Name: Ensuring security and isolation in Kubernetes with Kata Containers
Start: 2019-10-30T17:00:00Z
End: 2019-10-30T17:00:59.000Z
Location: BrightTALK
Rating: 4.1

Get the most in depth information about the Ubuntu technology and services from Canonical. 

Learn why Ubuntu is the preferred Linux platform and how Canonical can help you make the most out of your Ubuntu environment.

O Ubuntu 20.04 LTS vai deixar de ter suporte padrão em maio de 2025, e os clientes da nuvem pública (AWS, nuvem pública, Google Cloud) precisam agir agora para proteger seus sistemas na nuvem. 

Neste webinar, especialistas da Canonical e da Innuvem vão explicar o que vai mudar e como garantir a segurança, o funcionamento e o bom desempenho na nuvem pública.

O que você vai aprender:

1️⃣ Entendendo a mudança: Saiba mais sobre os lançamentos do Ubuntu, o fim do suporte do Ubuntu 20.04 LTS e o que isso significa para seu sistema.

2️⃣ Estratégias para migrar: Conheça as opções disponíveis, como atualizar para uma versão mais nova do Ubuntu ou usar o Ubuntu Pro, e aprenda a escolher a melhor opção para você.

3️⃣ Melhores práticas na nuvem pública: Receba dicas práticas para fazer uma migração segura e sem problemas dentro da nuvem pública.

4️⃣ Orientação dos especialistas: Ouça os especialistas da Canonical e da Innuvem sobre como planejar a modernização e garantir que seus sistemas no Ubuntu fiquem preparados para o futuro.

Não deixe para a última hora - participe e proteja sua infraestrutura na nuvem pública para garantir que ela continue segura e funcionando bem no futuro.

Fim do Suporte Padrão do Ubuntu Server 20.04 LTS – O que os Usuários da Nuvem Pública Precisam Saber

Organizations that work with the US public sector or handle sensitive data currently have a FIPS 140-2 requirement. Currently, if an organization wants FIPS compliance while running on Azure, they are running Ubuntu Pro 20.04 or earlier. On September 21st, 2026, this will no longer be enough to achieve FIPS compliance because organizations will need to transition to FIPS 140-3. 

Whether you already have FIPS compliance and are looking to learn how to transition to 140-3 or are just now looking into getting FIPS compliance, this webinar will inform you on the new standards and how to achieve them with Ubuntu Pro on Microsoft Azure. 

Ubuntu Pro 22.04 recently became FIPS 140-3 certified as of February 2025. In this webinar, we will also explore how to transition from previous versions of Ubuntu to Ubuntu Pro 22.04 to prepare for the FIPS 140-2 sunset next year.

Join us on April 22nd for a must-attend webinar with Joel from Microsoft and our experts as we discuss:
 - Why the move to FIPS 140-3 matters now—before the 2026 deadline
 - How Ubuntu Pro on Azure simplifies FIPS 140-3 compliance for cloud workloads
 -  Best practices for securing your infrastructure and avoiding migration roadblocks

Transitioning to FIPS 140-3 on Azure with Ubuntu

With Ubuntu 20.04 LTS reaching the end of its standard support in April 2025, AWS customers must act now to safeguard their cloud workloads. In this webinar, Canonical and AWS experts will explore the implications of this transition and outline a clear path forward to maintain security, compliance, and performance on your AWS deployments.

What you’ll learn:

-Understanding the transition: Dive into the Ubuntu release cycles, the details of Ubuntu 20.04 LTS’s end-of-support and what it means for your environment. 
-Migration strategies: Discover the options available—whether upgrading to a newer version of Ubuntu or extending your protection with Ubuntu Pro—and learn how to choose the best path for your needs.

Don’t wait until the last minute—join us to ensure your AWS infrastructure remains robust and secure well into the future.

Ubuntu 20.04 LTS end of support is coming –  Are your AWS workloads ready?

With Ubuntu 20.04 LTS reaching the end of its standard support in May 2025, Azure customers must act now to safeguard their cloud workloads. In this webinar, Canonical and Azure experts explore the effects of this transition and outline a clear path to maintain security, compliance, and performance on your Azure deployments.

