I2C Multi-master and Controller Slave Mode Implementation in QEMU
Implementing I2C multi-master and slave mode in QEMU for BMC boards, enabling MCTP protocol support and NVMe-MI device emulation with Linux kernel AF_MCTP socket integration.
Setting Up an Environment for Writing Linux Kernel Modules in Rust - Mentorship Session
Hands-on guide to set up a development environment for Linux kernel modules using Rust. Covers software installation, kernel building, and debugging tools on Ubuntu.
Changing Applications for Dynamic Secrets - Tutorial
Learn to architect applications for dynamic secret management, minimizing downtime during credential changes. Explore patterns for retrieving and reloading secrets across various environments, including VMs and Kubernetes.
Verifiable End-to-End Secure OCI Native Machines
Explore a secure toolchain for verifiable workloads using signed OCI images, ensuring tamper-proof boot processes and authenticated communication with hosts.
Hypervisor-Enforced Kernel Integrity for Linux with KVM
Explore hypervisor-enforced kernel integrity for Linux using KVM. Learn about advanced protection mechanisms against kernel vulnerabilities and their implementation through virtualization.
Contributor Growth Strategies for Open Source Projects
Strategies for growing open source project communities, including governance, onboarding, mentoring, and metrics. Learn to build sustainable projects and reduce maintainer burnout.
Hardware Friendly Vhost vDPA: Towards an Efficient and Migratable Device Model
Simplified vhost-vdpa device model for efficient live migration of hardware-backed vDPA devices, addressing challenges and proposing new interfaces for state management and migration.
Rust-Based VirtIO Backends for Hypervisor-Agnostic Solutions
Explore Project Stratos: leveraging VirtIO for hypervisor-agnostic backends, implementing vhost-user daemons in Rust, and integrating with Xen for versatile virtualization solutions.
Hardening Linux for Confidential Cloud Computing - Deep Dive and Results
Explore techniques for hardening Linux guest systems in confidential cloud computing environments, focusing on security mechanisms, kernel subsystem treatments, and results from fuzzing and code audits.
Improving Container Security with System Call Interception
Explore advanced container security using system call interception, focusing on unprivileged containers, selective action monitoring, and practical applications in LXD.
Simple Steps for a Calm Project Sunset - Planning and Executing Open Source Deprecation
Practical advice for responsibly deprecating open source projects, including proactive planning, clear communication, and learning from past experiences to foster innovation and experimentation.
What's New in the User Namespace - Recent Developments and Future Outlook
Explore recent developments in user namespaces, including VFS idmap shifting, security enhancements, and IMA namespacing, to improve container safety and adoption.
Zero-Overhead Virtualization - Challenges and Pitfalls Across Architectures
Explore zero-overhead virtualization challenges in embedded systems, comparing ARM, x86, and RISC-V architectures. Learn about Jailhouse hypervisor and architectural limitations for real-time performance.
Securing Containers on the High Seas
Strategies for secure container implementation, focusing on infrastructure, architecture, tooling, policies, and processes. Explores container lifecycle security from development to production.
QEMU: Emulating Your Way to Success
Explore QEMU's versatility in emulating systems, testing kernels, and developing software for pre-production hardware. Learn configuration examples and practical applications in various projects.
Things I Wish I Had Learned Earlier About Containers - Lessons from a Seasoned Linux Admin
Gain insights on container technologies, runtimes, networking, storage, and management from a seasoned Linux admin's perspective. Learn how to integrate containers into your environment effectively.
Ansible 101 - Introduction to Infrastructure Automation
Comprehensive introduction to Ansible for infrastructure automation, covering principles, Jinja2 templating, and practical applications across various platforms and tools.
Getting Started with Kernel-based Virtual Machine (KVM)
Learn to create, manage, and optimize virtual machines using KVM technology, focusing on CLI operations for near-native performance on Linux systems.
SDO and Open Source Partnership in Network Function Virtualization
Explore the partnership between SDO and open source in network function virtualization, focusing on transport configuration and management data architecture.
Shared Virtual Addressing for High Performance Arm Infrastructure Platforms
Explore shared virtual addressing for Arm platforms, covering advantages, hardware requirements, virtualization, and current design proposals.
Introducing L3AF - Platform to Launch and Manage eBPF Programs
Learn about L3AF, a platform for launching and managing eBPF programs. Explore eBPF use cases, kernel functions, and see a demo on slowing down traffic using this innovative technology.