DockerVC Hackathon Presentation
•
0 likes•343 views
DockerVC is a Docker-based volunteer computing platform that aims to make volunteer computing easier and more accessible. It allows researchers to define computing tasks as Docker containers for easy deployment across different platforms. Using Docker provides benefits like high portability, isolated execution for security, and no pollution of volunteer computers. The platform handles project and work unit management as well as consensus validation of results.
Report
Share
Report
Share
Download to read offline
Recommended
Swarm 2 Go - Build A Portable Multi-Arch Data Center with Pi and UP Nodes
With this small data center you can teach, lern and understand how Docker Swarm works by visualizing running services and containers with Blinkt! LED per node. The instructions how to build such a Pi cluster is open sourced at https://github.com/sealsystems/tiny-cloud
Docker All The Things - ASP.NET 4.x and Windows Server Containers
Docker is awesome and there's been a lot of excitement over .NET Core running in Linux containers. But why do older apps have to miss out on the fun? With Windows Server 2016 and Windows Server containers, there's finally a way to dockerize .NET 4.6 apps using the same Docker tools and commands as we're used to on Linux. In this intermediate level talk, I'll give an overview of Docker and Windows Server containers. Then I'll demonstrate different ways to run existing ASP.NET Web API, MVC, and even WebForms applications inside Docker containers.
Using NixOS for declarative deployment and testing
The document discusses using NixOS, a Linux distribution that uses the Nix package manager, for declarative deployment and testing. It describes how NixOS allows systems to be configured and deployed declaratively via Nix expressions. This includes features for deploying single machines, distributed environments, and virtual machine networks in an efficient and reliable manner. It also outlines how NixOS enables integrated testing of distributed systems through the use of virtual machine instances.
Nix for Python developers
Nix is a purely functional package manager that allows defining all dependencies for Python projects and applications in a declarative way. It can be used to build environments with exact dependency specifications, create shells with predefined packages, and build applications into immutable outputs along with all dependencies. Nixpkgs contains thousands of pre-defined packages and allows reproducible and isolated builds.
Docker 初探，實驗室中的運貨鯨
This document provides instructions for getting started with Docker and Docker Compose. It explains how to install Docker and Docker Compose, basic Docker commands like running containers and viewing logs, mapping ports, and using Docker Compose to define and run multi-container applications.
手把手帶你學 Docker 入門篇
This document provides an overview of Docker concepts and tools for beginners. It covers:
1. The differences between virtual machines and containers, and the container lifecycle.
2. Tools in the Docker ecosystem such as Docker Engine, Docker CLI, Docker Hub, Docker Compose, and networking/volume commands.
3. Examples of using Docker Engine, Docker Hub for images, networking, volumes and deploying images to Azure PaaS.
4. How to use Docker Compose to define and run multi-container applications.
Linux Container Technology 101
Christian Kniep from Docker Inc. gave this talk at the Stanford HPC Conference.
"This talk will recap the history of and what constitutes Linux Containers, before laying out how the technology is employed by various engines and what problems these engines have to solve. Afterward, Christian will elaborate on why the advent of standards for images and runtimes moved the discussion from building and distributing containers to orchestrating containerized applications at scale. In conclusion, attendees will get an update on what problems still hinder the adoption of containers for distributed high performance workloads and how Docker is addressing these issues."
Christian Kniep is a Technical Account Manager at Docker, Inc. With a 10 year journey rooted in the HPC parts of the german automotive industry, Christian Kniep started to support CAE applications and VR installations. When told at a conference that HPC can not learn anything from the emerging Cloud and BigData companies, he became curious and was leading the containerization effort of the cloud-stack at Playstation Now. Christian joined Docker Inc in 2017 to help push the adoption forward and be part of the innovation instead of an external bystander. During the day he helps Docker customers in the EMEA region to fully utilize the power of containers; at night he likes to explore new emerging trends by containerizing them first and seek application in the nebulous world of DevOps.
Watch the video: https://wp.me/p3RLHQ-i4X
Learn more: http://docker.com
and
http://hpcadvisorycouncil.com
Sign up for our insideHPC Newsletter: http://insidehpc.com
Ryan Koop's Docker Chicago Meetup Demo March 12 2014
CohesiveFT's Director of Products & Marketing, Ryan Koop, presented on how CohesiveFT is incorporating Docker containers in our latest version of the virtual networking appliance, VNS3.
Docker Meetup #2 was held on March 12, 2014 at Mediafly
Recommended
Swarm 2 Go - Build A Portable Multi-Arch Data Center with Pi and UP Nodes
With this small data center you can teach, lern and understand how Docker Swarm works by visualizing running services and containers with Blinkt! LED per node. The instructions how to build such a Pi cluster is open sourced at https://github.com/sealsystems/tiny-cloud
Docker All The Things - ASP.NET 4.x and Windows Server Containers
Docker is awesome and there's been a lot of excitement over .NET Core running in Linux containers. But why do older apps have to miss out on the fun? With Windows Server 2016 and Windows Server containers, there's finally a way to dockerize .NET 4.6 apps using the same Docker tools and commands as we're used to on Linux. In this intermediate level talk, I'll give an overview of Docker and Windows Server containers. Then I'll demonstrate different ways to run existing ASP.NET Web API, MVC, and even WebForms applications inside Docker containers.
