// systems & full stack
// capabilities
Low-level GNU/Linux work — custom kernels, hardened initscripts, specialized device firmwares. Every build tuned from the toolchain up for its exact workload and threat model.
Gentoo · Sourcemage · Lunar · LEDE · ALFS/CLFS · Buildroot · Yocto · Custom ToolChainsEnd-to-end LLM pipelines covering fine-tuning, batch inference, and RAG retrieval. Served through Ollama, vLLM, and llama.cpp; vector stores via LangChain, ChromaDB, or Qdrant.
Ollama · vLLM · llama.cpp · LangChain · ChromaDB · Qdrant · sentence-transformers · ONNX Runtime · bitsandbytes · peft · MLflowFull lifecycle management of libvirt/KVM, Proxmox, and Incus clusters. Container workloads on LXC, and containerd — firecracker micro-VMs isolate untrusted codepaths.
libvirt · KVM · Proxmox · Incus · LXC · containerd · firecrackerObservability stacks with Prometheus and VictoriaMetrics for metrics, Loki for logs, Tempo for traces. Grafana dashboards; long-term storage and horizontal scaling via Thanos.
Prometheus · Grafana · Loki · Tempo · Alertmanager · VictoriaMetrics · ThanosFull-stack web with a focus on eCommerce. Laravel backends, Bagisto storefronts, Livewire/Alpine.js for real-time UI, Inertia.js for SPA flows. PostgreSQL + Redis, Caddy-terminated TLS.
Laravel · Bagisto · Livewire · Alpine.js · Inertia.js · PostgreSQL · Redis · CaddyBespoke systems — workstations, enterprise servers, edge nodes, AI training rigs. Components matched to workload; IPMI/BMC management, PXE provisioning, burn-in stress testing before deploy.
Server · Edge · AI/GPU · Workstation · IPMI/BMC · PXEOn-site NOC and datacenter services across MA and NH. Hardware provisioning, structured cabling, rack-and-stack, PDU/UPS, cross-connects, thermal assessment, incident response.
MA · NH · On-site · PDU · UPS · · Cross-connectsCisco Meraki switching and wireless, Mikrotik RouterOS for BGP and traffic shaping, OPNsense/pfSense for stateful firewalling. VPN tunnels, VLAN segmentation, IDS/IPS, DNS-level filtering.
Cisco Meraki · Mikrotik · OPNsense · pfSense · BGP · VPN · VLAN · IDS/IPSCaddy/Nginx orchestration with LAMP/LEMP stacks. Kernel hardening via NF-tables, eBPF syscall filtering, MAC through grsec/pax. App-layer defense with CrowdSec and Fail2Ban; ACME TLS rotation.
Caddy · Nginx · NF-tables · eBPF · ACLs · grsec/pax · CrowdSec · Fail2Ban · ACMEPersonal engineering domain that resolves to the openengineer repository on the DCOS.NET forge. The project itself is an attempt to preserve engineering understanding — context, tradeoffs, the why behind the design — so that future engineers inherit reasoning instead of only results.
Read the writeupPySide6 desktop application for orchestrating local AI/ML tool stacks across a 13-layer architecture. Discover, configure, launch, and manage 125 tools spanning GPU runtimes, inference engines, agent frameworks, and container deployment targets. Includes a drag-and-drop Stack Editor and real-time system health monitoring.
Read the writeupBare-metal, cleanroom toolchain generation engine for sovereign infrastructure. Produces hardened, microarchitecture-optimized cross-toolchains across 19 target configurations spanning Intel, AMD, ARM, MIPS, and Tilera TILE-Gx processors. Built to LFS 13.0 stable standards; all compilation occurs in volatile ramfs mounts.
Read the writeupDesktop video player built on libmpv, with a custom egui overlay UI rendered in an always-on-top window. The engine runs on its own thread; the UI never blocks playback. File dialogs are drawn inside the overlay — no external dialog processes, no z-order conflicts.
Read the writeupWindows tray-resident tool that silently moves photos off an SD card or USB drive into a dated folder on your PC. Zero prompts, zero dialogs — plug in the media, files land where they belong, unplug and go.
Read the writeupDisc-image editor for ISO 9660 and UDF, built with PySide6 (Qt 6) and pycdlib. Runs as a GUI or CLI — inspect, extract, modify, and rebuild disc images without round-tripping through external tools.
Read the writeupHigh-concurrency, source-based infrastructure management suite. Implements a spell format compatible with Source Mage GNU/Linux grimoires — separate maintainers, separate codebases, separate governance. Built for parallel package compilation across host clusters.
Read the writeup7 featured projects · 24 total on the forge
// reference
Checklists, spreadsheets, configs, and research