Extending Quality Management with Audio, Video, and KVM using Podman Quadlets
summary
Shows how Quality Management zones gain host devices and virtualization using Podman Quadlets and dynamic OCI hooks to attach GPUs, audio, Wayland compositors and nested containers. Demonstrates microVMs created by crun + libkrun to run separate kernels, with a live UI/video demo via Wayland and a confidential-computing run (AMD/Intel TEEs) that prevents memory dumps of a password process, proving the device passthrough and confidentiality approach actually works.
AI-written summary · about
chapters (13)
- 0:00Automotive Linux goals
- 1:02Last year's recap
- 4:54Host to QM with Quadlets
- 7:28Dynamic device discovery
- 9:14Wayland setup
- 11:19Wayland demo
- 13:04Virtualization in containers
- 17:47Micro VM benefits
- 18:10Confidential computing
- 19:54Memory dump demo
- 22:23Confidential workloads
- 24:12Why it matters for cars
- 25:17Q&A
related talks
47mContainer Security
37mPodman 5 & Long-Term Software Maintenance
36m10 Cool features in Podman and Podman Desktop
34mTailor-Made Security: Building a Kubernetes Specific Hypervisor
38mImproving your Kubernetes Workload Security
35mValidating Freedom From Interference in Automotive Linux
07mLightning Talk: Production-Grade AI Isolation: K0s + Kata Containers for Zero-Tru...
41mConfidential Computing, from host to workload