BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.all-systems-go.io//all-systems-go-2023//3QBAJY
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-all-systems-go-2023-ZJDHRA@cfp.all-systems-go.io
DTSTART;TZID=CET:20230913T103000
DTEND;TZID=CET:20230913T111000
DESCRIPTION:At Meta\, we've been working to add encryption support to btrfs
 \, with exciting implications for per-container security. Traditionally en
 cryption has either dealt with whole disks\, with LUKS\, or with a few fil
 esystems: ext4\, f2fs\, ubifs\, and ceph\, lacking in advanced volume mana
 gement. Btrfs has several features these filesystems don't: deduplicating/
 reflinking identical data\, subvolume/snapshot management\, and integrated
  checksumming. These features allow giving containers their own encrypted 
 subvolume with a key only loaded when the container is running\, preventin
 g container storage from being read while turned off\, and making deletion
  of expired containers' storage secure.
DTSTAMP:20260305T234049Z
LOCATION:Dome
SUMMARY:Encrypted Btrfs Subvolumes: Keeping Container Storage Safe - Sweet 
 Tea Dorminy
URL:https://cfp.all-systems-go.io/all-systems-go-2023/talk/ZJDHRA/
END:VEVENT
END:VCALENDAR