Justin Cormack
where else to find them
what they talk about
all 11 in the filters
where they keep going back
- KubeCon + CloudNativeCon North America4 editions2019–2022
- KubeCon + CloudNativeCon Europe4 editions2018–2022
all 15 in the filters
on a stage with
all 11 in the filters
who talks about the same things
- Steve Lasker11 talks
- Phil Estes32 talks
- James Bottomley25 talks
- Vincent Batts9 talks
- Adrian Mouat20 talks
- Yi Zha6 talks
| title | conference | date |
|---|---|---|
| Panel: It’s Not If, It’s When - Practical Preparation for the Next Software Supply Chain Attack | Open Source SecurityCon Europe 2026 | 2026-03-23 |
Practical, tactical steps: generate high-quality SBOMs with tools like SIFT SBOMs, favour providers that can build packages from source so patches ship… | ||
| Keynote: New Advances for Cross-platform AI Applications in Docker | AI_dev: Open Source GenAI & ML Summit Europe 2024 | 2024-06-19 |
Docker adds Docker support for WebGPU so container apps call host GPUs and accelerators through a single portable API, removing the need for separate… | ||
| Optimizing the Microsoft developer experience with Docker | Microsoft Build 2024 | 2024-05-21 |
Shows concrete results: Docker ships BuildKit for Windows in beta and Docker Desktop on Windows ARM, demonstrates multi‑platform builds (Windows, Linux x86_64… | ||
| Innovating the SDLC with insights from Docker CTO Justin Cormack | Microsoft Build 2024 | 2024-05-21 |
Docker lays out concrete changes: Docker Build Cloud runs builds faster using a shared cache and hybrid Azure/desktop bursting, BuildKit for Windows is in… | ||
| Develop Wasm Applications with Docker | WasmCon 2023 | 2023-09-06 |
Shows an end-to-end path: compile Rust to wasm32-wasi, copy the .wasm into a Docker image built with buildx and platform=wasm, then run it with the wasmtime… | ||
| Keynote: Wasm: A Revolution for Browsers, Containers, and the Cloud | Cloud Native Wasm Day North America 2022 | 2022-10-24 |
Describes Docker’s 2019 experiments with WebAssembly/WASI after Solomon Hykes’ famous tweet and claims that Wasm and WASI can run side-by-side with x86… | ||
| Notary: State Of Development | KubeCon + CloudNativeCon North America 2022 | 2022-10-24 |
Notary v2 moves signatures and attestations into registries using OCI 1.1 and ORAS; images get attached SBoMs and vulnerability scans and are signed with a… | ||
| Notary v2: Deep Dive and Open Issues | KubeCon + CloudNativeCon Europe 2022 | 2022-05-16 |
Notary v2 attaches signatures and metadata to OCI images in registries so signatures move with the artifact; it uses the notation CLI for notation sign/verify… | ||
| SBOM: A New Way to Generate a Software Bill of Materials from Your Container Image | DockerCon 2022 | 2022-05-09 |
Run the new docker sbom command to produce an SBOM from an image using Syft, output as table or standard formats like CycloneDX/SPDX, or as Syft JSON for jq… | ||
| Joins | DockerCon 2022 | 2022-05-09 |
Announces that Nestybox’s Sysbox runtime plugs under Docker and Kubernetes as an alternative to runc and makes containers run full system workloads by… | ||
| Notary: State of the Container Supply Chain | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
Notary v2 decouples identity from location so cryptographic signatures travel with images rather than staying tied to a registry, using the notation client and… | ||
| Building Signing, Distributing SPDX SBOMs as Artifact Reference Type | Supply Chain Town Hall 2021 | 2021-08-18 |
Demonstrates storing detached SPDX SBOMs and signatures as registry artifact reference types, using ORAS discover tree to view a graph of image → SBOM →… | ||
| The CNCF Sandbox: An Exploration and Guided Tour | KubeCon + CloudNativeCon Europe 2021 | 2021-05-04 |
The CNCF Sandbox now hosts nearly 50 projects that developers are actively experimenting with and some are already in production. Examples include Schema Hero… | ||
