ContainerCon @ OSS EU 2023
2023-09-19..2023-09-21
Bilbao, Spain
[ContainerCon @ Open Source Summit Europe 2022, ContainerCon @ Open Source Summit North America 2022, ContainerCon @ Open Source Summit Europe 2024, ContainerCon @ Open Source Summit North America 2023, ContainerCon @ Open Source Summit North America 2024, ContainerCon @ Open Source Summit Japan 2023]
| title | author | length |
|---|---|---|
| Confidential Containers: Why, How, and Where Are We? | Magnus Kulke | 50m |
Confidential Containers (CoCo) is a CNCF project that lets existing containers run inside confidential VMs using Kata Containers and a cloud API adapter… | ||
| Improving Container Image Registry Availability with Kube Image Keeper | Jérôme Petazzoni | 48m |
Kube Image Keeper (kuik) implements a local registry cache plus a node-side proxy: a mutating webhook rewrites image refs to localhost:7439, a daemonset proxy… | ||
| Mix Kubernetes with Linux Kernel Tracing to Boost the Observability of Your Cluster | Tzvetomir Stoyanov | 30m |
An open source project hooks the existing Linux kernel tracing framework and kernel tracepoints to follow containers as ordinary processes via namespaces… | ||
| NanoVisor: Modernizing Container Runtime with an Architecture Refactor.. | Jianfeng Tan, Tianyu Zhou | 35m |
NanoVisor refactors gVisor into a userspace network stack plus a lightweight hypervisor and filesystem changes to cut syscall and emulation overhead: CR3… | ||
| Smarter Than Your Average SBOM! | Matt Jarvis, Andrew Martin | 45m |
SBOMs are useful point-in-time snapshots but only if created at build time, cryptographically signed, and validated on consumption; examples use CycloneDX as… | ||
| How Jenga & Tetris Can Help Run More Containers with Lesser Costs... | Yash Bhatnager | 11m |
Proposes a Kubernetes-focused rescheduler that simulates placement in memory and emits move-and-place recommendations using node/pod affinity APIs, with… | ||
| Lessons Learned Migrating an Existing Product to a Multi Tenant Cloud Native Environment | Natalia Angulo, Carlos Sanchez | 39m |
Migrated Adobe Experience Manager into a multi-tenant Kubernetes platform on Azure with a custom lifecycle operator that reconciles Flux, Argo Rollouts and… | ||
| How to Survive to High Demanding Services | Endika Gandarias | 34m |
Handles ~400,000 requests over 12 hours from ~30,000 IPs using GPU-backed AI models on Kubernetes, logging via a fluentd sidecar with custom Node script that… | ||
| URUNC: A Unikernel Container Runtime | Georgios Ntoutsos, Anastassios Nanos | 40m |
urunc is a Go CRI-compatible container runtime that spawns unikernel VMs from OCI images built with bima, using existing registries and containerd’s… | ||
| Identifying and Mitigating Cloud and Container Threats | Pablo Musa | 41m |
Walks through concrete defenses: use minimal base images to drop surface area, image signing to avoid typo‑squat malicious images, and prioritize… | ||
| Digital Forensics with Container Checkpointing | Daniel Simionato, Javier de la Rúa Martínez | 31m |
Container checkpointing captures a live container as a tar archive that includes process memory, file diffs and open sockets, preserves PIDs and process tree… | ||
| Puzzlefs - the Next-Generation Container Filesystem | Armand-Ariel Miculas | 39m |
Puzzlefs chunks container images with content-defined chunking using FastCDC, shares chunks across layers to avoid the tar-layer rewrite problem, and stores… | ||
| DIY Private Container Registry | Márk Sági-Kazár | 30m |
Company moves from cloud-hosted registries to a self-run solution that uses Harbor + distribution for storage, adds a custom token-based authorization service… | ||
| Automated & Observable Deployments with Flux + Keptn | Priyanka Ravi | 38m |
Flux continuously pulls a Git repo (typical reconcile interval ~10 minutes) and performs automatic reconciliation; image controllers can auto-bump manifests… | ||
| Linux Memory Management and Containers | Gerlof Langeveld | 01h 36m |
Covers concrete Linux behavior: cgroups v2 maps Docker/Podman/Kubernetes flags to kernel files so --memory sets memory.max, --memory-reservation writes… | ||
| nothing matches | ||