tjkirch

3 ms·

1. 1.▲
   by tjkirch 7y ago

   Amazon Linux and CentOS are general-purpose distributions and need more features built into the base packages than we do for Bottlerocket. We’re able to simplify the spec files and produce smaller RPMs with only the content and dependencie
2. 2.▲
   by tjkirch 7y ago

   The update system is image-based; when an update is downloaded, it's written out to an alternate set of partitions, and then it can flip over to those partitions with a reboot. That makes it easy to roll back with the same kind of sin
3. 3.▲
   Anatomy of CVE-2019-5736: A runc container escape(aws.amazon.com)

   3 points by tjkirch 8y ago|0 comments