| Notary v2: Supply Chain Security for Containers | KubeCon + CloudNativeCon Europe 2021 | 2021-05-04 |
Notary v2 stores signatures and metadata as registry-native OCI artifacts and links them to images with a reference-based reverse lookup so signatures, SBOMs… | ||
| Seccomp: What Can It Do For You? | KubeCon + CloudNativeCon North America 2020 Virtual | 2020-11-17 |
Seccomp is a Linux syscall filter that Docker enables by default and that blocks high-risk subsystems, and the Docker default policy prevents real CVEs… | ||
| Notary v2: Redesigning the Secure Supply Chain for Containers | KubeCon + CloudNativeCon North America 2020 Virtual | 2020-11-17 |
Notary v2 claims to make container signing registry-native by storing OCI artifact signatures as separate JWT objects that reference image digests, not by… | ||
| RISC V For Heterogeneous Computing | RISC-V Summit 2019 | 2019-12-09 |
Kubeedge is a Kubernetes distribution for gateway‑scale edge devices with a split control plane that runs Docker containers locally, supports MQTT for smaller… | ||
| Introduction to Notary | KubeCon + CloudNativeCon North America 2019 | 2019-11-18 |
Notary implements TUF for container images and is already used by Docker Hub, Azure Container Registry and Harbor; it separates a metadata server and an… | ||
| Redesigning Notary in a Multi-registry World | KubeCon + CloudNativeCon North America 2019 | 2019-11-18 |
Notary 2.0 redesign proposes storing signature objects in the registry next to blobs so signatures travel with images, using detached signatures that sign… | ||
| Intro: TUF / Notary | KubeCon + CloudNativeCon Europe 2019 | 2019-05-20 |
TUF (spec) and Notary (Go implementation) provide signed metadata, automatic recovery from stolen keys, and practical revocation so a compromised server or… | ||
| Inside the CNCF Project Security Reviews | KubeCon + CloudNativeCon Europe 2019 | 2019-05-20 |
CNCF funds independent security audits that run about €50–150k per audit and often take three to four weeks of code review plus black‑box testing; audits so… | ||
| Entitlements: Understandable Container Security Controls | KubeCon + CloudNativeCon Europe 2018 | 2018-05-02 |
Proposal defines a small set of human-readable container entitlements implemented in Docker as libentitlement, with an example running dockerd using three… | ||
| The 10 Container Security Tricks That (...) | Codemotion Milan 2017 | 2017-11-10 |
Containers improve security by making deployments reproducible and short lived and by using concrete controls not vague policies. Practical prescriptions… | ||
| Justin Cormack - Codemotion Milan 2017 - Interview | Codemotion Milan 2017 | 2017-11-10 |
Security is an ongoing process not a one‑time checkbox and containers help by making deployed artifacts reproducible images so the exact shipped version can be… | ||
| Immutability and State Making an Immutable OS | Code Mesh 2017 | 2017-11-08 |
LinuxKit claims an immutable, container-built OS that an entire image can be produced and run in about a minute, assembling a tiny rootfs from images, a YAML… | ||
| Bringing containers to production with LinusKit | Paris Container Day 2017 | 2017-06-13 |
LinuxKit claims repeatable, immutable server images built from containers that build in ~30s and boot as VMs on Mac, AWS or GCP. The YAML file treats normal… | ||
| Containerd: The Universal Container Runtime | CloudNativeCon + KubeCon Europe 2017 | 2017-03-29 |
Containerd is a CNCF-hosted, narrow-focused container runtime that aims to be the universal host runtime for Kubernetes, Docker, AWS, Azure and others, with a… | ||
| A high level language for low level code | FOSDEM 2013 | 2013-02-02 |
Using Lua to script the Linux kernel ABI
Using Lua to script the Linux kernel ABI
Controlling Linux from a scripting language offers many advantages, in… | ||
| nothing matches | ||