Conversation

Notices

Embed this notice
bluca@fosstodon.org's status on Sunday, 17-Sep-2023 08:21:12 JST bluca

I also spilled the beans on what the marketers call 'Azure Boost', and I instead call 'the thingy that pays my mortgage and bills', which I find is a much better name anyway:
https://www.youtube.com/watch?v=iB-wRdC8zNs
#ASG

In conversation about a year ago from fosstodon.org permalink
- James Morris repeated this.
- Embed this notice
  bluca@fosstodon.org's status on Sunday, 17-Sep-2023 08:21:12 JST bluca
  in reply to
  
  Finally, given I wasn't busy enough helping run the conference and herding cats in the main hall, and still had _some_ voice left, I also did a lightning talk on enabling PID FD support in various places:
  https://www.youtube.com/watch?v=3IK5itYOOH0&list=PLWYdJViL9EioDNHn7xIqQJLyCayNPKeYf&index=27&pp=iAQB
  #ASG
  
  In conversation about a year ago permalink
  
  James Morris likes this.
- Embed this notice
  Mickaël Salaün (l0kod@mastodon.social)'s status on Wednesday, 04-Oct-2023 04:57:09 JST Mickaël Salaün
  in reply to
  - All Systems Go!
  "Microsoft Azure Boost: Image-based Linux powering the Azure fleet", a deep dive into a tailored Linux distro focused on security that provides offloading and acceleration. A great talk by @bluca at @allsystemsgo!
  A lot of stuff is introduced: Linux hardening, remote attestation, SELinux, dm-verity, IPE, LUKS, fs-verity, overlayfs, systemd portable services, soft reboot, ARM, FPGA, DPDK...
  Slides: https://cfp.all-systems-go.io/all-systems-go-2023/talk/7URRNC/
  Recording: https://youtu.be/iB-wRdC8zNs
  In conversation about a year ago permalink
  Attachments
  1. Domain not in remote thumbnail source whitelist: cfp.all-systems-go.io
    
    Microsoft Azure Boost: Image-based Linux powering the Azure fleet. Wait, what? Really?! Yes! All Systems Go! 2023
    
    Believe it or not, today Linux is right at the core of Microsoft Azure's infrastructure, on the very nodes that run all those fancy virtual machines. Getting there was not easy, and a lot of work was needed to meet the very stringent security and performance goals that were set. We built a custom distribution, added several security features such as signed dm-verity and kernel-enforced code integrity, came up with a way to keep state alive across kexec with PMEM, and implemented the stackable Portable Services image model that ultimately became sysexts and confexts. And much more! This talk will walk through this effort, starting with a peek under the cover at the hardware that powers it and what it enables, passing through the custom OS and ending up at all the features we added to systemd and elsewhere that you all can enjoy as well.
  2. Microsoft Azure Boost: Image-based Linux powering the Azure fleet. Wait, what? Really?! Yes!
    
    from All Systems Go!
    
    https://media.ccc.de/v/all-systems-go-2023-187-microsoft-azure-boost-image-based-linux-powering-the-azure-fleet-wait-what-really-yes-A quick journey through ...

Public

Conversation

Notices

Feeds