Using NixOS for declarative deployment and testing
The document discusses using NixOS, a Linux distribution that uses the Nix package manager, for declarative deployment and testing. It describes how NixOS allows systems to be configured and deployed declaratively via Nix expressions. This includes features for deploying single machines, distributed environments, and virtual machine networks in an efficient and reliable manner. It also outlines how NixOS enables integrated testing of distributed systems through the use of virtual machine instances.
Nix for Python developers
Nix is a purely functional package manager that allows defining all dependencies for Python projects and applications in a declarative way. It can be used to build environments with exact dependency specifications, create shells with predefined packages, and build applications into immutable outputs along with all dependencies. Nixpkgs contains thousands of pre-defined packages and allows reproducible and isolated builds.
Docker 初探，實驗室中的運貨鯨
This document provides instructions for getting started with Docker and Docker Compose. It explains how to install Docker and Docker Compose, basic Docker commands like running containers and viewing logs, mapping ports, and using Docker Compose to define and run multi-container applications.
手把手帶你學 Docker 入門篇
This document provides an overview of Docker concepts and tools for beginners. It covers:
1. The differences between virtual machines and containers, and the container lifecycle.
2. Tools in the Docker ecosystem such as Docker Engine, Docker CLI, Docker Hub, Docker Compose, and networking/volume commands.
3. Examples of using Docker Engine, Docker Hub for images, networking, volumes and deploying images to Azure PaaS.
4. How to use Docker Compose to define and run multi-container applications.
Linux Container Technology 101
Christian Kniep from Docker Inc. gave this talk at the Stanford HPC Conference.
"This talk will recap the history of and what constitutes Linux Containers, before laying out how the technology is employed by various engines and what problems these engines have to solve. Afterward, Christian will elaborate on why the advent of standards for images and runtimes moved the discussion from building and distributing containers to orchestrating containerized applications at scale. In conclusion, attendees will get an update on what problems still hinder the adoption of containers for distributed high performance workloads and how Docker is addressing these issues."
Christian Kniep is a Technical Account Manager at Docker, Inc. With a 10 year journey rooted in the HPC parts of the german automotive industry, Christian Kniep started to support CAE applications and VR installations. When told at a conference that HPC can not learn anything from the emerging Cloud and BigData companies, he became curious and was leading the containerization effort of the cloud-stack at Playstation Now. Christian joined Docker Inc in 2017 to help push the adoption forward and be part of the innovation instead of an external bystander. During the day he helps Docker customers in the EMEA region to fully utilize the power of containers; at night he likes to explore new emerging trends by containerizing them first and seek application in the nebulous world of DevOps.
Watch the video: https://wp.me/p3RLHQ-i4X
Learn more: http://docker.com
and
http://hpcadvisorycouncil.com
Sign up for our insideHPC Newsletter: http://insidehpc.com
Ryan Koop's Docker Chicago Meetup Demo March 12 2014
CohesiveFT's Director of Products & Marketing, Ryan Koop, presented on how CohesiveFT is incorporating Docker containers in our latest version of the virtual networking appliance, VNS3.
Docker Meetup #2 was held on March 12, 2014 at Mediafly
Docker Security and Orchestration for DevSecOps wins
Dockers have literally transformed product deployment across the software industry. It makes traditional deployments a lot easier and supplements paradigms like Virtual Machines and Hypervisors.
While Dockers make packaging and deployments relatively simple, securing them continues to be a challenge especially when faced with Docker specific security threats such as Dockerization daemon, shared kernel and other shared resources like network and the filesystem.
Securing Dockerized deployments and orchestrating them IS, and WILL remain a key challenge for several Security practitioners and DevOps engineers.
時代在變 Docker 要會：台北 Docker 一日入門篇
This document provides an agenda for a one-day Docker introduction workshop. It includes an introduction to Docker tools and concepts like containers vs VMs, the Docker ecosystem and tools, Linux and Docker command line usage, Docker Engine, Docker Hub, Docker images, networking and volumes. It also covers deploying Docker images to Azure PaaS, Docker Compose, building ARM images on x86 machines, and a TensorFlow demo. The workshop aims to provide attendees with foundational Docker knowledge and hands-on experience through examples and exercises.
Security of Linux containers in the cloud
Linux container (LXC) seems to be preferred technology for deployment of Platform as a service (PaaS) in cloud. Partly because it's easy to install on top of existing visualization platforms (KVM, VMware, VirtualBox), partly because it is lightweight solution to provide separation and process allocations between separate containers running under single kernel.
In this talk we will take a look at LXC and try to explain how to combine it with mandatory access control (MAC) mechanisms within Linux kernel to provide secure separation between different users of applications.
Advanced microservices with .Net
This document discusses advanced microservices techniques with .NET, including Linux containers, Kubernetes, OpenShift, zero-downtime deployments, blue/green and canary releases, and the circuit breaker pattern. It provides demos of building and running a Docker container with a .NET core app on OpenShift, as well as blue-green and canary deployments. Resources are listed for additional information.
