A Safer Curl | Bash for the Cloud
Talkat KubeCon + CloudNativeCon North America 2021 · on Thursday, 2021-10-14· at 11:55· Petree Hall D + Online·
summary
Quick one-liner replacement for curl | bash that isolates installers in a container, packages Helm/Terraform/CLIs into a versioned OCI bundle, and fetches secrets just-in-time via configurable credential sets. The workflow uses porter explain to list required creds and parameters, then a single porter install runs the bundle image from OCI registries; bundles support mix-ins, output metadata, image digests, and planned signing with Notary so installers can be verified before execution.
AI-written summary · about
chapters (4)
related talks
38mcurl | bash | hacked: The Unseen Dangers in Your Dev Lifecycle
37mCarvel: Clean Tools for Cloudy Problems
30mBash, the Developer's Swiss Army Knife
43mContainer Security: So Many Options, Use Them All!
31mFast & Secure: Package, Sign, Verify, and Deploy
05mProject Lightning Talk: Stir to Combine: Creating Porter Mixins
50mMastering Modern Software Distribution: On-Prem, Air-Gapped, and BYOC Challenges
50mBoot my (secure)-(portable) clouds!