eBPF-based Extensible Paravirtualization for High Performance Applications
Explore eBPF-based extensible paravirtualization for high-performance applications, addressing semantic gaps between guest OS and host hypervisor without kernel modifications or static resource allocation.
Tracing VMs - Seeing How Host and Guest Interact
Explore VM tracing techniques to analyze host-guest interactions, synchronize timelines, and solve complex issues in Linux kernel and hypervisor environments.
Reshaping Network Traffic with eBPF and XDP - An Interactive Tutorial
Interactive tutorial on using eBPF and XDP to reshape network traffic, apply routing policies, and enhance security in Kubernetes clusters. Hands-on experience with cutting-edge kernel-level programming techniques.
Improve CPU Utilization by Designing a New Schedule Algorithm
Learn to design a new CPU scheduling algorithm for improved utilization in large-scale systems, balancing offline and online workloads while maintaining service quality.
Network Bandwidth-Aware Kubernetes Cluster - Enhancing Scheduler for Network Resources
Extending Kubernetes scheduler to consider network bandwidth, ensuring optimal placement and performance for bandwidth-sensitive applications in virtualized infrastructures.
Tracing Resource-constrained Embedded Systems Using eBPF
Explore eBPF tracing for embedded systems, challenges faced, and recent projects addressing portability, size constraints, and kernel issues for resource-limited devices.
Cutting Edge Toolchain - Latest Features in GCC and GLIBC
Explore latest features in GCC 8/9 and Glibc 2.29, including performance optimizations, security enhancements, and CPU architecture advancements for Linux developers.
Base Porting of Linux Kernel on RISC-V Architecture
Explore RISC-V architecture base porting for Linux kernel, covering minimal support, initial addressing, hardware interaction macros, and controller initialization for successful board bringup.
IoT TLS - Challenges and Solutions for Embedded Devices
Exploring TLS challenges in IoT: memory constraints, networking stacks, and security implications. Insights on improving TLS support for embedded systems and the Zephyr project.
Enabling Zephyr on Your Hardware Platform
Learn to enable Zephyr RTOS on new hardware platforms with a step-by-step guide. Covers adding support for architectures, HALs, SoCs, boards, and drivers, with debugging tips and contribution guidelines.
U-Boot as a Bootloader for IoT Platforms - Optimizing Memory Usage
Optimize U-Boot for IoT devices with limited memory. Learn techniques to reduce footprint, customize code, and preserve RAM for payload in resource-constrained environments.
Overview of the Linux Kernel Security Subsystem
Explore Linux kernel security: history, components, and community involvement. Learn about access control, capabilities, auditing, and security modules from a Microsoft expert.
Does Making the Kernel Harder Make Making the Kernel Harder?
Explore Linux kernel hardening techniques, their security benefits, and development impacts. Learn about refcount_t, variable length arrays removal, and LSM infrastructure improvements.
Kernel Self-Protection Project: Overview and Recent Developments
Explore recent developments in Linux kernel security, including defenses against vulnerabilities, bug lifetime analysis, and ongoing challenges in the Kernel Self-Protection Project.
Linux Kernel Security Contributions by ANSSI
Explore ANSSI's contributions to Linux kernel security, including Landlock LSM and CLIP Linux. Learn about the benefits of open-source collaboration for government agencies and enterprises.
Overview and Recent Developments of Keyrings Subsystem
Explore the Linux keyrings subsystem, its access methods, recent updates, and future plans in this informative talk by Red Hat expert David Howells.
Overview and Recent Developments: Seccomp and Small Linux Security Modules
Explore Linux kernel security: seccomp syscall filtering, Yama ptrace-restriction LSM, and LoadPin kernel-file-reading restriction LSM. Learn history, usage, and recent developments from Google engineer Kees Cook.
Overview and Recent Developments in Smack Linux Security Module
Explore Smack Linux Security Module's current state, recent developments, and practical applications in this comprehensive overview by Intel expert Casey Schaufler.
Real-Time Linux: Implications and Best Practices for Kernel Developers
Explore the integration of Real Time into Linux, its implications for kernel developers, and best practices for writing maintainable code, even for non-RT-focused programmers.
Cloud Native Load Balancing From Scratch
Explore cloud-native load balancing techniques, from simple VIP iptable to advanced tools, comparing their tradeoffs and applications in distributed systems like Kubernetes and Docker.
Running Untrusted Code with gVisor - Container Security and Sandboxing
Explore gVisor, an open-source sandbox runtime for enhanced container security. Learn its architecture, use cases, and advantages over other approaches, with a demo of a minimal serverless platform using gVisor and Kubernetes.