Deploying NPM packages with the Nix package manager
Distributions devroom presentation given @ FOSDEM 2017. Describes how an NPM workflow can be integrated into the vision of Nix deployment.
Learn enough Docker to be dangerous
This document discusses virtual environments and Docker for isolating Python applications and dependencies. It provides an overview of common virtual environment tools like virtualenv and virtualenvwrapper. It then introduces Docker as a platform for developing, deploying, and running applications in containers. Key Docker concepts are explained like images, containers, the Dockerfile for building images, and common Docker commands. The goal of virtualization and containers is to package an application and its dependencies into a self-contained unit that can run anywhere.
Perspectives on Docker
This document discusses 10 things not to forget before deploying Docker in production. It covers logging, monitoring, secrets, container access, filesystem choices, disk space usage, build optimizations, download speeds, backups, and Docker clusters. Overall, Docker provides benefits for portability and workflows but has some challenges to address for system-wide deployments in production environments.
容器與IoT端點應用
This document outlines a course on container technology and IoT endpoint applications taught by Philipz. The 7 part course covers topics like Docker on Raspberry Pi, building ARM images on x86 machines, MQTT and Docker prototypes, using Docker Compose for IoT MQTT projects, and sending MQTT data to Adafruit IO. It provides examples of building and running containerized IoT applications on Raspberry Pi devices.
當專案漸趕，當遷移也不再那麼難 (Ship Your Projects with Docker EcoSystem)
距離去年講述「運用 Docker 部署 PHP 專案」已經過了一年，Docker 生態系逐漸成長，Machine、Compose、Swarm 皆趨於穩定、值得投入。本議程將承襲去年議程的概念，並講述如何透過這些工具利用 Docker 協助我們更方便的開發、測試、部署、遷移我們的 PHP 專案。
Ps. 本議程謹會概略提到 Docker 概念作為複習，不會針對指令一一教學、建議會眾在議程前，能先了解 Docker 基本使用方式。
Containers technologies
Containers technologies presentation slides used for conference made by Joris Bonnefoy and Mickael Fortunato, from OVH group, at Epitech.
Continuous integration and deployment with docker
We started using Docker in pebble mostly on our development server running things like Jenkins. More recently we are using it as part of the development process.
This is a quick talk to introduce you to docker and give a high level introduction how it can be used.
Container Torture: Run any binary, in any container
Running a container app in the container is easy, attaching a custom app to a running container is a bit trickier. But, what if I wanted to run any arbitrary binary in any arbitrary running container? Common wisdom says it's impossible. Is it ? This talk dives into containers internals, just above the kernel surface and demonstrates that this is, indeed possible. With a bit of C magic and ptrace.
Docker研習營
This document summarizes a presentation on Docker given at Yishou University. It introduces Docker concepts like virtualization, the differences between containers and VMs, the Docker ecosystem and tools. It covers the Linux and Docker CLIs, using the Docker Engine, building minimal Docker images with Dockerfile, and using Docker and Qemu to emulate a Raspberry Pi Raspbian image. Upcoming topics for next week are also listed.
Deep Dive in Docker Overlay Networks - Laurent Bernaille - Architect, D2SI
Docker overlay networks allow containers on different hosts to communicate by encapsulating traffic in VXLAN tunnels. The overlay network uses Consul for service discovery and stores network state like MAC address tables. Containers connect to the overlay network via veth interfaces attached to a bridge in the overlay namespace. When a container sends traffic to an unknown destination, the bridge floods it over VXLAN tunnels to other nodes to discover the destination's location.
LinuxKit Deep Dive
We open-sourced LinuxKit in April 2017 at DockerCon in Austin. In this session, we'll take a detailed look at some advanced topics of LinuxKit ranging from the general read-only filesystem setup, multi-arch image support for x86_64 and arm64, custom network configuration, and kernel debugging and testing.
[KubeConUS2019 Docker, Inc. Booth] Distributed Builds on Kubernetes with Bui...
1. Kubernetes can be used to distribute Docker builds across multiple nodes for improved performance and scalability using BuildKit and the new BuildX toolkit.
2. BuildX introduces a Kubernetes driver that allows builds to run on Kubernetes pods with no complex YAML or TLS configuration required, providing the same user experience as local Docker builds.
3. Builds can be executed without root privileges on Kubernetes for improved security, and the Kubernetes driver supports caching of build artifacts both locally on pods and remotely to a registry for faster rebuilds.
Deploying .NET applications with the Nix package manager
This document discusses deploying .NET applications using the Nix package manager. It describes how Nix provides build and runtime support for .NET, including implementing functions to build Visual Studio solutions and reference dependent assemblies. While Nix allows building and running .NET software, some caveats exist as the .NET framework and tools are not fully managed by Nix.
桃園市教育局Docker技術入門與實作
This document summarizes the key topics covered in Day 2 of a Docker and container technology introduction and hands-on course, including:
1) An overview of Docker Hub and how it relates to GitHub for automatically building images
2) Basic Git commands
3) Configuring automatic builds on Docker Hub by linking a GitHub repository
4) Docker network and volume commands, and exercises using these commands
5) Using Docker Compose to run multiple connected containers defined in a compose file
6) A demonstration of running TensorFlow using Docker
LXC, Docker, security: is it safe to run applications in Linux Containers?
