blopOS FR

Christopher Amiaud Senior DevOps / Platform Engineer

« I make production boring »

Grenoble, France · 20+ years in production

20+ years making critical production platforms reliable — from the physical rack in the datacenter up to operating fleets of ~2,000 servers.

I turn legacy infrastructure into automated, observable and resilient platforms, without ever sacrificing service continuity. From fibre and BGP up to Terraform, Nomad and observability: understanding why things break, not just how to restart them.

What I do best

  • Designing and industrialising technical platforms
  • Automating infrastructure and operations (IaC)
  • Making production reliable and reducing incidents
  • Observability, monitoring, incident response
  • Modernising legacy systems
  • Pragmatic use of AI in engineering teams (review, quality, anti-slop)

Stack

Linux Terraform Ansible GitLab CI/CD Docker Nomad Consul Vault Prometheus Grafana Loki HAProxy HA Distributed systems

The portfolio in a real Linux VM

A real Linux machine: Alpine x86-64, emulated in your browser by blink-wfork (a fork of blink with a real fork(), in WebAssembly). The portfolio there is a shell script, blop, and the CV is text files in ~. Try cube, htop or grep -ri nomad ~.

Source code on GitHub: govlog/blink-wfork

From the keyboard, Ctrl+] gives the focus back to the page.

Career

Senior DevOps & Cloud Infrastructure Engineer @ Kokiris

· Aubagne · hybrid · ≈400 servers

  • Industrialising and monitoring a fleet of ~400 servers (IaC, CI/CD, observability, security).
  • CI/CD pipelines to speed up and secure production releases.
  • Infrastructure and operations automation, Infrastructure-as-Code approach.
  • Strengthened observability: better incident detection, better reliability.
  • Modernising existing components into more maintainable platforms.
  • Measured use of AI assistants: code quality, review, security, cutting the « slop ».

Lead DevOps @ Cognix Systems

· Grenoble · full remote · ≈2,000 servers

  • Technical leadership of the hosting unit: production quality, structuring practices.
  • Operating and stabilising a fleet of ~2,000 servers.
  • Technical mentoring, raising the team's maturity.
  • Bridge between operations, industrialisation and delivery.

DevOps Engineer @ Cognix Systems

· Rennes

  • Automating operations with Bash and Ansible.
  • Administering virtualised, distributed, high-availability platforms.
  • Building system tooling to improve day-to-day operations.
  • Cloud and bare metal on OVH.

Cybersecurity Consultant @ Freelance

· hybrid

  • Advising on securing infrastructure and services.
  • Hardening environments, reducing risk.
  • Pragmatic security, grounded in operational reality.

Cybersecurity upskilling @ (voluntary break)

· Rennes

  • System hardening, penetration testing, labs / CTF (Root Me…).
  • Led to a cybersecurity consulting activity, then a deliberate return to my core craft:
  • operating and stabilising critical platforms.

WebOps / DevOps Engineer @ Claranet

· Rennes · enterprise

  • Enterprise & pure-player production, SLA/recovery-time commitments.
  • L1/L2/L3 support on critical platforms, post-incident analysis.
  • Industrialising environments with Puppet.
  • CHFI training (forensics).

Systems Architect @ DIGITEKA

· Paris · R&D

  • Evolving and securing a streaming platform.
  • Monitoring, statistics, live reporting. Cost reduction.

Technical Lead — Hosting & Managed Services @ Azuria

· Paris · ≈200-300 servers

  • Technical direction of the company, managing a team of 4.
  • Colo & managed services for a 200–300 server fleet for enterprise clients.
  • Full infrastructure migration to 2 new datacenters, with zero downtime.
  • HA, high-load web architectures: multi-homing, DR/BC, virtualisation, VoIP.
  • Security and infrastructure audits, redesign of shared services.

Network Technician @ Ecritel

· Global-Switch DC

  • IBM-operated network room for CaLyon: optical fibre, inventory, path optimisation.
  • Built a fibre management and inventory tool.

System Administrator @ iVision

· Paris

  • On-site administration and support engagements (Active Directory…).

Systems & Network Administrator — Datacenter @ SECR

· Global-Switch DC

  • Colo work: racking, copper/fibre cabling, patching, power, cooling.
  • Server-room relocations between datacenters, back to production.
  • Multi-homed network (DR/BC), BGP deployment. FreeBSD/Linux platform.
  • VoIP: heavy Asterisk use, contributed to an SS7 solution.
  • Hired full-time before finishing the degree. It all starts here.

