Frank Vasquez

Frank Vasquez is a software engineer and published author with over a decade of experience designing and building embedded Linux systems. During that time, he has shipped numerous devices including a rackmount DSP audio server, a diver-held sonar camcorder, and a consumer IoT hotspot. He is also a frequent speaker at open source software conferences including the Yocto Project Summit 2021, Embedded Linux Conference 2021 and FOSDEM 2022. Before his career as an embedded Linux engineer, Frank was a database kernel developer at IBM where he worked on Db2.


Session

09-26
11:35
40min
Building Secure Container Images for the Cloud with Yocto
Frank Vasquez

Yocto is a tool for building custom Linux distros. When you think about it, a container image is just a custom Linux distro. The distro (e.g. Alpine) is your base image and the customizations are the rest of your application or microservice. Like Podman, Yocto can generate a complete root filesystem in the form of an OCI container image. Originally targeted at bare metal, the Yocto configuration and build process seems complex when compared to the Containerfile approach of cloud native tools. Yocto's OpenEmbedded origins also mean that reduced image size, SBOM generation, license compliance, and reproducible builds were concerns early on in the project rather than afterthoughts. With security and risk of litigation now top of mind, this talk explains Yocto's uniquely layered and ultimately monolithic approach to solving these real-world software problems.

Dome