The document discusses the security of running applications in Linux containers. It begins by acknowledging that containers were not originally designed with security in mind. However, it then outlines several techniques that can be used to improve security, such as running containers without root privileges, dropping capabilities, enabling security modules like SELinux, and limiting access to devices and system calls. For the most security-sensitive tasks, it recommends running containers inside virtual machines to isolate them further. In the end, it argues that with the right precautions, containers can be used securely for many applications.
Docker
Docker is an open platform for developing, shipping, and running applications. It enables separating applications from infrastructure so software can be delivered quickly. Docker uses features of the Linux kernel like namespaces and cgroups to deliver functionality. Containers are more lightweight than virtual machines, using less disk space and starting faster, while still providing isolation. Docker uses images and repositories to package and distribute applications. The Dockerfile defines how to build images from a base image and run commands.
IoT/M2M Security
Research presentation for IoT/M2M security
- Paper: Distributed Capability-based Access Control for the Internet of Things
- Security solution in open source IoT platform (OM2M, AllJoyn)
Android Binder IPC for Linux
binder-for-linux is an experimental project to evaluate the feasibility of porting Android Binder IPC subsystem to Ubuntu Linux.
GitHub: https://github.com/hungys/binder-for-linux
More Related Content
What's hot
Docker Security and Orchestration for DevSecOps wins
Dockers have literally transformed product deployment across the software industry. It makes traditional deployments a lot easier and supplements paradigms like Virtual Machines and Hypervisors.
While Dockers make packaging and deployments relatively simple, securing them continues to be a challenge especially when faced with Docker specific security threats such as Dockerization daemon, shared kernel and other shared resources like network and the filesystem.
Securing Dockerized deployments and orchestrating them IS, and WILL remain a key challenge for several Security practitioners and DevOps engineers.
時代在變 Docker 要會：台北 Docker 一日入門篇
This document provides an agenda for a one-day Docker introduction workshop. It includes an introduction to Docker tools and concepts like containers vs VMs, the Docker ecosystem and tools, Linux and Docker command line usage, Docker Engine, Docker Hub, Docker images, networking and volumes. It also covers deploying Docker images to Azure PaaS, Docker Compose, building ARM images on x86 machines, and a TensorFlow demo. The workshop aims to provide attendees with foundational Docker knowledge and hands-on experience through examples and exercises.
Security of Linux containers in the cloud
Linux container (LXC) seems to be preferred technology for deployment of Platform as a service (PaaS) in cloud. Partly because it's easy to install on top of existing visualization platforms (KVM, VMware, VirtualBox), partly because it is lightweight solution to provide separation and process allocations between separate containers running under single kernel.
In this talk we will take a look at LXC and try to explain how to combine it with mandatory access control (MAC) mechanisms within Linux kernel to provide secure separation between different users of applications.
Advanced microservices with .Net
This document discusses advanced microservices techniques with .NET, including Linux containers, Kubernetes, OpenShift, zero-downtime deployments, blue/green and canary releases, and the circuit breaker pattern. It provides demos of building and running a Docker container with a .NET core app on OpenShift, as well as blue-green and canary deployments. Resources are listed for additional information.
Deploying NPM packages with the Nix package manager
Distributions devroom presentation given @ FOSDEM 2017. Describes how an NPM workflow can be integrated into the vision of Nix deployment.
Learn enough Docker to be dangerous
This document discusses virtual environments and Docker for isolating Python applications and dependencies. It provides an overview of common virtual environment tools like virtualenv and virtualenvwrapper. It then introduces Docker as a platform for developing, deploying, and running applications in containers. Key Docker concepts are explained like images, containers, the Dockerfile for building images, and common Docker commands. The goal of virtualization and containers is to package an application and its dependencies into a self-contained unit that can run anywhere.
Perspectives on Docker
This document discusses 10 things not to forget before deploying Docker in production. It covers logging, monitoring, secrets, container access, filesystem choices, disk space usage, build optimizations, download speeds, backups, and Docker clusters. Overall, Docker provides benefits for portability and workflows but has some challenges to address for system-wide deployments in production environments.
容器與IoT端點應用
This document outlines a course on container technology and IoT endpoint applications taught by Philipz. The 7 part course covers topics like Docker on Raspberry Pi, building ARM images on x86 machines, MQTT and Docker prototypes, using Docker Compose for IoT MQTT projects, and sending MQTT data to Adafruit IO. It provides examples of building and running containerized IoT applications on Raspberry Pi devices.
當專案漸趕，當遷移也不再那麼難 (Ship Your Projects with Docker EcoSystem)
距離去年講述「運用 Docker 部署 PHP 專案」已經過了一年，Docker 生態系逐漸成長，Machine、Compose、Swarm 皆趨於穩定、值得投入。本議程將承襲去年議程的概念，並講述如何透過這些工具利用 Docker 協助我們更方便的開發、測試、部署、遷移我們的 PHP 專案。
Ps. 本議程謹會概略提到 Docker 概念作為複習，不會針對指令一一教學、建議會眾在議程前，能先了解 Docker 基本使用方式。
Containers technologies
Containers technologies presentation slides used for conference made by Joris Bonnefoy and Mickael Fortunato, from OVH group, at Epitech.
