Lightning Talk: Fort Kairos: A New Dawn for Secure Linux in Untrusted Environments
summary
Kairos implements a trusted-boot stack for edge Linux using Secure Boot, Trusted Boot, TPM, disk encryption and boots from a unified system image signed with your keys so TPM measurements reject any altered kernel or initramfs. Deployments already run in grocery stores, dental offices and farms. Tooling builds USIs from Dockerfiles, produces bootable ISOs or container upgrades, supports A/B upgrades and a recovery image, and focuses encryption on user data rather than full-disk.
AI-written summary · about
chapters (10)
- 0:00Secure edge Linux motivation
- 1:24Untrusted environments risks
- 2:49Trusted boot and systemd
- 3:31Kyros Trusted Boot unified image
- 4:34Secure Boot and TPM measurements
- 6:19Encryption and release integrity
- 7:42Unified image generation tooling
- 8:24Easy upgrades and rollbacks
- 9:07Kyros Trusted Boot benefits
- 9:50Open source and Q&A
related talks
10mLightning Talk: Fort Kairos: A New Dawn for Secure Linux in Untrusted Environments
24mMeet Kairos, the linux meta distribution for edge
06mLightning Talk: Security Down to the Kernel
07mNo More Snowflakes: How Kairos Makes Edge Kubernetes Predictable
38mKeylime, Securing your Slice of the Cloud.
49mKeylime: Bootstrapping and Maintaining Trust
38mBoot to Cloud Security Considerations with IoT
53mSecure Embedded Linux Product - A Success Story