Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Learn how to implement verified Debian packaging at scale in this 25-minute conference talk from the Linux Foundation. Discover Cloudflare's comprehensive approach to signing and verifying all executable programs using Linux kernel features like Integrity Measurement Architecture (IMA) and Debian packaging systems. Explore the challenges and solutions for ensuring that servers across a global network of 330+ cities can only run authorized software. Understand the technical implementation details including modifications to dpkg, building mirroring systems for signing upstream repositories, and integrating digital signatures into every Debian package. Gain insights into handling first-party software, Docker containers, and open-source Debian packages within a unified verification system. Master the concepts of Linux kernel security mechanisms, software integrity validation, and Internet-scale system administration through real-world examples from Cloudflare's production environment.
