Blog
  • Welcome to egonzalez blog
  • Software Supply Chain Security
    • Software Supply Chain Security: Why It Matters
    • Software Supply Chain Security: A Technical Deep Dive
    • SLSA and the Software Supply Chain Security: Time to Get Serious
  • Provenance
    • Understanding Provenance in Software Supply Chain Security
  • Building a secure development framework
  • Hacking
    • Index
      • Hack the box writeups
        • Dyplesher HTB writeup
        • Fatty HTB writeup
        • Oouch HTB writeup
        • Sauna HTB writeup
      • Python Vulnerabilities
        • Data Deserialization
          • Pickle
          • XML
          • YAML
      • Hacking cheatsheet
  • DevSecOps
    • Index
      • Gitlab CI minikube development environment
      • Gerrit review minikube
      • Gerrit and gitlab replication and CI job hooks on k8s
      • Vault integration with Gitlab CI
      • Gitlab CI template for DefectDojo
      • Falco real time runtime thread detection on k8s
      • Zarf - Airgap deployment in kubernetes
      • OWASP Dependency-track
      • OpenDaylight in a Docker
      • To conditional or to skip, that's the Ansible question
      • Spacewalk Red Hat Satellite v5 in a Docker container PoC
      • Ansible INI file module
  • OpenStack
    • Index
      • OpenStack tacker and service function chaining sfc with kolla
      • Deploy OpenStack designate with kolla-ansible
      • OpenStack keystone zero downtime upgrade process newton to ocata
      • Midonet integration with OpenStack Mitaka
      • OpenStack kolla deployment
      • Magnum in RDO OpenStack Liberty
      • Nova VNC flows under the hood
      • Ceph Ansible baremetal deployment
      • Rally OpenStack benchmarking with Docker
      • OpenStack affinity/anti-affinity groups
      • Migrate keystone v2.0 to keystone v3 OpenStack
      • Neutron DVR OpenStack Liberty
      • OpenStack segregation with availability zones and host aggregates
      • Nova Docker driver
      • Murano in RDO OpenStack manual installation
      • Ceph RadosGW admin Ops
      • Multiple store locations for glance images
      • List all tenants belonging an user
      • Load balancer as a service OpenStack LbaaS
      • OpenStack nova API start error
      • Delete OpenStack neutron networks
Powered by GitBook
On this page

Was this helpful?

Welcome to egonzalez blog

NextSoftware Supply Chain Security: Why It Matters

Last updated 2 months ago

Was this helpful?

My name is Eduardo Gonzalez, also know as egonzalez in OpenStack and NFV communities and xNaaro in hacking groups.

I'm a passionate Open Source advocate who has been independently contributing to OpenStack for over 4 years, served as Project Team Lead (PTL) in OpenStack Kolla project and still being a core reviewer. Also I've contributed to many other Open Source projects related to NFV, Python, Ansible, security tools, etc.

My main specializations are:

  • Containerize OpenStack services

  • Python Software Development

  • SDN, NFV and Edge integration and deployment

  • Infrastructure as Code (primarily Ansible)

  • Docker and k8s

  • Design and implement complex upgrade procedures

Recently I've been pushing hard to increase my skills about hacking, pentesting and bug bounty.

Miscellaneous:

  • I like do code reviews

  • I like do mentoring

  • I like innovate and learn new things, routine is boring

  • Try harder as rule

Hacking
Software Supply Chain Security
DevSecOps
OpenStack