Do One Thing, and Do It Well: Special Purpose OSes Apply the Unix App Philosoph...
summary
Panelists compare specific builds and outcomes: Unikraft produces unikernels that boot in milliseconds and keep a POSIX API, converting standard Dockerfiles with the craft tool to tiny VMs (example: web server running in ~8 MB vs ~100 MB). Project Eve runs immutable images for intermittent-edge sites, is hypervisor‑agnostic and manages updates via an API. BottleRocket ships a minimal kernel+containerd stack with immutable root and admin via privileged containers for AWS. Flatcar and SUSE MicroOS use A/B updates and read‑only /usr plus snapshot rollback and also support VMs and container runtimes.
AI-written summary · about
chapters (26)
- 0:00Welcome
- 5:19Special purpose OSes
- 7:09Specialization spectrum
- 7:30Unikraft’s specialization
- 8:54Unikraft use cases
- 9:14Project Eve’s focus
- 11:03Eve’s updates
- 11:46Resource over-subscription
- 13:51Bottlerocket’s design
- 16:01Bottlerocket’s security
- 17:27OpenSUSE Micro
- 21:08Flatcar’s approach
- 24:15Flatcar’s deployment
- 26:38Audience questions and deployment challenges
- 30:17Learning curve
- 32:47Unikraft’s Docker
- 33:52Performance gains
- 34:36Choosing the right OS
- 36:03CNCF goals
- 37:27Working group resources
- 39:14Containerization security
- 41:04Virtualization vs containers
- 42:29Immutable OSes
- 44:13Prioritize app needs
- 45:39Layered security
- 46:21Working group meetings
related talks
35mUnikraft: From Research / Academia to Deployment Reality
01h 05mDemo / Show & Tell
54mCombat complexity - build your own open OS and hardware
36mEmbedded Development Made Easy: A Guide to FOSS Platforms and Maxing product value
15mKeynote: Software-Defined Everything
42mBuilding a Framework for Big Infra Decisions
05mKeynote: Fujitsu's Innovative Computing Evolution Pursued with OSS
18mBuilding pi in a World of Slop