Name: Putting Together a Secure Virtualization and Containerization Platform - Stéphane Graber, Zabbly
Start: 2025-06-26T14:30:00-0600
End: 2025-06-26T15:15:00-0600

June 26 - 27 | Denver, Colorado
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Linux Security Summit North America 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Mountain Daylight Time (MDT | UTC-6). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

Thursday June 26, 2025 2:30pm - 3:15pm MDT

Room BBB 3G+3H

Incus is a project providing a private cloud platform that can be used by anyone from running on a simple laptop, Raspberry Pi to being run on thousands of servers in the datacenter.

The project began like most, making source code releases which found their way packaged in distros.

Over time, we developed tooling to automate deployment of those packages, allowing for more consistent deployments.
Unfortunately, this tooling still assumed quite a bit of familiarity with Linux distributions and configuration.

What we really wanted was a way to get reliable, identical deployments that could be used both by very large scale users running thousands of servers as well as by regular users at home who just want a working reliable virtualization platform.

This led to the development of Incus OS. A Debian based OS image made using systemd's mkosi, using a Secure Boot signed bootloader and Unified Kernel Image, TPM measurements throughout the boot process, an immutable OS image (using dm-verity) and full disk encryption for the data at rest based on TPM register state.

In this talk, we'll be diving into the design decisions behind Incus OS and look at its implementation.

Speakers

Stéphane Graber

Incus maintainer, Zabbly

Stéphane is the project leader of the Linux Containers project, a long term open source contributor and conference organizer.He's the owner of Zabbly who provides support and development services on top of Incus.He's also co-founder and CTO of FuturFusion, another Incus related business... Read More →

Thursday June 26, 2025 2:30pm - 3:15pm MDT
Room BBB 3G+3H

Refereed Presentation

Linux Security Summit North America 2025

Stéphane Graber

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!