eBPF 201: Supercharging Your eBPF Development Process for Cloud Native Apps
Explore best practices for developing and deploying production-ready cloud native applications using eBPF technology, covering programming models, toolchains, portability, and operational requirements.
Least Privilege Containers: Keeping a Bad Day from Getting Worse
Explore strategies for reducing container privileges, enhancing security through unprivileged users and minimal images, and implementing design changes to segment permissions and prevent future vulnerabilities.
Journey to Cloud-Native, Kubernetes and Securing Clusters
Explore the journey into Cloud-Native technologies, including Linux, containers, Kubernetes, and cluster security. Gain insights for newcomers, especially from underrepresented backgrounds in tech.
Securing the Superpowers: Who Loaded That eBPF Program?
Explore eBPF technology's power and security implications. Learn about auditing, monitoring, and enforcing eBPF program loading on Linux systems using Tetragon for enhanced system protection and accountability.
L3AF - Complete Lifecycle Management of eBPF Programs
Explore L3AF, an open-source daemon for managing eBPF programs across hosts. Learn about its control plane, configuration capabilities, and integration with Cilium's eBPF library for metrics collection.
Hitchhiker's Guide to Kubernetes Networking
Demystify Kubernetes networking by exploring key constructs like v-eth pairs, bridges, and iptables, essential for container communication in distributed systems.
Dynamic Tracing Tools on ARM/AArch64 Platform - Updates and Challenges
Explore dynamic tracing tools for ARM/AArch64, including updates, challenges, and porting guides. Learn about Linux observability tools and frameworks for embedded systems and automotive platforms.
How IoT Will Destroy Us All - Dangers of the Internet of Things
Humorous exploration of IoT's potential dangers, examining global networks, AI, and cybersecurity risks through witty analogies and tech industry insights.
Developing a New WiFi Daemon for Linux - Lightweight Solution for IoT
Explore the development of a lightweight 802.11 wireless daemon for Linux, designed for IoT use cases, and its integration with ConnMan and Network Manager.
2017 - The Year of Linux Video Codec Drivers
Explore recent V4L2 additions enabling standard Linux kernel API support for video codecs, eliminating the need for proprietary solutions in embedded systems.
Building Multi-architecture Apps with Docker Buildx
Explore Docker's buildx for cross-platform app development. Learn to create multi-architecture images that run on various OS and CPU architectures, with demos using Java and .NET Core.
Hardening Docker Daemon with Rootless Mode
Explore Docker's Rootless mode for enhanced security and non-root usage. Learn implementation details, benefits, and future enhancements from the feature's creator.
Dockerizing Aurea - Migrating Legacy Applications to Containers
Learn how Aurea migrated 2,000+ instances to 1,700 Cloud containers, achieving cost savings and improved resource usage. Discover key learnings, ROI metrics, and tips for dockerizing legacy applications.
Optimizing KVM Performance for Electronic Health Record Systems
Optimizing KVM for Electronic Health Record systems: Reducing speculation overheads, accelerating IPI delivery, and enhancing ecosystem components for improved performance and reliability.
How Fast Can We Go? Booting a Linux VM to Userspace in 100ms and Beyond
Explore techniques to optimize Linux VM boot times, aiming for sub-100ms userspace access. Learn about performance analysis, mitigation strategies, and trade-offs in virtualization technology.
Setting Up an Environment for Writing Linux Kernel Modules in Rust - Mentorship Session
Hands-on guide to set up a development environment for Linux kernel modules using Rust. Covers software installation, kernel building, and debugging tools on Ubuntu.
Controlling Script Execution in Linux - Security Mechanisms and Challenges
Explore kernel-managed script execution control in Linux, addressing challenges and implementation approaches for a consistent global policy.
Verifiable End-to-End Secure OCI Native Machines
Explore a secure toolchain for verifiable workloads using signed OCI images, ensuring tamper-proof boot processes and authenticated communication with hosts.
Enforcing Runtime Integrity with Maat
Explore Maat: an open-source framework for runtime integrity measurement in Linux systems, enabling continuous security checks and malware detection throughout system execution.
SecurityPerf - A New Open-Source Framework for Benchmarking Linux Security Solutions Performance
Explore SecurityPerf, an open-source framework for benchmarking Linux security solutions' performance impact. Learn about its containerized approach, supported services, and real-world applications.
Hypervisor-Enforced Kernel Integrity for Linux with KVM
Explore hypervisor-enforced kernel integrity for Linux using KVM. Learn about advanced protection mechanisms against kernel vulnerabilities and their implementation through virtualization.