@b0rk i had a unit on unix system administration where each week we got a slightly broken VM, one per student, we had to fix. every week was slightly harder culminating with a totally broken PAM so you couldn't easily log in
we couldn't break anything, it was already broken! and if we broke it too much prof would just re-image the VM. so no fear!