Sho Ishida

Systems Engineer | Infrastructure & Automation Portfolio

Featured Deployments

IaC Infrastructure Cluster

Blueprint Schema

Automated multi-node virtual machine deployments on a bare-metal RHEL 10 KVM Hypervisor. Built decoupled VM nodes utilizing custom network parameters, automated firewalld sockets, and active system configuration.

Source Repositories →

Contact Registry

EMAIL: shooey623@gmail.com GITEA: gitea.shooey.xyz/sho GITHUB: github.com/Isshi0417 DASHBOARD: shooey.xyz/dashboard

System Specifications

  • HYPERVISOR: KVM / Libvirt (RHEL 10)
  • DIRECTORY REALM: FreeIPA (lab.local)
  • AUTOMATION: Ansible Engine
  • CONTAINERS: Podman (Rootless Namespace)
  • ACTIVE VM NODES: 4 Virtual Machines

Engineering Principles

Idempotency First

Ensuring all systems automation scripts and playbooks are repeatable, safe to run repeatedly, and yield consistent states.

Defense in Depth

Isolating services, hardening firewall interfaces, configuring secure DNS parameters, and leveraging rootless namespaces.

Declarative Infrastructure

Maintaining all environment blueprints, services, and configurations under version control as a single source of truth.

Node Directory

  • freeipa.lab.local 172.30.1.100
    Identity Provider, LDAP Registry, Kerberos Realm
  • ansible-control 172.30.1.200
    Automation Engine, Gitea Git Repository
  • web-portfolio 172.30.1.201
    Nginx Web Server, Gitea Actions Runner VM
  • media-stream 172.30.1.202
    Navidrome Music Server, Cloud storage FUSE mount

Technical Track Record

Homelab Infrastructure & Automation Deployment

ACTIVE LAB PROJECT

Self-Hosted RHEL 9 / 10 Enterprise Cluster

  • Implemented a bare-metal RHEL KVM Hypervisor using Libvirt utilities, provisioning isolated VM nodes with bridged network profiles.
  • Deployed a FreeIPA server (LDAP/Kerberos) to centralize single-sign-on authorizations, host configurations, and BIND DNS zones.
  • Established a private Gitea code registry and Gitea Actions Runner inside rootless Podman namespaces, resolving strict SELinux socket permissions.
  • Built shell automation scripts incorporating the Rclone RC API (`rclone rc vfs/refresh`) to refresh mounted Google Drive directories on a Navidrome container with zero unmount downtime.
  • Routed internal VM nodes through encrypted Cloudflare Zero Trust Tunnels to securely expose endpoints (Gitea, Grafana) without opening inbound ports.