# Antenore Gatta

> Senior Lead Cloud Governance & Security Engineer at Kyndryl. 25+ years in IT, former Remmina lead maintainer (2014-2023), sustainability advocate.

A blog about technology and stuff related

## Expertise
- AWS Cloud Governance & Security
- Open source project sustainability
- Linux system administration
- Remote desktop protocols (RDP, VNC, SSH)

## Articles

- [FreeBSD Native Jail Tools: Bastille, Pot, and the Nomad Stack](https://antenore.simbiosi.org/freebsd-native-jail-tools/): Testing Bastille and Pot on FreeBSD 15.0 with VNET jails, ZFS, and a working Nomad plus Consul stack, to see how the native jail tools compare for single-node and orchestration use.
- [FreeBSD 15.0 on a Headless Linux Host with Cloud-Init and nftables](https://antenore.simbiosi.org/freebsd-vm-headless-linux/): How to get FreeBSD 15.0 running on a headless Linux host with libvirt, nuageinit, nftables, and ZFS, including the firewall rules that can block DHCP and outbound traffic.
- [Container Networking on FreeBSD with Podman and CNI](https://antenore.simbiosi.org/freebsd-container-networking/): Notes from testing container networking on FreeBSD 15.0 with Podman and CNI, including IP connectivity, published ports, pods, DNS limitations, and the Netavark gap.
- [Running an OCI Container on FreeBSD with Podman and ocijail](https://antenore.simbiosi.org/freebsd-first-oci-container/): How to run OCI containers on FreeBSD 15.0 with Podman and ocijail, using ZFS for storage, pf for NAT, and the standard FreeBSD container networking stack.
- [Bastille on FreeBSD 15.0: VNET Jails, Bastillefiles, and PF](https://antenore.simbiosi.org/freebsd-bastille-vnet-jails/): Notes from setting up Bastille on FreeBSD 15.0 with two VNET jails on a bridge, Bastillefiles, thin vs thick jails, ZFS snapshots, clone, export, and the PF work needed to make the network usable.
- [Fixing Broken ACPI DSDT Tables on Linux](https://antenore.simbiosi.org/fixing-broken-acpi-dsdt-linux/): How to extract, decompile, correct, and reapply a broken ACPI DSDT table on Linux, with notes on what has changed since 2005.
- [AWS Marketplace in Multi-Account Environments](https://antenore.simbiosi.org/blog/2025/03/aws-marketplace-governance/): Implementing effective AWS Marketplace controls across diverse multi-account structures while balancing security and operational needs
- [AWS Access Keys and Implementing Secure CLI Access Patterns](https://antenore.simbiosi.org/blog/2025/03/taming-aws-access-key-beast-secure-cli-patterns/): How to implement secure AWS CLI access patterns and prevent the proliferation of long-lived IAM access keys in your AWS organization
- [Enhancing No-Comment with Email Encryption](https://antenore.simbiosi.org/no-comment-encrypted/): How I implemented client-side email encryption for the No-Comment system
- [Linux Compose Key Sequences](https://antenore.simbiosi.org/linux-compose-key-sequences/): compose key sequences, which can be used to enter accented and other non-standard characters in Linux
- [No-Comment: Adding GitLab Support to a Static Comments Service](https://antenore.simbiosi.org/no-comment/): How I added GitLab support to No-Comment, a Cloudflare Worker-based comment system for static sites
- [Z shell vs Bash: Which Shell Reigns Supreme?](https://antenore.simbiosi.org/zsh-vs-bash/): A practical comparison between Z shell (Zsh) and Bash - discover why you might want to switch
- [ARIA: Governing AI Participation in Software Development](https://antenore.simbiosi.org/aria-blog-post/): A practical framework for defining clear boundaries for AI assistance in your software projects
- [Testing FreeBSD Jails for Container Orchestration](https://antenore.simbiosi.org/freebsd-jail-orchestration/): FreeBSD got official OCI support in November 2025. This series tests what happens when you try to build container orchestration around jails, ZFS, VNET, pf, and the existing OCI tooling.
- [CRA Draft Guidance and Open Source Stewards](https://antenore.simbiosi.org/cra-draft-guidance-stewards/): Notes from reviewing the European Commission's CRA draft guidance with the FreeBSD Foundation, focusing on steward definition, reporting deadlines, tiering, and upstream reporting.
- [Shell tidbits](https://antenore.simbiosi.org/shell-tidbits/): Less unknown shell tricks
- [Returning to Blogging: AWS Governance, ARIA, and What's Next](https://antenore.simbiosi.org/returning-to-blogging/): After a long silence, I'm back to share my journey with AWS governance, the ARIA project, and more