What you’ll learn:

Understanding the transition: Dive into the Ubuntu release cycles, the details of Ubuntu 20.04 LTS’s end-of-support and what it means for your environment. 

Migration strategies: Discover the options available—whether upgrading to a newer version of Ubuntu or extending your protection with Ubuntu Pro—and learn how to choose the best path for your needs.

Azure best practices: Gain practical insights and actionable tips for a smooth, risk-free migration within the Azure ecosystem.

Expert guidance: Hear from Canonical and Azure specialists on how to optimize your modernization strategy and future-proof your Ubuntu workloads.

Don’t wait until the last minute—join us to ensure your Azure infrastructure remains robust and secure well into the future.

Ubuntu Server 20.04 LTS End of Standard Support: What Azure Users Need to Know

Ubuntu 20.04 LTS will end its standard support period in April 2025. If you're running Ubuntu workloads on Google Cloud, now is the time to plan your next steps to maintain security, compliance, and performance. In this webinar, experts from Canonical and Google Cloud will explain what this transition means and how to ensure a smooth migration.

Join us to explore:
-The impact of Ubuntu 20.04 LTS reaching end-of-life
-Your options: upgrading to Ubuntu 22.04 LTS or extending security coverage with Ubuntu Pro
-Best practices for seamless migration on Google Cloud
-How Canonical and Google Cloud can support your modernization strategy

Don’t wait until the last minute—learn how to future-proof your Ubuntu workloads today.

Ubuntu 20.04 LTS End of Support: What Google Cloud Users Need to Know

System hardening is an essential preventative security measure for production systems and critical workloads, especially for regulated industries such as healthcare, finance, telecommunications and the public sector.

Hardening provides defense in depth by setting safe defaults and configurations, implementing least privileges, enabling robust logging and auditing, and enforcing encryption, in line with security industry best practices such as The Center for Internet Security (CIS) benchmarks. CIS uses a consensus process to release benchmarks to safeguard organisations against cyber attacks. To facilitate hardening and the application of these benchmarks on Ubuntu, customers can use Canonical’s automation tooling, the Ubuntu Security Guide (USG).

Canonical has published the CIS benchmark hardening profile for the Ubuntu Security Guide on Noble Numbat! This release provides automated remediation and auditing at scale for Ubuntu Pro customers, bringing 24.04 LTS systems in line with the industry standard CIS hardening benchmarks. The USG tool is available for previous Ubuntu releases, and now extends to the latest Ubuntu LTS.

In this webinar, we will explain what the CIS benchmarks are all about and the range of configuration options that they touch. Then, we will discuss what the Ubuntu Security Guide tooling provides to Pro users, and demo how easy it is to install and run USG to create a hardened environment. And of course we will include some tips and tricks to make the process easier.

Hardening automation for CIS benchmarks is now available for Ubuntu 24.04 LTS

As the backbone of many modern applications, databases must ensure both high availability and scalability to meet the demands of growing user bases and dynamic workloads. MongoDB, a leading NoSQL database, excels in these areas with its robust features designed to support distributed data environments.



Join Mia Altieri, Canonical software engineer, as she showcases automated ways to maintain high availability and sharding functionalities of MongoDB using an operator. An operator is an application that automates management tasks and the operational complexity of running software, in this case, MongoDB. Learn how an operator can help you maintain a scalable database in a production environment.

Database high availability and scalability in action

Ubuntu 20.04 LTS is reaching the end of its five-year standard security maintenance window, leaving many asking the question: can I manage a migration from Ubuntu 20.04 LTS by May 2025, or do I need more time? Unless you take action, your 20.04 LTS machines will not receive any security updates after May 2025.
Transitioning to the latest operating system is important for performance, hardware enablement and new technology benefits. But it can be a challenging process for existing complex production deployments. 
Typically, enterprise solutions combine software from a variety of teams within an organization. In most cases, there is an extended supply chain, involving software from 3rd party vendors, who in turn may have their own software vendors. Such complex scenarios result in a dependency on software stacks (e.g., Java, Python) which have certain properties in the upgraded system that either got deprecated, replaced, or changed in behaviour. The migration process in that case becomes a change management project involving risk analysis, stakeholder communication, and possibly the version upgrade of existing solutions, in addition to the actual operating system upgrade. This is even more challenging if you are in a heavily-regulated industry where the compliance process to meet the regulatory requirements, such as PCI-DSS, SOC2 and GDPR, would result in additional planning and implementation.
In cases where the operational stability and security patching continuity of the systems is critical, Expanded Security Maintenance (ESM) reduces the risk of security incidents and gives your team more time to roll out a migration plan. 


