions on internal infrastructure.

By the end of this training, participants will be able to: install and configure Ollama, evaluate and run open models locally, create simple agentic and retrieval-based workflows, and apply security and governance controls for regulated environments.

Matrix is an open protocol for secure, decentralized, real-time communication. Organizations are increasingly adopting Matrix with the Element client as an alternative to Slack and Microsoft Teams to maintain end-to-end encryption, on-premise data residency, and federation with external trusted partners.

This instructor-led, live training in (online or onsite) is aimed at cloud professionals who wish to design and implement multi-cloud architectures that avoid vendor lock-in and ensure data sovereignty.

By the end of this training, participants will be able to identify vendor lock-in risks, design portable architectures, implement data sovereignty controls, and leverage cloud-agnostic tools.

NixOS is a Linux distribution built on the Nix package manager, offering fully declarative and reproducible system configuration. By describing entire operating systems as pure functions, NixOS eliminates configuration drift and enables atomic rollbacks, making it ideal for sovereign infrastructure that must be auditable and exactly reproducible.

This instructor-led, live training in (online or onsite) is aimed at IT professionals who wish to evaluate and implement open source office suites as alternatives to proprietary solutions in corporate environments.

By the end of this training, participants will be able to compare suites, plan migrations, configure deployment, address compatibility, implement collaboration, and manage user adoption.

Ollama is an open-source tool for running large language models locally on consumer and enterprise hardware. It abstracts model quantization, GPU allocation, and API serving into a single command-line interface, enabling organizations to self-host LLMs like Llama, Mistral, and Qwen without sending prompts or data to OpenAI, Anthropic, or Google.

This instructor-led, live training in Beijing (online or onsite) is aimed at network engineers and infrastructure professionals who wish to use SONiC and ONL to deploy and manage open network infrastructure on white-box switches.

By the end of this training, participants will be able to: understand SONiC and ONL architecture, deploy open-source NOS on white-box hardware, configure networking features, and implement monitoring and automation.

This instructor-led, live training in (online or onsite) is aimed at system administrators and infrastructure engineers who wish to design, deploy, and manage private OpenStack cloud infrastructure for enterprise environments.

By the end of this training, participants will be able to understand OpenStack architecture, deploy private cloud infrastructure, manage compute and storage resources, implement security with Keystone, and apply enterprise best practices.

This instructor-led, live training in (online or onsite) is aimed at project management and IT professionals who wish to deploy and manage open source project management platforms that ensure data sovereignty while supporting diverse project methodologies.

By the end of this training, participants will be able to evaluate solutions, deploy Taiga, OpenProject, and Focalboard, configure integrations, and migrate from proprietary tools.

This instructor-led, live training in Beijing (online or onsite) is aimed at intermediate-level network engineers and infrastructure administrators who wish to implement software-defined networks using open source tools and technologies.

By the end of this training, participants will be able to design SDN architectures, implement Open vSwitch, configure FRRouting, deploy SDN controllers, and automate network management.

This instructor-led, live training in Beijing (online or onsite) is aimed at intermediate-level network and infrastructure professionals who wish to use open-source routing, switching, Wi-Fi, and management tools to design, deploy, and operate a self-managed enterprise network.

By the end of this training, participants will be able to: design an open-source enterprise network architecture, configure routing switching and wireless services, improve security and observability, and build an operational plan for ongoing support.

This instructor-led, live training in Beijing (online or onsite) is aimed at intermediate-level IT leaders, compliance professionals, security teams, and enterprise architects who wish to use sovereign AI principles and governance practices to design AI environments that protect sensitive data, support localization requirements, and reduce vendor lock-in.

By the end of this training, participants will be able to: explain sovereign AI concepts, evaluate hosting and governance options, define controls for prompts and logs, and create a practical adoption roadmap.

This capstone course teaches participants to design, deploy, and operate a complete sovereign digital infrastructure stack from the ground up. By the end of the course, students will have built a functioning mini-organization using only self-hosted, open-source tools: identity, communication, productivity, development, security, AI, and monitoring - all without reliance on Google, Microsoft, AWS, or proprietary SaaS.

This instructor-led, live training in Beijing (online or onsite) is aimed at system administrators, DevOps engineers, and IT professionals who wish to deploy, configure, and manage a Stalwart mail server for self-hosted email and collaboration.

Synapse is the reference homeserver implementation for the Matrix protocol, enabling decentralized, end-to-end encrypted messaging. This instructor-led, live training (online or onsite) is aimed at intermediate DevOps engineers and system administrators who wish to use Synapse and Element to replace cloud chat platforms with a self-hosted, federated messaging infrastructure.

