Name: From Container to Bare Metal: Redefining OS Build with bootc – VP Bank
Start: 2025-10-30T11:53:00Z
End: 2025-10-30T11:53:07.000Z
Location: BrightTALK

Chainguard is redefining how the world builds and secures software. We combine innovation and security to make the software supply chain transparent, verifiable, and safe. Backed by industry pioneers behind Sigstore and SLSA, Chainguard helps organisations ship faster and with confidence. Trusted by global leaders like VPBank, Snap, Canva, and HPE, our team of experts from Google, AWS, and Red Hat is building the future of secure software—one container at a time.

The retail industry has undergone digital transformation at unprecedented speed. Customer experiences are now shaped as much by mobile apps and online platforms as by in-store interactions. Loyalty schemes, personalised offers and frictionless checkouts all depend on complex layers of software running seamlessly and securely.

 

But behind the convenience lies a growing risk. Modern retail systems are built on thousands of open-source and third-party components. While these speed up innovation, they also introduce vulnerabilities that cyber-attackers are quick to exploit. A compromised component can ripple through e-commerce sites, supply chain logistics and even point-of-sale systems, putting customer trust and brand reputation on the line.

Building trust in the software supply chain for retail management

As organizations accelerate their cloud-native adoption, security teams are discovering that traditional security approaches leave dangerous blind spots in containerized environments. While most teams focus on obvious vulnerabilities like unpatched software, the most damaging breaches often exploit less visible risks embedded deep within the cloud-native stack. This session exposes the hidden security risks that plague modern Kubernetes deployments and containerized applications, revealing why conventional security scanning misses critical threats.

The Hidden Risks in Your Cloud-Native Stack with Orca Security

At its core, open source supply chain security comes down to three key questions: 

Are you consistently consuming the latest and greatest software from open source maintainers
Can you confidently answer what’s in your software and where it was built
Are you eliminating vulnerabilities and mitigating malware
 
Every enterprise infrastructure, development, and security team contends with these three challenges on a daily basis because traditional mechanisms for open source software delivery have failed to address them. Whether it’s bloated, frozen-in-time enterprise Linux distributions that require big bang updates or vulnerability-riddled containers from public repositories that lack provenance – developer experience, shipping velocity, and enterprise security consistently bear the cost. 

That’s why Dan Lorenc, Kim Lewandowski, Matt Moore, and Ville Aikas founded Chainguard—to re-think software supply chain delivery from the distro up. After years of engineering, they introduced Chainguard OS: a Linux distro built from upstream sources to eliminate vulnerabilities by building from the source. It now powers over 1,300 container images, VM images across major clouds, and secure language libraries—helping organizations prevent malware, eliminate CVEs, and reduce developer toil.

Join members of the founding team for a live panel discussion on how Chainguard OS is redefining secure software delivery to learn:
- Why controlling the Linux distro is essential
- How Chainguard OS delivers immutable, vulnerability-free artifacts
- How customers are shipping faster and patching less
- What this means for the future of secure open source infrastructure

Founders Panel: Inside Chainguard OS

Discover how Amazon EKS Auto Mode and Chainguard’s secure-by-default container images work together to streamline Kubernetes operations and strengthen your software supply chain. This session will explore how EKS Auto Mode reduces the complexity of cluster management by automatically provisioning and scaling compute resources, while Chainguard’s hardened images help eliminate vulnerabilities by default — without sacrificing developer velocity. You’ll learn actionable techniques for deploying production-ready workloads with greater efficiency and security. We’ll wrap up with a hands-on demo to show you how easy it is to get started with these tools in tandem.

Deploy Secure Containers on Amazon EKS with Chainguard

In this recording, Dr. Noe Lorona from The Army Software Factory explores how to build and implement repeatable, scalable, and secure pipelines for promoting container images, from initial intake through validation, testing, Change Control Board (CCB) review, policy enforcement, and ultimately to staging and production environments. This session presents an environment-agnostic approach that applies seamlessly across classified networks, air-gapped systems, and enterprise-scale platforms alike. The recording highlights how embedding key DevSecOps principles, such as automation, traceability, and policy enforcement, not only strengthens software supply chain integrity but also accelerates platform maturity and mission agility.

