Lightning Talk: Fort Kairos: A New Dawn for Secure Linux in Untrusted Environments
summary
Kairos implements Trusted Boot for edge Linux using unified kernel images signed with customer keys, Secure Boot, TPM-based measurements and disk encryption for user data; the boot chain measures and binds the kernel and initramfs so even tiny modifications break validation, preventing unsigned kernels from booting. Build tooling produces bootable ISOs or container images for upgrades, and the system supports A/B upgrades with instant rollback; deployed on grocery stores, dental offices and farms.
AI-written summary · about
chapters (10)
- 0:00Secure edge Linux motivation
- 1:24Untrusted environments risks
- 2:49Trusted boot and systemd
- 3:31Kyros Trusted Boot unified image
- 4:34Secure Boot and TPM measurements
- 6:19Encryption and release integrity
- 7:42Unified image generation tooling
- 8:24Easy upgrades and rollbacks
- 9:07Kyros Trusted Boot benefits
- 9:50Open source and Q&A
related talks
10mLightning Talk: Fort Kairos: A New Dawn for Secure Linux in Untrusted Environments
06mLightning Talk: Security Down to the Kernel
49mKeylime: Bootstrapping and Maintaining Trust
38mBoot to Cloud Security Considerations with IoT
38mKeylime, Securing your Slice of the Cloud.
53mSecure Embedded Linux Product - A Success Story
42mTales from the Crypt: Implementing Secure Boot and Disk Encryption on Tegra Platforms
18mBeyond the Default Password: Building Trustworthy IoT Products