Podcast Episodes
Back to SearchPrivilege delegation for rootless containers, what choices do we have? (asg2025)
Going for minimal containers with restricted system calls and unprivileged users is the usual Kubernetes approach these days, and it works great for …
1 year, 1 month ago
Modernizing GNOME (asg2025)
GNOME has collected some very old code over the years. During the recent GNOME 49 release, we've made some drastic cleanups. Most visibly, we've drop…
1 year, 1 month ago
New Linux Kernel Coredump Infrastructure (asg2025)
Coredumping on Linux has long been a nightmare. Currently two modes are supported: (1) Dumping directly into a file somewhere on the filesystem. (2) …
1 year, 1 month ago
Slim device software with systemd targets and nspawn (asg2025)
It has been 10 years since Axis Communications had a presentation at the systemd conference. Back then, we have shown how we have increased our produ…
1 year, 1 month ago
GNOME OS' prêt-à-booter image (asg2025)
GNOME OS is a distribution based around systemd-sysupdate. This year, we finally created a live installer image using the same /usr partition as the …
1 year, 1 month ago
Unprivileged Containers, with Transient User Namespaces and ID Mapping, but Without SETUID Binaries (asg2025)
Many traditional container engines make use of the "subuid" concept and the "newuidmap" tool to implement a concept of "unprivileged" user-namespace …
1 year, 1 month ago
Shipping Flatpak applications with an image based system (asg2025)
Flatpak is the de-facto standard for distributing desktop applications across various Linux based systems. It also offers other advantages such as sa…
1 year, 1 month ago
oo7-daemon: One year later – Progress, Challenges, and What’s next (asg2025)
oo7-daemon is the new D-Bus Secret Service provider that aims to fully replace gnome-keyring. In this followup (continuation of my 2024 talk) lightni…
1 year, 1 month ago
From initramfs-tools to mkosi-initrd (asg2025)
Marco will review the features available in the initramfs-tools ecosystem, the initrd generator used by Debian and Ubuntu, and how they can be implem…
1 year, 1 month ago
A new systemd container runtime?! (asg2025)
At Meta, we've been looking to revamp our internal container runtime (Twine). Instead of maintaining all the low level container runtime code ourselv…
1 year, 1 month ago