Open-source projects

shclaw

5 stars · C · MIT

Multi-agent AI orchestrator in C. A single static binary < 1 MB, zero dependencies: TLS (BearSSL), IRC, JSON, persistent memory… and an embedded C compiler (TinyCC) — agents write C compiled in-memory to extend their own capabilities at runtime. The same ELF runs on Linux, FreeBSD, NetBSD and OpenBSD (Cosmopolitan Libc).

An AI orchestrator + IRC client + TLS stack + C compiler, in less space than a single JPEG.

C11 Cosmopolitan TinyCC BearSSL multi-agent IRC

cidre

3 stars · C · GPL-2.0

Real-time log analysis by CIDR block: auto IPv4/IPv6 extraction from any log format, mapping to network block + country + WHOIS. In 30 seconds you see which scraper or coordinated attack is hitting your infra — where it used to take grep, awk, whois and a lot of coffee. ~2,200 lines of C, zero dependencies.

C port of an old personal Python script. The field: LLM bots, scanners and scrapers — a host's daily life.

C11 security CIDR real-time ops

ttyloom

1 stars · Go · MIT

An ircii-style terminal chat client: Telegram, Discord and IRC in one window. Real-pixel images (kitty graphics protocol, Unicode half blocks elsewhere), videos and GIFs played inside the conversation, a zoomable viewer, cross-network search, scriptable hooks, FR/EN interface. Main author: Claude (Claude Code), under my direction.

~35,000 lines of Go, 836 tests. A single goroutine owns all of the UI state.

Go TUI Telegram Discord IRC kitty graphics

claude-darkroom

0 stars · TypeScript · MIT

A Claude Code mod: the images Claude reads, writes or makes, and the ones you paste, show up as a film strip right in the chat. Built-in viewer, copy image or path, colored-block preview outside Ghostty/kitty. Main author: Claude (Claude Code), under my direction.

Thumbnails develop as under a darkroom safelight. PNG is decoded by hand inside the mod's sandbox.

TypeScript Claude Code plugin kitty graphics

pytaskpool

1 stars · Python · GPL-3.0

Multiprocessing pool with result generators (ordered or not). Published on PyPI.

Born to parallelise the X-ray diffraction simulations of a CNRS researcher — without touching her code's structure.

Python multiprocessing PyPI

8080sh

0 stars · Bash

An Intel 8080 CPU emulator written in Bash. Yes, in Bash.

~2,600 lines of shell to bring a 1974 processor back to life.

Bash emulation 8080 WIP

3d-bash-spinning-cube

0 stars · Bash

A spinning 3D cube rendered in ASCII in the terminal: coproc to bc for trig, hand-rolled Bresenham for the edges.

It runs for real in this site's VM: type cube in the terminal.

Bash 3D Bresenham

basha1

2 stars · Bash

SHA-1 implemented in pure Bash (builtins only), output identical to sha1sum.

« Yet another totally useless stuff. Don't ask me why… »

Bash crypto one-liner

writeups

0 stars · reverse

Reversing a MIPS ransomware (Labyrenth CTF): ptrace anti-debug patched by hand, fork followed under strace, XOR key extraction via gdb scripted in Bash.

Flag: PAN{that_ransomware_ran_somewhere}

MIPS gdb CTF anti-debug

rcurl

1 stars · Bash

A curl wrapper to test a domain against an arbitrary IP (--resolve): http↔https, www↔non-www normalisation. The daily tool behind a load balancer.

Born in the field: debugging normalisation behind HAProxy.

Bash HTTP ops

bcrpn

0 stars · Python

A bc-like arbitrary-precision calculator: INFIX → POSTFIX → RPN + stack solver, a mini-language with variables and loops.

Computes π via the Nilakantha series in one line.

Python parsing RPN

Hosted on blop.foo

govlog's experiments (vibe coded shit)

Arcade Vault

The games launcher: one node:22-alpine container (Express) serves the static games and hosts the backends of the LLM-driven ones. Canvas-animated thumbnails, terser minification at build time.

Fractalscape

1-bit-inspired fractal roguelite: seeded 10-floor dungeon, weapons with unique DNA, build mutations, final boss. Canvas 2D, a single JS file, keyboard and touch.

Command Grid

Real-time strategy on a procedural battlefield: infantry, tanks, fighters, crush the enemy HQ. Deterministic simulation, single HTML file.

Base Defender '89

Old-school turret defense: waves of alien ships, power-ups, a boss, chiptune music. Single HTML, code-drawn sprites.

Fractal Zelda SF

Sci-fi Zelda-like in a fractal megastructure. NPCs talk through an LLM (gpt-4o-mini) and their sprites come from DALL·E, cached in SQLite; daily budgets and rate limiting server-side.

