ContainerCon @ Open Source Summit Europe 2022
2022-09-13..2022-09-16
-- online --
[ContainerCon @ Open Source Summit Europe 2022, ContainerCon @ Open Source Summit Europe 2024]
who it's for
platform engineers, kubernetes engineers, devops engineers, site reliability engineers, security engineers, developer experience engineers, cloud infrastructure engineers
topics
Linux namespaces and pivot_root; BuildKit Dockerfile debugging; container image buildpacks; JIB and BuildKit caching; Cilium eBPF datapath; ambient Istio mode; pod security admission policies; Kubernetes operators with Operator SDK; GitOps with Argo CD and Flux; container supply chain security; distroless base images; virtual Kubernetes clusters (vcluster)
| title | author | length |
|---|---|---|
| Containers – A Look Under the Hood | Gerlof Langeveld | 01h 32m |
Explains exactly which Linux kernel features make containers work and how to build one step‑by‑step using only standard tools: uses unshare / nsenter to create… | ||
| Cilium Workshop | Krisztian Fekete | 01h 13m |
Hands-on workshop deploys Cilium 1.12.1 onto a three‑node KinD cluster via Helm and the cilium CLI, installs the Bookinfo demo, enables Hubble UI and relay… | ||
| Evaluation of OSS Options to Build Container Images | Matthias Haeussler | 01h 15m |
Compares concrete OSS image builders for JVM apps: multi-stage Dockerfile with BuildKit caching, Google JIB (builds without a container daemon), Paketo Cloud… | ||
| GitOps - At a Glance | Lavakush Biyani | 06m |
GitOps condenses deployments into a Git-driven workflow where the canonical desired state in Git is the single source of truth, agents continuously reconcile… | ||
| Interactive Debugging of Dockerfile With Buildg | Kohei Tokunaga | 34m |
An interactive debugger for Dockerfiles that embeds BuildKit and hooks LLB ops to provide breakpoints, source-level inspection and the ability to spawn an… | ||
| Back to Basics, Getting Traffic Into your Kubernetes Cluster | Nicolas Fränkel | 34m |
Creates a local kind cluster, deploys pods and shows that a Service gives a stable ClusterIP while NodePort does load balancing across pods so you don’t need a… | ||
| Buildpacks+: A Gradual Move to Cloud Native Image Builds | David Freilich | 29m |
AppsFlyer replaces fragile Dockerfile generation with a wrapped images CLI that runs a pack build then an adjustable final Docker build so teams can migrate… | ||
| How Testability Drives Observability | Ken Hamric | 39m |
Shows how OpenTelemetry traces become executable assertions using trace-based testing with the open source Tracetest (Kubeshop) tool. Demonstrates a Pokemon… | ||
| Testing and Validating Container Images with Container Canary | Jacob Tomlinson | 12m |
Container Canary is an open source tool (NVIDIA GitHub) that records platform requirements as a YAML manifest and programmatically checks images against them… | ||
| SOS: Simplifying Operators Substantially - A Hands-on Workshop for Beginners in k8s Native Applications | Manna Kong, Soundharya Pabba | 43m |
Beginner‑level workshop that claims operators are controllers + custom resources + domain knowledge and demonstrates building an operator end‑to‑end using… | ||
| Kubernetes Security After Pod Security Policies Removal | Víctor Cuadrado Juan, Raúl Cabello Martín | 40m |
PSPs are deprecated and removed in Kubernetes 1.25; cluster owners must replace them with either namespace-labelled Pod Security (three profiles: privileged… | ||
| The Current and Future State of Istio | Lin Sun | 42m |
Istio introduces an ambient mode that removes mandatory sidecars by running a z-tunnel per node for L4 mutual TLS and optional Waypoint proxy per service… | ||
| Open Container Data Protection - State, Trend and the Kahu! | Sanil Kumar D., Sushantha Kumar | 43m |
Kahu is an open-source container data-protection project that implements metadata plus persistent-volume backups, a pluggable storage provider framework, and… | ||
| Enforcing a Secure Supply Chain on Kubernetes | Raúl Cabello Martín, Víctor Cuadrado Juan | 40m |
