Panel Discussion: Do One Thing, and Do It Well: Special Purpose OSes Apply the Unix App Philosoph...
summary
Panelists compare concrete tradeoffs: Unikraft builds modular unikernels that boot in milliseconds and run unmodified ELF binaries via a POSIX API; Project EVE targets offline edge devices with KVM-backed VMs, API-driven image updates and strict resource provisioning; BottleRocket ships kernel plus containerd and kubelet, immutable rootfs with an admin container for troubleshooting; Flatcar and SUSE MicroOS use AB partitioning, read-only /usr, declarative updates and system extensions to run containers or VMs; the working group publishes recordings and plans white papers.
AI-written summary · about
chapters (26)
- 0:00Welcome
- 5:19Special purpose OSes
- 7:09Specialization spectrum
- 7:30Unikraft’s specialization
- 8:54Unikraft use cases
- 9:14Project Eve’s focus
- 11:03Eve’s updates
- 11:46Resource over-subscription
- 13:51Bottlerocket’s design
- 16:01Bottlerocket’s security
- 17:27OpenSUSE Micro
- 21:08Flatcar’s approach
- 24:15Flatcar’s deployment
- 26:38Audience questions and deployment challenges
- 30:17Learning curve
- 32:47Unikraft’s Docker
- 33:52Performance gains
- 34:36Choosing the right OS
- 36:03CNCF goals
- 37:27Working group resources
- 39:14Containerization security
- 41:04Virtualization vs containers
- 42:29Immutable OSes
- 44:13Prioritize app needs
- 45:39Layered security
- 46:21Working group meetings
related talks
05mBrian Proffitt - Ignite OSCON 2014
31mUnsung Hero Of the Cloud Native Revolution: Container Linux Then And Now
41mOSv: Probably the best OS for Cloud workloads you've ...
43mLinux Kernel Panel
01h 31mTutorial: Using Linux Primitives to Build Your Own Containers
43mClimbing out from the digital mud with unikernels
06mKeynote: A Unified Approach for Intelligent Deployments at the Edge
24mKeynote: Status of Embedded Linux