Continuous integration and deployment with docker
We started using Docker in pebble mostly on our development server running things like Jenkins. More recently we are using it as part of the development process.
This is a quick talk to introduce you to docker and give a high level introduction how it can be used.
Container Torture: Run any binary, in any container
Running a container app in the container is easy, attaching a custom app to a running container is a bit trickier. But, what if I wanted to run any arbitrary binary in any arbitrary running container? Common wisdom says it's impossible. Is it ? This talk dives into containers internals, just above the kernel surface and demonstrates that this is, indeed possible. With a bit of C magic and ptrace.
Docker研習營
This document summarizes a presentation on Docker given at Yishou University. It introduces Docker concepts like virtualization, the differences between containers and VMs, the Docker ecosystem and tools. It covers the Linux and Docker CLIs, using the Docker Engine, building minimal Docker images with Dockerfile, and using Docker and Qemu to emulate a Raspberry Pi Raspbian image. Upcoming topics for next week are also listed.
Deep Dive in Docker Overlay Networks - Laurent Bernaille - Architect, D2SI
Docker overlay networks allow containers on different hosts to communicate by encapsulating traffic in VXLAN tunnels. The overlay network uses Consul for service discovery and stores network state like MAC address tables. Containers connect to the overlay network via veth interfaces attached to a bridge in the overlay namespace. When a container sends traffic to an unknown destination, the bridge floods it over VXLAN tunnels to other nodes to discover the destination's location.
LinuxKit Deep Dive
We open-sourced LinuxKit in April 2017 at DockerCon in Austin. In this session, we'll take a detailed look at some advanced topics of LinuxKit ranging from the general read-only filesystem setup, multi-arch image support for x86_64 and arm64, custom network configuration, and kernel debugging and testing.
[KubeConUS2019 Docker, Inc. Booth] Distributed Builds on Kubernetes with Bui...
1. Kubernetes can be used to distribute Docker builds across multiple nodes for improved performance and scalability using BuildKit and the new BuildX toolkit.
2. BuildX introduces a Kubernetes driver that allows builds to run on Kubernetes pods with no complex YAML or TLS configuration required, providing the same user experience as local Docker builds.
3. Builds can be executed without root privileges on Kubernetes for improved security, and the Kubernetes driver supports caching of build artifacts both locally on pods and remotely to a registry for faster rebuilds.
Deploying .NET applications with the Nix package manager
This document discusses deploying .NET applications using the Nix package manager. It describes how Nix provides build and runtime support for .NET, including implementing functions to build Visual Studio solutions and reference dependent assemblies. While Nix allows building and running .NET software, some caveats exist as the .NET framework and tools are not fully managed by Nix.
桃園市教育局Docker技術入門與實作
This document summarizes the key topics covered in Day 2 of a Docker and container technology introduction and hands-on course, including:
1) An overview of Docker Hub and how it relates to GitHub for automatically building images
2) Basic Git commands
3) Configuring automatic builds on Docker Hub by linking a GitHub repository
4) Docker network and volume commands, and exercises using these commands
5) Using Docker Compose to run multiple connected containers defined in a compose file
6) A demonstration of running TensorFlow using Docker
LXC, Docker, security: is it safe to run applications in Linux Containers?
The document discusses the security of running applications in Linux containers. It begins by acknowledging that containers were not originally designed with security in mind. However, it then outlines several techniques that can be used to improve security, such as running containers without root privileges, dropping capabilities, enabling security modules like SELinux, and limiting access to devices and system calls. For the most security-sensitive tasks, it recommends running containers inside virtual machines to isolate them further. In the end, it argues that with the right precautions, containers can be used securely for many applications.
Docker
Docker is an open platform for developing, shipping, and running applications. It enables separating applications from infrastructure so software can be delivered quickly. Docker uses features of the Linux kernel like namespaces and cgroups to deliver functionality. Containers are more lightweight than virtual machines, using less disk space and starting faster, while still providing isolation. Docker uses images and repositories to package and distribute applications. The Dockerfile defines how to build images from a base image and run commands.
What's hot (20)
Docker Security and Orchestration for DevSecOps wins
Docker Security and Orchestration for DevSecOps wins
Deploying NPM packages with the Nix package manager
Deploying NPM packages with the Nix package manager
當專案漸趕，當遷移也不再那麼難 (Ship Your Projects with Docker EcoSystem)
當專案漸趕，當遷移也不再那麼難 (Ship Your Projects with Docker EcoSystem)
Container Torture: Run any binary, in any container
Container Torture: Run any binary, in any container
Deep Dive in Docker Overlay Networks - Laurent Bernaille - Architect, D2SI
Deep Dive in Docker Overlay Networks - Laurent Bernaille - Architect, D2SI
[KubeConUS2019 Docker, Inc. Booth] Distributed Builds on Kubernetes with Bui...
[KubeConUS2019 Docker, Inc. Booth] Distributed Builds on Kubernetes with Bui...
Deploying .NET applications with the Nix package manager
Deploying .NET applications with the Nix package manager
LXC, Docker, security: is it safe to run applications in Linux Containers?
