Stephane Graber
where else to find them
website:https://stgraber.org
github:stgraber
bluesky:stgraber.org
mastodon:@stgraber@hachyderm.io
x:stgraber
linkedin:stgraber
what they talk about
all 6 in the filters
where they keep going back
- Linux Security Summit North America3 editions2019–2025
- Linux Plumbers Conference2 editions2022–2023
- Linux Security Summit Europe2 editions2019–2022
all 8 in the filters
on a stage with
who talks about the same things
- Christian Brauner30 talks
- James Bottomley25 talks
- Akihiro Suda21 talks
- Duffie Cooley18 talks
- Steven Ellis6 talks
- Michael Kerrisk12 talks
| title | conference | date |
|---|---|---|
| Putting Together a Secure Virtualization and Containerization Platform | Linux Security Summit North America 2025 | 2025-06-26 |
Incus OS is a Debian‑based, image‑only platform built with systemd mkosi that boots an immutable dm-verity immutable A/B images, signs UKIs and bootloaders and… | ||
| User namespaces with host-isolated UIDs/GIDs | Linux Plumbers Conference 2023 | 2023-11-13 |
Proposal converts kuid_t/kgid_t to 64-bit so high UIDs/GIDs can be host-isolated while preserving 32-bit userland view, and implements VFS ID-mapped mounts to… | ||
| Fuse mounts recovery and Checkpoint/Restore | Linux Plumbers Conference 2023 | 2023-11-13 |
Proposes adding a FUSE API to enable mount healing and CRIU-based checkpoint/restore by cleaning kernel-side FUSE state, dropping pending requests, and… | ||
| Closing session | Linux Plumbers Conference 2023 | 2023-11-13 |
Session ends exactly at 6 pm with an announcement that the microcon closes now and attendees are thanked for coming this year and invited back next year, a… | ||
| State of Linux Kernel Container Features | LinuxCon @ OSS NA 2023 | 2023-05-10 |
Current kernel work makes unprivileged containers practical: unprivileged user namespaces can be blocked via an LSM hook and distributions no longer must patch… | ||
| What's New in the User Namespace | Linux Security Summit Europe 2022 | 2022-09-15 |
User namespaces exist for ~9 years but remain uncommon; the kernel now offers VFS idmapped mounts (landed in recent kernels for ext4, xfs, vfat, btrfs, f2fs… | ||
| Opening session | Linux Plumbers Conference 2022 | 2022-09-12 |
Mostly logistics and welcome notes covering conference rules and session flow not technical content The session reviews the anti harassment policy, microphone… | ||
| Improving Container Security with System Call Interception | Linux Security Summit North America 2022 | 2022-06-23 |
Describes using seccomp notify (Linux 5.9+) to pause a syscall, send its args to a privileged host monitor, and return the host’s response; LXD implements… | ||
| Your Own Little HA Cloud at the Edge (or at Home) | CloudOpen @ Open Source Summit North America 2022 | 2022-06-21 |
Builds a small HA cloud that runs containers and VMs across mixed hardware from Raspberry Pi to dual Xeon boxes, using LXD for instances, Ceph for distributed… | ||
| Fully redundant LXD cluster | FOSDEM 2021 | 2021-02-06 |
Bullet proof storage, networking and compute on the cheap
Want the smallest setup with fully redundant storage, networking and compute that's capable of… | ||
| Tutorial: Using Linux Primitives to Build Your Own Containers | Linux Security Summit Europe 2019 | 2019-10-31 |
Step-by-step build of a container from kernel primitives: create user namespaces and remap UIDs so root inside ≠ root outside, unshare mount and pivot_root to… | ||
| Making Containers Safer | Linux Security Summit North America 2019 | 2019-08-19 |
Describes concrete defenses and recent kernel work: running 18 distros across six architectures and building ~300 images daily, users count in the hundreds of… | ||
| GPU, USB, NICs and Other Physical Devices in Your Containers | Open Source Summit North America 2017 | 2017-09-11 |
System containers using LXD expose real hardware without VT‑d: physical NICs, block devices, ZFS or Ceph volumes, and UNIX char devices show up inside… | ||
| On the Way to Safe Containers | Linux Security Summit 2016 | 2016-08-25 |
LXD builds system containers that combine user namespace isolation with apparmor, seccomp, dropped capabilities, filesystem quotas and cgroups to aim for… | ||
| nothing matches | ||