Voidreach

Space sim and trading: procedural galaxy from a deterministic seed — trade, mine, colonise, fight. A nod to Elite, Frontier and Star Control; Vite bundle.

La Glycine Sacrée

Cozy pixel-art garden: plant, water, prune the brambles and coax the wisteria into bloom. One 100 KB HTML file, synthesized chiptune.

Termin-Hack

Movie-style fake mainframe: every command goes to an LLM (DeepSeek) that answers with a small JavaScript program the page runs — fake windows, fake UIs, live chat with hackers. Server-side SSE relay.

Xplore

Elite's cockpit × No Man's Sky's worlds: one seed generates 2,200 systems, every hill, every creature, every name. Zero dependencies. You talk to your ship — literally (whisper + LLM relay).

The Isle

Contemplative flight over a voxel ocean planet: an endless seeded archipelago, thermals, villages, quests and companions. Dialogue and upcoming quests are prepared in the background by an LLM (DeepSeek, SSE), with a local fallback when there is no key. Somewhere far away, behind a storm: the Isle.

Silfen, les chemins

Contemplative first-person walk along the Silfen paths. Noise-based procedural terrain in WebGL2, pointer lock, memory fragments to find, Web Audio ambience. Single HTML file.

Alex — trackmo

8-bit birthday trackmo: 320×200 software renderer in Uint32 (no hardware acceleration), old-school effects, ProTracker .MOD replayer in Web Audio, 8×8 font. One 150 KB file, music inlined as base64.

chiptun0r

Chiptune composed live, never the same twice: functional harmony, Beethoven-style cell development, jazz/funk/blues/bossa/techno/baroque styles. Web Audio oscillators; dist, bitcrush, resonant filter, flanger, compressor.

shell — CRT bash

A real x86-64 bash (Alpine, musl) emulated in the browser by blink compiled to WebAssembly, with fork(), pipes and subshells added by this fork. ghostty-web CRT terminal, COOP/COEP isolation.

iris — bot orchestrator

Personal agent orchestrator (Flask): several role-based agents (hub, oracle, builder), swappable LLM providers, Google Calendar/Tasks tools, e-mail, scheduler, persistent memory, push notifications, PWA.

Screenshot of PIXELFIT — retrofit

PIXELFIT — retrofit (private)

Mobile weight-loss PWA gamified as an 8-bit arcade, with an AI coach. Node monolith: Express + SQLite + React/Vite, push notifications (VAPID), served under a secret path. Built by a multi-agent workflow with per-zone file ownership.

Screenshot of Geneagov — family tree

Geneagov — family tree (private)

Family tree documented record by record: HTML app + data.js, Leaflet map of places, scanned records as evidence, per-branch research journals. Sources: French departmental archives and parish registers (IIIF).

Skills

Systems
Linux · Debian · FreeBSD/NetBSD/OpenBSD · hardening
IaC & automation
Terraform · Ansible · Puppet · Bash
Orchestration
Docker · Nomad · Consul · Vault
Observability
Prometheus · Grafana · Loki · Icinga · strace
Network & HA
HAProxy · Varnish · Apache/nginx · BGP · multi-homing · DR/BC
CI/CD
GitLab CI/CD · git
Cloud
OVHcloud · bare metal · AWS (basics)
Databases
MySQL/MariaDB · Redis · tuning & replication
Security
pentest (labs/CTF) · reverse (MIPS) · forensics (CHFI) · fail2ban · anti-scraping
Dev
C (C11) · Python · advanced Bash
Applied AI
LLM APIs (Claude/GPT/Ollama) · multi-agent · code assistants + guardrails

Education and certifications

  • IUT René-Descartes · IT Systems & Networks (vocational) 2004 – 2006
    Work-study, IBM internship. Left in year 2: hired full-time in hosting before graduating.
  • Université de Limoges · University Diploma — Internet Technologies 2001 – 2002
    Obtained. Web creation, project management, collaborative work.

Certifications

  • OVHcloud ×6 — Discover (IaaS, Web, Support, Solution Architect, Enterprise) · 2022
  • AWS Technical Professional · 2014
  • CHFI training — forensics · (Claranet)

Recommendations

He audited our LAMP deployment with great expertise — we applied its recommendations and cut almost all service disruptions we had, while simplifying and making the setup cheaper.
— FTI Tiffreau — WW Consulting Engineer, 2013
Excellent technicien dans son domaine. Très bonnes relations humaines avec partenaires, clients et fournisseurs. Dans sa ténacité, il met tous les moyens en œuvre pour réussir ses projets.
— Jérémy Spiesser — Responsable infrastructures, 2012

Contact

Open to: Platform Engineering, SRE, infra modernisation.