Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://mastodon.social/users/l0kod/statuses/111164994098654928">Mickaël Salaün (l0kod@mastodon.social)'s status on Wednesday, 04-Oct-2023 04:57:09 JST</a><a href="https://mastodon.social/@l0kod" title="l0kod@mastodon.social"><img src="https://gnusocial.jp/avatar/179310-48-20230925221145.webp" width="48" height="48" alt="Mickaël Salaün" style="position: absolute; left: 0; top: 0;">Mickaël Salaün</a><div><a href="https://fosstodon.org/@bluca/111074526607837060" rel="in-reply-to">in reply to</a><ul><li><li><a href="https://gnusocial.jp/user/150818" title="allsystemsgo@fosstodon.org">All Systems Go!</a></li></ul></div></section><article><p>"Microsoft Azure Boost: Image-based Linux powering the Azure fleet", a deep dive into a tailored Linux distro focused on security that provides offloading and acceleration. A great talk by <a href="https://fosstodon.org/@bluca">@bluca</a> at <a href="https://fosstodon.org/@allsystemsgo">@allsystemsgo</a>!<br>A lot of stuff is introduced: Linux hardening, remote attestation, SELinux, dm-verity, IPE, LUKS, fs-verity, overlayfs, systemd portable services, soft reboot, ARM, FPGA, DPDK...<br>Slides: <a href="https://cfp.all-systems-go.io/all-systems-go-2023/talk/7URRNC/" rel="nofollow noreferrer">https://cfp.all-systems-go.io/all-systems-go-2023/talk/7URRNC/</a><br>Recording: <a href="https://youtu.be/iB-wRdC8zNs" rel="nofollow noreferrer">https://youtu.be/iB-wRdC8zNs</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2067483#notice-4189904">In conversation</a><time datetime="2023-10-04T04:57:09+09:00" title="Wednesday, 04-Oct-2023 04:57:09 JST">about a year ago</time> <span>from <span><a href="https://mastodon.social/@l0kod/111164994098654928" rel="external" title="Sent from mastodon.social via ActivityPub">mastodon.social</a></span></span><a href="https://mastodon.social/@l0kod/111164994098654928">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: cfp.all-systems-go.io</div><h5><a href="https://cfp.all-systems-go.io/all-systems-go-2023/talk/7URRNC/">Microsoft Azure Boost: Image-based Linux powering the Azure fleet. Wait, what? Really?! Yes! All Systems Go! 2023</a></h5><div></div></header><div>Believe it or not, today Linux is right at the core of Microsoft Azure's infrastructure, on the very nodes that run all those fancy virtual machines. Getting there was not easy, and a lot of work was needed to meet the very stringent security and performance goals that were set. We built a custom distribution, added several security features such as signed dm-verity and kernel-enforced code integrity, came up with a way to keep state alive across kexec with PMEM, and implemented the stackable Portable Services image model that ultimately became sysexts and confexts. And much more! This talk will walk through this effort, starting with a peek under the cover at the hardware that powers it and what it enables, passing through the custom OS and ending up at all the features we added to systemd and elsewhere that you all can enjoy as well.</div><footer></footer></article></li><li><article><header><img height="128" width="128" src="https://gnusocial.jp/thumbnail/1600159?w=128&amp;h=128"><h5><a href="https://www.youtube.com/watch?v=iB-wRdC8zNs&amp;feature=youtu.be">Microsoft Azure Boost: Image-based Linux powering the Azure fleet. Wait, what? Really?! Yes!</a></h5><div> from <span>All Systems Go!</span></div></header><div>https://media.ccc.de/v/all-systems-go-2023-187-microsoft-azure-boost-image-based-linux-powering-the-azure-fleet-wait-what-really-yes-A quick journey through ...</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Mickaël Salaün (l0kod@mastodon.social)'s status on Wednesday, 04-Oct-2023 04:57:09 JSTMickaël Salaün
in reply to
- bluca
- All Systems Go!
"Microsoft Azure Boost: Image-based Linux powering the Azure fleet", a deep dive into a tailored Linux distro focused on security that provides offloading and acceleration. A great talk by @bluca at @allsystemsgo!
A lot of stuff is introduced: Linux hardening, remote attestation, SELinux, dm-verity, IPE, LUKS, fs-verity, overlayfs, systemd portable services, soft reboot, ARM, FPGA, DPDK...
Slides: https://cfp.all-systems-go.io/all-systems-go-2023/talk/7URRNC/
Recording: https://youtu.be/iB-wRdC8zNs
In conversationabout a year ago from mastodon.socialpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: cfp.all-systems-go.io
  Microsoft Azure Boost: Image-based Linux powering the Azure fleet. Wait, what? Really?! Yes! All Systems Go! 2023
  Believe it or not, today Linux is right at the core of Microsoft Azure's infrastructure, on the very nodes that run all those fancy virtual machines. Getting there was not easy, and a lot of work was needed to meet the very stringent security and performance goals that were set. We built a custom distribution, added several security features such as signed dm-verity and kernel-enforced code integrity, came up with a way to keep state alive across kexec with PMEM, and implemented the stackable Portable Services image model that ultimately became sysexts and confexts. And much more! This talk will walk through this effort, starting with a peek under the cover at the hardware that powers it and what it enables, passing through the custom OS and ending up at all the features we added to systemd and elsewhere that you all can enjoy as well.
2. Microsoft Azure Boost: Image-based Linux powering the Azure fleet. Wait, what? Really?! Yes!
  from All Systems Go!
  https://media.ccc.de/v/all-systems-go-2023-187-microsoft-azure-boost-image-based-linux-powering-the-azure-fleet-wait-what-really-yes-A quick journey through ...

Public

Embed Notice

HTML Code

Corresponding Notice