Talk: Going Minimal - A guide to improving container image security

In this talk I explored how to build minimal container images for a small sample application. We started out by using a simple, but inefficient Dockerfile and worked our way through to advanced solutions such as Distroless and Chainguards Apko/Melange. Sadly there is no recording of the talk. You can find the spoken text though in my Github repo. Slides: Link

October 28, 2024 · 1 min · Patrick Pichler

Talk: Kubeletosaurus Wrecks - When Memory Requests Meet Limits

I gave this talk as part of KCD Austria 2023. The main idea was to figure out how exactly memory requests/limits of pods are implemented in Kubernetes on a low level. If you see any factual errors, feel free to open an issue in the corresponding GitHub Repository. Slides: Link ...

October 28, 2024 · 1 min · Patrick Pichler

Talk: Of bees and Kubernetes Runtime Security

The aim of this talk was to explain some nitty gritty details of how eBPF works a CNCF meetup in Innsbruck. I have to say I went a bit overboard with the details and lost half of the audience during the talk. Oops! The talk ended with an sample on a deep dive how the container drift detection in Kvisor (Cast.AIs eBPF sensor) works. Sadly no recording is available for the talk. ...

October 28, 2024 · 1 min · Patrick Pichler