LXC, Docker, security: is it safe to run applications in Linux Containers?
More from Yu-Hsin Hung
IoT/M2M Security
Research presentation for IoT/M2M security
- Paper: Distributed Capability-based Access Control for the Internet of Things
- Security solution in open source IoT platform (OM2M, AllJoyn)
Android Binder IPC for Linux
binder-for-linux is an experimental project to evaluate the feasibility of porting Android Binder IPC subsystem to Ubuntu Linux.
GitHub: https://github.com/hungys/binder-for-linux
Project meeting: Android Graphics Architecture Overview
The Android graphics architecture uses SurfaceFlinger to composite surfaces from apps into the final display. Apps draw to surfaces using a canvas, which can target OpenGL or a software renderer. Views define a display list of drawing commands. SurfaceFlinger receives surfaces from apps and window status from WindowManager to composite surfaces in z-order before each VSYNC signal.
Project meeting: SVMP - Secure Virtual Mobile Platform
SVMP is a platform that allows running Android VMs securely in virtual devices on a server. It uses WebRTC for video/audio streaming and a custom protocol for other inputs. The main components are a client app, overseer, server, and SVMP daemon running in each VM. The daemon handles inputs like touch, sensors, notifications which are forwarded from the client. The Android framework and drivers were modified to support virtual sensors and inputs by intercepting and redirecting certain system calls and intents. This allows the VM to behave like a real mobile device controlled remotely by the client.
Group meeting: UniSan - Proactive Kernel Memory Initialization to Eliminate D...
UniSan is a compiler-based approach that uses static program analysis to identify unsafe kernel memory allocations that have potential to leak sensitive data. It instruments the code to initialize only the unsafe allocations with memset to zero. The evaluation found it effectively prevented 43 recent Linux kernel uninitialized data leaks while having low overhead for both system operations and user space programs. Future work could focus on custom heap allocators, analyzing more kernel modules, and applying the technique beyond kernels.
Group meeting: TaintPipe - Pipelined Symbolic Taint Analysis
TaintPipe is a system that uses pipelined symbolic taint analysis to improve the performance of dynamic taint analysis. It works by having an instrumented application thread perform lightweight logging of execution data and control flow information, while multiple worker threads perform the symbolic taint analysis in parallel. This decoupling reduces runtime overhead compared to inlined taint analysis. Experimental results show TaintPipe achieves an overall slowdown of 4.14x on average for SPEC CPU2006 benchmarks, compared to over 6x for traditional dynamic taint analysis. TaintPipe is effective for security applications like detecting sensitive data leaks.
Group meeting: Polaris - Faster Page Loads Using Fine-grained Dependency Trac...
Polaris is a new technique developed by MIT researchers to speed up webpage loading times by 34% on average. It uses a tool called Scout to track fine-grained data dependencies within pages at a more granular level than prior methods. This generates dependency graphs with 30% more edges. Polaris then uses these detailed graphs on the client-side to dynamically schedule resource loading in a way that reduces the number of network round trips needed, prioritizing objects along the critical path. Evaluation shows Polaris significantly cuts load times, especially over high-latency networks, providing a faster browsing experience for users.
Group meeting: Identifying Information Disclosure in Web Applications with Re...
Rail is a system that uses record and replay techniques to precisely identify data items that were disclosed after a vulnerability is fixed in a web application. It records the execution of the application along with dependencies between actions and shared objects. During replay, it replays actions and compares the outputs to determine if any additional data items were disclosed. Rail provides APIs for developers to integrate object versioning and tracking of data sent to clients. An evaluation shows Rail can precisely identify disclosed data with low performance overhead and requiring few changes from developers.
More from Yu-Hsin Hung (8)
Project meeting: Android Graphics Architecture Overview
Project meeting: Android Graphics Architecture Overview
Project meeting: SVMP - Secure Virtual Mobile Platform
Project meeting: SVMP - Secure Virtual Mobile Platform
Group meeting: UniSan - Proactive Kernel Memory Initialization to Eliminate D...
Group meeting: UniSan - Proactive Kernel Memory Initialization to Eliminate D...
Group meeting: TaintPipe - Pipelined Symbolic Taint Analysis
Group meeting: TaintPipe - Pipelined Symbolic Taint Analysis
Group meeting: Polaris - Faster Page Loads Using Fine-grained Dependency Trac...
Group meeting: Polaris - Faster Page Loads Using Fine-grained Dependency Trac...
Group meeting: Identifying Information Disclosure in Web Applications with Re...
Group meeting: Identifying Information Disclosure in Web Applications with Re...
Recently uploaded
UI5con 2024 - Boost Your Development Experience with UI5 Tooling Extensions
The UI5 tooling is the development and build tooling of UI5. It is built in a modular and extensible way so that it can be easily extended by your needs. This session will showcase various tooling extensions which can boost your development experience by far so that you can really work offline, transpile your code in your project to use even newer versions of EcmaScript (than 2022 which is supported right now by the UI5 tooling), consume any npm package of your choice in your project, using different kind of proxies, and even stitching UI5 projects during development together to mimic your target environment.