This webinar is a guide to key considerations when planning a migration from Ubuntu 20.04 LTS, including:
- How to keep your production 20.04 LTS systems maintained while you plan your migration path
- What is Ubuntu Pro and the ESM and Legacy Support add-on, and how they can help you 
- Choosing the best option for your organization

Ubuntu 20.04 LTS end of standard support - what are your options?

Have you noticed how open-source software has become essential to innovation in the cloud-native arena? Countless cloud-native applications are powered by open source, and they are often mission-critical for organizations across industries, ranging from small startups to large enterprises. However, there are inherent security risks associated with this reliance on external components, and this problem is only growing as container adoption continues to gain momentum.   

To combat these risks, it's important to understand the complexities of the open-source container supply chain story. This ecosystem involves a large volume of contributors and dependencies, resulting in a higher degree of potential vulnerabilities. By gaining an understanding of the anatomy of supply chain attacks, you can proactively identify and mitigate these risks.

In this webinar, we’ll take a closer look at vulnerability management, exploring the key considerations and challenges. We’ll also discuss chiseled containers – our approach to distroless containers – and introduce our Container Build Service.

This webinar will equip you with the ability to: 
- Understand the anatomy of attacks and how vulnerabilities are introduced at various stages
- Discover best practices for timely and efficient patching
- Explore strategies for securing your open-source container ecosystem from source to runtime, including secure development practices and dependency management
- Learn the core principles of chiseled containers, how they minimize the attack surface, and their advantages for container security
- Discover Everything LTS and Canonical’s custom-built containers

Join the webinar if: 
- You’re responsible for ensuring container security best practices at your organization
- You’re a platform engineer interested in secure and reliable foundations for your open-source container deployments
- You’re a DevOps/ SecOps interested in enhanced security features 
- You’re looking for expert community support

Container attack surface explained: strategies for securely-designed deployments

Join us for an in-depth exploration of Canonical’s latest milestone for security: FIPS 140-3 certification for Ubuntu 22.04 LTS. These certificates, granted by NIST's Cryptographic Module Validation Program (CMVP), provide essential compliance and security for organizations operating within the US Federal and Defense sectors or providing online services to the US Government. In this webinar, we’ll guide you through what this certification means, how it enhances your Ubuntu Pro experience, and what’s next on the horizon.

Discover how FIPS 140-3 ensures that Ubuntu users remain ahead of evolving security standards, especially as FIPS 140-2 is phased out. We’ll also delve into the certification details, including the cryptographic modules and supported hardware platforms, as well as the importance of Ubuntu Pro’s "fips-updates" modules to maintain robust security. Whether you’re managing enterprise systems or personal projects, this session will equip you with actionable insights.

We’ll also share details of the customized kernels for cloud environments, as well as provide updates on Canonical’s work to extend FIPS 140-3 certification to Ubuntu 24.04, and recommendations for users on older Ubuntu releases. Don’t miss this chance to stay informed and prepared for the next steps in securing your systems.

Key takeaways from this webinar:

- Understand the significance of FIPS 140-3 certification and its impact on Ubuntu 22.04 LTS.
- Demo: Learn how to enable FIPS 140-3 using the Ubuntu Pro client and maximize security with "fips-updates”.
- Explore certification details, including cryptographic modules, hardware platforms, and cloud-specific kernels.
- Get guidance on managing FIPS compliance across Ubuntu releases and preparing for future certifications.

Taking advantage of FIPS 140-3 Certification for Ubuntu 22.04 LTS

Ceph is the world’s most popular open source storage system, and offers efficiency features such as thin provisioning, copy-on-write snapshots, and compression to reduce the cost of storing data.  

Join Philip Williams (Canonical) and Yingxin Cheng (Intel) for this webinar. We will explore these features and how they can be used to reduce storage costs.  We will take an in-depth look at compression and explore how it can be used with object storage (S3), the caveats and pitfalls, and also explore how Intel’s Quick Assist Technology (QAT) offload can be used to maintain performance levels for minimal cost overhead.

