Lightweight Virtualization-Based Isolation Using libkrun
Schedule: March 9 11:30-11:55 AM EST 16:30-16:55 UTC
Presenters: Sergio Lopez, Red Hat
Topics: Container Runtimes, Container/Image Security, cGroups, Namespaces, Kernel, Containers & Virtualization, libkrun, krunvm, podman, buildah, crun
Session Details:
In this session I’ll present libkrun, a dynamic library that provides Virtualization-based process isolation capabilities. I’ll show how it can be integrated with container tools to both strengthen the security boundaries of a workload, and enable those tools to support non-Linux operating systems.