Samuel Ortiz
where else to find them
no profile links on file
what they talk about
all 7 in the filters
where they keep going back
- KubeCon + CloudNativeCon Europe4 editions2018–2022
- Linux Plumbers Conference2 editions2022–2023
all 8 in the filters
on a stage with
all 32 in the filters
who talks about the same things
- Christophe de Dinechin18 talks
- Suraj Deshmukh8 talks
- Pradipta Banerjee5 talks
- Xu Wang14 talks
- Moritz Eckert15 talks
- Eric Ernst6 talks
| title | conference | date |
|---|---|---|
| OpenTitan Integrated: A RISC-V Open-Source Silicon Root-of-Trust for large SoCs | RISC-V Summit Europe 2025 | 2025-05-12 |
OpenTitan Integrated is an upstream, permissively licensed RISC-V silicon root-of-trust adapted for large SoCs with concrete additions: a mailbox interface… | ||
| Shrinking The Elephant - A Confidential Computing Attestation Sequel | Linux Plumbers Conference 2023 | 2023-11-13 |
Confidential Containers ships a working open source attestation framework: the Attestation Service plus the Key Broker Service (KBS), both HTTP/HTTPS based… | ||
| Secure IO | Linux Plumbers Conference 2023 | 2023-11-13 |
Combined proposals converge on concrete mechanics: full guest images encrypted with hardware-bound keys, device identity attestation via SPDM, and a TSM/PSP… | ||
| Opening the I/O gates with confidential containers | OC3 2023 | 2023-03-15 |
Describes a TEE‑I/O framework that authenticates and encrypts PCIe devices so they can be directly assigned into confidential VMs and Kubernetes pods. It uses… | ||
| Making PCI devices ready for confidential computing | OC3 2023 | 2023-03-15 |
Clear checklist of what device firmware must implement to attach devices to TEEs: hardware IDE link encryption via PCIe DOE, attestation and certificate… | ||
| Cloud Native Confidential: Isolating Kubernetes Pods with Confidential Computing | DevOps D-Day 2022 | 2022-12-01 |
Describes Confidential Containers, a project that isolates Kubernetes pods by running each pod in its own confidential micro-VM using the Kata Containers… | ||
| The elephants in the confidential room: Attestation and verification | Linux Plumbers Conference 2022 | 2022-09-12 |
Confidential Containers exposes that attestation is fragmented and vendor‑specific so a workload must implement multiple custom clients to get a decryption… | ||
| OpenInfra Summit 2022 Berlin: Keynote Day 1 | OpenInfra Summit Berlin 2022 | 2022-06-07 |
Day 1 opens with a foundation strategy claiming the cloud can grow 20x from today’s $3.6T IT market, backed by concrete community scale: 25 million cores… | ||
| Cloud native Confidential: Isolating Kubernetes Pods with Confidential Computing | OpenInfra Summit Berlin 2022 | 2022-06-07 |
Confidential Containers runs each Kubernetes pod inside per-pod confidential micro-VMs built on Kata Containers and hardware enclaves (AMD SEV, Intel TDX, IBM… | ||
| CNCF TAG-Runtime: Cloud Native Open... | KubeCon + CloudNativeCon Europe 2022 | 2022-05-16 |
CNCF TAG-Runtime maps projects, meetings and working groups that enable running cloud‑native workloads: a Armada multi-cluster batch scheduler and… | ||
| Confidential Containers Explained | KubeCon + CloudNativeCon Europe 2022 | 2022-05-16 |
Project is a CNCF sandbox that runs Kubernetes pods inside per-pod confidential VMs (Kata-like runtime) using TEEs such as AMD SEV, Intel TDX/SGX and IBM SE… | ||
| Hands-on Introduction to Virtualization | Devoxx France 2021 | 2021-09-29 |
Explains CPU virtualization at the instruction and microarchitecture level, showing why only about 40 privileged ops trap while most code runs natively, and… | ||
| The boot process: a modern history of computing | Devoxx France 2021 | 2021-09-29 |
Describes the real x86 boot sequence: the CPU fetches microcode (updatable via a ~4 MB blob) and starts at the fixed 0xFFFF0 reset vector in 16-bit real mode… | ||
| Trust No One: Bringing Confidential Computing to Containers | KubeCon + CloudNativeCon Europe 2021 | 2021-05-04 |
Confidential computing for containers uses VM-based TEEs (TDX/SEV/etc.) plus attestation to encrypt memory and CPU state and remove the host from the guest… | ||
| Tailor-Made Security: Building a Kubernetes Specific Hypervisor | KubeCon + CloudNativeCon Europe 2019 | 2019-05-20 |
Argues for a Kubernetes-targeted VMM built from rust-vmm crates to avoid QEMU’s ~1.5M LOC bulk while offering more than Firecracker’s ~20–30K LOC narrow scope… | ||
| Improving your Kubernetes Workload Security | KubeCon + CloudNativeCon Europe 2018 | 2018-05-02 |
Two complementary approaches add hardware virtualization to Kubernetes: Kata Containers isolates each pod inside a lightweight VM so containers run on a… | ||
| Kata Containers: Getting Involved with the Kata Community - Anne Bertucio & Samuel Ortiz | KubeCon + CloudNativeCon Europe 2018 | 2018-05-02 |
Kata Containers delivers lightweight VMs per container that combine hardware-backed isolation with OCI/CRI compatibility so Docker and Kubernetes treat each VM… | ||
| Kata Containers: Hypervisor-Based Container Runtime | KubeCon + CloudNativeCon North America 2017 | 2017-12-06 |
Merge of runV and Clear Containers into an OCI‑compatible runtime that runs one VM per pod to provide hardware isolation while staying fast, claiming ~100 ms… | ||
| nothing matches | ||