Terraform is an open-source infrastructure-as-code tool that empowers teams to define and provision data center infrastructure using a declarative configuration language. When paired with self-hosted backends and on-premise providers, Terraform becomes a potent instrument for sovereign infrastructure management, effectively eliminating cloud vendor lock-in.

This instructor-led, live training (available online or onsite) is designed for intermediate infrastructure engineers seeking to leverage Terraform to manage self-hosted environments, including Proxmox, VMware, libvirt, and bare-metal provisioning.

By the end of this training, participants will be able to:

• Write robust Terraform configurations for on-premise and hybrid resources.
• Securely manage state using self-hosted backends such as PostgreSQL, S3-compatible storage, and Gitea.
• Utilize provisioners and custom providers to manage the entire bare-metal lifecycle.
• Implement efficient workspaces, modular architectures, and variable hierarchies.
• Integrate Terraform into CI/CD pipelines for automated infrastructure delivery.

Format of the Course

• Interactive lectures and guided discussions.
• Extensive exercises and practical labs.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training track for this course, please contact us to arrange specific requirements.

Uptime Kuma is an easy-to-use, self-hosted monitoring tool that tracks the availability of websites, services, and infrastructure. It replaces Pingdom, Datadog Synthetics, and UptimeRobot for teams that want monitoring data under their own control. This instructor-led, live training (online or onsite) is aimed at beginner-to-intermediate SREs and DevOps engineers who wish to use Uptime Kuma to replace cloud uptime monitoring with a self-hosted, sovereign status tracking platform.

This instructor-led, live training in (online or onsite) is aimed at technical professionals who wish to deploy and manage self-hosted video conferencing solutions that ensure data sovereignty while providing enterprise-grade communication capabilities.

By the end of this training, participants will be able to deploy Jitsi Meet and BigBlueButton, implement security hardening, configure enterprise features, and scale deployments for organizational workloads.

This instructor-led, live training in Beijing (online or onsite) is aimed at security engineers and system administrators who wish to deploy and manage enterprise-grade self-hosted VPN solutions using WireGuard and OpenVPN.

By the end of this training, participants will be able to deploy WireGuard and OpenVPN, design scalable architectures, integrate with identity systems, and monitor/secure VPN infrastructure.

OpenVPN and WireGuard are the two dominant open-source VPN protocols. Running your own VPN server ensures that no third-party provider can log traffic metadata, inject advertisements, or comply with foreign data requests. This training covers both protocols for different threat models and performance requirements.

Wazuh is an open-source security platform providing unified XDR and SIEM capabilities for threat detection, integrity monitoring, incident response, and compliance. It aggregates endpoint telemetry into a self-managed analysis engine, offering a credible alternative to Splunk Enterprise Security, Microsoft Sentinel, and other cloud-native SIEMs

Woodpecker CI is a simple yet powerful continuous integration engine designed specifically for self-hosted Git forges like Gitea and Forgejo. It provides a lightweight, Docker-native CI/CD experience without the complexity or licensing overhead of enterprise CI platforms.

Zammad is a modern, web-based, open-source helpdesk and customer support system. It unifies tickets from email, chat, phone, and social media into a single queue, providing a self-hosted alternative to Zendesk, Freshdesk, and ServiceNow that keeps customer data within your infrastructure.

This instructor-led, live training (online or onsite) is aimed at intermediate support managers and system administrators who wish to use Zammad to replace cloud helpdesk platforms with a self-hosted, sovereign ticketing system.

By the end of this training, participants will be able to:

• Install Zammad from packages or Docker with PostgreSQL.
• Configure email, chat, and API channels for ticket ingestion.
• Design workflows, escalations, and SLA timers.
• Set up role-based access, groups, and organizations.
• Integrate with knowledge base, reporting, and webhooks.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Beijing (online or onsite) is aimed at intermediate-level to advanced-level security professionals who wish to implement Zero Trust Architecture using open-source tools and sovereign infrastructure.

By the end of this training, participants will be able to design Zero Trust architectures, deploy identity-aware proxies, implement dynamic authentication, secure microservices with service mesh, and monitor zero trust policies.

Zimbra Collaboration Suite is an open-source enterprise messaging and collaboration platform providing email, calendar, contacts, tasks, and file sharing in a unified web interface. It serves as a direct, self-managed replacement for Microsoft Exchange and Google Workspace.