Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Explore the design and implementation of Incus OS, a secure virtualization and containerization platform developed by Stéphane Graber from Zabbly in this 47-minute Linux Foundation conference talk. Learn how the Incus project evolved from simple source code releases to a comprehensive private cloud platform capable of running on devices ranging from laptops and Raspberry Pi to thousands of datacenter servers. Discover the challenges faced in creating consistent deployments across different environments and how the team addressed the need for reliable, identical deployments suitable for both large-scale enterprise users and home users seeking a dependable virtualization platform. Examine the technical architecture of Incus OS, built on Debian using systemd's mkosi, featuring a Secure Boot signed bootloader, Unified Kernel Image, TPM measurements throughout the boot process, an immutable OS image using dm-verity, and full disk encryption for data at rest based on TPM register state. Gain insights into the specific design decisions that shaped this secure platform and understand the practical implementation details that make Incus OS a robust solution for modern virtualization and containerization needs.