Concrete recipe to block supply‑chain tampering on Kubernetes using Sigstore: use cosign (keyed or cosign keyless) with Fulcio and Rekor (Rekor transparency… | ||
| How We Built Ubuntu Distroless Containers | Valentin Viennot | 30m |
Canonical builds distroless base images by extracting files from Ubuntu packages using a new tool called chisel, keeping provenance from the Ubuntu archive… | ||
| Empathetic Approach to Containerized Deployments... | Angel Fernando Borroy, Antoine Thomas | 34m |
Alfresco is packaged as four concrete delivery options: a one‑click Docker Extension that runs the full container stack from Docker Desktop in about four… | ||
| Building Developer Platforms, Birds of Feather | Ivan Pedras | 40m |
Argues that internal developer platforms must deliver concrete automations not vague dashboards: uses Backstage with Backstage templates and proxies to create… | ||
| Implementing Container Privilege Escalation Detection using eBPF for Cloud Native Security | Inhyeok Jang, Sungjin Kim | 26m |
Demonstrates an actual eBPF-based detector that hooks commit_creds via kprobe to compare current and new credentials, maintains a map that tracks lowest… | ||
| Monitoring Energy Consumption and Building Energy Efficient Systems the Cloud Native Way | Parul Singh | 20m |
Kepler measures per-pod power by probing kernel counters via eBPF and exports Prometheus metrics that Grafana renders; a model server (TensorFlow Keras +… | ||
| Vcluster - How we Put a Virtual Kubernetes Cluster Inside Another Kubernetes | Pratik Jagrut | 23m |
vcluster runs a full, certified Kubernetes control plane as pods inside a host cluster, using an embedded sqlite datastore by default and spinning up API… | ||
| Pods on Steroids - A Case Study of Migrating Flipkart.com to K8s on Bare Metal | Neeraj Bisht, Livingstone SE | 27m |
Flipkart migrates from a QEMU/KVM VM stack to Kubernetes on bare metal, replacing vhost‑net with SR‑IOV and Cilium, running clusters that span 350k cores, 30k… | ||
| Bootiful Kubernetes Operators | Tiffany Jernigan, Josh Long | 40m |
Creates a custom Foo CRD and a reconciler that uses the Kubernetes Java client and a shared index informer to generate a ConfigMap and Deployment whose HTML is… | ||
| Dm-qcow2: qcow2 as Device-mapper Block Device | Aleksandr Mikhalitsyn, Denis V. Lunev | 18m |
Describes a device-mapper driver that attaches QCOW2 images as block devices for containers, implementing request-based device-mapper path, L1/L2 table… | ||
| Software Supply Chain Aspects in Infrastructure as Code, and How to Secure it | Lior Kaplan | 40m |
Claims that tens to thousands of malicious npm/pypi clones exist (example: 1000 malicious packages), shows artifact repositories and Docker Hub results are… | ||
| Podman 101 and Beyond! | Pierre Blanc | 34m |
Podman claims to be rootless and daemonless and shows it: per-user containers are isolated so a non-root login runs containers that other users cannot see… | ||
| Containerizing & Orchestrating Hadoop Infrastructure at Scale | Mithun (Matt) Mathew | 33m |
Uber moves its Hadoop stack into Docker and an internal orchestrator, running ~100,000 steady containers and launching 20 million JVM processes per day. A… | ||
| Introduction to Nydus Image Service on In-kernel EROFS | Xiang Gao, Xin Yin | 35m |
Nydus implements an in-kernel EROFS image format (razz36) and uses FS-Cache lazy pulling so reads hit without switching to user space; kernel lands relevant… | ||
| A Different Kind of S3: First Line Security of the Supply Chain | John Amaral | 18m |
Three concrete defenses: SBOMs for inventory and retrospective exposure mapping, Sigstore signing (also noting Notary) to attach cryptographic provenance, and… | ||
| Accelerate the Image Distribution for DADI Using Intel DSA | Haibin Huang, Chen Bo | 22m |
overlaybd presents remote container images as a virtual block device and does checksum (CRC) on-stream, where CRC costs about 10% of work; moving CRC into the… | ||
| nothing matches | ||