Automating Container Image Promotion Across Environments, From Source to Prod - Army Software Factory

In this recording, Priya Wadhwa from Chainguard dives into some of the unique challenges we’ve faced maintaining a distro, building hundreds of secure images every day, and remediating thousands of CVEs every year. Along the way, we've built some pretty interesting automation and tooling to make it all work. If you're interested in seeing how the sausage is made, this talk is for you!

This Shit is Hard: A Lightning Tour of the Chainguard Factory

Over the last few years at Chainguard, we've built a scalable, efficient, and secure software factory, optimized to build tens of thousands of software packages and thousands of container images at a level of speed and security unmatched by any other Linux distribution. Learn about our custom Kubernetes build system, AI-assisted diagnostics, and how we maintain our industry-leading CVE remediation SLA (7 days for critical CVEs, 14 days for high/medium/low) across tens of thousands of packages. This is your chance to see how we build trusted container images that meet the toughest security and compliance requirements – the engineering that usually happens behind closed doors.

This Sip is Hard: Inside the Chainguard Factory

Join us for an engaging discussion where we’ll share key learnings gathered from working with customers as they standardize and centralize their container images. You’ll gain deeper insights into the motivations behind these centralization projects, the outcomes organizations aim to achieve, and the best practices and common pitfalls we’ve observed throughout these journeys. Discover how Chainguard can collaborate to help your organization achieve similar success. By the end, you’ll walk away with a clearer understanding of the critical success factors for open source standardization and the strategic priorities to consider when implementing your own golden image program.

Key takeaways:

Key drivers and outcomes of golden image programs
Major priorities and best practices for open source standardization
Common pitfalls and ways to avoid them

The Golden Image Paved Road: How to Reduce Dev Toil & Speed Product Velocity

Join us for a fireside chat with GitLab Field CTO, George Kichukov, as we explore how modern engineering teams are balancing the growing risks of the software supply chain with the constant demand to build and ship faster. George will share real-world insights into how he sees organisations prioritising supply chain security, navigating the complexities of open source software, and implementing DevSecOps practices that actually work.

You’ll also get a closer look at how Chainguard supports GitLab’s approach to building secure software from the start — and what the future looks like when security is built in, not bolted on.

Key takeaways:

How GitLab approaches supply chain security at scale

The evolving role of open source in secure development

What’s actually working in modern DevSecOps practices

A Field CTO's Insights on Secure Software Supply Chain

In today’s fast-moving software landscape, attackers are no longer just targeting production systems — they’re exploiting the software supply chain itself. Vulnerable dependencies, misconfigured pipelines, and untrusted build artifacts have become prime targets. For platform engineers tasked with securing infrastructure and enabling fast delivery, this is both a challenge and an opportunity.

Join Adrian Mouat, Developer Relations Engineer at Chainguard, for a fast-paced, hands-on session that cuts through the noise and shows what modern software supply chain security looks like in action. In Taming the Chain, we’ll walk you through a live demo of a hardened CI/CD pipeline, showcasing how to bake security into every stage of software delivery — from development to deployment.

We will explore:
The anatomy of a typical software supply chain attack.
Common (and preventable) security gaps in developer workflows.
How to implement secure builds with verifiable provenance and minimal base images.
Real-world techniques for securing containers, SBOMs, and signing artifacts with Sigstore.
Tips to empower platform teams without slowing down engineering velocity.

Whether you're running Kubernetes at scale, maintaining internal developer platforms, or building high-trust environments, this session will leave you with actionable tools and a fresh perspective on what “secure by default” really means.

Taming the Chain: A Live Walkthrough of Secure Software Delivery

In Containers We Trust - Tech Talks

In this presentation, Tuan-Anh Tran from VPBank discusses bootc, which allows you to use familiar container-native tools—such as writing a Dockerfile, building with Buildkit, and signing or publishing with cosign—to create and deliver bootable Linux systems. This talk explores how bootc enables teams to build, verify, and deploy OS images from OCI registries directly to bare metal, uniting OS lifecycle management with modern container supply chain practices. This recording explains how this approach simplifies updates, strengthens security, and advances immutability for infrastructure environments.

From Container to Bare Metal: Redefining OS Build with bootc – VP Bank

Containers

Vulnerabilities

Vulnerability Management

Vulnerability Scanning

DevOps

DevSecOps

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

From Container to Bare Metal: Redefining OS Build with bootc – VP Bank

Presented by

About this talk

Chainguard Software Supply Chain Security