Maximise your storage efficiency with Ceph

Recent changes at VMware have compelled existing customers to consider alternatives. Many have turned their eyes to open source, looking for total cost of ownership (TCO) reduction and no vendor lock-in. But as a lead architect or an infrastructure owner, you know that this is easier said than done.

Join our webinar on 11 June at 4:30 pm CET and learn how to move from VMware to the future.

From VMware to the future:
Cloud computing is now a central piece of enterprise IT estates. According to Gartner, overall spending on cloud infrastructure will approach 50% of organisations’ IT budgets by 2025. However, moving from VMware to the cloud comes with many potential challenges that only a well-educated and trained infrastructure team can handle with no friction. In this webinar, we’ll present Canonical’s proven path to data centre cloudification.

Gain another decade of stability:
Canonical’s open source infrastructure comes with long-term support, security, and price commitment. This means that a successful transition results in at least another decade of stability. Even though the migration process is usually more tricky than a simple click, full data centre and workload cloudification leads to tangible business benefits. Don’t trust empty promises set by alleged industry leaders and learn how to execute this transition the right way.

Join this webinar to learn:
1) What the future of the infrastructure is going to look like
2) Details of data centre and workload cloudification process
3) About Canonical infrastructure components and their functions
4) How to effectively migrate out of the VMware infrastructure

Modernising your infrastructure post VMware

Recent changes at VMware have compelled existing customers to consider VMware alternatives. Many have turned their eyes to open source. However, migrating from VMware is not an easy task, and it will involve some changes in how you’re managing your infrastructure.

You might’ve joined our previous webinar where we talked about open-source solutions as an alternative to VMware software. In this follow-up webinar, we will go into more depth. We will compare the features and discuss the differences between VMware and Ubuntu-based infrastructure, and then dive into a few example migration scenarios. The migration process and tooling are also very dependent on the kind of workloads you are running, as well as what kind of platform you want to migrate to. We will examine the migration of larger scale VMWare to OpenStack, as well as smaller scale VMware to our MicroCloud offering.

We will also discuss potential issues that can occur during migration due to the differences in the features and architecture, and how to overcome them. You can also utilise the migration as an opportunity to modernise your workloads, and ensure you are not dragging your outdated legacy systems into the future along with the high costs of maintaining them. We will briefly touch upon this topic as well.

In this session, we will cover:
1) What are the components of Ubuntu-based infrastructure
2) VMware vs Ubuntu: a feature comparison 
3) How to ensure a successful migration

VMware to Ubuntu: Your migration options

Move to the cloud, they said. It will be fun, they said.

So you decided to do so, but now you’re facing an eternal dilemma: use one of the existing public cloud platforms or build your own? You ask yourself more questions: Which option is more convenient for your use case? Which one is more cost-effective? How do you preserve digital sovereignty regardless of the choice?

These are all good questions. We will cover them in this webinar. However, what you’re really searching for is more elementary. It is about how you can make use of available cloud technologies to meet your organisations’ needs. In other words, how you can do computing, your way?

During this webinar we will show you a “do it yourself” approach to cloud infrastructure implementation. By using mature open source technologies we will demonstrate the path towards your own production-grade cloud, preserving digital sovereignty and ensuring cost-effectiveness, while maintaining the versatility provided by global tech giants.

OpenStack is the world's most popular open source cloud platform and its adoption continues to grow exponentially every year. It serves as an extension or a reasonable alternative to hyperscalers, effectively addressing cloud cost optimisation concerns. But at the same time, OpenStack adoption has always been a challenge. Hence through this webinar, we want to help you get started with OpenStack.

In this webinar we will:
1) Discuss the current status of the cloud computing market
2) Delve into the world of OpenStack - the most popular open source cloud platform
3) Walk you through OpenStack’s high-level architecture, its services and their functions
4) Teach you how to get started and break the ice with OpenStack immediately

What is OpenStack and why does it matter?

RAG offers a new way to maximize the capabilities of large language models (LLMs) to produce more accurate, context-aware, and informative responses. Join Akash Shankaran (Intel), Ron Abellera (Microsoft), and Juan Pablo Norena (Canonical) for a tutorial on how RAG can enhance your LLMs.

