BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.all-systems-go.io//K9GPKV
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-all-systems-go-2026-K9GPKV@cfp.all-systems-go.io
DTSTART;TZID=CET:20260930T170500
DTEND;TZID=CET:20260930T171000
DESCRIPTION:System extensions (sysexts) become part of the host's /usr\, ma
 king them available to all users. But what if we want to run tightly coupl
 ed services without exposing their binaries to everyone else on the system
 ?\n\nThis lightning talk will show how to ship a real-world stack (kubelet
 \, containerd\, and runc) without making them accessible to the rest of th
 e host. We will demonstrate how to use portable services and systemd capsu
 les to allow these components to invoke each other and share some namespac
 es\, all while keeping the host OS clean.
DTSTAMP:20260710T230148Z
LOCATION:Loft
SUMMARY:Couple Services\, Not the Host: Portable Services and Capsules - Ro
 drigo Campos Catelin
URL:https://cfp.all-systems-go.io/all-systems-go-2026/talk/K9GPKV/
END:VEVENT
END:VCALENDAR