Amit Upadhye

My name is Amit and I am Senior Software Engineer at Red Hat. Most of my contributions are in Foreman related components like Foreman Maintain, Foreman and Keycloak integration, Release Management etc. The Foreman application uses Rails framework and I am involved in developing new features, fix existing problems. I also like to integrate multiple applications and technologies to solve enterprise use cases. Prior to joining development team I was part of support at Red Hat and enjoyed troubleshooting issues of different types which helped me to gain good knowledge around Linux, strace, networking, python debugger, code walk-through.


The Baremetal Discovery and SecureBoot provisioning using Foreman

The Baremetal Discovery and SecureBoot provisioning using Foreman

Baremetal Discovery:

This feature enables to do bare-metal discovery of unknown systems of the network. The systems sends the facts to Foreman which then can be used to provision hosts with different parameters. The plugin also provides ability to auto provision the system as per the rules which can be defined beforehand. The talk covers,

1. Introduction to discovery plugin
2. Requirements to use discovery.
3. PXELess and PXE scenario of discovery.
4. Demo.

SecureBoot Provisioning:

The security is most important aspect of any department and so secure booting should be because its possible to have intrusion and malicious code running at the time of booting operating system. The UEFI Secure Boot was created to secure booting process from malicious component replacement attacks. Latest operating systems offers support for this by including kernel and associated drivers signed by UEFI CA certificate. The Foreman also supports provisioning over the secureboot.This talk covers,

1. What is Secure Boot ?
2. Introduction to basic Foreman provisioning ?
3. The secure boot provisioning using Foreman.
4. Challenges.
5. Demo.
Using Ansible Vault to secure passwords, ssh keys and secure tokens.

Have you ever committed personal token, password or ssh public keys to GitHub ? or any public source code repository ? The devops culture is rapidly getting adopted and often we get to know instances where private important data was pushed to GitHub. Considering the adoption of Ansible usage this session covers below details,

  1. What is Ansible, Ansible basics.
  2. What is Ansible Vault ?
  3. How to use Ansible Vault ?
  4. Use cases of Ansible Vault.
  5. Demonstration.