On the Way to Safe Containers - Security and Resource Management in LXC and LXD
Explore container security with LXC and LXD, focusing on user namespaces, AppArmor, seccomp, and resource limitations. Learn about safe system containers and potential vulnerabilities in VM-like environments.
Nested Containers Support in Apache Mesos 1.1
Explore Mesos 1.1's nested containers feature, enabling pod-like functionality and flexible container management for improved task execution and resource allocation in distributed systems.
Busy Developer's Guide to Building a Bytecode Virtual Machine
Explore the inner workings of virtual machines by building a simplified interpreter, gaining insights into JVM, CLR, and other popular VMs while potentially sparking a new passion.
Building a CPU Using GPT for Every Instruction
Explore building a CPU using GPT for every instruction, compiling C code to LLVM-IR. Learn about compilers, virtual machines, and innovative applications of language models in computing.
VFIO, IOMMU, and PCI Technologies - Linux Plumbers Conference 2023
Explore advanced topics in VFIO, IOMMU, and PCI technologies at this Linux Plumbers Conference session, featuring expert discussions and insights for system developers and engineers.
From Kubernetes Objects to Network Packet Pipelines - Deep Dive into OpenShift Networking
Explore OpenShift networking implementation, focusing on OVN-K8s. Dive into packet processing in OVS kernel datapath and map steps to upper layers, from OVS flows to Kubernetes objects.
Cloud-Native Security Simplified: Automating OpenShift VM Compliance with Knative, Tekton and Ansible
Automate OpenShift VM compliance using Knative and Tekton. Streamline post-provisioning tasks, enhance efficiency, and minimize errors in cloud-native environments.
Booting Containers: Revolutionizing Linux System Deployment - DevConf.CZ 2024
Explore innovative container technology that boots entire Linux systems, enabling version-controlled OS definitions and streamlined deployment using OCI standards and practices.
Bisection: It's Not Just for Git - Multi-Axis Regression Analysis
Explore a multi-axis bisection tool for efficient performance regression detection in QEMU, inspired by Git bisect and designed for Jenkins pipelines.
Overview of Linux Tunnels
Explore Linux tunnel interfaces, their differences, and optimal use cases for overlay networking technologies like NFV and SDN. Gain a high-level understanding of common tunnel types.
OVN-Kubernetes: The New Default CNI of OpenShift
Explore OVN-Kubernetes architecture, features, and benefits as OpenShift's default CNI. Learn key concepts, resource mapping, and troubleshooting techniques for effective cluster networking.
Mutating the Immutable: Device Hotplug in KubeVirt
Explore dynamic VM configuration in KubeVirt, focusing on device hotplugging challenges and solutions, particularly for networking devices in Kubernetes environments.
A Journey Through Supporting VMs with Dedicated CPUs on Kubernetes - Lecture
Explore dedicated CPU support for VMs on Kubernetes, delving into resource allocation models, cgroups, and the challenges of implementing true CPU pinning in Kubevirt.
My Cluster is Running - But Does it Actually Work?
Explore containerized checkups to verify Kubernetes cluster functionality, focusing on KubeVirt VM connectivity and network latency measurement for advanced use-cases.
MAC Collision Alert! - Addressing MAC Duplication in Kubernetes Networks
Explore MAC duplication challenges in Kubernetes and cloud environments, comparing traditional solutions with reactive approaches for efficient network management.
KubeVirt VMs for Migratable Inceptionist Clusters
Explore KubeVirt VMs for migratable inceptionist clusters using Cluster API and OVN-based CNI plugin, addressing gaps in Kubernetes cluster management.
Streamlining KubeVirt Virtual Machine Creation
Explore KubeVirt's new instance types and preferences for streamlined VM creation in Kubernetes, improving user experience and reducing maintenance effort.
Seitan: A Plant-Based Recipe Against Syscall Anxiety
Explore a unified approach to privilege separation in containers and VMs using Seitan. Learn to write JSON recipes for filtered system calls and enhance security for untrusted workloads.
VMSL: A Separation Logic for Mechanised Robust Safety of Virtual Machines Communicating Above FF-A
Explore VMSL, a novel separation logic for reasoning about virtual machine communication and security in hypervisor systems, with focus on Arm's FF-A hypercall ABIs.
How to Deploy OpenShift on a Nutanix Stack
Deploy OpenShift on Nutanix stack: Learn benefits, solutions, and interactions. Experts showcase deployment process, prerequisites, scaling, storage configuration, and database deployment.
Enabling New Security Frontiers - Deep-Dive Into Implementing Confidential Computing on RISC-V
Explore RISC-V Confidential Computing implementation, covering ISA extensions, SoC requirements, and open-source activities. Gain insights into cross-architectural aspects and future roadmap.