Keynote: VM Security and Container Workflows, A Case Study
summary
Quay replaces EC2 build VMs with KVM in containers scheduled as Kubernetes jobs on bare metal (Packet), running one disposable VM per build that only gets credentials to push status logs and the final image. Cold start drops from minutes to about 15 second startup, an 80% improvement that cuts average user wait roughly in half, lowers hourly waste from long EC2 runtimes, and supports on‑premise deployments behind customer firewalls.
AI-written summary · about
chapters (8)
- 0:00Introduction to Quay
- 1:16Quay architecture overview
- 3:46Challenges in build systems
- 7:08Combining VMs and containers
- 9:31The new build architecture
- 12:23Engineering considerations
- 14:29Broader use cases
- 16:20Conclusions and takeaways
related talks
15mKeynote: Virtualization Reimagined
06mKeynote: Introducing Kata Containers
16mSecurity and Kubernetes: Should We Go Back to VMs?
27mVMs in a container-centric world
38mImproving your Kubernetes Workload Security
06mKeynote: Skip the Anxiety Attack - Build Secure Apps with Kubernetes
25mFrom Cloud To AI: How Kata Containers 4.0 Reinvents the Sandbox for the Agent Era
27mServerless MicroVMs for Containerized Applications