The session will explore how to optimize LLMs with RAG using Charmed OpenSearch, which can serve multiple services like data ingestion, model ingestion, vector database, retrieval and ranking, and LLM connector.

We will also show the architecture of our RAG deployment in Microsoft® Azure Cloud. Notably, the vector search capabilities of RAG are enhanced by Intel AVX® Acceleration, delivering faster processing and high-throughput performance for the RAG workflow.

Quickly build and deploy LLMs with Retrieval Augmented Generation, featuring Intel Accelerators and Azure

In this walkthrough, Canonical Product Managers describe how to bring Entra ID authentication on Ubuntu Desktop at scale with Landscape, Authd, and cloud-init.

This talk will cover:
– A brief introduction of Authd, the new OIDC authentication daemon for Ubuntu.
– Authd’s capabilities and how to configure it for single sign on with Entra ID.
– How to automate Authd configuration using cloud-init.
– Landscape, what it is, and how it can be used to facilitate the above configuration and automation.
– How to take this solution into production using the additional security and compliance controls available with Ubuntu Pro.

Entra ID authentication on Ubuntu Desktop at scale with Landscape

Find out how you can apply a Defense in Depth approach with Ubuntu.

Ubuntu’s security offerings are much more than just a collection of tools: they are an ecosystem of layered defenses, each tuned to address specific threat levels and attacker capabilities. By understanding the unique threats each layer counters, you can make informed choices about which defenses are most important for your environment.


In this webinar, we will journey through the landscape of the security primitives and solutions that make up Ubuntu’s security in depth strategy, all through the lens of computational security:

Swift vulnerability response: Address known threats with Extended Security Maintenance, ensuring rapid patching and protection
Zero-day threat containment with AppArmor: Restrict applications to the bare minimum access they need, stopping attackers in their tracks
Regulated industry standards: FIPS-compliant cryptography and CIS benchmarks deliver system hardening tailored to your needs
Boot-level protection: Secure Boot enforces verified code execution, while Full Disk Encryption (FDE) protects sensitive data at rest
Next-gen isolation with confidential VMs: Technologies like Intel TDX and AMD SEV SNP create CPU-level isolation, safeguarding data even against hypervisor compromise or insider threats

What is Defense in Depth and how can you apply it with Ubuntu?

In today's dynamic business landscape, organizations need to be agile and responsive to changing demands. A robust VDI solution can be a game-changer, enabling you to empower your workforce and optimize your IT infrastructure. 

In this webinar on HPE Solutions for VDI with Canonical MicroCloud and HP Anyware, we will address the modern workspace challenges organizations face today. From strengthening security against data breaches and cyberattacks to optimizing IT infrastructure costs and empowering employees with seamless remote and BYOD experiences, our solution delivers unmatched performance and reliability. The solution is designed to redefine virtual desktop infrastructure (VDI) and elevate your workforce productivity while keeping costs and risks in check.

Learn more about the modern workforce challenges and how you can enhance security, improve scalability and get greater flexibility with HPE, Canonical and HP Anyware.

Unleash new ways of working with flexible, cost-effective VDI

Join Tytus Kurek from Canonical and Eric Ernst from Intel to explore Kata Containers!

Over the last few years, container technologies have dominated the market and become the de facto standard for implementing modern IT infrastructure. However, one of the main adoption concerns is around security and isolation. In response to those concerns, Kata Containers, which use lightweight virtual machines that seamlessly plug into the container ecosystem, have been developed. In this webinar, we will present the benefits of using Kata Containers in a Charmed Kubernetes environment to provide better security and isolation. 

NOTE: This webinar is going to be interactive. If you would like to spin up your own Charmed Kubernetes cluster with Kata Containers together with us, please make sure that you have an AWS account or a local MAAS environment. Please follow the instructions at https://jaas.ai/docs/installing to install Juju, add your cloud account (for example AWS) and bootstrap a Juju controller prior to the webinar.

Ensuring security and isolation in Kubernetes with Kata Containers

#ubuntu

Containerization

Kubernetes

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Get powerful end user computing insights from influential EUC experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on effective approaches to get non-programmers to create working applications.

End User Computing

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Ensuring security and isolation in Kubernetes with Kata Containers

Presented by

About this talk

More from this channel