Open Image Cloud
Cloud images for OpenStack and Proxmox: reproducible builds, keyless cosign signatures, provenance embedded in every image.
Cloud architect in Geneva. Thirteen years of infrastructure.
Sovereignty is not declared, it is verified.
Infrastructure you cannot rebuild from source is not sovereign, whatever country the datacentre sits in.
The record for the page you are reading. The digest is that of its only script, computed at build time and verified on every deploy.
I build and operate the lower layers of sovereign clouds: the system images and the OpenStack platforms that thousands of servers boot on.
For five years at Infomaniak I operated and evolved OpenStack environments of more than 5,000 servers: version upgrades, scale-up, level 3 incidents, multi-cloud clusters driven by Terraform and Ansible. I also designed the system images those machines boot on, work that stays invisible for as long as it works. I am now an N3 Cloud and Managed Services engineer at Cheops Technology Switzerland, in Geneva.
Most of the writing here is in French. Pieces whose audience is the upstream community are written in English.
Nothing published yet. The contributions register and the projects page are current.
Cloud images for OpenStack and Proxmox: reproducible builds, keyless cosign signatures, provenance embedded in every image.
12 changes merged upstream, 8 in review, 15 reviews given on Horizon, openstacksdk and Keystone. The register lists every change with its Gerrit number and state, abandoned ones included.