Skip to main content
Version: v5.6.1

Getting started with OpsChain

Included from Basic tier

Welcome. OpsChain automates and governs enterprise operations at scale: you model your estate (projects, environments, assets), describe the work as actions and workflows, run that work with full logging and approval gates, and then let events and triggers run the estate for you.

This is the learning path: lessons of 5–20 minutes, each with one outcome you can test, grouped into modules by capability and ordered into tracks by role. Every lesson opens with what you will be able to do, lists what it needs, shows what you should see after each step, and ends with a check and a next step — by the end of your track you will have gone from a fresh install to an estate that runs itself.

How to read this path​

The lessons are embedded in the opschain binary itself, so the copy you are reading always matches the version you are running:

opschain learn # this page — the tracks and modules
opschain learn author # one track, lesson by lesson
opschain learn m3 # one module and its lessons
opschain learn 3.1 # one lesson by id…
opschain learn 3-1-your-first-change # …or by its full name
opschain learn 3.1 | less # the output is pager-friendly
opschain learn export -o ./docs # write the whole set to disk

One library, three kinds of page​

The documentation is one library with three kinds of page, and meeting a topic more than once is deliberate — each kind reads it through a different lens:

  • The lessons (this path, opschain learn <id>) are tutorials: one outcome each, hands-on, in the order your track gives them.
  • The guides (opschain docs, listed under Guides) are how-to pages with no exercise — the platform at a glance, provider-side setup for identity providers, secrets providers, the GitHub, Jira Service Management and SIEM integrations — readable in any order and linked from the lessons that lean on them.
  • The reference (opschain docs) is for looking things up: every component, resource field, CLI verb and concept, precisely and completely.

Learn from the lessons, work from the guides, look up in the reference.

Choose your track​

Every track starts with the same first module and ends on the GUI recap; what sits between is your role's order through the modules below.

  • Evaluating OpsChain? Take Foundations — the shared core every role assumes, in the order the OpsChain Academy's Foundations exercises verify it. Stop when convinced, or carry on into your role's track.
  • Writing actions, packs and workflows? Author.
  • Running and watching an estate others author? Operator.
  • Installing, securing and keeping the server up? Admin.
  • Proving control? Governance.
  • Building, enrolling and governing an agent? Agent builder.

Want your progress verified? The OpsChain Academy runs the same path with checks the examiner can see — opschain academy — and a lesson that has a verified exercise says so in its "Check yourself". The lessons read the same with or without it.

Prerequisites​

  • The opschain binary on your PATH (opschain version prints the build). Lesson 0.0 is how it gets there — a package manager or a verified download.
  • For most lessons: a running OpsChain server and a login. Lesson 0.1 covers both, including starting your own local server.
  • No server yet? Lesson 0.2 explains the local lane — authoring and running actions works entirely on your own machine with --local, and the Author track's second module needs nothing else.

The learning path​

Six tracks order the same modules for six roles; a module is one capability, three to ten lessons of 5–20 minutes, each with one outcome you can test. A lesson's minutes are its reading time plus its doing time — measured on a walk of the lesson where one exists, marked (estimate) where none has yet. Read a track top to bottom, or pick a module or a lesson.

Tracks​

import AcademyTracks from '@site/src/components/AcademyTracks';

Modules​

M0 Start here​

Get the binary onto a machine, sign in, and learn the two modes and the tools every later lesson assumes.

M1 The estate​

The node tree everything runs against, the data layered over it, and the licence behind its limits.

M2 Author work​

Write actions, compose them, use and build packs, and iterate on your own machine before anything touches a server.

M3 Run work on a server​

Changes against estate nodes with the server keeping the record — gates, remotes, templates, secrets and artifacts.

M4 Workflows​

Orchestrate many actions across many assets, with error semantics and gates you can predict.

M5 Events and automation​

The record the platform keeps, and the triggers, schedules, webhooks, notifications and windows that run the estate from it.

M6 The execution estate​

Where work runs — runners and fleets, and the hosts you install nothing on.

M7 Who may act​

Users, groups, rules and policies; tokens and automation principals; security roles, step-up and federated sign-in.

M8 Operate the server​

Backup and restore, definitions under change control, the posture ladder, database care, upgrades, replicas and sites.

M9 The GUI​

Everything you just learned, through the browser — the recap every track ends on.

M10 Change governance​

Approval policies and the change funnel, asset owners, the approval context an approver reads, waivers — and a change advisory board composed from them. Requires packs:change-governance; the prose reads without it.

M11 Security governance​

Classification and the register, controls and the evidence ledger, review campaigns, and notification mandates. Requires packs:security-governance; the prose reads without it.

M12 Agents​

Felix, hire to retire — what an agent is, enrolling and governing one, its evidence, releases and rollover, kill switches, model providers, building your own, the bundled SMEs and MCP. Requires packs:agents; the prose reads without it.

M13 Integrations​

GitHub, Jira Service Management and SIEM export as governed integrations, and the three rules every integration follows; inbound webhooks are lesson 5.3.

M14 Packs​

The licensed action packs — MintPress ships here; AWS, Azure and Ping AIC lessons ship with their packs. Requires packs:mintpress; the prose reads without it.

Guides​

The how-to guides — the platform at a glance, the GUI screen by screen, identity-provider setup, secrets providers, the GitHub, Jira Service Management and SIEM integrations — live in the reference under Guides, and a lesson links the guide it leans on.