VMs for Infrastructure or Isolation?

Show: 36Show Overview: Brian and Tyler talk about the role (pros & cons) of VMs in isolation and security, as well as the broader context of security for containerized applications. Show Notes:[Red Hat] 10 Layers of Container Security[Google] Exploring Container Security - An Overview[Google] Exploring Container Security Isolation at Different Layers[Google] gVisorJess Frazelle “Hard Multi-Tenancy in Kubernetes”Jess Frazelle “Security and Echo Chambers”Kubevirt and Container-native VirtualizationTopic 1 - Let’s start with the basics. Can you please tell the audience the one command to run to make all containers secure?Topic 2 - This past week (or 2 weeks) has been a good reminder that there are certain patterns that repeat themselves in emerging technologies and open source:  hype (cool demo), binary claims of market dominance and destruction of previous technology (containers vs. VMs), buzzwords of simplicity which go against decades of experience, and then the realities of production environments.Topic 3 - Let’s talk about where VMs provide value in a container environment, and realities of VMs that people should be aware of in production and in multi-cloud environments.Topic 4 - Let’s talk briefly about a few of the recent announcements in this space (e.g. gVisor, CNV, etc.)Feedback?Email: PodCTL at gmail dot comTwitter: @PodCTLWeb: http://podctl.com