Peeling Back the Layers of Storage - From Physical Disks to Advanced File Systems
Comprehensive overview of Linux storage options, from basic physical disks to advanced layered systems, covering partitioning, encryption, caching, and file management techniques.
IOMMUFD Integration in QEMU
Explore IOMMUFD integration in QEMU, covering new user API for IOMMU control, redesign challenges, backward compatibility, and impact on management layers like libvirt.
Hypervisor.Framework - Virtualization on macOS
Explore macOS's Hypervisor.Framework, its design principles, and implementation on Intel and Apple Silicon CPUs. Learn how QEMU utilizes this technology for virtual machine provisioning.
Optimizing KVM Performance for Electronic Health Record Systems
Optimizing KVM for Electronic Health Record systems: Reducing speculation overheads, accelerating IPI delivery, and enhancing ecosystem components for improved performance and reliability.
How Fast Can We Go? Booting a Linux VM to Userspace in 100ms and Beyond
Explore techniques to optimize Linux VM boot times, aiming for sub-100ms userspace access. Learn about performance analysis, mitigation strategies, and trade-offs in virtualization technology.
NVMe Emulation Performance Optimization Techniques in QEMU
Explore NVMe emulation optimization techniques to boost performance from 30 KIOPS to 330 KIOPS, including shadow doorbell buffers, ioeventfd, iothread, and polling strategies.
I2C Multi-master and Controller Slave Mode Implementation in QEMU
Implementing I2C multi-master and slave mode in QEMU for BMC boards, enabling MCTP protocol support and NVMe-MI device emulation with Linux kernel AF_MCTP socket integration.
Setting Up an Environment for Writing Linux Kernel Modules in Rust - Mentorship Session
Hands-on guide to set up a development environment for Linux kernel modules using Rust. Covers software installation, kernel building, and debugging tools on Ubuntu.
Changing Applications for Dynamic Secrets - Tutorial
Learn to architect applications for dynamic secret management, minimizing downtime during credential changes. Explore patterns for retrieving and reloading secrets across various environments, including VMs and Kubernetes.
Are Containers Ready for Production Databases?
Explore open-source approaches for running stateful database workloads on containers, from Docker and Podman volumes to Kubernetes operators, addressing skepticism about container maturity for production databases.
Controlling Script Execution in Linux - Security Mechanisms and Challenges
Explore kernel-managed script execution control in Linux, addressing challenges and implementation approaches for a consistent global policy.
Verifiable End-to-End Secure OCI Native Machines
Explore a secure toolchain for verifiable workloads using signed OCI images, ensuring tamper-proof boot processes and authenticated communication with hosts.
Enforcing Runtime Integrity with Maat
Explore Maat: an open-source framework for runtime integrity measurement in Linux systems, enabling continuous security checks and malware detection throughout system execution.
SecurityPerf - A New Open-Source Framework for Benchmarking Linux Security Solutions Performance
Explore SecurityPerf, an open-source framework for benchmarking Linux security solutions' performance impact. Learn about its containerized approach, supported services, and real-world applications.
Hypervisor-Enforced Kernel Integrity for Linux with KVM
Explore hypervisor-enforced kernel integrity for Linux using KVM. Learn about advanced protection mechanisms against kernel vulnerabilities and their implementation through virtualization.
Contributor Growth Strategies for Open Source Projects
Strategies for growing open source project communities, including governance, onboarding, mentoring, and metrics. Learn to build sustainable projects and reduce maintainer burnout.
Building the Largest Working Set of AppArmor Profiles
Discover how to build an extensive set of AppArmor profiles for enhanced Linux security. Learn about challenges, security architecture, and integration testing in this comprehensive project.
systemd and TPM2 Features in Linux - Current State and Future Developments
Explore systemd's TPM2 features for enhanced Linux security, including disk unlocking, PCR policies, and system credentials, with insights on future developments and implementation challenges.
Advanced Tracing Features to See What Your Application is Waiting On
Explore new Linux kernel tracing enhancements to identify application bottlenecks, I/O blocks, mutex contentions, and scheduling behavior. Learn to optimize task grouping and performance using real-world examples.
Reducing the Kernel's Slab Allocators - Progress Report
Progress report on reducing Linux kernel slab allocators to SLUB, discussing differences, benefits, and potential challenges in accommodating workloads currently performing better with SLAB.
Empathetic Approach to Containerized Deployments - Making Products Available for Everyone
Explore diverse containerized deployment approaches, from one-click solutions to customizable options, enhancing user adoption and product accessibility for various technical skill levels.