Atelier - Innover avec l’IA Générative et les graphes de connaissances
Atelier - Innover avec l’IA Générative et les graphes de connaissances
Allez au-delà du battage médiatique autour de l’IA et découvrez des techniques pratiques pour utiliser l’IA de manière responsable à travers les données de votre organisation. Explorez comment utiliser les graphes de connaissances pour augmenter la précision, la transparence et la capacité d’explication dans les systèmes d’IA générative. Vous partirez avec une expérience pratique combinant les relations entre les données et les LLM pour apporter du contexte spécifique à votre domaine et améliorer votre raisonnement.
Amenez votre ordinateur portable et nous vous guiderons sur la mise en place de votre propre pile d’IA générative, en vous fournissant des exemples pratiques et codés pour démarrer en quelques minutes.
Neo4j - Product Vision and Knowledge Graphs - GraphSummit Paris
Dr. Jesús Barrasa, Head of Solutions Architecture for EMEA, Neo4j
Découvrez les dernières innovations de Neo4j, et notamment les dernières intégrations cloud et les améliorations produits qui font de Neo4j un choix essentiel pour les développeurs qui créent des applications avec des données interconnectées et de l’IA générative.
GraphSummit Paris - The art of the possible with Graph Technology
Sudhir Hasbe, Chief Product Officer, Neo4j
Join us as we explore breakthrough innovations enabled by interconnected data and AI. Discover firsthand how organizations use relationships in data to uncover contextual insights and solve our most pressing challenges – from optimizing supply chains, detecting fraud, and improving customer experiences to accelerating drug discoveries.
SMS API Integration in Saudi Arabia| Best SMS API Service
Discover the benefits and implementation of SMS API integration in the UAE and Middle East. This comprehensive guide covers the importance of SMS messaging APIs, the advantages of bulk SMS APIs, and real-world case studies. Learn how CEQUENS, a leader in communication solutions, can help your business enhance customer engagement and streamline operations with innovative CPaaS, reliable SMS APIs, and omnichannel solutions, including WhatsApp Business. Perfect for businesses seeking to optimize their communication strategies in the digital age.
ALGIT - Assembly Line for Green IT - Numbers, Data, Facts
Presentation from Ghazal Aakel and Eric Jochum at the GSD Community Stage Meetup on June 6th, 2024
openEuler Case Study - The Journey to Supply Chain Security
openEuler Case Study - The Journey to Supply Chain Security
8 Best Automated Android App Testing Tool and Framework in 2024.pdf
Regarding mobile operating systems, two major players dominate our thoughts: Android and iPhone. With Android leading the market, software development companies are focused on delivering apps compatible with this OS. Ensuring an app's functionality across various Android devices, OS versions, and hardware specifications is critical, making Android app testing essential.
Vitthal Shirke Java Microservices Resume.pdf
Software Engineering, Software Consulting, Tech Lead, Spring Boot, Spring Cloud, Spring Core, Spring JDBC, Spring Transaction, Spring MVC, OpenShift Cloud Platform, Kafka, REST, SOAP, LLD & HLD.
Why Choose Odoo 17 Community & How it differs from Odoo 17 Enterprise Edition
Why Choose Odoo 17 Community & How it differs from Odoo 17 Enterprise EditionEnvertis Software Solutions
Odoo ERP software
Odoo ERP software, a leading open-source software for Enterprise Resource Planning (ERP) and business management, has recently launched its latest version, Odoo 17 Community Edition. This update introduces a range of new features and enhancements designed to streamline business operations and support growth.
The Odoo Community serves as a cost-free edition within the Odoo suite of ERP systems. Tailored to accommodate the standard needs of business operations, it provides a robust platform suitable for organisations of different sizes and business sectors. Within the Odoo Community Edition, users can access a variety of essential features and services essential for managing day-to-day tasks efficiently.
This blog presents a detailed overview of the features available within the Odoo 17 Community edition, and the differences between Odoo 17 community and enterprise editions, aiming to equip you with the necessary information to make an informed decision about its suitability for your business.UI5con 2024 - Keynote: Latest News about UI5 and it’s Ecosystem
Learn about the latest innovations in and around OpenUI5/SAPUI5: UI5 Tooling, UI5 linter, UI5 Web Components, Web Components Integration, UI5 2.x, UI5 GenAI.
Recording:
https://www.youtube.com/live/MSdGLG2zLy8?si=INxBHTqkwHhxV5Ta&t=0
What is Augmented Reality Image Tracking
Augmented Reality (AR) Image Tracking is a technology that enables AR applications to recognize and track images in the real world, overlaying digital content onto them. This enhances the user's interaction with their environment by providing additional information and interactive elements directly tied to physical images.
Oracle Database 19c New Features for DBAs and Developers.pptx
Oracle Database 19c New Features for DBAs and Developers. This video you can watch from my youtube channel at https://youtu.be/m-F-mZA3MkU
Essentials of Automations: The Art of Triggers and Actions in FME
In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation.
We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios.
Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!
