Stéphane Graber
Stéphane Graber is the project leader for Linux Containers and mostly focuses on the Incus container and VM manager. He's been working on container technology for about 15 years and is known for running the Containers micro-conference at the Linux Plumbers Conference as well as the containers and kernel devrooms at FOSDEM.
In his spare time, Stéphane is also the VP of Infrastructure for NorthSec, a non-profit running a yearly cybersecurity conference and capture the flag (CTF) event in Montreal, featuring a rather crazy infrastructure running hundreds of virtual machines and thousands of containers to provide challenges to hundreds of contestants.
Stéphane is the CTO of FuturFusion, a company building an Incus-based private cloud solution with a particular focus on migrating away from VMware. He's also the owner of Zabbly where he takes on direct contract work, also primarily focused on Incus.
Session
IncusOS is an immutable OS based on Debian 13 and built using mkosi. It's designed to be as secure as possible, actively relying on both UEFI Secure Boot and a TPM 2.0 module to provide strong boot security as well as encryption at rest through LUKS+TPM.
Its whole purpose is to provide an ideal environment for running Incus with a focus on running on bare metal with pretty complex local and remote storage as well as a variety of networking options.
Unlike most other Linux systems, IncusOS doesn't provide any local or remote shell access to the system. Instead it's entirely API driven with its management API being available through the Incus API itself.
That management API allows for system configuration, update management, installation of additional components (systemd system extensions), configuring a variety of system services, ... But it also needs to handle a variety of fallback and recovery/patching mechanisms for when something goes wrong.
This talk will cover why we built IncusOS, how we built it, its current state and what we're working towards in the near future.