Lets Learn Portainer.
A ten-module training course on Portainer Business Edition; you follow along in your own lab. Written for integrators, platform engineers, architects, and buyers who need to install, configure, defend, and operate Portainer in production environments.
What this course is
This exists because partners, integrators, and enterprise buyers keep asking the same questions about how Portainer is built, what it does, and how it fits into their operating model. Rather than answer them one at a time, we wrote this. It runs top to bottom, module by module, and you follow along in your own lab.
The tone is educator to peer. We assume you know what a container is, that Kubernetes exists, and that you have deployed things before; we do not assume you know Portainer, and we do not assume you know how to operate a container platform at scale for a real business. That last part is the whole point.
When we take a position we say so plainly; when there is a real tradeoff we show the tradeoff; when the honest answer is "it depends," we say that too, and we tell you what it depends on.
Who this is for
You are the audience if you are a partner or integrator preparing to sell, install, or support Portainer in customer environments; a platform engineer or architect evaluating Portainer for your own organization; or a CIO or CISO working out whether the operator control plane category is the right shape for your Kubernetes and container estate.
If you are just curious about Portainer as a self-hosted homelab tool, most of this will still be useful; the last chapter of Module 1 has a short note about which edition suits which use case.
By the last module, you should be able to install and configure Portainer Business Edition for a production customer, onboard multiple environments, tune it for the operating model your customer has, and know how to keep it running over time; you should also be able to defend the choice of Portainer to a technical audience without hand-waving.
The ten-module roadmap
The first three modules set the argument for why Portainer exists and what it is; modules four through seven walk through deployment, configuration, environment onboarding, and the full advanced feature surface; modules eight and nine cover GitOps and the add-on model; module ten is about operating Portainer once you have it running.
Why Portainer exists
The operational debt that arrived with containers; the eight projects hidden inside a "container platform"; the three phases of platform work; the twelve tools you would otherwise assemble; the operator control plane thesis; a note on CE.
What a Container Management Platform is
What sits above the runtime; Docker versus Kubernetes; where Portainer fits in the seven-layer stack; what Portainer deliberately does not solve.
Portainer architecture
The Management Server; the Portainer Agent; the Edge Agent (standard); the Edge Agent (async); tunnels, polling, and trust; the datastore; when to choose which agent mode.
Deploy a Portainer Management Server
Runtime choice and sizing; persistent storage; dedicated versus shared management environments; the first-boot admin flow; adding your license.
Configure for enterprise use
SSL and TLS; ports and firewalls; scheduled backup to S3/Azure Blob; LDAP, Active Directory, and OAuth; teams before users; feature flags.
Onboard environments
Docker Standalone, Docker Swarm, existing Kubernetes; provisioning KubeSolo; Talos through Sidero Omni; adding managed Kubernetes (AKS, EKS, GKE); trust and access.
The twelve capabilities
Cluster lifecycle; identity and SSO; RBAC and tenancy; fleet governance; policy and admission; registry governance; metrics and alerting; audit and SIEM; day-2 operations; edge and disconnected; plus the integrated-not-replaced list.
GitOps deployments
Sources and workflows; polling and webhooks; templates and catalog; change windows and ITSM alignment; how Portainer's GitOps differs from Argo CD and Flux, and where they coexist.
Portainer add-ons
The catalog; Helm-based lifecycle; the reverse-proxy gateway; the machine API; how Portainer-Run installs as an add-on.
Operating Portainer
Backup and restore; auto-patch on the LTS line; license renewal and node counting; disaster recovery scenarios; the common failure modes and how to triage them.
What you'll need for the lab
This is a read-along course. Reading it without a lab in front of you will get you halfway; running it in your own lab will get you the rest of the way. So before you start Module 4, get the lab together.
To continue with this training, you will need to provide a minimum of 4 VMs, ideally 7, and if you want to learn management of Cloud KaaS (AKS/EKS/GKE) you will also need to deploy a cluster there.
The four-VM path lets you stand up a Portainer Management Server, then onboard three environments — one Kubernetes, one Docker Standalone, and one Docker Swarm — so you get to touch every environment type Portainer manages. The seven-VM path adds spare hosts for Docker Swarm managers (three is the working minimum for a real Swarm), and gives you a second Kubernetes environment to practice fleet operations against more than one cluster.
Adding a KaaS cluster (AKS, EKS, or GKE) is only necessary if you want to work through the KaaS onboarding path in Module 6 and see how Portainer treats a managed cluster against a self-managed one. It is not required to complete the course; it is useful if your customers use managed Kubernetes, which most enterprise customers do.
Nothing in this course requires physical hardware. VMs on your laptop, on a home lab hypervisor, or in a public cloud project all work; specifics of what to install and how appear in Module 4 when you actually need them.
How to work through this
Read the modules in order the first time through; they build on each other. Modules 1 to 3 are conceptual, so blocks of reading are the right rhythm. Modules 4 and 5 are procedural, so read a chapter, do the thing in your lab, come back. Module 7 is the fat one, thirteen chapters covering the twelve capabilities plus the integrated-not-replaced list; do not try to do it in one sitting. Module 10 is the one you will come back to when you have real customers running production Portainer instances; skim it first, then treat it as a reference.
Chapters have three kinds of callout. The teal ones are gotchas — things that will bite you if you do not know them. The amber ones are edge cases and sharp edges. The green ones are lab prompts, telling you to try something in your own environment before moving on.
If you find a mistake, or a claim that has drifted with a Portainer release, tell us; this course is versioned against Portainer 2.45.0 LTS and will move forward with the LTS line.
Start
Module 1 starts with the case for why Portainer exists at all; it is the shortest of the ten and the one most likely to change how you frame the rest of the course. Read it before you do anything in your lab.
Start Module 1: Why Portainer exists