LORRAINE ANDREI_LEQUIGAN_HOW TO USE WHATSAPP.pptx
WhatsApp offers simple, reliable, and private messaging and calling services for free worldwide. With end-to-end encryption, your personal messages and calls are secure, ensuring only you and the recipient can access them. Enjoy voice and video calls to stay connected with loved ones or colleagues. Express yourself using stickers, GIFs, or by sharing moments on Status. WhatsApp Business enables global customer outreach, facilitating sales growth and relationship building through showcasing products and services. Stay connected effortlessly with group chats for planning outings with friends or staying updated on family conversations.
Hand Rolled Applicative User Validation Code Kata
Could you use a simple piece of Scala validation code (granted, a very simplistic one too!) that you can rewrite, now and again, to refresh your basic understanding of Applicative operators <*>, <*, *>?
The goal is not to write perfect code showcasing validation, but rather, to provide a small, rough-and ready exercise to reinforce your muscle-memory.
Despite its grandiose-sounding title, this deck consists of just three slides showing the Scala 3 code to be rewritten whenever the details of the operators begin to fade away.
The code is my rough and ready translation of a Haskell user-validation program found in a book called Finding Success (and Failure) in Haskell - Fall in love with applicative functors.
How to write a program in any programming language
How to write a program in any programming language
Energy consumption of Database Management - Florina Jonuzi
Presentation from Florina Jonuzi at the GSD Community Stage Meetup on June 06, 2024
Graspan: A Big Data System for Big Code Analysis
We built a disk-based parallel graph system, Graspan, that uses a novel edge-pair centric computation model to compute dynamic transitive closures on very large program graphs.
We implement context-sensitive pointer/alias and dataflow analyses on Graspan. An evaluation of these analyses on large codebases such as Linux shows that their Graspan implementations scale to millions of lines of code and are much simpler than their original implementations.
These analyses were used to augment the existing checkers; these augmented checkers found 132 new NULL pointer bugs and 1308 unnecessary NULL tests in Linux 4.4.0-rc5, PostgreSQL 8.3.9, and Apache httpd 2.2.18.
- Accepted in ASPLOS ‘17, Xi’an, China.
- Featured in the tutorial, Systemized Program Analyses: A Big Data Perspective on Static Analysis Scalability, ASPLOS ‘17.
- Invited for presentation at SoCal PLS ‘16.
- Invited for poster presentation at PLDI SRC ‘16.
Recently uploaded (20)
UI5con 2024 - Boost Your Development Experience with UI5 Tooling Extensions
UI5con 2024 - Boost Your Development Experience with UI5 Tooling Extensions
Atelier - Innover avec l’IA Générative et les graphes de connaissances
Atelier - Innover avec l’IA Générative et les graphes de connaissances
Neo4j - Product Vision and Knowledge Graphs - GraphSummit Paris
Neo4j - Product Vision and Knowledge Graphs - GraphSummit Paris
GraphSummit Paris - The art of the possible with Graph Technology
GraphSummit Paris - The art of the possible with Graph Technology
SMS API Integration in Saudi Arabia| Best SMS API Service
SMS API Integration in Saudi Arabia| Best SMS API Service
ALGIT - Assembly Line for Green IT - Numbers, Data, Facts
ALGIT - Assembly Line for Green IT - Numbers, Data, Facts
openEuler Case Study - The Journey to Supply Chain Security
openEuler Case Study - The Journey to Supply Chain Security
8 Best Automated Android App Testing Tool and Framework in 2024.pdf
8 Best Automated Android App Testing Tool and Framework in 2024.pdf
Why Choose Odoo 17 Community & How it differs from Odoo 17 Enterprise Edition
Why Choose Odoo 17 Community & How it differs from Odoo 17 Enterprise Edition
UI5con 2024 - Keynote: Latest News about UI5 and it’s Ecosystem
UI5con 2024 - Keynote: Latest News about UI5 and it’s Ecosystem
Oracle Database 19c New Features for DBAs and Developers.pptx
Oracle Database 19c New Features for DBAs and Developers.pptx
Essentials of Automations: The Art of Triggers and Actions in FME
Essentials of Automations: The Art of Triggers and Actions in FME
How to write a program in any programming language
How to write a program in any programming language
Energy consumption of Database Management - Florina Jonuzi
Energy consumption of Database Management - Florina Jonuzi
DockerVC Hackathon Presentation
- 1. DockerVC Ship Your Challenge, Attack It Anywhere!
- 3. CPU 閒置資源的浪費 假如每台主機空閒時捐助 10% 的資源...
- 5. • ⼊⾨⾨檻⾼ • 設定受拘束 • 程式、函式庫不易部署 • 污染志願者電腦環境？
- 6. DockerVC A Docker-based Volunteer Computing Platform
- 9. FROM ubuntu:14.04 RUN dockervc_init RUN apt-get install python …… RUN wget ...... CMD download && ./calc && upload 再熟悉不過的指令 輕鬆下載 input 輕鬆上傳 output 輕鬆適配 DockerVC ⾼⾃由度 Dockerfile
- 10. 跨平台⽀援無負擔 隔離運⾏安全無虞 Vagrant VirtuaBox boot2docker Your project Linux Kernel Your Ubuntu Your project
- 11. 世界級的問題
- 12. DockerVC Platform Project management Workunit dispatch Windows Linux Linux Worker Consensus Input File Dockerfile Application Application Application Output File Windows Container Win Application