Fabrizio Sgura

This presentation offers an in-depth analysis of Flatcar Linux, a container-optimized operating system, within the context of cloud-native environments. It begins with an overview of cloud-native Linux distributions, highlighting the evolution and importance of container-focused operating systems. The session introduces Flatcar Linux, discussing its origins, acceptance into the Cloud Native Computing Foundation (CNCF) as an incubating project, and its core features such as immutability, atomic updates, and container-native design.
After covering Flatcar, I explore Kairos, as immutable option at the edge, and I show a comparison of alternatives like Fedora CoreOS, Talos, Suse elementary.
Also, this session argues that managing the node OS immutably is key to platform reliability. We compare traditional distros vs. container-specific immutable OSes. We describe examples like AWS Bottlerocket, Flatcar Container Linux, and Talos Linux.
Such OSes mount a read-only root filesystem, disable SSH, and update by swapping entire node images (dual-disk atomic updates with rollback).
In the demo, I upgrade a cluster’s OS by applying a new immutable image spec and watching nodes reboot harmlessly. I highlight how this approach eliminates config drift and patches servers in one shot, aligning with best practices that a minimal, read-only host has a “much smaller attack surface”.

In this session, we'll explore why KubeVirt offers a more future-proof and scalable option for organizations seeking to modernize their infrastructure. We'll dive deep into the benefits of moving away from legacy systems, how KubeVirt enables seamless integration of virtual machines into Kubernetes, and what this means for managing hybrid workloads. Attendees will gain practical insights into the advantages of unifying their compute strategy under Kubernetes, including easier automation, improved resource efficiency, and better alignment with cloud-native practices.

We are excited to share with you the story of how Cilium, the powerful eBPF-based networking and security project, has played a pivotal role in enhancing observability, security, and good practices in our projects. In the ever-evolving landscape of modern technology, ensuring trusted ecosystems for our applications and infrastructure is of paramount importance.